Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Rilevate vulnerabilità in prodotti Acronis ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0442 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle E-Business Suite ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-21 · First collected 2026-10-24

• Fortinet Products Elevation of Privilege Vulnerability ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-20 · First collected 2026-10-24

• DSA-6572-1 ca-certificates - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-20 · First collected 2026-10-24

• [SYSS-2026-077]: dcm4che - Path Traversal (CWE-22) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-15 · First collected 2026-10-24

• CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability (Severity: LOW) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-10-14 · First collected 2026-10-24

• SQL command injection in webmail ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-10-13 · First collected 2026-10-24

• CISA Adds One Known Exploited Vulnerability to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-10-04 · First collected 2026-10-24

• A Vulnerability in Kiteworks EPG (Email Security Gateway) Could Allow for Arbitrary Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-10-01 · First collected 2026-10-24

• Vulnerability in MyPresta Google Merchant Center Feed software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-29 · First collected 2026-10-24

• FreeBSD-SA-26:67.ktls ↗ (opens in a new tab)

  FreeBSD security · Published 2026-09-29 · First collected 2026-10-24

• VU#762428: Authlib library contains a signature‑verification bypass vulnerability ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-09-28 · First collected 2026-10-24

• Chinese Implants in the Supply Chain ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-08-27 · First collected 2026-10-24

• GLSA 202608-26: Vinyl Cache: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-27 · First collected 2026-10-24

• Windows Hello for Business – Full Report Has Been Released ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-07-16 · First collected 2026-10-24

• Micropatches released for Windows Kerberos Elevation of Privilege Vulnerability (CVE-2025-60704) ↗ (opens in a new tab)

  0patch Blog · Published 2026-07-13 · First collected 2026-10-24

• Mutation testing comes to DAML ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-07-08 · First collected 2026-10-24

• Why No Passkeys? Naming the Top Sites That Still Don't Support Them ↗ (opens in a new tab)

  Scott Helme · Published 2026-06-22 · First collected 2026-10-24

• Apple Internals: Swift in the Kernel ↗ (opens in a new tab)

  Calif · Published 2026-06-18 · First collected 2026-10-24

• NCSC CEO: Hostile states linked to three-quarters of cyber attacks affecting UK's critical systems ↗ (opens in a new tab)

  UK NCSC News · Published 2026-06-17 · First collected 2026-10-24

• The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-04-29 · First collected 2026-10-24

• Unauthenticated RCE in OpenCATS via Installer Config Injection ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-04-27 · First collected 2026-10-24

• Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-04-23 · First collected 2026-10-24

• Playing with canaries - elttam ↗ (opens in a new tab)

  elttam · Published 2026-04-16 · First collected 2026-10-24

• SonicWall Email Security Affected By Multiple Vulnerabilities ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2026-03-31 · First collected 2026-10-24

• Google VRPs in Review – 2025 ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-03-11 · First collected 2026-10-24

• vibe-kode - backdoor CTF 2025 ↗ (opens in a new tab)

  kqx · Published 2025-12-09 · First collected 2026-10-24

• YAMAGoya: A Real-time Client Monitoring Tool Using Sigma and YARA Rules ↗ (opens in a new tab)

  JPCERT advisories · Published 2025-11-18 · First collected 2026-10-24

• BUG-000187165 - ArcGIS Server has a security vulnerability.There is a stored ... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-26

• RHSA-2026:89926: Important: git-lfs security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-26