Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• NI LabVIEW LVCLASS File Parsing Memory Corruption Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-04-15 · First collected 2026-10-24

• You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-04-02 · First collected 2026-10-24

• Mitigating URL-based Exfiltration in Gemini ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-03-09 · First collected 2026-10-24

• SonicOS multiple post-authentication vulnerabilities ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2026-02-24 · First collected 2026-10-24

• Exploiting a 13-years old bug on QEMU ↗ (opens in a new tab)

  kqx · Published 2025-12-08 · First collected 2026-10-24

• Update on Attacks by Threat Group APT-C-60 ↗ (opens in a new tab)

  JPCERT advisories · Published 2025-11-05 · First collected 2026-10-24

• BUG-000182936 - ArcGIS Server has a security vulnerability.Esri ArcGIS Server... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-26

• RHSA-2026:89923: Important: libreswan security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-26

• emacs: CVSS (Max): 7.8 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-25 · First collected 2026-10-26

• Critical Okta Access Gateway Vulnerability Enables Remote Command Execution ↗ (opens in a new tab)

  GBHackers Security | #1 Globally Trusted Cyber Security News Platform · Published 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans le noyau Linux de Debian (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Roundcube security advisory (AV26-1075) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-22 · First collected 2026-10-24

• Security Alert (A26-10-39): Multiple Vulnerabilities in Cisco Products ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-22 · First collected 2026-10-24

• Cisco Unified Communications Products Security Hardening Release: October 2026 ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-21 · First collected 2026-10-24

• Risolte vulnerabilità in prodotti SolarWinds ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0440 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle Enterprise Manager ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-21 · First collected 2026-10-24

• Microsoft Edge Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-20 · First collected 2026-10-24

• DSA-6570-1 haproxy - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-18 · First collected 2026-10-24

• [0day-rubbish] South River Technologies Titan MFT Server 26.0.0 first-run administrator setup chained to job post-command injection, NT AUTHORITY\SYSTEM (8.1) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-15 · First collected 2026-10-24

• PAN-SA-2026-0013 Chromium: Monthly Vulnerability Update (October 2026) (Severity: HIGH) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-10-14 · First collected 2026-10-24

• Citrix NetScaler RCE zero-day Vulnerabilities ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - Threat Signal Report · Published 2026-10-09 · First collected 2026-10-24

• Secure Your Mission-Critical Application Estate: Qualys TotalAppSec is Now FedRAMP High Authorized (FedRAMP Certified Class D) ↗ (opens in a new tab)

  Qualys Security Blog · Published 2026-10-05 · First collected 2026-10-24

• Critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway products, several intrusions in Finland ↗ (opens in a new tab)

  NCSC-FI news · Published 2026-10-01 · First collected 2026-10-24

• CISA Adds One Known Exploited Vulnerability to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-10-01 · First collected 2026-10-24

• A Vulnerability in Cisco Catalyst SD-WAN Manager Could Allow for Authentication Bypass ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-09-30 · First collected 2026-10-24

• Vulnerability in Das U-Boot software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-29 · First collected 2026-10-24

• FreeBSD-SA-26:65.kqueue ↗ (opens in a new tab)

  FreeBSD security · Published 2026-09-29 · First collected 2026-10-24

• VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-09-24 · First collected 2026-10-24

• GLSA 202608-25: UnrealIRCd: Denial of service ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-26 · First collected 2026-10-24

• Death By 20,000 PoCs ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-08-20 · First collected 2026-10-24