EN

Insights

Today’s reports and warnings — and what they could mean for you.

New vulnerabilities, current attack methods and warnings that call for action — reviewed daily from the advisories of agencies and research teams.

Subscribe to alerts
Filter
Severity
All critical high
Period
All periods 627 2026 627 September 373 August 254
My stack

Pick what you run. You will then only see advisories about it.

Google Chrome 23 Adobe Campaign Classic 10 Linux Kernel 8 Red Hat Enterprise Linux 8 Google Chrome on 7 IBM Concert 7 GitLab 6 openssl_encrypt 6 IBM Langflow OSS 5 vm2 5 Adobe Commerce 4 Adobe Connect 4 GIMP 4 IBM App Connect Enterprise 4 IBM Guardium Data Protection 4 IBM MQ 4 JFrog Artifactory 4 Langflow 4 Langflow OSS 4 Microsoft Edge 4 openssl_encrypt versions 4 Oracle Communications 4 Oracle E-Business Suite 4 Oracle Enterprise Manager 4 Oracle Fusion Middleware 4 WordPress 4 Adobe ColdFusion 3 Adobe Experience Manager 3 Adobe Experience Manager Forms JEE 3 Arista EOS 3 Budibase 3 cPanel cPanel/WHM 3 Drupal Erweiterungen 3 GeoNetwork 3 Gitea 3 IBM i 3 Ivanti Neurons for ITSM 3 Kibana 3 Microsoft Exchange Server 3 MikroTik RouterOS 3 MISP 3 MongoDB 3 n8n 3 OpenCTI 3 Oracle VM VirtualBox 3 Rapid7 Velociraptor 3 Snipe-IT 3 util-linux 3 Adobe Creative Cloud 2 Adobe Magento 2 Apache Airflow 2 Apache CloudStack 2 Apple iOS & iPadOS 2 BigBlueButton 2 Check Point Security Management 2 Cisco Secure Email Gateway 2 Cisco Secure Workload 2 CKAN 2 CyberPanel 2 Elasticsearch 2 F5 BIG-IP APM 2 Fleet 2 Flowise 2 IBM DB2 2 IBM QRadar SIEM 2 IBM WebSphere Application Server - Liberty 2 Ivanti Endpoint Manager Mobile 2 Ivanti Sentry 2 Keycloak 2 libvirt 2 Metabase 2 Microsoft Apps 2 Microsoft Azure 2 Microsoft Developer Tools 2 Microsoft Dynamics 2 Microsoft GitHub Enterprise Server 2 Microsoft Office Produkte 2 Microsoft Windows 2 MLflow 2 Mozilla Firefox und Thunderbird 2 Netgate pfSense 2 Netty 2 NoMachine 2 OpenBao 2 Oracle Commerce 2 Oracle Commerce Platform 2 Oracle Database Producten 2 Oracle Database Server 2 Oracle Financial Services 2 Oracle Financial Services Applications 2 Oracle Hyperion 2 Oracle Java SE 2 Oracle MySQL 2 Oracle PeopleSoft 2 Oracle PeopleSoft Enterprise 2 Oracle Siebel CRM 2 Oracle Supply Chain 2 Palo Alto Networks GlobalProtect App 2 Palo Alto Networks PAN-OS 2 Pega Platform 2 PraisonAI is a multi-agent teams system 2 Proxmox Virtual Environment 2 Rancher 2 Red Hat OpenShift 2 Redis 2 RPM 2 SEPPmail Secure E-Mail Gateway 2 SmarterTools SmarterMail 2 Synology DiskStation Manager 2 Tor 2 Vercel Next.js 2 WatchGuard Fireware OS iked process 2 WebKitGTK 2 Zabbix 2 ZScaler Client Connector 2 Absolute Secure Access 1 Adobe Acrobat und Acrobat Reader 1 Adobe Commerce & Magento 1 Adobe Connect & Adobe Connect Android Mobile App 1 Adobe Experience Manager Forms 1 Adobe Illustrator 1 Adobe Magento Open Source 1 Adobe Photoshop 1 Adobe Photoshop Desktop 1 Android Patchday September 2026 1 Angular 1 Apache ActiveMQ Artemis 1 Apache Airflow FAB provider 1 Apache Airflow Providers 1 Apache Allura's webhooks 1 Apache Camel K 1 Apache Lounge Windows distribution of Apache HTTP 1 Apache Nifi 1 Apache Sling 1 Apache Tomcat 1 Apache Tomcat APR/native Connector 1 Apache Wicket 1 API of Cisco Identity Services Engine 1 