Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog ↗ (opens in a new tab)

  Security Affairs · Published 2026-10-24 · First collected 2026-10-24

• CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud ↗ (opens in a new tab)

  The Hacker News · Published 2026-10-24 · First collected 2026-10-24

• RHSA-2026:88835: Important: php:8.2 security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-23 · First collected 2026-10-24

• PHP shares mitigation for new RCE vulnerability with no patch ↗ (opens in a new tab)

  BleepingComputer · Published 2026-10-23 · First collected 2026-10-24

• Fortinet security advisory (AV26-1081) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-23 · First collected 2026-10-24

• CC-4879 - Fortinet Releases Security Hardening Release for Multiple Products ↗ (opens in a new tab)

  Cyber Alert Feed · Published 2026-10-23 · First collected 2026-10-24

• Vulnerabilità in prodotti ASUS ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-23 · First collected 2026-10-24

• Atlassian Patches 75 Flaws in Data Center and Server Products ↗ (opens in a new tab)

  SecurityWeek · Published 2026-10-23 · First collected 2026-10-24

• High Threat Security Alert (A26-10-45): Multiple Vulnerabilities in Fortinet Products ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-23 · First collected 2026-10-24

• expat: CVSS (Max): 8.2 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-23 · First collected 2026-10-24

• DSA-6581-1 unbound - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans les produits Tenable (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• GitLab critical patches include one for a bug that allows code execution by unauthenticated users ↗ (opens in a new tab)

  CSO Online · Published 2026-10-22 · First collected 2026-10-24

• Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-22 · First collected 2026-10-24

• What is PHP and how serious is the computer language flaw causing website shutdowns? ↗ (opens in a new tab)

  Data and computer security | The Guardian · Published 2026-10-22 · First collected 2026-10-24

• Warning: Fortinet Releases Critical Security Hardening Updates for Multiple Products, Patch Immediately! ↗ (opens in a new tab)

  CERT.BE advisories · Published 2026-10-22 · First collected 2026-10-24

• NCSC-2026-0451 [1.00] [M/H] Kwetsbaarheden verholpen in Cisco Expressway Series ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-22 · First collected 2026-10-24

• USN-8952-1: Tornado vulnerabilities ↗ (opens in a new tab)

  Ubuntu security notices · Published 2026-10-22 · First collected 2026-10-24

• PEERSTITCH: Why Patching FortiManager In 2024 Wasn't Enough ↗ (opens in a new tab)

  Secjuice · Published 2026-10-22 · First collected 2026-10-24

• CVE-2026-91403: Critical Oracle Java SE and GraalVM Flaw Enables Remote Attacks ↗ (opens in a new tab)

  SOC Prime Blog · Published 2026-10-22 · First collected 2026-10-24

• Climate Change in PHP — update or cut off now! ↗ (opens in a new tab)

  System Weakness - Medium · Published 2026-10-22 · First collected 2026-10-24

• Mozilla Products Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-22 · First collected 2026-10-24

• Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st) ↗ (opens in a new tab)

  SANS Internet Storm Center · Published 2026-10-21 · First collected 2026-10-24

• A Design Flaw in Share Links Exposes Users’ Personal Conversations With Meta’s Muse ↗ (opens in a new tab)

  WIRED Security · Published 2026-10-21 · First collected 2026-10-24

• Critical Vulnerabilities in PHP Require Immediate Patching ↗ (opens in a new tab)

  CISA current activity · Published 2026-10-21 · First collected 2026-10-24

• PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical PHP RCE Flaws, Affected Versions, and How to Fix Them ↗ (opens in a new tab)

  SOCRadar® Cyber Intelligence Inc. · Published 2026-10-21 · First collected 2026-10-24

• Critical PHP RCE CVE-2026-109618 and CVE-2026-109619: Patch Is Out, Update Now ↗ (opens in a new tab)

  Archives - SecureLayer7 - Offensive Security, API Scanner & Attack Surface Management · Published 2026-10-21 · First collected 2026-10-24

• SVD-2026-1007: Security Vulnerabilities in Splunk Enterprise - October 2026 ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-10-21 · First collected 2026-10-24

• [0day-rubbish] ProSoft Technology RLX-IFH24E v2.2.44 unsigned firmware upgrade package to root command execution and full account-database overwrite (7.2) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-20 · First collected 2026-10-24

• Swamped curl maintainers take low-level flaws public to survive vulnerability 'avalanche' ↗ (opens in a new tab)

  www.theregister.com - Articles · Published 2026-10-20 · First collected 2026-10-24