Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• ENISA's CRA Single Reporting Platform Just Went Live. Here's What You Actually Need to Know. ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-09-14 · First collected 2026-10-24

• 6 most effective techniques to prevent credential stuffing ↗ (opens in a new tab)

  Fingerprint Blog RSS Feed · Published 2026-09-08 · First collected 2026-10-24

• GLSA 202608-30: OpenRGB: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-27 · First collected 2026-10-24

• 2026-010: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway ↗ (opens in a new tab)

  CERT-EU Security Advisories · Published 2026-08-19 · First collected 2026-10-24

• SVD-2026-0801: Security Vulnerabilities in Splunk Enterprise - August 2026 ↗ (opens in a new tab)

  Splunk Security Announcements · Published 2026-08-19 · First collected 2026-10-24

• Oracle August 2026 Critical Security Patch Update Addresses 925 CVEs ↗ (opens in a new tab)

  Tenable Cyber Exposure Alerts · Published 2026-08-18 · First collected 2026-10-24

• TIA Project Parser ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-08-12 · First collected 2026-10-24

• Micropatches released for "GreenPlasma" Windows Collaborative Translation Framework Elevation of Privilege (CVE-2026-45586) ↗ (opens in a new tab)

  0patch Blog · Published 2026-08-10 · First collected 2026-10-24

• JetBrains TeamCity vulnerability: how to find impacted assets ↗ (opens in a new tab)

  runZero Blog · Published 2026-07-30 · First collected 2026-10-24

• Building secure Uniswap v4 hooks ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-07-30 · First collected 2026-10-24

• UK and partners expose Russian state-supported actors for new ‘zero-click’ phishing campaign targeting Western organisations ↗ (opens in a new tab)

  UK NCSC News · Published 2026-07-23 · First collected 2026-10-24

• Journey to Root, Episode I: The Maglev King ↗ (opens in a new tab)

  Calif · Published 2026-07-17 · First collected 2026-10-24

• Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-07-15 · First collected 2026-10-24

• SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2026-07-14 · First collected 2026-10-24

• NVIDIA GEN3C: Unauthenticated RCE via Pickle Deserialization in Inference API ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-07-06 · First collected 2026-10-24

• Top 1 Million Analysis – June 2026: The State of Crypto ↗ (opens in a new tab)

  Scott Helme · Published 2026-07-01 · First collected 2026-10-24

• Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-06-12 · First collected 2026-10-24

• Spoofing the Sky: breaking RTKLIB, the brain behind centimeter-accurate GPS. ↗ (opens in a new tab)

  FuzzingLabs · Published 2026-06-09 · First collected 2026-10-24

• Gaining console access to the WAG54G home router - elttam ↗ (opens in a new tab)

  elttam · Published 2026-04-16 · First collected 2026-10-24

• Standardizing Rewards in Google VRP: Introducing Information Tiers and Action Criticality ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-04-08 · First collected 2026-10-24

• cornelslop - DiceCTF Quals 2026 ↗ (opens in a new tab)

  kqx · Published 2026-03-08 · First collected 2026-10-24

• JSAC2026 -Day 2- ↗ (opens in a new tab)

  JPCERT advisories · Published 2026-02-27 · First collected 2026-10-24

• Oracle Critical Patch Update Advisory - January 2026 ↗ (opens in a new tab)

  Oracle security alerts · Published 2026-01-20 · First collected 2026-10-24

• ERC-4337 paymasters: better UX, hidden risks ↗ (opens in a new tab)

  OtterSec · Published 2025-12-02 · First collected 2026-10-24

• CyberSlop — meet the new threat actor, MIT and Safe Security ↗ (opens in a new tab)

  DoublePulsar - Medium · Published 2025-11-03 · First collected 2026-10-24

• OAuth 2.0 Browser Swapping Attacks ↗ (opens in a new tab)

  SySS Tech Blog · Published 2025-11-03 · First collected 2026-10-24

• Bucket Squatting in Cloud Run MCP leads to Service Account TakeoverBucket Squ... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-26

• RHSA-2026:89924: Important: jackson-databind security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-26

• Red Hat OpenShift Builds: CVSS (Max): 7.5 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-25 · First collected 2026-10-26

• MongoDB security advisory (AV26-1078) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-23 · First collected 2026-10-24