Apple iOS, iPadOS, macOS Tahoe, macOS Golden Gate, macOS Sequoia und Safari 1 Apple macOS 1 Apple macOS & Samba 1 Apple macOS, iOS und iPadOS 1 Arista VeloCloud Orchestrator 1 Aruba ArubaOS-CX 1 Aruba EdgeConnect 1 Aruba Networks ArubaOS-CX 1 Atlassian Bamboo, Bitbucket, Confluence, Fisheye/Crucible, Jira Software und Jira Service Management 1 Atlassian producten 1 Atlassian Produkte 1 Barracuda Networks Email Security Gateway 1 Broadcom Brocade SANnav 1 CakePHP is a rapid development framework for PHP 1 Canva Android App 1 Check Point Products 1 Check Point Security Gateway, Spark Firewall und Security Management 1 Check Point Security Management & Log Servers 1 Check Point VPN producten 1 Check Point's Security Management and Log Servers 1 Cisco ASA (Adaptive Security Appliance) und Secure Firewall Threat Defense 1 Cisco Identity Services Engine 1 Cisco IOS XR 1 Cisco ISE 1 Cisco ISE und ISE-PIC 1 Cisco Nexus 1 Cisco Nexus 9000 Series, IOS XR Software & Secure Email 1 Cisco Nexus Dashboard 1 Cisco Secure Firewall Management Center 1 Cisco Secure Firewall Threat Defense 1 Cisco Secure FTD und ASA 1 Citrix NetScaler ADC and Gateway 1 Citrix NetScaler ADC and NetScaler Gateway 1 Citrix NetScaler ADC und Citrix NetScaler Gateway 1 Citrix Systems NetScaler 1 Citrix Systems ShareFile StorageZones Controller 1 ClamAV 1 CodeMeter Runtime van Wibu-Systems 1 Commvault Backup & Recovery 1 Composer 1 Contao 1 Coolify 1 CUPS 1 D-Link DAP-1360 firmware 1 D-LINK DIR-X1860Z Router 1 D-LINK DWR-M961 Router 1 D-LINK Router DIR-822A 1 Dell OpenManage Server Administrator 1 Dell PowerScale OneFS 1 Dell Secure Connect Gateway 1 DENX U-Boot 1 Devolutions Remote Desktop Manager 1 Devolutions Server 1 diagnostic tools of Cisco ISE and ISE-PIC 1 diverse SAP-producten 1 DNN 1 Docker Sandboxes 1 Dovecot 1 drawio 1 DrayTek VigorAP 1 DrayTek VigorSwitch 1 Drupal Extensions 1 Drupal Module 1 Eclipse Jetty 1 Erlang/OTP 1 ESRI ArcGIS 1 F5 BIG-IP 1 F5 Networks BIG-IP Access Policy Manager 1 fetchmail 1 ffmpeg 1 Fluent Bit 1 Forcepoint Next Generation Firewall 1 Fortinet Forti-producten 1 Fortinet FortiClient 1 Fortinet FortiManager 1 Fortinet FortiSandbox 1 Fortinet FortiSandbox 5 1 Fortinet FortiWeb 1 Foxit PDF Reader und Foxit PDF Editor 1 FreeBSD Project FreeBSD OS 1 Froxlor 1 GeoServer 1 Ghostscript 1 GitLab Community & Enterprise Editions 1 GNU Emacs 1 Golang Go 1 Grafana 1 GStreamer 1 Hashicorp Vault Secrets Operator 1 Hashicorp Vault und Vault Enterprise 1 HCL BigFix Mobile 1 HCL BigFix Service Management 1 Hitachi Energy RTU500 1 HP HPLIP 1 HP Web JetAdmin 1 HPE Networking Fabric Composer 1 IBM AIX und VIOS 1 IBM ContextForge MCP Gateway 1 IBM Documentation Offline 1 IBM DOORS Next 1 IBM Financial Transaction Manager (FTM) for RedHat OpenShift 1 IBM InfoSphere Information Server 1 IBM Langflow Desktop 1 IBM Langflow OSS & IBM MQ Appliance 1 IBM License Metric Tool 1 IBM MQ Appliance 1 IBM MQ for HPE NonStop 1 IBM Observability with Instana (Agent) Build 1 IBM Security Verify Access 1 IBM SPSS Analytic Server und SPSS Modeler 1 IBM Verify Identity Access 1 iked process of WatchGuard Fireware OS 1 ILIAS 1 InetUtils 1 Insyde UEFI Firmware 1 Intel PROSet Wireless WiFi Software 1 internal API service on WatchGuard Access Points 1 Ivanti Endpoint Manager 