Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• SonicWall NSM On-Prem Affected By Multiple Vulnerabilities ↗ (opens in a new tab)

  SonicWall PSIRT · Published 2026-10-14 · First collected 2026-10-24

• Patchtisdag oktober 2026 ↗ (opens in a new tab)

  CERT-SE news · Published 2026-10-14 · First collected 2026-10-24

• Security Alert: Microsoft Releases October 2026 Security Updates ↗ (opens in a new tab)

  JPCERT news · Published 2026-10-14 · First collected 2026-10-24

• Microsoft patchetirsdag oktober 2026 ↗ (opens in a new tab)

  NSM NCSC news · Published 2026-10-13 · First collected 2026-10-24

• Power Grid Model Security Audit ↗ (opens in a new tab)

  Blog on Shielder · Published 2026-10-13 · First collected 2026-10-24

• Changes to the Chrome VRP ↗ (opens in a new tab)

  Security Engineering Blog · Published 2026-10-13 · First collected 2026-10-24

• Messaging App Vulnerabilities | GlitchChat ↗ (opens in a new tab)

  Corellium Blog · Published 2026-10-12 · First collected 2026-10-24

• Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) ↗ (opens in a new tab)

  watchTowr Labs · Published 2026-10-09 · First collected 2026-10-24

• This Shit is Hard: Building a vulnerability database from private reports ↗ (opens in a new tab)

  Chainguard: Unchained · Published 2026-10-08 · First collected 2026-10-24

• QSB-120: Two CTAP proxy vulnerabilities ↗ (opens in a new tab)

  Qubes OS · Published 2026-10-08 · First collected 2026-10-24

• go2shell: Rooting Home Assistant through SSDP ↗ (opens in a new tab)

  McCaulay · Published 2026-10-07 · First collected 2026-10-24

• Token Theft in Microsoft Entra ID (Part 3 of 4): Token Protection ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-10-05 · First collected 2026-10-24

• The Year the Vulnerability Backlog Changed Shape ↗ (opens in a new tab)

  From the Frog's mouth - JFrog Blog · Published 2026-10-02 · First collected 2026-10-24

• ByteRay finds and fixes eight vulnerabilities in U-Boot ↗ (opens in a new tab)

  ByteRay Blog · Published 2026-10-02 · First collected 2026-10-24

• kqx_farm - TORX CTF 2026 ↗ (opens in a new tab)

  kqx · Published 2026-09-30 · First collected 2026-10-24

• Paint It Blue: Reversing Win32k's Callbacks ↗ (opens in a new tab)

  Ido Veltzman :: Security Research · Published 2026-09-28 · First collected 2026-10-24

• Swarming Against Citrix 0-Day Exploitation ↗ (opens in a new tab)

  The GreyNoise Blog · Published 2026-09-28 · First collected 2026-10-24

• Ford Mustang Shelby GT500 Code Injection ↗ (opens in a new tab)

  Zeyad Azima · Published 2026-09-27 · First collected 2026-10-24

• From Debugging to Code Execution: RCE in Microsoft DevLabs’ DebugMCP? ↗ (opens in a new tab)

  Imperva Blog · Published 2026-09-25 · First collected 2026-10-24

• ZDI-CAN-33033 - OpenPrinting Vulnerability (Upcoming) ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-09-25 · First collected 2026-10-24

• Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications ↗ (opens in a new tab)

  Bishopfox · Published 2026-09-24 · First collected 2026-10-24

• ATT&CKing TACACS+ to Pwn Your Network via a Pre-Auth RCE - elttam ↗ (opens in a new tab)

  elttam · Published 2026-09-23 · First collected 2026-10-24

• Part 2/6 | Breaking the Postgres Superuser Guardrails: Attacking Security-Hardening Extensions |Systemic Risks in the Managed PostgreSQL Industry ↗ (opens in a new tab)

  Mehmet Ince @mdisec – Vulnerability Researcher | Building security products | Security Advisor | Amateur Muay Thai fighter · Published 2026-09-23 · First collected 2026-10-24

• Spraying in the Andes: TeamFiltration Returns to Exploit Forgotten Service Accounts ↗ (opens in a new tab)

  Proofpoint Threat Insight · Published 2026-09-22 · First collected 2026-10-24

• TSUBAME Report Overflow (Apr-Jun 2026) ↗ (opens in a new tab)

  JPCERT advisories · Published 2026-09-18 · First collected 2026-10-24

• A unified view of Android security updates for enterprises and OEMs ↗ (opens in a new tab)

  Google Security · Published 2026-09-17 · First collected 2026-10-24

• How I Tricked OpenClaw Into Attacking Its Own Network: A NAT64 SSRF Bypass ↗ (opens in a new tab)

  InfoSec Write-ups - Medium · Published 2026-09-17 · First collected 2026-10-24

• Fancy Bear group exploits Outlook and WinRAR flaws in mass credential collection... ↗ (opens in a new tab)

  Cyber Security Hub News · Published 2026-09-16 · First collected 2026-10-24

• One Router, Three Vulnerabilities: Security Research on the TOTOLINK A720R ↗ (opens in a new tab)

  Hacktive Security · Published 2026-09-16 · First collected 2026-10-24

• CISA KEV Alert: Cisco, Citrix, and Fortinet Vulnerabilities Under Active Exploitation ↗ (opens in a new tab)

  Resecurity · Published 2026-09-11 · First collected 2026-10-24