Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Multiples vulnérabilités dans les produits Tenable (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Before You Ship Your API, Test These 10 Things ↗ (opens in a new tab)

  System Weakness - Medium · Published 2026-10-22 · First collected 2026-10-24

• Security Alert (A26-10-43): Vulnerability in Oracle Products ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-22 · First collected 2026-10-24

• Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-21 · First collected 2026-10-24

• Risolte vulnerabilità in ISC BIND 9 ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0444 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle Communications ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-21 · First collected 2026-10-24

• Nginx Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-21 · First collected 2026-10-24

• DSA-6574-1 php8.4 - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-21 · First collected 2026-10-24

• Warning: Critical, unauthenticated path traversal in Atlassian (Bitbucket, Jira, Confluence, Bamboo, Crowd) Data Centre, Cricible, Fisheye, Patch Immediately! ↗ (opens in a new tab)

  CERT.BE advisories · Published 2026-10-19 · First collected 2026-10-24

• Europe's 24-Hour Hack Reporting Rule, Tested On France's Fridges ↗ (opens in a new tab)

  Secjuice · Published 2026-10-18 · First collected 2026-10-24

• [SYSS-2026-079]: dcm4che - Path Traversal (CWE-22) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-15 · First collected 2026-10-24

• CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-10-14 · First collected 2026-10-24

• TruConfidence: Why Your Patch Automation Can Finally Be Autonomous ↗ (opens in a new tab)

  Qualys Security Blog · Published 2026-10-14 · First collected 2026-10-24

• CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-10-13 · First collected 2026-10-24

• Persistent Denial of Service in Admin Profile ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-10-13 · First collected 2026-10-24

• Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-10-07 · First collected 2026-10-24

• VU#553437: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-10-01 · First collected 2026-10-24

• Vulnerabilities in YunoHost-Apps sogo_yhn software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-30 · First collected 2026-10-24

• FreeBSD-SA-26:69.udp ↗ (opens in a new tab)

  FreeBSD security · Published 2026-09-29 · First collected 2026-10-24

• FileRun: Four More Ways to Run Your Files ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-09-10 · First collected 2026-10-24

• Closing the gaps attackers hide in: new signals for mobile and web ↗ (opens in a new tab)

  Fingerprint Blog RSS Feed · Published 2026-09-03 · First collected 2026-10-24

• GLSA 202608-29: Chromium, Google Chrome, Microsoft Edge, Opera: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-27 · First collected 2026-10-24

• #TROOPERS26 AD & Entra ID Security Track ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-08-11 · First collected 2026-10-24

• How we use /goal to find bugs in Patch the Planet ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-07-28 · First collected 2026-10-24

• Free micropatches available for "LegacyHive" (was 0day, now CVE-2026-62832) ↗ (opens in a new tab)

  0patch Blog · Published 2026-07-19 · First collected 2026-10-24

• WordPress vulnerabilities (wp2shell): Find impacted instances ↗ (opens in a new tab)

  runZero Blog · Published 2026-07-18 · First collected 2026-10-24

• UK and Allies urge critical sectors to improve defences against Russian intelligence targeting ↗ (opens in a new tab)

  UK NCSC News · Published 2026-07-13 · First collected 2026-10-24

• FOSSBilling: One Missing throw - From Auth Bypass to Unauthenticated RCE ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-07-05 · First collected 2026-10-24

• MAD Bugs: My Cousin Vinyl (CVE-2026-50052) ↗ (opens in a new tab)

  Calif · Published 2026-07-01 · First collected 2026-10-24

• Top 1 Million Analysis – June 2026: Ten Years of Web Security ↗ (opens in a new tab)

  Scott Helme · Published 2026-06-29 · First collected 2026-10-24