Security intelligence · 2026 watch

Find the notice. Confirm exposure. Take the supported action.

Find advisories for the products you manage. A severity rating, evidence of exploitation, and proof that your own system is affected are different things; check each before deciding what to do.

Current watchSubscribe by RSS

Source snapshotReviewed November 1, 2026 at 17:00 UTCCISA KEV catalog: 2026.10.30Curated guidance—not a complete vulnerability inventory

240 current watch groups282 CISA KEV additions in 2026981 searchable 2026 and established records125 official source endpoints monitored

Current watch

Recent releases and confirmed exploitation

Check the product, release, role, configuration, and exposure against the current official advisory. The remediation listed below is a source snapshot, not a command to run or proof that your system is affected. After a change, check service behavior and retain the result with your change record.

Project update

Gitea · Self-hosted Gitea servers, Actions, API tokens, OAuth2 account linking, package storage, and repository collaboration features

Gitea 28.3.0 / GHSA-8r36-6j2c-3gmv / GHSA-9v6p-xpcp-7488 / GHSA-jr76-w9m3-3p68 / GHSA-qcgm-ggp8-22qc / GHSA-6h2f-c8jm-84hc / GHSA-mf6p-vqpw-3r7x / GHSA-37xv-m4w7-j2fh / GHSA-wxcq-p34j-7cjj / GHSA-p86q-78gw-8f3f / GHSA-r6mh-qg79-rqj2 / GHSA-8g99-g36h-5p2w / GHSA-32h8-5xqg-h466 / GHSA-q9gm-9c7q-c5hq / GHSA-x5v4-836g-f95x / GHSA-vmrc-8q2x-573x / GHSA-jh8p-x4ch-389q / GHSA-c45m-jm46-mwxg / GHSA-3fv3-hhmm-4x2q / GHSA-5j4v-rwqr-vpq7 / GHSA-8p3x-w464-4g6v · 21 CVEs — Gitea 28.3.0 Fixes Token Scope, OAuth2, and Actions Vulnerabilities

Recorded remediation: Gitea 28.3.0; official release binaries are built with Go 1.27.3

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

Red Hat · Red Hat java-17-openjdk runtime and development packages for the RHEL 9 product streams listed in RHSA-2026:90500

RHSA-2026:90500 · 36 CVEs — Red Hat OpenJDK 17 Update Addresses 36 CVEs on RHEL 9

Recorded remediation: java-17-openjdk 1:17.0.21.0.9-2.1.el9 for the listed 9.2/9.4 E4S and 9.6 EUS streams; 1:17.0.21.0.9-2.2.el9 for the listed RHEL 9 main stream. Select the matching architecture and subpackages from RHSA-2026:90500.

TechGeeks analysis·Authority

Low to Medium · exploitation not stated

Vendor update

Amazon Web Services · Amazon Kinesis Producer Library for Java (KPL), running within customer applications

2026-159-AWS / GHSA-mr97-jq69-qr5f · 1 CVE — AWS Kinesis Producer Library 1.0.8 Fixes Credential Exposure

Recorded remediation: software.amazon.kinesis:amazon-kinesis-producer 1.0.8 or later; migrate 0.x deployments to this package

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Delinea · Delinea Secret Server on-premises and cloud

Delinea Secret Server October 30, 2026 advisories · 3 CVEs — Delinea Secret Server 12.3.1 Fixes Three Access Flaws

Recorded remediation: Delinea Secret Server version 12.3.1

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Show 236 additional current-watch advisories
Vendor update

Red Hat · python-pillow on Red Hat Enterprise Linux 8 AppStream and CRB

RHSA-2026:93077 · 3 CVEs — Red Hat Enterprise Linux 8 Pillow Update Fixes Three CVEs

Recorded remediation: python-pillow-0:5.1.1-36.el8_10.src

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · BIND 9.18 on Red Hat Enterprise Linux 9 AppStream and CodeReady Linux Builder

RHSA-2026:93072 · 4 CVEs — Red Hat Enterprise Linux 9 BIND Update Fixes Four CVEs

Recorded remediation: bind9.18-32:9.18.29-14.el9_8.12.src

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

JetBrains · JetBrains IDEs, ReSharper and .NET tools, Gateway, Toolbox App, JetBrains Runtime, JCEF, and jetbrainsd

JetBrains compromised eMudhra certificate bulletin · 2 CVEs — JetBrains Updates Address Compromised Certificate Trust

Recorded remediation: The product-specific builds in the JetBrains bulletin, Toolbox App 3.9.1 or 3.8.2, jetbrainsd 0.9.9728, and the listed fixed JetBrains Runtime builds

TechGeeks analysis·Authority

High to Critical · exploitation not publicly reported

Vendor update

Amazon Web Services · FreeRTOS-Kernel MPU-enabled ports with queue sets enabled

2026-158-AWS · 1 CVE — FreeRTOS Kernel 11.3.3 Fixes Queue-Set Validation Flaw

Recorded remediation: FreeRTOS-Kernel V11.3.3 or later, including the fix in forked or derivative code, followed by firmware rebuild and reflash

TechGeeks analysis·Authority

Medium / High · exploitation not stated

Vendor update

Red Hat · Red Hat Enterprise Linux 7 Extended Life Cycle Support IPA

RHSA-2026:93071 · 6 CVEs — Red Hat IPA ELS Update Fixes Six Vulnerabilities

Recorded remediation: ipa-0:4.6.8-5.el7_9.25.src

TechGeeks analysis·Authority

High to Critical · exploitation not stated

Known exploitation

Ivanti · Ivanti Connect Secure in the CVE-2026-104935 exploit chain

CISA KEV 2026-10-30 Ivanti Connect Secure additions / Ivanti CVE-2026-104935 advisory · 3 CVEs — CISA Adds Two Chained Ivanti Connect Secure Flaws to KEV

Recorded remediation: Apply Ivanti's current mitigations and supported remediation; CISA does not state a fixed version in the KEV entries

TechGeeks analysis·Authority

Not provided by the authority · exploitation CISA KEV

Vendor update

Amazon Web Services · AWS Nitro Enclaves SDK for C and the kmstool-enclave example application

2026-157-AWS · 2 CVEs — AWS Nitro Enclaves SDK 0.4.6 Fixes Two Security Issues

Recorded remediation: aws-nitro-enclaves-sdk-c v0.4.6, followed by rebuilding and redeploying affected enclave images

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

TeamViewer · TeamViewer products and relevant TeamViewer-operated environments

TV-2026-1013 · 2 CVEs — TeamViewer Says PHP2Shell Requires No Customer Action

Recorded remediation: TeamViewer remediated and contained relevant internal environments; no specific customer action is required beyond normal supported updates and security practices

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Johnson Controls · Fire Restaurant System Estimator and Fire Access Control System; other Johnson Controls products remain under assessment

JCI-PSA-2026-31 v2 · 1 CVE — Johnson Controls Names Two Patched HTTP2Shell Products

Recorded remediation: Fire Restaurant System Estimator v2.06.011-1 and Fire Access Control System v1.00.200.569

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Red Hat · Red Hat Enterprise Linux Real Time E4S and Real Time for NFV E4S 9.2

RHSA-2026:93047 · 23 CVEs — Red Hat Real Time Kernel Update Fixes 23 CVEs

Recorded remediation: kernel-rt-0:5.14.0-284.200.1.rt14.485.el9_2.src

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

Red Hat · Red Hat OpenStack Platform 13 ELS, 16.2, 17.1, and Red Hat OpenStack Services on OpenShift 18.0

RHSA-2026:93043 / RHSA-2026:93046 / RHSA-2026:93044 / RHSA-2026:93045 · 1 CVE — Red Hat OpenStack Updates Fix botocore Header Injection

Recorded remediation: python-botocore-0:1.12.119-4.el8ost.src; python-botocore-0:1.20.68-2.el9ost.src; python-botocore-0:1.27.89-3.el9ost.src; python-botocore-0:1.8.33-2.el7ost.src

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Qt · Qt Framework QCborValue JSON conversion

CVE-2026-105924 · 1 CVE — Qt 6.8.10, 6.11.3, and 6.12.1 Fix CBOR Conversion Flaw

Recorded remediation: Qt 6.8.10, Qt 6.11.3, or Qt 6.12.1; organizations on older or unsupported branches should obtain vendor guidance

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

ClickHouse · ClickHouse Server open-source, Cloud, and BYOC deployments

CVE-2026-116366 · 1 CVE — ClickHouse 26.10.3.7 Fixes Unauthenticated Server RCE

Recorded remediation: ClickHouse 26.3.62.3-lts, 26.8.36.3-lts, 26.9.27.3-stable, or 26.10.3.7-stable; ClickHouse states Cloud and BYOC were fixed by the service

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

Elixir · Elixir standard library URI and JSON parsers and Mix deps.partition

CVE-2026-109821 / CVE-2026-115274 / CVE-2026-97209 · 3 CVEs — Elixir 1.18.6, 1.19.7, and 1.20.5 Fix Three Flaws

Recorded remediation: Elixir 1.18.6, 1.19.7, or 1.20.5 according to the maintained branch and issue scope

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Tenable · Tenable Identity Exposure

TNS-2026-34 · 3 CVEs — Tenable Identity Exposure Updates Fix Three Vulnerabilities

Recorded remediation: Tenable Identity Exposure 3.93.6 or 3.77.18, according to the deployed support stream

TechGeeks analysis·Authority

Medium to Critical · exploitation not stated

Vendor update

Red Hat · RHEL BIND, dnsmasq, httpd, curl, and python3.12-urllib3 packages on the advisory-listed streams

RHSA-2026:92474 / RHSA-2026:92419 / RHSA-2026:92677 / RHSA-2026:92590 / RHSA-2026:92616 / RHSA-2026:92907 · 37 CVEs — Red Hat Updates RHEL Network and Web Stack Packages

Recorded remediation: bind-32:9.18.33-15.el10_2.14.src; curl-0:7.76.1-40.el9_8.9.src; dnsmasq-0:2.90-4.el10_0.1.src; httpd-0:2.4.37-65.module+el8.10.0+25092+6f3ea0dd.13.src::httpd:2.4; httpd-0:2.4.6-99.el7_9.8.src; mod_http2-0:1.15.7-10.module+el8.10.0+24521+219dcfc5.7.src::httpd:2.4; mod_md-1:2.0.8-8.module+el8.10.0+24941+3af7c60a.4.src::httpd:2.4; python3.12-urllib3-0:1.26.19-5.el8_10.src

TechGeeks analysis·Authority

Low to High · exploitation not stated

Vendor update

ABB · ABB ARM600 and Arctic ARG600, ARP600, ARR600, and ARC600 gateway variants listed in 2NGA003224

2NGA003224 · 2 CVEs — ABB Warns Obsolete ARM600 and Arctic Gateways Face PHP2Shell

Recorded remediation: No security update is planned because the listed products are obsolete; replace them and apply ABB's network-isolation mitigations

TechGeeks analysis·Authority

High to Critical · exploitation not stated

Vendor update

ABB · ABB Netcontrol 100, 200, and 500 gateways and Network Asset Manager

2NGA003256 · 2 CVEs — ABB Investigates PHP2Shell in Netcontrol and NAM Products

Recorded remediation: No fixed version was available while ABB continued its investigation; apply the advisory's WebGUI, port-restriction, and isolation mitigations

TechGeeks analysis·Authority

High to Critical · exploitation not stated

Vendor update

Red Hat · RHEL desktop, X11, XML, image, regex, and utility packages on the advisory-listed streams

RHSA-2026:92418 / RHSA-2026:92573 / RHSA-2026:92220 / RHSA-2026:92579 / RHSA-2026:92589 / RHSA-2026:91223 / RHSA-2026:91365 / RHSA-2026:91056 / RHSA-2026:91057 / RHSA-2026:91580 / RHSA-2026:92615 / RHSA-2026:92798 / RHSA-2026:92800 / RHSA-2026:92639 / RHSA-2026:92899 / RHSA-2026:92901 / RHSA-2026:92323 · 37 CVEs — Red Hat Updates RHEL Desktop, XML, and Image Libraries

Recorded remediation: aspell-12:0.60.6.1-23.el8_10.src; expat-0:2.5.0-6.el8_10.src; flatpak-builder-0:1.0.9-4.el8_4.src; glycin-loaders-0:1.0.1-1.el10_0.1.src; libX11-0:1.8.12-1.el9_8.1.src; libXi-0:1.7.10-8.el9_8.1.src; libXrender-0:0.9.10-16.el9_8.2.src; libXtst-0:1.2.3-16.el9_8.1.src; librsvg2-0:2.40.20-1.el7_9.1.src; libxml2-0:2.9.7-13.el8_6.24.src; pcre2-0:10.32-2.el8_4.1.src; pcre2-0:10.32-3.el8_6.1.src; perl-XML-LibXML-1:2.0132-2.el8_6.1.src; perl-XML-LibXML-1:2.0132-2.el8_8.1.src; python-pillow-0:5.1.1-33.el8_10.src; webkit2gtk3-0:2.54.2-0.el9_8.1.src; xterm-0:366-9.el9_4.1.src

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

Red Hat · Red Hat Node.js 24 module on RHEL 9

RHSA-2026:92378 · 13 CVEs — Red Hat Node.js 24.22.1 Update Fixes 13 CVEs

Recorded remediation: nodejs-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.src::nodejs:24

TechGeeks analysis·Authority

Low to High · exploitation not stated

Vendor update

Red Hat · Red Hat Tomcat on RHEL 9.2, 9.4, 9.6, and 10.0 extended streams

RHSA-2026:92863 / RHSA-2026:92870 / RHSA-2026:92871 / RHSA-2026:92872 · 7 CVEs — Red Hat Tomcat 9.0.121 and 10.1.49 Fix Security Flaws

Recorded remediation: tomcat-1:10.1.49-2.el10_0.src; tomcat-1:9.0.121-1.el9_2.src; tomcat-1:9.0.121-1.el9_4.src; tomcat-1:9.0.121-1.el9_6.src

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

Red Hat · Red Hat OpenJDK 21 on RHEL 10 and RHEL 10.0 EUS

RHSA-2026:90504 · 38 CVEs — Red Hat OpenJDK 21.0.13 Updates Fix 38 CVEs

Recorded remediation: java-21-openjdk-1:21.0.13.0.9-1.1.el10.src; java-21-openjdk-1:21.0.13.0.9-1.2.el10.src

TechGeeks analysis·Authority

Low to Medium · exploitation not stated

Vendor update

Google Chrome · Google Chrome Stable and Extended Stable for Windows, macOS, Linux, and Chrome for Android

Chrome Stable 156.0.8078.79/.80 / Chrome for Android 156.0.8078.79 · 21 CVEs — Chrome 156.0.8078.79/.80 Fixes 21 Security Flaws

Recorded remediation: Chrome 156.0.8078.79/.80 for Windows and macOS, 156.0.8078.79 for Linux, and 156.0.8078.79 for Android

TechGeeks analysis·Authority

Medium to Critical · exploitation not stated

Vendor update

Red Hat · Red Hat Satellite 6.16, 6.17, and 6.18

RHSA-2026:92860 / RHSA-2026:92858 / RHSA-2026:92859 · 17 CVEs — Red Hat Satellite 6.16-6.18 Updates Fix 17 CVEs

Recorded remediation: openvox-agent-0:8.31.1-1.el8sat.src; openvox-agent-0:8.31.1-1.el9sat.src; openvox-server-0:8.17.0-1.el8sat.src; openvox-server-0:8.17.0-1.el9sat.src; yggdrasil-worker-forwarder-0:0.1.1-1.el8sat.src; yggdrasil-worker-forwarder-0:0.1.1-1.el9sat.src

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

Red Hat · RHEL Dogtag PKI, Ignition, kpatch, Grafana, and cjose components on the advisory-listed streams

RHSA-2026:92408 / RHSA-2026:91719 / RHSA-2026:92629 / RHSA-2026:90811 / RHSA-2026:90812 · 12 CVEs — Red Hat Updates PKI, Ignition, kpatch, Grafana, and cjose

Recorded remediation: cjose-0:0.6.1-17.el9_8.1.src; dogtag-pki-0:11.9.0-6.el10_2.1.src; grafana-0:10.2.6-23.el9_8.4.src; ignition-0:2.26.0-1.el9_8.2.src; kpatch-patch-5_14_0-284_134_1-0:1-18.el9_2.src; kpatch-patch-5_14_0-284_148_1-0:1-16.el9_2.src; kpatch-patch-5_14_0-284_158_1-0:1-14.el9_2.src; kpatch-patch-5_14_0-284_172_1-0:1-11.el9_2.src; kpatch-patch-5_14_0-284_188_1-0:1-3.el9_2.src

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

HashiCorp · HashiCorp Boundary and Boundary Enterprise Vault credential-store integration

HCSEC-2026-54 · 1 CVE — HashiCorp Boundary Updates Fix Vault Credential-Store SSRF

Recorded remediation: Boundary Enterprise 1.0.2 or 0.21.6

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Red Hat · Red Hat Ansible Automation Platform 2.6 and 2.7 receptor packages on RHEL 9 and 10

RHSA-2026:92622 / RHSA-2026:92621 · 3 CVEs — Red Hat Ansible Automation Platform Updates Fix Receptor Flaws

Recorded remediation: receptor-0:1.6.9-3.el10ap.src; receptor-0:1.6.9-3.el9ap.src

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · Firefox 140.17 on RHEL 8.6, 9.2, and 10.0 extended-support streams

RHSA-2026:92228 / RHSA-2026:92227 / RHSA-2026:92226 · 43 CVEs — Red Hat Firefox 140.17 Updates Fix 43 CVEs

Recorded remediation: firefox-0:140.17.0-1.el10_0.src; firefox-0:140.17.0-1.el8_6.src; firefox-0:140.17.0-1.el9_2.src

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

HashiCorp · HashiCorp Nomad and Nomad Enterprise

HCSEC-2026-51 / HCSEC-2026-52 / HCSEC-2026-53 · 3 CVEs — HashiCorp Nomad 2.1.0 Fixes Namespace and Symlink Flaws

Recorded remediation: Nomad Community 2.1.0 and Nomad Enterprise 2.1.0, 1.11.12, or 1.10.18

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Ubuntu · Ubuntu .NET 8, .NET 10, and .NET 11 packages on Ubuntu 22.04 LTS, 24.04 LTS, 26.04 LTS, and 26.10 as listed

USN-8958-1 · 3 CVEs — Ubuntu Updates .NET 8, 10, and 11 for Three Vulnerabilities

Recorded remediation: The exact Ubuntu package versions listed in USN-8958-1, including .NET 8.0.33, .NET 10.0.14, and .NET 11.0.0-rc3 packages on the supported releases where offered

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Amazon Web Services · AWS Private CA Connector for Kubernetes and the aws-privateca-issuer cert-manager external issuer

2026-156-AWS · 1 CVE — AWS Private CA Connector 1.10.1 Fixes Issuer Authorization

Recorded remediation: aws-privateca-issuer 1.10.1 and AWS Private CA Connector for Kubernetes EKS add-on 1.10.1-eksbuild.1

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Red Hat · Red Hat build of MicroShift 4.19 and 4.20

RHSA-2026:91172 / RHSA-2026:91191 · 6 CVEs — Red Hat MicroShift 4.19.53 and 4.20.44 Fix Security Flaws

Recorded remediation: Red Hat build of MicroShift 4.19.53 or 4.20.44 on the corresponding supported branch

TechGeeks analysis·Authority

Important · exploitation not stated

Vendor update

Red Hat · RHEL kernel, curl, libxml2, and osbuild-composer packages on the advisory-listed extended-support channels

RHSA-2026:92362 / RHSA-2026:92368 / RHSA-2026:92352 / RHSA-2026:92372 · 24 CVEs — Red Hat Updates Kernel, curl, libxml2, and osbuild-composer

Recorded remediation: kernel-6.12.0-55.115.1.el10_0, curl-7.61.1-34.el8_10.18, libxml2-2.9.13-3.el9_2.20, and osbuild-composer-76.1-10.el9_2 source builds, as applicable

TechGeeks analysis·Authority

Moderate to Important · exploitation not stated

Vendor update

Red Hat · Red Hat OpenJDK 21 portable Linux and Windows builds, and OpenJDK 25 portable Linux builds

RHSA-2026:88348 / RHSA-2026:88350 / RHSA-2026:88351 · 42 CVEs — Red Hat OpenJDK 21.0.13 and 25.0.5 Builds Fix 42 CVEs

Recorded remediation: Red Hat OpenJDK 21.0.13 or 25.0.5 for the corresponding platform and maintained product line

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

Red Hat · sudo and librsvg2 packages on RHEL 8.4 and 8.6 AUS and EUS Extension streams

RHSA-2026:92325 / RHSA-2026:92349 / RHSA-2026:92336 / RHSA-2026:92353 · 2 CVEs — Red Hat Extends sudo and librsvg Fixes to RHEL 8 Streams

Recorded remediation: sudo-1.8.29-7.el8_4.4 or sudo-1.9.5p2-1.el8_6.4, and librsvg2-2.42.7-4.el8_4.1 or librsvg2-2.42.7-4.el8_6.1, as applicable

TechGeeks analysis·Authority

Important · exploitation not stated

Vendor update

Siemens · Siemens Mendix SAML module for Mendix 9, 10, and 11

ICSA-26-302-01 / SSA-137528 · 1 CVE — Siemens Mendix SAML Updates Block Assertion Replay

Recorded remediation: Mendix SAML 4.2.4 or later for Mendix 10 and 11, and 3.6.29 or later for Mendix 9

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Hitachi Energy · Hitachi Energy TRO600 series and CoreTec4/CoreTec5 energy-sector products

ICSA-26-302-02 / ICSA-26-302-03 · 4 CVEs — CISA Publishes Hitachi Energy TRO600 and CoreTec Fixes

Recorded remediation: TRO600 9.2.2.1 or 9.1.2.0 as applicable, and CoreTec5 5.0.0; CoreTec4 customers are directed to upgrade to CoreTec5 5.0.0

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Elastic · Elastic Cloud Enterprise platform hosts, allocators, deployments, and control-plane services

ESA-2026-211 / ESA-2026-212 / ESA-2026-215 / ESA-2026-216 / ESA-2026-218 / ESA-2026-221 / ESA-2026-222 · 7 CVEs — Elastic Cloud Enterprise 3.8.6 and 4.2.1 Fix Seven Flaws

Recorded remediation: Elastic Cloud Enterprise 3.8.6 or 4.2.1 as supported for the affected release line

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

Nozomi Networks · Nozomi Networks Guardian and Central Management Console update installation

NN-2026:21-01 / NN-2026:22-01 · 2 CVEs — Nozomi Guardian and CMC 26.4.0 Fix Update-Path Root Execution

Recorded remediation: Nozomi Networks Guardian and CMC 26.4.0 or later

TechGeeks analysis·Authority

High · exploitation not stated

Project update

Apache Software Foundation · Apache Camel A2A push notification webhook validation

Apache Camel CVE-2026-71569 · 1 CVE — Apache Camel 4.22.2 Fixes A2A Webhook SSRF

Recorded remediation: Apache Camel 4.22.2 on the 4.22 stream or 4.23.0 and later

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Red Hat · Firefox 140.17 on RHEL 8.8 E4S or TUS and RHEL 9.6 EUS

RHSA-2026:92327 / RHSA-2026:92335 · 43 CVEs — Red Hat Firefox 140.17 Updates Fix 43 CVEs

Recorded remediation: firefox-140.17.0-1.el8_8 or firefox-140.17.0-1.el9_6 from the matching Red Hat repository

TechGeeks analysis·Authority

Important · exploitation not stated

Project update

Apache Software Foundation · Apache Qpid Proton C AMQP, SASL, TLS, and message-body processing

Apache Qpid Proton C CVE-2026-105031 / Apache Qpid Proton C CVE-2026-105042 / Apache Qpid Proton C CVE-2026-114230 / Apache Qpid Proton C CVE-2026-115942 · 4 CVEs — Apache Qpid Proton C 0.41.1 Fixes Four Security Flaws

Recorded remediation: Apache Qpid Proton C 0.41.1 or later

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Project update

Node Version Manager · Node Version Manager nvm_ls version filtering and documented directory auto-switch hooks

GHSA-vgqf-vc3m-4wv3 · 1 CVE — nvm 0.40.6 Fixes Version-String Command Injection

Recorded remediation: Node Version Manager 0.40.6 or later

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Octopus Deploy · Octopus Server with the LDAP authentication provider enabled

SA2026-18 · 1 CVE — Octopus Server Updates Restrict LDAP Directory Searches

Recorded remediation: Octopus Server 2026.2.13487 or 2026.3.15909; later supported releases are unaffected

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Canva · Ortto plugin for WordPress and WooCommerce

Canva CVE-2026-113387 / Canva CVE-2026-113409 / Canva CVE-2026-114173 · 3 CVEs — Canva Ortto WordPress Plugin 1.0.25 Fixes Three Flaws

Recorded remediation: Ortto plugin for WordPress 1.0.25 or later

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

ABB · ABB ASPECT-Enterprise ASP-ENT-x, NEXUS NEXUS-3-x and NEX-2x, and MATRIX MAT-x building-management products

9AKK108473A4963 · 2 CVEs — ABB Warns ASPECT 3.09 and Earlier Are Exposed to PHP2Shell

Recorded remediation: No complete firmware remedy was available at publication; ABB directs customers to the latest available firmware and its isolation and access-control mitigations

TechGeeks analysis·Authority

High to Critical · exploitation not stated

Vendor update

pgAdmin · pgAdmin 4, especially multi-user server-mode deployments

pgAdmin 4 9.19 security fixes · 15 CVEs — pgAdmin 4 9.19 Fixes 15 Security Vulnerabilities

Recorded remediation: pgAdmin 4 version 9.19, with the documented post-upgrade configuration and review actions

TechGeeks analysis·Authority

Low to Critical · exploitation not stated

Vendor update

Rancher · Rancher Manager and Fleet on the maintained 2.11 through 2.15 branches

CVE-2026-88809 / CVE-2026-88811 / CVE-2026-104623 / CVE-2026-94290 / CVE-2026-104615 · 5 CVEs — Rancher 2.15.3 and Maintained Branches Fix Five Flaws

Recorded remediation: Rancher 2.15.3, 2.14.7, 2.13.11, 2.12.15, or 2.11.19 as applicable, with Fleet 0.16.3, 0.15.8, 0.14.12, or 0.13.17 for the Fleet advisories

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Apple · Apple Xcode on macOS Tahoe 26.6 and later