1 Jenkins 1 Jenkins Plugins 1 JetBrains IntelliJ IDEA 1 JetBrains PyCharm 1 JetBrains You Track 1 Jolokia 1 Joomla 1 Joplin 1 Kiteworks Secure File Sharing & Transfer 1 Kyverno 1 Lenovo BIOS 1 Lenovo XClarity Integrator für WAC und OneCLI 1 libsndfile 1 libTIFF 1 libxml2 1 Mattermost 1 MediaWiki Extensions 1 Meinberg LANTIME 1 Microsoft 365 Copilot 1 Microsoft Azure und Entra ID 1 Microsoft Azure, Entra ID und Exchange 1 Microsoft Azure, Entra und Azure CLI 1 Microsoft Clouddienste 1 Microsoft Dataverse 1 Microsoft Dynamics 365 und Microsoft Power Automate Desktop 1 Microsoft Entwicklerwerkzeuge 1 Microsoft Malware Protection Engine und Defender 1 Microsoft Office 1 Microsoft Outlook 1 Microsoft Power BI 1 Microsoft SQL Server 1 Microsoft Windows 11 1 Microsoft Windows Produkte 1 MongoDB BI Connector und ODBC Driver 1 MongoDB C Driver und Entity Framework Core Provider 1 MongoDB Clients 1 MongoDB Server 1 MongoDB Treiber 1 Moxa Ethernet Switch 1 Mozilla Firefox, Firefox ESR und Thunderbird 1 N-able N-Central 1 N-central van N-able 1 Nagios Core und Nagios XI 1 NetScaler ADC & NetScaler Gateway 1 Next.js 1 Notepad++ 1 Nutanix AOS 1 Octopus Deploy Server 1 OpenSSH 1 OPNsense 1 Oracle Analytics 1 Oracle Business Intelligence Enterprise Edition & Oracle BI Publisher 1 Oracle Construction and Engineering 1 Oracle GraalVM 1 Oracle JD Edwards 1 Oracle Utilities Applications 1 PackageKit 1 Paessler PRTG 1 Palo Alto Networks Cortex XDR Broker VM 1 PaperCut MF & PaperCut NG van PaperCut 1 PCRE2 1 pgAdmin 1 Pixel Patchday September 2026 1 PJSIP 1 PostgreSQL 1 Proxmox Backup Server 1 PTC Windchill und FlexPLM 1 QEMU 1 QT 1 rclone 1 Red Hat Ansible Automation Platform 1 Red Hat Directory Server und Enterprise Linux 1 Red Hat Enterprise Linux (nodejs 1 REST API of Cisco ISE and Cisco ISE-PIC 1 REST API of Cisco ISE and ISE-PIC 1 Rockwell Automation FactoryTalk Activation Manager und Historian Machine Edition 1 Roundcube 1 Roundcube Webmail 1 Rsync 1 Ruby 1 Samsung Android 1 SAP Kernel and NetWeaver Message Server 1 SAP Patch Day August 2026 1 SAP Patch Day September 2026 1 ServiceNow AI Platform 1 ServiceNow Now Platform und AI Platform 1 SolarWinds Observability Self-Hosted 1 SolarWinds Platform 1 Sonatype Nexus Repository Manager 1 SonicWall GMS 1 SonicWall SMA 1 Splunk Enterprise 1 Splunk SOAR 1 Splunk Splunk Enterprise 1 SQL Server 1 Squid 1 Strapi 1 strongSwan 1 SuiteCRM 1 SXP REST API of Cisco ISE 1 Synacor Zimbra 1 Tanium Endpoint Management 1 Tanium Endpoint Management Server, Data Service, Enforce, Comply 1 TeamViewer Clients 1 TIBCO JasperReports 1 TP-Link Omada Gateway 1 TYPO3 Core 1 TYPO3 Extensions 1 Ubiquiti UnifiOS 1 UC Browser for Android (package com.UCMobile.intl 1 Unbound 1 UniFi-producten van Ubiquiti 1 Vaultwarden 1 Veeam ONE 1 VeloCloud Orchestrator (VCO) on-premises 1 VLC 1 vllm 1 VMware Fusion und Workstation 1 VMware Tanzu Spring Framework 1 VMware Tanzu Spring Security 1 WatchGuard Agent 1 WatchGuard AP internal API service 1 WatchGuard Firebox OS 1 WatchGuard Fireware OS 1 Wazuh 1 web-based management interface of Cisco ISE 1 wget 1 Wibu-Systems CodeMeter Runtime 1 WP Royal Royal Elementor Addons 1 Xen 1 xwiki 1 yara 1 Zimbra Collaboration Suite 1 zlib 1 Znuny 1 Zoom Video Communications Workplace und Rooms 1

