Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Cisco security advisory (AV26-1073) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-21 · First collected 2026-10-24

• Security Alert (A26-10-34): Multiple Vulnerabilities in Microsoft Edge ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0434 [1.00] [M/H] Kwetsbaarheden verholpen in Fortinet FortiSIEM ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-16 · First collected 2026-10-24

• Google Chrome Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-16 · First collected 2026-10-24

• DSA-6566-1 expat - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-16 · First collected 2026-10-24

• VestaCP root RCE (VESTACP-2026-001) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-15 · First collected 2026-10-24

• Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-13 · First collected 2026-10-24

• CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-09-25 · First collected 2026-10-24

• Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-09-23 · First collected 2026-10-24

• Vulnerabilities in Alior Bank "raty" module for PrestaShop ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-14 · First collected 2026-10-24

• CVE-2026-0308 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-09-09 · First collected 2026-10-24

• JWT used for authentication in web GUI signed with static key ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-09-08 · First collected 2026-10-24

• FreeBSD-SA-26:59.mac_do ↗ (opens in a new tab)

  FreeBSD security · Published 2026-08-25 · First collected 2026-10-24

• GLSA 202608-17: libssh2: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-20 · First collected 2026-10-24

• NVIDIA GEN3C: Unauthenticated RCE via Pickle Deserialization in the Inference API ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-06-25 · First collected 2026-10-24

• Windfall: From Path Traversal to RCE in Nextcloud Flow & Windmill ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-04-06 · First collected 2026-10-24

• Micropatches released for Windows Storage Elevation of Privilege Vulnerability (CVE-2026-21508) ↗ (opens in a new tab)

  0patch Blog · Published 2026-03-30 · First collected 2026-10-24

• Methodology for Assessing Kubernetes Namespace-Based Multi-Tenancy Setups ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-03-26 · First collected 2026-10-24

• ORM Leaking More Than You Joined For - elttam ↗ (opens in a new tab)

  elttam · Published 2026-03-24 · First collected 2026-10-24

• Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-02-12 · First collected 2026-10-24

• If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-S... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-28 · First collected 2026-10-28

• Linux Kernel: CVSS (Max): 9.9* ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-27 · First collected 2026-10-28

• RHSA-2026:90519: Important: ignition security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-27 · First collected 2026-10-27

• Multiples vulnérabilités dans les produits Red Hat (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• ISC BIND security advisory (AV26-1072) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-21 · First collected 2026-10-24

• Security Alert (A26-10-33): Multiple Vulnerabilities in F5 Products ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0433 [1.00] [M/H] Kwetsbaarheden verholpen in IBM Guardium Data Protection ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-16 · First collected 2026-10-24

• DSA-6565-1 spip - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-16 · First collected 2026-10-24

• [SYSS-2026-080]: dcm4che - Path Traversal (CWE-22) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-15 · First collected 2026-10-24

• Cisco Secure Email Gateway Remote Code Execution Vulnerability ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-15 · First collected 2026-10-24