Apple Xcode 27.2 · 2 CVEs — Apple Xcode 27.2 Fixes File and Sensitive-Data Access

Recorded remediation: Xcode 27.2

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Amazon Web Services · AWS-provided runtimes, base images, build images, notebooks, and customer workloads using vulnerable Brotli decoding

2026-155-AWS · 1 CVE — AWS Publishes Brotli CVE-2026-111497 Mitigation Status

Recorded remediation: Follow the live AWS service table, rebuild and redeploy with patched runtimes or images, and update vulnerable Brotli dependencies in customer-managed workloads

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Mattermost · Mattermost Server with the Agents plugin mention-reminder component

Mattermost CVE-2026-93851 · 1 CVE — Mattermost Updates Fix Agents Plugin Replacement Flaw

Recorded remediation: Mattermost 11.10.0, 11.9.2, 11.8.6, or 11.7.11

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Google ChromeOS · ChromeOS and ChromeOS Flex Stable channel with Chrome browser 156.0.8078.77

ChromeOS Stable 16836.30.0 / Chrome 156.0.8078.77 · 9 CVEs — ChromeOS 16836.30.0 Fixes Nine Browser Vulnerabilities

Recorded remediation: ChromeOS 16836.30.0 with Chrome 156.0.8078.77

TechGeeks analysis·Authority

High to Critical · exploitation not stated

Vendor update

Amazon Web Services · Strands Agents Tools environment tool

2026-154-AWS / GHSA-qjx4-hg6g-2f34 · 1 CVE — Strands Agents Tools 0.8.6 Fixes Secret-Masking Bypass

Recorded remediation: strands-agents-tools 0.8.6 or later; the environment tool is deprecated in that release

TechGeeks analysis·Authority

Medium · exploitation not stated

Known exploitation

Cisco · Cisco Secure Firewall ASA and FTD Remote Access SSL VPN

cisco-sa-asaftd-tunnel-dos-s6mgkb75 / CISA KEV: CVE-2026-76418 · 1 CVE — CISA Confirms Cisco ASA and FTD SSL VPN DoS Exploitation

Recorded remediation: The branch-specific fixed ASA or FTD release in Cisco's Fixed Software table; Cisco lists no workaround

TechGeeks analysis·Authority

High · exploitation confirmed

Vendor update

Sophos · Sophos UTM Email Protection proxy

Sophos SA 20261028 UTM RCE · 1 CVE — Sophos Issues Manual Patch for UTM Pre-Auth Root RCE

Recorded remediation: Install Sophos's manual patch immediately or migrate to a supported Sophos Firewall release

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

Canonical · Canonical LXD and MicroCloud HTTPS API mutual-TLS authentication

Canonical LXD and MicroCloud CVE-2026-112816 advisory · 1 CVE — Canonical LXD and MicroCloud Updates Fix TLS Trust Bypass

Recorded remediation: LXD 4.0.15, 5.0.11, 5.21.9, or 6.10.1; MicroCloud 2.1.5 or 3.4.1

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

Jenkins · Jenkins core weekly and LTS releases

Jenkins Security Advisory 2026-10-28 · 15 CVEs — Jenkins 2.588 and LTS 2.580.2 Fix 15 Vulnerabilities

Recorded remediation: Jenkins weekly 2.588 or Jenkins LTS 2.580.2

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Project update

Apache Software Foundation · Apache Kafka brokers, clients, Kafka Connect, and Kafka Streams

Apache Kafka October 2026 CVE Batch · 12 CVEs — Apache Kafka October Update Fixes Twelve Vulnerabilities

Recorded remediation: Apache Kafka 4.4.0, or the applicable fixed maintenance release such as 4.2.2 or 4.3.2 where the Apache CVE entry lists that branch

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Juniper Networks · Juniper Session Smart Router and Session Smart Conductor

JSA112183 · 18 CVEs — Juniper Session Smart Updates Fix 18 Security Flaws

Recorded remediation: Juniper Session Smart 7.0.5, 7.1.7, or 7.2.3 on the corresponding maintained branch

TechGeeks analysis·Authority

Low to Critical · exploitation not stated

Vendor update

Amazon Web Services · AWS SDK for pandas (awswrangler) Athena module

2026-153-AWS · 1 CVE — AWS SDK for pandas 3.16.1 Fixes Athena Result-Bucket Ownership Flaw

Recorded remediation: AWS SDK for pandas 3.16.1 or later

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Google Cloud · Google Cloud Application Integration SubWorkflow task

GCP-2026-074 · 1 CVE — Google Cloud Discloses Patched Application Integration RCE

Recorded remediation: Google Cloud managed-service remediation deployed September 11, 2026; no customer action required

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

Progress Software · Progress Telerik Document Processing Libraries, including Words, PDF, Spread and AI agent tools

Progress CVE-2026-118035 / Progress CVE-2026-118036 / Progress CVE-2026-118037 / Progress CVE-2026-118038 / Progress CVE-2026-118039 / Progress CVE-2026-118040 · 6 CVEs — Progress Telerik Document Processing 2026.3.1027 Fixes Six Flaws

Recorded remediation: Progress Telerik Document Processing Libraries 2026.3.1027 or later

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Acronis · Acronis Cyber Protect 17 and Acronis Cyber Protect Cloud Agent for Windows

UPD-2606-cfba-926e / UPD-2606-a90c-0163 / SEC-5613 / SEC-6066 / SEC-8648 / SEC-8835 / SEC-9425 / SEC-9812 / SEC-9813 / SEC-9814 / SEC-10003 / SEC-10289 / SEC-10681 / SEC-11343 · 11 CVEs — Acronis Cyber Protect 17 Update 1 Fixes Twelve Security Issues

Recorded remediation: Acronis Cyber Protect 17 build 42587; Acronis Cyber Protect Cloud Agent for Windows build 42569 for CVE-2025-30414

TechGeeks analysis·Authority

Low to High · exploitation not stated

Vendor update

Axis Communications · AXIS Camera Station Pro and AXIS Camera Station 5 database backups

Axis CVE-2026-63286 Security Advisory v1.0 · 1 CVE — Axis Camera Station Pro 6.20 Protects New Database Backups

Recorded remediation: AXIS Camera Station Pro 6.20 for newly created backups; older backups remain vulnerable and must be deleted, including the recovery backup created during upgrade

TechGeeks analysis·Authority

High · exploitation not publicly reported

Vendor update

Mozilla · Mozilla Thunderbird 159 and Thunderbird 153.6

MFSA 2026-121 / MFSA 2026-122 · 175 CVEs — Mozilla Thunderbird 159 and 153.6 Fix 175 Security CVEs

Recorded remediation: Thunderbird 159 or Thunderbird 153.6 for the corresponding branch

TechGeeks analysis·Authority

Low to High · exploitation not stated

Vendor update

Google Chrome · Google Chrome Stable for Windows, macOS, and Linux

Chrome 156 Stable 156.0.8078.73/.74 · 52 CVEs — Google Chrome 156.0.8078.73/.74 Fixes 52 Security Flaws

Recorded remediation: Chrome 156.0.8078.73/.74 on Windows and macOS; Chrome 156.0.8078.73 on Linux

TechGeeks analysis·Authority

Medium to Critical · exploitation not stated

Known exploitation

Adobe · Adobe Commerce, Adobe Commerce B2B, Magento Open Source, and Adobe Commerce Events

APSB26-73 / CISA KEV: CVE-2026-48356 · 1 CVE — CISA Adds Exploited Adobe Commerce File-Upload Flaw to KEV

Recorded remediation: The matching 2026-jul Adobe Commerce, Commerce B2B, or Magento Open Source branch update, and Adobe Commerce Events 1.21.0

TechGeeks analysis·Authority

Critical · exploitation CISA KEV

Vendor update

Ubuntu · authd on Ubuntu 26.10

USN-8957-1 · 1 CVE — Ubuntu USN-8957-1 Fixes authd Account-Matching Flaw

Recorded remediation: Ubuntu 26.10 authd 0.7.1; restart authd after the standard system update

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

WatchGuard · WatchGuard Fireware OS and Mobile VPN with SSL Client for Windows

WatchGuard PSIRT 2026-10-27 Fireware batch · 18 CVEs — WatchGuard Fireware Updates Fix 18 New Security CVEs

Recorded remediation: Fireware OS 2026.4 and 12.12.4; T15/T35 12.5.22 where listed; Mobile VPN with SSL Client for Windows 2026.4

TechGeeks analysis·Authority

Medium to Critical · exploitation not publicly reported

Vendor update

Google Chrome · ChromeOS and ChromeOS Flex LTS-150

ChromeOS LTS-150 150.0.7871.287 / Platform 16700.68.0 · 70 CVEs — Google ChromeOS LTS 150 Update Fixes 70 Listed CVEs

Recorded remediation: ChromeOS LTS-150 150.0.7871.287 (platform 16700.68.0)

TechGeeks analysis·Authority

Medium to Critical · exploitation not stated

Vendor update

Veeam · Veeam Backup for Microsoft 365 8

KB4957 · 4 CVEs — Veeam Backup for Microsoft 365 8.6 Patch 1 Fixes Four Flaws

Recorded remediation: Veeam Backup for Microsoft 365 8.6 build 8.6.0.1102 for CVE-2026-106076/106077; 8.6 Patch 1 build 8.6.0.5011 for CVE-2026-106078 and CVE-2025-64394

TechGeeks analysis·Authority

Medium to Critical · exploitation not stated

Vendor update

Veeam · Veeam Backup & Replication 13 and managed Veeam Agent for Linux 13.1

KB4948 · 4 CVEs — Veeam Backup & Replication Updates Fix Four Security Flaws

Recorded remediation: Veeam Backup & Replication 13.1.2 build 13.1.2.57 or 13.0.3 build 13.0.3.63; Veeam Agent for Linux 13.1.2 build 13.1.2.11

TechGeeks analysis·Authority

Medium to Critical · exploitation not stated

Vendor update

Veeam · Veeam ONE 13.1

KB4951 · 1 CVE — Veeam ONE 13.1 Patch 1 Fixes MFA Bypass by Administrators

Recorded remediation: Veeam ONE 13.1 Patch 1 build 13.1.0.7940

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

TeamViewer · TeamViewer Full Client, Host, Portable, and Remote Control App

TV-2026-1011 · 3 CVEs — TeamViewer 15.83 Fixes Client Code Execution and Privilege Flaws

Recorded remediation: TeamViewer 15.83; Windows legacy builds 15.64.10, 14.7.48868, and 13.2.36231; Linux 14.7.48868 and 13.2.154008; macOS 14.7.48868 and 13.2.154007

TechGeeks analysis·Authority

High · exploitation not publicly reported

Vendor update

TeamViewer · TeamViewer Remote Management Monitoring, Patch Management, and Advanced Asset Management add-ons

TV-2026-1012 · 6 CVEs — TeamViewer Updates Remote Management Add-ons for Six Privilege Flaws

Recorded remediation: TeamViewer clients 15.83; Monitoring 26.10.1; Patch Management 26.9.1; legacy v14.7 Patch Management 24.12.5

TechGeeks analysis·Authority

High · exploitation not publicly reported

Vendor update

Mozilla · Mozilla Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6

MFSA 2026-118 / MFSA 2026-119 / MFSA 2026-120 · 171 CVEs — Mozilla Firefox 159 and ESR Updates Fix 171 Security CVEs

Recorded remediation: Firefox 159; Firefox ESR 115.44; Firefox ESR 153.6

TechGeeks analysis·Authority

Low to High · exploitation not stated

Vendor update

Google Cloud · Google Cloud Compute Engine

GCP-2026-073 · 1 CVE — Google Cloud Discloses Fixed Compute Engine Authorization Flaw

Recorded remediation: Google Cloud service remediation deployed August 31, 2026; no customer action required

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

HashiCorp · HashiCorp Consul, Consul Enterprise, and consul-k8s

HCSEC-2026-46 / HCSEC-2026-47 / HCSEC-2026-48 / HCSEC-2026-49 / HCSEC-2026-50 · 5 CVEs — HashiCorp Consul 2.1.0 Fixes Five Authorization and Availability Flaws

Recorded remediation: Consul Community 2.1.0; Consul Enterprise 2.1.0 or 1.21.19; and consul-k8s 2.1.0 or 1.8.18, as applicable

TechGeeks analysis·Authority

Medium to Critical · exploitation not stated

Vendor update

Amazon Web Services · AWS CDK @aws-cdk/aws-redshift-alpha database-query custom resource handlers

2026-151-AWS · 1 CVE — AWS CDK 2.274.0 Fixes Redshift Custom-Resource SQL Injection

Recorded remediation: @aws-cdk/aws-redshift-alpha 2.274.0-alpha.0 or later

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Amazon Web Services · AWS services and customer-managed AWS components that rely on affected eMudhra or AAA certificate-authority roots

2026-150-AWS · 1 CVE — AWS Directs Trust-Bundle Updates After eMudhra Key Compromise

Recorded remediation: Botocore 1.43.117 or later, current Amazon Linux ca-certificates packages, current Corretto releases, the Bottlerocket interim trust override until updated AMIs arrive, and AWS's documented service-specific trust-store rollout

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Postiz · Postiz self-hosted social-media management application

Postiz v2.25.3 / PSA-2026-E9AHFV / PSA-2026-YT2HMH · 2 CVEs — Postiz 2.25.3 Fixes File Read and Token Forgery Flaws

