Vulnerabilities
Security news
Official advisories,
every morning.
We collect announcements from CISA (US) and the NCSC (UK) every morning at 9:00 JST and add the countermeasures we can help with. Always check the original announcement for the full details. Advisories from Japanese public bodies are on the Japanese page.
Vulnerabilities
CVE-2026-0322: Palo Alto Networks PAN-OS — Palo Alto Networks PAN-OS Code Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-104935: Ivanti Connect Secure — Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-96951: Microsoft Windows — Microsoft Windows Command Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2015-5477: ISC BIND — ISC BIND Data Processing Errors Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2016-3081: Apache Struts — Apache Struts Command Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2023-22894: Strapi Strapi — Strapi Cleartext Storage of Sensitive Information Vulnerability
How we can helpSite monitoring (¥4,980/mo) →WordPress plugin (free) →Security configuration review →
Source: CISA KEV ↗Vulnerabilities
CVE-2021-3199: ONLYOFFICE Docs — ONLYOFFICE Docs Server Path Traversal Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2015-3306: ProFTPD ProFTPD — ProFTPD Improper Access Control Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-88779: Citrix NetScaler — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-102490: Zammad GmbH Zammad — Zammad GmbH Zammad Improper Privilege Management Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-102489: Zammad GmbH Zammad — Zammad GmbH Zammad Session Fixation Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-104286: Fortinet FortiMail — Fortinet FortiMail Path Traversal Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-76504: Cisco Catalyst SD-WAN Manager — Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-86950: Apple Multiple Products — Apple Multiple Products Out-of-Bounds Write Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-88772: Citrix NetScaler — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-88771: Citrix NetScaler — Citrix NetScaler Improper Input Validation Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-67279: MikroTik RouterOS — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-65660: Microsoft SharePoint — Microsoft SharePoint Code Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-87902: WordPress Core — WordPress Core Remote File Inclusion Vulnerability
How we can helpSite monitoring (¥4,980/mo) →WordPress plugin (free) →Security configuration review →
Source: CISA KEV ↗Vulnerabilities
CVE-2026-5430: WSO2 Multiple Products — WSO2 Multiple Products Path Traversal Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-71362: Adobe Commerce and Magento — Adobe Commerce and Magento Incorrect Authorization Vulnerability
How we can helpSite monitoring (¥4,980/mo) →WordPress plugin (free) →Security configuration review →
Source: CISA KEV ↗Vulnerabilities
CVE-2026-93952: Arista VeloCloud Orchestrator — Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-94127: F5 BIG-IP APM — F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-93616: Check Point Multiple Products — Check Point Multiple Products Path Traversal Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-85102: Check Point Multiple Products — Check Point Multiple Products Improper Certificate Validation Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-7273: Zyxel GS1900 Series Switches — Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2025-39964: Linux Kernel — Linux Kernel Race Condition Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-53266: Linux Kernel — Linux Kernel Out-of-Bounds Write Vulnerability
Source: CISA KEV ↗Vulnerabilities