Announcements Archives - EG-FinCIRT https://www.egfincirt.org.eg/category/announcements/ CYBER SECURITY Sun, 14 Jun 2026 06:38:24 +0000 en-US hourly 1 /wp-content/uploads/2021/06/cropped-EG-FINCIRT-logo-2021-original-32x32.png Announcements Archives - EG-FinCIRT https://www.egfincirt.org.eg/category/announcements/ 32 32 Drupal Security Updates – 21 May 2026 https://egfincirt-wpn.azurewebsites.net/drupal-security-updates-21-may-2026/ Thu, 21 May 2026 07:06:45 +0000 https://www.egfincirt.org.eg/?p=16636 Drupal has released security updates to address several vulnerabilities affecting multiple Drupal products. The addressed vulnerabilities could allow the attacker to conduct cross-site scripting attacks, obtain sensitive information, escalate privileges, manipulate data, execute arbitrary SQL commands, and gain access to the affected products. Samples of the addressed vulnerabilities: 1. Drupal Date iCal Information Disclosure Vulnerability […]

The post Drupal Security Updates – 21 May 2026 appeared first on EG-FinCIRT.

]]>
  • 147/2026
  • Critical

Drupal has released security updates to address several vulnerabilities affecting multiple Drupal products.

The addressed vulnerabilities could allow the attacker to conduct cross-site scripting attacks, obtain sensitive information, escalate privileges, manipulate data, execute arbitrary SQL commands, and gain access to the affected products.

Samples of the addressed vulnerabilities:

1. Drupal Date iCal Information Disclosure Vulnerability (CVE-2026-8495):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Obtain Information

2. Drupal Core SQL Injection Vulnerability (CVE-2026-9082):

  • CVSS: 6.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

The affected products:

  • Drupal core.
  • Drupal Date iCal.
  • Drupal Colorbox Inline.
  • Translate Drupal with GTranslate.
  • Drupal Node View Permissions.
Vulnerabilities
  • CVE-2026-8491
  • CVE-2026-8492
  • CVE-2026-8493
  • CVE-2026-8495
  • CVE-2026-9082
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Drupal Security Advisory

References

Drupal Security Advisory

The post Drupal Security Updates – 21 May 2026 appeared first on EG-FinCIRT.

]]> Mozilla Firefox Security Updates – 21 May 2026 https://egfincirt-wpn.azurewebsites.net/mozilla-firefox-security-updates-21-may-2026/ Thu, 21 May 2026 06:56:02 +0000 https://www.egfincirt.org.eg/?p=16631 Mozilla has released an updated Firefox version 151, Firefox ESR versions 115.36 and 140.11 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to conduct denial-of- service and spoofing attacks, obtain sensitive information, bypass security restrictions, gain elevated privileges, execute arbitrary code, and gain access to the affected system. Sample of the […]

The post Mozilla Firefox Security Updates – 21 May 2026 appeared first on EG-FinCIRT.

]]>
  • 146/2026
  • Critical

Mozilla has released an updated Firefox version 151, Firefox ESR versions 115.36 and 140.11 to fix multiple vulnerabilities.

The addressed vulnerabilities could allow the remote attacker to conduct denial-of- service and spoofing attacks, obtain sensitive information, bypass security restrictions, gain elevated privileges, execute arbitrary code, and gain access to the affected system.

Sample of the addressed vulnerabilities:

1. Mozilla Firefox Sandbox Escape in the Profile Backup Component Vulnerability (CVE-2026-8401):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Bypass Security

2. Mozilla Firefox Privilege Escalation in the Security Component Vulnerability (CVE-2026-8970):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Gain Privileges
Vulnerabilities

Mozilla Firefox Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Mozilla Firefox Security Advisory

References

Mozilla Firefox Security Advisory

The post Mozilla Firefox Security Updates – 21 May 2026 appeared first on EG-FinCIRT.

