Linux before several 5.x–7.x releases affected by CVE-2026-98432
Canada’s Cyber Centre urges administrators to review the linked material and apply updates when available.
44
Organization
Canadian Centre for Cyber Security
- Mentions · 7d28
- Mentions · 30d134
- All mentions272
- First seenAug 24, 2026
- Last mentioned20h ago
Timeline
272 articles · newest firstLaravel MongoDB before 5.12.0 flagged in Canadian advisory
The October 30 notice covers Laravel MongoDB before 5.12.0 and tells administrators to apply updates when available.
34
HashiCorp Nomad symlink escape and Boundary SSRF disclosed
Nomad dispatch writes can leave the allocation directory via symlinks, and Boundary has SSRF in its Vault credential store.
64
Drupal Commerce Core access bypass reported exploited in the wild
Releases before 2.41 and 3.0.0 before 3.3.13 are affected; Drupal rates the issue highly critical.
74
Mattermost 11.10.0 and three older lines have an unspecified flaw
Canada's Cyber Centre urges administrators to review Mattermost security updates and apply fixes when they are available.
34
n8n before 2.44.1 and 2.43.5 can expose other projects' data tables
Canada's Cyber Centre says a crafted workflow ID can reach data tables in other n8n projects and urges updates.
40
Canada updates VMware advisory after two CVEs enter CISA KEV
CVE-2026-41709 joined the KEV catalog on October 28; CVE-2026-59310 was added on August 18.
78
Canada flags Juniper Session Smart flaws fixed in recent releases
Session Smart Conductor and Router builds before 7.0.5, 7.1.7 and 7.2.3 are listed; no CVE ids or exploitation status are given.
44
Mozilla advisory AV26-1100 covers Firefox, ESR and Thunderbird flaws
Canada’s Cyber Centre lists builds before Firefox 159, ESR 115.44 and 153.6, and matching Thunderbird versions.
42
Apple advisory AV26-1099 lists flaws in iOS, macOS, Safari and more
Affected builds are those before the stated iOS, iPadOS, macOS, visionOS, tvOS, watchOS and Safari releases.
48
Canadian help-desk vishing campaign bypasses MFA in real time
Callers send staff to branded relay pages, then register MFA methods and steal Microsoft 365 data before extortion.
72
Telerik Document Processing before 2026.3.1027 can exhaust resources (CVE-2026-118035)
Canada's Cyber Centre points administrators to Progress's advisory for RadWordsProcessing and says to apply updates when available.
40
Several Tanium products affected by vulnerabilities (AV26-1097)
Affected lines include Certificate Manager, Endpoint Configuration, Enforce, Provision, and Threat Response builds listed as prior versions.
34
Veeam backup products affected by vulnerabilities ahead of fixes
The Canadian Cyber Centre lists affected builds of Agent for Linux, Backup and Replication, Backup for Microsoft 365 and Veeam ONE.
46
Chrome desktop before 156.0.8078.73 affected, Google advisory says
Canadian advisory AV26-1095, dated October 28, tells users to install the Stable Channel updates.
38
WatchGuard Fireware OS and SSL VPN client affected by vulnerabilities
Canada’s October 28 notice lists Fireware OS and Mobile VPN with SSL Client builds before 2026.4 and 12.0, without naming CVEs.
38
TeamViewer clients before 15.83 affected by vulnerabilities, Canada warns
Windows, Linux and macOS clients and the Android app before 15.8.3 are listed, with no CVEs named.
40
Adobe patches flaws in Painter, Creative Cloud, Campaign, Connect
Canadian Cyber Centre advisory AV26-1092 points users to four Adobe bulletins for updates released as of October 27.
46
CISA lists critical Google Brotli flaw CVE-2026-111497 as exploited
Out-of-bounds writes in the decoder can yield code execution; fixed builds are 1.0.10, 1.1.1, and 1.2.1.
86
CISA adds Adobe CVE-2026-48356 to KEV after July advisories
Canada’s Cyber Centre points admins to July Adobe fixes covering After Effects, ColdFusion, AEM and other products.
74
Hitachi HiRDB, JP1 and TRO600 firmware affected by vulnerabilities
The October 27 bulletin lists many HiRDB and JP1 builds plus TRO600 firmware before 9.2.2.1, with no CVEs or exploitation status.
34
Johnson Controls Kantech Entrapass before 9.20 has two flaws
Canada's Cyber Centre says Johnson Controls confirmed two vulnerabilities and urges administrators to apply updates when available.
48
Moxa MRC Client and OnCell LTE devices hit by three flaws
Canada's Cyber Centre says MRC Client through v4.2.0 and all OnCell G3150A-LTE firmware are affected, with fixes not named.
46
ArcGIS Server before 12.1 affected by vulnerabilities, Cyber Centre says
The October 27 notice tells administrators to review Esri’s October 2026 bulletin and apply updates when available.
