Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Microsoft, Adobe, Apple, and Foxit vulnerabilities ↗ (opens in a new tab)

  Cisco Talos Blog · Published 2026-10-07 · First collected 2026-10-24

• MetaDefender™ Cloud Adds Unified Zero-Day Detection with MetaDefender™ Aether ↗ (opens in a new tab)

  OPSWAT Blog · Published 2026-10-07 · First collected 2026-10-24

• SVD-2026-1004: Security Vulnerability in Splunk MCP Server - September/October 2026 ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-10-07 · First collected 2026-10-24

• Incident affecting ASOS customers ↗ (opens in a new tab)

  UK NCSC News · Published 2026-10-06 · First collected 2026-10-24

• ALERTĂ: Vulnerabilitate critică la nivelul Fortinet FortiMail ↗ (opens in a new tab)

  CERT.RO news · Published 2026-10-02 · First collected 2026-10-24

• Micropatches released for Windows WalletService Elevation of Privilege (CVE-2026-49176) ↗ (opens in a new tab)

  0patch Blog · Published 2026-10-01 · First collected 2026-10-24

• Nuit de la Sécurité Globale 2026: a Coup de Cœur for FuzzingLabs ↗ (opens in a new tab)

  FuzzingLabs · Published 2026-09-29 · First collected 2026-10-24

• Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-09-28 · First collected 2026-10-24

• Frequently asked questions about reported Citrix NetScaler zero-day vulnerabilities ↗ (opens in a new tab)

  Tenable Cyber Exposure Alerts · Published 2026-09-27 · First collected 2026-10-24

• Virtualizor: The Login Parameter That Skips the Login ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-09-25 · First collected 2026-10-24

• SAML: A fractal of bad design ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-09-21 · First collected 2026-10-24

• The XSS inside your favorite iOS app ↗ (opens in a new tab)

  V12 · Published 2026-09-15 · First collected 2026-10-24

• GLSA 202609-02: Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-09-12 · First collected 2026-10-24

• Microsoft Patch Tuesday – September 2026 ↗ (opens in a new tab)

  Outpost24 · Published 2026-09-09 · First collected 2026-10-24

• Insecure Firestore Security Rules & PII Exposure ↗ (opens in a new tab)

  InfoSec Write-ups - Medium · Published 2026-09-08 · First collected 2026-10-24

• No Hacking Required: The Manchester Airports Group Data Breach ↗ (opens in a new tab)

  Scott Helme · Published 2026-09-07 · First collected 2026-10-24

• Why your data is safer than you think on public Wi-Fi ↗ (opens in a new tab)

  Pen Test Partners · Published 2026-09-03 · First collected 2026-10-24

• Token Theft in Microsoft Entra ID (Part 2 of 4): Continuous Access Evaluation ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-09-02 · First collected 2026-10-24

• SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2026-09-01 · First collected 2026-10-24

• OEMpocalypse Now ↗ (opens in a new tab)

  Calif · Published 2026-08-31 · First collected 2026-10-24

• ZDI-CAN-33895 - Net-SNMP Vulnerability (Upcoming) ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-08-25 · First collected 2026-10-24

• Zimbra vulnerability CVE-2026-73570: find impacted assets ↗ (opens in a new tab)

  runZero Blog · Published 2026-08-24 · First collected 2026-10-24

• Security Alert: Microsoft Releases August 2026 Security Updates ↗ (opens in a new tab)

  JPCERT news · Published 2026-08-12 · First collected 2026-10-24

• Metabase Zero-Day Exploited in the Wild: Unauthenticated SQL Injection Leading to Full Admin Access ↗ (opens in a new tab)

  Resecurity · Published 2026-08-10 · First collected 2026-10-24

• More Cryptanalysis Makes Us All Safer ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-08-10 · First collected 2026-10-24

• Cruising for Shells in Flowise - elttam ↗ (opens in a new tab)

  elttam · Published 2026-08-04 · First collected 2026-10-24

• ta458 roundpress exploits ↗ (opens in a new tab)

  Proofpoint Threat Insight · Published 2026-07-23 · First collected 2026-10-24

• Oracle Critical Patch Update Advisory - July 2026 ↗ (opens in a new tab)

  Oracle security alerts · Published 2026-07-21 · First collected 2026-10-24

• A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit ↗ (opens in a new tab)

  Bishopfox · Published 2026-07-21 · First collected 2026-10-24

• The Drift Corpus: An Open Dataset of Windows Kernel Patch Analyses ↗ (opens in a new tab)

  ByteRay Blog · Published 2026-07-15 · First collected 2026-10-24