Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• kernel: CVSS (Max): 9.8 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-25 · First collected 2026-10-26

• Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws ↗ (opens in a new tab)

  The Hacker News · Published 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans les produits Red Hat (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Atlassian security advisory (AV26-1076) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-22 · First collected 2026-10-24

• Security Alert (A26-10-40): Multiple Vulnerabilities in F5 Products ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-22 · First collected 2026-10-24

• Cisco Expressway Series Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-21 · First collected 2026-10-24

• Node.js: risolte molteplici vulnerabilità ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0441 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle MySQL ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-21 · First collected 2026-10-24

• BeyondTrust Remote Support Security Restriction Bypass Vulnerability ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-20 · First collected 2026-10-24

• DSA-6571-1 xen - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-18 · First collected 2026-10-24

• [0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-15 · First collected 2026-10-24

• CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-10-14 · First collected 2026-10-24

• arbitrary command execution in fgfmsd daemon ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-10-13 · First collected 2026-10-24

• Exploitability Needs Runtime Evidence: Understanding Runtime Vulnerability Reachability for Containers ↗ (opens in a new tab)

  Qualys Security Blog · Published 2026-10-12 · First collected 2026-10-24

• CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-10-02 · First collected 2026-10-24

• A Vulnerability in WordPress Could Allow for Remote Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-10-01 · First collected 2026-10-24

• Citrix NetScaler vulnerabilities exploited in Finland ↗ (opens in a new tab)

  NCSC-FI news · Published 2026-10-01 · First collected 2026-10-24

• Vulnerability in Ghostscript software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-29 · First collected 2026-10-24

• FreeBSD-SA-26:66.jail ↗ (opens in a new tab)

  FreeBSD security · Published 2026-09-29 · First collected 2026-10-24

• VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-09-25 · First collected 2026-10-24

• GLSA 202608-27: GNU screen: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-26 · First collected 2026-10-24

• Exploiting SharePoint: CVE-2026-55040 and CVE-2026-63520 RCE Chain ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-08-24 · First collected 2026-10-24

• Micropatches released for Desktop Window Manager Elevation of Privilege Vulnerability (CVE-2026-20871) ↗ (opens in a new tab)

  0patch Blog · Published 2026-07-12 · First collected 2026-10-24

• GPT-5.5-Cyber built a zlib fuzzing lab in a day ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-07-02 · First collected 2026-10-24

• TROOPERS26: Integrating Incident Analysis and Digital Forensics Tooling for Automated Compromise Detection ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-06-29 · First collected 2026-10-24

• How to format a ciphertext ↗ (opens in a new tab)

  Calif · Published 2026-06-17 · First collected 2026-10-24

• The Instructure Canvas Breach (2026): How XSS in a Support Ticket Compromised 275 Million Students ↗ (opens in a new tab)

  Scott Helme · Published 2026-06-15 · First collected 2026-10-24

• Executive Summary: Defending against China-nexus covert networks of compromised devices ↗ (opens in a new tab)

  UK NCSC News · Published 2026-04-23 · First collected 2026-10-24

• CVE-2026-26210: ktransformers Unauthenticated RCE via Pickle Deserialization in ZMQ Scheduler ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-04-22 · First collected 2026-10-24

• A Monocle on Chronicles - elttam ↗ (opens in a new tab)

  elttam · Published 2026-04-16 · First collected 2026-10-24