Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• FOSSBilling: One Missing throw - From Auth Bypass to Unauthenticated RCE ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-07-05 · First collected 2026-10-24

• MAD Bugs: My Cousin Vinyl (CVE-2026-50052) ↗ (opens in a new tab)

  Calif · Published 2026-07-01 · First collected 2026-10-24

• Top 1 Million Analysis – June 2026: Ten Years of Web Security ↗ (opens in a new tab)

  Scott Helme · Published 2026-06-29 · First collected 2026-10-24

• Marking Your Own Homework (Check Point Remote Access VPN IKEv1 Authentication Bypass CVE-2026-50751) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-06-12 · First collected 2026-10-24

• Siemens Simcenter Femap IPT File Parsing Memory Corruption Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-05-12 · First collected 2026-10-24

• SonicOS affected by multiple vulnerabilities ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2026-04-29 · First collected 2026-10-24

• Simple Bugs With Complex Exploits - elttam ↗ (opens in a new tab)

  elttam · Published 2026-04-16 · First collected 2026-10-24

• Passkeys are Your New Best Friend ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-03-30 · First collected 2026-10-24

• JSAC2026 -Day 1- ↗ (opens in a new tab)

  JPCERT advisories · Published 2026-02-20 · First collected 2026-10-24

• How a single typo led to RCE in Firefox ↗ (opens in a new tab)

  kqx · Published 2026-02-04 · First collected 2026-10-24

• OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokensOmn... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-26

• RHSA-2026:89922: Important: git-lfs security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-26

• Linux Kernel: CVSS (Max): 8.8 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-25 · First collected 2026-10-26

• Kolmas haavoittuvuus PHP:ssä, päivitys tulossa myöhemmin ↗ (opens in a new tab)

  NCSC Finland Vulnerability Digest · Published 2026-10-24 · First collected 2026-10-24

• MongoDB security advisory (AV26-1078) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans Microsoft Edge (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• I Stopped Reading Error Messages as Errors ↗ (opens in a new tab)

  System Weakness - Medium · Published 2026-10-22 · First collected 2026-10-24

• Security Alert (A26-10-42): Multiple Vulnerabilities in Palo Alto Products ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-22 · First collected 2026-10-24

• Cisco Unified Communications Manager Improper Access Control Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-21 · First collected 2026-10-24

• USN-8948-2: PHP vulnerabilities ↗ (opens in a new tab)

  Ubuntu security notices · Published 2026-10-21 · First collected 2026-10-24

• PHP2Shell: sanate vulnerabilità critiche in PHP ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0443 [1.00] [H/H] Kwetsbaarheden verholpen in PHP ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-21 · First collected 2026-10-24

• Oracle Products Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-21 · First collected 2026-10-24

• DSA-6573-1 firefox-esr - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-21 · First collected 2026-10-24

• Warning: Multiple Critical Vulnerabilities in Juniper Networks Junos OS, Patch Immediately! ↗ (opens in a new tab)

  CERT.BE advisories · Published 2026-10-16 · First collected 2026-10-24

• [SYSS-2026-078]: dcm4che - Path Traversal (CWE-22) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-15 · First collected 2026-10-24

• CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-10-14 · First collected 2026-10-24

• Microsoft Patch Tuesday, October 2026 Security Update Review ↗ (opens in a new tab)

  Qualys Security Blog · Published 2026-10-13 · First collected 2026-10-24

• Persistent Denial of Service in Admin Profile ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-10-13 · First collected 2026-10-24

• Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data ↗ (opens in a new tab)

  CISA alerts · Published 2026-10-06 · First collected 2026-10-24