@CCBalert

CCB Alert is the advisory page of the Centre for Cybersecurity Belgium @CCBbelgium. Use [email protected] for interaction.

 Belgium
ccb.belgium.be
Joined August 2009
  • Tweets3.8K
  • Following201
  • Followers7.3K
145Media
Warning: High-severity memory corruption in ISC #BIND9. #CVE-2026-94300 CVSS: 8.1. Replayed GSS-TSIG messages could cause crashes or remote code execution. More info: ccb.belgium.be/advisories/wa… #RCE! #Patch #Patch #Patch
1
284
Warning: Multiple critical vulnerabilities in #HPE Networking AOS-8 & AOS-10. CVSS up to 10.0! Flaws including #CVE-2026-79847 can enable unauthenticated remote code execution #RCE and device compromise! More info: ccb.belgium.be/advisories/wa… #Patch #Patch #Patch
1
421
Warning: Critical SQL injection vulnerability in #VeloCloud Orchestrator. CVE-2026-114625 CVSS: 9.9. This vulnerability can lead to privilege escalation and impact the VCO host itself. More info: arista.com/en/support/adviso… #Patch #Patch #Patch

Security Advisory 0199 - Arista

October 22, 2026 VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful...

arista.com
334
Warning: Multiple High Severity #Vulnerabilities patched in #Node.js October 2026 release. Read our advisory at ccb.belgium.be/advisories/wa… and #Patch #Patch #Patch
349
Warning: Critical RCE in #Cisco Expressway Series. CVE-2026-76466 CVSS: 9.8. An unauthenticated remote attacker can run OS commands as root on clustered deployments. #RCE Read the Cisco advisory at sec.cloudapps.cisco.com/secu… and #Patch #Patch #Patch

Cisco Security Advisory: Cisco Expressway Series Remote Code Execution Vulnerability

A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execute arbitrary...

sec.cloudapps.cisco.com
1
2
361
Warning: #Fortinet will release security hardening updates for #FortiOS, #FortiManager, #FortiAnalyzer, #FortiMail & #FortiAuthenticator, including critical- and high-severity fixes today! Read our advisory at ccb.belgium.be/advisories/wa… and #Patch #Patch #Patch
1
609
Warning: Integer Overflow #vulnerability in #Gitlab. #CVE-2026-110264 CVSS: 10.0. Attackers can under certain conditions execute arbitrary commands #RCE! Read our advisory at ccb.belgium.be/advisories/wa… and #Patch #Patch #Patch
1
302
Warning: #Roundcube Webmail IMAP command injection vulnerability: #CVE-2026-113386 (CVSS 7.1). Remote authenticated attackers could execute arbitrary IMAP commands, risking email data and mailbox integrity. Time to #Patch #Patch #Patch
1
424
Warning: High, actively exploited, #DLL-side-loading in #Siemens Software Center #OTICS #ICS #CVE-2026-110936 CVSS: 8.4. See advisory productcert.siemens.com/news… #Patch #Patch #Patch
1
322
Warning: #PHP Foundation has addressed two critical #vulnerabilities. #CVE-2026-109618 (CVSS v4.0 9.2) & #CVE-2026-109619 (CVSS v4.0 9.2). Successful exploitation of these vulnerabilities could lead to unauthenticated remote code execution #RCE! Time to #Patch #Patch #Patch
3
3
660
Warning: Multiple high vulnerabilities in #Apache #Camel #CVE-2026-78164 #CVE-2026-78165 #CVE-2026-80312 #CVE-2026-80343 #CVE-2026-80344 #CVE-2026-83531 #CVE-2026-88901 CVSS: 8.8-8.2 They can lead to arbitrary code execution ccb.belgium.be/advisories/wa… #Patch #Patch #Patch
2
605
Warning: Multiple high in #IBM #MQ #CVE-2026-12665 #CVE-2026-10572 #CVE-2026-10743 #CVE-2026-10574 CVSS: 8.8-8.1 If exploited by remote attackers they can lead to remote code execution #RCE and Denial of Service #DoS #Patch #Patch #Patch
1
270
Warning: Critical OS command injection & missing authorization vulnerabilities in #Camunda, CVE-2026-109431 & CVE-2026-109432 CVSS: 9.3-8.6 An authenticated, remote attacker can perform read and write file operations and execute arbitrary code. #Patch #Patch #Patch
1
298
Warning: A critical remote code execution vulnerability in #Drupal core could allow attackers to execute arbitrary code, in some cases without authentication, via certain contributed modules. CVE-2026-108097. Read the advisory drupal.org/sa-core-2026-014 and #Patch #Patch #Patch

Drupal core - Critical - Remote code execution - SA-CORE-2026-014

drupal.org
1
343
Warning: 3 critical vulnerabilities in #MariaDB Server may allow low-privileged attackers to access or corrupt data, cause crashes, or execute code. CVE-2026-92262, CVE-2026-85746 & CVE-2026-85748 CVSS(3.1): 9.9. Read the advisory github.com/MariaDB/server/se… and #Patch #Patch #Patch

Numerous issues caused by historical #mysql50# tablename encoding bypass

### Impact Normally MariaDB encodes tables names when storing them on the filesystem, e.g. table `a-b` is stored in files `a@002db` (plus some extension). A `#mysql50#` bypass prefix allows to acc...

github.com
1
2
380
Warning: Two critical heap-based buffer overflow vulnerabilities in #NGINX Plus and Open Source allow attackers to cause denial of service or possibly execute code. CVE-2026-15176 CVE-2026-93479 CVSS(4.0): 9.2. #Patch #Patch #Patch
1
314
Warning: A critical template injection vulnerability in #Adobe Commerce and #Magento Open Source allows unauthenticated attackers to execute arbitrary code. #RCE CVE-2026-103849 CVSS(3.1): 10.0. #Patch #Patch #Patch
1
313
Warning: Critical, unauthenticated arbitrary-file-access in #Atlassian #Jira #Confluence Data Centre #CVE-2026-21589 CVSS: 9.3 can lead to sensitive data exposure in the web application root directory. On CISA kev list. See: advisory ccb.belgium.be/advisories/wa…. #Patch #Patch #Patch
1
351
Warning: High Incorrect Authorization in #SonicWall Network Security Manager (NSM). CVE-2026-96540 CVSS: 8.8. This can potentially let a remote authenticated attacker obtain sensitive information, escalate to admin, or intercept other users’ communications! #Patch #Patch #Patch
1
1
356
Warning: High Improper Access Control in #Grafana. CVE-2026-9703 CVSS: 7.1. This can let an authenticated Viewer create, modify, and delete Loki alerting rules for all users of the data source! #Patch #Patch #Patch
1
308
Load more