Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• A Vulnerability in Atlassian Data Center Products Could Allow for Arbitrary File Access ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-10-12 · First collected 2026-10-24

• Vulnerability in Ollama software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-10-08 · First collected 2026-10-24

• Cross-Site Request Forgery: Attacks, Protection & Examples ↗ (opens in a new tab)

  Archives - SecureLayer7 - Offensive Security, API Scanner & Attack Surface Management · Published 2026-10-08 · First collected 2026-10-24

• AWS Penetration Testing for Enterprises: What to Scope and How to Budget ↗ (opens in a new tab)

  Synack · Published 2026-10-07 · First collected 2026-10-24

• Privacy Policy Update (Effective October 13, 2026) ↗ (opens in a new tab)

  CIP Blog · Published 2026-10-06 · First collected 2026-10-24

• What enterprises need to know about the software they depend on ↗ (opens in a new tab)

  Red Hat Security · Published 2026-10-02 · First collected 2026-10-24

• One Exposure, Many Actors: What the NCSC’s OT Alert Adds to the AA26-097A Picture ↗ (opens in a new tab)

  IOActive · Published 2026-09-25 · First collected 2026-10-24

• 2026-013: Critical Vulnerability in F5 BIG-IP APM ↗ (opens in a new tab)

  CERT-EU Security Advisories · Published 2026-09-22 · First collected 2026-10-24

• How to prevent payment fraud: 5-step framework ↗ (opens in a new tab)

  Fingerprint Blog RSS Feed · Published 2026-09-22 · First collected 2026-10-24

• Virtualizor: The Login Parameter That Skips the Login ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-09-22 · First collected 2026-10-24

• Iranian cyber targeting of dissidents, activists and journalists ↗ (opens in a new tab)

  UK NCSC News · Published 2026-09-15 · First collected 2026-10-24

• Corridor — A Simple Web CTF That Made Me Look Twice ↗ (opens in a new tab)

  InfoSec Write-ups - Medium · Published 2026-09-08 · First collected 2026-10-24

• Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880) ↗ (opens in a new tab)

  Tenable Cyber Exposure Alerts · Published 2026-09-08 · First collected 2026-10-24

• Micropatches released for "ResetNightmare" Windows Kerberos Elevation of Privilege (CVE-2026-27912) ↗ (opens in a new tab)

  0patch Blog · Published 2026-09-06 · First collected 2026-10-24

• GLSA 202608-33: Freenet: Deanonymization Vulnerability ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-29 · First collected 2026-10-24

• State divergence enables unauthorized access ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-08-25 · First collected 2026-10-24

• DEFCON 34: Planes, PLCs and 6am runs ↗ (opens in a new tab)

  Pen Test Partners · Published 2026-08-21 · First collected 2026-10-24

• SVD-2026-0807: Security Vulnerabilities in Splunk Enterprise Security - August 2026 ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-08-19 · First collected 2026-10-24

• MSRC-137335 - Microsoft Vulnerability (Upcoming) ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-08-18 · First collected 2026-10-24

• From Black Hat USA 2026 to ERNW Whitepaper 78: Breaking Kubernetes Multi-Tenancy ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-08-17 · First collected 2026-10-24

• FileRun: When Your File Manager Runs Your Files ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-08-14 · First collected 2026-10-24

• Metabase vulnerability CVE-2026-72898: Find impacted assets ↗ (opens in a new tab)

  runZero Blog · Published 2026-08-11 · First collected 2026-10-24

• Device Bound Session Credentials lands in Chrome on macOS ↗ (opens in a new tab)

  Scott Helme · Published 2026-08-11 · First collected 2026-10-24

• SonicWall Email Security Affected By Multiple Vulnerabilities ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2026-08-11 · First collected 2026-10-24

• The WordPress Chain Massacre ↗ (opens in a new tab)

  Calif · Published 2026-08-05 · First collected 2026-10-24

• How to raise a $10M seed round ↗ (opens in a new tab)

  V12 · Published 2026-07-30 · First collected 2026-10-24

• CVE-2026-48282: Adobe ColdFusion RDS Path Traversal Leading to RCE ↗ (opens in a new tab)

  Resecurity · Published 2026-07-06 · First collected 2026-10-24

• It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-07-02 · First collected 2026-10-24

• Cryptography On Embedded Devices 101 ↗ (opens in a new tab)

  FuzzingLabs · Published 2026-07-01 · First collected 2026-10-24

• Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307 ↗ (opens in a new tab)

  Nebula Security · Published 2026-06-29 · First collected 2026-10-24