Alerts Archives - EG-FinCIRT https://www.egfincirt.org.eg/category/alerts/ CYBER SECURITY Wed, 04 Nov 2026 09:43:17 +0000 en-US hourly 1 /wp-content/uploads/2021/06/cropped-EG-FINCIRT-logo-2021-original-32x32.png Alerts Archives - EG-FinCIRT https://www.egfincirt.org.eg/category/alerts/ 32 32 Google Chrome Security Updates – 30 July 2026 https://www.egfincirt.org.eg/google-chrome-security-updates-30-july-2026/ Thu, 30 Jul 2026 09:35:51 +0000 https://www.egfincirt.org.eg/?p=17381 Google has released an updated Chrome version 151.0.7922.71/.72 for Windows and Mac and 151.0.7922.71 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, trigger memory corruption, bypass security restrictions, gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems via a crafted HTML page. Sample of […]

The post Google Chrome Security Updates – 30 July 2026 appeared first on EG-FinCIRT.

]]>
  • 262/2026
  • Critical

Google has released an updated Chrome version 151.0.7922.71/.72 for Windows and Mac and 151.0.7922.71 for Linux.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, trigger memory corruption, bypass security restrictions, gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems via a crafted HTML page.

Sample of the addressed vulnerabilities:

Google Chrome Use-After-Free in Compositing Vulnerability (CVE-2026-17650):

  • CVSS Score: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Bypass Security
Vulnerabilities

Google Chrome Security Updates

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Updates

References

Google Chrome Security Updates

The post Google Chrome Security Updates – 30 July 2026 appeared first on EG-FinCIRT.

]]> Apache Tomcat Security Update – 30 July 2026 https://www.egfincirt.org.eg/apache-tomcat-security-update-30-july-2026/ Thu, 30 Jul 2026 09:22:10 +0000 https://www.egfincirt.org.eg/?p=17372 Apache has released a security update to address a vulnerability affecting Apache Tomcat. The addressed vulnerability could allow the attacker to perform denial of service attacks on the affected system. The addressed vulnerability: Apache Tomcat Uncontrolled Resource Consumption Vulnerability (CVE-2026- 66299): CVSS: 7.5 Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None […]

The post Apache Tomcat Security Update – 30 July 2026 appeared first on EG-FinCIRT.

]]>
  • 261/2026
  • High

Apache has released a security update to address a vulnerability affecting Apache Tomcat.

The addressed vulnerability could allow the attacker to perform denial of service attacks on the affected system.

The addressed vulnerability:

Apache Tomcat Uncontrolled Resource Consumption Vulnerability (CVE-2026- 66299):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial-of-Service
Vulnerabilities

CVE-2026-66299

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Apache Tomcat Security Advisory

References

Apache Tomcat Security Advisory

The post Apache Tomcat Security Update – 30 July 2026 appeared first on EG-FinCIRT.

]]> Cisco Security Update – 30 July 2026 https://www.egfincirt.org.eg/cisco-security-update-30-july-2026/ Thu, 30 Jul 2026 09:15:08 +0000 https://www.egfincirt.org.eg/?p=17366 Cisco has released a security update to address a zero-day vulnerability affecting Cisco Secure Firewall Management Center (FMC) Software. The addressed vulnerability could allow the unauthenticated remote attacker to log in to an affected device using a low-privilege account and access sensitive data within the impacted systems. The addressed vulnerability: Cisco Secure Firewall Management Center […]

The post Cisco Security Update – 30 July 2026 appeared first on EG-FinCIRT.

]]>
  • 260/2026
  • Medium

Cisco has released a security update to address a zero-day vulnerability affecting Cisco Secure Firewall Management Center (FMC) Software.

The addressed vulnerability could allow the unauthenticated remote attacker to log in to an affected device using a low-privilege account and access sensitive data within the impacted systems.

The addressed vulnerability:

Cisco Secure Firewall Management Center Software Static Credential Vulnerability (CVE-2026-20316):

  • CVSS: 5.3
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Obtain Information

It should be highlighted that the Cisco PSIRT team is aware that the vulnerability “CVE-2026-20316″ is being actively exploited in the wild.

Vulnerabilities

CVE-2026-20316

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Cisco Security Updates

References

Cisco Security Updates

The post Cisco Security Update – 30 July 2026 appeared first on EG-FinCIRT.

