Vulnerabilities
Security news
Official advisories,
every morning.
We collect announcements from CISA (US) and the NCSC (UK) every morning at 9:00 JST and add the countermeasures we can help with. Always check the original announcement for the full details. Advisories from Japanese public bodies are on the Japanese page.
Advisories
Help the NCSC understand how organisations approach external attack surface risk
How we can helpFree trust check →
Source: NCSC (UK) ↗Advisories
China-linked malicious actors called out by UK and international partners for targeting sensitive data globally
Source: NCSC (UK) ↗Vulnerabilities
CVE-2015-5477: ISC BIND — ISC BIND Data Processing Errors Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2016-3081: Apache Struts — Apache Struts Command Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2023-22894: Strapi Strapi — Strapi Cleartext Storage of Sensitive Information Vulnerability
How we can helpSite monitoring (¥4,980/mo) →WordPress plugin (free) →Security configuration review →
Source: CISA KEV ↗Vulnerabilities
CVE-2021-3199: ONLYOFFICE Docs — ONLYOFFICE Docs Server Path Traversal Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2015-3306: ProFTPD ProFTPD — ProFTPD Improper Access Control Vulnerability
Source: CISA KEV ↗Advisories
Incident affecting ASOS customers
Source: NCSC (UK) ↗Vulnerabilities
CVE-2026-88779: Citrix NetScaler — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-102490: Zammad GmbH Zammad — Zammad GmbH Zammad Improper Privilege Management Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-102489: Zammad GmbH Zammad — Zammad GmbH Zammad Session Fixation Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-104286: Fortinet FortiMail — Fortinet FortiMail Path Traversal Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-76504: Cisco Catalyst SD-WAN Manager — Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-86950: Apple Multiple Products — Apple Multiple Products Out-of-Bounds Write Vulnerability
Source: CISA KEV ↗Advisories
Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway
Source: NCSC (UK) ↗Vulnerabilities
CVE-2026-88772: Citrix NetScaler — Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-88771: Citrix NetScaler — Citrix NetScaler Improper Input Validation Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-67279: MikroTik RouterOS — Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-65660: Microsoft SharePoint — Microsoft SharePoint Code Injection Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-87902: WordPress Core — WordPress Core Remote File Inclusion Vulnerability
How we can helpSite monitoring (¥4,980/mo) →WordPress plugin (free) →Security configuration review →
Source: CISA KEV ↗Vulnerabilities
CVE-2026-5430: WSO2 Multiple Products — WSO2 Multiple Products Path Traversal Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-71362: Adobe Commerce and Magento — Adobe Commerce and Magento Incorrect Authorization Vulnerability
How we can helpSite monitoring (¥4,980/mo) →WordPress plugin (free) →Security configuration review →
Source: CISA KEV ↗Vulnerabilities
CVE-2026-93952: Arista VeloCloud Orchestrator — Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-94127: F5 BIG-IP APM — F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-93616: Check Point Multiple Products — Check Point Multiple Products Path Traversal Vulnerability
Source: CISA KEV ↗Vulnerabilities
CVE-2026-85102: Check Point Multiple Products — Check Point Multiple Products Improper Certificate Validation Vulnerability
Source: CISA KEV ↗AdvisoriesAI-related
One does not simply defend agentically
Source: NCSC (UK) ↗Vulnerabilities
CVE-2026-7273: Zyxel GS1900 Series Switches — Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
Source: CISA KEV ↗Vulnerabilities