Microsoft releases out-of-band Windows fixes with certificate updates
Teaser from the source
Did you hear the one about eMudhra and the power of 4? Time to get connected to certificate trust list updates
This is the RSS-feed teaser. Read the full article at the original source.
Read at The Register — SecurityMore on out-of-band
Other advisories
- HighCVE-2026-96889Next.js out-of-band release fixes two unauthenticated RCEs (SVG image optimization CVE-2026-96889, use cache)
- Not ratedosv:CLEANSTART-2026-GC63511Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of-band (OOB) external entity r...
- HighCVE-2026-20320Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
- HighCVE-2026-45088Dalfox Server Mode has an Unauthenticated Arbitrary File Read with Out-of-Band Exfiltration via `custom-payload-file` in github.com/hahwul/dalfox
- Not ratedosv:CVE-2026-54316Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
- CriticalCVE-2026-54316Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
- CriticalCVE-2026-54316Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch
- CriticalCVE-2026-76242stigmem-node's federation peer registration lacked explicit out-of-band approval
Other news entries
- Microsoft releases Windows OOB updates to distrust eMudhra certificatesNewsBleepingComputer
- Fortinet PSIRT Advisory · October 2026 (Out-of-Band)Vulnerabilityneosec-editorial
- Siemens ProductCERT Patchday · October 2026 (Out-of-Band)Breachneosec-editorial
- Fortinet PSIRT Advisory · October 2026 (Out-of-Band)Breachneosec-editorial
- F5 rushes out emergency NGINX patches for three critical flawsNewsCSO Online
- F5 releases out-of-band patches for critical NGINX vulnerabilitiesNewsBleepingComputer
- Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG ProcessingNewsThe Hacker News
- NCSC-2026-0401 [1.00] [M/H] Kwetsbaarheid verholpen in Microsoft Exchange ServerNewsNCSC-NL
ID