Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Multiples vulnérabilités dans Microsoft Edge (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Statement regarding critical vulnerabilities in PHP affecting websites and online services ↗ (opens in a new tab)

  Canadian Centre for Cyber Security news · Source updated 2026-10-21 · First collected 2026-10-24

• Critical Remote Code Execution Vulnerabilities in PHP Core ↗ (opens in a new tab)

  Akamai Blog · Published 2026-10-21 · First collected 2026-10-24

• Security Alert (A26-10-35): Multiple Vulnerabilities in FireFox ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-21 · First collected 2026-10-24

• [ROOTEDCON] Call for Papers 2027 · RootedCON2027 (Madrid) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-20 · First collected 2026-10-24

• Microsoft Edge Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-20 · First collected 2026-10-24

• NCSC-2026-0435 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe ColdFusion ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-16 · First collected 2026-10-24

• DSA-6567-1 cifs-utils - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-16 · First collected 2026-10-24

• Cisco Secure Email Gateway Arbitrary File Write Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-14 · First collected 2026-10-24

• CISA Adds One Known Exploited Vulnerability to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-09-25 · First collected 2026-10-24

• Multiple Vulnerabilities in IBM Concert Software Could Allow for Remote Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-09-24 · First collected 2026-10-24

• Vulnerabilities in WNC T-Mobile 5G Box IDU routers ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-16 · First collected 2026-10-24

• CVE-2026-0296 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-09-12 · First collected 2026-10-24

• Improper Authentication of FortiPAM Server ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-09-08 · First collected 2026-10-24

• FreeBSD-SA-26:60.ppp ↗ (opens in a new tab)

  FreeBSD security · Published 2026-08-25 · First collected 2026-10-24

• GLSA 202608-18: GNU Emacs: Arbitrary code execution ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-20 · First collected 2026-10-24

• Microsoft and Adobe Patch Tuesday, August 2026 Security Update Review ↗ (opens in a new tab)

  Vulnerabilities and Threat Research – Qualys Security Blog · Published 2026-08-11 · First collected 2026-10-24

• Monsta FTP: An SSRF Blocklist That Forgot IPv6 Exists ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-07-14 · First collected 2026-10-24

• Micropatches released for Windows Shell Security Feature Bypass Vulnerability (CVE-2026-21510) ↗ (opens in a new tab)

  0patch Blog · Published 2026-04-13 · First collected 2026-10-24

• Dumping PostgreSQL Without Credentials: Heap File Parsing for Offensive Security ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-04-06 · First collected 2026-10-24

• KubeCon + CloudNativeCon Europe 2026 ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-04-01 · First collected 2026-10-24

• Remote LD_PRELOAD Exploitation - elttam ↗ (opens in a new tab)

  elttam · Published 2026-03-24 · First collected 2026-10-24

• Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-02-12 · First collected 2026-10-24

• New Vulnerability Monitoring Service (VMS) from GDS now available in MyNCSC ↗ (opens in a new tab)

  UK NCSC guidance · Published 2025-12-03 · First collected 2026-10-24

• ESCAL8 2025: Gathering Cybersecurity Expertise in Mexico City ↗ (opens in a new tab)

  Security Engineering Blog · Published 2025-11-07 · First collected 2026-10-24

• Avada (Fusion) Builder <= 3.16.2 - Authenticated (Contributor+) Stored Cross-... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-28 · First collected 2026-10-28

• Linux Kernel: CVSS (Max): 9.9 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-27 · First collected 2026-10-28

• RHSA-2026:90518: Important: ignition security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-27 · First collected 2026-10-27

• Fortinet Releases Security Hardening Release for Multiple Products ↗ (opens in a new tab)

  NCSC Finland Vulnerability Digest · Published 2026-10-24 · First collected 2026-10-24

• Multiples vulnérabilités dans les produits SUSE (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24