Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• FreeBSD-EN-26:23.syslogd ↗ (opens in a new tab)

  FreeBSD security · Published 2026-09-29 · First collected 2026-10-24

• ScreenConnect Vulnerability CVE-2026-84869: Exploiting Active Remote Sessions ↗ (opens in a new tab)

  CIP Blog · Published 2026-09-28 · First collected 2026-10-24

• Red Hat Enterprise Linux 10 STIG automation now matches DISA STIG V1R2 ↗ (opens in a new tab)

  Red Hat Security · Published 2026-09-25 · First collected 2026-10-24

• Virtualizor: The Login Parameter That Skips the Login ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-09-22 · First collected 2026-10-24

• 6 takeaways from Anthropic's Threat Intelligence Report for fraud and risk teams ↗ (opens in a new tab)

  Fingerprint Blog RSS Feed · Published 2026-09-11 · First collected 2026-10-24

• 2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server ↗ (opens in a new tab)

  CERT-EU Security Advisories · Published 2026-09-09 · First collected 2026-10-24

• VulnNet Roasted — TryHackMe Active Directory Write-up ↗ (opens in a new tab)

  InfoSec Write-ups - Medium · Published 2026-09-04 · First collected 2026-10-24

• Disruptive cyber activity highlights risk from internet-exposed systems and edge devices ↗ (opens in a new tab)

  UK NCSC News · Published 2026-08-27 · First collected 2026-10-24

• GLSA 202608-31: Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-27 · First collected 2026-10-24

• Edge infrastructure under siege: what two independent datasets reveal about who's exploiting your perimeter ↗ (opens in a new tab)

  Tenable Cyber Exposure Alerts · Published 2026-08-26 · First collected 2026-10-24

• SVD-2026-0804: Security Vulnerabilities in Splunk SOAR - August 2026 ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-08-19 · First collected 2026-10-24

• Micropatches released for "KerberLoss" Active Directory Domain Services Elevation of Privilege Vulnerability (CVE-2026-25177) ↗ (opens in a new tab)

  0patch Blog · Published 2026-08-16 · First collected 2026-10-24

• ERNW White Paper 79: Integrating Incident Analysis and Digital Forensics Tooling for Automated Compromise Detection ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-08-12 · First collected 2026-10-24

• SonicOS Improper Neutralization of HTTP Headers Vulnerability ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2026-08-05 · First collected 2026-10-24

• A few notes on AWS Nitro Enclaves: KMS integration ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-08-05 · First collected 2026-10-24

• Gitea vulnerability CVE-2026-60004: find impacted assets ↗ (opens in a new tab)

  runZero Blog · Published 2026-07-30 · First collected 2026-10-24

• Dark Elevator: Windows Install Service Local Privilege Escalation (CVE-2026-50343) ↗ (opens in a new tab)

  Calif · Published 2026-07-22 · First collected 2026-10-24

• ZDI-CAN-30702 - NVIDIA Vulnerability (Upcoming) ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-07-22 · First collected 2026-10-24

• Monsta FTP: An SSRF Blocklist That Forgot IPv6 Exists ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-07-14 · First collected 2026-10-24

• Connection Allowlist: a network firewall, built into the browser ↗ (opens in a new tab)

  Scott Helme · Published 2026-07-08 · First collected 2026-10-24

• Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-06-29 · First collected 2026-10-24

• FuzzingLabs selected to join the Cyber Defense Factory incubator ↗ (opens in a new tab)

  FuzzingLabs · Published 2026-06-16 · First collected 2026-10-24

• Golang code review notes II - elttam ↗ (opens in a new tab)

  elttam · Published 2026-06-03 · First collected 2026-10-24

• bugSWAT in Seoul – April 2026 ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-05-11 · First collected 2026-10-24

• 🍼🤏🤏 - TRX CTF Quals 2026 ↗ (opens in a new tab)

  kqx · Published 2026-04-25 · First collected 2026-10-24

• From a Netfilter Bug to kernelCTF: Exploiting CVE-2026-23274 in the Linux Kernel and winning a $10500 Bounty ↗ (opens in a new tab)

  Nebula Security · Published 2026-04-14 · First collected 2026-10-24

• Oracle Security Alert for CVE-2026-21992 - 19 March 2026 ↗ (opens in a new tab)

  Oracle security alerts · Published 2026-03-20 · First collected 2026-10-24

• JSAC2026 -Workshop/Lightning Talk Session/Panel Discussion- ↗ (opens in a new tab)

  JPCERT advisories · Published 2026-03-06 · First collected 2026-10-24

• Unfaithful claims: breaking 6 zkVMs ↗ (opens in a new tab)

  OtterSec · Published 2026-03-03 · First collected 2026-10-24

• AzurEnum - Update ↗ (opens in a new tab)

  SySS Tech Blog · Published 2026-01-21 · First collected 2026-10-24