CERT/CC
Printed in Security Desk · kb.cert.org
Publishes about 4 a week · last piece Oct 14, 2026
How often
about 4 a week, by the archive: 17 pieces since Sep 17, 2026.
12 weeks agothis week
Latest pieces
- VU#948176: Multiple TLS Libraries can Bypass Delegation Enforcement
- VU#410595: Google BoringSSL Name Constraints Bypass in SAN Validation Logic
- VU#166125: Bisheng has authentication bypass vulnerabilities
- VU#456950: Komodo Periphery Agent Contains an OS Command Injection Vulnerability
- VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration
- VU#573195: Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementation
- VU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE
- VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1
- VU#553437: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations
- VU#762428: Authlib library contains a signature‑verification bypass vulnerability
- VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities
- VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise
- VU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerability
- VU#273940: Enterprise Access Management EAM does not rotate RSA keys
- VU#754548: Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlers
In these topics
Pick one in My Edition to read it with its neighbors.