QCS Security Advisory Desk
Security Advisory Desk.
Monitor network-edge vulnerabilities, known exploitation, affected products, mitigations, and vendor patch guidance without waiting for a weekly editorial cycle.
QCS pathSource-to-action path
- 01Official sourceMonitor vendors and trusted authorities.
- 02Verify contextCheck products, exposure, and evidence.
- 03Set prioritySeparate urgent action from useful reading.
- 04Act or learnPatch, mitigate, investigate, or prepare.
Live intelligence
See the items that can change today's patch or mitigation plan.
Priority combines source severity, known exploitation, remote attack conditions, recency, and network-edge relevance.
unrated Exploitation reported
Amazon Web Services / Priority 76
CVE-2026-96883 - Type confusion in AWS pgcollection allows remote code execution
A security flaw was found in pgcollection, an add-on for PostgreSQL databases, that could let someone with access to the database crash it or run harmful code. This happens when the database tries to interpret stored data using the wrong data type. The issue affects versions 2.0.0 through 2.1.1 of pgcollection. Users should upgrade to version 2.1.2 or later to resolve this problem. Amazon's managed PostgreSQL services are not affected, as they use an older version without this issue.
- Published
- 24 Sep 2026
- CVSS
- Not scored
- Verified
- 5 Oct 2026
unrated Exploitation reported
WSO2 / Priority 76
CVE-2026-5430: WSO2 Multiple Products Path Traversal Vulnerability
Multiple WSO2 products have a vulnerability that lets attackers upload files without restriction. This can lead to running harmful code on the affected server, potentially compromising the entire system.
- Published
- 24 Sep 2026
- CVSS
- Not scored
- Verified
- 6 Oct 2026
unrated
Amazon Web Services / Priority 76
CVE-2026-94450 - Potential denial of service when configured to send Retry packets in s2n-quic
A security issue was found in s2n-quic, a Rust-built implementation of the QUIC internet protocol. When a server is set up to send Retry packets, the software might wrongly process certain connection ID lengths. This flaw allows an attacker to crash the server with just one specially crafted message. AWS services are not affected, and only certain s2n-quic server setups are vulnerable. To fix the issue, users should update to the latest s2n-quic version.
- Published
- 22 Sep 2026
- CVSS
- Not scored
- Verified
- 2 Oct 2026
unrated Exploitation reported
Ubuntu / Priority 76
USN-8668-2: Linux kernel (Raspberry Pi) vulnerabilities
Several security vulnerabilities affecting the Linux kernel used in Raspberry Pi systems have been identified. These issues include improper validation in the NTFS file system that can expose sensitive kernel memory, and hardware-related bugs in AMD processors that may leak sensitive information or allow privilege escalation. Additional vulnerabilities span many subsystems of the Linux kernel, potentially allowing attackers to compromise the system. Users are advised to update their systems to patched Linux kernel versions to mitigate these risks.
- Published
- 21 Sep 2026
- CVSS
- Not scored
- Verified
- 22 Sep 2026
unrated Exploitation reported
Ubuntu / Priority 76
USN-8780-1: libsoup vulnerabilities
The libsoup library used in Ubuntu had security issues where it failed to properly handle URLs when using an HTTP proxy, potentially letting attackers add harmful HTTP headers. It also did not remove proxy login information when following redirects, risking exposure of sensitive data. Additionally, it incorrectly processed some HTTP requests, which could leak sensitive information to attackers.
- Published
- 17 Sep 2026
- CVSS
- Not scored
- Verified
- 18 Sep 2026
unrated Exploitation reported
Ubuntu / Priority 76
USN-8776-1: python-cryptography vulnerabilities
Several security vulnerabilities were found in the python-cryptography library on Ubuntu systems. These issues could cause corrupted outputs, expose encryption keys, allow invalid certificates to be accepted, or cause denial of service due to excessive resource use. They affect Ubuntu 18.04 LTS and 26.04 LTS users differently and require system updates to resolve.
- Published
- 16 Sep 2026
- CVSS
- Not scored
- Verified
- 18 Sep 2026
unrated Exploitation reported
Cisco / Priority 76
Cisco Advance Notification for Publication of September 16, 2026, Security Advisories
On September 16, 2026, Cisco announced multiple security vulnerabilities in its Identity Services Engine (ISE) software. These issues include critical flaws like authentication bypass, remote code execution, command injection, denial of service, and SQL injection. Cisco strongly recommends customers upgrade to the new fixed software versions to protect their systems.
- Published
- 16 Sep 2026
- CVSS
- Not scored
- Verified
- 17 Sep 2026
unrated Exploitation reported
Amazon Web Services / Priority 76
CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin
A security problem was found in the AWS Advanced JDBC Wrapper, which helps applications connect to certain Amazon databases. This problem happens when a specific optional feature called RemoteQueryCachePlugin is turned on with a shared cache. A bad actor who can write to that shared cache might add harmful XML code. Later, when the application reads this cached data, it could reveal sensitive files and database credentials to the attacker. AWS fixed this issue in version 4.3.0 and advises users to upgrade or disable that optional feature if they cannot update immediately.
- Published
- 11 Sep 2026
- CVSS
- Not scored
- Verified
- 14 Sep 2026
unrated Exploitation reported
Google Cloud / Priority 76
GCP-2026-056
An important vulnerability was found in the JDBC driver used by Google Cloud's BigQuery Data Transfer Service before May 1, 2026. This flaw allowed attackers who already had access to use specially crafted connection parameters to run harmful code remotely and gain higher permissions within the affected project. Google fixed this issue on May 1, 2026, and no action is needed by customers now.
- Published
- 11 Sep 2026
- CVSS
- Not scored
- Verified
- 12 Sep 2026
unrated Exploitation reported
Google Cloud / Priority 76
GCP-2026-055
A critical security issue was found in Next.js and the libheif image processing library used by it. This flaw lets attackers supply a specially crafted image file that can run malicious code inside the application without needing to log in. While Google Cloud's own infrastructure is safe, customers running Next.js apps on Google Cloud services like Cloud Run, GKE, or App Engine need to act to protect their workloads.
- Published
- 11 Sep 2026
- CVSS
- Not scored
- Verified
- 12 Sep 2026
unrated Exploitation reported
Amazon Web Services / Priority 76
CVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
A security flaw in AWS Systems Manager Agent's port forwarding feature lets an authorized user bypass security blocks and connect to restricted local network addresses. This could let them steal temporary credentials from the managed server and act with its permissions from outside the server.
- Published
- 10 Sep 2026
- CVSS
- Not scored
- Verified
- 14 Sep 2026
unrated Exploitation reported
Amazon Web Services / Priority 76
CVE-2026-85228 - Integer overflow in tensor buffer validation in Deep Java Library
Amazon's Deep Java Library (DJL), a tool used for deep learning, has a security problem called CVE-2026-85228. This problem happens when DJL wrongly checks the size of a data buffer that stores tensors—multidimensional data arrays used in AI. If someone sends a crafted tensor with specially made dimensions, the size calculation can overflow, tricking the system into accepting a smaller buffer than needed. Then, when DJL uses this buffer, it may read memory outside the intended area, potentially leaking information or causing the program to crash. AWS fixed this by updating DJL to version 0.37.0 or later and recommends users upgrade as soon as possible.
- Published
- 10 Sep 2026
- CVSS
- Not scored
- Verified
- 14 Sep 2026