Advisories and bulletins from authorities and response centres.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-19868 SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-0
CISA Advisories
Multiple vulnerabilities have been discovered in SUSE's Linux kernel, some of which allow an attacker to cause a breach of data confidentiality, a breach of data integrity and a circumvention of security policy.
CERT-FR
Multiple vulnerabilities have been discovered in the Linux kernel of Ubuntu. Some of these allow an attacker to cause arbitrary code execution, breach of data integrity and circumvention of security policy.
CERT-FR
Vulnerability was discovered in VMware products. It allows an attacker to cause arbitrary code execution remotely.
CERT-FR
Vulnerability was discovered in Mitel products. It allows an attacker to cause arbitrary code execution remotely.
CERT-FR
Multiple vulnerabilities have been discovered in the Linux kernel of Red Hat. Some of these allow an attacker to cause arbitrary remote code execution, increased privileges, and denial of service at a distance.
CERT-FR
Multiple vulnerabilities have been discovered in Foxit products. They allow an attacker to cause server-side request falsification (SSRF) and remote indirect code injection (XSS).
CERT-FR
Multiple vulnerabilities have been discovered in IBM products, some of which allow an attacker to cause arbitrary remote code execution, increased privileges and denial of service at a distance.
CERT-FR
Multiple vulnerabilities have been discovered in the Debian Linux kernel. They allow an attacker to cause increased privileges, breach of data confidentiality and denial of service.
CERT-FR
Multiple vulnerabilities have been discovered in the products of the company. They allow an attacker to cause arbitrary code execution remotely.
CERT-FR
Multiple vulnerabilities have been discovered in Spl-Dunk products. Some of these allow an attacker to cause arbitrary remote code execution, breach of data confidentiality and damage to data integrity.
CERT-FR
A vulnerability was discovered in the Alpine. It allows an attacker to cause a circumvention of security policy.
CERT-FR
Multiple vulnerabilities have been discovered in the MatterMode Server. They allow an attacker to cause a security problem not specified by the editor.
CERT-FR
This morning, I was browsing our honeypot data for any new and existing PHP exploit attempts. Instead, I first ran into some GeoServer exploits, but found them to be too boring to write up. This Cisco IOS exploit attempt was a bit more interesting. Still nothing new. I suspect this is for CVE-2023-20198.
SANS ISC
CISA, the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and the National Security Agency (NSA) released joint guidance and an accompanying quick-reference list to help organizations assess vendor readiness for transitioning to post-quantum cryptography (PQC). As quantum computing advances, widely used public-key cryptography will become vulnerable to compromise fro
CISA Advisories
Overview The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Health and Human Services (HHS), U.S. Department of Agriculture (USDA), and the Department of Transportation (DoT)—hereafter referred to as “the authoring organizations”—are aware of malicious cyber activity targeting industrial refrigeration and cold chain monitoring systems globally. Orga
CISA Advisories
Multiple vulnerabilities have been discovered in Microsoft Border. They allow an attacker to cause a breach of data confidentiality and a security problem not specified by the editor.
CERT-FR
Multiple vulnerabilities have been discovered in Siemens products. Some of these allow an attacker to cause arbitrary remote code execution, denial of service at a distance, and breach of data confidentiality.
CERT-FR
A vulnerability has been discovered in OpenSSH, which allows an attacker to cause a circumvention of security policy.
CERT-FR
Multiple vulnerabilities have been discovered in the products of the company. They allow an attacker to cause arbitrary code execution remotely, circumvention of security policy and a security problem not specified by the publisher.
CERT-FR
Multiple vulnerabilities have been discovered in OpenOffice. Some of these allow an attacker to cause arbitrary remote code execution, breach of data confidentiality and damage to data integrity.
CERT-FR
Multiple vulnerabilities have been discovered in SPIP, some of which allow an attacker to cause arbitrary remote code execution, increased privileges, and a breach of data integrity.
CERT-FR
Multiple vulnerabilities have been discovered in MongoDB, some of which allow an attacker to cause arbitrary remote code execution, denial of service at a distance, and breach of data confidentiality.
CERT-FR