Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Ray CVE-2025-62593: Critical Browser-Driven RCE via DNS Rebinding ↗ (opens in a new tab)

  Resecurity · Published 2026-08-18 · First collected 2026-10-24

• Boot Logo to Bootkit: An Out-of-Bounds Write in U-Boot's RLE8 BMP Decoder ↗ (opens in a new tab)

  ByteRay Blog · Published 2026-08-10 · First collected 2026-10-24

• Route of Root: Bring a "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF ↗ (opens in a new tab)

  Nebula Security · Published 2026-08-08 · First collected 2026-10-24

• Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit ↗ (opens in a new tab)

  Proofpoint Threat Insight · Published 2026-07-29 · First collected 2026-10-24

• Linux Kernel CVEs: How Backports Change Vulnerability Exposure ↗ (opens in a new tab)

  Resources RSS Feed | ONEKEY · Published 2026-07-22 · First collected 2026-10-24

• Microsoft July 2026 Patch Tuesday Fixes Record 570 Flaws Including Three Zero-Days ↗ (opens in a new tab)

  Cybersecurity News: Threats, Vulnerabilities & Privacy Updates - gHacks · Published 2026-07-15 · First collected 2026-10-24

• Microsoft patchetirsdag juli 2026 ↗ (opens in a new tab)

  NSM NCSC news · Published 2026-07-14 · First collected 2026-10-24

• Bluetooth Relaying Attacks ↗ (opens in a new tab)

  SySS Tech Blog · Published 2026-07-14 · First collected 2026-10-24

• Update on Attacks by Threat Group APT-C-60 in 2026 ↗ (opens in a new tab)

  JPCERT advisories · Published 2026-07-13 · First collected 2026-10-24

• Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639) ↗ (opens in a new tab)

  MDSec · Published 2026-07-10 · First collected 2026-10-24

• Announcing the Save CTFs Fund ↗ (opens in a new tab)

  OtterSec · Published 2026-07-07 · First collected 2026-10-24

• Microsoft Windows Installer Folder Delete Privilege Escalation ↗ (opens in a new tab)

  Exodus Intelligence · Published 2026-07-06 · First collected 2026-10-24

• Symfony YAML Security Audit ↗ (opens in a new tab)

  Blog on Shielder · Published 2026-06-30 · First collected 2026-10-24

• FortiBleed — 75k Fortinet firewalls have admin passwords cracked ↗ (opens in a new tab)

  DoublePulsar - Medium · Published 2026-06-17 · First collected 2026-10-24

• Drupal Core CVE-2026-9082 Active Exploitation Confirmed Within Days of Disclosure ↗ (opens in a new tab)

  F5 Labs All · Published 2026-06-11 · First collected 2026-10-24

• Old WinRAR Flaw Fuels Attacks on Ukraine: How Unmanaged Software Keeps the Door Open ↗ (opens in a new tab)

  Trend Micro Research, News and Perspectives · Published 2026-06-08 · First collected 2026-10-24

• [CONFERENCE] OffensiveCon 2026 ↗ (opens in a new tab)

  RandoriSec · Published 2026-06-05 · First collected 2026-10-24

• Mobile device interception with MikroTik ↗ (opens in a new tab)

  :: Orange Cyberdefense :: on Orange Cyberdefense · Published 2026-06-04 · First collected 2026-10-24

• Docker Internal (3) ↗ (opens in a new tab)

  u1f383 · Published 2026-06-04 · First collected 2026-10-24

• From Exploit Code to Production Detection: Building a CVE-2026-31431 (Copy Fail) detection with Agents ↗ (opens in a new tab)

  Datadog Security Labs · Published 2026-05-28 · First collected 2026-10-24

• Exploiting a 0day on QEMU ↗ (opens in a new tab)

  kqx · Published 2026-05-24 · First collected 2026-10-24

• What is an IDOR vulnerability? ↗ (opens in a new tab)

  Acunetix Blog · Published 2026-05-22 · First collected 2026-10-24

• Android SELinux Internals Part II - SELinux Domains, Denials, and Bypass with Root Tools ↗ (opens in a new tab)

  8kSec Blog · Published 2026-05-11 · First collected 2026-10-24

• You’re Not Watching MCPs. Anthropic’s Vulnerability Shows Why You Should Be. ↗ (opens in a new tab)

  Salt Security Blog · Published 2026-04-22 · First collected 2026-10-24

• Binarly Risk Score: A New Approach to Vulnerability Prioritization ↗ (opens in a new tab)

  Binarly Research · Published 2026-04-13 · First collected 2026-10-24

• Now You See mi: Now You're Pwned ↗ (opens in a new tab)

  Archives on taszk.io labs · Published 2026-03-16 · First collected 2026-10-24

• Detect Public Resource Exposure via Session Policy Error Messages ↗ (opens in a new tab)

  Hacking The Cloud · Published 2026-03-15 · First collected 2026-10-24

• Hypervisor Based Defense ↗ (opens in a new tab)

  Ido Veltzman :: Security Research · Published 2026-03-14 · First collected 2026-10-24

• AWS Security Issues You Should Watch Out For ↗ (opens in a new tab)

  SCNSoft – Information Security · Source updated 2026-03-11 · First collected 2026-10-24

• Getting a Shell on the Tapo C260 Camera (CVE-2026-0651, CVE-2026-0652, CVE-2026-0653) ↗ (opens in a new tab)

  Spaceraccoon's Blog · Published 2026-03-06 · First collected 2026-10-24