Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Cisco Unified Intelligence Center SQL Injection Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-20 · First collected 2026-10-24

• NCSC-2026-0437 [1.00] [H/H] Kwetsbaarheid verholpen in BeyondTrust Remote Support ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-16 · First collected 2026-10-24

• DSA-6568-1 linux - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-16 · First collected 2026-10-24

• IBM WebSphere Products Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-15 · First collected 2026-10-24

• CISA Adds One Known Exploited Vulnerability to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-09-29 · First collected 2026-10-24

• Vulnerabilities in F&F Filipowski mH-DEVELOPER devices ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-28 · First collected 2026-10-24

• GitLab Path Traversal vulnerability ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - Threat Signal Report · Published 2026-09-25 · First collected 2026-10-24

• Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-09-24 · First collected 2026-10-24

• CVE-2026-0295 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-09-12 · First collected 2026-10-24

• Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review ↗ (opens in a new tab)

  Vulnerabilities and Threat Research – Qualys Security Blog · Published 2026-09-08 · First collected 2026-10-24

• FreeBSD-EN-26:20.microcode ↗ (opens in a new tab)

  FreeBSD security · Published 2026-08-25 · First collected 2026-10-24

• GLSA 202608-23: Incus: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-25 · First collected 2026-10-24

• Aimy Captcha-Less Form Guard: The Anti-Bot Plugin That Hands Bots the Keys ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-07-30 · First collected 2026-10-24

• Needle in a haystack: measuring the impact of two nginx RCEs ↗ (opens in a new tab)

  Calif · Published 2026-05-29 · First collected 2026-10-24

• Micropatches released for Windows Shell Link Processing Spoofing Vulnerability (CVE-2026-25185) ↗ (opens in a new tab)

  0patch Blog · Published 2026-05-24 · First collected 2026-10-24

• ERNW White Paper 77: Unified Security Hardening with Cross-Platform Native Binaries ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-05-20 · First collected 2026-10-24

• World-first NCSC-engineered device secures vulnerable display links ↗ (opens in a new tab)

  UK NCSC News · Published 2026-04-22 · First collected 2026-10-24

• How to Start Contributing to Metasploit: Field Notes from 68 Modules ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-04-16 · First collected 2026-10-24

• Digilent DASYLab DSA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-03-30 · First collected 2026-10-24

• ESP-IDF setup guide - elttam ↗ (opens in a new tab)

  elttam · Published 2026-03-24 · First collected 2026-10-24

• A Beginners Guide: Cross-Device Passkeys ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-02-03 · First collected 2026-10-24

• SonicWall SMA100 Potential Exposure of Sensitive Information in Log File ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2025-10-30 · First collected 2026-10-24

• Red Hat build of MicroShift 4.22.20: CVSS (Max): 6.8 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-26 · First collected 2026-10-27

• OpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile fi... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-27

• RHSA-2026:90327: Important: python-lxml security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-26

• Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image ↗ (opens in a new tab)

  The Hacker News · Published 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans les produits IBM (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• ISC BIND security advisory (AV26-1072) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-21 · First collected 2026-10-24

• Security Alert (A26-10-35): Multiple Vulnerabilities in FireFox ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-21 · First collected 2026-10-24

• Risolte vulnerabilità in Stormshield Network Security ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-20 · First collected 2026-10-24