Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Broken authorization ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-10-13 · First collected 2026-10-24

• What is a bot? Types, uses, and how to spot them ↗ (opens in a new tab)

  Fingerprint Blog RSS Feed · Published 2026-10-09 · First collected 2026-10-24

• Secure Product Development Lifecycle Requirements ↗ (opens in a new tab)

  IOActive · Published 2026-10-09 · First collected 2026-10-24

• Using on-premise Red Hat Lightspeed capabilities to monitor vulnerabilities and apply advisor remediations ↗ (opens in a new tab)

  Red Hat Security · Published 2026-10-08 · First collected 2026-10-24

• 2026-015: Critical Vulnerability in Multiple Atlassian Products ↗ (opens in a new tab)

  CERT-EU Security Advisories · Published 2026-10-07 · First collected 2026-10-24

• Criminal IP Scheduled Maintenance and Service Unavailability Notice (October 20) ↗ (opens in a new tab)

  CIP Blog · Published 2026-10-07 · First collected 2026-10-24

• SVD-2026-1001: Security Vulnerabilities in Splunk Enterprise - September/October 2026 ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-10-07 · First collected 2026-10-24

• Revenge of the SD-WAN: Exploring and Exploiting Yet Another Critical Cisco SD-WAN Vulnerability (CVE-2026-76504) ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-10-01 · First collected 2026-10-24

• Attackers have been exploiting critical Zimbra flaw to steal emails ↗ (opens in a new tab)

  Security - Ars Technica · Published 2026-09-30 · First collected 2026-10-24

• Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway ↗ (opens in a new tab)

  UK NCSC News · Published 2026-09-28 · First collected 2026-10-24

• Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-09-23 · First collected 2026-10-24

• Micropatches released for Microsoft Message Queuing Queue Manager Remote Code Execution (CVE-2026-54992) ↗ (opens in a new tab)

  0patch Blog · Published 2026-09-21 · First collected 2026-10-24

• FuzzingLabs at OWASP AppSec Days France 2026​ ↗ (opens in a new tab)

  FuzzingLabs · Published 2026-09-16 · First collected 2026-10-24

• ScadaLTS Multiple Vulnerabilities ↗ (opens in a new tab)

  Tenable Research Advisories · Published 2026-09-16 · First collected 2026-10-24

• FileRun: Four More Ways to Run Your Files ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-09-10 · First collected 2026-10-24

• A “proof” of Fermat’s Last Theorem that fits the margin ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-09-09 · First collected 2026-10-24

• Payment Bypass Flaw in TechPSC HUB ↗ (opens in a new tab)

  InfoSec Write-ups - Medium · Published 2026-09-08 · First collected 2026-10-24

• GLSA 202609-01: Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-09-01 · First collected 2026-10-24

• Estate planning of credentials ↗ (opens in a new tab)

  Pen Test Partners · Published 2026-08-26 · First collected 2026-10-24

• Compromising Signal's contact discovery enclave ↗ (opens in a new tab)

  V12 · Published 2026-08-26 · First collected 2026-10-24

• SonicWall NetExtender Linux Client Multiple Vulnerabilities ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2026-08-25 · First collected 2026-10-24

• ZDI-CAN-33896 - Net-SNMP Vulnerability (Upcoming) ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-08-25 · First collected 2026-10-24

• Red Hat Keycloak vulnerability CVE-2026-18963: find impacted assets ↗ (opens in a new tab)

  runZero Blog · Published 2026-08-24 · First collected 2026-10-24

• The ultimate road trip combo: Starlink Mini + UniFi Travel Router ↗ (opens in a new tab)

  Scott Helme · Published 2026-08-24 · First collected 2026-10-24

• Token Theft in Microsoft Entra ID (Part 1 of 4): Threat Landscape and Attack Techniques ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-08-24 · First collected 2026-10-24

• No Country for Old Passwords ↗ (opens in a new tab)

  Calif · Published 2026-08-10 · First collected 2026-10-24

• Your House Has an FFmpeg Problem - elttam ↗ (opens in a new tab)

  elttam · Published 2026-08-03 · First collected 2026-10-24

• From WSProxy to Root: INC ransomware and SonicWall SMA Exploit Chain ↗ (opens in a new tab)

  Resecurity · Published 2026-08-01 · First collected 2026-10-24

• Security Alert: [Updated] Microsoft Releases July 2026 Security Updates ↗ (opens in a new tab)

  JPCERT news · Published 2026-07-31 · First collected 2026-10-24

• TA488 Targets Zimbra Mailservers with Half-Click Exploits ↗ (opens in a new tab)

  Proofpoint Threat Insight · Published 2026-07-23 · First collected 2026-10-24