Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• NCSC-2026-0436 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Commerce ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-16 · First collected 2026-10-24

• DSA-6567-1 cifs-utils - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-16 · First collected 2026-10-24

• Cisco Meraki Security Hardening Release: October 2026 ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-15 · First collected 2026-10-24

• Mozilla Products Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-15 · First collected 2026-10-24

• CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-09-27 · First collected 2026-10-24

• Multiple Vulnerabilities in IBM Concert Software Could Allow for Remote Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-09-24 · First collected 2026-10-24

• Vulnerability in WEBCON BPS software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-23 · First collected 2026-10-24

• CVE-2026-0299 GlobalProtect App: Local Privilege Escalation Vulnerabilities (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-09-12 · First collected 2026-10-24

• Arbitrary process termination from exposed minifilter communication port ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-09-08 · First collected 2026-10-24

• FreeBSD-SA-26:63.posixshm ↗ (opens in a new tab)

  FreeBSD security · Published 2026-08-25 · First collected 2026-10-24

• GLSA 202608-22: needrestart: Multiple vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-24 · First collected 2026-10-24

• Oracle Critical Patch Update, August 2026 Security Update Review ↗ (opens in a new tab)

  Vulnerabilities and Threat Research – Qualys Security Blog · Published 2026-08-19 · First collected 2026-10-24

• VulnCheck State of Exploitation 1H-2026 ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-07-28 · First collected 2026-10-24

• ERNW Whitepaper 76: Linux Client Hardening Guide ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-05-19 · First collected 2026-10-24

• Micropatches released for Windows Accessibility Infrastructure Elevation of Privilege Vulnerability (CVE-2026-24291, CVE-2026-25186, CVE-2026-25187) ↗ (opens in a new tab)

  0patch Blog · Published 2026-05-18 · First collected 2026-10-24

• First public macOS kernel memory corruption exploit on Apple M5 ↗ (opens in a new tab)

  Calif · Published 2026-05-14 · First collected 2026-10-24

• Cyber chief: UK faces "perfect storm" for cyber security ↗ (opens in a new tab)

  UK NCSC News · Published 2026-04-21 · First collected 2026-10-24

• Your .swp Files Are Telling on You: A Git Forensics Guide ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-04-15 · First collected 2026-10-24

• plORMbing your Django ORM - elttam ↗ (opens in a new tab)

  elttam · Published 2026-03-24 · First collected 2026-10-24

• Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-02-18 · First collected 2026-10-24

• The Evolution of FIDO Experiences on Android ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-01-27 · First collected 2026-10-24

• runc: CVSS (Max): None ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-26 · First collected 2026-10-27

• OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript TemplateOpen... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-26 · First collected 2026-10-27

• RHSA-2026:89933: Important: delve security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-27

• Vulnérabilité dans Mattermost Server (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-26

• Oracle Corporation security advisory (AV26-1071) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-21 · First collected 2026-10-24

• Security Alert (A26-10-34): Multiple Vulnerabilities in Microsoft Edge ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-21 · First collected 2026-10-24

• Vulnerabilità in MongoDB ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-20 · First collected 2026-10-24

• NCSC-2026-0435 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe ColdFusion ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-16 · First collected 2026-10-24

• DSA-6566-1 expat - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-16 · First collected 2026-10-24