]]> IBM Security Updates – 29 July 2026 https://www.egfincirt.org.eg/ibm-security-updates-29-july-2026/ Wed, 29 Jul 2026 08:59:09 +0000 https://www.egfincirt.org.eg/?p=17361 IBM has released security updates to address several vulnerabilities affecting multiple IBM products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, perform cross-site scripting (XSS) attacks, gain elevated privileges, obtain sensitive information, or execute arbitrary commands, and gain access to the affected system. Sample of the addressed vulnerabilities: 1. IBM WebSphere […]

The post IBM Security Updates – 29 July 2026 appeared first on EG-FinCIRT.

]]>
  • 259/2026
  • Critical

IBM has released security updates to address several vulnerabilities affecting multiple IBM products.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, perform cross-site scripting (XSS) attacks, gain elevated privileges, obtain sensitive information, or execute arbitrary commands, and gain access to the affected system.

Sample of the addressed vulnerabilities:

1. IBM WebSphere Application Broken Access Control Vulnerability (CVE-2026- 14446):

  • CVSS Score: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Privileges

2. IBM WebSphere Pre-Authentication Unsafe Deserialization Vulnerability (CVE-2026-14512):

  • CVSS Score: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution
Vulnerabilities

IBM Security Updates

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

IBM Security Updates

References

IBM Security Updates

The post IBM Security Updates – 29 July 2026 appeared first on EG-FinCIRT.

]]> VMware Security Updates – 29 July 2026 https://www.egfincirt.org.eg/vmware-security-updates-29-july-2026/ Wed, 29 Jul 2026 08:34:33 +0000 https://www.egfincirt.org.eg/?p=17352 VMware has released security updates to address several vulnerabilities affecting multiple VMware products. The addressed vulnerabilities could allow the attacker to bypass security restrictions, obtain sensitive information, perform directory traversal and denialof- service attacks, execute arbitrary code, and gain access to the affected products. Sample of the addressed vulnerabilities: 1. VMware vCenter Authentication Bypass Vulnerability […]

The post VMware Security Updates – 29 July 2026 appeared first on EG-FinCIRT.

]]>
  • 258/2026
  • Critical

VMware has released security updates to address several vulnerabilities affecting multiple VMware products.

The addressed vulnerabilities could allow the attacker to bypass security restrictions, obtain sensitive information, perform directory traversal and denialof- service attacks, execute arbitrary code, and gain access to the affected products.

Sample of the addressed vulnerabilities:

1. VMware vCenter Authentication Bypass Vulnerability (CVE-2026-59309):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Bypass Security

2. VMware vCenter Directory Traversal Vulnerability (CVE-2026-59310):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

The affected products:

  • VMware ESX.
  • VMware vCenter.
  • VMware Workstation.
  • VMware Fusion.
  • VMware Cloud Foundation.
  • VMware vSphere Foundation.
  • VMware Telco Cloud Platform.
  • VMware Telco Cloud Infrastructure.
Vulnerabilities
  • CVE-2026-59309
  • CVE-2026-59310
  • CVE-2026-47876
  • CVE-2026-41703
  • CVE-2026-41709
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

VMware Security Update

References

VMware Security Update

The post VMware Security Updates – 29 July 2026 appeared first on EG-FinCIRT.

]]> Citrix Security Update – 29 July 2026 https://www.egfincirt.org.eg/citrix-security-update-29-july-2026/ Wed, 29 Jul 2026 08:22:03 +0000 https://www.egfincirt.org.eg/?p=17347 Citrix has released security updates to address several vulnerabilities affecting XenServer The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, execute arbitrary code, and gain access to the affected products. Sample of the addressed vulnerabilities: 1. Citrix XenServer for Multiple Issues Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-62428): CVSS: 7.8 Attack Vector: Local […]

The post Citrix Security Update – 29 July 2026 appeared first on EG-FinCIRT.

]]>
  • 257/2026
  • High

Citrix has released security updates to address several vulnerabilities affecting XenServer

The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, execute arbitrary code, and gain access to the affected products.

