Is the internet OK?
Mostly.
The internet is up. Trust is under maintenance.
Is it up?Up · 1 service with problems
Is it safe?Critical · 11 open security incidents
· Updated every 5 minutes
What's going on
LiteLLM (PyPI and Docker images)Oct 23LiteLLM 1.107.0 shipped credential-stealing malwareNothing visible for you; developers who installed it must act.MitigatedAttackers already use it
PHPOct 23PHP2Shell: two critical flaws in PHPSome government websites went offline as a precaution.Fix availableAttackers already use it
Ivanti Connect SecureOct 13Ivanti Connect Secure VPN: zero-day under attackNothing visible for you; company IT teams must update their VPN.Fix availableAttackers already use it
Next.js, sharpOct 14Next.js: two critical remote code execution flawsNothing visible for you; site owners must update.Fix available
Plex Media ServerOct 21Plex2Shell: hackers hijack unpatched Plex serversHome Plex servers that are not updated can be taken over.Fix availableAttackers already use it
TiDB CloudOct 19PingCAP / TiDB Cloud: internal systems breachedNothing visible for you; only TiDB Cloud customers are concerned.MitigatedAttackers already use it
Show 5 more
- PAN-OS (PA-Series, VM-Series, Panorama)Oct 15Palo Alto firewalls: exploited flaw gives root accessNothing visible for you; companies must update their firewalls.Fix availableAttackers already use it
WindowsOct 13Windows: zero-day used to skip download warningsA harmful download could open without Windows warning you.Fix availableAttackers already use it
Node.jsOct 21Node.js: four high severity flaws fixedNothing visible for you; developers must update Node.js.Fix available
eMudhra (emSign ECC Root CA - G3), Chrome, FirefoxOct 21eMudhra: 8 certificate authority keys leakedNothing to do; your browser already blocks the leaked certificates.Mitigated- PHPOct 23PHP: lower-risk session upload progress flawNothing visible for you; a few site owners must change a setting.Identified
The services the web runs on
Read live from each company's own status page.
BackboneOperational
HostingOperational
Developer toolsOperational
AppsDegraded
AIOperational
Dig deeper
Dig deeper: fresh flaws
The newest entries of CISA's list of flaws attackers already use, and GitHub's critical advisories. Raw, not explained yet.
- Oct 23Collabora · Collabora Online - Built-in CODE Server OS Command Injection VulnerabilityCVE-2026-110447Exploited
- Oct 23Arista · Arista VeloCloud Orchestrator SQL Injection VulnerabilityCVE-2026-114625Exploited
- Oct 23Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code executionGHSA-5x8w-8jj5-q52hpip/pillow
- Oct 23obsidian-tc tokens can access arbitrary configured vaultsGHSA-84c9-qqpq-2pq5npm/obsidian-tc
- Oct 23Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilationGHSA-897f-g5gm-fmxmrust/wasmtime
- Oct 23Echo: Rejected WebSocket upgrades can bypass Echo route-level access controlsGHSA-cxf3-9h37-7rr8go/github.com/labstack/echo/v4
- Oct 23Laravel TokenGuard authentication bypass through non-string API credentialsGHSA-f9x3-7vq9-cph6composer/laravel/framework
- Oct 23obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopbackGHSA-pqh8-4pj7-32xxnpm/obsidian-tc
- Oct 22Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are usedGHSA-2464-fhr4-w9xwnpm/next
- Oct 22Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arraysGHSA-673q-mjm6-r5xrnpm/next
- Oct 22mem0ai Databricks vector store vulnerable to SQL injectionGHSA-7587-9684-52r6pip/mem0ai
- Oct 22Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli packageGHSA-9v8h-qqgm-4m35pip/brotli