Recorded remediation: Postiz 2.25.3 or later

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

HCL Software · HCL BigFix Platform

KB0134758 · 1 CVE — HCL BigFix Updates CA Bundle After Certificate Compromise

Recorded remediation: Mozilla CA certificate bundle dated October 20, 2026 or later, available beginning with BES Support v1520

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Oracle · Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition JSSE trust stores

Oracle Security Alert CVE-2026-114820 · 1 CVE — Oracle Issues Emergency Java Trust-Store Update for eMudhra Risk

Recorded remediation: The latest Oracle Java update that removes the impacted root certificates, or Oracle's documented root-removal or revocation-checking mitigations when the patch cannot yet be installed; the public alert does not state a fixed build matrix

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Postiz · Postiz self-hosted social-media management application

Postiz v2.25.2 / PSA-2026-JNXM56 · 1 CVE — Postiz 2.25.2 Fixes Provider-Method File Read and Crash

Recorded remediation: Postiz 2.25.2 or later

TechGeeks analysis·Authority

Critical · exploitation not stated

Known exploitation

Collabora Online · Collabora Online - Built-in CODE Server app for Nextcloud (richdocumentscode)

GHSA-g3vx-3m76-fghh / CISA KEV: CVE-2026-110447 · 1 CVE — CISA Adds Exploited Collabora Built-in CODE Flaw to KEV

Recorded remediation: richdocumentscode 26.4.303 or later, or removal of the Built-in CODE app; end-of-life Nextcloud 29 and earlier must be upgraded or the app removed

TechGeeks analysis·Authority

Critical · exploitation CISA KEV

Known exploitation

Arista · Arista VeloCloud Orchestrator On-Prem (formerly VeloCloud Orchestrator by Broadcom)

Security Advisory 0199 / CISA KEV: CVE-2026-114625 · 1 CVE — CISA Adds Exploited Arista VeloCloud Orchestrator Flaw to KEV

Recorded remediation: VCO 5.2.3.18 or later in the 5.2 train, 6.1.3.10 or later in the 6.1 train, or 6.4.2.12 or later in the 6.4 train

TechGeeks analysis·Authority

Critical · exploitation CISA KEV

Vendor update

Amazon Web Services · AWS MCP Server managed run_script tool

2026-149-AWS · 1 CVE — AWS Remediates MCP Server run_script Sandbox Validation

Recorded remediation: AWS service-side remediation; no customer action is required

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Amazon Web Services · Amazon Web Services Multi Model Server (MMS)

2026-148-AWS · 2 CVEs — AWS Directs Multi Model Server Users to Migrate After Two Flaws

Recorded remediation: No fixed release is available or planned because MMS is end of life; discontinue it and migrate to a supported model-serving solution

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

ABB · B&R APROL process-control systems

SA26P015 · 2 CVEs — ABB Warns APROL R 4.4-65 and Earlier Are Exposed to PHP2Shell

Recorded remediation: No fixed version is identified in revision 2; B&R plans patches for R 4.4-65 on October 26, 2026 and R 4.4-01 on October 29, 2026

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

ABB · ABB Manufacturing Execution System installations supplied with DokuWiki

4hzk000017 · 2 CVEs — ABB MES DokuWiki Installations Require Critical PHP Updates

Recorded remediation: PHP 8.2.35, 8.3.36, 8.4.27, or 8.5.12, selected through the supported operating-system channel

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

Tenable · Tenable Enclave Security

TNS-2026-31 · 2 CVEs — Tenable Enclave Security Patch SC-202610.2 Updates PHP

Recorded remediation: Tenable patch SC-202610.2 with PHP 8.2.35

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

Tenable · Tenable Security Center

TNS-2026-30 · 2 CVEs — Tenable Security Center Patch SC-202610.2 Updates PHP

Recorded remediation: Tenable patch SC-202610.2 with PHP 8.2.35

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

Google Cloud · Google Cloud and Firebase services, images, SDKs, and self-managed environments that can trust the affected eMudhra or AAA CA certificates

GCP-2026-071 · 1 CVE — Google Cloud GCP-2026-071 Directs eMudhra CA Distrust Updates

Recorded remediation: Current operating-system trust-store updates and gcloud releases for customer-managed components; Google-managed fleet mitigations and service-specific updates as documented by Google

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Amazon Web Services · aws-c-mqtt MQTT 3.1.1 compatibility adapter

2026-147-AWS · 1 CVE — AWS aws-c-mqtt 0.16.2 Fixes MQTT Adapter Remote Denial of Service

Recorded remediation: aws-c-mqtt 0.16.2 or later

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Amazon Web Services · Strands Agents SDK A2A Server for Python and TypeScript

2026-146-AWS · 1 CVE — AWS Strands Agents SDK Updates Isolate A2A Conversation State

Recorded remediation: strands-agents 1.43.0 and @strands-agents/sdk 1.5.0 or later

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Ubuntu · zlib packages on Ubuntu 24.04 LTS, 26.04 LTS, and 26.10

USN-8954-1 · 1 CVE — Ubuntu USN-8954-1 Fixes zlib Heap Buffer Overflow

Recorded remediation: noble: zlib 1:1.3.dfsg-3.1ubuntu2.3; resolute: zlib 1:1.3.dfsg+really1.3.1-1ubuntu3.2; stonking: zlib 1:1.3.dfsg+really1.3.2-3ubuntu1.1

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Amazon Web Services · AWS Serverless Application Model CLI Terraform hook

2026-145-AWS · 1 CVE — AWS SAM CLI 1.166.2 Fixes Terraform Hook Command Injection

Recorded remediation: AWS SAM CLI 1.166.2 or later

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Amazon Web Services · Amazon Athena engine version 3

2026-144-AWS · 1 CVE — AWS Remediates Athena Engine v3 Cross-Account Metadata Disclosure

Recorded remediation: AWS service remediation deployed October 7, 2026; no customer action required

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Ubuntu · python-tornado packages on Ubuntu 16.04 ESM through Ubuntu 26.10

USN-8952-1 · 6 CVEs — Ubuntu USN-8952-1 Fixes Tornado Request-Handling Flaws

Recorded remediation: bionic: python-tornado 4.5.3-1ubuntu0.2+esm4; focal: python-tornado 6.0.3+really5.1.1-3ubuntu0.1~esm7; jammy: python-tornado 6.1.0-3ubuntu0.1~esm6; noble: python-tornado 6.4.0-1ubuntu0.6; resolute: python-tornado 6.5.4-0.1ubuntu0.2; stonking: python-tornado 6.5.5-5ubuntu1.1; xenial: python-tornado 4.2.1-1ubuntu3.1+esm4

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Synology · Synology Calendar, Mail Station, and PHP packages installed on DSM

Synology-SA-26:14 · 2 CVEs — Synology SA-26:14 Fixes Critical PHP2Shell RCE in DSM Packages

Recorded remediation: Calendar 3.0.4-21435; Mail Station 30000002.3.19-20333; or the advisory-listed fixed PHP package; remove or migrate PHP 7.3

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

Johnson Controls · CEM AC2000, EasyIO FS/FW/NEO, Visonic PowerManage, and listed Illustra camera products

JCI-PSA-2026-24 v5 · 2 CVEs — Johnson Controls Corrects EasyIO PHP2Shell Fix Versions

Recorded remediation: AC2000 advisory hotfixes; EasyIO FS 3.0b64-s1, FW 3.0b26-s1, NEO CW 3.3b26-s1, and NEO EC 3.3b64-s1; PowerManage 5.0.45; and the model-specific Illustra builds in JCI-PSA-2026-24 v5

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

WatchGuard · WatchGuard Agent for macOS with Endpoint Security Full Disk Encryption

CVE-2026-96293 · 1 CVE — WatchGuard Revises FileVault Recovery-Key Fix to Agent 1.17.23

Recorded remediation: WatchGuard Agent 1.17.23.0000 or later

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

WatchGuard · WatchGuard Agent for Windows

CVE-2026-115253 · 1 CVE — WatchGuard Agent 1.25.14 Fixes Windows Log Directory Permissions

Recorded remediation: WatchGuard Agent 1.25.14.0000 or later

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Tenable · Tenable Enclave Security

TNS-2026-29 · 2 CVEs — Tenable Enclave Security Patch SC-202610.1 Updates PHP

Recorded remediation: Tenable patch SC-202610.1 with PHP 8.2.35

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

Tenable · Tenable Security Center

TNS-2026-28 · 2 CVEs — Tenable Security Center Patch SC-202610.1 Updates PHP

Recorded remediation: Tenable patch SC-202610.1 with PHP 8.2.35

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

Okta · Okta Access Gateway Admin Console

CVE-2026-115546 · 1 CVE — Okta Access Gateway 2026.10.2 Fixes Authentication Source Verification

Recorded remediation: Okta Access Gateway 2026.10.2 or later

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Okta · Okta Access Gateway Admin Console

CVE-2026-115547 · 1 CVE — Okta Access Gateway 2026.10.2 Fixes Admin Console Command Execution

Recorded remediation: Okta Access Gateway 2026.10.2 or later

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Okta · Okta Access Gateway appliances

Okta OAG PHP runtime advisory · 2 CVEs — Okta Access Gateway 2026.44.0 Updates PHP for Two RCE Flaws

Recorded remediation: Okta Access Gateway 2026.44.0 with PHP 8.3.36

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Ubuntu · libsoup3 HTTP client and server packages on Ubuntu 26.10

USN-8890-2 · 8 CVEs — Ubuntu USN-8890-2 Extends libsoup Fixes to Ubuntu 26.10

Recorded remediation: stonking: libsoup3 3.6.6-1ubuntu3

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Amazon Web Services · Customer-managed PHP web runtimes on AWS services

2026-143-AWS / GHSA-w8hw-w9fx-j79w / GHSA-6wmf-4rv5-p3rp · 2 CVEs — AWS Bulletin 2026-143 Addresses Critical PHP Runtime RCE

Recorded remediation: PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35; migrate PHP 5.4–8.1 to a supported fixed branch

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

Amazon Web Services · Amazon SageMaker Python SDK v2 and v3 default_bucket() workflows

2026-142-AWS / GHSA-5rx8-8fr2-f855 · 1 CVE — AWS Fixes SageMaker SDK Default-Bucket Ownership Flaw

Recorded remediation: Amazon SageMaker Python SDK 2.257.3 or 3.10.0

TechGeeks analysis·Authority

High to Critical · exploitation not stated

Vendor update

Ubuntu · c-ares asynchronous DNS resolver packages on Ubuntu 16.04 ESM through 26.04 LTS

USN-8951-1 · 4 CVEs — Ubuntu USN-8951-1 Fixes c-ares DNS Parsing Flaws

Recorded remediation: bionic: c-ares 1.14.0-1ubuntu0.2+esm3; focal: c-ares 1.15.0-1ubuntu0.5+esm1; jammy: c-ares 1.18.1-1ubuntu0.22.04.4; noble: c-ares 1.27.0-1.0ubuntu1.1; resolute: c-ares 1.34.6-1ubuntu0.2; xenial: c-ares 1.10.0-3ubuntu0.2+esm4

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Ubuntu · NSS trust-store packages on Ubuntu 14.04 ESM through Ubuntu 26.10

USN-8947-1 · CVE not listed — Ubuntu USN-8947-1 Removes Compromised CA Trust from NSS

Recorded remediation: bionic: nss 2:3.35-2ubuntu2.16+esm2; focal: nss 2:3.98-0ubuntu0.20.04.2+esm2; jammy: nss 2:3.98-0ubuntu0.22.04.5; noble: nss 2:3.98-1ubuntu0.3; resolute: nss 2:3.120-1ubuntu2.2; stonking: nss 2:3.127-1ubuntu0.1; trusty: nss 2:3.28.4-0ubuntu0.14.04.5+esm14; xenial: nss 2:3.28.4-0ubuntu0.16.04.14+esm6

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Ubuntu · Poppler PDF rendering packages on Ubuntu 22.04 LTS, 24.04 LTS, 26.04 LTS, and 26.10

USN-8950-1 · 1 CVE — Ubuntu USN-8950-1 Fixes Poppler PDF Denial of Service

Recorded remediation: jammy: poppler 22.02.0-2ubuntu0.15; noble: poppler 24.02.0-1ubuntu9.11; resolute: poppler 26.01.0-2ubuntu0.3; stonking: poppler 26.07.0-2ubuntu1.1

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Palo Alto Networks · PAN-OS dataplane Brotli inspection, Prisma Cloud Application Security Transporter Client, and the separately tracked PAN-OS PHP2Shell management-interface exposure

Palo Alto Networks CVE-2026-109618 / Palo Alto Networks CVE-2026-111497 / CISA KEV: CVE-2026-111497 · 3 CVEs — Palo Alto Adds Prisma Cloud and SCM to Brotli Remediation

Recorded remediation: The branch-specific PAN-OS builds in the CVE-2026-111497 table; Prisma transporter 0.2.9; Palo Alto directly remediated the listed SaaS services, including Prisma Cloud and Strata Cloud Manager

TechGeeks analysis·Authority

Critical · exploitation not publicly reported

Vendor update

Ubuntu · PHP packages on supported Ubuntu releases from 14.04 ESM through 26.10

USN-8948-1 / USN-8948-2 / GHSA-w8hw-w9fx-j79w / GHSA-6wmf-4rv5-p3rp · 2 CVEs — Ubuntu USN-8948-1 and USN-8948-2 Fix Critical PHP RCE Flaws

Recorded remediation: 26.10: 8.5.9-0ubuntu2.1; 26.04: 8.5.4-0ubuntu1.5; 24.04: 8.3.6-0ubuntu0.24.04.13; 22.04: 8.1.2-1ubuntu2.28; 20.04: 7.4.3-4ubuntu2.29+esm5; 18.04: 7.2.24-0ubuntu0.18.04.17+esm14; 16.04: 7.0.33-0ubuntu0.16.04.16+esm22; 14.04: 5.5.9+dfsg-1ubuntu4.29+esm18

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

Docker · Docker Sandboxes created from Docker built-in kit template images

Docker Sandboxes response to eMudhra CA compromise · CVE not listed — Docker Updates Sandbox Trust Stores After eMudhra CA Compromise

Recorded remediation: Recreate each affected sandbox with --pull always to fetch rebuilt images, or update the ca-certificates package in place and restart applications; rebuild custom templates from updated base content.