Sample of the addressed vulnerabilities:

1. Citrix XenServer for Multiple Issues Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-62428):

  • CVSS: 7.8
  • Attack Vector: Local
  • Attack Complexity: High
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Access

2. Citrix XenServer for Multiple Issues Divide By Zero Vulnerability (CVE-2026- 62431):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial of Service
Vulnerabilities
  • CVE-2026-62428
  • CVE-2026-42492
  • CVE-2026-62431
  • CVE-2026-62432
  • CVE-2026-62435
  • CVE-2026-62436
  • CVE-2026-62434
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Citrix Security Update

References

Citrix Security Update

The post Citrix Security Update – 29 July 2026 appeared first on EG-FinCIRT.

]]> Apple Security Updates – 29 July 2026 https://www.egfincirt.org.eg/apple-security-updates-29-july-2026/ Wed, 29 Jul 2026 06:49:25 +0000 https://www.egfincirt.org.eg/?p=17337 Apple has released security updates to address several vulnerabilities across macOS Tahoe, Sequoia, Sonoma and Safari. The addressed vulnerabilities could allow the attacker to conduct denial-ofservice (DoS) attacks, trigger process or kernel memory corruption, perform spoofing attacks, bypass security restrictions, obtain sensitive information, gain elevated privileges, or execute arbitrary code on the affected systems. Sample […]

The post Apple Security Updates – 29 July 2026 appeared first on EG-FinCIRT.

]]>
  • 256/2026
  • Critical

Apple has released security updates to address several vulnerabilities across macOS Tahoe, Sequoia, Sonoma and Safari.

The addressed vulnerabilities could allow the attacker to conduct denial-ofservice (DoS) attacks, trigger process or kernel memory corruption, perform spoofing attacks, bypass security restrictions, obtain sensitive information, gain elevated privileges, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Apple macOS Sonoma Sandbox Restriction Bypass Vulnerability (CVE-2026- 64702):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Security Bypass

2. Apple macOS Tahoe Buffer Overflow Vulnerability (CVE-2026-43750):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution
Vulnerabilities

Apple Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Apple Security Advisory

References

Apple Security Advisory

The post Apple Security Updates – 29 July 2026 appeared first on EG-FinCIRT.

]]> Progress Security Updates – 28 July 2026 https://www.egfincirt.org.eg/progress-security-updates-28-july-2026/ Tue, 28 Jul 2026 07:36:38 +0000 https://www.egfincirt.org.eg/?p=17332 Progress Software Corporation has released security updates to fix several vulnerabilities affecting multiple Progress products. The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, execute arbitrary operating system commands, and potentially gain unauthorized access to the affected system. Sample of the addressed vulnerabilities: 1. Progress Kemp LoadMaster OS Command Injection […]

The post Progress Security Updates – 28 July 2026 appeared first on EG-FinCIRT.

]]>
  • 255/2026
  • High

Progress Software Corporation has released security updates to fix several vulnerabilities affecting multiple Progress products.

The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, execute arbitrary operating system commands, and potentially gain unauthorized access to the affected system.

Sample of the addressed vulnerabilities:

1. Progress Kemp LoadMaster OS Command Injection Vulnerability (CVE-2026-59686):

  • CVSS: 8.4
  • Attack Vector: Adjacent Network
  • Attack Complexity: Low
  • Privileges Required: High
  • User Interaction: None
  • Consequences: Remote Code Execution

2. Progress MOVEit WAF Incorrect Authorization Vulnerability (CVE-2026- 59689):

  • CVSS: 8.0
  • Attack Vector: Adjacent Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Privileges

The affected products:

  • Progress MOVEit WAF.
  • Progress ECS Connection Manager.
  • Progress Connection Manager.
  • Progress Kemp LoadMaster.
  • Progress Multi-Tenant LoadMaster.
Vulnerabilities
  • CVE-2026-59686
  • CVE-2026-59687
  • CVE-2026-59688
  • CVE-2026-59689
  • CVE-2026-59690
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Progress Security Advisory

References

Progress Security Advisory

The post Progress Security Updates – 28 July 2026 appeared first on EG-FinCIRT.

]]> Progress Security Updates – 26 July 2026 https://www.egfincirt.org.eg/progress-security-updates-26-july-2026/ Sun, 26 Jul 2026 07:18:11 +0000 https://www.egfincirt.org.eg/?p=17326 Progress Software Corporation has released security updates to fix multiple vulnerabilities affecting MOVEit transfer. The addressed vulnerabilities could allow the attacker to perform session hijacking or cross-site scripting (CSS) attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary scripts and gain unauthorized access to user accounts on the affected system. Sample of the addressed […]

The post Progress Security Updates – 26 July 2026 appeared first on EG-FinCIRT.

