Advisories from national CERTs.

Siemens Industrial Edge Devices: Multiple vulnerabilities Translated from German

Critical Vulnerability in GitLab CE and EE

On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an…

Help the NCSC understand how organisations approach external attack surface risk

We're looking to hear from people involved in evaluating, selecting or adopting EASM.

Vulnerabilities fixed in HPE Networking AOS-Switch Translated from Dutch

Multiple vulnerabilities in MongoDB Translated from French

Multiple vulnerabilities have been discovered in MongoDB products. They allow an attacker to cause remote denial of service and a security problem not specified by the vendor.

Multiple vulnerabilities in GitLab Translated from French

Multiple vulnerabilities have been discovered in GitLab. Some of them allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and a breach of data integrity.

Multiple vulnerabilities in PostgreSQL JDBC Translated from French

Multiple vulnerabilities have been discovered in PostgreSQL JDBC. They allow an attacker to cause a breach of data confidentiality and a security policy bypass.

Security incident targeting remote controllers of refrigeration installations Translated from French

CERT-FR is aware of many compromises of remote controllers for refrigeration installations: the Danfoss AK-SM and AK-SC series, as well as Copeland xweb and Dixell xweb. In general, exposing a management interface on…

mutt: Vulnerability allows data manipulation Translated from German

Red Hat Enterprise Linux (python-tornado): Multiple vulnerabilities Translated from German

Red Hat Enterprise Linux (flatpak): Multiple vulnerabilities Translated from German

Linux Kernel: Vulnerability allows privilege escalation Translated from German

MariaDB: Multiple vulnerabilities Translated from German

CUPS: Multiple vulnerabilities allow denial of service Translated from German

Red Hat Enterprise Linux (cjose): Vulnerability allows data manipulation Translated from German

GitLab: Multiple vulnerabilities Translated from German

ImageMagick: Multiple vulnerabilities Translated from German

BusyBox: Vulnerability allows code execution Translated from German

OTRS: Multiple vulnerabilities Translated from German

Rocket Remote Desktop: Vulnerability allows information disclosure Translated from German

Bouncy Castle: Vulnerability allows information disclosure Translated from German

SmarterTools SmarterMail: Multiple vulnerabilities Translated from German

Foreman: Vulnerability allows file manipulation and bypassing security measures Translated from German

IBM SPSS Modeler: Multiple vulnerabilities Translated from German

LiteLLM: Multiple vulnerabilities Translated from German

GIMP: Vulnerability allows denial of service Translated from German

GNU Emacs: Vulnerability allows code execution Translated from German

Strapi: Vulnerability allows information disclosure Translated from German

Docker Desktop: Vulnerability allows arbitrary code execution with administrator rights Translated from German

Vulnerabilities fixed in Splunk Enterprise Translated from Dutch

Vulnerabilities fixed in Cisco networking products Translated from Dutch

Vulnerability fixed in Citrix NetScaler ADC and Gateway Translated from Dutch

Vulnerabilities fixed in Cisco APIC Translated from Dutch

Multiple vulnerabilities in the Debian LTS Linux kernel Translated from French

Multiple vulnerabilities have been discovered in the Debian LTS Linux kernel. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality and denial of service.

Multiple vulnerabilities in IBM products Translated from French

Multiple vulnerabilities have been discovered in IBM products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

Vulnerability in Tenable products Translated from French

A vulnerability has been discovered in Tenable products. It allows an attacker to cause remote arbitrary code execution. The vendor states that a component must be reinstalled after the update.

Multiple vulnerabilities in the Ubuntu Linux kernel Translated from French

Multiple vulnerabilities have been discovered in the Ubuntu Linux kernel. Some of them allow an attacker to cause privilege escalation, remote denial of service and a breach of data confidentiality.

Multiple vulnerabilities in the Red Hat Linux kernel Translated from French

Multiple vulnerabilities have been discovered in the Red Hat Linux kernel. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

Multiple vulnerabilities in Nextcloud products Translated from French

Multiple vulnerabilities have been discovered in Nextcloud products. Some of them allow an attacker to cause privilege escalation, remote denial of service and a breach of data confidentiality.

Multiple vulnerabilities in Apache Struts Translated from French

Multiple vulnerabilities have been discovered in Apache Struts. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a breach of data confidentiality. The vendor states…

Vulnerability in Citrix NetScaler ADC and Gateway Translated from French

A vulnerability has been discovered in Citrix NetScaler ADC and Gateway. It allows an attacker to cause remote arbitrary code execution and remote denial of service.

Multiple vulnerabilities in the SUSE Linux kernel Translated from French

Multiple vulnerabilities have been discovered in the SUSE Linux kernel. Some of them allow an attacker to cause arbitrary code execution, remote denial of service and a breach of data confidentiality.

Golang Go: Multiple vulnerabilities Translated from German

poppler: Vulnerability allows denial of service and data manipulation Translated from German

IBM App Connect Enterprise: Multiple vulnerabilities Translated from German

Linux Kernel: Multiple vulnerabilities allow an unspecified attack Translated from German

GStreamer: Multiple vulnerabilities Translated from German

MongoDB Treiber: Multiple vulnerabilities Translated from German

Red Hat Enterprise Linux (sssd, tftp, ansible-collection-ansible-posix): Multiple vulnerabilities Translated from German

IBM i: Vulnerability allows cross-site scripting Translated from German