CriticalVulnerabilityActiveExploitedKEVPatch availableCVE-2026-102895· updated Nov 10
GPUStack before 2.
91 results
GPUStack before 2.
According to The Independent, Chick-fil-A is notifying customers nationwide that unauthorized parties may have accessed personal and account information after an automated attack on its website and app in June; according to TechRadar, credential stuffing between June 17 and 19 breached thousands of accounts .
According to Portafolio, citing an announcement from Ecopetrol, an external threat actor gained unauthorized access to cloud storage environments across approximately 15 companies within the group and downloaded data associated with roughly 3,300 user accounts .
CVERC warned it captured Android trojans in China posing as education and training apps, which after installation trick users into granting background-run and accessibility permissions .
According to TechCrunch, market intelligence platform Klue confirmed hackers broke into its systems on June 12 and stole data from some customers, with affected customers including Gong, Jamf, HackerOne, LastPass, Recorded Future, Snyk and Tanium .
According to CyberInsider, data was downloaded without authorization from cardiac monitoring firm iRhythm's third-party-hosted business applications between June 3 and 8, 2026; its June 15 SEC filing says access came through social engineering and an attacker demanded payment on June 9 .
According to Argaam, citing a filing by Budget Saudi to the Saudi Exchange, unauthorized access occurred affecting a subset of customer data on its mobile application .
ST Unitas, operator of the Gongdangi exam-prep brands, announced on June 8, 2026 that some members' personal data leaked through unauthorized access to its operating system .
A joint government-civilian team under Korea's science ministry confirmed data from 39.
According to Argaam, citing an announcement from BinDawood Holding, the company contained a limited breach involving a subset of customer order data on its mobile application .
SYLA Holdings Co.
Instructure said the attacker used a Free-for-Teacher account to submit a support ticket with malicious code that triggered an XSS flaw, obtained an authorization token and gained elevated access in Canvas, taking usernames, email addresses, course names, enrollment information and messages .
The Japanese crowdfunding platform CAMPFIRE said on 24 April 2026 that personal data may have leaked from part of the systems that manage customer information, affecting 225,846 unique users, and that credit-card data is not included .
2rinkan Yellow Hat confirmed on its website that its member server was accessed without authorization, and that an investigation found attackers had abused the app's API to obtain data on 3,179,454 points, mobile and app members .
According to BleepingComputer, ShinyHunters leaked data from 13.
Dutch healthcare IT vendor ChipSoft said it detected anomalies on April 7 that proved to be a ransomware attack, and forensics confirmed criminals stole patient personal data, including medical data, from some Dutch customers .
According to TechCrunch, healthcare technology company CareCloud confirmed hackers accessed one of its electronic health record stores in March 2026; according to BleepingComputer, it disclosed the incident in an SEC filing in March, noting an 8-hour platform disruption .
CERT-EU said the AWS account behind the European Commission's europa.
A Nancy metropolitan museum said its online ticketing provider Vivaticket was hit by ransomware on March 2, 2026, encrypting hosted data and disabling online sales; if data was exfiltrated it would cover ticket-account names, contact details and purchase history, not bank data .
In a third report on 31 March, Mynavi said it detected an anomaly on 5 December 2025 in a cloud service it uses and immediately blocked external access, and that on 16 January 2026 it confirmed unauthorized third-party access may have caused some personal data of general users, corporate contacts, and company and group employees to leak .