Warning: Multiple Vulnerabilities Affecting Apache HTTP Server, Patch Immediately!
CCB Advisories
First reported Oct 05, 2026 08:36 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordPublished file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
3 sources: 0 stale, 0 needing attention, 0 paused, 3 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
CCB Advisories
First reported Oct 05, 2026 08:36 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordCCB Advisories
First reported Oct 07, 2026 07:08 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordCCB Advisories
First reported Oct 01, 2026 08:55 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordCCB Advisories
First reported Oct 02, 2026 12:34 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordCyber Threat Intelligence Framework
First reported Apr 08, 2026 16:00 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordCyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
First reported Mar 02, 2026 17:00 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordCERT-EU Cyber Threat Landscape Report for 2025 - Year Review
First reported Apr 08, 2026 16:00 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordCyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
First reported Sep 03, 2026 12:00 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordCyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
First reported Jun 02, 2026 16:00 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordCyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
First reported Aug 03, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordCyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
First reported Oct 02, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordCyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
First reported Jul 01, 2026 14:00 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordCyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
First reported Apr 01, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordCyber Briefs are monthly executive reports that aim to present an overview of the most relevant developments in cyber security, based exclusively on open sources, with a view to inform political leadership and senior management in its constituency. Additional information on any item in this Brief can be provided upon request. Cyber Briefs are TLP:CLEAR.
First reported May 04, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordOn 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP) processing, nicknamed "OVERPASS" by the Onapsis Research Labs (ORL), which discovered and responsibly disclos
First reported Sep 09, 2026 13:07 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordOn 9 June 2026, Ivanti released a security advisory addressing two critical vulnerabilities in their Sentry products[1]. An attacker could exploit those flaws to achieve unauthenticated remote code execution on the vulnerable device.
First reported Jun 10, 2026 11:55 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordOn 22 September 2026, F5 published an advisory addressing a critical vulnerability affecting its BIG-IP APM product. The vendor confirmed active exploitation in the wild. CERT-EU recommends taking appropriate actions as soon as possible.
First reported Sep 22, 2026 16:52 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordOn 19 August 2026, Citrix published a security advisory addressing multiple critical vulnerabilities in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway). CERT-EU recommends updating affected devices as soon as possible.
First reported Aug 19, 2026 16:13 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordOn 6 May 2026, Palo Alto published a security advisory addressing a critical vulnerability affecting PAN-OS. This vulnerability allows an unauthenticated attacker to execute arbitrary code with root privileges. Palo Alto observed limited exploitation of this vulnerability. It is strongly recommended updating affected appliances as soon as patches will be available, and to apply workarounds and mit
First reported May 06, 2026 08:44 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordOn 5 October 2026, Atlassian published a security advisory addressing a critical arbitrary file access vulnerability. It affects Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye. CERT-EU strongly recommends upgrading all affected installations to a fixed version as soon as poss
First reported Oct 07, 2026 07:52 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordOn 9 September 2026, Check Point released emergency security updates addressing two critical vulnerabilities affecting Check Point Security Gateway, Security Management Server, and Spark Firewall deployments configured to use Remote Access VPN or Site-to-Site VPN. Both vulnerabilities carry a CVSS score of 9.8 and could allow an unauthenticated, remote attacker to execute arbitrary code on affecte
First reported Sep 10, 2026 08:20 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordOn 12 May 2026, Microsoft published a security advisory addressing a critical vulnerability affecting Windows Server when acting as a domain controller. This vulnerability allows an unauthenticated attacker to execute arbitrary code over a network. According to The Centre for Cybersecurity Belgium (CCB), this vulnerability is currently exploited by threat actors. It is strongly recommended updatin
First reported Jun 10, 2026 06:47 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordOn 27 September 2026, Citrix published a security bulletin addressing 8 vulnerabilities affecting customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway, among which 2 critical unauthenticated Remote Code Execution (RCE) vulnerabilities. Citrix has confirmed active exploitation of these 2 critical vulnerabilities in the wild. CERT-EU recommends updating affected software and running a
First reported Sep 27, 2026 17:40 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence record[UPDATED] On 14 July 2026, Microsoft released security updates addressing critical remote code execution (RCE) vulnerabilities in Microsoft SharePoint Server. On 20 July 2026, WatchTowr identified a proof-of-concept exploit code and subsequently observed active exploitation of CVE-2026-50522, a vulnerability part of an ongoing series of actively exploited flaws affecting on-premise SharePoint Serv
First reported Jul 23, 2026 07:13 UTCCatalog metadata updated Oct 08, 2026 03:40 UTCOpen evidence recordA filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.