// Cyber situation
Cyber situation — current advisories
A calm, defensive overview of current security advisories from official public sources — with a short SKOPION note for small and medium-sized businesses. Not a news portal, not exhaustive.
As of: Oct 24, 2026
- CERT-EU· Oct 23, 2026
2026-018: Critical Vulnerabilities in PHP
SKOPION summary: CERT-EU security advisory. Check relevance for your environment.
Read original - BSI / CERT-Bund· Oct 23, 2026medium
[UPDATE] [mittel] Red Hat Enterprise Linux cockpit-machines: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen
SKOPION summary: BSI/CERT-Bund reports a medium-rated vulnerability. Check affected systems and apply updates.
Read original - BSI / CERT-Bund· Oct 23, 2026high
[UPDATE] [hoch] Mozilla Produkte (Thunderbird, Firefox ESR und Firefox): Mehrere Schwachstellen
SKOPION summary: BSI/CERT-Bund reports a high-rated vulnerability. Check affected systems and apply updates.
Read original - BSI / CERT-Bund· Oct 23, 2026high
[UPDATE] [hoch] Golang Go: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
SKOPION summary: BSI/CERT-Bund reports a high-rated vulnerability. Check affected systems and apply updates.
Read original - BSI / CERT-Bund· Oct 23, 2026low
[NEU] [niedrig] KNIME Analytics Platform: Schwachstelle ermöglicht Offenlegung von Informationen
SKOPION summary: BSI/CERT-Bund reports a low-rated vulnerability. Check affected systems and apply updates.
Read original - BSI / CERT-Bund· Oct 23, 2026medium
[NEU] [mittel] Livewire: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
SKOPION summary: BSI/CERT-Bund reports a medium-rated vulnerability. Check affected systems and apply updates.
Read original - BSI / CERT-Bund· Oct 23, 2026high
[NEU] [hoch] Oracle Java SE and GraalVM, und OpenJDK: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
SKOPION summary: BSI/CERT-Bund reports a high-rated vulnerability. Check affected systems and apply updates.
Read original - BSI / CERT-Bund· Oct 23, 2026medium
[NEU] [mittel] Drupal Module (View Unpublished, Simple OAuth und Domain Login Restrict): Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
SKOPION summary: BSI/CERT-Bund reports a medium-rated vulnerability. Check affected systems and apply updates.
Read original - BSI / CERT-Bund· Oct 23, 2026medium
[NEU] [mittel] QT: Schwachstelle ermöglicht Denial of Service
SKOPION summary: BSI/CERT-Bund reports a medium-rated vulnerability. Check affected systems and apply updates.
Read original - BSI / CERT-Bund· Oct 23, 2026high
[NEU] [hoch] TianoCore EDK2 PXE Treiber: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode und DoS
SKOPION summary: BSI/CERT-Bund reports a high-rated vulnerability. Check affected systems and apply updates.
Read original - BSI / CERT-Bund· Oct 23, 2026medium
[NEU] [mittel] OpenProject: Schwachstelle ermöglicht Offenlegung von Informationen
SKOPION summary: BSI/CERT-Bund reports a medium-rated vulnerability. Check affected systems and apply updates.
Read original - BSI / CERT-Bund· Oct 23, 2026medium
[NEU] [mittel] MongoDB C Treiber: Schwachstelle ermöglicht Denial of Service und manipulation von Daten
SKOPION summary: BSI/CERT-Bund reports a medium-rated vulnerability. Check affected systems and apply updates.
Read original - BSI / CERT-Bund· Oct 23, 2026high
[NEU] [hoch] Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail und FortiAuthenticator: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
SKOPION summary: BSI/CERT-Bund reports a high-rated vulnerability. Check affected systems and apply updates.
Read original - BSI / CERT-Bund· Oct 23, 2026low
[NEU] [niedrig] IBM SPSS Modeler: Schwachstelle ermöglicht Manipulation von Dateien
SKOPION summary: BSI/CERT-Bund reports a low-rated vulnerability. Check affected systems and apply updates.
Read original - BSI / CERT-Bund· Oct 23, 2026medium
[NEU] [mittel] IBM App Connect Enterprise: Mehrere Schwachstellen
SKOPION summary: BSI/CERT-Bund reports a medium-rated vulnerability. Check affected systems and apply updates.
Read original - BSI / CERT-Bund· Oct 23, 2026medium
[NEU] [mittel] OpenBSD: Schwachstelle ermöglicht nicht spezifizierten Angriff
SKOPION summary: BSI/CERT-Bund reports a medium-rated vulnerability. Check affected systems and apply updates.
Read original - CISA KEV· Oct 23, 2026· CVE-2026-114625
Arista VeloCloud Orchestrator SQL Injection Vulnerability
SKOPION summary: Actively exploited vulnerability in Arista VeloCloud Orchestrator — prioritize patching (CVE-2026-114625).
Read original - CISA KEV· Oct 23, 2026· CVE-2026-110447
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
SKOPION summary: Actively exploited vulnerability in Collabora Collabora Online – Built-in CODE Server — prioritize patching (CVE-2026-110447).
