Vulnerabilities and CVEs

21:56 Exploited

Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days

BleepingComputer

21:47 Patch

Microsoft releases Windows 10 KB5126657 extended security update

BleepingComputer

21:32 Patch

Ivanti security advisory (AV26-1035)

CVE-2026-104935Canadian Centre for Cyber Security

21:28 Patch

USN-8908-2: BlueZ regression

Ubuntu Security

21:25 Patch

October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th)

SANS Internet Storm Center

21:21 Vulnerability

VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration

CVE-2026-16753CERT/CC

21:10 Patch

Citrix security advisory (AV26-1034)

Canadian Centre for Cyber Security

21:05 Vulnerability

Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

Cisco PSIRT

21:04 Patch

Microsoft: Windows 11 24H2 Home and Pro reached end of support

BleepingComputer

20:56 Vulnerability

NCSC-2026-0426 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Tools

NCSC-NL

20:55 Vulnerability

NCSC-2026-0425 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft System Center

NCSC-NL

20:54 Vulnerability

NCSC-2026-0424 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Dynamics

NCSC-NL

20:53 Vulnerability

Commvault security advisory (AV26-1033)

Canadian Centre for Cyber Security

20:49 Vulnerability

NCSC-2026-0423 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows

NCSC-NL

20:43 Exploited

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

CVE-2026-104935SecurityWeek

20:36 Vulnerability

NCSC-2026-0422 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Office

NCSC-NL

20:31 Vulnerability

NCSC-2026-0421 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Azure

NCSC-NL

20:30 Vulnerability

NCSC-2026-0420 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft SQL Server

NCSC-NL

20:28 Patch

NCSC-2026-0419 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Excange Server

CVE-2026-96940NCSC-NL

20:27 Vulnerability

VU#573195: Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementation

CERT/CC