ShippethEthereum releases, writing, news and network upgrades
Everything11,174Releases5,823Articles5,051Advisories300

Security advisories of the clients, exploited vulnerabilities in the software and hardware node operators run, and incidents at certificate authorities.

Network upgradeNothing scheduled. Glamsterdam is on devnet 11

Security advisories and exploited vulnerabilities

300 items match, 123 of them low signal.

The stream

Newest first
Sat 26 September
Shanghai-enabled QBFT lets one Byzantine validator mint native currency through unvalidated withdrawals (opens in a new tab) · Besu Security High
Fri 25 September
Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability (opens in a new tab) · MikroTik RouterOS Security CVE-2026-67279 CVE published
Tue 22 September
Check Point Multiple Products Path Traversal Vulnerability (opens in a new tab) · Check Point gateways Security CVE-2026-93616
Tue 22 September
Check Point Multiple Products Improper Certificate Validation Vulnerability (opens in a new tab) · Check Point gateways Security CVE-2026-85102 CVE published
Tue 22 September
F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability (opens in a new tab) · F5 BIG-IP Security CVE-2026-94127
Mon 21 September
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability (opens in a new tab) · Zyxel network devices Security CVE-2026-7273 CVE published
Fri 18 September
Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability (opens in a new tab) · Linux kernel Security CVE-2025-39682 CVE published
Fri 18 September
Linux Kernel Race Condition Vulnerability (opens in a new tab) · Linux kernel Security CVE-2025-39964 CVE published
Fri 18 September
Linux Kernel Out-of-Bounds Write Vulnerability (opens in a new tab) · Linux kernel Security CVE-2026-53266 CVE published
Wed 16 September
Acronis Backup Incorrect Default Permissions Vulnerability (opens in a new tab) · Acronis Cyber Protect Security CVE-2026-87886 CVE published
Fri 11 September
ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability (opens in a new tab) · ConnectWise ScreenConnect Security CVE-2026-84869 CVE published
Fri 11 September
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability (opens in a new tab) · GitLab CE/EE Security CVE-2026-85706 CVE published
Thu 10 September
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability (opens in a new tab) · MikroTik RouterOS Security CVE-2026-67277 CVE published
Thu 10 September
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability (opens in a new tab) · MikroTik RouterOS Security CVE-2026-86060 CVE published
Wed 9 September
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability (opens in a new tab) · Fortinet security appliances Security CVE-2025-25249 CVE published
Wed 9 September
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability (opens in a new tab) · Citrix NetScaler Security CVE-2026-19490 CVE published
Wed 9 September
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability (opens in a new tab) · Cisco network devices Security CVE-2026-20079 CVE published
Tue 8 September
N-able N-central Static Code Injection Vulnerability (opens in a new tab) · N-able N-central Security CVE-2026-86218 CVE published
Wed 2 September
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (opens in a new tab) · SonicWall Security CVE-2026-83548 CVE published
Wed 2 September
SonicWall SMA1000 Appliances OS Command Injection Vulnerability (opens in a new tab) · SonicWall Security CVE-2026-83549 CVE published
Thu 27 August
Linux Kernel Unspecified Vulnerability (opens in a new tab) · Linux kernel Security CVE-2026-53362 CVE published
Wed 26 August
Red Hat Libuser Race Condition Vulnerability (opens in a new tab) · Red Hat Enterprise Linux and rebuilds Security CVE-2015-3246 CVE published
Wed 26 August
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (opens in a new tab) · Citrix NetScaler Security CVE-2026-8452 CVE published
Wed 26 August
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability (opens in a new tab) · Red Hat Enterprise Linux and rebuilds Security CVE-2015-5287 CVE published
Wed 26 August
Linux Kernel Out-of-Bounds Write Vulnerability (opens in a new tab) · Linux kernel Security CVE-2022-0995 CVE published
Tue 18 August
Broadcom VMware vCenter Path Traversal Vulnerability (opens in a new tab) · VMware vCenter Server Security CVE-2026-59310 CVE published
Fri 14 August
A single devp2p peer can drive unbounded block-fetch work via repeated NEW_BLOCK_HASHES/NEW_BLOCK announcements for the same block number (opens in a new tab) · Besu Security High
Fri 14 August
Per-transaction O(N^2) HashDoS via hash-bucket collisions in EVM warm-access and EIP-1153 transient-storage tracking (opens in a new tab) · Besu Security High
Fri 14 August