]]>
  • 253/2026
  • High

Progress Software Corporation has released security updates to fix multiple vulnerabilities affecting MOVEit transfer.

The addressed vulnerabilities could allow the attacker to perform session hijacking or cross-site scripting (CSS) attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary scripts and gain unauthorized access to user accounts on the affected system.

Sample of the addressed vulnerabilities:

1. Progress MOVEit Transfer Permissive Cross-Domain Security Policy with Untrusted Domains Vulnerability (CVE-2026-15966):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Security Bypass

2. Progress MOVEit Transfer Improper Neutralization of Input Vulnerability (CVE-2026-15968):

  • CVSS: 7.1
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: Low
  • User Interaction: Required
  • Consequences: Cross-Site Scripting
Vulnerabilities
  • CVE-2026-10697
  • CVE-2026-15966
  • CVE-2026-15967
  • CVE-2026-15968
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Progress Security Advisory

References

Progress Security Advisory

The post Progress Security Updates – 26 July 2026 appeared first on EG-FinCIRT.

]]> Check Point Security Update – 26 July 2026 https://www.egfincirt.org.eg/check-point-security-update-26-july-2026/ Sun, 26 Jul 2026 06:57:46 +0000 https://www.egfincirt.org.eg/?p=17319 Check Point has released a security update to fix multiple vulnerabilities affecting Check Point Security Management, Multi-Domain Security Management, and Security Gateways. The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, or execute arbitrary commands and gain access to the affected system. Sample of the addressed vulnerabilities: 1. Check Point […]

The post Check Point Security Update – 26 July 2026 appeared first on EG-FinCIRT.

]]>
  • 252/2026
  • Critical

Check Point has released a security update to fix multiple vulnerabilities affecting Check Point Security Management, Multi-Domain Security Management, and Security Gateways.

The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, or execute arbitrary commands and gain access to the affected system.

Sample of the addressed vulnerabilities:

1. Check Point SmartConsole Authentication Bypass Vulnerability (CVE-2026-16232):

  • CVSS: 9.3
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

2. Check Point Local Privilege Escalation in Gaia Portal Vulnerability (CVE-2026-62145):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Privileges

It should be highlighted that Checkpoint is aware that the vulnerability “CVE-2026- 16232” is actively exploited in the wild.

Vulnerabilities
  • CVE-2026-16232
  • CVE-2026-62144
  • CVE-2026-62145
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Check Point Security Advisory

References

Check Point Security Advisory

The post Check Point Security Update – 26 July 2026 appeared first on EG-FinCIRT.

]]> Microsoft Security Updates – 26 July 2026 https://www.egfincirt.org.eg/microsoft-security-updates-26-july-2026/ Sun, 26 Jul 2026 06:47:03 +0000 https://www.egfincirt.org.eg/?p=17311 Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to perform spoofing or data tampering attacks, gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Microsoft Azure Key Vault Elevation of Privilege Vulnerability […]

The post Microsoft Security Updates – 26 July 2026 appeared first on EG-FinCIRT.

]]>
  • 251/2026
  • Critical

Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products.

The addressed vulnerabilities could allow the attacker to perform spoofing or data tampering attacks, gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Microsoft Azure Key Vault Elevation of Privilege Vulnerability (CVE-2026-62825):

  • CVSS: 10
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Privileges

2. Microsoft M365 Copilot Remote Code Execution Vulnerability (CVE-2026-50517):

  • CVSS: 9.9
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Remote Code Execution
Vulnerabilities

Microsoft MSRC

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Microsoft MSRC

References

Microsoft MSRC

The post Microsoft Security Updates – 26 July 2026 appeared first on EG-FinCIRT.

]]> Google Chrome Security Update – 26 July 2026 https://www.egfincirt.org.eg/google-chrome-security-update-26-july-2026/ Sun, 26 Jul 2026 06:37:00 +0000 https://www.egfincirt.org.eg/?p=17305 Google has released an updated Chrome version 150.0.7871.186/.187 for Windows and Mac and 150.0.7871.186 for Linux. The addressed vulnerabilities could allow the attacker to bypass security restrictions or execute arbitrary code on the affected systems via a specially crafted HTML page. Sample of the addressed vulnerabilities: Google Chrome Use-After-Free in Blink Vulnerability (CVE-2026-16805): CVSS: 8.8 […]

The post Google Chrome Security Update – 26 July 2026 appeared first on EG-FinCIRT.

