CCB Alert (@CCBalert) header
CCB Alert (@CCBalert) profile picture

CCB Alert

@CCBalert

CCB Alert is the advisory page of the Centre for Cybersecurity Belgium @CCBbelgium. Use [email protected] for interaction.

 Belgium
ccb.belgium.be
Joined August 2009
  • Tweets3.9K
  • Following201
  • Followers7.3K
145Media
Photo by CCB Alert (@CCBalert)Photo by CCB Alert (@CCBalert)Photo by CCB Alert (@CCBalert)Photo by CCB Alert (@CCBalert)Photo by CCB Alert (@CCBalert)Photo by CCB Alert (@CCBalert)Photo by CCB Alert (@CCBalert)Photo by CCB Alert (@CCBalert)Photo by CCB Alert (@CCBalert)Photo by CCB Alert (@CCBalert)
Warning: #Ivanti Connect Secure exploited in the wild. #CVE-2026-111357 (CVSS 8.8) allows a local authenticated attacker to escalate privileges. #CVE-2026-118527 (CVSS 4.3) allows an authenticated remote attacker to upload arbitrary content. ccb.belgium.be/advisories/wa… #Patch
1
350
Warning: #CVE-2026-97229 (CVSS 10.0) in GitLab CE/EE is actively exploited by attackers. Exploitation allows unauthenticated remote attackers to achieve arbitrary code execution via specially crafted regular expression in a CI/CD configuration #RCE! ccb.belgium.be/advisories/wa… #Patch
1
362
Warning: #CVE-2026-97229 (CVSS 10.0) in GitLab CE/EE is actively exploited by attackers. Exploitation allows unauthenticated remote attackers to achieve arbitrary code execution via specially crafted regular expression in a CI/CD configuration #RCE! ccb.belgium.be/advisories/wa… #Patch
1
1
507
Warning: Multiple vulnerabilities in #IBM #Langflow. Authentication Control Bypass #CVE-2026-93680 CVSS: 9.8, and Code Injection #CVE-2026-110186 (CVSS 9.8) and #CVE-2026-110193 (CVSS 8.8) that could lead to remote code execution #RCE! ccb.belgium.be/advisories/wa… #Patch #Patch #Patch
284
Warning: #CVE-2026-111497 is in #CISA #KEV. Exploited as #Node2Shell, #HTTP2Shell, #Python2Shell & #Broccoli2Shell. Affects #Node.js 22.x/24.x/26.x, Bun < 1.4.4, PyPI Brotli < 1.2.1 & brotlicffi < 1.2.1.0. Read our advisory: ccb.belgium.be/advisories/wa… #Patch #Patch #Patch
265
Warning:#Linux Kernel Missing Initialization of a Variable Vulnerability, #CVE-2026-46300 (CVSS 7.8), is actively exploited in the wild. Exploitation could allow a local attacker to achieve root privileges or container escape by corrupting read-only file page caches. #Patch
251
Warning: Critical vulnerability affecting #Linux kernel's TCP code (#CVE-2026-98432 CVSS: 9.8) could potentially result in memory corruption, system crashes, denial of service, or arbitrary code execution. Monitor if your Linux distribution has released a fixed kernel. #Patch
303
Warning: #Drupal Commerce Core actively exploited in the wild. #CVE-2026-118539. Exploitation of this vulnerability could allow attackers to manipulate e-commerce orders, potentially resulting in unauthorized transactions and financial losses for affected online stores. #Patch
1
267
Warning: Critical sandbox escape vulnerability in the ServiceNow AI platform (#CVE-2026-103093 CVSS 4.0: 9.4) could allow an authenticated attacker with administrative privileges to bypass Rhino sandbox restrictions and execute arbitrary code on the host operating system. #Patch
212
Warning: #CVE-2026-41709 insufficient logging vulnerability in VMware ESX is been exploited by a China-nexus threat actor in attacks. Successful exploitation could allow attackers with admin access to perform certain operations without them being logged. #Patch #Patch #Patch
1
211
Warning: Remote Code Execution #RCE vulnerability in #Synology #DSM. CVE-2024-10441 CVSS:9.8. This vulnerability is now exploited in the wild to deploy ransomware. Harden your #NAS to keep your data safe and #Patch #Patch #Patch
244
Warning: A hardware implant was reported in a #Trezor Safe 5 sold by reseller CryptoBilis, which may steal the wallet recovery phrase via a cellular module. Bought a Trezor from CryptoBilis since March 2026? Move funds to a new wallet with a new seed. trezor.io/blog/news/implant-…
Implant reported in a Trezor sold by CryptoBilis

