Security advisories · Shippeth

Everything11,172 Releases5,822 Articles5,050 Advisories300

Security advisories of the clients, exploited vulnerabilities in the software and hardware node operators run, and incidents at certificate authorities.

Network upgradeNothing scheduled. Glamsterdam is on devnet 11

Top of this filter

Items with a reason of their own, ranked by urgency, weight and how often the project publishes

Cisco network devicesNetwork Hardware·29 OctSecurity CVE-2026-76418 CVE published 28 Oct

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability (opens in a new tab)

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial…CISA KEV catalog

Web PKI trust storesNetworking Software·18 OctSecurity

eMudhra: Private key compromise of Intermediate Certificates (opens in a new tab)

BeyondTrust remote accessRemote Access·16 OctSecurity CVE-2026-102764 CVE published 15 Oct

BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability (opens in a new tab)

BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.CISA KEV catalog

Palo Alto Networks PAN-OSNetwork Hardware·14 OctSecurity CVE-2026-0322

Palo Alto Networks PAN-OS Code Injection Vulnerability (opens in a new tab)

Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.CISA KEV catalog

Ivanti Connect SecureNetwork Hardware·13 OctSecurity CVE-2026-104935

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability (opens in a new tab)

Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.CISA KEV catalog

ISC BINDNetworking Software·8 OctSecurity CVE-2015-5477 CVE published 29 Jul 2015

ISC BIND Data Processing Errors Vulnerability (opens in a new tab)

ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries.CISA KEV catalog

Citrix NetScalerNetwork Hardware·4 OctSecurity CVE-2026-88779

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (opens in a new tab)

Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.CISA KEV catalog

The stream

Newest first

Fri 30 October

Unauthenticated telemetry port exposed beyond the host by default deployment configurations · Optimum, mump2p Security Medium 30 Oct

Fri 30 October

Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability · Ivanti Connect Secure Security CVE-2026-118527 30 Oct

Fri 30 October

Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability · Ivanti Connect Secure Security CVE-2026-111357 CVE published 15 Oct 30 Oct

Thu 29 October

Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection · WatchGuard Firebox Security CVE-2026-93865 CVE published 27 Oct 29 Oct

Thu 29 October

Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution · WatchGuard Firebox Security CVE-2026-93857 CVE published 27 Oct 29 Oct

Thu 29 October

TWCA: Unauthorized access to an RA server · Web PKI trust stores Security 29 Oct

Thu 29 October

GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability · GitLab CE/EE Security CVE-2026-97229 CVE published 13 Oct 29 Oct

Thu 29 October

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability · Cisco network devices Security CVE-2026-76418 CVE published 28 Oct 29 Oct

Wed 28 October

Broadcom VMWare ESX Insufficient Logging Vulnerability · VMware ESXi, VMware Tools Security CVE-2026-41709 CVE published 30 Jul 28 Oct

Wed 28 October

Linux Kernel Missing Initialization of a Variable Vulnerability · Linux kernel Security CVE-2026-46300 CVE published 23 May 28 Oct

Mon 26 October

Memory exhaustion when serving data column requests · Lighthouse Security High 26 Oct

Sat 24 October

ipv4: free inet_opt and ireq_opt after an RCU grace period · Linux kernel Security CVE-2026-98432 CVE published 15 Oct 24 Oct

Wed 21 October

DigiCert: Unauthorized access to business system · Web PKI trust stores Security 21 Oct

Sun 18 October

eMudhra: Private key compromise of Intermediate Certificates · Web PKI trust stores Security 18 Oct

Fri 16 October

Fortinet Multiple Products Path Traversal Vulnerability · Fortinet security appliances Security CVE-2025-61624 CVE published 14 Apr 16 Oct

Fri 16 October

BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability · BeyondTrust remote access Security CVE-2026-102764 CVE published 15 Oct 16 Oct

Wed 14 October

Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled · Juniper Junos OS Security CVE-2026-101954 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured · Juniper Junos OS Security CVE-2026-101983 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used · Juniper Junos OS Security CVE-2026-101982 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled · Juniper Junos OS Security CVE-2026-33796 14 Oct

Wed 14 October

Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured · Juniper Junos OS Security CVE-2026-33792 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service · Juniper Junos OS Security CVE-2026-33789 14 Oct

Wed 14 October

Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution · Juniper Junos OS Security CVE-2026-102182 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise · Juniper Junos OS Security CVE-2026-102178 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used · Juniper Junos OS Security CVE-2026-102175 14 Oct

Wed 14 October

Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled · Juniper Junos OS Security CVE-2026-102031 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised · Juniper Junos OS Security CVE-2026-101990 14 Oct

Wed 14 October

Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled · Juniper Junos OS Security CVE-2026-101950 14 Oct

Wed 14 October

Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution · Juniper Junos OS Security CVE-2026-101986 14 Oct

Wed 14 October

Junos OS: Unauthorized root command execution when J-Web is enabled · Juniper Junos OS Security CVE-2026-101956 14 Oct

Wed 14 October

EIP-7702 and sender signature recovery skips the secp256k1 curve-order bound, so native and BouncyCastle backends recover different authorities (consensus split) · Besu Security High 14 Oct

Wed 14 October

Palo Alto Networks PAN-OS Code Injection Vulnerability · Palo Alto Networks PAN-OS Security CVE-2026-0322 14 Oct

Tue 13 October

QBFT/IBFT2 message decode performs unbounded eager signature recovery before the validator check, letting any peer stall the consensus thread (DoS) · Besu Security High 13 Oct

Tue 13 October

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability · Ivanti Connect Secure Security CVE-2026-104935 13 Oct