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Node.js · Node.js 22.x, 24.x, and 26.x release lines

Node.js October 21, 2026 security release / Node.js 22.23.4 / Node.js 24.22.1 / Node.js 26.12.1 · 10 CVEs — Node.js Security Releases Fix Ten Runtime Vulnerabilities

Recorded remediation: Node.js 22.23.4, 24.22.1, or 26.12.1, as applicable to the supported release line

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Ubuntu · Unbound packages on supported Ubuntu releases from 14.04 ESM through 26.04 LTS

USN-8946-1 · 10 CVEs — Ubuntu USN-8946-1 Fixes Unbound DNS Vulnerabilities

Recorded remediation: 26.04: 1.24.2-1ubuntu2.4; 24.04: 1.19.2-1ubuntu3.12; 22.04: 1.13.1-1ubuntu5.17; 20.04: 1.9.4-2ubuntu1.11+esm3; 18.04: 1.6.7-1ubuntu2.6+esm6; 16.04: 1.5.8-1ubuntu1.1+esm5; 14.04: 1.4.22-1ubuntu4.14.04.3+esm5

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Google Chrome · ChromeOS and ChromeOS Flex stable channel

ChromeOS Stable 16836.19.0 · 117 CVEs — Google ChromeOS 156 Stable Update Fixes 117 Listed CVEs

Recorded remediation: ChromeOS platform version 16836.19.0 with browser version 156.0.8078.42

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Google Cloud · Customer-managed PHP workloads running on Google Cloud

GCP-2026-070 / GHSA-w8hw-w9fx-j79w / GHSA-6wmf-4rv5-p3rp · 2 CVEs — Google Cloud GCP-2026-070 Warns of Critical PHP RCE Flaws

Recorded remediation: Redeploy with PHP 8.2.35, 8.3.36, 8.4.27, or 8.5.12 as applicable; unsupported PHP branches require migration to a supported fixed branch.

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

GitLab · GitLab Community Edition and Enterprise Edition, self-managed installations

GitLab Critical Patch Release 19.5.1 / 19.4.3 / 19.3.6 / 19.2.9 / 19.1.9 / 19.0.10 / 18.11.13 · 12 CVEs — GitLab Critical Patch Release Fixes CVSS 10 Server RCE

Recorded remediation: GitLab 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3, or 19.5.1; upgrade to the latest supported patch

TechGeeks analysis·Authority

Low to Critical · exploitation not stated

Vendor update

FreeBSD · FreeBSD base-system TLS certificate store

FreeBSD-SA-26:73.caroot · CVE not listed — FreeBSD-SA-26:73.caroot Removes Trust After eMudhra Compromise

Recorded remediation: 15.1-RELEASE-p6, 14.5-RELEASE-p3, 14.4-RELEASE-p12, or a supported stable/security branch dated after the advisory correction; a signed source patch and a manual certctl workaround are also provided.

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Oracle · Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition JSSE trust stores

Oracle Security Alert CVE-2026-91403 · 1 CVE — Oracle Java Security Alert Distrusts Compromised eMudhra Intermediates

Recorded remediation: The latest Oracle Java update that distrusts the impacted intermediate certificates, or Oracle's documented root-removal or revocation-checking mitigations when the patch cannot yet be installed; the public alert does not state a fixed build matrix

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Amazon Web Services · AWS CICD-toolchain-for-serverless-applications sample

2026-141-AWS · 1 CVE — AWS Serverless CI/CD Sample 1.0.11 Fixes Privilege Assignment Flaw

Recorded remediation: AWS CICD-toolchain-for-serverless-applications 1.0.11 or later

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Google Chrome · Google Chrome Stable for Windows, macOS, Linux, and Android

Chrome 156 Stable for Desktop / Chrome 156 for Android · 353 CVEs — Google Chrome 156 Stable Updates Fix 353 Security Issues

Recorded remediation: Chrome 156.0.8078.47 on Linux and Android, or 156.0.8078.47/156.0.8078.48 on Windows and macOS, as delivered for the supported channel

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Amazon Web Services · Kiro Crew WhatsApp channel

2026-140-AWS · 1 CVE — AWS Kiro Crew 0.7.2 Fixes WhatsApp Cross-Session Authorization Flaw

Recorded remediation: Kiro Crew 0.7.2 or later

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Known exploitation

Plex · Plex Media Server

Plex Security Update 2026-10-19 / CISA KEV: CVE-2026-96652 / CVE-2026-96654 / CVE-2026-96655 / CVE-2026-96656 · 4 CVEs — CISA Adds Actively Exploited Plex Media Server Chain to KEV

Recorded remediation: Plex Media Server 1.43.3.10861 or later

TechGeeks analysis·Authority

Not provided by the authority · exploitation confirmed

Known exploitation

EG Secure Solutions · SiteGuard Server Edition for Apache, Nginx, IIS, and FreeBSD

CISA KEV: CVE-2026-106931 / SiteGuard Alert 202610-1 · 1 CVE — CISA Adds Exploited SiteGuard Server Edition Command Injection to KEV

Recorded remediation: 8.00 Update5 for Apache, Nginx, and IIS, or 7.00 Update6 for FreeBSD Apache and Nginx; the vendor also provides patches for affected end-of-support branches

TechGeeks analysis·Authority

High · exploitation CISA KEV

Vendor update

Ubuntu · XZ Utils packages on supported Ubuntu releases from 14.04 ESM through 26.10

USN-8945-1 · CVE not listed — Ubuntu USN-8945-1 Fixes XZ Utils Memory Handling Flaw

Recorded remediation: 26.10: 5.8.3-1ubuntu1; 26.04: 5.8.3-1ubuntu0.1; 24.04: 5.6.1+really5.4.5-1ubuntu0.4; 22.04: 5.2.5-2ubuntu1.2; 20.04: 5.2.4-1ubuntu1.1+esm2; 18.04: 5.2.2-1.3ubuntu0.1+esm2; 16.04: 5.1.1alpha+20120614-2ubuntu2.16.04.1+esm3; 14.04: 5.1.1alpha+20120614-2ubuntu2.14.04.1+esm3

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Mozilla · Firefox 158, Firefox ESR 153, and Firefox ESR 115

MFSA 2026-111 / MFSA 2026-112 / MFSA 2026-113 · 4 CVEs — Mozilla Updates Firefox and ESR for Certificate Blocklist and Component Flaws

Recorded remediation: Firefox 158.0.1, Firefox ESR 153.5.1, or Firefox ESR 115.43.1, as applicable

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Red Hat · cockpit-files on RHEL 9

RHSA-2026:84595 · 2 CVEs — Red Hat Updates Cockpit Files on RHEL 9

Recorded remediation: cockpit-files 36.1-1.el9_8.1

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Red Hat · webkit2gtk3 on RHEL 8

RHSA-2026:84584 · 11 CVEs — Red Hat Updates WebKitGTK for 11 RHEL 8 Flaws

Recorded remediation: webkit2gtk3 2.54.1-1.el8_10

TechGeeks analysis·Authority

Medium to Critical · exploitation not stated

Vendor update

Red Hat · perl-URI on RHEL 8 and RHEL 10

RHSA-2026:84590 / RHSA-2026:84587 · 1 CVE — Red Hat Updates perl-URI on RHEL 8 and RHEL 10

Recorded remediation: perl-URI 1.73-4.el8_10 or 5.27-3.el10_2.1 for the matching stream

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · python-lxml on RHEL 8.6 and 8.8 extended support streams

RHSA-2026:84592 / RHSA-2026:84593 · 1 CVE — Red Hat Updates python-lxml on RHEL 8 Extended Streams

Recorded remediation: python-lxml 4.2.3-4.el8_6.1 or 4.2.3-4.el8_8.1 for the matching stream

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · gegl04 on RHEL 9.6 Extended Update Support

RHSA-2026:84575 · 1 CVE — Red Hat Updates GEGL on RHEL 9.6 Extended Support

Recorded remediation: gegl04 0.4.34-3.el9_6.2

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · python3.14-urllib3 on RHEL 9 and RHEL 10

RHSA-2026:84578 / RHSA-2026:84577 · 2 CVEs — Red Hat Updates urllib3 for Two RHEL Security Flaws

Recorded remediation: python3.14-urllib3 2.6.3-2.el9_8.6 or 2.6.3-2.el10_2.6 for the matching stream

TechGeeks analysis·Authority

High · exploitation not stated

Project update

Gitea · Gitea releases through 28.1.0, with issue-specific affected ranges and configurations

Gitea 28.2.0 / GHSA-mf69-7pqq-86vx / GHSA-vcp6-2qc6-gvq3 / GHSA-c3cr-qq9g-666c / GHSA-6f9g-7jgm-m5ph / GHSA-4jmf-h2cm-hg7w / GHSA-wx44-9m3m-rjqx / GHSA-96gv-2xc4-4hxj / GHSA-8j56-f865-gqq2 / GHSA-xmfc-hqq8-33wh / GHSA-cwq7-782w-pxcc / GHSA-fxq4-gr55-7x5g / GHSA-xvfh-qwmh-f92w · 12 CVEs — Gitea 28.2.0 Addresses 12 Security Vulnerabilities

Recorded remediation: Gitea 28.2.0 or later on the current 28.x stream; follow each advisory for older supported stream fixes

TechGeeks analysis·Authority

Low to High · exploitation not stated

Project update

OneUptime · OneUptime 14.0.2 through 14.0.68 with Kubernetes or infrastructure AI features enabled

GHSA-8fph-9j9f-xxgc / CVE-2026-112047 / OneUptime 14.0.69 · 1 CVE — OneUptime 14.0.69 Fixes Kubernetes AI Authorization Bypass

Recorded remediation: OneUptime 14.0.69 or later

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Red Hat · Red Hat Hardened Images .NET 9 runtime, ASP.NET Core, SDK, targeting, template, and related RPM families

RHSA-2026:84424 · 4 CVEs — Red Hat Hardened Images .NET 9 Update Fixes Four Network Flaws

Recorded remediation: the complete RHSA-2026:84424 package set for the deployed architecture, including .NET and ASP.NET Core runtime 9.0.21 and SDK 9.0.122 RPMs

TechGeeks analysis·Authority

Medium / High · exploitation not stated

Vendor update

Red Hat · Red Hat Hardened Images Grafana 12.4, 13.1, and 13.2 RPM families

RHSA-2026:84422 / RHSA-2026:84423 / RHSA-2026:84431 · 1 CVE — Red Hat Hardened Images Grafana Updates Fix Path-Decoding Bypass

Recorded remediation: grafana12.4 12.4.12-0.5.hum1, grafana13.1 13.1.7-0.2.hum1, or grafana13.2 13.2.3-0.2.hum1, matched to the deployed advisory branch

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Red Hat · Red Hat Hardened Images containing the listed libpng RPM families

RHSA-2026:84420 · 1 CVE — Red Hat Hardened Images libpng Update Fixes a Use-After-Free

Recorded remediation: the complete RHSA-2026:84420 package set for the deployed architecture, including libpng 1.6.59-0.1.hum1

TechGeeks analysis·Authority

Medium · exploitation not stated

Known exploitation

Fortinet · FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager releases listed in FG-IR-26-122

FG-IR-26-122 / CISA KEV: CVE-2025-61624 · 1 CVE — CISA Adds Exploited Fortinet Path Traversal to KEV

Recorded remediation: FortiOS 7.6.5 or 7.4.10; FortiPAM 1.7.1; FortiProxy 7.6.5 or 7.4.12; FortiSwitchManager 7.2.8 or 7.0.7; affected older branches must migrate to a fixed release

TechGeeks analysis·Authority

Medium · exploitation CISA KEV

Known exploitation

BeyondTrust · BeyondTrust Remote Support appliances

BT26-05 / CISA KEV: CVE-2026-102764 · 1 CVE — CISA Adds Exploited BeyondTrust Remote Support Flaw to KEV

Recorded remediation: the BT26-05-RS patch for Remote Support 24.3.1 through 26.2.3; self-hosted releases older than 24.3.1 must first upgrade to a supported newer release

TechGeeks analysis·Authority

Critical · exploitation CISA KEV

Vendor update

Amazon Web Services · FreeRTOS-Plus-TCP IPv6 Router Advertisement handler and DNS resolver

2026-139-AWS · 2 CVEs — AWS FreeRTOS-Plus-TCP V4.4.2 Fixes IPv6 and DNS Validation

