Advisories from national CERTs.

GIMP Plug-in: Multiple vulnerabilities allow denial of service Translated from German

Splunk Enterprise: Multiple vulnerabilities Translated from German

Cisco License On-Prem: Multiple vulnerabilities Translated from German

SimplifyOps Rundeck: Vulnerability allows code execution Translated from German

LibreSSL: Multiple vulnerabilities Translated from German

Cisco Finesse, Unified CCE, Unified CCX: Vulnerability allows information disclosure Translated from German

Cisco Meraki (MR, MS and MX) and IOS XE: Multiple vulnerabilities Translated from German

Vulnerabilities fixed in Google Android Translated from Dutch

Critical Vulnerability in Multiple Atlassian Products

On 5 October 2026, Atlassian published a security advisory addressing a critical arbitrary file access vulnerability. It affects Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira…

Vulnerabilities fixed in WatchGuard Fireware OS Translated from Dutch

Vulnerabilities fixed in SonicWall SMA1000 Appliance Translated from Dutch

Multiple vulnerabilities in Traefik Translated from French

Multiple vulnerabilities have been discovered in Traefik. Some of them allow an attacker to cause remote denial of service, a breach of data confidentiality and a breach of data integrity.

Multiple vulnerabilities in Google Pixel Translated from French

Multiple vulnerabilities have been discovered in Google Pixel. They allow an attacker to cause privilege escalation and a breach of data confidentiality.

Vulnerability in Mozilla products Translated from French

A vulnerability has been discovered in Mozilla products. It allows an attacker to cause a security policy bypass.

Multiple vulnerabilities in WordPress Translated from French

Multiple vulnerabilities have been discovered in WordPress. Some of them allow an attacker to cause remote denial of service, a breach of data confidentiality and a breach of data integrity.

Multiple vulnerabilities in SPIP Translated from French

Multiple vulnerabilities have been discovered in SPIP. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.

Multiple vulnerabilities in Microsoft Edge Translated from French

Multiple vulnerabilities have been discovered in Microsoft Edge. They allow an attacker to cause a security problem not specified by the vendor.

Multiple vulnerabilities in OpenSSH Translated from French

Multiple vulnerabilities have been discovered in OpenSSH. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.

Multiple vulnerabilities in GLPI Translated from French

Multiple vulnerabilities have been discovered in GLPI. It allows an attacker to cause a breach of data confidentiality, remote cross-site scripting (XSS) and a security policy bypass.

Multiple vulnerabilities in Google Chrome Translated from French

Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.

Multiple vulnerabilities in HPE Aruba Networking products Translated from French

Multiple vulnerabilities have been discovered in HPE Aruba Networking products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

Multiple vulnerabilities in Veeam products Translated from French

Multiple vulnerabilities have been discovered in Veeam products. They allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and remote cross-site scripting (XSS).

Multiple vulnerabilities in Elastic products Translated from French

Multiple vulnerabilities have been discovered in Elastic products. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality and a security policy bypass.

Multiple vulnerabilities in Sonicwall Secure Mobile Access Translated from French

Multiple vulnerabilities have been discovered in Sonicwall Secure Mobile Access. Some of them allow an attacker to cause remote arbitrary code execution, server-side request forgery (SSRF) and remote cross-site…

OpenSSH: Multiple vulnerabilities Translated from German

Ghostscript: Vulnerability allows code execution Translated from German

Django: Multiple vulnerabilities Translated from German

X.Org X11 and Xwayland: Multiple vulnerabilities Translated from German

Red Hat Enterprise Linux (sequoia-openpgp, perl-DBI): Multiple vulnerabilities Translated from German

IBM SPSS: Multiple vulnerabilities Translated from German

Google Chrome / Microsoft Edge: Multiple vulnerabilities Translated from German

Apache Commons BCEL: Multiple vulnerabilities Translated from German

GIMP: Multiple vulnerabilities Translated from German

SonicWall SMA1000: Multiple vulnerabilities Translated from German

Elasticsearch: Multiple vulnerabilities Translated from German

IBM WebSphere Application Server Liberty: Multiple vulnerabilities Translated from German

ILIAS: Multiple vulnerabilities Translated from German

Broadcom Fabric OS: Multiple vulnerabilities Translated from German

Gitea: Multiple vulnerabilities Translated from German

Mozilla Firefox: Vulnerability allows bypassing security measures Translated from German

Pixel Patchday Oktober 2026: Multiple vulnerabilities Translated from German

Kibana: Multiple vulnerabilities allow bypassing security measures Translated from German

Proxmox Backup Server: Multiple vulnerabilities Translated from German

LangChain: Multiple vulnerabilities Translated from German

Arista WiFi Access Point: Multiple vulnerabilities Translated from German

JetBrains TeamCity: Multiple vulnerabilities Translated from German

RabbitMQ Java Client: Multiple vulnerabilities Translated from German

Apache log4net: Multiple vulnerabilities allow file manipulation Translated from German

MISP: Vulnerability allows data manipulation Translated from German

Vaultwarden: Multiple vulnerabilities allow an unspecified attack Translated from German