Sun 11 October

SP1 V6 Native Rust Verifier: Mismatched Tensor Lengths · SP1 (Succinct) Security High 11 Oct

Thu 8 October

UltraHonk native verifier throws or aborts on a recursive pairing accumulator with a point at infinity · Aztec Security Medium 8 Oct

Thu 8 October

UltraHonk native verifier accepts proofs whose recursive pairing accumulator has one point at infinity · Aztec Security High 8 Oct

Thu 8 October

A permissionless non-validator peer can halt QBFT finality through pre-authorization proposal decoding · Besu Security High 8 Oct

Thu 8 October

ISC BIND Data Processing Errors Vulnerability · ISC BIND Security CVE-2015-5477 CVE published 29 Jul 2015 8 Oct

Wed 7 October

Cisco Nexus 9000 Series Switches SRv6 OAM (NGOAM) Remote Code Execution Vulnerability · Cisco network devices Security CVE-2026-76501 7 Oct

Wed 7 October

Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability · Cisco network devices Security CVE-2026-76486 7 Oct

Wed 7 October

Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability · Cisco network devices Security CVE-2026-76485 7 Oct

Wed 7 October

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability · Cisco network devices Security CVE-2026-76471 7 Oct

Wed 7 October

Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities · Cisco network devices Security CVE-2026-76455 7 Oct

Wed 7 October

Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability · Cisco network devices Security CVE-2026-76465 7 Oct

Wed 7 October

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. · SonicWall Security CVE-2026-102255 7 Oct

Sun 4 October

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability · Citrix NetScaler Security CVE-2026-88779 4 Oct

Fri 2 October

MikroTik RouterOS Integer Underflow · MikroTik RouterOS Security CVE-2026-84411 2 Oct

Fri 2 October

Bonsai parallel block processor retains transaction futures after block rejection, causing unbounded memory growth and node outage · Besu Security High 2 Oct

Fri 2 October

Pre-authentication discovery-packet handling flaw allows remote unauthenticated log-amplification denial of service (discv4 UDP). · Besu Security Medium 2 Oct

Fri 2 October

`eth_getLogs` enforces an `--rpc-max-logs-range` block-range cap, but the same protection is missing from the filter-based path. An unauthenticated caller can install a filter via `eth_newFilter` with `fromBlock: "0x0", toBlock: "latest"`, then poll · Besu Security High 2 Oct

Fri 2 October

Besu's DiscV4 UDP discovery remote DoS · Besu Security High 2 Oct

Thu 1 October

Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function · Apache HTTP Server Security CVE-2026-59797 1 Oct

Thu 1 October

Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy · Apache HTTP Server Security CVE-2026-57941 1 Oct

Thu 1 October

Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...} · Apache HTTP Server Security CVE-2026-56154 1 Oct

Sun 27 September

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability · Citrix NetScaler Security CVE-2026-88772 27 Sept

Sun 27 September

Citrix NetScaler Improper Input Validation Vulnerability · Citrix NetScaler Security CVE-2026-88771 27 Sept

Sat 26 September

JWT algorithm confusion allows token forgery when HMAC algorithm is used with a public key file · Besu Security High 26 Sept

Sat 26 September

Log filter and subscription address lists are unbounded and matched linearly on the block-import thread, allowing unauthenticated callers to stall block production · Besu Security High 26 Sept

Sat 26 September

Engine API JWT secret exposed in application logs when ephemeral key file cannot be written · Besu Security High 26 Sept

Also collected

Per-package monorepo tags, releases that carry little weight, and publications that post several times a day

QBFT/IBFT validator forgets its prepared certificate when the round advances by any route other than its own timer, weakening the quorum-intersection argument · Besu Security Medium 29 Oct

Unbounded topic index in aggregated attestation decoding allows memory exhaustion · Optimum, mump2p Security Medium 27 Oct

`/eth/v1/builder/blinded_blocks` endpoint accepts Fulu blob data without verifying it · Lighthouse Security Low 26 Oct

Proposer slashing for an exited validator causes failed block proposals · Lighthouse Security Medium 26 Oct

Memory leak when peer disconnects after sending RPC requests · Lighthouse Security Medium 26 Oct

Besu accepts RLP-wrapped typed transactions in ExecutionPayload block bodies, causing a client-line consensus split · Besu Security Medium 14 Oct

debug_traceTransaction and trace_* RPC methods missing server-side EVM step cap — incomplete fix for GHSA-4776-8c3f-fx7g · Besu Security Medium 7 Oct

Function variables can replace imported constant values and default arguments · Vyper Security Medium 7 Oct

Multi-byte identifier characters can silently change literal values · Vyper Security Low 6 Oct

Line-separator characters can silently change literal values and types · Vyper Security Low 6 Oct

Checkpoint with over 72 blocks pushed via the escape hatch and proven halts the L2 · Aztec Security Low 28 Jul

Incorrect conditional mutable reference assignment in Brillig · Noir Security Medium 9 Jun

Arrays may be indexed out-of-bounds · Noir Security Medium 4 Jun

`CallGraph::from_ssa` is a potential footgun · Noir Security Low 19 May

RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation in ENS DNSSEC Oracle · ENS Security Low CVE-2026-22866 25 Feb

Improper ECIES Public Key Validation in RLPx Handshake · Go Ethereum Security Medium CVE-2026-26315 17 Feb

DoS via malicious p2p message · Go Ethereum Security Medium CVE-2026-26313 17 Feb

DoS via malicious p2p message · Go Ethereum Security Medium CVE-2026-22868 13 Jan

Insufficient observation of cumulative sum · SP1 (Succinct) Security Medium 8 Nov 2024

.eth registrar controller can shorten the duration of registered names · ENS Security Medium CVE-2023-38698 1 Aug 2023