CCB Alert

CCB Alert is the advisory page of the Centre for Cybersecurity Belgium @CCBbelgium. Use [email protected] for interaction.

[CCB Alert @CCBalert]

Warning: Software vulnerabilities in #Java, #Python, and #Go. #CVE-2026-114820 CVSS: 9.1. #CVE-2026-115557 CVSS: 9.4. #CVE-2026-111943. These fixes remove the impacted root CA certificates related to #eMudhra. https://t.co/epBwHsPKvD #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: Supply-chain compromise of #LiteLLM. Malicious v1.107.0 was live on PyPI and in Docker/GHCR images for up to 2.5 hours on 21 Oct, stealing keys and deploying #RCE tooling. Upgrading does not clean an infected host. More info: https://t.co/b68YP7wpxL #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: High-severity memory corruption in ISC #BIND9. #CVE-2026-94300 CVSS: 8.1. Replayed GSS-TSIG messages could cause crashes or remote code execution. More info: https://t.co/1T0PiznKSi #RCE! #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: Multiple critical vulnerabilities in #HPE Networking AOS-8 & AOS-10. CVSS up to 10.0! Flaws including #CVE-2026-79847 can enable unauthenticated remote code execution #RCE and device compromise! More info: https://t.co/6kJ8kUUPfl #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: Critical SQL injection vulnerability in #VeloCloud Orchestrator. CVE-2026-114625 CVSS: 9.9. This vulnerability can lead to privilege escalation and impact the VCO host itself. More info: https://t.co/otkOa7CR37 #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: Multiple High Severity #Vulnerabilities patched in #Node.js October 2026 release. Read our advisory at https://t.co/KsfsSkzJ8K and #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: Critical RCE in #Cisco Expressway Series. CVE-2026-76466 CVSS: 9.8. An unauthenticated remote attacker can run OS commands as root on clustered deployments. #RCE Read the Cisco advisory at https://t.co/0Bhs0deUWB and #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: #Fortinet will release security hardening updates for #FortiOS, #FortiManager, #FortiAnalyzer, #FortiMail & #FortiAuthenticator, including critical- and high-severity fixes today! Read our advisory at https://t.co/SrR48kUaiv and #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: Integer Overflow #vulnerability in #Gitlab. #CVE-2026-110264 CVSS: 10.0. Attackers can under certain conditions execute arbitrary commands #RCE! Read our advisory at https://t.co/rydV9AUngF and #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: #Roundcube Webmail IMAP command injection vulnerability: #CVE-2026-113386 (CVSS 7.1). Remote authenticated attackers could execute arbitrary IMAP commands, risking email data and mailbox integrity. Time to #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: High, actively exploited, #DLL-side-loading in #Siemens Software Center #OTICS #ICS #CVE-2026-110936 CVSS: 8.4. See advisory https://t.co/tGidbki5ta #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: #PHP Foundation has addressed two critical #vulnerabilities. #CVE-2026-109618 (CVSS v4.0 9.2) & #CVE-2026-109619 (CVSS v4.0 9.2). Successful exploitation of these vulnerabilities could lead to unauthenticated remote code execution #RCE! Time to #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: Multiple high vulnerabilities in #Apache #Camel #CVE-2026-78164 #CVE-2026-78165 #CVE-2026-80312 #CVE-2026-80343 #CVE-2026-80344 #CVE-2026-83531 #CVE-2026-88901 CVSS: 8.8-8.2 They can lead to arbitrary code execution https://t.co/FUZ4WnjZr6 #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: Multiple high in #IBM #MQ #CVE-2026-12665 #CVE-2026-10572 #CVE-2026-10743 #CVE-2026-10574 CVSS: 8.8-8.1 If exploited by remote attackers they can lead to remote code execution #RCE and Denial of Service #DoS #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: Critical OS command injection & missing authorization vulnerabilities in #Camunda, CVE-2026-109431 & CVE-2026-109432 CVSS: 9.3-8.6 An authenticated, remote attacker can perform read and write file operations and execute arbitrary code. #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: A critical remote code execution vulnerability in #Drupal core could allow attackers to execute arbitrary code, in some cases without authentication, via certain contributed modules. CVE-2026-108097. Read the advisory https://t.co/u72JoWCPx1 and #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: 3 critical vulnerabilities in #MariaDB Server may allow low-privileged attackers to access or corrupt data, cause crashes, or execute code. CVE-2026-92262, CVE-2026-85746 & CVE-2026-85748 CVSS(3.1): 9.9. Read the advisory https://t.co/pDJqanQFw0 and #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: Two critical heap-based buffer overflow vulnerabilities in #NGINX Plus and Open Source allow attackers to cause denial of service or possibly execute code. CVE-2026-15176 CVE-2026-93479 CVSS(4.0): 9.2. #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: A critical template injection vulnerability in #Adobe Commerce and #Magento Open Source allows unauthenticated attackers to execute arbitrary code. #RCE CVE-2026-103849 CVSS(3.1): 10.0. #Patch #Patch #Patch

[CCB Alert @CCBalert]

Warning: Critical, unauthenticated arbitrary-file-access in #Atlassian #Jira #Confluence Data Centre #CVE-2026-21589 CVSS: 9.3 can lead to sensitive data exposure in the web application root directory. On CISA kev list. See: advisory https://t.co/VuwPl122ti. #Patch #Patch #Patch