Read original - CERT-EU· Oct 22, 2026
2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions
SKOPION summary: CERT-EU security advisory. Check relevance for your environment.
Read original - CISA KEV· Oct 20, 2026· CVE-2026-106931
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
SKOPION summary: Actively exploited vulnerability in EG Secure Solutions SiteGuard Server Edition — prioritize patching (CVE-2026-106931).
Read original - CISA KEV· Oct 20, 2026· CVE-2026-96656
Plex Media Server External Control of File Name or Path Vulnerability
SKOPION summary: Actively exploited vulnerability in Plex Media Server — prioritize patching (CVE-2026-96656).
Read original - CISA KEV· Oct 20, 2026· CVE-2026-96655
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
SKOPION summary: Actively exploited vulnerability in Plex Media Server — prioritize patching (CVE-2026-96655).
Read original - CISA KEV· Oct 20, 2026· CVE-2026-96654
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
SKOPION summary: Actively exploited vulnerability in Plex Media Server — prioritize patching (CVE-2026-96654).
Read original - CISA KEV· Oct 20, 2026· CVE-2026-96652
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
SKOPION summary: Actively exploited vulnerability in Plex Media Server — prioritize patching (CVE-2026-96652).
Read original - CISA KEV· Oct 20, 2026· CVE-2026-110936
Siemens Software Center Uncontrolled Search Path Element Vulnerability
SKOPION summary: Actively exploited vulnerability in Siemens Software Center — prioritize patching (CVE-2026-110936).
Read original - CISA KEV· Oct 16, 2026· CVE-2026-102764
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
SKOPION summary: Actively exploited vulnerability in BeyondTrust Remote Support — prioritize patching (CVE-2026-102764).
Read original - CISA KEV· Oct 16, 2026· CVE-2025-61624
Fortinet Multiple Products Path Traversal Vulnerability
SKOPION summary: Actively exploited vulnerability in Fortinet Multiple Products — prioritize patching (CVE-2025-61624).
Read original - CERT-EU· Oct 15, 2026
2026-017: Critical Vulnerability in Cisco Secure Email Gateway
SKOPION summary: CERT-EU security advisory. Check relevance for your environment.
Read original - CISA KEV· Oct 15, 2026· CVE-2026-21589
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
SKOPION summary: Actively exploited vulnerability in Atlassian Multiple Products — prioritize patching (CVE-2026-21589).
Read original - CISA KEV· Oct 14, 2026· CVE-2026-105134
Ahsay AhsayCBS Command Injection Vulnerability
SKOPION summary: Actively exploited vulnerability in Ahsay AhsayCBS — prioritize patching (CVE-2026-105134).
Read original - CERT-EU· Oct 12, 2026
2026-016: Critical Vulnerability in GitLab CE and EE
SKOPION summary: CERT-EU security advisory. Check relevance for your environment.
Read original - CERT-EU· Oct 07, 2026
2026-015: Critical Vulnerability in Multiple Atlassian Products
SKOPION summary: CERT-EU security advisory. Check relevance for your environment.
Read original - CERT-EU· Oct 02, 2026
Cyber Brief 26-10 - September 2026
SKOPION summary: CERT-EU threat intelligence. Contextualize for your own organization.
Read original - CERT-EU· Sep 27, 2026
2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway
SKOPION summary: CERT-EU security advisory. Check relevance for your environment.
Read original - CERT-EU· Sep 03, 2026
Cyber Brief 26-09 - August 2026
SKOPION summary: CERT-EU threat intelligence. Contextualize for your own organization.
Read original - CERT-EU· Aug 03, 2026
Cyber Brief 26-08 - July 2026
SKOPION summary: CERT-EU threat intelligence. Contextualize for your own organization.
Read original - CERT-EU· Jul 01, 2026
Cyber Brief 26-07 - June 2026
SKOPION summary: CERT-EU threat intelligence. Contextualize for your own organization.
Read original - CERT-EU· Jun 02, 2026
Cyber Brief 26-06 - May 2026
SKOPION summary: CERT-EU threat intelligence. Contextualize for your own organization.
Read original - CERT-EU· Jul 03, 2025
Generative AI in Cybersecurity: Balancing Innovation and Risk
SKOPION summary: CERT-EU security guidance. Assess the recommended measures for your environment.
Read original - CERT-EU· Jun 03, 2024
DDoS Overview and Response Guide
SKOPION summary: CERT-EU security guidance. Assess the recommended measures for your environment.
Read original - CERT-EU· May 11, 2023
Security Guidance 23-002 - Potential impact and risks of Generative AI in EUIBAs
SKOPION summary: CERT-EU security guidance. Assess the recommended measures for your environment.
Read original - CERT-EU· Mar 09, 2022
Security Guidance 22-001 - Cybersecurity mitigation measures against critical threats
SKOPION summary: CERT-EU security guidance. Assess the recommended measures for your environment.
Read original - CERT-EU· Mar 03, 2022
Security Guidance 22-002 - Hardening Signal
SKOPION summary: CERT-EU security guidance. Assess the recommended measures for your environment.
Read original
Curated from publicly available official sources. No completeness, no legal advice, no security guarantee. References do not imply endorsement, review, certification, or partnership by the named organizations.