Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• A Vulnerability in Fortinet FortiMail Could Allow for Arbitrary Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-10-02 · First collected 2026-10-24

• VU#553437: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-10-01 · First collected 2026-10-24

• Vulnerability in Quick.Cart software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-29 · First collected 2026-10-24

• FreeBSD-SA-26:68.openssl ↗ (opens in a new tab)

  FreeBSD security · Published 2026-09-29 · First collected 2026-10-24

• The Anthropic Glasswing Receipts Are Starting to Trickle In ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-09-08 · First collected 2026-10-24

• GLSA 202608-28: Chromium, Google Chrome, Microsoft Edge. Opera: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-27 · First collected 2026-10-24

• Your Android Bluetooth Traffic Captures Should Be Live ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-07-27 · First collected 2026-10-24

• Micropatches released for Remote Desktop Client Remote Code Execution Vulnerability (CVE-2026-47289) ↗ (opens in a new tab)

  0patch Blog · Published 2026-07-15 · First collected 2026-10-24

• Rust-proof your code with our new Testing Handbook chapter ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-07-13 · First collected 2026-10-24

• Ubiquiti UniFi OS vulnerabilities: How to find impacted assets ↗ (opens in a new tab)

  runZero Blog · Published 2026-07-08 · First collected 2026-10-24

• A dead CDN, a wildcard, and an attack waiting to happen: the netdna-ssl.com takeover ↗ (opens in a new tab)

  Scott Helme · Published 2026-06-24 · First collected 2026-10-24

• Squidbleed (CVE-2026-47729) ↗ (opens in a new tab)

  Calif · Published 2026-06-18 · First collected 2026-10-24

• Alert: NCSC issues advice following global targeting of Fortinet firewalls and VPN gateways ↗ (opens in a new tab)

  UK NCSC News · Published 2026-06-18 · First collected 2026-10-24

• More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-06-10 · First collected 2026-10-24

• Siemens Simcenter Femap IPT File Parsing Memory Corruption Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-05-12 · First collected 2026-10-24

• CVE-2026-29514: NetBox Jinja2 Sandbox Bypass to RCE via RenderTemplateMixin environment_params ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-04-30 · First collected 2026-10-24

• Vuln research on the WAG54G home router - elttam ↗ (opens in a new tab)

  elttam · Published 2026-04-16 · First collected 2026-10-24

• SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2026-04-08 · First collected 2026-10-24

• Streamlining Google’s OSS VRP: Key Rule Updates ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-03-19 · First collected 2026-10-24

• Multiple Threat Actors Rapidly Exploit React2Shell: A Case Study of Active Compromise ↗ (opens in a new tab)

  JPCERT advisories · Published 2026-02-13 · First collected 2026-10-24

• Singleton - ASIS CTF Finals 2025 ↗ (opens in a new tab)

  kqx · Published 2025-12-30 · First collected 2026-10-24

• BUG-000187164 - ArcGIS Server has a security vulnerability.There is a reflect... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-26

• RHSA-2026:89925: Important: git-lfs security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-26

• kernel-rt: CVSS (Max): 9.8 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-25 · First collected 2026-10-26

• Fortinet Releases Security Hardening Release for Multiple Products ↗ (opens in a new tab)

  NCSC Finland Vulnerability Digest · Published 2026-10-24 · First collected 2026-10-24

• BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations ↗ (opens in a new tab)

  The Hacker News · Published 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans les produits SUSE (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Splunk security advisory (AV26-1077) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-22 · First collected 2026-10-24

• Security Alert (A26-10-41): Multiple Vulnerabilities in Nginx Products ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-22 · First collected 2026-10-24

• Cisco Expressway Series Security Hardening Release: October 2026 ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-21 · First collected 2026-10-24