[ Patches and mitigations ]
Fixes, linked to the CVE they close.
Interim mitigations published before a vendor patch exists, fixed versions of open-source packages, and vendor patches referenced by the NVD and CERT-FR.
[ Interim mitigations ]
PrivacySafe security-patches
Scripts the PrivacySafe team runs on its own servers when a vulnerability lands before the vendor fix, published under CC0. Read a script before you run it.
| Patch | Targets | CVEs | Type |
|---|---|---|---|
| PHP2Shellgithub.com/PrivacySafe/security-patches/blob/main/php/php2shell-mitigate.sh | PHP-FPM 7.0 through 8.5 on Debian/Ubuntu/Trisquel and derivatives | CVE-2026-109618 CVE-2026-109619 | Interim mitigation |
| eMudhra CA Compromisegithub.com/PrivacySafe/security-patches/blob/main/pki/emudhra-mitigate.sh | System CA store on Debian/Ubuntu/Trisquel and derivatives | CVE-2026-111943 | Interim mitigation |
[ Fix available ]
Recent priority vulnerabilities with a known fix
Exploited or high-risk CVEs from the last 30 days where a patch, fixed version or vendor bulletin is linked.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-88771 | 27 Sep 2026 | CVSS 9.8 | Unauthenticated command execution in NetScaler ADC and GatewayImproper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before… | ExploitedFix |
| CVE-2026-88772 | 27 Sep 2026 | CVSS 8.1 | Memory flaw in NetScaler ADC and Gateway allows remote code executionVulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37… | ExploitedFix |
| CVE-2026-104935 | 13 Oct 2026 | CVSS 8.6 | Ivanti Connect Secure authentication bypass allows remote commandsAuthentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does… | ExploitedFix |
| CVE-2026-76519 | 14 Oct 2026 | CVSS 9.8 | Crafted email attachment gives root on Cisco Secure Email GatewayA vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to… | ExploitedFix |
| CVE-2026-21589 | 5 Oct 2026 | CVSS 7.5 | Unauthenticated file read in Atlassian Data Center productsThis is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data… | ExploitedFix |
| CVE-2026-88779 | 4 Oct 2026 | CVSS 7.5 | Exploited denial of service flaw in NetScaler ADC and GatewayVulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and… | ExploitedFix |
| CVE-2015-5477 | 29 Jul 2015 | CVSS 7.5 | Crafted TKEY queries crash ISC BIND DNS serversnamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and… | ExploitedFix |
| CVE-2016-3081 | 26 Apr 2016 | CVSS 8.1 | Remote code execution in Apache Struts with Dynamic Method InvocationApache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to… | ExploitedFix |
| CVE-2026-87902 | 22 Sep 2026 | CVSS 8.1 | Local file inclusion in WordPress core can lead to code executionAn unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the active… | ExploitedFix |
| CVE-2026-104286 | 1 Oct 2026 | CVSS 9.8 | Unauthenticated file write in Fortinet FortiMailAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail… | ExploitedFix |
| CVE-2026-76504 | 30 Sep 2026 | CVSS 9.8 | Authentication bypass gives admin access to Cisco SD-WAN ManagerA vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker… | ExploitedFix |
| CVE-2026-93616 | 22 Sep 2026 | CVSS 9.8 | Unauthenticated script upload in Check Point Management ServerA directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point… | ExploitedFix |
| CVE-2026-85706 | 12 Sep 2026 | CVSS 10.0 | Unauthenticated file read in GitLab through the commits APIGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before… | ExploitedFix |
| CVE-2026-86950 | 28 Sep 2026 | CVSS 8.8 | Exploited out-of-bounds write in Apple iOS, iPadOS and macOSAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1… | ExploitedFix |
| CVE-2026-109618 | 21 Oct 2026 | CVSS 9.8 | Out-of-memory handling flaw in PHP can lead to remote code executionPHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly… | Fix |
| CVE-2026-96951 | 13 Oct 2026 | CVSS 8.8 | Microsoft Windows Command InjectionImproper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a… | ExploitedFix |
| CVE-2026-65660 | 11 Aug 2026 | CVSS 8.8 | Microsoft SharePoint Code InjectionImproper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | ExploitedFix |
| CVE-2026-109619 | 21 Oct 2026 | CVSS 8.1 | Stale memory references in PHP can lead to remote code executionPHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be… | Fix |
| CVE-2026-94127 | 22 Sep 2026 | CVSS 9.8 | F5 BIG-IP APM Heap-based Buffer OverflowWhen a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution… | ExploitedFix |
| CVE-2026-110936 | 15 Oct 2026 | CVSS 6.7 | DLL search path flaw in Siemens Software CenterA vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries… | ExploitedFix |
| CVE-2026-88773 | 27 Sep 2026 | CVSS 10.0 | Citrix NetScaler ADCInconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway… | Fix |
| CVE-2026-88775 | 27 Sep 2026 | CVSS 9.8 | Citrix NetScaler ADCMemory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23… | Fix |
| CVE-2026-88776 | 27 Sep 2026 | CVSS 9.8 | Citrix NetScaler ADCMemory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before… | Fix |
| CVE-2026-88777 | 27 Sep 2026 | CVSS 9.8 | Citrix NetScaler ADCMemory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before… | Fix |
| CVE-2026-88774 | 27 Sep 2026 | CVSS 7.2 | Citrix NetScaler ADCVulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37… | Fix |
| CVE-2026-88778 | 27 Sep 2026 | CVSS 7.5 | Citrix NetScaler ADCPredictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before… | Fix |