Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations ↗ (opens in a new tab)

  The Hacker News · Published 2026-10-23 · First collected 2026-10-24

• High Threat Security Alert (A26-10-45): Multiple Vulnerabilities in Fortinet Products ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans le noyau Linux d'Ubuntu (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Roundcube security advisory (AV26-1075) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-22 · First collected 2026-10-24

• The Callback That Arrived at 2 A.M., Eleven Days Later ↗ (opens in a new tab)

  System Weakness - Medium · Published 2026-10-22 · First collected 2026-10-24

• Splunk Products Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-22 · First collected 2026-10-24

• Cisco Advance Notification for Publication of October 21, 2026, Security Advisories ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-21 · First collected 2026-10-24

• USN-8949-1: Ghostscript vulnerabilities ↗ (opens in a new tab)

  Ubuntu security notices · Published 2026-10-21 · First collected 2026-10-24

• Risolte vulnerabilità in ISC BIND 9 ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0445 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle Analytics ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-21 · First collected 2026-10-24

• DSA-6576-1 bind9 - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-21 · First collected 2026-10-24

• CC-4873 - Multiple Critical Vulnerabilities in Next.js ↗ (opens in a new tab)

  Cyber Alert Feed · Published 2026-10-19 · First collected 2026-10-24

• WARNING: Heap-Based Buffer Overflows in NGINX Plus and NGINX Open Source Can Be Exploited to Cause Denial of Service or Code Execution, Patch Immediately! ↗ (opens in a new tab)

  CERT.BE advisories · Published 2026-10-19 · First collected 2026-10-24

• How To Date A Photo From Its Shadows, And Check The Sun Was Out ↗ (opens in a new tab)

  Secjuice · Published 2026-10-19 · First collected 2026-10-24

• VestaCP root RCE (VESTACP-2026-001) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-15 · First collected 2026-10-24

• CVE-2026-0314 GlobalProtect App: Local Denial of Service (DoS) on Windows (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-10-14 · First collected 2026-10-24

• CISA Adds Four Known Exploited Vulnerabilities to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-10-14 · First collected 2026-10-24

• VU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-10-13 · First collected 2026-10-24

• Improper access control and session management in the web management interface ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-10-13 · First collected 2026-10-24

• Multiple Vulnerabilities in Dell System Update Could Allow for Remote Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-10-12 · First collected 2026-10-24

• Kubernetes Penetration Testing: Guide, Tools & Best Practices ↗ (opens in a new tab)

  Archives - SecureLayer7 - Offensive Security, API Scanner & Attack Surface Management · Published 2026-10-06 · First collected 2026-10-24

• Vulnerability in gotop software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-10-02 · First collected 2026-10-24

• What Customers Value in a Penetration Testing Partner: Insights from G2 Reviews ↗ (opens in a new tab)

  Synack · Published 2026-10-02 · First collected 2026-10-24

• FreeBSD-EN-26:23.syslogd ↗ (opens in a new tab)

  FreeBSD security · Published 2026-09-29 · First collected 2026-10-24

• ScreenConnect Vulnerability CVE-2026-84869: Exploiting Active Remote Sessions ↗ (opens in a new tab)

  CIP Blog · Published 2026-09-28 · First collected 2026-10-24

• Red Hat Enterprise Linux 10 STIG automation now matches DISA STIG V1R2 ↗ (opens in a new tab)

  Red Hat Security · Published 2026-09-25 · First collected 2026-10-24

• 6 takeaways from Anthropic's Threat Intelligence Report for fraud and risk teams ↗ (opens in a new tab)

  Fingerprint Blog RSS Feed · Published 2026-09-11 · First collected 2026-10-24

• FileRun: Four More Ways to Run Your Files ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-09-10 · First collected 2026-10-24

• 2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server ↗ (opens in a new tab)

  CERT-EU Security Advisories · Published 2026-09-09 · First collected 2026-10-24

• VulnNet Roasted — TryHackMe Active Directory Write-up ↗ (opens in a new tab)

  InfoSec Write-ups - Medium · Published 2026-09-04 · First collected 2026-10-24