Weekly Report

All weekly reports

Weekly situation, week 39: 83 advisories, 22 critical

Between 20 Sep and 27 Sep 2026 our sources recorded 83 advisories: 22 critical, 61 high.

Week 39 2026 Read
Latest Advisories
25 50 100

626 reports · Page 1 of 26

critical

WatchGuard AP internal API service: Code execution possible

NVD (NIST) reports one vulnerability in WatchGuard AP internal API service with severity critical. The stated impact is code execution. Affected: CVE…

NVD (NIST)

Read
critical

internal API service on WatchGuard Access Points: one vulnerability

NVD (NIST) reports one vulnerability in internal API service on WatchGuard Access Points with severity critical. Affected: CVE-2026-101891. The full …

NVD (NIST)

Read
high

Kiteworks Secure File Sharing & Transfer: An unspecified attack possible

CERT-Bund (BSI) reports one vulnerability in Kiteworks Secure File Sharing & Transfer with severity high. The stated impact is an unspecified attack.…

CERT-Bund (BSI)

Read
high

ESRI ArcGIS: An unspecified attack possible

CERT-Bund (BSI) reports several vulnerabilities in ESRI ArcGIS with severity high. The stated impact is an unspecified attack. The full description, …

CERT-Bund (BSI)

Read
high

QEMU: one vulnerability

CERT-Bund (BSI) reports one vulnerability in QEMU with severity high. The full description, affected versions and recommended action are available fr…

CERT-Bund (BSI)

Read
critical

MediaWiki Extensions: several vulnerabilities

CERT-Bund (BSI) reports several vulnerabilities in MediaWiki Extensions with severity critical. The full description, affected versions and recommend…

CERT-Bund (BSI)

Read
high

IBM App Connect Enterprise: several vulnerabilities

CERT-Bund (BSI) reports several vulnerabilities in IBM App Connect Enterprise with severity high. The full description, affected versions and recomme…

CERT-Bund (BSI)

Read
high

IBM QRadar SIEM: several vulnerabilities

CERT-Bund (BSI) reports several vulnerabilities in IBM QRadar SIEM with severity high. The full description, affected versions and recommended action…

CERT-Bund (BSI)

Read
critical

vm2: several vulnerabilities

CERT-Bund (BSI) reports several vulnerabilities in vm2 with severity critical. The full description, affected versions and recommended action are ava…

