Google security advisory (AV26-1060)
Canada's Cyber Centre urges updates for vulnerable Chrome builds before 155.0.8059.84.
Stories per day · 30 days
64 RSS
Relatedcanada21patch16ubuntu5vulnerability4denial-of-service3drupal3drupal-core3ics3sql-injection3xss3apache-kylin2browser2ccc2cccs2chrome2google2jetbrains2palo-alto2
1,080 stories, newest first · one card per story
Stories tagged #advisory
BMC Helix security advisory (AV26-1059)
Canada's Cyber Centre says BMC Helix Network Management before 26.3.01 is vulnerable and urges updates.
Progress security advisory (AV26-1058)
Canada’s Cyber Centre urges updates for critical MOVEit Transfer flaws fixed in 2025.1.6 and 2026.0.4.
Mozilla security advisory (AV26-1057)
Canada’s Cyber Centre urges updates for Firefox, Firefox ESR, and Thunderbird flaws fixed in October 2026 releases.
Palo Alto Networks security advisory (AV26-1056)
Canada’s Cyber Centre flags a Palo Alto Idira Secrets Manager flaw fixed in version 13.9.1.
[Control Systems] Moxa security advisory (AV26-1055)
Canada's Cyber Centre warns Moxa AIG-302 versions through 1.4.1 have two newly listed vulnerabilities.
BeyondTrust security advisory (AV26-1054)
Canada's Cyber Centre warns BeyondTrust Remote Support CVE-2026-102764 is being exploited in the wild.
4
CERT-In Warns Hackers Using AI Agents to Launch Cyberattacks in Just Hours
CERT-In says attackers and runaway AI agents reached Indian systems and data within hours.
CVE-2026-108776: Apache Kylin: tables/names SparkSQL injection
Apache Kylin 4.0.0–5.0.4 allows SparkSQL injection via table names, fixed in 5.0.5.
SUSE Linux security advisory (AV26-1053)
Canadian Cyber Centre relays SUSE fixes for Rancher project access flaws and Steve certificate-validation weaknesses.
[Control systems] Schneider Electric security advisory (AV26-1051)
Canada’s Cyber Centre warns of a data-authenticity flaw in Schneider Electric Sage RTU controllers.
JetBrains security advisory (AV26-1050)
Canada’s Cyber Centre urged patches for vulnerabilities in JetBrains Datalore, Junie CLI, TeamCity, and YouTrack.
F5 security advisory (AV26-1049)
Canada’s Cyber Centre urges updates for multiple NGINX and F5 products affected by three new CVEs.
SonicWall security advisory (AV26-1048)
Canada’s Cyber Centre urges patches for multiple flaws in SonicWall NSM On-Prem 4.3.1 and earlier.
USN-8933-1: RabbitMQ Server vulnerabilities
Ubuntu’s USN-8933-1 fixes RabbitMQ issues that could enable CSRF, XSS, and denial of service.
Drupal security advisory (AV26-1047)
Canada's Cyber Centre warns of critical remote code execution in unpatched Drupal core releases.
Google security advisory (AV26-1045)
Canada's Cyber Centre urges updates for desktop Chrome before 155.0.8059.79 after Google's October advisory.
n8n security advisory (AV26-1044)
Canada’s Cyber Centre urges updates for n8n SQL injection and workflow credential-check flaws.
Juniper Networks security advisory (AV26-1043)
Canada's Cyber Centre urges patching of multiple Junos OS and Junos OS Evolved releases in advisory AV26-1043.
TestFlight Update
Apple published a TestFlight update notice with no vulnerability details disclosed.
Palo Alto Networks security advisory (AV26-1041)
Canada’s Cyber Centre urges patches for PAN-OS and Prisma Browser, including authenticated RCE CVE-2026-0322.
IBM security advisory (AV26-1040)
Canadian Cyber Centre warns IBM WebSphere and Liberty face denial of service via CVE-2026-103499.
Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-015
Drupal core Link module XSS CVE-2026-108515 is moderately critical; 11.4.x should update to 11.4.10.
USN-8930-1: U-Boot vulnerabilities
Ubuntu fixed U-Boot flaws that could crash systems or execute code through NFS or HTTP handling.