Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Micropatches released for Microsoft Excel Remote Code Execution Vulnerability (CVE-2026-40362) ↗ (opens in a new tab)

  0patch Blog · Published 2026-09-17 · First collected 2026-10-24

• Oracle September 2026 Critical Security Patch Update addresses 672 CVEs ↗ (opens in a new tab)

  Tenable Cyber Exposure Alerts · Published 2026-09-15 · First collected 2026-10-24

• BOLA: Enumerating an Entire Employee Directory Through a Predictable ID ↗ (opens in a new tab)

  InfoSec Write-ups - Medium · Published 2026-09-08 · First collected 2026-10-24

• Inside BitAIM+: Reverse Engineering a Commercial Carrom Pool Cheat ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-09-05 · First collected 2026-10-24

• Fuzzing under the cave: hunting bugs in batman-adv​ ↗ (opens in a new tab)

  FuzzingLabs · Published 2026-09-01 · First collected 2026-10-24

• GLSA 202608-34: Chromium, Google Chrome, Microsoft Edge, Opera: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-31 · First collected 2026-10-24

• VMs won't contain cyber-capable agents ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-08-26 · First collected 2026-10-24

• One SSID To Rule Them All ↗ (opens in a new tab)

  Pen Test Partners · Published 2026-08-24 · First collected 2026-10-24

• Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-08-24 · First collected 2026-10-24

• Introducing dbsc.dev: Does Your Browser Support DBSC? ↗ (opens in a new tab)

  Scott Helme · Published 2026-08-21 · First collected 2026-10-24

• SVD-2026-0808: Security Vulnerabilities in Splunk Apps and Add-ons - August 2026 ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-08-19 · First collected 2026-10-24

• Apple macOS vulnerability: how to find impacted assets ↗ (opens in a new tab)

  runZero Blog · Published 2026-08-18 · First collected 2026-10-24

• ERNW White Paper 80: Token Theft in Microsoft Entra ID - An Analysis of Controls ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-08-17 · First collected 2026-10-24

• You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?)) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-08-14 · First collected 2026-10-24

• Ambire Wallet: Five vulnerabilities V12 found across provider and approval boundaries ↗ (opens in a new tab)

  V12 · Published 2026-08-14 · First collected 2026-10-24

• SonicWall GMS Security Affected By Multiple Vulnerabilities ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2026-08-11 · First collected 2026-10-24

• The Taking of FreeBSD One Two Three ↗ (opens in a new tab)

  Calif · Published 2026-08-06 · First collected 2026-10-24

• PwnAssistant - Controlling /home's via a Home Assistant RCE - elttam ↗ (opens in a new tab)

  elttam · Published 2026-07-30 · First collected 2026-10-24

• Exploiting Langflow's validate_code() Endpoint for Remote Code Execution ↗ (opens in a new tab)

  Resecurity · Published 2026-07-29 · First collected 2026-10-24

• IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years ↗ (opens in a new tab)

  Nebula Security · Published 2026-07-07 · First collected 2026-10-24

• Oracle Security Alert Advisory - CVE-2026-35273 ↗ (opens in a new tab)

  Oracle security alerts · Published 2026-06-11 · First collected 2026-10-24

• Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-63) ↗ (opens in a new tab)

  JPCERT news · Published 2026-06-10 · First collected 2026-10-24

• Off By !: Exploiting a Use-after-Free in the Linux Kernel ↗ (opens in a new tab)

  Exodus Intelligence · Published 2026-06-08 · First collected 2026-10-24

• Bit Rot Doesn't Always Increase Entropy – A Story from the Archives ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-06-04 · First collected 2026-10-24

• Unverified evaluations in Dusk’s PLONK ↗ (opens in a new tab)

  OtterSec · Published 2026-04-30 · First collected 2026-10-24

• krwd - TRX CTF Quals 2026 ↗ (opens in a new tab)

  kqx · Published 2026-04-25 · First collected 2026-10-24

• TSUBAME Report Overflow (Jul-Sep 2025) ↗ (opens in a new tab)

  JPCERT advisories · Published 2026-03-30 · First collected 2026-10-24

• RIP RegPwn ↗ (opens in a new tab)

  MDSec · Published 2026-03-13 · First collected 2026-10-24

• diceCTF 2026 - cornelslop ↗ (opens in a new tab)

  u1f383 · Published 2026-03-09 · First collected 2026-10-24

• Hacking a Keyboard for Fun and Profit - Can It Run Doom? ↗ (opens in a new tab)

  SySS Tech Blog · Published 2026-03-03 · First collected 2026-10-24