Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-07 · First collected 2026-10-24

• CISA Adds Two Known Exploited Vulnerabilities to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-09-16 · First collected 2026-10-24

• GLSA 202608-10: HTTP-Daemon: Improper header handling ↗ (opens in a new tab)

  Gentoo security · Published 2026-08-14 · First collected 2026-10-24

• HTTP/2 Bomb CVE-2026-49975 ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-08-12 · First collected 2026-10-24

• FreeBSD-SA-26:54.sysvsem ↗ (opens in a new tab)

  FreeBSD security · Published 2026-07-29 · First collected 2026-10-24

• Gotchas in Email Parsing - Lessons From Jakarta Mail - elttam ↗ (opens in a new tab)

  elttam · Published 2026-03-24 · First collected 2026-10-24

• CVE-2026-27743 through CVE-2026-27747: Five Vulnerabilities in SPIP Plugins ↗ (opens in a new tab)

  Chocapikk's Cybersecurity Blog · Published 2026-02-24 · First collected 2026-10-24

• Schneider Electric EcoStruxure Power Build SSD File Parsing Use-After-Free Remote Code Execution Vulnerability ↗ (opens in a new tab)

  Vulnerability Research & Exploit Development on TecSecurity Research · Published 2026-02-12 · First collected 2026-10-24

• [Màj] Multiples vulnérabilités dans PHP (21 octobre 2026) ↗ (opens in a new tab)

  CERT-FR alerts · Published 2026-10-21 · First collected 2026-10-24

• Gitea security advisory (AV26-845) - Update 1 ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-20 · First collected 2026-10-24

• CISA Adds One Known Exploited Vulnerability to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-09-14 · First collected 2026-10-24

• Broken access control in the RADIUS type admin group ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-08-12 · First collected 2026-10-24

• [Màj] Multiples vulnérabilités dans PHP (21 octobre 2026) ↗ (opens in a new tab)

  CERT-FR alerts · Published 2026-10-21 · First collected 2026-10-26

• CISA Adds Three Known Exploited Vulnerabilities to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-09-11 · First collected 2026-10-24

• Content-Encoding WAF Evasion ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-08-12 · First collected 2026-10-24

• Vulnérabilité dans Ivanti Connect Secure (ICS) (14 octobre 2026) ↗ (opens in a new tab)

  CERT-FR alerts · Published 2026-10-14 · First collected 2026-10-24

• A Tale of Two SOCs: Insights From Two Red Team Assessments ↗ (opens in a new tab)

  CISA alerts · Published 2026-08-20 · First collected 2026-10-24

• FGFM Authentication Weakening via CLI Configuration ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-08-12 · First collected 2026-10-24

• Vulnérabilité dans Ivanti Connect Secure (ICS) (14 octobre 2026) ↗ (opens in a new tab)

  CERT-FR alerts · Published 2026-10-14 · First collected 2026-10-26

• Defending Against an Active Threat to Siemens S7 Series PLCs ↗ (opens in a new tab)

  CISA alerts · Published 2026-08-14 · First collected 2026-10-24

• Heap overflow in kernel driver due to missing size validation ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-08-12 · First collected 2026-10-24

• Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération (12 octobre 2026) ↗ (opens in a new tab)

  CERT-FR alerts · Published 2026-10-12 · First collected 2026-10-24

• Server-Side Request Forgery (SSRF) ↗ (opens in a new tab)

  FortiGuard Labs | FortiGuard Center - IR Advisories · Published 2026-08-12 · First collected 2026-10-24

• #StopRansomware: Gunra Ransomware ↗ (opens in a new tab)

  CISA alerts · Published 2026-08-05 · First collected 2026-10-24

• Incident de sécurité ciblant les contrôleurs à distance des installations de réfrigération (12 octobre 2026) ↗ (opens in a new tab)

  CERT-FR alerts · Published 2026-10-12 · First collected 2026-10-26

• Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite ↗ (opens in a new tab)

  CISA alerts · Published 2026-07-21 · First collected 2026-10-24

• Multiples vulnérabilités dans Citrix NetScaler ADC et Gateway (28 septembre 2026) ↗ (opens in a new tab)

  CERT-FR alerts · Published 2026-09-28 · First collected 2026-10-24

• Defending Against China-Nexus Covert Networks of Compromised Devices ↗ (opens in a new tab)

  CISA alerts · Published 2026-04-21 · First collected 2026-10-24

• Multiples vulnérabilités dans Citrix NetScaler ADC et Gateway (28 septembre 2026) ↗ (opens in a new tab)

  CERT-FR alerts · Published 2026-09-28 · First collected 2026-10-26

• Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure ↗ (opens in a new tab)

  CISA alerts · Published 2026-04-06 · First collected 2026-10-24