Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• How to raise a $10M seed round ↗ (opens in a new tab)

  V12 · Published 2026-07-30 · First collected 2026-10-24

• CVE-2026-48282: Adobe ColdFusion RDS Path Traversal Leading to RCE ↗ (opens in a new tab)

  Resecurity · Published 2026-07-06 · First collected 2026-10-24

• It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-07-02 · First collected 2026-10-24

• Cryptography On Embedded Devices 101 ↗ (opens in a new tab)

  FuzzingLabs · Published 2026-07-01 · First collected 2026-10-24

• Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307 ↗ (opens in a new tab)

  Nebula Security · Published 2026-06-29 · First collected 2026-10-24

• Exploiting Auth0 Defaults in XSS Attacks - elttam ↗ (opens in a new tab)

  elttam · Published 2026-06-22 · First collected 2026-10-24

• Adobe Acrobat Reader Escript.api Use-After-Free Remote Code Execution ↗ (opens in a new tab)

  Exodus Intelligence · Published 2026-06-01 · First collected 2026-10-24

• Where to Go Next with Quantum-Safe Certificates ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-06-01 · First collected 2026-10-24

• Oracle Critical Security Patch Update Advisory - May 2026 ↗ (opens in a new tab)

  Oracle security alerts · Published 2026-05-28 · First collected 2026-10-24

• triforce - TRX CTF Quals 2026 ↗ (opens in a new tab)

  kqx · Published 2026-04-25 · First collected 2026-10-24

• Patch gap to mobile renderer RCE: pwning Samsung Internet’s V8 on the Galaxy S25 ↗ (opens in a new tab)

  OtterSec · Published 2026-04-01 · First collected 2026-10-24

• CSIRTs Around the World – Azerbaijan ↗ (opens in a new tab)

  JPCERT advisories · Published 2026-03-25 · First collected 2026-10-24

• Filesystem 102 ↗ (opens in a new tab)

  u1f383 · Published 2026-03-04 · First collected 2026-10-24

• Total Recall – Retracing Your Steps Back to NT AUTHORITY\SYSTEM ↗ (opens in a new tab)

  MDSec · Published 2026-02-27 · First collected 2026-10-24

• Why Regular Employees Should Not Boot Their Computers From External Media ↗ (opens in a new tab)

  SySS Tech Blog · Published 2026-02-24 · First collected 2026-10-24

• [CVE-2026-25598] Bypassing Outbound Connections Detection in harden-runner ↗ (opens in a new tab)

  devansh · Published 2026-02-11 · First collected 2026-10-24

• MIE Deep Dive Part 2: Enabling Apps & Crash Analysis ↗ (opens in a new tab)

  8kSec Blog · Published 2026-02-10 · First collected 2026-10-24

• Have you patched? Are you sure? The story of the sticky Supermicro BMC bugs ↗ (opens in a new tab)

  Binarly Research · Published 2026-01-26 · First collected 2026-10-24

• [CONFERENCE] UYBHYS 2025 ↗ (opens in a new tab)

  RandoriSec · Published 2025-12-10 · First collected 2026-10-24

• Cybersecurity industry overreacts to React vulnerability, starts panic, burns own house down again ↗ (opens in a new tab)

  DoublePulsar - Medium · Published 2025-12-05 · First collected 2026-10-24

• Noooooooooo Touch! ↗ (opens in a new tab)

  :: Orange Cyberdefense :: on Orange Cyberdefense · Published 2025-11-19 · First collected 2026-10-24

• WordPress JetSmartFilters plugin <= 3.8.6.1 - Cross Site Scripting (XSS) vuln... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-26

• RHSA-2026:89849: Important: flatpak security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-26

• libX11: CVSS (Max): 7.5 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-26 · First collected 2026-10-26

• High Threat Security Alert (A26-10-46): Multiple Vulnerabilities in Microsoft Edge ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans le noyau Linux de Debian LTS (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-22 · First collected 2026-10-24

• Atlassian security advisory (AV26-1076) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-22 · First collected 2026-10-24

• They Allowed Five Image Formats. Four Were Pictures. ↗ (opens in a new tab)

  System Weakness - Medium · Published 2026-10-22 · First collected 2026-10-24

• NCSC-2026-0446 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle JD Edwards EnterpriseOne ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-22 · First collected 2026-10-24