Weekly situation, week 43: 86 advisories, 11 critical
Between 18 Oct and 25 Oct 2026 our sources recorded 86 advisories: 11 critical, 75 high.
01
The critical advisories
- Arista VeloCloud Orchestrator: Privilege escalation and SQL injection possible
- GStreamer: Code execution possible
- Oracle Fusion Middleware: several vulnerabilities
- GitLab Community and Enterprise Editions: one vulnerability
- PHP: several vulnerabilities
- DrayTek Vigor: Code execution possible
- Issuu Panel plugin for WordPress: one vulnerability
- PHP: Code execution possible
- Apache Tomcat when the JNDI realm: one vulnerability
- Rank Math SEO PRO for WordPress: one vulnerability
- Collabora Online Built-in CODE Server (NextCloud): one vulnerability
02
Most frequently affected
03
What this means for the coming week
First check whether any of the systems named above is reachable from the internet at your site. If it is, the update belongs ahead of the regular maintenance window.
Insights
More articles
Weekly situation, week 42: 107 advisories, 17 critical
Between 11 Oct and 18 Oct 2026 our sources recorded 107 advisories: 17 critical, 90 high.
Weekly situation, week 41: 99 advisories, 17 critical
Between 4 Oct and 11 Oct 2026 our sources recorded 99 advisories: 17 critical, 82 high.
Weekly situation, week 40: 80 advisories, 16 critical
Between 27 Sep and 4 Oct 2026 our sources recorded 80 advisories: 16 critical, 64 high.
Contact
Reputation takes years. Destruction takes seconds.
Talk to us before somebody else does. The first conversation is free and we reply the same business day.