Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• DSA-6569-1 apache2 - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-16 · First collected 2026-10-24

• Cisco Secure Email Gateway Remote Code Execution Vulnerability ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-15 · First collected 2026-10-24

• CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-10-02 · First collected 2026-10-24

• CISA Adds One Known Exploited Vulnerability to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-09-30 · First collected 2026-10-24

• Citrix NetScaler ADC and NetScaler Gateway RCE ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - Threat Signal Report · Published 2026-09-29 · First collected 2026-10-24

• Multiple Vulnerabilities in NetScaler ADC and NetScaler Gateway Could Allow for Remote Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-09-28 · First collected 2026-10-24

• Vulnerabilities in Kaon AR2140 routers ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-28 · First collected 2026-10-24

• VU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerability ↗ (opens in a new tab)

  CERT/CC Vulnerability Notes · Published 2026-09-24 · First collected 2026-10-24

• Oracle Critical Security Patch Update, September 2026 Review ↗ (opens in a new tab)

  Vulnerabilities and Threat Research – Qualys Security Blog · Published 2026-09-16 · First collected 2026-10-24

• GLSA 202608-21: GNU Emacs: Arbitrary code execution ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-26 · First collected 2026-10-24

• FreeBSD-EN-26:21.openssl ↗ (opens in a new tab)

  FreeBSD security · Published 2026-08-25 · First collected 2026-10-24

• ENDLESSDOORS Is Phoning Home. Pick Up. ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-08-05 · First collected 2026-10-24

• Factoring "short-sleeve" RSA keys with polynomials ↗ (opens in a new tab)

  The Trail of Bits Blog · Published 2026-06-12 · First collected 2026-10-24

• RedSun: Exploiting Windows Defender's Remediation Workflow for Local Privilege Escalation ↗ (opens in a new tab)

  Calif · Published 2026-06-01 · First collected 2026-10-24

• Micropatches released for Windows Netlogon Remote Code Execution Vulnerability (CVE-2026-41089) ↗ (opens in a new tab)

  0patch Blog · Published 2026-05-25 · First collected 2026-10-24

• CVE-2026-47237 – Overly Permissive Istio Permissions Allow Kubeflow Authorization Token Stealing ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-05-20 · First collected 2026-10-24

• International cyber agencies share fresh advice to defend against China-linked covert networks ↗ (opens in a new tab)

  UK NCSC News · Published 2026-04-23 · First collected 2026-10-24

• Instagram's 'Seen' Is a Lie — And They're About to Charge You for the Proof ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-04-17 · First collected 2026-10-24

• Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-03-30 · First collected 2026-10-24

• Exploring the STSAFE-A110 - elttam ↗ (opens in a new tab)

  elttam · Published 2026-03-24 · First collected 2026-10-24

• Strengthening the Foundation: A Joint Security Review of Intel TDX 1.5 ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-02-10 · First collected 2026-10-24

• SonicOS SSLVPN Pre-Auth Stack-Based Buffer Overflow Vulnerability ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2025-11-19 · First collected 2026-10-24

• squid: CVSS (Max): 8.6 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-26 · First collected 2026-10-27

• OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.tsOpen... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-27

• RHSA-2026:90336: Important: python-lxml security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-27

• PHP Warns of Another Unpatched RCE Risk Two Days After Emergency PHP2Shell Patches ↗ (opens in a new tab)

  The Hacker News · Published 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans les produits Papercut (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Cisco security advisory (AV26-1073) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-21 · First collected 2026-10-24

• Critical Patch Update di Oracle ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-21 · First collected 2026-10-24

• High Threat Security Alert (A26-10-36): Multiple Vulnerabilities in PHP ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-21 · First collected 2026-10-24