Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Micropatches released for "Certighost" Active Directory Certificate Services Elevation of Privilege (CVE-2026-54121) ↗ (opens in a new tab)

  0patch Blog · Published 2026-08-17 · First collected 2026-10-24

• Beats Studio Buds: Insecure Pairing Window ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-08-13 · First collected 2026-10-24

• How Trail of Bits helps verify the integrity of your Signal chats ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-08-11 · First collected 2026-10-24

• Everything I Learned Shipping Device Bound Session Credentials ↗ (opens in a new tab)

  Scott Helme · Published 2026-08-10 · First collected 2026-10-24

• SonicWall Global VPN Client (GVC) Out-of-bounds kernel memory read vulnerability ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2026-08-06 · First collected 2026-10-24

• BMC vulnerabilities (Lights Out) - runZero Research ↗ (opens in a new tab)

  runZero Blog · Published 2026-08-05 · First collected 2026-10-24

• Aimy Captcha-Less Form Guard: The Anti-Bot Plugin That Hands Bots the Keys ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-07-31 · First collected 2026-10-24

• Apple MIE exploitation challenge ↗ (opens in a new tab)

  Calif · Published 2026-07-27 · First collected 2026-10-24

• AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-07-23 · First collected 2026-10-24

• CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-06-30 · First collected 2026-10-24

• Keynote leHACK 2026 – No need to be a Mythos to do offensive security ↗ (opens in a new tab)

  FuzzingLabs · Published 2026-06-26 · First collected 2026-10-24

• Jupyter Enterprise Gateway - From Notebook to Kubernetes Cluster Admin - elttam ↗ (opens in a new tab)

  elttam · Published 2026-06-10 · First collected 2026-10-24

• A Look at Hardware Security Keys for Passkeys ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-05-27 · First collected 2026-10-24

• How an Omitted Write Barrier in V8 Turns Into RCE in Chrome: CVE-2026-5865 ↗ (opens in a new tab)

  Nebula Security · Published 2026-05-07 · First collected 2026-10-24

• triforce-sbx - TRX CTF Quals 2026 ↗ (opens in a new tab)

  kqx · Published 2026-04-25 · First collected 2026-10-24

• Oracle Critical Patch Update Advisory - April 2026 ↗ (opens in a new tab)

  Oracle security alerts · Published 2026-04-21 · First collected 2026-10-24

• From virtio-snd 0-day to hypervisor escape: exploiting QEMU with an uncontrolled heap overflow ↗ (opens in a new tab)

  OtterSec · Published 2026-03-17 · First collected 2026-10-24

• Study of Binaries Created with Rust through Reverse Engineering ↗ (opens in a new tab)

  JPCERT advisories · Published 2026-03-12 · First collected 2026-10-24

• Filesystem 101 ↗ (opens in a new tab)

  u1f383 · Published 2026-02-26 · First collected 2026-10-24

• MeshHacks: Exploiting Linksys Intelligent Mesh from the Internet ↗ (opens in a new tab)

  SySS Tech Blog · Published 2026-02-12 · First collected 2026-10-24

• Memory Integrity Enforcement (MIE) on iOS Deep Dive – Part 1 ↗ (opens in a new tab)

  8kSec Blog · Published 2026-01-27 · First collected 2026-10-24

• Introducing VulHunt: A High-Level Look at Binary Vulnerability Detection ↗ (opens in a new tab)

  Binarly Research · Published 2026-01-20 · First collected 2026-10-24

• HonoJS JWT/JWKS Algorithm Confusion ↗ (opens in a new tab)

  devansh · Published 2026-01-13 · First collected 2026-10-24

• Small numbers of Notepad++ users reporting security woes ↗ (opens in a new tab)

  DoublePulsar - Medium · Published 2025-12-02 · First collected 2026-10-24

• [CONFERENCE] Objective by the Sea 2025 ↗ (opens in a new tab)

  RandoriSec · Published 2025-10-30 · First collected 2026-10-24

• Function Peekaboo: Crafting self masking functions using LLVM ↗ (opens in a new tab)

  MDSec · Published 2025-10-27 · First collected 2026-10-24

• WordPress Contact Form by Supsystic plugin <= 1.10.7 - Broken Access Control ... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-26

• RHSA-2026:89832: Important: rhc security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-26

• ALERT Brotli Decoder: CVSS (Max): 9.2 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-26 · First collected 2026-10-26

• Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data ↗ (opens in a new tab)

  NCSC Finland Daily Security News · Published 2026-10-24 · First collected 2026-10-24