Threat database

Multiple vulnerabilities have been addressed in the DrayTek VigorAP product line. These include a set of 11 CVEs identified by the Nationaal Cyber Security Centrum. The vulnerabilities relate to issues such as command injection (CWE-78) and buffer overflows (CWE-120). Specific affected versions are not clearly detailed beyond references to the VigorAP 1060c firmware and DrayTek Vigor products. No CVSS scores or detailed impact metrics are provided. There is no indication of known exploits in the wild. Patch availability is not explicitly confirmed in the provided data.

Multiple vulnerabilities have been addressed in Cisco Secure Workload as reported by the Nationaal Cyber Security Centrum. The advisory covers five distinct CVEs, including CVE-2026-20231 and four additional related vulnerabilities. No CVSS scores or detailed technical descriptions are provided in the available data. There is no indication of known exploits in the wild. The affected versions are not specified, and the product is not a cloud service.

Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise, specifiek in versies vóór 10.4.2, 10.2.6, 10.0.9 en 9.4.14.

Apple has addressed multiple vulnerabilities in its iOS and iPadOS operating systems as reported by the Nationaal Cyber Security Centrum. The advisory covers a broad range of security weaknesses including memory safety errors, improper access control, and information exposure. No specific affected versions or detailed technical exploit information are provided. There is no indication of known exploits in the wild at this time.

Two vulnerabilities have been addressed in Citrix NetScaler ADC and NetScaler Gateway products. The specific versions affected are not clearly identified. The vulnerabilities relate to CWE-288 (Authentication Bypass) and CWE-120 (Buffer Overflow). No CVSS score is provided, but the severity is indicated as high. There is no information about known exploits in the wild or available patches. The vendor advisory from the Nationaal Cyber Security Centrum confirms the vulnerabilities but does not provide detailed remediation status.

Oracle released a Critical Security Patch Update (CSPU) in August 2026 that addresses multiple vulnerabilities in various Oracle Financial Services Enterprise modules and other Oracle products. The update includes 943 security patches targeting Oracle code and third-party components. Oracle strongly recommends applying these patches promptly to mitigate risks, as some vulnerabilities have been subject to attempted exploitation. The advisory covers a wide range of Oracle products and versions, including financial services, databases, middleware, and more. No CVSS score is provided for these vulnerabilities.

Oracle has released a Critical Security Patch Update (CSPU) in August 2026 addressing multiple vulnerabilities across a wide range of Oracle Database products and related software. The update includes 943 security patches targeting Oracle Database Server, Essbase, Autonomous Health Framework, Application Testing Suite, and many other Oracle product families. The vulnerabilities include issues classified under CWE-770, CWE-416, CWE-476, and CWE-863. Oracle strongly recommends applying these patches promptly to mitigate risks, as some vulnerabilities have been subject to attempted exploitation in the wild. The advisory emphasizes staying on actively supported versions and applying patches without delay.

Mattermost, Inc. heeft kwetsbaarheden verholpen in Mattermost versies 10.11.x, 11.7.x en 11.8.x, inclusief de GitLab plugin tot versie 11.8.

SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.

Multiple vulnerabilities have been addressed in the MISP platform by the Nationaal Cyber Security Centrum. These include issues related to improper input validation, authorization flaws, and potential code injection risks. No specific affected versions or detailed patch information are provided. There are no known exploits in the wild at this time.

n8n heeft meerdere kwetsbaarheden verholpen in het n8n workflow automation platform, specifiek in versies voor 1.123.55, 2.24.0, 2.25.7, 2.26.1 en 2.26.2.

GitLab heeft meerdere kwetsbaarheden verholpen in GitLab Community Edition en Enterprise Edition (EE) versies variërend van 12.0 tot voor 19.0.2, inclusief belangrijke releases zoals 17.x, 18.10.8, 18.11.5 en 19.0.2.

Ivanti heeft meerdere kwetsbaarheden verholpen in Ivanti Endpoint Manager Mobile.

Multiple vulnerabilities affecting GitLab Community Edition and Enterprise Edition versions from 12.7 up to but not including 18.10.7, 18.11 up to but not including 18.11.4, and 19.0 up to but not including 19.0.1 have been identified and fixed. These include issues related to improper resource management and authorization flaws across six CVEs including CVE-2026-1402. No known exploits in the wild have been reported. The product is not a cloud service. A patch is available for these vulnerabilities.

Cisco heeft kwetsbaarheden verholpen in Cisco Secure Firewall Management Center.