Recorded remediation: FreeRTOS-Plus-TCP V4.4.2 or later, with ipconfigDNS_CHECK_REPLY_SOURCE_IP enabled for CVE-2026-102552, including equivalent fixes in any fork or derivative

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Amazon Web Services · FreeRTOS-Kernel Arm Cortex-R82 MPU port

2026-138-AWS · 2 CVEs — AWS FreeRTOS-Kernel V11.3.2 Fixes MPU Authorization Flaws

Recorded remediation: FreeRTOS-Kernel V11.3.2 or later, including equivalent fixes in any fork or derivative

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Red Hat · Red Hat Enterprise Linux 6 Extended Lifecycle Support Extension kernel packages

RHSA-2026:83796 · 3 CVEs — Red Hat RHEL 6 ELS Kernel Update Fixes ATM and IPv6 Flaws

Recorded remediation: the RHSA-2026:83796 package set for the deployed architecture, including kernel 2.6.32-754.65.1.el6, followed by the required machine restart

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · RHEL 9.2 SAP E4S, RHEL 9.4 SAP E4S, and RHEL 9.6 EUS kernel package families listed in RHSA-2026:83738, RHSA-2026:83797, and RHSA-2026:83775

RHSA-2026:83738 / RHSA-2026:83775 / RHSA-2026:83797 · 1 CVE — Red Hat Extends CVE-2026-98260 Kernel Fixes Across RHEL 9

Recorded remediation: the complete advisory-matched package set for the deployed architecture: kernel 5.14.0-284.198.1.el9_2 for RHEL 9.2 SAP E4S, 5.14.0-427.156.1.el9_4 for RHEL 9.4 SAP E4S, or 5.14.0-570.149.1.el9_6 for RHEL 9.6 EUS

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · Wireshark on Red Hat Enterprise Linux 8 AppStream and CRB

RHSA-2026:83657 · 4 CVEs — Red Hat Updates Wireshark on RHEL 8 for Four Vulnerabilities

Recorded remediation: wireshark and wireshark-cli 2.6.2-21.el8_10 for the applicable RHEL 8 architecture

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Red Hat · Red Hat Migration Toolkit for Virtualization 2.10 and 2.11

RHSA-2026:83662 / RHSA-2026:83663 · 5 CVEs — Red Hat Updates Migration Toolkit for Virtualization 2.10 and 2.11

Recorded remediation: the advisory-listed MTV 2.10 or 2.11 RHEL 9 container-image digests for the deployed stream

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

Google · Google Chrome Stable on Windows, macOS, Linux, and Android and Extended Stable on Windows and macOS

Chrome Stable 155.0.8059.84/.85 / Chrome Extended Stable 152.0.7977.169 / Chrome for Android 155.0.8059.84 · 15 CVEs — Chrome Stable and Extended Stable Updates Fix Critical Flaws

Recorded remediation: Chrome Stable 155.0.8059.84/.85 on Windows and macOS, 155.0.8059.84 on Linux and Android, or Extended Stable 152.0.7977.169 on Windows and macOS

TechGeeks analysis·Authority

Medium to Critical · exploitation not stated

Vendor update

Red Hat · Red Hat OpenShift Container Platform 4.16

RHSA-2026:77612 / RHSA-2026:77611 · 4 CVEs — Red Hat OpenShift Container Platform 4.16.73 Fixes Four CVEs

Recorded remediation: OpenShift Container Platform 4.16.73 with its advisory-listed release images and packages

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · Red Hat OpenShift Container Platform 4.17

RHSA-2026:77548 / RHSA-2026:77547 · 4 CVEs — Red Hat OpenShift Container Platform 4.17.59 Fixes Four CVEs

Recorded remediation: OpenShift Container Platform 4.17.59 with its advisory-listed release images and packages

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · Red Hat build of Quarkus 3.27 and 3.33

RHSA-2026:83082 / RHSA-2026:83520 · 24 CVEs — Red Hat Quarkus 3.27.6 and 3.33.4 Address Broad CVE Sets

Recorded remediation: Red Hat build of Quarkus 3.27.6 or 3.33.4, matched to the deployed supported stream

TechGeeks analysis·Authority

Medium to Critical · exploitation not stated

Vendor update

Amazon Web Services · self-managed KVM hypervisors using virtio-net or TAP on Linux kernel 4.4 through 6.18

2026-137-AWS · 1 CVE — AWS Updates Amazon Linux Hosts for KVM Virtio-Net Vulnerability

Recorded remediation: the advisory-listed Amazon Linux 2 or Amazon Linux 2023 kernel package, or the supported fixed kernel from another Linux distributor, followed by a host reboot

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Ubuntu · RabbitMQ Server on Ubuntu 16.04 ESM through Ubuntu 26.04 LTS

USN-8933-1 · 12 CVEs — Ubuntu USN-8933-1 Fixes Twelve RabbitMQ Server Vulnerabilities

Recorded remediation: bionic: rabbitmq-server 3.6.10-1ubuntu0.5+esm1 / focal: rabbitmq-server 3.8.3-0ubuntu0.3+esm2 / jammy: rabbitmq-server 3.9.27-0ubuntu0.6 / noble: rabbitmq-server 3.12.1-1ubuntu1.7 / resolute: rabbitmq-server 4.0.5-10ubuntu5.2 / xenial: rabbitmq-server 3.5.7-1ubuntu0.16.04.4+esm3

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Red Hat · Red Hat OpenShift GitOps 1.22 CLI tools

RHSA-2026:83629 · 1 CVE — Red Hat OpenShift GitOps CLI 1.22.2 Fixes a Critical Flaw

Recorded remediation: Red Hat OpenShift GitOps CLI tools 1.22.2

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

Red Hat · Red Hat OpenShift Data Foundation 4.14

RHSA-2026:83627 · 5 CVEs — Red Hat OpenShift Data Foundation 4.14.40 Fixes Five CVEs

Recorded remediation: Red Hat OpenShift Data Foundation 4.14.40 and the advisory-listed container images

TechGeeks analysis·Authority

High to Critical · exploitation not stated

Vendor update

Amazon Web Services · Amazon Neptune DB clusters using engine versions 1.2.0.0 or later

2026-136-AWS · 1 CVE — AWS Fixes Gremlin Graph-Import Deserialization in Amazon Neptune

Recorded remediation: Amazon Neptune engine 1.4.7.1, 1.4.8.1, or 1.5.0.0, matched to the deployed engine line

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

ABB · ABB My Control System 26.4 and 26.5 on Windows or Edgenius

7PAA025438 · 1 CVE — ABB My Control System 26.6 Fixes Temporary-File Exhaustion

Recorded remediation: My Control System 26.6 for eligible deployments; use ABB's documented Windows or Edgenius cleanup procedure until an Edgenius OS upgrade path is available

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Siemens · Siemens Software Center

SSA-580366 / CISA KEV: CVE-2026-110936 · 1 CVE — CISA Adds Exploited Siemens Software Center Flaw to KEV

Recorded remediation: 4.0.9.8 or later

TechGeeks analysis·Authority

Medium (CVSS v3.1) / High (CVSS v4.0) · exploitation not stated

Vendor update

Palo Alto Networks · PAN-OS on PA-Series, VM-Series, and Panorama, plus Prisma Access where CVE-2026-0321 applies

CVE-2026-0317 / CVE-2026-0320 / CVE-2026-0321 · 3 CVEs — Palo Alto Revises Three PAN-OS Advisories With Available Fixes

Recorded remediation: the exact advisory-listed branch fix, including PAN-OS 12.2.4, 12.1.10-h2, 11.2.16, or 11.1.16-h3 where applicable, the listed older-branch hotfix, and the listed Prisma Access hotfix for CVE-2026-0321

TechGeeks analysis·Authority

Medium to High · exploitation not publicly reported

Known exploitation

Palo Alto Networks · PAN-OS management interfaces on PA-Series, VM-Series, and Panorama

CVE-2026-0322 / CISA KEV addition 2026-10-14 · 1 CVE — Palo Alto PAN-OS Management RCE Is Listed as Attacked

Recorded remediation: the advisory-matched fixed build: 12.2.4, 12.1.4-h12/12.1.7-h8/12.1.10-h2, 11.2.4-h22/11.2.7-h21/11.2.10-h15/11.2.13-h3/11.2.16, 11.1 branch fixes through 11.1.16-h3, or 10.2 branch fixes through 10.2.18-h12

TechGeeks analysis·Authority

High · exploitation confirmed

Vendor update

Cisco · physical and virtual Cisco Secure Email Gateway appliances running vulnerable AsyncOS with File Reputation enabled and Content Scanner Tools before 25.3.0.5525

cisco-sa-esa-afw-zqYJkjxp / CISA KEV CVE-2026-76519 · 1 CVE — Cisco Secure Email Gateway File-Write Flaw Is Actively Exploited

Recorded remediation: Content Scanner Tools 25.3.0.5525 or later; AsyncOS 15.5.5-014 for 15.5 or 16.5.0-780 for 16.0 and 16.5 as applicable

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

TLS Library Projects · GnuTLS, pyca/cryptography, wolfSSL, Go crypto/x509, OpenSSL, Apple Security.framework, Mozilla NSS, LibreSSL, AWS-LC, s2n-tls, and Mbed TLS

VU#948176 · 3 CVEs — CERT/CC Coordinates Name-Constraint Differences Across TLS Libraries

Recorded remediation: GnuTLS 3.8.13, pyca/cryptography 46.0.6, wolfSSL 5.9.0, and project-specific fixes or coordination states listed in VU#948176

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Google · BoringSSL legacy crypto/x509 and newer pki certificate-validation paths

VU#410595 · CVE not listed — CERT/CC Details BoringSSL Name-Constraint Validation Differences

Recorded remediation: BoringSSL commit 5774eca for VU#410595.8 and .12; VU#410595.9 remains coordinated, .10 is disputed, and .11 was declined

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

DataElement / Bisheng · DataElement Bisheng legacy SSO, workflow APIs, and assistant service

VU#166125 · 3 CVEs — CERT/CC Warns of Three Bisheng Authorization Vulnerabilities

Recorded remediation: Bisheng 2.5.0 for CVE-2026-100156; 3.0.0 for CVE-2026-96681; restrict or disable the legacy SSO endpoint for the unpatched CVE-2026-96679

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Known exploitation

Ahsay · AhsayCBS versions 7, 8, 9, and affected version 10 installations

CISA KEV CVE-2026-105133 / CVE-2026-105134 / Ahsay Critical Security Alert Update · 2 CVEs — CISA KEV Adds Two Chained AhsayCBS Vulnerabilities

Recorded remediation: AhsayCBS 10.3.4.45 for version 10; AhsayCBS 9.15.2.70 for versions 7, 8, and 9; reboot after applying the matching hotfix

TechGeeks analysis·Authority

Not provided by the authority · exploitation confirmed

Vendor update

Google · Google Chrome Stable on Windows, macOS, and Linux and Extended Stable on Windows and macOS

Chrome Stable 155.0.8059.79/.80 / Chrome Extended Stable 152.0.7977.167 · 47 CVEs — Chrome Stable and Extended Stable Updates Fix Critical Flaws

Recorded remediation: Chrome Stable 155.0.8059.79/.80 on Windows and macOS, 155.0.8059.79 on Linux, or Extended Stable 152.0.7977.167 on Windows and macOS

TechGeeks analysis·Authority

Medium to Critical · exploitation not stated

Vendor update

Rockwell Automation · specified 1732E ArmorBlock I/O catalog numbers

SD1801 · 2 CVEs — Rockwell ArmorBlock 3.013 Fixes Authentication Bypass and DoS

Recorded remediation: 1732E ArmorBlock I/O software 3.013

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Lowcoder · Lowcoder 2.4.10 Query Library API in multi-tenant deployments

VU#382143 · 1 CVE — CERT/CC Warns of Cross-Tenant Lowcoder Query Access

Recorded remediation: No official security update was available; restrict the affected Query Library endpoints, limit trusted users and roles, isolate tenants, or add organization-level authorization checks

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Komodo · Komodo Periphery agents through 2.2.0 in multi-user deployments

VU#456950 · 1 CVE — Komodo 2.3.0 Fixes Periphery Root Command Injection

Recorded remediation: Komodo 2.3.0 or later

TechGeeks analysis·Authority

Critical · exploitation not stated

Project update

hexpm · hex_core default hex_http_httpc adapter

GHSA-p26c-h8c2-rwqj / CVE-2026-103502 · 1 CVE — hex_core 0.20.0 Restores TLS Certificate Validation

Recorded remediation: hex_core 0.20.0; supported workarounds include explicit certificate-verifying SSL options, another HTTP adapter, or OTP 26 or later

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Ubuntu · Google Guest Agent and Google OS Config Agent on Ubuntu 22.04 LTS

USN-8914-1 · 1 CVE — Ubuntu Google Guest Agents Fix Hostname-Validation Bypass

Recorded remediation: jammy: google-guest-agent 20250116.00-0ubuntu1~22.04.4 / jammy: google-osconfig-agent 20251028.00-0ubuntu2~22.04.1

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Red Hat · python-tornado on RHEL 10.0 Extended Update Support

RHSA-2026:80741 · 3 CVEs — Red Hat Python Tornado Update Addresses Three High-Severity Flaws

Recorded remediation: python-tornado 6.5.8-0.el10_0.1

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · Goose database migration tooling on RHEL 9.8 EUS and RHEL 10.2

