Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Amazon says PHP2Shell exploitation began 4 days before patches ↗ (opens in a new tab)

  BleepingComputer · Published 2026-10-22 · First collected 2026-10-24

• NCSC-2026-0448 [1.00] [H/H] Kwetsbaarheden verholpen in Oracle Fusion Middleware ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-22 · First collected 2026-10-24

• CTF Basics: Understanding RCE Command Injection ↗ (opens in a new tab)

  System Weakness - Medium · Published 2026-10-22 · First collected 2026-10-24

• Risolte vulnerabilità in GitLab CE/EE ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-22 · First collected 2026-10-24

• Security Alert (A26-10-42): Multiple Vulnerabilities in Palo Alto Products ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-22 · First collected 2026-10-24

• Node.js Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-22 · First collected 2026-10-24

• DSA-6578-1 aide - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-22 · First collected 2026-10-24

• USN-8947-1: NSS update ↗ (opens in a new tab)

  Ubuntu security notices · Published 2026-10-21 · First collected 2026-10-24

• CC-4876 - Oracle Releases October 2026 Critical Patch Update Advisory ↗ (opens in a new tab)

  Cyber Alert Feed · Published 2026-10-21 · First collected 2026-10-24

• The Science of Exploitability: Decoding BlueHammer ↗ (opens in a new tab)

  Qualys Security Blog · Published 2026-10-21 · First collected 2026-10-24

• Moving past autonomous exploitation to machine-speed security ↗ (opens in a new tab)

  CSO Online · Published 2026-10-21 · First collected 2026-10-24

• [0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the setWAN WAN-configuration handler, root command execution (7.2) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-20 · First collected 2026-10-24

• Passkeys Don't Stop Device Code Phishing. Blocking The Flow Does ↗ (opens in a new tab)

  Secjuice · Published 2026-10-20 · First collected 2026-10-24

• Warning: Critical Vulnerability in BeyondTrust Remote Support, Patch Immediately! ↗ (opens in a new tab)

  CERT.BE advisories · Published 2026-10-19 · First collected 2026-10-24

• CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support ↗ (opens in a new tab)

  CISA current activity · Published 2026-10-16 · First collected 2026-10-24

• China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns ↗ (opens in a new tab)

  Infosecurity Magazine · Published 2026-10-16 · First collected 2026-10-24

• CVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-10-15 · First collected 2026-10-24

• FreeBSD-SA-26:71.sound ↗ (opens in a new tab)

  FreeBSD security · Published 2026-10-14 · First collected 2026-10-24

• Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-10-13 · First collected 2026-10-24

• VU#456950: Komodo Periphery Agent Contains an OS Command Injection Vulnerability ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-10-13 · First collected 2026-10-24

• Vulnerability in Payload CMS software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-10-13 · First collected 2026-10-24

• Double free in signal handler ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-10-13 · First collected 2026-10-24

• Web Application Penetration Testing Companies: What Enterprise Buyers Should Compare ↗ (opens in a new tab)

  Synack · Published 2026-10-08 · First collected 2026-10-24

• CVE-2026-75650: Magento’s StyleSmuggler RCE Explained ↗ (opens in a new tab)

  Archives - SecureLayer7 - Offensive Security, API Scanner & Attack Surface Management · Published 2026-10-08 · First collected 2026-10-24

• Kiteworks’ Shutdown Advisory: Analyzing Internet-Exposed Infrastructure ↗ (opens in a new tab)

  CIP Blog · Published 2026-10-07 · First collected 2026-10-24

• Zero CVEs at delivery: Why container security belongs in the supply chain ↗ (opens in a new tab)

  Red Hat Security · Published 2026-10-07 · First collected 2026-10-24

• Cyber Risk Management Strategies: Six Ways to Align Security With Business Priorities ↗ (opens in a new tab)

  IOActive · Published 2026-10-06 · First collected 2026-10-24

• JCTables for Joomla: When "Already Escaped" Means Injectable ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-09-30 · First collected 2026-10-24

• 2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway ↗ (opens in a new tab)

  CERT-EU Security Advisories · Published 2026-09-27 · First collected 2026-10-24

• How to detect anti-detect browsers: 4-layer approach ↗ (opens in a new tab)

  Fingerprint Blog RSS Feed · Published 2026-09-24 · First collected 2026-10-24