Advisories 24 September 2026

Arista VeloCloud Orchestrator Maximum Severity Flaw Exploited With No Available Workaround (CVE-2026-93952)

Scope: Arista VeloCloud Orchestrator (VCO) On-Prem Deployments

Advisories 22 September 2026
Linux Kernel Actively Exploited Vulnerabilities Remain Unpatched Past Federal Deadline (CVE-2025-39682 / CVE-2026-53266 / CVE-2025-39964)

Scope: Linux Kernel (All Distributions Running Affected Kernel Versions, Including Servers

Advisories 22 September 2026
FomoPeek Trojanized iOS App Hides Kernel Exploit to Steal Cryptocurrency Wallet Data

Scope: iOS Devices with FomoPeek or Similarly Sideloaded Cryptocurrency Applications Insta

Advisories 22 September 2026
OpenAI Codex Sandbox Escapes "Heapjack" and "Overpatch" Allow Unsandboxed Command Execution

Scope: OpenAI Codex Desktop (Prior to Build 26.818.21641) and Codex CLI (Prior to Version

Advisories 21 September 2026
CISA Flags Three Actively Exploited Linux Kernel Vulnerabilities, Federal Deadline Today (CVE-2025-39682 / CVE-2026-53266 / CVE-2025-39964)

Scope: Linux Kernel (All Distributions Running Affected Kernel Versions, Including Servers

Advisories 17 September 2026
GitLab CE and EE Repository Commits API Path Traversal Allows Unauthenticated Arbitrary File Read (CVE-2026-85706)

Scope: GitLab Community Edition and Enterprise Edition Self-Managed Installations (GitLab.

Advisories 17 September 2026
Google Pixel September 2026 Update Patches Modem Privilege Escalation Under Targeted Exploitation and 46 Critical Flaws (CVE-2026-58704)

Scope: Google Pixel Devices (All Models Running Security Patch Level Earlier Than 2026-09-

Subscribe to Advisories