Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• CISA Adds One Known Exploited Vulnerability to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-10-01 · First collected 2026-10-24

• Improper limitation of a pathname to a restricted directory ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-10-01 · First collected 2026-10-24

• A Vulnerability in Apple Products Could Allow for Arbitrary Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-09-30 · First collected 2026-10-24

• Autonomous Remediation Is Already Running at Enterprise Scale ↗ (opens in a new tab)

  Qualys Security Blog · Published 2026-09-29 · First collected 2026-10-24

• FreeBSD-SA-26:64.sysvsem ↗ (opens in a new tab)

  FreeBSD security · Published 2026-09-29 · First collected 2026-10-24

• Vulnerabilities in Dayforce ESS Excelity software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-28 · First collected 2026-10-24

• VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-09-24 · First collected 2026-10-24

• Manufacturers – prepare in advance for reporting vulnerabilities and incidents under the Cyber Resilience Act ↗ (opens in a new tab)

  NCSC-FI news · Published 2026-08-28 · First collected 2026-10-24

• GLSA 202608-24: DTrace: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-26 · First collected 2026-10-24

• FileRun: When Your File Manager Runs Your Files ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-08-13 · First collected 2026-10-24

• Introducing Patch the Planet ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-06-22 · First collected 2026-10-24

• Dropping a 0day? Consider having it 0patched first. ↗ (opens in a new tab)

  0patch Blog · Published 2026-06-08 · First collected 2026-10-24

• Codex Discovered a Hidden HTTP/2 Bomb ↗ (opens in a new tab)

  Calif · Published 2026-06-02 · First collected 2026-10-24

• Insights into Entra ID’s (Un)Conditional Access ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-05-21 · First collected 2026-10-24

• NCSC: Leave passwords in the past - passkeys are the future ↗ (opens in a new tab)

  UK NCSC News · Published 2026-04-23 · First collected 2026-10-24

• Microsoft tensorwatch: Local Code Execution via Pickle Deserialization in ZMQ Listener ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-04-22 · First collected 2026-10-24

• Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-03-30 · First collected 2026-10-24

• Intro to SDR and RF Signal Analysis - elttam ↗ (opens in a new tab)

  elttam · Published 2026-03-24 · First collected 2026-10-24

• Hybrid Protocol: The JSON Upgrade ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-02-23 · First collected 2026-10-24

• SonicWall Email Security Affected By Multiple Vulnerabilities ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2025-11-19 · First collected 2026-10-24

• openssh8.4: CVSS (Max): 7.7 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-26 · First collected 2026-10-27

• OpenPanel before 3.0.0 Sensitive Information Exposure via Application LogsOpe... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-27

• RHSA-2026:90328: Moderate: bind security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-27

• Critical HPE Aruba AOS-8 Flaw Allows Hackers to Bypass SSH Authentication and Take Over Systems ↗ (opens in a new tab)

  GBHackers Security | #1 Globally Trusted Cyber Security News Platform · Published 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans le noyau Linux d'Ubuntu (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• High Threat Security Alert (A26-10-37): Multiple Vulnerabilities in Node.js ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-22 · First collected 2026-10-24

• Statement regarding critical vulnerabilities in PHP affecting websites and online services ↗ (opens in a new tab)

  Canadian Centre for Cyber Security news · Source updated 2026-10-21 · First collected 2026-10-24

• Cisco Secure Client Secure Firewall Posture Module Privilege Escalation Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-21 · First collected 2026-10-24

• Risolte vulnerabilità in Google Chrome ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0438 [1.00] [M/H] Kwetsbaarheden verholpen in Drupal Core en modules door Drupal ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-19 · First collected 2026-10-24