@CCBalert

CCB Alert is the advisory page of the Centre for Cybersecurity Belgium @CCBbelgium. Use [email protected] for interaction.

 Belgium
ccb.belgium.be
Joined August 2009
  • Tweets3.8K
  • Following201
  • Followers7.3K
Warning: Software vulnerabilities in #Java, #Python, and #Go. #CVE-2026-114820 CVSS: 9.1. #CVE-2026-115557 CVSS: 9.4. #CVE-2026-111943. These fixes remove the impacted root CA certificates related to #eMudhra. ccb.belgium.be/advisories/wa… #Patch #Patch #Patch
1
373
Warning: Supply-chain compromise of #LiteLLM. Malicious v1.107.0 was live on PyPI and in Docker/GHCR images for up to 2.5 hours on 21 Oct, stealing keys and deploying #RCE tooling. Upgrading does not clean an infected host. More info: ccb.belgium.be/advisories/wa… #Patch #Patch #Patch
1
317
Warning: High-severity memory corruption in ISC #BIND9. #CVE-2026-94300 CVSS: 8.1. Replayed GSS-TSIG messages could cause crashes or remote code execution. More info: ccb.belgium.be/advisories/wa… #RCE! #Patch #Patch #Patch
1
359
Warning: Multiple critical vulnerabilities in #HPE Networking AOS-8 & AOS-10. CVSS up to 10.0! Flaws including #CVE-2026-79847 can enable unauthenticated remote code execution #RCE and device compromise! More info: ccb.belgium.be/advisories/wa… #Patch #Patch #Patch
1
435
Warning: Critical SQL injection vulnerability in #VeloCloud Orchestrator. CVE-2026-114625 CVSS: 9.9. This vulnerability can lead to privilege escalation and impact the VCO host itself. More info: arista.com/en/support/adviso… #Patch #Patch #Patch

Security Advisory 0199 - Arista

October 22, 2026 VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful...

arista.com
340
Warning: Multiple High Severity #Vulnerabilities patched in #Node.js October 2026 release. Read our advisory at ccb.belgium.be/advisories/wa… and #Patch #Patch #Patch
351
Warning: Critical RCE in #Cisco Expressway Series. CVE-2026-76466 CVSS: 9.8. An unauthenticated remote attacker can run OS commands as root on clustered deployments. #RCE Read the Cisco advisory at sec.cloudapps.cisco.com/secu… and #Patch #Patch #Patch

Cisco Security Advisory: Cisco Expressway Series Remote Code Execution Vulnerability

A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary...

sec.cloudapps.cisco.com
1
2
366
Warning: #Fortinet will release security hardening updates for #FortiOS, #FortiManager, #FortiAnalyzer, #FortiMail & #FortiAuthenticator, including critical- and high-severity fixes today! Read our advisory at ccb.belgium.be/advisories/wa… and #Patch #Patch #Patch
1
616
Warning: Integer Overflow #vulnerability in #Gitlab. #CVE-2026-110264 CVSS: 10.0. Attackers can under certain conditions execute arbitrary commands #RCE! Read our advisory at ccb.belgium.be/advisories/wa… and #Patch #Patch #Patch
1
305
Warning: #Roundcube Webmail IMAP command injection vulnerability: #CVE-2026-113386 (CVSS 7.1). Remote authenticated attackers could execute arbitrary IMAP commands, risking email data and mailbox integrity. Time to #Patch #Patch #Patch
1
443
Warning: High, actively exploited, #DLL-side-loading in #Siemens Software Center #OTICS #ICS #CVE-2026-110936 CVSS: 8.4. See advisory productcert.siemens.com/news… #Patch #Patch #Patch
1
325
Warning: #PHP Foundation has addressed two critical #vulnerabilities. #CVE-2026-109618 (CVSS v4.0 9.2) & #CVE-2026-109619 (CVSS v4.0 9.2). Successful exploitation of these vulnerabilities could lead to unauthenticated remote code execution #RCE! Time to #Patch #Patch #Patch
3
3
661
Warning: Multiple high vulnerabilities in #Apache #Camel #CVE-2026-78164 #CVE-2026-78165 #CVE-2026-80312 #CVE-2026-80343 #CVE-2026-80344 #CVE-2026-83531 #CVE-2026-88901 CVSS: 8.8-8.2 They can lead to arbitrary code execution ccb.belgium.be/advisories/wa… #Patch #Patch #Patch
2
609
Warning: Multiple high in #IBM #MQ #CVE-2026-12665 #CVE-2026-10572 #CVE-2026-10743 #CVE-2026-10574 CVSS: 8.8-8.1 If exploited by remote attackers they can lead to remote code execution #RCE and Denial of Service #DoS #Patch #Patch #Patch
1
273
Warning: Critical OS command injection & missing authorization vulnerabilities in #Camunda, CVE-2026-109431 & CVE-2026-109432 CVSS: 9.3-8.6 An authenticated, remote attacker can perform read and write file operations and execute arbitrary code. #Patch #Patch #Patch
1
300
Warning: A critical remote code execution vulnerability in #Drupal core could allow attackers to execute arbitrary code, in some cases without authentication, via certain contributed modules. CVE-2026-108097. Read the advisory drupal.org/sa-core-2026-014 and #Patch #Patch #Patch

Drupal core - Critical - Remote code execution - SA-CORE-2026-014

drupal.org
1
343
Warning: 3 critical vulnerabilities in #MariaDB Server may allow low-privileged attackers to access or corrupt data, cause crashes, or execute code. CVE-2026-92262, CVE-2026-85746 & CVE-2026-85748 CVSS(3.1): 9.9. Read the advisory github.com/MariaDB/server/se… and #Patch #Patch #Patch

Numerous issues caused by historical #mysql50# tablename encoding bypass

### Impact Normally MariaDB encodes tables names when storing them on the filesystem, e.g. table `a-b` is stored in files `a@002db` (plus some extension). A `#mysql50#` bypass prefix allows to acc...

github.com
1
2
383
Warning: Two critical heap-based buffer overflow vulnerabilities in #NGINX Plus and Open Source allow attackers to cause denial of service or possibly execute code. CVE-2026-15176 CVE-2026-93479 CVSS(4.0): 9.2. #Patch #Patch #Patch
1
315
Warning: A critical template injection vulnerability in #Adobe Commerce and #Magento Open Source allows unauthenticated attackers to execute arbitrary code. #RCE CVE-2026-103849 CVSS(3.1): 10.0. #Patch #Patch #Patch
1
313
Warning: Critical, unauthenticated arbitrary-file-access in #Atlassian #Jira #Confluence Data Centre #CVE-2026-21589 CVSS: 9.3 can lead to sensitive data exposure in the web application root directory. On CISA kev list. See: advisory ccb.belgium.be/advisories/wa…. #Patch #Patch #Patch
1
351
Load more