28
HashiCorp Consul auth bypass in service mesh leaf certificate API
Canada’s Cyber Centre urges admins to apply HashiCorp updates for Consul and Consul Enterprise as they become available.
52
Craft CMS and Commerce-mollie need updates, Cyber Centre says
CMS before 4.18.9 and 5.11.2, and Commerce-mollie before 4.4.3, are affected as of October 23.
36
Siemens Mendix SAML module has an authentication-bypass flaw
Mendix 9 builds before V3.6.29 and Mendix 10 and 11 builds before V4.2.4 are affected; Canada urges administrators to apply updates.
52
Canadian Cyber Centre lists vulnerable IBM security and integration products
The October 26 alert names version ranges for App Connect, Guardium, Planning Analytics, QRadar, and Sterling Connect:Direct.
38
Canadian centre flags Fortinet flaws in six product lines (AV26-1081)
Fixed builds are listed for current branches, while FortiMail 7.2 must move to branch 7.4 or above.
36
Arista says VeloCloud Orchestrator flaw CVE-2026-114625 is exploited
Builds before 5.2.3.18, 6.1.3.10, and 6.4.2.12 are affected; Canada's Cyber Centre urges available updates.
74
HPE Networking Wireless AOS has multiple flaws in older releases
Canadian Cyber Centre alert AV26-1079 points administrators to HPE bulletin HPESBNW05162 rev.1 for fixes.
48
MongoDB C# Driver before 3.13.0 has DoS and auth-bypass flaws
Canada's Cyber Centre urges administrators to apply MongoDB updates for the C# Driver as they become available.
58
Splunk Enterprise and SOAR need updates, Cyber Centre says
Canadian Cyber Centre alert AV26-1077, dated October 22, points to October 2026 Splunk hardening and SOAR vulnerability notices.
36
Canada flags Atlassian Data Center and Server flaws (AV26-1076)
The October 22 alert lists affected Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira, and Jira Service Management builds.
46
Roundcube Webmail before 1.6.20 and 1.7.5 has security flaws
Canadian advisory AV26-1075 names the fixed releases but gives no CVE identifiers or impact details.
40
GitLab CE and EE affected by vulnerabilities prior to 19.5.1
GitLab Critical Patch Releases 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10 and 18.11.13 address issues in Community and Enterprise Editions.
40
Cyber Centre flags Cisco flaws in several products (AV26-1073)
Named fixes include Expressway X15.5.20, Snort 3.12.4.0, Cyber Vision 5.6.0, and Secure Client 5.1.20.333.
36
ISC BIND 9 flaws can exhaust resources or crash named
Four CVEs cover message-processing exhaustion, GSS-TSIG memory corruption, and unexpected exits.
64
Oracle October 2026 CPU lists flaws across dozens of products
The October 20 notice names JD Edwards, MySQL, Java SE, WebLogic, PeopleSoft and many other lines, without CVE details.
48
Critical PHP use-after-free bugs allow unauthenticated code execution
CVE-2026-109618 and CVE-2026-109619, called php2shell, have fixes for PHP 8.2 through 8.5; a PoC exists but no active attacks are confirmed.
78
Related CVEs
by mentions- CVE-2026-488422%8.1Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash…
- CVE-2025-4911399%8.8Authenticated PHP Object Deserialization RCE in Roundcube Webmail
- CVE-2025-6846127%6.1Cross-Site Scripting via SVG animate Tag in Roundcube Webmail
- CVE-2026-1949033%9.3Remote Authentication Bypass in Citrix NetScaler ADC and NetScaler Gateway
- CVE-2026-19489<1%8.8Unauthenticated Buffer Overflow in Citrix NetScaler ADC and NetScaler Gateway
- CVE-2026-8877182%9.5Unauthenticated RCE in Citrix NetScaler ADC and Gateway
- CVE-2026-9412725%9.3Unauthenticated Heap-Overflow RCE in F5 BIG-IP APM with OAuth Profile
- CVE-2026-10276419%9.3Message-origin spoofing enables file ops on BeyondTrust Remote Support
- CVE-2026-672772%8.8Unauthenticated Kernel Crash and Memory Leak in MikroTik RouterOS btest
- CVE-2026-10493587%8.6Auth Bypass to Command Execution in Ivanti Connect Secure
Appears with
- CISAorganization · 29
- Googlevendor · 13
- Chromeproduct · 9
- Citrixvendor · 8
- Ciscovendor · 7
- NetScaler ADCproduct · 7
- NetScaler Gatewayproduct · 7
- Roundcubevendor · 7
- Roundcube Webmailproduct · 7
- Dellvendor · 7
- Microsoftvendor · 6
- IBMvendor · 6
- SonicWallvendor · 6
- Adobevendor · 5
- MikroTikvendor · 5
- JetBrainsvendor · 5
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.