]]>
  • 250/2026
  • High

Google has released an updated Chrome version 150.0.7871.186/.187 for Windows and Mac and 150.0.7871.186 for Linux.

The addressed vulnerabilities could allow the attacker to bypass security restrictions or execute arbitrary code on the affected systems via a specially crafted HTML page.

Sample of the addressed vulnerabilities:

Google Chrome Use-After-Free in Blink Vulnerability (CVE-2026-16805):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Remote Code Execution
Vulnerabilities
  • CVE-2026-16804
  • CVE-2026-16805
  • CVE-2026-16806
  • CVE-2026-16807
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Update

References

Google Chrome Security Update

The post Google Chrome Security Update – 26 July 2026 appeared first on EG-FinCIRT.

]]> Google Chrome Security Update – 22 July 2026 https://www.egfincirt.org.eg/google-chrome-security-update-22-july-2026/ Wed, 22 Jul 2026 08:35:50 +0000 https://www.egfincirt.org.eg/?p=17295 Google has released an updated Chrome version 150.0.7871.181/.182 for Windows and Mac and 150.0.7871.181 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial of service and spoofing attacks, bypass security restrictions, obtain sensitive information, trigger memory corruption, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: Google Chrome […]

The post Google Chrome Security Update – 22 July 2026 appeared first on EG-FinCIRT.

]]>
  • 249/2026
  • High

Google has released an updated Chrome version 150.0.7871.181/.182 for Windows and Mac and 150.0.7871.181 for Linux.

The addressed vulnerabilities could allow the attacker to conduct denial of service and spoofing attacks, bypass security restrictions, obtain sensitive information, trigger memory corruption, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

Google Chrome Use After Free in Aura Vulnerability (CVE-2026-15905):

  • CVSS: 7.8
  • Attack Vector: Local
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Denial of Service
Vulnerabilities

Google Chrome Security Update

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Update

References

Google Chrome Security Update

The post Google Chrome Security Update – 22 July 2026 appeared first on EG-FinCIRT.

]]> Aruba Security Updates – 22 July 2026 https://www.egfincirt.org.eg/aruba-security-updates-22-july-2026/ Wed, 22 Jul 2026 08:17:25 +0000 https://www.egfincirt.org.eg/?p=17289 HPE Aruba has released security updates to fix several vulnerabilities across multiple HPE Aruba products and third-party components. The addressed vulnerabilities could allow the attacker to conduct denial-ofservice, cross-site scripting, and server-side request forgery attacks, trigger memory corruption, obtain sensitive information, gain elevated privileges, manipulate files, bypass security restrictions, execute arbitrary code/commands, and gain access […]

The post Aruba Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]>
  • 248/2026
  • High

HPE Aruba has released security updates to fix several vulnerabilities across multiple HPE Aruba products and third-party components.

The addressed vulnerabilities could allow the attacker to conduct denial-ofservice, cross-site scripting, and server-side request forgery attacks, trigger memory corruption, obtain sensitive information, gain elevated privileges, manipulate files, bypass security restrictions, execute arbitrary code/commands, and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. HPE Aruba Networking AOS-CX Low-Privilege Authenticated Buffer Overflow Vulnerability (CVE-2026-44880):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Remote Code Execution

2. HPE Aruba Networking EdgeConnect SD-WAN Gateways Authenticated Path Traversal in Web Interface Vulnerability (CVE-2026-44878):

  • CVSS: 7.2
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: High
  • User Interaction: None
  • Consequences: Obtain Information

Sample of the affected products:

  • Aruba Networking AOS-CX.
  • Aruba Networking EdgeConnect SD-WAN Gateways.
  • HPE Telco Automated Assurance and HPE Telco Intelligent Assurance.
  • HPE Telco Service Orchestrator.
Vulnerabilities

Aruba Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Aruba Security Advisory

