Advisories from national CERTs.

Vulnerabilities fixed in FreeBSD bhyve hypervisor Translated from Dutch

Vulnerabilities fixed in Cisco Expressway Series Translated from Dutch

Vulnerabilities fixed in Snort 3 from Cisco Translated from Dutch

Multiple vulnerabilities fixed in Oracle Java Translated from Dutch

Vulnerabilities fixed in Oracle Fusion Middleware Translated from Dutch

Critical Vulnerability in GitLab Community and Enterprise Editions

On 21 October 2026, GitLab published a security advisory addressing several vulnerabilities among which a critical flaw that could allow an unauthenticated user to execute arbitrary code on a GitLab server. CERT-EU…

Vulnerabilities fixed in GitLab by GitLab Inc. Translated from Dutch

Vulnerabilities fixed in Oracle JD Edwards EnterpriseOne Translated from Dutch

Multiple vulnerabilities in Cisco products Translated from French

Multiple vulnerabilities have been discovered in Cisco products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

Multiple vulnerabilities in GitLab Translated from French

Multiple vulnerabilities have been discovered in GitLab. Some of them allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and a security policy bypass.

Multiple vulnerabilities in Node Translated from French

Multiple vulnerabilities have been discovered in Node.js. Some of them allow an attacker to cause remote arbitrary code execution, a security policy bypass and a security problem not specified by the vendor.

Multiple vulnerabilities in Splunk products Translated from French

Multiple vulnerabilities have been discovered in Splunk products. Some of them allow an attacker to cause arbitrary code execution, a breach of data confidentiality and remote cross-site scripting (XSS).

Multiple vulnerabilities in SolarWinds products Translated from French

Multiple vulnerabilities have been discovered in SolarWinds products. Some of them allow an attacker to cause privilege escalation, server-side request forgery (SSRF) and remote cross-site scripting (XSS).

Vulnerability in Mozilla products Translated from French

A vulnerability has been discovered in Mozilla products. It allows an attacker to cause a security problem not specified by the vendor.

Multiple vulnerabilities in ISC BIND Translated from French

Multiple vulnerabilities have been discovered in ISC BIND. They allow an attacker to cause remote arbitrary code execution and remote denial of service.

Red Hat Enterprise Linux cockpit-machines: Multiple vulnerabilities allow information disclosure Translated from German

Node.js: Multiple vulnerabilities Translated from German

Internet Systems Consortium BIND: Multiple vulnerabilities Translated from German

GitLab: Multiple vulnerabilities Translated from German

HAProxy: Multiple vulnerabilities allow denial of service Translated from German

Checkmk: Multiple vulnerabilities Translated from German

Apache Traffic Server: Multiple vulnerabilities Translated from German

Red Hat Ansible Automation Platform: Multiple vulnerabilities Translated from German

MongoDB Compass: Vulnerability allows code execution Translated from German

MikroTik RouterOS: Vulnerability allows bypassing security measures Translated from German

Cisco IOS XR: Vulnerability allows denial of service Translated from German

Vaadin: Multiple vulnerabilities Translated from German

Cisco products (Emergency Responder, Prime Collaboration, Unified Communications Manager and Unity Connection): Multiple vulnerabilities Translated from German

Cisco Expressway: Multiple vulnerabilities Translated from German

Cisco products (IOS XE, SFTD) and Snort: Multiple vulnerabilities Translated from German

OpenSearch: Vulnerability allows denial of service Translated from German

Splunk Splunk Enterprise: Multiple vulnerabilities Translated from German

GStreamer: Vulnerability allows code execution Translated from German

OpenCTI: Multiple vulnerabilities allow information disclosure Translated from German

Splunk SOAR: Multiple vulnerabilities Translated from German

QT: Vulnerability allows denial of service Translated from German

Linux Kernel: Multiple vulnerabilities allow an unspecified attack Translated from German

Kyverno: Multiple vulnerabilities Translated from German

JupyterHub: Multiple vulnerabilities Translated from German

WSO2 API Manager: Multiple vulnerabilities Translated from German

Critical Vulnerabilities in PHP

On 20 October 2026, the PHP project announced an upcoming security release addressing two critical vulnerabilities in PHP. Public reports indicated that these vulnerabilities could lead to remote code execution. The PHP…

Vulnerabilities fixed in Oracle Analytics Translated from Dutch

Vulnerabilities fixed in Oracle Communications Translated from Dutch

Vulnerabilities fixed in PHP Translated from Dutch

Vulnerabilities fixed in Oracle E-Business Suite Translated from Dutch

Critical security issue affecting PHP

Updated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP (CVE-2026-109618 and CVE-2026-109619).

Vulnerabilities fixed in Oracle MySQL Translated from Dutch

Vulnerabilities fixed in Oracle Enterprise Manager Translated from Dutch

Vulnerabilities fixed in Oracle PeopleSoft Enterprise Translated from Dutch

Multiple vulnerabilities in Oracle PeopleSoft Translated from French

Multiple vulnerabilities have been discovered in Oracle PeopleSoft. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality.