Watch · Official sources
Threat watch, by region
Alerts and advisories published by cybersecurity authorities, gathered on one page and filterable by region. Title, first sentence and link to the source; nothing is rewritten.
As of Nov 5, 2026: 28 advisories published in the last seven days, 50 shown from 1 source. Updated 39 min ago.
- CanadaCentre canadien pour la cybersécurité
OpenBSD security advisory (AV26-1130)
As of November 5, 2026, OpenBSD is affected by a vulnerability in the following product: OpenSSH Prior to 10.6p2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necess…
- CanadaCentre canadien pour la cybersécurité
Rubyonrails security advisory (AV26-1129)
As of November 4, 2026, Rubyonrails is affected by a vulnerability in the following product: Active Storage Prior to 8.0.5.2 Prior to 8.1.4.1 The Cyber Centre encourages users and administrators to review the provided w…
- CanadaCentre canadien pour la cybersécurité
Android security advisory · November 2026 monthly rollup (AV26-1128)
As of November 2, 2026, Android published a security bulletin to address vulnerabilities affecting Android devices.
- CanadaCentre canadien pour la cybersécurité
Cisco security advisory (AV26-1127)
As of November 4, 2026, Cisco is affected by vulnerabilities in the following product: Cisco Unified Computing System (USC) Central Software Prior to 2.1(2c) The Cyber Centre encourages users and administrators to revie…
- CanadaCentre canadien pour la cybersécurité
GitHub security advisory (AV26-1126)
As of November 3, 2026, GitHub is affected by vulnerabilities in the following product: Enterprise Server 3.19.0 Prior to 3.19.14 3.20.0 Prior to 3.20.10 3.21.0 Prior to 3.21.8 3.22.0 Prior to 3.22.3 The Cyber Centre en…
- CanadaCentre canadien pour la cybersécurité
WatchGuard security advisory (AV26-1125)
As of November 4, 2026, WatchGuard is affected by vulnerabilities in the following product: AuthPoint Authentication Gateway Prior to 7.6.0 The Cyber Centre encourages users and administrators to review the provided web…
- CanadaCentre canadien pour la cybersécurité
SolarWinds security advisory (AV26-1124)
As of November 3, 2026, SolarWinds is affected by vulnerabilities in the following product: Dameware Prior to or equal to 2026.3 The Cyber Centre encourages users and administrators to review the provided web links and…
- CanadaCentre canadien pour la cybersécurité
Docker security advisory (AV26-1123)
As of November 3, 2026, Docker is affected by vulnerabilities in the following products: Docker Buildx Prior to 0.37.2 Docker Desktop Prior to 4.98.0 The Cyber Centre encourages users and administrators to review the pr…
- CanadaCentre canadien pour la cybersécurité
MongoDB security advisory (AV26-1122)
As of November 3, 2026, MongoDB is affected by vulnerabilities in the following product: C Driver Prior to 1.30.15 Prior to 2.5.8 The Cyber Centre encourages users and administrators to review the provided web links and…
- CanadaCentre canadien pour la cybersécurité
[Control Systems] Phoenix Contact security advisory (AV26-1121)
As of November 4, 2026, Phoenix Contact is affected by vulnerabilities in the following product: PLCnext Engineer Prior to 2026.6 The Cyber Centre encourages users and administrators to review the provided web links and…
- CanadaCentre canadien pour la cybersécurité
Tanium security advisory (AV26-1120)
As of November 3, 2026, Tanium is affected by vulnerabilities in the following product: Threat Response Prior to 4.12.353 Prior to 4.17.333 Prior to 4.9.480 The Cyber Centre encourages users and administrators to review…
- CanadaCentre canadien pour la cybersécurité
Zyxel security advisory (AV26-1114) · Update 1
Updated: November 4, 2026 As of November 3, 2026, Zyxel is affected by vulnerabilities in the following products: Zyxel GS1900 series switches Multiple versions and models Zyxel APs, FWA7, and Security Routers Multiple…
- CanadaCentre canadien pour la cybersécurité
HPE security advisory (AV26-1119)
As of November 3, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products: HPE Networking Fabric Composer (AFC) Prior to 7.3.5 Prior to 7.4.1 HPE Networking Virtual Intranet Acces…
- CanadaCentre canadien pour la cybersécurité
Google security advisory (AV26-1118)
As of November 3, 2026, Google is affected by vulnerabilities in the following product: Stable Channel Chrome for Desktop Versions prior to 157.0.8103.38/.39 (Windows/Mac), and 157.0.8103.38 (Linux) The Cyber Centre enc…
- CanadaCentre canadien pour la cybersécurité
WordPress security advisory (AV26-1117)
As of October 31, 2026, WordPress is affected by a vulnerability in the following product: WordPress Core Prior to 7.1.4 On November 3, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-119977…
- CanadaCentre canadien pour la cybersécurité
Progress Software security advisory (AV26-1116)
As of October 29, 2026, Progress Software is affected by a vulnerability in the following product: WS_FTP Server Prior to 2024.0.6 Prior to 2025.0.3 The Cyber Centre encourages users and administrators to review the pro…
- CanadaCentre canadien pour la cybersécurité
[Control systems] Siemens security advisory (AV26-802) · Update 1
Updated: November 3, 2026 As of August 11, 2026, Siemens is affected by vulnerabilities in the following products: Desigo DXR2 Prior to V01.21.233.16-7862 Desigo PXC3 Prior to V01.21.233.16-7862 Desigo PXC4 Prior to V02…
- CanadaCentre canadien pour la cybersécurité
PostgreSQL security advisory (AV26-1115)
As of November 2, 2026, PostgreSQL is affected by vulnerabilities in the following product: psqlODBC Prior to 18.00.0006 The Cyber Centre encourages users and administrators to review the provided web links and apply an…
- CanadaCentre canadien pour la cybersécurité
SUSE Linux security advisory (AV26-1113)
As of November 2, 2026, SUSE is affected by a vulnerability in the following product: Rancher Prior to 2.11.19 Prior to 2.12.15 Prior to 2.13.11 Prior to 2.14.7 Prior to 2.15.3 The Cyber Centre encourages users and admi…
- CanadaCentre canadien pour la cybersécurité
Barracuda Networks security advisory (AV26-1112)
As of November 2, 2026, Barracuda Networks is affected by a vulnerability in the following products: Barracuda Email Security Gateway (ESG) Prior to 9.4.0.030 Barracuda Load Balancer Application Delivery Controller (ADC…
- CanadaCentre canadien pour la cybersécurité
Red Hat security advisory (AV26-1111)
As of October 30, 2026, Red Hat is affected by vulnerabilities in the following products: Red Hat Build of Keycloak All version Red Hat Enterprise Linux 10 All version Red Hat Enterprise Linux 6 All version Red Hat Ente…
- CanadaCentre canadien pour la cybersécurité
Dell security advisory (AV26-1110)
As of October 30, 2026, Dell is affected by vulnerabilities in the following products: OpenManage Enterprise Prior to 4.8.0 PowerProtect Data Domain Prior to 7.13.1.90 Prior to 8.3.1.50 Prior to 8.6.1.30 Prior to 8.9.0.…
- CanadaCentre canadien pour la cybersécurité
Google security advisory (AV26-1109)
As of October 29, 2026, Google is affected by vulnerabilities in the following product: Stable Channel Chrome for Desktop Versions prior to 156.0.8078.79/.80 (Windows/Mac), and 156.0.8078.79 (Linux) The Cyber Centre enc…
- CanadaCentre canadien pour la cybersécurité
Linux security advisory (AV26-1108)
As of October 15, 2026, Linux is affected by a vulnerability in the following product: Linux Kernel Prior to 5.10.272 Prior to 5.15.223 Prior to 6.1.190 Prior to 6.6.159 Prior to 6.12.113 Prior to 6.18.56 Prior to 7.2.1…
- CanadaCentre canadien pour la cybersécurité
Ivanti security advisory (AV26-1035) - Update 2
Updated: October 30, 2026 As of October 13, 2026, Ivanti is affected by vulnerabilities in the following products: Ivanti Connect Secure Versions prior to 25.1.1.3 Versions prior to 25.1.3.1 Versions prior to 22.8R2.6 I…
- CanadaCentre canadien pour la cybersécurité
MongoDB security advisory (AV26-1107)
As of October 28, 2026, MongoDB is affected by vulnerabilities in the following product: Laravel MongoDB Prior to 5.12.0 The Cyber Centre encourages users and administrators to review the provided web links and apply an…
- CanadaCentre canadien pour la cybersécurité
HashiCorp security advisory (AV26-1106)
As of October 29, 2026, HashiCorp is affected by vulnerabilities in the following products: Nomad Prior to 2.1.0 Nomad Enterprise Prior to 2.1.0 Prior to 1.11.12 Prior to 1.10.18 Boundary Prior to 1.0.2 Boundary Enterpr…
- CanadaCentre canadien pour la cybersécurité
Drupal security advisory (AV26-1105)
As of October 28, 2026, Drupal is affected by a vulnerability in the following product: Commerce Core Versions prior to 2.41 and 3.0.0 versions prior to 3.3.13 Open-source reporting indicates that CVE-2026-118539 is bei…
- CanadaCentre canadien pour la cybersécurité
Cisco security advisory (AV26-1102) - Update 1
As of October 28, 2026, Cisco is affected by a vulnerability in the following products: Cisco Secure Firewall Adaptive Security Appliance (ASA) Versions prior to 9.16.4.104, 9.18.4.96, 9.20.4.50, 9.22.3.200, 9.23.1.4, 9…
- CanadaCentre canadien pour la cybersécurité
GitLab security advisory (AV26-1028) - Update 1
Updated: October 29, 2026 As of October 12, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Prior to 19.2.8 Prior to 19.3.5 Prior to 19.4.2 Update 1 On October 29, 2026, the Cybersecurity an…
- CanadaCentre canadien pour la cybersécurité
Mattermost security advisory (AV26-1104)
As of October 28, 2026, Mattermost is affected by a vulnerability in the following product: Mattermost Prior to or equal to 11.10.0 Prior to or equal to 11.9.2 Prior to or equal to 11.8.6 Prior to or equal to 11.7.11 Th…
- CanadaCentre canadien pour la cybersécurité
n8n security advisory (AV26-1103)
As of October 28, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 2.44.1 Prior to 2.43.5 The Cyber Centre encourages users and administrators to review the provided web links and apply an…
- CanadaCentre canadien pour la cybersécurité
VMware security advisory (AV26-763) · Update 2
Updated: October 28, 2026 As of July 30, 2026, VMware is affected by vulnerabilities in the following products: Cloud Foundation 5.x 9.0.x.x 9.1.x.x Prior to 5.2.3 ESX Prior to ESXi-9.0.2.0100-25595025 Prior to ESXi-9.1…
- CanadaCentre canadien pour la cybersécurité
Juniper Networks security advisory (AV26-1101)
As of October 28, 2026, Juniper Networks is affected by vulnerabilities in the following products: Session Smart Conductor Prior to 7.0.5 Prior to 7.1.7 Prior to 7.2.3 Session Smart Router Prior to 7.0.5 Prior to 7.1.7…
- CanadaCentre canadien pour la cybersécurité
Mozilla security advisory (AV26-1100)
As of October 27, 2026, Mozilla is affected by vulnerabilities in the following products: Firefox Prior to 159 Firefox ESR Prior to 115.44 Prior to 153.6 Thunderbird Prior to 159 Prior to 153.6 The Cyber Centre encourag…
- CanadaCentre canadien pour la cybersécurité
Apple security advisory (AV26-1099)
As of October 26, 2026, Apple is affected by vulnerabilities in the following products: iOS and iPadOS Prior to 18.7.11 Prior to 26.7.2 Prior to 27.2 MacOS (Golden Gate/Tahoe/Sequoia) Prior to 27.2 Prior to 26.7.2 Prior…
- CanadaCentre canadien pour la cybersécurité
AL26-028 · Ongoing Help Desk Voice Phishing Campaign Targeting Canadian Organizations
Audience This Alert is intended for IT professionals and managers.
- CanadaCentre canadien pour la cybersécurité
Progress security advisory (AV26-1098)
As of October 28, 2026, Progress is affected by a vulnerability in the following product: Telerik Document Processing Libraries Prior to 2026.3.1027 The Cyber Centre encourages users and administrators to review the pro…
- CanadaCentre canadien pour la cybersécurité
Oracle Corporation security advisory (AV26-1071) · Update 1
Updated: October 28, 2026 As of October 20, 2026, Oracle Corporation is affected by vulnerabilities in the following products: Helidon JD Edwards EnterpriseOne Configurator JD Edwards EnterpriseOne General Ledger JD Edw…
- CanadaCentre canadien pour la cybersécurité
Tanium security advisory (AV26-1097)
As of October 27, 2026, Tanium is affected by vulnerabilities in the following products: Certificate Manager Prior to 1.17.417 Prior to 1.18.368 Prior to 1.22.119 Endpoint Configuration Toolset Solution Prior to 1.51.60…
- CanadaCentre canadien pour la cybersécurité
Veeam security advisory (AV26-1096)
As of October 27, 2026, Veeam is affected by vulnerabilities in the following products: Veeam Agent for Linux Prior to 13.1.2 Veeam Backup and Replication Prior to 13.0.3 Prior to 13.1.2 Veeam Backup for Microsoft 365 P…
- CanadaCentre canadien pour la cybersécurité
Google Chrome security advisory (AV26-1095)
As of October 27, 2026, Google is affected by vulnerabilities in the following product: Stable Channel Chrome for Desktop Versions prior to 156.0.8078.73/.74 (Windows/Mac), and 156.0.8078.73 (Linux) The Cyber Centre enc…
- CanadaCentre canadien pour la cybersécurité
WatchGuard security advisory (AV26-1094)
As of October 27, 2026, WatchGuard is affected by vulnerabilities in the following products: Fireware OS Multiple versions Mobile VPN with SSL Client Prior to 2026.4 Prior to 12.0 The Cyber Centre encourages users and a…
- CanadaCentre canadien pour la cybersécurité
TeamViewer security advisory (AV26-1093)
As of October 27, 2026, TeamViewer is affected by vulnerabilities in the following products: TeamViewer Full Client & Host (Windows) Prior to 15.83 TeamViewer Full Client & Host (Linux) Prior to 15.83 TeamViewer Full Cl…
- CanadaCentre canadien pour la cybersécurité
Adobe security advisory (AV26-1092)
As of October 27, 2026, Adobe is affected by vulnerabilities in the following products: Adobe Substance 3D Painter Prior to or equal to 12.1.5 Creative Cloud Desktop Application Prior to or equal to 6.10 Adobe Campaign…
- CanadaCentre canadien pour la cybersécuritéCritical
AL26-027 - Critical vulnerability impacting Google Brotli · CVE-2026-111497
Number: AL26-027 Date: October 28, 2026 Audience This Alert is intended for IT professionals and managers.
- CanadaCentre canadien pour la cybersécurité
Adobe security advisory (AV26-697) · Update 1
Updated: October 27, 2026 On July 14, 2026, Adobe published security advisories to address critical vulnerabilities in the following products: Adobe After Effects - version 25.6.5 and prior Adobe After Effects - version…
- CanadaCentre canadien pour la cybersécurité
Google security advisory (AV26-1085) - Update 1
Updated: October 27, 2026 As of October 22, 2026, Google is affected by a vulnerability in the following product: Brotli Versions 1.0.3 to versions prior to v1.0.10 Versions 1.1.0 to versions prior to v1.1.1 Versions 1.…
- CanadaCentre canadien pour la cybersécuritéCritical
AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619 - Update 2
Number: AL26-026 Date: October 21, 2026 Updated: October 27, 2026 Audience This Alert is intended for IT professionals and managers.
- CanadaCentre canadien pour la cybersécurité
[Control systems] Hitachi security advisory (AV26-1091)
As of October 27, 2026, Hitachi is affected by vulnerabilities in the following products: HiRDB Server Version 10 Multiple versions HiRDB Server Version 9 Multiple versions HiRDB Server Version 9(32) Multiple versions H…
Why this page
The organizations we serve operate in Québec, Canada, the United States and Europe, and each authority publishes its advisories on its own. This page gathers them without rewriting them: the advisory's title and first sentence, the date, the severity when the source gives one, and the link to the official text. Our server fetches the data every thirty minutes; your browser never calls those sites.
Sources and terms
Advisories remain the property of their publishers and are cited with attribution: CERT-QC (Gouvernement du Québec), Canadian Centre for Cyber Security (Government of Canada), CISA (U.S. government, public domain), CERT-EU and CERT-FR (ANSSI, French government). The detailed terms are in the site's sources file.
