Find posts on this blog by CVE ID and product topic.
An index of this blog’s posts. Product labels describe topics discussed; consult the original advisory for affected versions.
Nginx disclosed buffer overflow CVE-2026-15176 when alias is used with rewrite. Versions 0.1.29–1.31.6 are affected; check the running version and upgrade to 1.31.7+ or 1.30.6+.
Docker Engine API v1.57.0 moves its primary specification to OpenAPI 3.2, adds a restarting property to container die events, and fixes the ImageManifestSummary.ImageData schema. Tools relying on per-version Swagger 2.0 files should plan migration ahead of future API versions.
Ubuntu USN-9091-1 warns of multiple vulnerabilities in the Linux kernel for NVIDIA Tegra. The supplied record gives no affected branches or fixed packages. Check installed kernels and packages, then consult the Ubuntu notice for the applicable update.
Rucio is affected by CVE-2026-100397, which lets unauthenticated attackers obtain an SSH challenge token for an administrator account and access APIs with that account’s privileges for 10 seconds. Check installed versions and upgrade to the corresponding fix.
Debian DSA-6625-1 updates postgresql-17 on Debian trixie to address multiple vulnerabilities, including CVE-2026-6460. Reported risks include arbitrary code execution, authentication bypass, information disclosure, denial of service, and privilege escalation. Upgrade to 17.12-0+deb13u1 and…
Microsoft disclosed CVE-2026-111497, an out-of-bounds write in the Brotli decoder used by .NET that could enable elevation of privilege over a network. Exposure requires an application to use Brotli decompression; check affected products and versions, then install the applicable update.
Cisco says a 2025 key-generation flaw left private keys for eight eMudhra intermediate CA certificates weak enough to brute-force in seconds. Review affected Cisco products and apply the corresponding distrust guidance or update.
Unit 42 says CL-STA-1238 used the Cairn AI framework with Zhipu GLM and DeepSeek in 25 campaigns targeting at least 19 organizations. Ten organizations experienced unauthorized access or data theft; relevant organizations should review accounts, credentials, and signs of lateral movement.
Qilin is a ransomware-as-a-service operation active since September 2022, using affiliates to breach organizations and deploy ransomware. It steals data before encrypting systems and threatens disclosure; organizations should review their ability to detect intrusions, data theft, and…
Palo Alto Networks warns that CVE-2026-0325 in the PAN-OS GlobalProtect gateway lets users with valid credentials bypass IP address limits and source-IP-based access controls. Check gateway configuration and upgrade affected branches to their corresponding fixed versions.
ZDI warns that untrusted-data deserialization in Meta FAIRChem’s utils load_inference_model could allow code execution in the current process if a user opens a malicious file or visits a malicious page. ZDI recommends limiting interaction with the product.
Node.js has released security updates for the 22.x, 24.x, and 26.x lines, fixing HTTP/2, HTTPS, and TLS flaws that may disrupt servers, expose memory or data, or bypass certificate authentication. Check your version and upgrade to the corresponding security release.
Fortinet warns that CVE-2026-126254 in the FortiOS and FortiSASE BGP daemon could cause denial of service. The flaw has CVSSv3 9.6 and requires a configured iBGP neighbor. Check versions and upgrade FortiOS or move affected FortiSASE branches to a fixed release.
CISA confirms CVE-2026-124194 in Microsoft Office Outlook is being exploited in the wild. The vulnerability may enable network spoofing. Apply Microsoft's mitigation guidance and note the CISA deadline of 2026-11-24.
Cloudflare introduces Zero Wire on Cloudflare Radar, a public source of information about serious Internet vulnerabilities. Its briefings summarize impact, related data, and response guidance; security teams should identify affected assets and follow vendor remediation guidance.
Copyright © 2026 ViSafe (visafe.net) · A blog sharing cybersecurity knowledge