MainnetTransactionProcessor applies SELFDESTRUCT markers from the initial frame even when the transaction fails, leaking account deletion past EIP-6780 semantics (opens in a new tab) · Besu Security High
Tue 11 August
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability (opens in a new tab) · Cisco network devices Security CVE-2026-20349
Mon 10 August
`CodeDelegationTransactionDecoder.decodeInnerPayload` reads the per-authorisation `chainId` as an unbounded `BigInteger`, but `MainnetTransactionValidator.validateTransactionType` enforces `chainId < 2^256` by **throwing an unchecked `IllegalArgument (opens in a new tab) · Besu Security High
Fri 7 August
Progress LoadMaster Command Injection Vulnerability (opens in a new tab) · Progress Kemp LoadMaster Security CVE-2026-8037 CVE published
Wed 5 August
JetBrains TeamCity Deserialization of Untrusted Data Vulnerability (opens in a new tab) · JetBrains TeamCity Security CVE-2026-63077 CVE published
Tue 4 August
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability (opens in a new tab) · N-able N-central Security CVE-2026-18556 CVE published
Mon 3 August
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability (opens in a new tab) · N-able N-central Security CVE-2026-18577 CVE published
Wed 29 July
Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability (opens in a new tab) · Cisco network devices Security CVE-2026-20316
Mon 27 July
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (opens in a new tab) · Fortinet security appliances Security CVE-2025-68686 CVE published
Wed 22 July
Check Point SmartConsole Improper Authentication Vulnerability (opens in a new tab) · Check Point gateways Security CVE-2026-16232
Tue 14 July
SonicWall SMA1000 Appliances Code Injection Vulnerability (opens in a new tab) · SonicWall Security CVE-2026-15410
Tue 14 July
SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability (opens in a new tab) · SonicWall Security CVE-2026-15409
Mon 13 July
Cisco IOS Cross-Site Request Forgery Vulnerability (opens in a new tab) · Cisco network devices Security CVE-2008-4128 CVE published
Mon 29 June
SimpleHelp Authentication Bypass Vulnerability (opens in a new tab) · SimpleHelp Security CVE-2026-48558 CVE published
Tue 23 June
Ubiquiti UniFi OS Path Traversal Vulnerability (opens in a new tab) · Ubiquiti network devices Security CVE-2026-34909 CVE published
Tue 23 June
Ubiquiti UniFi OS Improper Access Control Vulnerability (opens in a new tab) · Ubiquiti network devices Security CVE-2026-34908 CVE published
Tue 23 June
Ubiquiti UniFi OS Improper Input Validation Vulnerability (opens in a new tab) · Ubiquiti network devices Security CVE-2026-34910 CVE published
Thu 18 June
Splunk Enterprise Missing Authentication for Critical Function Vulnerability (opens in a new tab) · Splunk Enterprise Security CVE-2026-20253 CVE published
Tue 9 June
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability (opens in a new tab) · Arista EOS Security CVE-2026-7473 CVE published
Mon 8 June
Check Point Security Gateway Improper Authentication Vulnerability (opens in a new tab) · Check Point gateways Security CVE-2026-50751
Tue 2 June
Linux Kernel Improper Authentication Vulnerability (opens in a new tab) · Linux kernel Security CVE-2022-0492 CVE published
Fri 29 May
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability (opens in a new tab) · Palo Alto Networks PAN-OS Security CVE-2026-0257 CVE published
Tue 19 May
Load Store Forwarding incorrectly eliminates stores that are read through an IfElse, making Brillig silently return zero instead of correct values (opens in a new tab) · Noir Security High
Wed 6 May
Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability (opens in a new tab) · Palo Alto Networks PAN-OS Security CVE-2026-0300
Fri 1 May
Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability (opens in a new tab) · Linux kernel Security CVE-2026-31431 CVE published
Tue 28 April
ConnectWise ScreenConnect Path Traversal Vulnerability (opens in a new tab) · ConnectWise ScreenConnect Security CVE-2024-1708 CVE published
Fri 24 April
SimpleHelp Missing Authorization Vulnerability (opens in a new tab) · SimpleHelp Security CVE-2024-57726 CVE published
Fri 24 April
SimpleHelp Path Traversal Vulnerability (opens in a new tab) · SimpleHelp Security CVE-2024-57728 CVE published
Fri 24 April
D-Link DIR-823X Command Injection Vulnerability (opens in a new tab) · D-Link routers Security CVE-2025-29635 CVE published
Mon 20 April
JetBrains TeamCity Relative Path Traversal Vulnerability (opens in a new tab) · JetBrains TeamCity Security CVE-2024-27199 CVE published
Tue 14 April
handle_terminator mishandles Jmp in mem2reg when argument alias set is unknown, causing unsound load propagation (opens in a new tab) · Noir Security High
Tue 14 April
add_array_aliases misses “hidden” nested references in MakeArray analysis, enabling unsound mem2reg store elimination (opens in a new tab) · Noir Security High