Implant reported in a Trezor sold by CryptoBilis

An implant was found in a Trezor Safe 5 sold by CryptoBilis via Tokopedia. What you need to know...

trezor.io
1
1
186
Warning: Critical unauthenticated SQL injection in #Oracle #EBS Application Object Library. CVE-2026-101767 CVSS(3.1): 9.8 allows EBS takeover and chaining to #RCE. Defused reports exploratory exploit attempts. Read our advisory: ccb.belgium.be/advisories/wa… #Patch #Patch #Patch
318
Warning: #Cisco Secure Firewall #ASA & #FTD CVE-2026-76418 (CVSS: 8.6) lets unauthenticated attackers reload SSL VPN devices on demand, no login needed, and it is actively exploited! #ActivelyExploited More info in our advisory: ccb.belgium.be/advisories/wa… #Patch #Patch #Patch
264
Warning: #Adobe Commerce & #Magento Open Source CVE-2026-48356 (#PolyShell, CVSS: 9.3) is an unauthenticated file upload flaw exploited in the wild to plant web shells on stores. In #CISA #KEV. #ActivelyExploited Read the advisory helpx.adobe.com/security/pro… #Patch #Patch #Patch
Security update available for Adobe Commerce | APSB26-73

Security update available for Adobe Commerce | APSB26-73

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important and moderate vulnerabilities. Successful exploitation could lead to arbitrary

adobe.com
1
283
Warning: Attackers are exploiting a stored XSS in #GFI #KerioConnect Webmail (CVE-2026-112353, CVSS(3.1): 8.2, CVSS(4.0): 6.2) to steal credentials and mailboxes via crafted SVG attachments. Fixed since 10.0.8p2. Read the advisory gfi.ai/resource/kerioconnect… #Patch #Patch #Patch
GFI KerioConnect® - Product Releases - GFI Software

GFI KerioConnect® - Product Releases - GFI Software

What’s new in GFI KerioConnect®  Version 10.0.9p2 Released: June 29, 2026 Security fixes Closed a Webmail vulnerability where nested anchor tags could be injected when rendering HREF links. Removed...

gfi.ai
1
1
298
Warning: Multiple vulnerabilities have been patched in #WatchGuard #Fireware OS, including CVE-2026-103594 (CVSS: 9.5) stack buffer overflow, exposing systems to denial of service and remote code execution #RCE. More information in our advisory: ccb.belgium.be/advisories/wa…. #Patch
1
273
Warning: Three vulnerabilities patched in #TeamViewer clients (CVE-2026-92374, CVE-2026-92372, and CVE-2026-111585, CVSS: up to 8.8), allowing privilege escalation and code execution #RCE! More information on: teamviewer.com/en/resources/… #Patch #Patch #Patch

TV-2026-1011

teamviewer.com
1
1
465
Warning: #Adobe patched multiple critical vulnerabilities in Adobe Campaign Classic. CVE-2026-105781 (CVSS: 10.0, SQL Injection) and other flaws expose systems to #RCE and security bypass. More info on: adobe.com/trust/security/pro…. #Patch #Patch #Patch
Security update available for Adobe Campaign Classic | APSB26-162

Security update available for Adobe Campaign Classic | APSB26-162

Adobe has released a priority 2 security update for Adobe Campaign Classic. This update addresses vulnerabilities rated critical that could result in arbitrary code execution, security feature...

adobe.com
224
Warning: #Nvidia patched two vulnerabilities in its NeMo Agent Toolkit. CVE-2026-65145 (CVSS: 10.0, Missing Authentication) and CVE-2026-65151 (CVSS: 8.4, SQL Injection) expose systems to code execution #RCE and data tampering. Time to #Patch #Patch #Patch
3
2
367
Load more