QCS Security Advisory Desk
Security Advisory Desk.
Monitor network-edge vulnerabilities, known exploitation, affected products, mitigations, and vendor patch guidance without waiting for a weekly editorial cycle.
QCS pathSource-to-action path
- 01Official sourceMonitor vendors and trusted authorities.
- 02Verify contextCheck products, exposure, and evidence.
- 03Set prioritySeparate urgent action from useful reading.
- 04Act or learnPatch, mitigate, investigate, or prepare.
Live intelligence
See the items that can change today's patch or mitigation plan.
Priority combines source severity, known exploitation, remote attack conditions, recency, and network-edge relevance.
unrated
Ubuntu / Priority 70
USN-8727-1: Linux kernel (OEM) vulnerabilities
A security vulnerability was found in certain Arm processors used with the Linux kernel. Specifically, these processors could complete a memory cache invalidation step before all related memory writes were visible to the system. This flaw could let a local attacker write to protected memory areas after permissions were revoked, potentially bypassing security controls or increasing their access rights. Additionally, numerous other security issues were discovered in the Linux kernel across many components and hardware architectures. These issues could allow attackers to compromise systems running the affected Linux kernel.
- Published
- 7 Sep 2026
- CVSS
- Not scored
- Verified
- 8 Sep 2026
unrated
Ubuntu / Priority 70
USN-8726-1: Linux kernel vulnerabilities
A security problem was found in the Linux kernel used by Ubuntu that could let someone with local access bypass memory protections or increase their privileges. It mainly affects some Arm processors where certain hardware behavior might allow memory writes to happen even after permission was revoked. Additionally, many other security issues were found and fixed across many parts of the Linux kernel. Users should update their systems and reboot to apply the fixes.
- Published
- 7 Sep 2026
- CVSS
- Not scored
- Verified
- 8 Sep 2026
unrated Exploitation reported
Google Cloud / Priority 70
GCP-2026-053
Google Cloud found multiple security problems in Intel Trust Domain Extensions (TDX) firmware that can affect Confidential Virtual Machines (VMs). Attackers with host control could bypass security checks, read protected registers, or decrypt secured guest memory. Google has proactively updated their servers with fixes, so most customers don't need to act unless specifically advised.
- Published
- 4 Sep 2026
- CVSS
- Not scored
- Verified
- 6 Sep 2026
unrated Exploitation reported
Amazon Web Services / Priority 70
CVE-2026-85654 - Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-server
A security vulnerability in the open-source awslabs.dynamodb-mcp-server can let unauthorized actors run harmful code on the computer that builds your application. This happens through specially crafted names in data files that the server uses when generating infrastructure code. Users should upgrade to version 2.1.6 or newer and avoid using untrusted data models.
- Published
- 4 Sep 2026
- CVSS
- Not scored
- Verified
- 5 Sep 2026
unrated
Amazon Web Services / Priority 70
CVE-2026-85786 - Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java
Amazon's ion-java library had a vulnerability where specially compressed data could cause the software to use excessive memory and crash. An initial attempt to fix this vulnerability with version 1.12.0 did not fully prevent the problem. Amazon has now released version 1.12.1 which fully addresses this issue. Users should upgrade to this version to protect their systems.
- Published
- 4 Sep 2026
- CVSS
- Not scored
- Verified
- 5 Sep 2026
unrated Exploitation reported
Amazon Web Services / Priority 70
CVE-2026-85781 - Unverified access point ownership in Amazon EFS CSI Driver
A flaw in the Amazon EFS CSI Driver, used to connect Kubernetes workloads to Amazon EFS file systems, allowed certain authenticated users to delete files from EFS file systems they should not access. This happened only if a specific optional setting was enabled. The underlying Amazon EFS permissions remained secure.
- Published
- 4 Sep 2026
- CVSS
- Not scored
- Verified
- 5 Sep 2026
unrated Exploitation reported
Ubuntu / Priority 70
USN-8725-1: Linux kernel vulnerabilities
Multiple security vulnerabilities were found in the Linux kernel used by Ubuntu. These flaws affect various system parts, such as drivers for NVIDIA Tegra hardware, different file systems, networking protocols, and firewall components. Attackers might exploit these weaknesses to take control of or disrupt affected systems. Ubuntu has released updates to address these problems, and users should install them and restart their machines to protect their systems.
- Published
- 4 Sep 2026
- CVSS
- Not scored
- Verified
- 6 Sep 2026
unrated
Amazon Web Services / Priority 70
CVE-2026-85028: Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit
The AWS FPGA Developer Kit had a security weakness before version 2.3.4. It created temporary files in a shared directory with unsafe permissions, allowing local users to place malicious code there. When the installation tool elevated its privileges, it could accidentally run that malicious code with root-level access. AWS fixed this by changing how these files are handled in version 2.3.4, removing the unsafe file creation step. Users should update to the latest version or apply the recommended workarounds to stay secure.
- Published
- 3 Sep 2026
- CVSS
- Not scored
- Verified
- 5 Sep 2026
unrated Exploitation reported
Ubuntu / Priority 70
USN-8716-1: FFmpeg vulnerabilities
Multiple security flaws were found in FFmpeg, a media handling tool in Ubuntu. These flaws could be triggered by specially crafted media files to crash FFmpeg, disrupt services, leak sensitive data, or run harmful code on your system. Various Ubuntu versions, such as 18.04, 20.04, 22.04, and 24.04 LTS, are affected depending on the issue. Users should update their FFmpeg packages to secure their systems.
- Published
- 3 Sep 2026
- CVSS
- Not scored
- Verified
- 6 Sep 2026
unrated Exploitation reported
Google Cloud / Priority 70
GCP-2026-052
A security flaw was found in the Kernel-based Virtual Machine (KVM) used by Google Cloud for virtual machines on Intel and AMD servers. This flaw could allow someone controlling a virtual machine (VM) to break out of their VM and affect the host system. Google has already fixed this issue for managed Compute Engine customers by updating host systems live, with no action or downtime needed from users. However, customers who manage their own servers outside the standard Google Cloud setup should update their Linux kernels promptly, once fixes are available.
- Published
- 2 Sep 2026
- CVSS
- Not scored
- Verified
- 4 Sep 2026
unrated
Citrix / Priority 70
CVE-2026-8452: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix NetScaler ADC and NetScaler Gateway have a security flaw where memory is not properly checked, which can cause the devices to stop working correctly. This could lead to a denial of service, making the devices unavailable to users.
- Published
- 26 Aug 2026
- CVSS
- Not scored
- Verified
- 1 Sep 2026
unrated Exploitation reported
Oracle / Priority 70
CVE-2026-21962: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
A security weakness in Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in lets unauthorized users access or change important data. They might add, delete, or modify critical information without permission, risking data loss or theft.
- Published
- 24 Aug 2026
- CVSS
- Not scored
- Verified
- 1 Sep 2026