Security advisories · Shippeth

Everything114 Releases0 Articles0 Advisories114

Security advisories of the clients, exploited vulnerabilities in the software and hardware node operators run, and incidents at certificate authorities.

Network upgradeNothing scheduled. Glamsterdam is on devnet 11

Infrastructure. Vulnerabilities and trust incidents in the software and hardware node operators run.

Top of this filter

Items with a reason of their own, ranked by urgency, weight and how often the project publishes

Cisco network devicesNetwork Hardware·29 OctSecurity CVE-2026-76418 CVE published 28 Oct

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability (opens in a new tab)

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial…CISA KEV catalog

Web PKI trust storesNetworking Software·18 OctSecurity

eMudhra: Private key compromise of Intermediate Certificates (opens in a new tab)

BeyondTrust remote accessRemote Access·16 OctSecurity CVE-2026-102764 CVE published 15 Oct

BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability (opens in a new tab)

BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.CISA KEV catalog

Palo Alto Networks PAN-OSNetwork Hardware·14 OctSecurity CVE-2026-0322

Palo Alto Networks PAN-OS Code Injection Vulnerability (opens in a new tab)

Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.CISA KEV catalog

Ivanti Connect SecureNetwork Hardware·13 OctSecurity CVE-2026-104935

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability (opens in a new tab)

Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.CISA KEV catalog

ISC BINDNetworking Software·8 OctSecurity CVE-2015-5477 CVE published 29 Jul 2015

ISC BIND Data Processing Errors Vulnerability (opens in a new tab)

ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.CISA KEV catalog

Citrix NetScalerNetwork Hardware·4 OctSecurity CVE-2026-88779

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (opens in a new tab)

Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.CISA KEV catalog

The stream

Newest first

Fri 30 October

Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability · Ivanti Connect Secure Security CVE-2026-118527 30 Oct

Fri 30 October

Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability · Ivanti Connect Secure Security CVE-2026-111357 CVE published 15 Oct 30 Oct

Thu 29 October

Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection · WatchGuard Firebox Security CVE-2026-93865 CVE published 27 Oct 29 Oct

Thu 29 October

Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution · WatchGuard Firebox Security CVE-2026-93857 CVE published 27 Oct 29 Oct

Thu 29 October

TWCA: Unauthorized access to an RA server · Web PKI trust stores Security 29 Oct

Thu 29 October

GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability · GitLab CE/EE Security CVE-2026-97229 CVE published 13 Oct 29 Oct

Thu 29 October

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability · Cisco network devices Security CVE-2026-76418 CVE published 28 Oct 29 Oct

Wed 28 October

Linux Kernel Missing Initialization of a Variable Vulnerability · Linux kernel Security CVE-2026-46300 CVE published 23 May 28 Oct

Wed 28 October

Broadcom VMWare ESX Insufficient Logging Vulnerability · VMware ESXi, VMware Tools Security CVE-2026-41709 CVE published 30 Jul 28 Oct

Sat 24 October

ipv4: free inet_opt and ireq_opt after an RCU grace period · Linux kernel Security CVE-2026-98432 CVE published 15 Oct 24 Oct

Wed 21 October

DigiCert: Unauthorized access to business system · Web PKI trust stores Security 21 Oct

Sun 18 October

eMudhra: Private key compromise of Intermediate Certificates · Web PKI trust stores Security 18 Oct

Fri 16 October

BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability · BeyondTrust remote access Security CVE-2026-102764 CVE published 15 Oct 16 Oct

Fri 16 October

Fortinet Multiple Products Path Traversal Vulnerability · Fortinet security appliances Security CVE-2025-61624 CVE published 14 Apr 16 Oct

Wed 14 October

Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled · Juniper Junos OS Security CVE-2026-101954 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured · Juniper Junos OS Security CVE-2026-101983 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used · Juniper Junos OS Security CVE-2026-101982 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled · Juniper Junos OS Security CVE-2026-33796 14 Oct

Wed 14 October

Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured · Juniper Junos OS Security CVE-2026-33792 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service · Juniper Junos OS Security CVE-2026-33789 14 Oct

Wed 14 October

Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution · Juniper Junos OS Security CVE-2026-102182 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise · Juniper Junos OS Security CVE-2026-102178 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used · Juniper Junos OS Security CVE-2026-102175 14 Oct

Wed 14 October

Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled · Juniper Junos OS Security CVE-2026-102031 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised · Juniper Junos OS Security CVE-2026-101990 14 Oct

