Alerts & Advisories

Multiple Vulnerabilities in Synology DiskStation Manager (DSM)

Attackers can exploit multiple vulnerabilities in Synology DiskStation Manager (DSM) to read or write arbitrary files and conduct denial-of-service attacks. Patch immediately.

Security Bulletin 23 Sep 2026 [PDF, 2.6MB]

Active Exploitation of Vulnerability in Cisco Identity Services Engine

Attackers are exploiting a critical vulnerability in Cisco Identity Services Engine and Cisco Identity Services Engine Passive Identity Connector to bypass authentication and gain unauthorised access. Patch immediately.

Active Exploitation of Critical Vulnerability in Cisco AsyncOS

Attackers are exploiting a critical vulnerability in Cisco AsyncOS to execute arbitrary commands with root privileges. Patch immediately.

Active Exploitation of Vulnerability in Vite Development Servers

Attackers are exploiting a high severity vulnerability in Vite development servers to retrieve restricted system and configuration files over HTTP. Patch immediately.

Active Exploitation of Critical Vulnerability in GitLab

Attackers are exploiting a critical vulnerability in GitLab to read arbitrary files from the server. Patch immediately.

Security Bulletin 16 Sep 2026 [PDF, 2MB]

High-Severity Vulnerability in MongoDB Server

Attackers can exploit a high-severity vulnerability in MongoDB Server to gain full unauthenticated administrative access to the affected database. Patch promptly.

Critical Vulnerabilities in Check Point Quantum Security Gateway and Security Management Server

Attackers can exploit critical vulnerabilities in Check Point Quantum Security Gateway and Security Management Server to perform remote code execution without authentication. Patch immediately.

High-Severity Vulnerability in PostgreSQL

Attackers can exploit a high-severity vulnerability in PostgreSQL to execute arbitrary code on the affected system. Patch promptly.