Cyberattack Law and Disclosure Digest for 2026-10-16

Guangzhou Juan IoT Technology EseeCloud ↗

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras.

The following versions of Guangzhou Juan IoT Technology EseeCloud are affected:

• EseeCloud App <=4.9.6 (CVE-2026-107617, CVE-2026-97858, CVE-2026-105664)
• EseeCloud Firmware <=4

  Thermo Fisher Torrent Suite Software ↗

  View CSAF

  Summary

  Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server.

  The following versions of Thermo Fisher Torrent Suite Software are affected:

  • Torrent Suite Software <=5.18 (CVE-2026-107777)

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition.

The following versions of J4Care dcm4che are affected:

• dcm4ch

  CISA Adds One Known Exploited Vulnerability to Catalog ↗

  CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

  • CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability 

  This type of vulnerability is a frequent atta

  Eclipse Foundation Eclipse Milo ↗

  View CSAF

  Summary

  Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients.

  The following versions of Eclipse Foundation Eclipse Milo are affected:

  • Eclipse Milo >=0.