Fortinet PSIRT Advisory · October 2026 (Out-of-Band)
More on Out-of-Band
Other advisories
- HighCVE-2026-96889Next.js out-of-band release fixes two unauthenticated RCEs (SVG image optimization CVE-2026-96889, use cache)
- Not ratedosv:CLEANSTART-2026-GC63511Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of-band (OOB) external entity r...
- HighCVE-2026-20320Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
- HighCVE-2026-45088Dalfox Server Mode has an Unauthenticated Arbitrary File Read with Out-of-Band Exfiltration via `custom-payload-file` in github.com/hahwul/dalfox
- Not ratedosv:CVE-2026-54316Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
- CriticalCVE-2026-54316Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
- CriticalCVE-2026-54316Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
- CriticalCVE-2026-76242stigmem-node's federation peer registration lacked explicit out-of-band approval
Other news entries
- Microsoft releases out-of-band Windows fixes with certificate updatesNewsThe Register — Security
- Fortinet PSIRT Advisory · October 2026 (Out-of-Band)Vulnerabilityneosec-editorial
- Siemens ProductCERT Patchday · October 2026 (Out-of-Band)Breachneosec-editorial
- F5 rushes out emergency NGINX patches for three critical flawsNewsCSO Online
- F5 releases out-of-band patches for critical NGINX vulnerabilitiesNewsBleepingComputer
- Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG ProcessingNewsThe Hacker News
- NCSC-2026-0401 [1.00] [M/H] Kwetsbaarheid verholpen in Microsoft Exchange ServerNewsNCSC-NL
- Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' MailboxesNewsThe Hacker News
Source: /patchday/fortinet/2026-10-21
ID