Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• FreeBSD-SA-26:65.kqueue ↗ (opens in a new tab)

  FreeBSD security · Published 2026-09-29 · First collected 2026-10-24

• VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-09-25 · First collected 2026-10-24

• GLSA 202608-25: UnrealIRCd: Denial of service ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-26 · First collected 2026-10-24

• Death By 20,000 PoCs ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-08-20 · First collected 2026-10-24

• Shipping post-quantum cryptography to Python ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-06-30 · First collected 2026-10-24

• Heads-up: TROOPERS Roundtable – Supply Chain Security ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-06-22 · First collected 2026-10-24

• Broken official patches for Windows Shell Spoofing Vulnerability (CVE-2026-32202) ↗ (opens in a new tab)

  0patch Blog · Published 2026-06-11 · First collected 2026-10-24

• OOBdump: Relocation Oriented Programming ↗ (opens in a new tab)

  Calif · Published 2026-06-08 · First collected 2026-10-24

• Open-Sourcing dbsc-php: a Server Library for Device Bound Session Credentials in PHP ↗ (opens in a new tab)

  Scott Helme · Published 2026-06-08 · First collected 2026-10-24

• Defending against China-nexus covert networks of compromised devices ↗ (opens in a new tab)

  UK NCSC News · Published 2026-04-23 · First collected 2026-10-24

• CVE-2026-25874: HuggingFace LeRobot Unauthenticated RCE via Pickle Deserialization in gRPC PolicyServer ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-04-22 · First collected 2026-10-24

• NI LabVIEW LVLIB File Parsing Memory Corruption Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-04-15 · First collected 2026-10-24

• Please, We Beg, Just One Weekend Free Of Appliances (Citrix NetScaler CVE-2026-3055 Memory Overread Part 2) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-03-29 · First collected 2026-10-24

• RE of LR3 - elttam ↗ (opens in a new tab)

  elttam · Published 2026-03-26 · First collected 2026-10-24

• Hybrid Transport Goes Offline! ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-03-04 · First collected 2026-10-24

• SonicWall SMA1000 appliance local privilege escalation vulnerability ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2025-12-17 · First collected 2026-10-24

• Inline8 - DefCamp DCTF Finals 2025 ↗ (opens in a new tab)

  kqx · Published 2025-11-16 · First collected 2026-10-24

• Red Hat build of MicroShift 4.21.40: CVSS (Max): 6.8 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-26 · First collected 2026-10-27

• OpenPanel before 3.0.0 Improper ClickHouse Escaping in sankey.service.tsOpenP... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-27

• RHSA-2026:90349: Important: rsyslog security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-26

• Critical Okta Access Gateway Vulnerability Enables Remote Command Execution ↗ (opens in a new tab)

  GBHackers Security | #1 Globally Trusted Cyber Security News Platform · Published 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans le noyau Linux de Debian LTS (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• GitLab security advisory (AV26-1074) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-22 · First collected 2026-10-24

• Security Alert (A26-10-38): Vulnerability in FireFox ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-22 · First collected 2026-10-24

• Open Source Snort 3 Control Channel Socket Arbitrary Command Execution Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0439 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle PeopleSoft Enterprise ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-21 · First collected 2026-10-24

• Risolte vulnerabilità in Apache Tomcat ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-21 · First collected 2026-10-24

• DSA-6567-2 cifs-utils - regression update ↗ (opens in a new tab)

  Debian security · Published 2026-10-18 · First collected 2026-10-24

• Google Chrome Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-16 · First collected 2026-10-24

• CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-10-14 · First collected 2026-10-24