UK NCSC · Oct 21, 2026
Security advisories
Official advisories and defensive guidance, attributed to the issuing organisation.
CERT/CC Vulnerability Notes · Oct 20, 2026
VU#645818: Xerj Console API Authentication Bypass Leads to Unauthorized Credential Minting
UK NCSC · Oct 20, 2026
Introducing a new AI chapter in the NCSC research problem book
UK NCSC · Oct 15, 2026
Post-quantum updates to our TLS guidance
UK NCSC · Oct 15, 2026
Using TLS to protect data
CERT/CC Vulnerability Notes · Oct 14, 2026
VU#410595: Google BoringSSL Name Constraints Bypass in SAN Validation Logic
CERT/CC Vulnerability Notes · Oct 14, 2026
VU#948176: Multiple TLS libraries can bypass delegation enforcement
CERT/CC Vulnerability Notes · Oct 14, 2026
VU#166125: Bisheng has authentication bypass vulnerabilities
CERT/CC Vulnerability Notes · Oct 13, 2026
VU#456950: Komodo Periphery Agent Contains an OS Command Injection Vulnerability
CERT/CC Vulnerability Notes · Oct 13, 2026
VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration
CERT/CC Vulnerability Notes · Oct 13, 2026
VU#573195: Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementation
CERT/CC Vulnerability Notes · Oct 13, 2026
VU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE
CERT/CC Vulnerability Notes · Oct 12, 2026
VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1
UK NCSC · Oct 12, 2026
Help the NCSC understand how organisations approach external attack surface risk
UK NCSC · Oct 8, 2026