References

Aruba Security Advisory

The post Aruba Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]> Oracle Security Patch Updates – 22 July 2026 https://www.egfincirt.org.eg/oracle-security-patch-updates-22-july-2026/ Wed, 22 Jul 2026 07:46:39 +0000 https://www.egfincirt.org.eg/?p=17280 Oracle released its critical patch updates for July 2026, containing 1449 new security patches across multiple affected Oracle products and third-party components. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, bypass security restrictions, perform cross-site-scripting (XSS), server-side-request-forgery (SSRF), and SQL injection attacks, obtain sensitive information, manipulate data, or execute arbitrary code, […]

The post Oracle Security Patch Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]>
  • 247/2026
  • Critical

Oracle released its critical patch updates for July 2026, containing 1449 new security patches across multiple affected Oracle products and third-party components.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, bypass security restrictions, perform cross-site-scripting (XSS), server-side-request-forgery (SSRF), and SQL injection attacks, obtain sensitive information, manipulate data, or execute arbitrary code, and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. Oracle Access Manager Gain Access Vulnerability (CVE-2026-60358):

  • CVSS: 10
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

2. Oracle WebLogic Server Proxy Plug-in Data Modification Vulnerability (CVE- 2026-60365):

  • CVSS: 10
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Data Manipulation
Vulnerabilities
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Oracle Advisory – July 2026

References

The post Oracle Security Patch Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]> SolarWinds Security Updates – 22 July 2026 https://www.egfincirt.org.eg/solarwinds-security-updates-22-july-2026/ Wed, 22 Jul 2026 07:33:42 +0000 https://www.egfincirt.org.eg/?p=17275 SolarWinds has released security updates to address several vulnerabilities affecting multiple SolarWinds products. The addressed vulnerabilities could allow the attacker to perform stored cross-site cripting attacks, gain elevated privileges, manipulate files, or execute arbitrary code, and gain access to the affected systems. Sample of the addressed vulnerabilities: 1. SolarWinds Serv-U Remote Code Execution Vulnerability (CVE-2026-28311): […]

The post SolarWinds Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]>
  • 246/2026
  • Critical

SolarWinds has released security updates to address several vulnerabilities affecting multiple SolarWinds products.

The addressed vulnerabilities could allow the attacker to perform stored cross-site cripting attacks, gain elevated privileges, manipulate files, or execute arbitrary code, and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. SolarWinds Serv-U Remote Code Execution Vulnerability (CVE-2026-28311):

  • CVSS: 9.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: High
  • User Interaction: None
  • Consequences: Remote Code Execution

2. SolarWinds Serv-U Privilege Escalation Vulnerability (CVE-2026-28310):

  • CVSS: 9.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: High
  • User Interaction: None
  • Consequences: Gain Privileges

The affected products:

  • SolarWinds Database Performance Analyzer.
  • SolarWinds Observability Self-Hosted.
  • SolarWinds Serv-U.
Vulnerabilities

SolarWinds Security Updates

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

SolarWinds Security Updates

References

SolarWinds Security Updates

The post SolarWinds Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]> Elastic Security Updates – 22 July 2026 https://www.egfincirt.org.eg/elastic-security-updates-22-july-2026/ Wed, 22 Jul 2026 07:16:11 +0000 https://www.egfincirt.org.eg/?p=17269 Elastic has released security updates to address several vulnerabilities across Elasticsearch and Kibana. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, trigger memory corruption, obtain sensitive information, manipulate data, and perform server-side request forgery (SSRF) attacks on the affected systems. Sample of addressed vulnerabilities: 1. Authorization Bypass Through User-Controlled Key in Kibana […]

The post Elastic Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]>
  • 245/2026
  • High

Elastic has released security updates to address several vulnerabilities across Elasticsearch and Kibana.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, trigger memory corruption, obtain sensitive information, manipulate data, and perform server-side request forgery (SSRF) attacks on the affected systems.

Sample of addressed vulnerabilities:

1. Authorization Bypass Through User-Controlled Key in Kibana Vulnerability (CVE-2026-56147):

  • CVSS: 7.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Obtain Information

2. Allocation of Resources Without Limits or Throttling in Kibana Vulnerability (CVE-2026-42397):

  • CVSS: 6.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Denial of Service
Vulnerabilities

Elastic Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Elastic Security Advisory

References

Elastic Security Advisory

The post Elastic Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]> Mozilla Firefox Security Updates – 22 July 2026 https://www.egfincirt.org.eg/mozilla-firefox-security-updates-22-july-2026/ Wed, 22 Jul 2026 06:27:23 +0000 https://www.egfincirt.org.eg/?p=17262 Mozilla has released security updates to address several vulnerabilities fixed in Firefox 153, Firefox ESR 140.13, and Firefox ESR 115.38. The addressed vulnerabilities could allow the attacker to gain elevated privileges, bypass security restrictions, obtain sensitive information, conduct denial-ofservice attacks, trigger memory corruption, perform spoofing and clickjacking attacks, execute arbitrary code, or gain access to […]

The post Mozilla Firefox Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]>
  • 244/2026
  • Critical

Mozilla has released security updates to address several vulnerabilities fixed in Firefox 153, Firefox ESR 140.13, and Firefox ESR 115.38.

