Vulnerabilities
Security news
Official advisories,
every morning.
We collect announcements from CISA (US) and the NCSC (UK) every morning at 9:00 JST and add the countermeasures we can help with. Always check the original announcement for the full details. Advisories from Japanese public bodies are on the Japanese page.
Vulnerabilities
CVE-2026-123158: OpenBSD OpenSSH — OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-116779: SignalWire FreeSwitch — SignalWire FreeSwitch Code Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-123218: IBM Aspera Faspex — IBM Aspera Faspex Incorrect Authorization Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-19868: SonicWall SonicOS SSLVPN — SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2024-27834: Apple Multiple Products — Apple Multiple Products Improper Authentication Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-119977: WordPress WordPress Core — WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability
How we can helpSite monitoring (¥4,980/mo) →WordPress plugin (free) →Security configuration review →
Source: CISA KEV ↗Vulnerabilities
CVE-2026-118527: Ivanti Connect Secure — Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-111357: Ivanti Connect Secure — Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-97229: GitLab Community Edition and Enterprise Edition — GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software — Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference V
Source: CISA KEV ↗Vulnerabilities
CVE-2026-41709: Broadcom VMware ESX — Broadcom VMWare ESX Insufficient Logging Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-46300: Linux Kernel — Linux Kernel Missing Initialization of a Variable Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-48356: Adobe Commerce and Magento — Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
How we can helpSite monitoring (¥4,980/mo) →WordPress plugin (free) →Security configuration review →
Source: CISA KEV ↗Vulnerabilities
CVE-2026-111497: Google Brotli — Google Brotli Unchecked Return Value Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-109618: PHP Group PHP — PHP Memory Corruption Vulnerability
How we can helpUrgent response page →PHP Emergency Inspection report (¥4,980) →Temporary WAF protection →
Source: CISA KEV ↗Vulnerabilities
CVE-2026-109619: PHP Group PHP — PHP Stale Internal Request-State Vulnerability
How we can helpUrgent response page →PHP Emergency Inspection report (¥4,980) →Temporary WAF protection →
Source: CISA KEV ↗Vulnerabilities
CVE-2026-114625: Arista VeloCloud Orchestrator — Arista VeloCloud Orchestrator SQL Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-110447: Collabora Collabora Online – Built-in CODE Server — Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-106931: EG Secure Solutions SiteGuard Server Edition — EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-96656: Plex Media Server — Plex Media Server External Control of File Name or Path Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-96655: Plex Media Server — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-96654: Plex Media Server — Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-96652: Plex Media Server — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-110936: Siemens Software Center — Siemens Software Center Uncontrolled Search Path Element Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-102764: BeyondTrust Remote Support — BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2025-61624: Fortinet Multiple Products — Fortinet Multiple Products Path Traversal Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-21589: Atlassian Multiple Products — Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-105134: Ahsay AhsayCBS — Ahsay AhsayCBS Command Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities