Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Vulnerability in OptimiDoc Server (On-Premise) software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-03 · First collected 2026-10-24

• GLSA 202608-13: NTFS-3G: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-16 · First collected 2026-10-24

• ClamAV 1.5.4 and 1.4.6 security patch versions published ↗ (opens in a new tab)

  ClamAV® blog · Published 2026-08-07 · First collected 2026-10-24

• FreeBSD-EN-26:19.zfs ↗ (opens in a new tab)

  FreeBSD security · Published 2026-07-29 · First collected 2026-10-24

• Helping Federal Agencies Meet CISA’s Accelerated Remediation Timelines outlined in CISA BOD 26-04 ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-06-10 · First collected 2026-10-24

• Hacking with Environment Variables - elttam ↗ (opens in a new tab)

  elttam · Published 2026-03-24 · First collected 2026-10-24

• OmniGen2: Unauthenticated RCE via Pickle Deserialization in BAAI's Reward Server ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-03-17 · First collected 2026-10-24

• Hacking a Bluetooth Printer Server: GATT to UART Adapter? ↗ (opens in a new tab)

  Insinuator.net - Bold Statements · Published 2026-03-12 · First collected 2026-10-24

• Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-02-12 · First collected 2026-10-24

• Micropatches released for Windows Telephony Service Elevation of Privilege Vulnerability (CVE-2024-43626) ↗ (opens in a new tab)

  0patch Blog · Published 2026-02-10 · First collected 2026-10-24

• net: ethoc: move setting of netops to fix crashIn the Linux kernel, the follo... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-28 · First collected 2026-10-28

• libXrender: CVSS (Max): 8.3 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-27 · First collected 2026-10-28

• RHSA-2026:90495: Important: brotli security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-27

• Multiples vulnérabilités dans les produits Papercut (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• SolarWinds security advisory (AV26-1068) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-21 · First collected 2026-10-24

• Security Alert (A26-10-33): Multiple Vulnerabilities in F5 Products ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-21 · First collected 2026-10-24

• NCSC-2026-0431 [1.00] [M/H] Kwetsbaarheden verholpen in IBM DataPower Gateway en onderliggende componenten ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-16 · First collected 2026-10-24

• [0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-15 · First collected 2026-10-24

• DSA-6561-1 sogo - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-14 · First collected 2026-10-24

• Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-07 · First collected 2026-10-24

• CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-09-18 · First collected 2026-10-24

• A Vulnerability in GitLab Could Allow for Disclosure of Sensitive Data ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-09-14 · First collected 2026-10-24

• CVE-2026-0309 PAN-OS: Authenticated Command Injection in CLI with Luna HSM Configuration (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-09-09 · First collected 2026-10-24

• Workflow session email approval process bypass ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-09-08 · First collected 2026-10-24

• Vulnerabilities in dool software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-08-27 · First collected 2026-10-24

• GLSA 202608-12: Portage: Multiple Vulnerabilities ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-15 · First collected 2026-10-24

• FreeBSD-EN-26:18.tzdata ↗ (opens in a new tab)

  FreeBSD security · Published 2026-07-29 · First collected 2026-10-24

• ClamAV 1.5.3 and 1.4.5 security patch versions published ↗ (opens in a new tab)

  ClamAV® blog · Published 2026-07-01 · First collected 2026-10-24

• Observations on Anthropic’s Vulnerability Disclosure Ledger ↗ (opens in a new tab)

  VulnCheck Blog · Published 2026-06-09 · First collected 2026-10-24

• Golang code review notes - elttam ↗ (opens in a new tab)

  elttam · Published 2026-03-24 · First collected 2026-10-24