CERT-Bund (BSI)

Read
high

Synacor Zimbra: several vulnerabilities

CERT-Bund (BSI) reports several vulnerabilities in Synacor Zimbra with severity high. The full description, affected versions and recommended action …

CERT-Bund (BSI)

Read
high

InetUtils: Denial of service and code execution possible

CERT-Bund (BSI) reports one vulnerability in InetUtils with severity high. The stated impact is denial of service and code execution. The full descri…

CERT-Bund (BSI)

Read
high

Budibase: several vulnerabilities

CERT-Bund (BSI) reports several vulnerabilities in Budibase with severity high. The full description, affected versions and recommended action are av…

CERT-Bund (BSI)

Read
critical

Citrix NetScaler ADC und Citrix NetScaler Gateway: several vulnerabilities

CERT-Bund (BSI) reports several vulnerabilities in Citrix NetScaler ADC und Citrix NetScaler Gateway with severity critical. The full description, af…

CERT-Bund (BSI)

Read
critical

Citrix NetScaler ADC and Gateway: Code execution possible

CERT-EU — Security Advisories reports several vulnerabilities in Citrix NetScaler ADC and Gateway with severity critical. The stated impact is code e…

CERT-EU — Security Advisories

Read
critical

NetScaler ADC & NetScaler Gateway: several vulnerabilities

NCSC-NL reports several vulnerabilities in NetScaler ADC & NetScaler Gateway with severity critical. Affected: CVE-2026-88771, CVE-2026-88772, CVE-20…

NCSC-NL

Read
high

QT: Bypassing security controls possible

CERT-Bund (BSI) reports one vulnerability in QT with severity high. The stated impact is bypassing security controls. The full description, affected …

CERT-Bund (BSI)

Read
high

cPanel cPanel/WHM: several vulnerabilities

CERT-Bund (BSI) reports several vulnerabilities in cPanel cPanel/WHM with severity high. The full description, affected versions and recommended acti…

CERT-Bund (BSI)

Read
high

MongoDB Treiber (Python Driver, PHP Driver, C Driver, Compass und Laravel): several vulnerabilities

CERT-Bund (BSI) reports several vulnerabilities in MongoDB Treiber (Python Driver, PHP Driver, C Driver, Compass und Laravel) with severity high. The…

CERT-Bund (BSI)

Read
high

ServiceNow AI Platform: several vulnerabilities

CERT-Bund (BSI) reports several vulnerabilities in ServiceNow AI Platform with severity high. The full description, affected versions and recommended…

CERT-Bund (BSI)

Read
high

Rapid7 Velociraptor: several vulnerabilities

CERT-Bund (BSI) reports several vulnerabilities in Rapid7 Velociraptor with severity high. The full description, affected versions and recommended ac…

CERT-Bund (BSI)

Read
high

libsndfile: Denial of service possible

CERT-Bund (BSI) reports several vulnerabilities in libsndfile with severity high. The stated impact is denial of service. The full description, affec…

CERT-Bund (BSI)

Read
high

drawio: several vulnerabilities

CERT-Bund (BSI) reports several vulnerabilities in drawio with severity high. The full description, affected versions and recommended action are avai…

CERT-Bund (BSI)

Read
high

RPM: Code execution possible

CERT-Bund (BSI) reports several vulnerabilities in RPM with severity high. The stated impact is code execution. The full description, affected versio…

CERT-Bund (BSI)

Read
high

Paessler PRTG: several vulnerabilities

CERT-Bund (BSI) reports several vulnerabilities in Paessler PRTG with severity high. The full description, affected versions and recommended action a…

CERT-Bund (BSI)

Read
high

OpenCTI: several vulnerabilities

CERT-Bund (BSI) reports several vulnerabilities in OpenCTI with severity high. The full description, affected versions and recommended action are ava…

CERT-Bund (BSI)

Read
25 50 100

626 reports · Page 1 of 26

Contact

Reputation takes years. Destruction takes seconds.

Talk to us before somebody else does. The first conversation is free and we reply the same business day.

Send an inquiry Call in an emergency