Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• sglang: Unauthenticated RCE via Pickle Deserialization in ZMQ Transport (Disaggregated Serving) ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-03-17 · First collected 2026-10-24

• Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-02-12 · First collected 2026-10-24

• Micropatches released for Microsoft Excel Remote Code Execution Vulnerability (CVE-2025-62203) ↗ (opens in a new tab)

  0patch Blog · Published 2026-02-02 · First collected 2026-10-24

• net: ethernet: aeroflex: move setting of netops to fix crashIn the Linux kern... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-28 · First collected 2026-10-28

• yggdrasil: CVSS (Max): 7.5 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-27 · First collected 2026-10-28

• RHSA-2026:90494: Important: python-urllib3 security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-27

• Multiples vulnérabilités dans les produits IBM (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Security Alert (A26-10-32): Multiple Vulnerabilities in Google Chrome ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-21 · First collected 2026-10-24

• Craft CMS security advisory (AV26-1067) ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-20 · First collected 2026-10-24

• NCSC-2026-0430 [1.00] [M/H] Kwetsbaarheden verholpen in Juniper Networks Junos OS ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-16 · First collected 2026-10-24

• [0day-rubbish] South River Technologies Titan MFT Server 26.0.0 first-run administrator setup chained to job post-command injection, NT AUTHORITY\SYSTEM (8.1) ↗ (opens in a new tab)

  Full Disclosure · Published 2026-10-15 · First collected 2026-10-24

• DSA-6560-1 firefox-esr - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-14 · First collected 2026-10-24

• Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-07 · First collected 2026-10-24

• CISA Adds One Known Exploited Vulnerability to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-09-16 · First collected 2026-10-24

• Multiple Vulnerabilities in Ivanti Products Could Allow for Arbitrary Code Execution ↗ (opens in a new tab)

  Cyber Security Advisories - MS-ISAC · Published 2026-09-10 · First collected 2026-10-24

• CVE-2026-0306 Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows (Severity: MEDIUM) ↗ (opens in a new tab)

  Palo Alto Security Advisories · Published 2026-09-09 · First collected 2026-10-25

• ZTNA Portal Improper Certificate Validation ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-09-08 · First collected 2026-10-24

• GLSA 202608-11: haveged: Privilege escalation ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-15 · First collected 2026-10-24

• FreeBSD-SA-26:55.elf ↗ (opens in a new tab)

  FreeBSD security · Published 2026-07-29 · First collected 2026-10-24

• EFF secure messaging scorecard review - elttam ↗ (opens in a new tab)

  elttam · Published 2026-03-24 · First collected 2026-10-24

• ClamAV 1.5.2 and 1.4.4 security patch versions published ↗ (opens in a new tab)

  ClamAV® blog · Published 2026-03-04 · First collected 2026-10-24

• openDCIM: From SQL Injection to RCE via Config Poisoning ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-02-26 · First collected 2026-10-24

• Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-02-12 · First collected 2026-10-24

• net: ti: icssm-prueth: Move setting of netops to fix crashIn the Linux kernel... ↗ (opens in a new tab)

  CVE: New · Published 2026-10-28 · First collected 2026-10-28

• RHSA-2026:90365: Important: kernel security, bug fix, and enhancement update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-26 · First collected 2026-10-27

• Vulnérabilité dans Mattermost Server (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-26

• High Threat Security Alert (A26-10-31): Multiple Vulnerabilities in Oracle Products (October 2026) ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-21 · First collected 2026-10-24

• Siemens security advisory (AV26-1063) – Update 1 ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-20 · First collected 2026-10-24

• NCSC-2026-0429 [1.00] [H/H] Kwetsbaarheid verholpen in Cisco Secure Email Gateway ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-14 · First collected 2026-10-24

• DSA-6559-1 buildstream - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-14 · First collected 2026-10-24