Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Open Redirect on FortiSIEM ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-09-08 · First collected 2026-10-24

• Vulnerabilities in Mikrotik RouterOS software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-05 · First collected 2026-10-24

• FreeBSD-SA-26:57.unix ↗ (opens in a new tab)

  FreeBSD security · Published 2026-08-25 · First collected 2026-10-24

• GLSA 202608-15: PostgreSQL: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-17 · First collected 2026-10-24

• From Canary Intelligence to C2 - Mapping an Attack Fleet with Target Intelligence ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-06-12 · First collected 2026-10-24

• How I Added PTY Support to Busybox Shells (When Everyone Said It Was Impossible) ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-04-01 · First collected 2026-10-24

• New Method to Leverage Unsafe Reflection and Deserialisation to RCE on Rails - elttam ↗ (opens in a new tab)

  elttam · Published 2026-03-24 · First collected 2026-10-24

• Micropatches released for Desktop Windows Manager Elevation of Privilege Vulnerability (CVE-2025-55681) ↗ (opens in a new tab)

  0patch Blog · Published 2026-03-22 · First collected 2026-10-24

• Assessing Endpoint Protection: Our Approach to EDR/XDR and Supplements Evaluation ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-03-19 · First collected 2026-10-24

• Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-02-12 · First collected 2026-10-24

• The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-28 · First collected 2026-10-28

• Google Chrome: CVSS (Max): None ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-27 · First collected 2026-10-28

• RHSA-2026:90513: Important: ignition security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-27

• Multiples vulnérabilités dans le noyau Linux de Debian LTS (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• PHP security advisory (AV26-1070) - Update 1 ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-21 · First collected 2026-10-24

• High Threat Security Alert (A26-10-31): Multiple Vulnerabilities in Oracle Products (October 2026) ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0431 [1.00] [M/H] Kwetsbaarheden verholpen in IBM DataPower Gateway en onderliggende componenten ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-16 · First collected 2026-10-24

• [SYSS-2026-078]: dcm4che - Path Traversal (CWE-22) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-15 · First collected 2026-10-24

• Mozilla Products Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-15 · First collected 2026-10-24

• DSA-6563-1 mutt - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-15 · First collected 2026-10-24

• CVE-2026-21589: Critical Arbitrary File Read Vulnerability in Atlassian Products ↗ (opens in a new tab)

  Akamai Blog · Published 2026-10-07 · First collected 2026-10-24

• Cisco NX-OS Software Python Sandbox Escape Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-07 · First collected 2026-10-24

• CISA Adds One Known Exploited Vulnerability to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-09-21 · First collected 2026-10-24

• Multiple Vulnerabilities in Cisco Secure Email Products Could Allow for Remote Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-09-15 · First collected 2026-10-24

• CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File (Severity: LOW) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-09-09 · First collected 2026-10-24

• Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-09-08 · First collected 2026-10-24

• Critical vulnerabilities in MikroTik RouterOS are being actively exploited. Immediate update recommended ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-05 · First collected 2026-10-24

• Manufacturers – prepare in advance for reporting vulnerabilities and incidents under the Cyber Resilience Act ↗ (opens in a new tab)

  NCSC-FI news · Published 2026-08-28 · First collected 2026-10-24

• FreeBSD-SA-26:56.hwpmc ↗ (opens in a new tab)

  FreeBSD security · Published 2026-08-25 · First collected 2026-10-24

• GLSA 202608-14: X.Org X server, XWayland: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-17 · First collected 2026-10-24