The addressed vulnerabilities could allow the attacker to gain elevated privileges, bypass security restrictions, obtain sensitive information, conduct denial-ofservice attacks, trigger memory corruption, perform spoofing and clickjacking attacks, execute arbitrary code, or gain access to the affected system.

Sample of the addressed vulnerabilities:

1. Mozilla Firefox Memory Safety Bugs Vulnerability (CVE-2026-16361):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

2. Mozilla Firefox Mitigation Bypass in the DOM: Security Component Vulnerability (CVE-2026-16394):

  • CVSS: 9.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Security Bypass
Vulnerabilities

Mozilla Firefox Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Mozilla Firefox Security Advisory

References

Mozilla Firefox Security Advisory

The post Mozilla Firefox Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]> Tenable Security Updates – 21 July 2026 https://www.egfincirt.org.eg/tenable-security-updates-21-july-2026/ Tue, 21 Jul 2026 07:39:50 +0000 https://www.egfincirt.org.eg/?p=17256 Tenable has released security updates to address several vulnerabilities across Tenable Security Center and third-party software components. The addressed vulnerabilities could allow the attacker to perform SQL injection, blind SQL injection, and command injection attacks, obtain sensitive information, manipulate files, bypass security restrictions, or execute arbitrary code, and gain access to the affected system. Sample […]

The post Tenable Security Updates – 21 July 2026 appeared first on EG-FinCIRT.

]]>
  • 243/2026
  • Critical

Tenable has released security updates to address several vulnerabilities across Tenable Security Center and third-party software components.

The addressed vulnerabilities could allow the attacker to perform SQL injection, blind SQL injection, and command injection attacks, obtain sensitive information, manipulate files, bypass security restrictions, or execute arbitrary code, and gain access to the affected system.

Sample of addressed vulnerabilities:

Tenable Security Center SQL Injection Vulnerability (CVE-2026-64877):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Access
Vulnerabilities

Tenable Security Updates

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Tenable Security Updates

References

Tenable Security Updates

The post Tenable Security Updates – 21 July 2026 appeared first on EG-FinCIRT.

]]> WordPress Security Updates – 19 July 2026 https://www.egfincirt.org.eg/wordpress-security-updates-19-july-2026/ Sun, 19 Jul 2026 12:11:07 +0000 https://www.egfincirt.org.eg/?p=17248 WordPress has released security updates to address two vulnerabilities affecting the WordPress Core. The addressed vulnerabilities could allow the attacker to perform SQL injection attacks, which may lead to remote code execution on the affected system. The addressed vulnerabilities: 1. WordPress REST API Batch-Route Confusion Vulnerability (CVE-2026-63030): CVSS: 9.8 Attack Vector: Network Attack Complexity: Low […]

The post WordPress Security Updates – 19 July 2026 appeared first on EG-FinCIRT.

]]>
  • 242/2026
  • Critical

WordPress has released security updates to address two vulnerabilities affecting the WordPress Core.

The addressed vulnerabilities could allow the attacker to perform SQL injection attacks, which may lead to remote code execution on the affected system.

The addressed vulnerabilities:

1. WordPress REST API Batch-Route Confusion Vulnerability (CVE-2026-63030):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

2. WordPress Facilitated SQL Injection Vulnerability (CVE-2026-60137)

  • CVSS: 5.9
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

It should be highlighted that security researchers publicly disclosed a proof-ofconcept (PoC) for the vulnerabilities “CVE-2026-63030” and “CVE-2026-60137” that exist in the wild.

Vulnerabilities
  • CVE-2026-63030
  • CVE-2026-60137
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

WordPress Security Updates

References

WordPress Security Updates

The post WordPress Security Updates – 19 July 2026 appeared first on EG-FinCIRT.

]]>