Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• NCSC-2026-0435 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe ColdFusion ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-16 · First collected 2026-10-24

• DSA-6566-1 expat - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-16 · First collected 2026-10-24

• Cisco Secure Email Gateway Remote Code Execution Vulnerability ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-15 · First collected 2026-10-24

• Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-14 · First collected 2026-10-24

• Citrix NetScaler vulnerabilities exploited in Finland ↗ (opens in a new tab)

  NCSC-FI news · Published 2026-10-01 · First collected 2026-10-24

• Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway ↗ (opens in a new tab)

  CISA current activity · Published 2026-09-27 · First collected 2026-10-24

• Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-09-23 · First collected 2026-10-24

• Vulnerabilities in WNC T-Mobile 5G Box IDU routers ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-16 · First collected 2026-10-24

• CVE-2026-0298 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-09-12 · First collected 2026-10-24

• Broken Access control on Websocket streams ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-09-08 · First collected 2026-10-24

• FreeBSD-SA-26:62.tty ↗ (opens in a new tab)

  FreeBSD security · Published 2026-08-25 · First collected 2026-10-24

• GLSA 202608-20: acl, attr: Multiple vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-20 · First collected 2026-10-24

• Microsoft and Adobe Patch Tuesday, August 2026 Security Update Review ↗ (opens in a new tab)

  Vulnerabilities and Threat Research – Qualys Security Blog · Published 2026-08-11 · First collected 2026-10-24

• WP2Shell Vulnerabilities: CVE-2026-60137 and CVE-2026-63030 ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-07-17 · First collected 2026-10-24

• Micropatches released for Windows Telephony Service Elevation of Privilege Vulnerability (CVE-2026-20931) ↗ (opens in a new tab)

  0patch Blog · Published 2026-04-21 · First collected 2026-10-24

• Disclosure: Command Injection in Geutebrück Cameras ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-04-16 · First collected 2026-10-24

• CeWL Is Dead. Here's What Replaces It. ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-04-13 · First collected 2026-10-24

• APT28 exploit routers to enable DNS hijacking operations ↗ (opens in a new tab)

  UK NCSC News · Published 2026-04-07 · First collected 2026-10-24

• plORMbing your Prisma ORM with Time-based Attacks - elttam ↗ (opens in a new tab)

  elttam · Published 2026-03-24 · First collected 2026-10-24

• Autodesk AutoCAD MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-02-18 · First collected 2026-10-24

• Google's Commitment to a Quantum-Safe Future: Why PQC is Google's Path forward and not QKD ↗ (opens in a new tab)

  Security Engineering Blog · Published 2025-12-01 · First collected 2026-10-24

• IBM Integration Bus: CVSS (Max): 9.2 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-27 · First collected 2026-10-27

• SourceCodester Online Food Ordering System order.php client-side enforcement ... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-27 · First collected 2026-10-27

• RHSA-2026:89890: Moderate: kernel security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-27

• Multiples vulnérabilités dans les produits HPE Aruba Networking (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-26

• PHP security advisory (AV26-1070) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-21 · First collected 2026-10-24

• Security Alert (A26-10-33): Multiple Vulnerabilities in F5 Products ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0434 [1.00] [M/H] Kwetsbaarheden verholpen in Fortinet FortiSIEM ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-16 · First collected 2026-10-24

• DSA-6565-1 spip - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-16 · First collected 2026-10-24

• IBM WebSphere Products Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-15 · First collected 2026-10-24