Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• RHSA-2026:89741: Important: rhc security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-26

• How new PHP vulnerabilities threaten home users ↗ (opens in a new tab)

  NCSC Finland Daily Security News · Published 2026-10-25 · First collected 2026-10-25

• Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws ↗ (opens in a new tab)

  The Hacker News · Published 2026-10-23 · First collected 2026-10-24

• HPE security advisory (AV26-1079) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-23 · First collected 2026-10-24

• PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet ↗ (opens in a new tab)

  Security Affairs · Published 2026-10-23 · First collected 2026-10-24

• DSA-6579-1 roundcube - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans les produits SUSE (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-22 · First collected 2026-10-24

• Arista patches new VeloCloud Orchestrator zero-day exploited in attacks ↗ (opens in a new tab)

  BleepingComputer · Published 2026-10-22 · First collected 2026-10-24

• CC-4877 - Cisco Releases Security Hardening Update for Unified Communications Products ↗ (opens in a new tab)

  Cyber Alert Feed · Published 2026-10-22 · First collected 2026-10-24

• NCSC-2026-0449 [1.00] [M/H] Meerdere kwetsbaarheden verholpen in Oracle Java ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-22 · First collected 2026-10-24

• Infographic: Cosmic-Master-Model — Light, Energy, Black Holes and the Network Behind Reality ↗ (opens in a new tab)

  System Weakness - Medium · Published 2026-10-22 · First collected 2026-10-24

• Rilevate vulnerabilità in prodotti Splunk ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-22 · First collected 2026-10-24

• Security Alert (A26-10-43): Vulnerability in Oracle Products ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-22 · First collected 2026-10-24

• Oracle Java Security Restriction Bypass Vulnerability ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-22 · First collected 2026-10-24

• Flaw in PHP computer language leads to shutdown of websites around world ↗ (opens in a new tab)

  Data and computer security | The Guardian · Published 2026-10-22 · First collected 2026-10-24

• Two critical PHP flaws put the web on alert as emergency patches arrive ↗ (opens in a new tab)

  CSO Online · Published 2026-10-21 · First collected 2026-10-24

• USN-8951-1: c-ares vulnerabilities ↗ (opens in a new tab)

  Ubuntu security notices · Published 2026-10-21 · First collected 2026-10-24

• FTC Says A Sextortion Help Firm Faked Its Hunt For Blackmailers ↗ (opens in a new tab)

  Secjuice · Published 2026-10-21 · First collected 2026-10-24

• [0day-rubbish] Exasol Database 7.1.30 docker-db form: shipped default SYS credential to PYTHON3 UDF os.popen command execution as uid=500(exadefusr), output returned in-band (8.8) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-20 · First collected 2026-10-24

• Warning: Multiple High Severity Vulnerabilities in Apache Camel, Patch Immediately! ↗ (opens in a new tab)

  CERT.BE advisories · Published 2026-10-20 · First collected 2026-10-24

• #StopRansomware: SafePay Ransomware ↗ (opens in a new tab)

  CISA alerts · Published 2026-10-19 · First collected 2026-10-24

• Exploited Vulnerabilities Typically Take Three Months to Patch, Moody’s Finds ↗ (opens in a new tab)

  Infosecurity Magazine · Published 2026-10-19 · First collected 2026-10-24

• CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-10-15 · First collected 2026-10-24

• Vulnerabilities in Slican telephone exchanges ↗ (opens in a new tab)

  CERT.PL news · Published 2026-10-15 · First collected 2026-10-24

• VU#166125: Bisheng has authentication bypass vulnerabilities ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-10-14 · First collected 2026-10-24

• FreeBSD-SA-26:72.bhyve ↗ (opens in a new tab)

  FreeBSD security · Published 2026-10-14 · First collected 2026-10-24

• Critical Patches Issued for Microsoft Products, October 13, 2026 ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-10-13 · First collected 2026-10-24

• Continuous Penetration Testing vs. Annual Pentests: What Enterprises Need to Know ↗ (opens in a new tab)

  Synack · Published 2026-10-13 · First collected 2026-10-24

• Why Secure Software Development Needs Offensive Testing Early ↗ (opens in a new tab)

  Archives - SecureLayer7 - Offensive Security, API Scanner & Attack Surface Management · Published 2026-10-13 · First collected 2026-10-24