Wed 14 October

Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled · Juniper Junos OS Security CVE-2026-101950 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution · Juniper Junos OS Security CVE-2026-101986 14 Oct

Wed 14 October

Junos OS: Unauthorized root command execution when J-Web is enabled · Juniper Junos OS Security CVE-2026-101956 14 Oct

Wed 14 October

Palo Alto Networks PAN-OS Code Injection Vulnerability · Palo Alto Networks PAN-OS Security CVE-2026-0322 14 Oct

Tue 13 October

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability · Ivanti Connect Secure Security CVE-2026-104935 13 Oct

Thu 8 October

ISC BIND Data Processing Errors Vulnerability · ISC BIND Security CVE-2015-5477 CVE published 29 Jul 2015 8 Oct

Wed 7 October

Cisco Nexus 9000 Series Switches SRv6 OAM (NGOAM) Remote Code Execution Vulnerability · Cisco network devices Security CVE-2026-76501 7 Oct

Wed 7 October

Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability · Cisco network devices Security CVE-2026-76486 7 Oct

Wed 7 October

Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability · Cisco network devices Security CVE-2026-76485 7 Oct

Wed 7 October

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability · Cisco network devices Security CVE-2026-76471 7 Oct

Wed 7 October

Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities · Cisco network devices Security CVE-2026-76455 7 Oct

Wed 7 October

Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability · Cisco network devices Security CVE-2026-76465 7 Oct

Wed 7 October

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. · SonicWall Security CVE-2026-102255 7 Oct

Sun 4 October

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability · Citrix NetScaler Security CVE-2026-88779 4 Oct

Fri 2 October

MikroTik RouterOS Integer Underflow · MikroTik RouterOS Security CVE-2026-84411 2 Oct

Thu 1 October

Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function · Apache HTTP Server Security CVE-2026-59797 1 Oct

Thu 1 October

Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy · Apache HTTP Server Security CVE-2026-57941 1 Oct

Thu 1 October

Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...} · Apache HTTP Server Security CVE-2026-56154 1 Oct

Sun 27 September

Citrix NetScaler Improper Input Validation Vulnerability · Citrix NetScaler Security CVE-2026-88771 27 Sept

Sun 27 September

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability · Citrix NetScaler Security CVE-2026-88772 27 Sept

Fri 25 September

Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability · MikroTik RouterOS Security CVE-2026-67279 CVE published 5 Sept 25 Sept

Tue 22 September

Check Point Multiple Products Path Traversal Vulnerability · Check Point gateways Security CVE-2026-93616 22 Sept

Tue 22 September

Check Point Multiple Products Improper Certificate Validation Vulnerability · Check Point gateways Security CVE-2026-85102 CVE published 9 Sept 22 Sept

Tue 22 September

F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability · F5 BIG-IP Security CVE-2026-94127 22 Sept

Mon 21 September

Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability · Zyxel network devices Security CVE-2026-7273 CVE published 16 Jun 21 Sept

Fri 18 September

Linux Kernel Out-of-Bounds Write Vulnerability · Linux kernel Security CVE-2026-53266 CVE published 25 Jun 18 Sept

Fri 18 September

Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability · Linux kernel Security CVE-2025-39682 CVE published 5 Sept 2025 18 Sept

Fri 18 September

Linux Kernel Race Condition Vulnerability · Linux kernel Security CVE-2025-39964 CVE published 13 Oct 2025 18 Sept

Wed 16 September

Acronis Backup Incorrect Default Permissions Vulnerability · Acronis Cyber Protect Security CVE-2026-87886 CVE published 17 Sept 16 Sept

Fri 11 September

ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability · ConnectWise ScreenConnect Security CVE-2026-84869 CVE published 8 Sept 11 Sept

Fri 11 September

GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability · GitLab CE/EE Security CVE-2026-85706 CVE published 12 Sept 11 Sept

Thu 10 September

MikroTik RouterOS Missing Authentication for Critical Function Vulnerability · MikroTik RouterOS Security CVE-2026-67277 CVE published 5 Sept 10 Sept

Thu 10 September

MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability · MikroTik RouterOS Security CVE-2026-86060 CVE published 5 Sept 10 Sept

Wed 9 September

Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability · Citrix NetScaler Security CVE-2026-19490 CVE published 19 Aug 9 Sept

Wed 9 September

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability · Fortinet security appliances Security CVE-2025-25249 CVE published 13 Jan 9 Sept