Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

Security Advisory Ivanti Connect Secure (CVE-2026-104935)

Update 13 Oct: Volexity Blog Post included in FAQ Summary Ivanti has released updates for Ivanti Connect Secure ICS which addresses one high severity vulnerability. Successful exploitation could allow a remote unauthenticated attacker to execute arbitrary commands. We are aware of exploitation in...

CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure

CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935, affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypass vulnerability, whi...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-96951 Microsoft Windows Command Injection Vulnerability CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability These types o...

CISA Urges Patching Newly Exploited Vulnerabilities in Ivanti Connect Secure

Update October 30, 2026 : CISA has updated this Alert to: 1 include CVE-2026-111357 and CVE-2026-118527 and reflect their addition to the Known Exploited Vulnerabilities KEV Catalog on October 30, 2026; and 2 update the affected Ivanti Connect Secure versions. CISA is aware of Ivanti’s disclosure...

CVE-2026-72895

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

CVE-2026-72895

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

CVE-2026-72895

A vulnerability exists in several SIMATIC IPC models, specifically SIMATIC IPC BX-21A (versions < V31.01.13), SIMATIC IPC RW-543A (versions < V1.1.4), and SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G (versions

EUVD-2026-98389

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

CVE-2026-72895

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

CVE-2026-78024

creationtimestamp| type| source ---|---|--- 2026-10-13 00:15:02+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-high-severity-vulnerabilities-dell-secure-connect-gateway-scg-policy...

CVE-2026-76779

creationtimestamp| type| source ---|---|--- 2026-10-13 00:15:02+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-high-severity-vulnerabilities-dell-secure-connect-gateway-scg-policy...

CVE-2026-78020

creationtimestamp| type| source ---|---|--- 2026-10-13 00:15:02+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-high-severity-vulnerabilities-dell-secure-connect-gateway-scg-policy...

CVE-2026-78023

creationtimestamp| type| source ---|---|--- 2026-10-13 00:15:02+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-high-severity-vulnerabilities-dell-secure-connect-gateway-scg-policy...

CVE-2026-78025

creationtimestamp| type| source ---|---|--- 2026-10-13 00:15:02+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-high-severity-vulnerabilities-dell-secure-connect-gateway-scg-policy 2026-10-13 14:13:34+00:00| seen| https://bsky.app/profile/cybowl.bsky.social/post/3mxr7prmgw623...

CVE-2026-96865: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...

PT-2026-111388

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

VulnCheck KEV: CVE-2026-118527

Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk...

VulnCheck KEV: CVE-2026-104935

Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands...

PT-2026-111928

Name of the Vulnerable Software and Affected Versions Windows Secure Boot affected versions not specified Description Windows Secure Boot contains a security-feature bypass that allows an authorized attacker to locally circumvent a security mechanism, potentially affecting the system...