RHSA-2026:80764 / RHSA-2026:80765 · 4 CVEs — Red Hat Goose Updates Address Four High-Severity Vulnerabilities

Recorded remediation: goose 1.45.0-1.el9_8 or 1.45.0-1.el10_2 for the matching branch

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Ubuntu · libx11 on supported Ubuntu LTS and ESM releases

USN-8913-1 · 4 CVEs — Ubuntu libX11 Updates Address Four Vulnerabilities

Recorded remediation: bionic: libx11 2:1.6.4-3ubuntu0.4+esm3 / focal: libx11 2:1.6.9-2ubuntu1.6+esm1 / jammy: libx11 2:1.7.5-1ubuntu0.4 / noble: libx11 2:1.8.7-1ubuntu0.1 / resolute: libx11 2:1.8.13-1ubuntu0.1 / trusty: libx11 2:1.6.2-1ubuntu2.1+esm6 / xenial: libx11 2:1.6.3-1ubuntu2.2+esm5

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Project update

Ash Project · ash_typescript RPC endpoints

GHSA-7gxc-w225-f7f3 / CVE-2026-105283 · 1 CVE — ash_typescript 0.19.1 Redacts Internal RPC Error Details

Recorded remediation: ash_typescript 0.19.1

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Red Hat · environment-modules on RHEL 9 and RHEL 10.2

RHSA-2026:80664 / RHSA-2026:84594 · 1 CVE — Red Hat Environment Modules Fix Expands to RHEL 9

Recorded remediation: environment-modules 5.6.1-2.el10_2.1 on RHEL 10.2 or 5.3.0-2.el9_8.1 on RHEL 9

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · libxml2 on RHEL 8.10 Extended Update Support

RHSA-2026:80675 · 1 CVE — Red Hat libxml2 Update Fixes CVE-2026-86142

Recorded remediation: libxml2 2.9.7-21.el8_10.10

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Red Hat · tftp and tftp-server on RHEL 9.8 Extended Update Support

RHSA-2026:80663 · 1 CVE — Red Hat TFTP Update Addresses CVE-2026-85234

Recorded remediation: tftp and tftp-server 5.2-40.el9_8.1

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · cjose on RHEL 10.2

RHSA-2026:80605 · 1 CVE — Red Hat cjose Update Fixes Critical RHEL 10 Vulnerability

Recorded remediation: cjose 0.6.2.2-7.el10_2.2

TechGeeks analysis·Authority

Critical · exploitation not stated

Vendor update

OTRS · OTRS and OTRS Community Edition where each OSA applies

OSA-2026-10 / OSA-2026-11 / OSA-2026-12 / OSA-2026-13 / OSA-2026-14 / OSA-2026-15 / OSA-2026-16 / OSA-2026-17 / OSA-2026-18 · 9 CVEs — OTRS 2026.7.1 Addresses Nine Security Vulnerabilities

Recorded remediation: OTRS 2026.7.1 or later; OSA-2026-18 also states OTRS 7.x and later are fixed

TechGeeks analysis·Authority

Medium to Critical · exploitation not stated

Vendor update

Dassault Systèmes · Tuleap Enterprise Edition 17.0 through 17.5

CVE-2026-105407 / CVE-2026-105408 / CVE-2026-105409 / CVE-2026-105410 / CVE-2026-105411 / CVE-2026-105412 · 6 CVEs — Dassault Systèmes Publishes Six Tuleap Enterprise Security Advisories

Recorded remediation: The public advisories direct customers to Dassault Systèmes remediation information but do not state public fixed-build numbers; obtain the supported fixed build through the vendor channel

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · curl and libcurl on RHEL 9.8 Extended Update Support

RHSA-2026:80511 · 2 CVEs — Red Hat Updates curl and libcurl on RHEL 9.8 EUS

Recorded remediation: curl and libcurl 7.76.1-40.el9_8.8

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Red Hat · Flatpak on RHEL 10.2

RHSA-2026:80498 · 4 CVEs — Red Hat Flatpak Update Addresses Four RHEL 10 Vulnerabilities

Recorded remediation: flatpak 1.16.0-9.el10_2.4 and the matching advisory-listed packages

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · flatpak-builder on RHEL 10.2 and RHEL 9.8 Extended Update Support

RHSA-2026:80495 / RHSA-2026:80496 · 1 CVE — Red Hat Flatpak Builder Updates Fix CVE-2026-86320

Recorded remediation: flatpak-builder 1.4.4-1.el10_2.1 or 1.2.3-1.el9_8.1 for the matching entitled branch

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · GIMP on RHEL 9.4 Extended Update Support

RHSA-2026:80509 · 13 CVEs — Red Hat GIMP Update Addresses Thirteen RHEL 9 Vulnerabilities

Recorded remediation: gimp 2.99.8-4.el9_4.19 and the matching advisory-listed packages

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Thelia · Thelia 2.6.0 and 2.6.1

VU#162329 · 11 CVEs — CERT/CC Warns of Eleven Vulnerabilities in Thelia 2.6.0 and 2.6.1

Recorded remediation: No patch was available when CERT/CC published revision 1; apply the authority's access restrictions and hardening measures while obtaining supported vendor remediation

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Known exploitation

GitLab · GitLab Community Edition and Enterprise Edition self-managed instances

GitLab Critical Patch Release 19.4.2 / 19.3.4 / 19.2.8 / CISA KEV: CVE-2026-97229 · 24 CVEs — CISA Confirms Exploitation of GitLab CI/CD RCE

Recorded remediation: GitLab 19.2.8, 19.3.4, or 19.4.2 at minimum for the affected branches, followed by the current supported maintenance release and GitLab's documented upgrade path

TechGeeks analysis·Authority

Low to Critical · exploitation confirmed

Vendor update

Bosch Rexroth · Bosch Rexroth PRI7000 engineering software

BOSCH-SA-069646 · 1 CVE — Bosch Rexroth PRI7000 Updates Bundled 7-Zip for CVE-2026-14266

Recorded remediation: PRI7000 1.11.17.3, 1.11.18.3, or 1.11.19.1 or later for the matching branch

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

nginx-modules · ngx_cache_purge for NGINX

ngx_cache_purge 3.0.4 / CVE-2026-108981 · 1 CVE — ngx_cache_purge 3.0.4 Restricts Symlink Traversal

Recorded remediation: ngx_cache_purge 3.0.4 for symlinks created at an arbitrary earlier time; the authority says an applicable TOCTOU race remains

TechGeeks analysis·Authority

Low · exploitation not stated

Project update

Zephyr Project · Zephyr RTOS ESP32 I2S and Bluetooth host or controller components

GHSA-5g9q-h8wq-rrf3 / GHSA-6gp4-cwf7-2vp8 / GHSA-6mcj-5jw8-ff36 / GHSA-84v8-vgp5-4vc9 / GHSA-rgw4-3qr8-pp36 · 5 CVEs — Zephyr Discloses Five Embedded and Bluetooth Availability Flaws

Recorded remediation: Project fixes merged on applicable branches; Zephyr 4.5.0 is projected but was not released when verified, so confirm each advisory's current branch and backport status

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Project update

Decimal Project · Decimal for Elixir

GHSA-6c27-994x-c52f / CVE-2026-97853 / Decimal 3.1.2 · 1 CVE — Decimal 3.1.2 Fixes Unbounded Rounding Allocation

Recorded remediation: Decimal 3.1.2 or later

TechGeeks analysis·Authority

Medium · exploitation not stated

Project update

Apache Software Foundation · Apache DataSketches C++

CVE-2026-103501 / CVE-2026-103513 / CVE-2026-103634 / CVE-2026-103635 / CVE-2026-103636 / Apache DataSketches C++ 5.3.0 · 5 CVEs — Apache DataSketches C++ 5.3.0 Hardens Five Deserialization Paths

Recorded remediation: Apache DataSketches C++ 5.3.0 or later

TechGeeks analysis·Authority

Low to Moderate · exploitation not stated

Vendor update

ZTE · ZTE Z80 Ultra, product identifier NX741J

SA-202610-1743956 / SA-202610-1743919 / SA-202610-1743926 / SA-202610-1743952 / SA-202610-1743906 · 5 CVEs — ZTE Z80 Ultra Build B28MR2 Fixes Five Information-Disclosure Flaws

Recorded remediation: GEN_ZTE_PQ85A01V1.0.0B28MR2, obtained through the ZTE Global Customer Support Center

TechGeeks analysis·Authority

Low to Medium · exploitation not stated

Vendor update

Red Hat · Red Hat Hardened Images opentelemetry-collector-contrib RPM on aarch64 and x86_64

RHSA-2026:80217 · 2 CVEs — Red Hat Hardened Images Update OpenTelemetry Collector for AMQP Denial of Service

Recorded remediation: opentelemetry-collector-contrib 0.162.0-0.2.hum1 for aarch64 or x86_64, using supported Red Hat Hardened Images content

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

Red Hat · Red Hat Hardened Images poppler RPM family on aarch64 and x86_64

RHSA-2026:80172 · 1 CVE — Red Hat Hardened Images Update Poppler for PDF Decryption Overflow

Recorded remediation: the advisory-listed poppler RPM family at 26.08.0-1.3.hum1 for aarch64 or x86_64, using supported Red Hat Hardened Images content

TechGeeks analysis·Authority

Medium · exploitation not stated

Vendor update

Amazon Web Services · AWS Amplify API Category packages for SQL-backed GraphQL models

2026-133-AWS · 1 CVE — AWS Amplify Updates Fix Cross-Owner GraphQL Record Access

Recorded remediation: @aws-amplify/graphql-index-transformer 3.1.2, @aws-amplify/graphql-api-construct 1.21.4, and @aws-amplify/data-construct 1.17.4 or later, followed by backend redeployment

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Ubuntu · Linux kernel packages on Ubuntu 24.04 LTS (noble)

USN-8911-1 · 29 CVEs — Ubuntu OEM Kernel Update Addresses 29 Vulnerabilities

Recorded remediation: noble: linux-oem-6.17 6.17.0-1033.33

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Red Hat · RHEL 9.6 EUS standard, 64k, real-time, and NFV kernel package relationships listed by the advisory

RHSA-2026:79784 · 1 CVE — Red Hat RHEL 9.6 EUS Kernel Update Fixes CVE-2026-74705

Recorded remediation: kernel 5.14.0-570.148.1.el9_6 and the matching advisory-listed packages, followed by a controlled reboot

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · RHEL 8.8 Update Services for SAP Solutions and Telecommunications Update Service kernel packages

RHSA-2026:79782 · 2 CVEs — Red Hat RHEL 8.8 SAP and TUS Kernel Update Fixes Two Vulnerabilities

Recorded remediation: kernel 4.18.0-477.174.1.el8_8 and the matching advisory-listed packages, followed by a controlled reboot

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · RHEL 8.6 Advanced Mission Critical Update Support and RHEL 8.6 EUS Long Life kernel packages

RHSA-2026:79783 · 3 CVEs — Red Hat RHEL 8.6 AUS and EUS Kernel Update Addresses Three Vulnerabilities

Recorded remediation: kernel 4.18.0-372.221.1.el8_6 and the matching advisory-listed packages, followed by a controlled reboot

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Xen Project · Linux guests using Xen xen-netfront with a potentially untrusted network backend

XSA-522 · 1 CVE — Xen XSA-522 Patch Prevents Network Backend Guest Crashes

Recorded remediation: Apply the Xen Project xsa522-linux.patch or the corresponding supported Linux distribution update

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Ubuntu · Linux kernel packages on Ubuntu 24.04 LTS (noble)

USN-8887-3 · 1050 CVEs — Ubuntu 7.0 Kernel Updates Address 1,050 Vulnerabilities

Recorded remediation: noble: linux-gcp-7.0 7.0.0-1014.14~24.04.1 / noble: linux-hwe-7.0 7.0.0-38.38~24.04.4 / noble: linux-oracle-7.0 7.0.0-1013.13~24.04.1

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Ubuntu · Linux kernel packages on Ubuntu 22.04 LTS (jammy)

USN-8875-2 · 951 CVEs — Ubuntu NVIDIA Kernel Update Addresses 951 Vulnerabilities

Recorded remediation: jammy: linux-nvidia 5.15.0-1112.113

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Ubuntu · Linux kernel packages on Ubuntu 24.04 LTS (noble), Ubuntu 22.04 LTS (jammy)

USN-8903-2 · 232 CVEs — Ubuntu Kernel Updates Address 232 Vulnerabilities

Recorded remediation: jammy: linux-lowlatency-hwe-6.8 6.8.0-146.146.1~22.04.1 / jammy: linux-nvidia-6.8 6.8.0-1064.67~22.04.1 / noble: linux-gke 6.8.0-1065.73 / noble: linux-gkeop 6.8.0-1051.55 / noble: linux-ibm 6.8.0-1066.67 / noble: linux-lowlatency 6.8.0-146.146.1 / noble: linux-nvidia 6.8.0-1064.67 / noble: linux-nvidia-lowlatency 6.8.0-1064.67.1 / noble: linux-oracle 6.8.0-1063.66

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Ubuntu · Linux kernel packages on Ubuntu 24.04 LTS (noble)

USN-8905-2 · 233 CVEs — Ubuntu GCP Kernel Update Addresses 233 Vulnerabilities

Recorded remediation: noble: linux-gcp 6.8.0-1070.78

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Red Hat · RHEL 8.4 Advanced Mission Critical Update Support and RHEL 8.4 EUS Long Life kernel packages

