Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Detecting and mitigating ZDI-CAN-33367 and five other Linux flaws ↗ (opens in a new tab)

  Sysdig Blog · Published 2026-10-24 · First collected 2026-10-24

• Senior CISA official departs agency amid vulnerability tracking challenges ↗ (opens in a new tab)

  SC Media · Published 2026-10-23 · First collected 2026-10-24

• Abandoned Popcorn Time app exposed millions of devices to RCE attacks ↗ (opens in a new tab)

  BleepingComputer · Published 2026-10-23 · First collected 2026-10-24

• RHSA-2026:88562: Critical: ca-certificates security update ↗ (opens in a new tab)

  Red Hat Security Advisories · Published 2026-10-23 · First collected 2026-10-24

• AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619 - Update 1 ↗ (opens in a new tab)

  Canadian Centre for Cyber Security advisories · Source updated 2026-10-23 · First collected 2026-10-24

• Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities ↗ (opens in a new tab)

  Cisco Security Advisories · Published 2026-10-23 · First collected 2026-10-24

• PHP Vulnerability Wrap-Up, (Fri, Oct 23rd) ↗ (opens in a new tab)

  SANS Internet Storm Center · Published 2026-10-23 · First collected 2026-10-24

• CC-4880 - eMudhra Intermediate Certificates Compromised ↗ (opens in a new tab)

  Cyber Alert Feed · Published 2026-10-23 · First collected 2026-10-24

• Node.js Patches Brotli Remote Code Execution Flaw: Find Vulnerable Runtimes Before Attackers Do ↗ (opens in a new tab)

  Qualys Security Blog · Published 2026-10-23 · First collected 2026-10-24

• CISA Adds One Known Exploited Vulnerability to Catalog ↗ (opens in a new tab)

  CISA current activity · Published 2026-10-23 · First collected 2026-10-24

• MongoDB: disponibili PoC per numerose vulnerabilità in C# Driver ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-23 · First collected 2026-10-24

• Attackers Exploit Third Arista VCO Zero-Day in Four Months ↗ (opens in a new tab)

  SecurityWeek · Published 2026-10-23 · First collected 2026-10-24

• High Threat Security Alert (A26-10-46): Multiple Vulnerabilities in Microsoft Edge ↗ (opens in a new tab)

  GovCERT.HK news · Published 2026-10-23 · First collected 2026-10-24

• ISC BIND Multiple Vulnerabilities ↗ (opens in a new tab)

  HKCERT news · Published 2026-10-23 · First collected 2026-10-24

• PHP2Shell exposes the weakness in coordinated vulnerability disclosure ↗ (opens in a new tab)

  CSO Online · Published 2026-10-23 · First collected 2026-10-24

• .NET 8.0: CVSS (Max): 9.4 ↗ (opens in a new tab)

  AusCERT advisories · Published 2026-10-23 · First collected 2026-10-24

• DSA-6582-1 brotli - security update ↗ (opens in a new tab)

  Debian security · Published 2026-10-23 · First collected 2026-10-24

• Multiples vulnérabilités dans les produits HPE Aruba Networking (23 octobre 2026) ↗ (opens in a new tab)

  CERT-FR advisories · Published 2026-10-23 · First collected 2026-10-24

• Continuous Penetration Testing Services: What’s Included and How Pricing Works ↗ (opens in a new tab)

  Synack · Published 2026-10-22 · First collected 2026-10-24

• AgentCorruption: AWS Tightened AgentCore's Default Role, Not Yours ↗ (opens in a new tab)

  Secjuice · Published 2026-10-22 · First collected 2026-10-24

• Websites across world hit by millions of attempts to exploit PHP code flaw ↗ (opens in a new tab)

  Data and computer security | The Guardian · Published 2026-10-22 · First collected 2026-10-24

• PHP2Shell Exploit Tooling Found on Exposed Attacker Server ↗ (opens in a new tab)

  SOCRadar® Cyber Intelligence Inc. · Published 2026-10-22 · First collected 2026-10-24

• USN-8953-1: OpenVPN vulnerability ↗ (opens in a new tab)

  Ubuntu security notices · Published 2026-10-22 · First collected 2026-10-24

• Warning: Multiple High Severity Vulnerabilities in Node.js, Patch Immediately! ↗ (opens in a new tab)

  CERT.BE advisories · Published 2026-10-22 · First collected 2026-10-24

• Vulnerability in MTW CleanShot X software ↗ (opens in a new tab)

  CERT.PL news · Published 2026-10-22 · First collected 2026-10-24

• How Penetration Testing Fits into Modern SDLC ↗ (opens in a new tab)

  Archives - SecureLayer7 - Offensive Security, API Scanner & Attack Surface Management · Published 2026-10-22 · First collected 2026-10-24

• NCSC-2026-0452 [1.00] [M/H] Kwetsbaarheden verholpen in FreeBSD bhyve hypervisor ↗ (opens in a new tab)

  NCSC NL advisories · Published 2026-10-22 · First collected 2026-10-24

• CVE-2026-110264: Critical GitLab RCE Flaw Affects 12 Years of Releases ↗ (opens in a new tab)

  SOC Prime Blog · Published 2026-10-22 · First collected 2026-10-24

• 2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions ↗ (opens in a new tab)

  CERT-EU Security Advisories · Published 2026-10-22 · First collected 2026-10-24

• 7 Security Mistakes Developers Make Without Realizing It ↗ (opens in a new tab)

  System Weakness - Medium · Published 2026-10-22 · First collected 2026-10-24