QCS Security Advisory Desk
Security Advisory Desk.
Monitor network-edge vulnerabilities, known exploitation, affected products, mitigations, and vendor patch guidance without waiting for a weekly editorial cycle.
QCS pathSource-to-action path
- 01Official sourceMonitor vendors and trusted authorities.
- 02Verify contextCheck products, exposure, and evidence.
- 03Set prioritySeparate urgent action from useful reading.
- 04Act or learnPatch, mitigate, investigate, or prepare.
Live intelligence
See the items that can change today's patch or mitigation plan.
Priority combines source severity, known exploitation, remote attack conditions, recency, and network-edge relevance.
unrated Exploitation reported
Ubuntu / Priority 76
USN-8619-1: Linux kernel (HWE) vulnerabilities
A number of security vulnerabilities were found in the Linux kernel used in Ubuntu. Some AMD processors had weaknesses that could let a local attacker access sensitive data, escalate privileges, or affect randomness used by security features. Additionally, many other issues affecting various hardware architectures, device drivers, and kernel subsystems were identified that could allow attackers to compromise the system. Ubuntu has provided updates to address these concerns, and users are recommended to update and reboot their systems to apply the fixes.
- Published
- 28 Jul 2026
- CVSS
- Not scored
- Verified
- 30 Jul 2026
unrated
Cisco / Priority 70
Cisco Advance Notification for Publication of October 21, 2026, Security Advisories
Cisco will publish security advisories on October 21, 2026 for several products, including Expressway Series, IOS XR for ASR 9000 Series Routers, Secure Client, Snort, and Unified Communications products. These advisories will disclose vulnerabilities and provide fixed software releases to help address them. Cisco recommends customers upgrade to these fixed versions once available to protect their systems.
- Published
- 14 Oct 2026
- CVSS
- Not scored
- Verified
- 14 Oct 2026
unrated Exploitation reported
Google Cloud / Priority 70
GCP-2026-066
A security flaw known as a Confused Deputy vulnerability was found in the Email Task component of Google Cloud's Application Integration product. This flaw allowed an authenticated attacker to read and steal internal Google files by crafting a special attachment path. This issue was fixed on June 30, 2026, and no action is required by customers.
- Published
- 14 Oct 2026
- CVSS
- Not scored
- Verified
- 19 Oct 2026
unrated Exploitation reported
Google Cloud / Priority 70
GCP-2026-068
A serious security flaw was found in Google Cloud's Application Integration service before August 27, 2026. This flaw could let a user with normal access increase their permissions and pretend to be a service account in a Google Cloud project, potentially gaining unauthorized control. Google fixed this problem on August 27, 2026, so customers do not need to take any action.
- Published
- 14 Oct 2026
- CVSS
- Not scored
- Verified
- 19 Oct 2026
unrated Exploitation reported
Google Cloud / Priority 70
GCP-2026-067
A security flaw was found in Envoy Proxy used by Google Cloud where certain HTTP filters, like ext_proc with a specific setting (route_cache_action: RETAIN), can change the :path header after route selection when a route is configured with prefix_rewrite. This flaw can cause the Envoy Proxy to crash, resulting in a denial-of-service (DoS), interrupting normal service.
- Published
- 14 Oct 2026
- CVSS
- Not scored
- Verified
- 19 Oct 2026
unrated Exploitation reported
Ubuntu / Priority 70
USN-8924-1: Linux kernel vulnerabilities
Multiple security issues were found in the Linux kernel on Ubuntu systems. These include vulnerabilities that might let local attackers gain sensitive information or cause system crashes by using specially crafted files or exploiting kernel subsystems. Updated Linux kernel packages have been released to address these problems.
- Published
- 13 Oct 2026
- CVSS
- Not scored
- Verified
- 15 Oct 2026
unrated
Amazon Web Services / Priority 70
CVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAF
Amazon Web Services discovered two issues in AWS WAF related to inspecting HTTP/2 multi-frame request bodies. One issue, CVE-2026-13762, affected AWS WAF with CloudFront and was fixed on the server side with no action needed from customers. The other, CVE-2026-13763, affected AWS WAF with Application Load Balancer (ALB) and could cause partial inspection of certain HTTP/2 request bodies. AWS released a configuration option on May 22, 2026, allowing customers to configure full inspection for HTTP/2 requests on ALB.
- Published
- 9 Oct 2026
- CVSS
- Not scored
- Verified
- 10 Oct 2026
unrated Exploitation reported
Amazon Web Services / Priority 70
Issue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262
Amazon Web Services (AWS) identified five security vulnerabilities in the containerd CRI plugin, a key component used in AWS managed container services and Kubernetes environments. These vulnerabilities could allow attackers to execute code, read host files, inject devices, cause denial of service, or execute arbitrary commands on affected systems if exploited. AWS has released patches for these issues and is updating its managed services to protect customers.
- Published
- 9 Oct 2026
- CVSS
- Not scored
- Verified
- 10 Oct 2026
unrated Exploitation reported
Amazon Web Services / Priority 70
CVE-2026-13769 – Insecure file permissions in AWS CLI
A security issue was found in the AWS Command Line Interface (CLI) on Unix-like systems. By default, it created credential and configuration files that could be read by all users on the same computer. This could let other local users see sensitive AWS credentials. AWS fixed this in updated AWS CLI versions and recommends users upgrade to these versions.
- Published
- 9 Oct 2026
- CVSS
- Not scored
- Verified
- 10 Oct 2026
unrated Exploitation reported
Amazon Web Services / Priority 70
CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Plugins
Two security issues (CVE-2026-12957 and CVE-2026-12958) were found in the Language Servers used by Amazon Q Developer's IDE plugins. These issues could let a local user execute commands or access files outside of trusted project areas if they open a malicious workspace and accept the trust prompt. AWS fixed these by releasing Language Servers version 1.69.0 and updated plugins bundling that version. Users should upgrade their Amazon Q Developer IDE plugins to apply the fix. No workarounds are available.
- Published
- 9 Oct 2026
- CVSS
- Not scored
- Verified
- 10 Oct 2026
unrated Exploitation reported
Amazon Web Services / Priority 70
CVE-2026-13760 - OS Command Injection in NodejsFunction Docker Bundling in aws-cdk-lib
A security vulnerability, tracked as CVE-2026-13760, was found in the AWS Cloud Development Kit's NodejsFunction Docker bundling process. This flaw could let a malicious actor run unauthorized commands on the computer used to build the software, but only if they can control certain dependency version information in a project file called package.json. AWS fixed this issue in version 2.260.0 of aws-cdk-lib and recommends upgrading to this or a later version. As a temporary measure, users should ensure all package versions come from trusted sources or use local bundling instead of Docker bundling.
- Published
- 9 Oct 2026
- CVSS
- Not scored
- Verified
- 10 Oct 2026
unrated Exploitation reported
Amazon Web Services / Priority 70
CVE-2026-12043 - Heap double-free in AWS Common Runtime aws-c-http
A security problem in the AWS Common Runtime's HTTP client library (aws-c-http) allows a remote attacker controlling a server to corrupt memory in a client application, possibly letting them execute arbitrary code. This happens when the client processes a specially crafted sequence of HTTP/2 HEADERS frames.
- Published
- 9 Oct 2026
- CVSS
- Not scored
- Verified
- 10 Oct 2026