Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Learning Protocol Handler ↗ (opens in a new tab)

  u1f383 · Published 2026-01-18 · First collected 2026-10-24

• Mobile Security Course Updates in 2025 at 8kSec Academy ↗ (opens in a new tab)

  8kSec Blog · Published 2026-01-15 · First collected 2026-10-24

• What organisations can learn from the record breaking fine over Capita’s ransomware incident ↗ (opens in a new tab)

  DoublePulsar - Medium · Published 2025-11-20 · First collected 2026-10-24

• Timescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN O... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-26

• RHSA-2026:90287: Important: sudo security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-26

• aws-iam-authenticator: CVSS (Max): 7.5 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-25 · First collected 2026-10-26

• Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software ↗ (opens in a new tab)

  The Hacker News · Published 2026-10-24 · First collected 2026-10-24

• HPESBNW05162 rev.1 - Multiple Vulnerabilities in HPE Networking Wireless Operating Systems (AOS-10 & AOS-8) ↗ (opens in a new tab)

  NCSC Finland Vulnerability Digest · Published 2026-10-24 · First collected 2026-10-24

• HPE security advisory (AV26-1079) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-23 · First collected 2026-10-24

• Security Alert (A26-10-44): Multiple Vulnerabilities in GitLab ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans les produits HPE Aruba Networking (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• VM-Based Deobfuscation — Static Devirtualization ↗ (opens in a new tab)

  System Weakness - Medium · Published 2026-10-22 · First collected 2026-10-24

• Risolte vulnerabilità in GitLab CE/EE ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-22 · First collected 2026-10-24

• Cisco Expressway Series Information Disclosure Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-21 · First collected 2026-10-24

• USN-8948-2: PHP vulnerabilities ↗ (opens in a new tab)

  Ubuntu security notices · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0445 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle Analytics ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-21 · First collected 2026-10-24

• Google Chrome Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-21 · First collected 2026-10-24

• DSA-6575-1 nginx - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-21 · First collected 2026-10-24

• The Real Jump Scare Isn’t the Attacker; It’s The Vulnerabilities You’re Focusing On ↗ (opens in a new tab)

  Qualys Security Blog · Published 2026-10-20 · First collected 2026-10-24

• WARNING: Template Injection Vulnerability in Adobe Commerce and Magento Open Source Can Be Exploited to Execute Arbitrary Code, Patch Immediately! ↗ (opens in a new tab)

  CERT.BE advisories · Published 2026-10-19 · First collected 2026-10-24

• CC-4872 - F5 Releases Security Advisory for Critical Vulnerabilities in NGINX Plus and NGINX Open Source ↗ (opens in a new tab)

  Cyber Alert Feed · Published 2026-10-19 · First collected 2026-10-24

• How To Date A Photo From Its Shadows, And Check The Sun Was Out ↗ (opens in a new tab)

  Secjuice · Published 2026-10-19 · First collected 2026-10-24

• [SYSS-2026-080]: dcm4che - Path Traversal (CWE-22) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-15 · First collected 2026-10-24

• CVE-2026-0311 Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (Severity: LOW) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-10-14 · First collected 2026-10-24

• CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure ↗ (opens in a new tab)

  CISA current activity · Published 2026-10-13 · First collected 2026-10-24

• Multiple Arbitrary File Read/Write via SQL Injection ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-10-13 · First collected 2026-10-24

• VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1 ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-10-12 · First collected 2026-10-24

• A Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway Could Allow for Remote Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-10-09 · First collected 2026-10-24

• Vulnerability in gotop software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-10-02 · First collected 2026-10-24

• FreeBSD-EN-26:22.usb ↗ (opens in a new tab)

  FreeBSD security · Published 2026-09-29 · First collected 2026-10-24