Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• The First Reduction in Their History: 64-Day Let's Encrypt Certificates ↗ (opens in a new tab)

  Scott Helme · Published 2026-10-09 · First collected 2026-10-24

• Pwn2Own Ireland 2026: FuzzingLabs exploits the Brother MFC-L8970CDW with a single zero-day ↗ (opens in a new tab)

  FuzzingLabs · Published 2026-10-09 · First collected 2026-10-24

• China-linked malicious actors called out by UK and international partners for targeting sensitive data globally ↗ (opens in a new tab)

  UK NCSC News · Published 2026-10-08 · First collected 2026-10-24

• Q3 2026 Vulnerability Trend Report ↗ (opens in a new tab)

  ASEC · Published 2026-10-06 · First collected 2026-10-24

• IBM and Red Hat patch 400-plus unknown Java flaws, open Clearinghouse for fix requests ↗ (opens in a new tab)

  Security - SiliconANGLE · Published 2026-10-06 · First collected 2026-10-24

• Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30) ↗ (opens in a new tab)

  Unit 42 · Published 2026-09-30 · First collected 2026-10-24

• Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-09-29 · First collected 2026-10-24

• Citrix NetScaler Zero-Day Exploited Globally ↗ (opens in a new tab)

  LevelBlue (SpiderLabs Blog) · Published 2026-09-29 · First collected 2026-10-24

• V12 found two high-impact vulnerabilities in LNbits ↗ (opens in a new tab)

  V12 · Published 2026-09-29 · First collected 2026-10-24

• macOS: Shellcoding on Apples (C x64) ↗ (opens in a new tab)

  Zeyad Azima · Published 2026-09-26 · First collected 2026-10-24

• ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft ↗ (opens in a new tab)

  Threat Intelligence · Published 2026-09-25 · First collected 2026-10-24

• Don't let TEEs break your MPC ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-09-25 · First collected 2026-10-24

• How Cloudflare addressed a cross-tenant data exposure vulnerability in Containers ↗ (opens in a new tab)

  Cloudflare – Security Tag · Published 2026-09-24 · First collected 2026-10-24

• Your Vulnerability Backlog Is No Longer Technical Debt, It’s an Attack Surface ↗ (opens in a new tab)

  Blog RSS Feed | Snyk · Published 2026-09-24 · First collected 2026-10-24

• Part II: Sniffing Bluetooth Auracast ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-09-14 · First collected 2026-10-24

• GLSA 202609-03: Ruby: Remote code execution ↗ (opens in a new tab)

  Gentoo security · Published 2026-09-12 · First collected 2026-10-24

• Breaking into Google's GFile for $100k ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-09-11 · First collected 2026-10-24

• Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 ↗ (opens in a new tab)

  Wiz Blog | RSS feed · Published 2026-09-10 · First collected 2026-10-24

• Passing the bucks $$$: Passback attacks explained ↗ (opens in a new tab)

  Pen Test Partners · Published 2026-09-09 · First collected 2026-10-24

• Security Alert: Microsoft Releases September 2026 Security Updates ↗ (opens in a new tab)

  JPCERT news · Published 2026-09-09 · First collected 2026-10-24

• Improper OTP Implementation to Full Account Takeover ↗ (opens in a new tab)

  InfoSec Write-ups - Medium · Published 2026-09-08 · First collected 2026-10-24

• WeWorm ↗ (opens in a new tab)

  Calif · Published 2026-09-08 · First collected 2026-10-24

• MikroTik RouterOS vulnerabilities: How to find impacted assets ↗ (opens in a new tab)

  runZero Blog · Published 2026-09-08 · First collected 2026-10-24

• SonicWall NSM On-Prem Affected By Multiple Vulnerabilities ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2026-09-03 · First collected 2026-10-24

• H1 2026 Malware Vulnerability Trends ↗ (opens in a new tab)

  Recorded Future – Main Feed · Published 2026-09-03 · First collected 2026-10-24

• Vulnerability & Patch Roundup — August 2026 ↗ (opens in a new tab)

  Sucuri Blog · Published 2026-09-01 · First collected 2026-10-24

• Ruby 4.0 Universal RCE Deserialization Gadget Chain - elttam ↗ (opens in a new tab)

  elttam · Published 2026-08-26 · First collected 2026-10-24

• ZDI-CAN-29529 - Net-SNMP Vulnerability (Upcoming) ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-08-25 · First collected 2026-10-24

• No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452 ↗ (opens in a new tab)

  Bishopfox · Published 2026-08-21 · First collected 2026-10-24

• Oracle Critical Security Patch Update Advisory - August 2026 ↗ (opens in a new tab)

  Oracle security alerts · Published 2026-08-18 · First collected 2026-10-24