Security briefing · Archive
Vulnerabilities & fixes · Archive
Browse collected headlines by topic and follow links to the original publishers.
Vulnerabilities & fixes
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Akamai Joins Athena Coalition to Shield Users from New Vulnerabilities ↗ (opens in a new tab)
CISA Adds One Known Exploited Vulnerability to Catalog ↗ (opens in a new tab)
Multiple Vulnerabilities in Cisco Secure Email Products Could Allow for Remote Code Execution ↗ (opens in a new tab)
CVE-2026-0303 Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File (Severity: LOW) ↗ (opens in a new tab)
Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information ↗ (opens in a new tab)
Critical vulnerabilities in MikroTik RouterOS are being actively exploited. Immediate update recommended ↗ (opens in a new tab)
Manufacturers – prepare in advance for reporting vulnerabilities and incidents under the Cyber Resilience Act ↗ (opens in a new tab)
FreeBSD-SA-26:56.hwpmc ↗ (opens in a new tab)
GLSA 202608-14: X.Org X server, XWayland: Multiple Vulnerabilities ↗ (opens in a new tab)
Copy Fail and Its Descendants: A Real Human's Guide to Kernel Page-Cache LPEs ↗ (opens in a new tab)
Reverse Engineering the ITE 8910 Keyboard RGB Protocol for OpenRGB ↗ (opens in a new tab)
Fuze Multi-Card Technology Security Review - elttam ↗ (opens in a new tab)
Vulnerabilities in Broadcom VMware Aria Operations: Privilege Escalation (CVE-2025-41245 / CVE-2026-22721) ↗ (opens in a new tab)
Micropatches released for Microsoft Access Remote Code Execution Vulnerability (CVE-2025-62552) ↗ (opens in a new tab)
Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability ↗ (opens in a new tab)
net: au1000: move setting of netops to fix crashIn the Linux kernel, the foll... ↗ (opens in a new tab)
libXi: CVSS (Max): 6.5 ↗ (opens in a new tab)
RHSA-2026:90501: Important: brotli security update ↗ (opens in a new tab)
Multiples vulnérabilités dans le noyau Linux d'Ubuntu (23 octobre 2026) ↗ (opens in a new tab)
Google Chrome security advisory (AV26-1069) ↗ (opens in a new tab)
Security Alert (A26-10-34): Multiple Vulnerabilities in Microsoft Edge ↗ (opens in a new tab)
NCSC-2026-0432 [1.00] [M/H] Kwetsbaarheden verholpen in HPE Brocade Fabric OS ↗ (opens in a new tab)
[SYSS-2026-077]: dcm4che - Path Traversal (CWE-22) ↗ (opens in a new tab)
Palo Alto Products Multiple Vulnerabilities ↗ (opens in a new tab)
DSA-6562-1 chromium - security update ↗ (opens in a new tab)
Cisco Finesse Server-Side Request Forgery Vulnerability ↗ (opens in a new tab)
CISA Adds One Known Exploited Vulnerability to Catalog ↗ (opens in a new tab)
Multiple Vulnerabilities in Mikrotik Routers Could Allow for Admin Hijacking ↗ (opens in a new tab)
CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing (Severity: HIGH) ↗ (opens in a new tab)
Uncontrolled Resource Consumption in SNMP ↗ (opens in a new tab)