RHSA-2026:79778 · 2 CVEs — Red Hat RHEL 8.4 AUS and EUS Kernel Update Fixes Two Vulnerabilities

Recorded remediation: kernel 4.18.0-305.213.1.el8_4 and the matching advisory-listed packages, followed by a controlled reboot

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

MongoDB · MongoDB Ops Manager 7.0 and 8.0

CVE-2026-87108 / CVE-2026-87109 / CVE-2026-87110 · 3 CVEs — MongoDB Ops Manager 8.0.27 Fixes Three Authorization and Availability Vulnerabilities

Recorded remediation: Ops Manager 8.0.27 or later; obtain supported vendor direction for affected 7.0 deployments because the authority does not identify a fixed 7.0 build

TechGeeks analysis·Authority

Low to Medium · exploitation not stated

Vendor update

Red Hat · gzip RPM content in Red Hat Hardened Images

RHSA-2026:79717 · 2 CVEs — Red Hat Hardened Images gzip Update Fixes Two Vulnerabilities

Recorded remediation: gzip 1.15-1.hum1 for the advisory-listed Red Hat Hardened Images architectures

TechGeeks analysis·Authority

Low to Medium · exploitation not stated

Vendor update

Red Hat · Red Hat Advanced Cluster Security for Kubernetes 4.11

RHSA-2026:79575 · 2 CVEs — Red Hat Advanced Cluster Security 4.11.5 Fixes Two Vulnerabilities

Recorded remediation: Red Hat Advanced Cluster Security for Kubernetes 4.11.5 using the exact advisory-listed immutable image digests

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · Red Hat Quay 3.12 container images

RHSA-2026:79546 · 14 CVEs — Red Hat Quay 3.12.23 Addresses Fourteen Vulnerabilities

Recorded remediation: Red Hat Quay 3.12.23 using the exact advisory-listed immutable image digests

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

Red Hat · Red Hat OpenShift Container Platform 4.14 RHCOS and package content

RHSA-2026:73866 / RHSA-2026:73864 · 8 CVEs — Red Hat OpenShift 4.14.75 Updates Address Eight Vulnerabilities

Recorded remediation: OpenShift Container Platform 4.14.75 with the exact RHCOS builds and packages listed by both advisories

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

Red Hat · Red Hat OpenShift Container Platform 4.16 RHCOS content

RHSA-2026:73851 · 3 CVEs — Red Hat OpenShift 4.16.72 RHCOS Update Fixes Three Vulnerabilities

Recorded remediation: OpenShift Container Platform 4.16.72 with the exact RHCOS builds listed by RHSA-2026:73851

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · RHEL 9 glibc packages

RHSA-2026:79281 · 6 CVEs — Red Hat glibc Update Addresses Six RHEL 9 Vulnerabilities

Recorded remediation: glibc 2.34-283.el9_8 and the matching advisory-listed packages

TechGeeks analysis·Authority

Medium · exploitation not stated

Known exploitation

Strapi · Strapi

CISA KEV: CVE-2023-22894 · 1 CVE — CISA Adds Strapi Sensitive-Data Exposure to KEV

Recorded remediation: Apply vendor mitigations under CISA BOD 26-04 guidance by 2026-10-11, or discontinue use if mitigations are unavailable

TechGeeks analysis·Authority

Not provided by the authority · exploitation CISA KEV

Known exploitation

ProFTPD · ProFTPD

CISA KEV: CVE-2015-3306 · 1 CVE — CISA Adds ProFTPD Arbitrary File Access to KEV

Recorded remediation: Apply vendor mitigations under CISA BOD 26-04 guidance by 2026-10-11, or discontinue use if mitigations are unavailable

TechGeeks analysis·Authority

Not provided by the authority · exploitation CISA KEV

Known exploitation

ONLYOFFICE · ONLYOFFICE Docs

CISA KEV: CVE-2021-3199 · 1 CVE — CISA Adds ONLYOFFICE Docs Path Traversal to KEV

Recorded remediation: Apply vendor mitigations under CISA BOD 26-04 guidance by 2026-10-11, or discontinue use if mitigations are unavailable

TechGeeks analysis·Authority

Not provided by the authority · exploitation CISA KEV

Known exploitation

ISC · ISC BIND

CISA KEV: CVE-2015-5477 · 1 CVE — CISA Adds ISC BIND TKEY Denial of Service to KEV

Recorded remediation: Apply vendor mitigations under CISA BOD 26-04 guidance by 2026-10-11, or discontinue use if mitigations are unavailable

TechGeeks analysis·Authority

Not provided by the authority · exploitation CISA KEV

Known exploitation

Apache · Apache Struts

CISA KEV: CVE-2016-3081 · 1 CVE — CISA Adds Apache Struts Command Injection to KEV

Recorded remediation: Apply vendor mitigations under CISA BOD 26-04 guidance by 2026-10-11, or discontinue use if mitigations are unavailable

TechGeeks analysis·Authority

Not provided by the authority · exploitation CISA KEV

Vendor update

Ubuntu · libxml2 on Ubuntu 26.04 LTS (resolute), Ubuntu 24.04 LTS (noble), Ubuntu 22.04 LTS (jammy), Ubuntu 20.04 ESM (focal), Ubuntu 18.04 ESM (bionic), Ubuntu 16.04 ESM (xenial), Ubuntu 14.04 ESM (trusty)

USN-8910-1 · 6 CVEs — Ubuntu libxml2 Updates Fix Six Vulnerabilities

Recorded remediation: bionic: libxml2 2.9.4+dfsg1-6.1ubuntu1.9+esm9 / focal: libxml2 2.9.10+dfsg-5ubuntu0.20.04.10+esm6 / jammy: libxml2 2.9.13+dfsg-1ubuntu0.14 / noble: libxml2 2.9.14+dfsg-1.3ubuntu3.10 / resolute: libxml2 2.15.2+dfsg-0.1ubuntu0.3 / trusty: libxml2 2.9.1+dfsg1-3ubuntu4.13+esm13 / xenial: libxml2 2.9.3+dfsg1-1ubuntu0.7+esm14

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Red Hat · RHEL 8 BIND 9.11 packages

RHSA-2026:79162 · 3 CVEs — Red Hat BIND Update Addresses Three RHEL 8 Vulnerabilities

Recorded remediation: bind 9.11.36-16.el8_10.16 and the matching advisory-listed packages

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Amazon Web Services · aws-cdk-lib Docker asset bundling

2026-131-AWS · 1 CVE — AWS CDK 2.267.0 Restricts Symlinks in Docker Asset Bundling

Recorded remediation: aws-cdk-lib 2.267.0 or later

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Red Hat · RHEL 8 kbd packages

RHSA-2026:78951 · 1 CVE — Red Hat kbd Update Fixes CVE-2026-72693 on RHEL 8

Recorded remediation: kbd 2.0.4-11.el8_10.1 and the matching advisory-listed packages

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Red Hat · RHEL 8.8 E4S and TUS bind9.16 packages

RHSA-2026:79160 · 8 CVEs — Red Hat BIND 9.16 Update Addresses Eight RHEL 8.8 Vulnerabilities

Recorded remediation: bind9.16 9.16.23-0.14.el8_8.9 and the matching advisory-listed packages

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

Red Hat · Red Hat build of MicroShift 4.20

RHSA-2026:74797 · 5 CVEs — Red Hat MicroShift 4.20.41 Fixes Five Vulnerabilities

Recorded remediation: Red Hat build of MicroShift 4.20.41 and the matching advisory-listed packages

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Amazon Web Services · Amazon Agent Plugins for AWS databases-on-aws plugin

2026-130-AWS · 1 CVE — AWS databases-on-aws 1.7.1 Blocks Agent-Assisted Command Injection

Recorded remediation: databases-on-aws 1.7.1 or later, or pinned repository commit 8b13a503746a4ebb0402b936645163224058bde3 or later

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Red Hat · RHEL 10 Dovecot packages

RHSA-2026:79371 · 8 CVEs — Red Hat Dovecot Update Addresses Eight RHEL 10 Vulnerabilities

Recorded remediation: dovecot 2.3.21-19.el10_2.8 and the matching advisory-listed packages

TechGeeks analysis·Authority

High to Critical · exploitation not stated

Vendor update

Red Hat · Red Hat Ansible Automation Platform 2.7 container images

RHSA-2026:79378 · 13 CVEs — Red Hat Ansible Automation Platform 2.7 Addresses Thirteen Vulnerabilities

Recorded remediation: Red Hat Ansible Automation Platform 2.7 at the exact advisory-listed immutable image digests

TechGeeks analysis·Authority

High to Critical · exploitation not stated

Vendor update

Red Hat · Red Hat Satellite 6.18 IOP VMAAS, remediations, insights-engine, and vulnerability-engine container images

RHSA-2026:79376 / RHSA-2026:79377 / RHSA-2026:79379 / RHSA-2026:79380 · 4 CVEs — Red Hat Satellite 6.18 IOP Containers Address Three Vulnerabilities

Recorded remediation: the exact Satellite 6.18 immutable image digests listed by all four advisories

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Amazon Web Services · AWS Toolkit for Visual Studio Code CodeCatalyst connection handling

2026-129-AWS · 1 CVE — AWS Toolkit for VS Code 4.10.0 Secures Cached CodeCatalyst Tokens

Recorded remediation: AWS Toolkit for Visual Studio Code 4.10.0 or later

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Red Hat · Red Hat Satellite 6.19 IOP VMAAS and vulnerability-engine container images

RHSA-2026:79372 / RHSA-2026:79373 · 1 CVE — Red Hat Satellite 6.19 IOP Containers Fix CVE-2026-78677

Recorded remediation: the exact Satellite 6.19 satellite/iop-vmaas-rhel9 and satellite/iop-vulnerability-engine-rhel9 image digests listed by both advisories

TechGeeks analysis·Authority

High · exploitation not stated

Vendor update

Ubuntu · libde265 on Ubuntu 26.04 LTS (resolute), Ubuntu 24.04 LTS (noble), Ubuntu 22.04 LTS (jammy), Ubuntu 20.04 ESM (focal), Ubuntu 18.04 ESM (bionic), Ubuntu 16.04 ESM (xenial)

USN-8909-1 · 1 CVE — Ubuntu libde265 Update Fixes CVE-2026-88373

Recorded remediation: bionic: libde265 1.0.2-2ubuntu0.18.04.1~esm7 / focal: libde265 1.0.4-1ubuntu0.4+esm3 / jammy: libde265 1.0.8-1ubuntu0.3+esm3 / noble: libde265 1.0.15-1ubuntu0.2 / resolute: libde265 1.0.16-1ubuntu0.1~esm2 / xenial: libde265 1.0.2-2ubuntu0.16.04.1~esm7

TechGeeks analysis·Authority

Not provided by the authority · exploitation not stated

Vendor update

Red Hat · RHEL 9 kernel, real-time kernel, and NFV kernel packages on the advisory-listed channels

RHSA-2026:76739 · 38 CVEs — Red Hat RHEL 9 Kernel Update Addresses 38 Vulnerabilities

Recorded remediation: kernel 5.14.0-687.55.1.el9_8 and the matching advisory-listed packages, followed by a controlled reboot

TechGeeks analysis·Authority

Medium to High · exploitation not stated

Vendor update

Red Hat · Red Hat OpenShift distributed tracing platform (Tempo) 3.11

RHSA-2026:79368 · 4 CVEs — Red Hat OpenShift Tempo 3.11.2 Fixes Four Vulnerabilities

Recorded remediation: Red Hat OpenShift distributed tracing platform 3.11.2 using the exact advisory-listed immutable image digests

TechGeeks analysis·Authority

High · exploitation not stated

2026 notice library

Search published analysis

Use the filters to reach a specific CVE or product quickly. Twelve results are shown at a time to keep the page readable.

Open the complete WordPress archive

How to use this center

A short path from disclosure to decision

Open CISA KEV ↗
01

Confirm applicability

Match the asset, version, enabled feature, deployment role, management exposure, and advisory revision.

02

Preserve and reduce risk

Retain relevant evidence, restrict unnecessary exposure, and use the current vendor-supported fix or mitigation.

03

Validate and document

Confirm the resulting version, service behavior, access controls, logging, monitoring, and accountable owner.

Methodology, government guidance, and coverage

Evidence is not applicability. CISA KEV indicates confirmed exploitation; CVSS describes technical severity; neither proves a particular asset is vulnerable or compromised. For federal civilian agencies, the controlling directive and current CISA guidance determine required actions and dates. Other government and commercial organizations should apply their governing policy, contract, authorization boundary, and risk process.

  • CISA BOD 26-04
  • CISA machine-readable KEV catalog
  • Network, wireless, SD-WAN, firewall, VPN, and application delivery
  • Operating systems, endpoints, browsers, mobile, and common libraries
  • Cloud, virtualization, containers, Kubernetes, DevOps, and repositories
  • Identity, security operations, remote access, RMM, storage, backup, OT, and ICS

The internal discovery registry currently covers 125 official endpoints across 122 publishers. It is broad but not exhaustive. Product scope and remediation are always controlled by the current vendor advisory.

Public-resource notice: This center is situational-awareness guidance, not a complete vulnerability inventory, managed detection service, legal advice, or authorization to access or test a system. Verify the current primary source and your exact environment before changing production.