Published threat advisories for October 19, 2026

Google OSS Agent Mesh contains vulnerabilities in its MCP proxy and OIDC registration that permit unauthenticated remote attackers to self-enroll and execute arbitrary commands on connected backend nodes, granting full control over services. This could lead to unauthorized access and execution of sensitive backend oper

NVD modified: NVD date unavailable

A critical vulnerability in the Google OSS Agent Mesh's ingress server allows unauthenticated remote access to bypass security policies and invoke arbitrary backend services. This could lead to unauthorized actions and impact system data and service behavior.

NVD modified: NVD date unavailable

A critical vulnerability exists in GeoVision's Web Server, affecting its default connection ports. Because this server is often internet-facing, unauthorized network access could compromise confidentiality, integrity, and availability. It is important to determine if this technology is in use and assess its exposure.

NVD modified: NVD date unavailable