Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Cisco NX-OS Software NX-API Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-08 · First collected 2026-10-24

• Citrix NetScaler vulnerabilities exploited in Finland ↗ (opens in a new tab)

  NCSC-FI news · Published 2026-10-01 · First collected 2026-10-24

• CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-09-24 · First collected 2026-10-24

• A Vulnerability in F5 BIG-IP Access Policy Manager Could Allow for Remote Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-09-23 · First collected 2026-10-24

• Vulnerability in drEryk Gabinet software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-10 · First collected 2026-10-24

• CVE-2026-0304 Cortex XDR Broker VM: Privilege Escalation Vulnerability (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-09-09 · First collected 2026-10-24

• Null Pointer Dereference in Log Report ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-09-08 · First collected 2026-10-24

• FreeBSD-SA-26:58.sound ↗ (opens in a new tab)

  FreeBSD security · Published 2026-08-25 · First collected 2026-10-24

• GLSA 202608-16: nginx: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-17 · First collected 2026-10-24

• CVE-2026-28496 - FOSSBilling Auth Bypass and Twig SSTI to Unauthenticated RCE ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-06-23 · First collected 2026-10-24

• From Zero to Exploit Dev: What Actually Worked ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-04-03 · First collected 2026-10-24

• Micropatches released for Arbitrary Registry Key Delete As Local System With Consolidator Scheduled Task (CVE-2025-59512) ↗ (opens in a new tab)

  0patch Blog · Published 2026-03-29 · First collected 2026-10-24

• Security Considerations on Istio’s CRDs with Namespace-based Multi-Tenancy ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-03-25 · First collected 2026-10-24

• Lua SUID Shells - elttam ↗ (opens in a new tab)

  elttam · Published 2026-03-24 · First collected 2026-10-24

• Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-02-12 · First collected 2026-10-24

• Postie <= 1.9.87 - Unauthenticated Stored Cross-Site Scripting via Email Body... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-28 · First collected 2026-10-28

• libsoup: CVSS (Max): 8.6 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-27 · First collected 2026-10-28

• RHSA-2026:90514: Important: ignition security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-27

• Multiples vulnérabilités dans le noyau Linux de Debian (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Oracle Corporation security advisory (AV26-1071) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-21 · First collected 2026-10-24

• Security Alert (A26-10-32): Multiple Vulnerabilities in Google Chrome ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0432 [1.00] [M/H] Kwetsbaarheden verholpen in HPE Brocade Fabric OS ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-16 · First collected 2026-10-24

• [SYSS-2026-079]: dcm4che - Path Traversal (CWE-22) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-15 · First collected 2026-10-24

• IBM WebSphere Products Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-15 · First collected 2026-10-24

• DSA-6564-1 jpeg-xl - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-15 · First collected 2026-10-24

• Cisco Advance Notification for Publication of October 7, 2026, Security Advisories ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-07 · First collected 2026-10-24

• Critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway products, several intrusions in Finland ↗ (opens in a new tab)

  NCSC-FI news · Published 2026-10-01 · First collected 2026-10-24

• CISA Adds Four Known Exploited Vulnerabilities to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-09-22 · First collected 2026-10-24

• Multiple Vulnerabilities in Oracle Products Could Allow for Arbitrary Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-09-17 · First collected 2026-10-24

• CVE-2026-0305 Prisma Access Agent: Information Disclosure Vulnerability on Linux (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-09-09 · First collected 2026-10-24