Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Risolte vulnerabilità in GitLab CE/EE ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-22 · First collected 2026-10-24

• PHP Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-22 · First collected 2026-10-24

• DSA-6534-3 webkit2gtk - regression update ↗ (opens in a new tab)

  Debian security · Published 2026-10-22 · First collected 2026-10-24

• USN-8930-2: U-Boot vulnerabilities ↗ (opens in a new tab)

  Ubuntu security notices · Published 2026-10-21 · First collected 2026-10-24

• Two Critical PHP Flaws Could Hand Attackers Your Web Servers. Here’s How to Find, Mitigate, and Patch PHP2Shell Now ↗ (opens in a new tab)

  Qualys Security Blog · Published 2026-10-21 · First collected 2026-10-24

• [ROOTEDCON] Call for Papers 2027 · RootedCON2027 (Madrid) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-20 · First collected 2026-10-24

• CC-4874 - Active Exploitation of Vulnerability in Siemens Software Center (CVE-2026-110936) ↗ (opens in a new tab)

  Cyber Alert Feed · Published 2026-10-20 · First collected 2026-10-24

• Scraping Public Websites For OSINT: Where The Legal Risk Starts ↗ (opens in a new tab)

  Secjuice · Published 2026-10-19 · First collected 2026-10-24

• Warning: Critical Vulnerability in BeyondTrust Remote Support, Patch Immediately! ↗ (opens in a new tab)

  CERT.BE advisories · Published 2026-10-19 · First collected 2026-10-24

• China Espionage Actor Actively Targeting Critical BeyondTrust Flaw, Google Warns ↗ (opens in a new tab)

  Infosecurity Magazine · Published 2026-10-16 · First collected 2026-10-24

• CISA Adds One Known Exploited Vulnerability to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-10-15 · First collected 2026-10-24

• CVE-2026-0315 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-10-14 · First collected 2026-10-24

• VU#573195: Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementation ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-10-13 · First collected 2026-10-24

• GUI Denial of Service ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-10-13 · First collected 2026-10-24

• Multiple Vulnerabilities in SonicWall SMA1000 Series Appliances Could Allow for Remote Code Execution. ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-10-12 · First collected 2026-10-24

• Password Spraying: How It Works and Best Practices for Prevention ↗ (opens in a new tab)

  Archives - SecureLayer7 - Offensive Security, API Scanner & Attack Surface Management · Published 2026-10-07 · First collected 2026-10-24

• Vulnerabilities in GNU Aspell software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-10-06 · First collected 2026-10-24

• Turn Scanner Findings into Validated Risk with Synack and Qualys ↗ (opens in a new tab)

  Synack · Published 2026-10-05 · First collected 2026-10-24

• What enterprises need to know about the Cyber Resilience Act and software supply chain risk ↗ (opens in a new tab)

  Red Hat Security · Published 2026-10-02 · First collected 2026-10-24

• FreeBSD-EN-26:24.tzdata ↗ (opens in a new tab)

  FreeBSD security · Published 2026-09-29 · First collected 2026-10-24

• Strengthening External Threat Investigation Across Singapore’s Digital Environment ↗ (opens in a new tab)

  CIP Blog · Published 2026-09-28 · First collected 2026-10-24

• IT Risk Management Strategies: Key Metrics & Trends ↗ (opens in a new tab)

  IOActive · Published 2026-09-22 · First collected 2026-10-24

• UK and allies expose spyware used by Iranian state actors to target dissidents, activists and journalists ↗ (opens in a new tab)

  UK NCSC News · Published 2026-09-15 · First collected 2026-10-24

• 4 types of payment fraud and how to prevent them ↗ (opens in a new tab)

  Fingerprint Blog RSS Feed · Published 2026-09-14 · First collected 2026-10-24

• ENISA's CRA Single Reporting Platform Just Went Live. Here's What You Actually Need to Know. ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-09-14 · First collected 2026-10-24

• 2026-012: Critical Vulnerabilities in Check Point Products ↗ (opens in a new tab)

  CERT-EU Security Advisories · Published 2026-09-10 · First collected 2026-10-24

• StyleSmuggler (CVE-2026-75650): Frequently asked questions about Adobe Commerce and Magento zero-day ↗ (opens in a new tab)

  Tenable Cyber Exposure Alerts · Published 2026-09-08 · First collected 2026-10-24

• Host & Network Penetration Testing: Post-Exploitation CTF 2 — eJPT (INE) ↗ (opens in a new tab)

  InfoSec Write-ups - Medium · Published 2026-09-04 · First collected 2026-10-24

• GLSA 202608-32: Tor: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-29 · First collected 2026-10-24

• SVD-2026-0806: Security Vulnerabilities in Splunk SOAR Connectors - August 2026 ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-08-19 · First collected 2026-10-24