]]> Cisco Security Updates – 21 May 2026 https://egfincirt-wpn.azurewebsites.net/cisco-security-updates-21-may-2026/ Thu, 21 May 2026 06:46:55 +0000 https://www.egfincirt.org.eg/?p=16625 Cisco has released security updates to address several vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, obtain sensitive information, make configuration changes across tenant boundaries with the privileges of the Site Admin user, execute arbitrary code/commands, and gain access to the affected systems. Sample of addressed vulnerabilities: […]

The post Cisco Security Updates – 21 May 2026 appeared first on EG-FinCIRT.

]]>
  • 145/2026
  • Critical

Cisco has released security updates to address several vulnerabilities affecting multiple Cisco products.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, obtain sensitive information, make configuration changes across tenant boundaries with the privileges of the Site Admin user, execute arbitrary code/commands, and gain access to the affected systems.

Sample of addressed vulnerabilities:

1. Cisco Secure Workload Unauthorized API Access Vulnerability (CVE-2026-20223):

  • CVSS: 10
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

2. Cisco Nexus 3000 and 9000 Series Switches Border Gateway Protocol Denial of Service Vulnerability (CVE-2026-20171):

  • CVSS: 6.8
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial of Service

The affected products:

  • Cisco Secure Workload Cluster Software.
  • Cisco ThousandEyes Virtual Appliance.
  • Cisco ThousandEyes BrowserBot.
  • Cisco Nexus 3000 Series and 9000 Series Switches.
Vulnerabilities
  • CVE-2026-20223
  • CVE-2026-20199
  • CVE-2026-20206
  • CVE-2026-20171
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Cisco Security Updates

References

Cisco Security Updates

The post Cisco Security Updates – 21 May 2026 appeared first on EG-FinCIRT.

]]> Microsoft Security Update -19 May 2026 https://egfincirt-wpn.azurewebsites.net/microsoft-security-update-19-may-2026/ Tue, 19 May 2026 08:37:51 +0000 https://www.egfincirt.org.eg/?p=16605 Microsoft has released a security update to address a critical vulnerability affecting multiple Microsoft Azure products. The addressed vulnerability could allow the remote unauthorized attacker to elevate privileges over a network. The addressed vulnerability: Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability (CVE-2026-42822): CVSS: 10.0 Attack Vector: Network Attack Complexity: Low Privileges Required: None […]

The post Microsoft Security Update -19 May 2026 appeared first on EG-FinCIRT.

]]>
  • 142/2026
  • Critical

Microsoft has released a security update to address a critical vulnerability affecting multiple Microsoft Azure products.

The addressed vulnerability could allow the remote unauthorized attacker to elevate privileges over a network.

The addressed vulnerability:

Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability (CVE-2026-42822):

  • CVSS: 10.0
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Privileges

The affected products:

  • Azure Resource Manager.
  • Azure Local.
Vulnerabilities

CVE-2026-42822

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Microsoft MSRC

References

Microsoft MSRC

The post Microsoft Security Update -19 May 2026 appeared first on EG-FinCIRT.

]]> Google Chrome Security Updates – 18 May 2026 https://egfincirt-wpn.azurewebsites.net/google-chrome-security-updates-18-may-2026/ Mon, 18 May 2026 08:21:27 +0000 https://www.egfincirt.org.eg/?p=16599 Google has released an updated Chrome version 148.0.7778.167/168 for Windows and Mac, and version 148.0.7778.167 for Linux. The addressed vulnerabilities could allow the attacker to bypass security restrictions, perform denial-of-service attacks, gain elevated privileges, obtain sensitive information, manipulate data, or execute arbitrary code and gain access to the affected systems. Sample of the addressed vulnerabilities: […]

The post Google Chrome Security Updates – 18 May 2026 appeared first on EG-FinCIRT.

]]>
  • 141/2026
  • Critical

Google has released an updated Chrome version 148.0.7778.167/168 for Windows and Mac, and version 148.0.7778.167 for Linux.

The addressed vulnerabilities could allow the attacker to bypass security restrictions, perform denial-of-service attacks, gain elevated privileges, obtain sensitive information, manipulate data, or execute arbitrary code and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. Google Chrome UI Use-After-Free Vulnerability (CVE-2026-8511):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Security Bypass

2. Google Chrome Skia Integer Overflow Vulnerability (CVE-2026-8510):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Data Manipulation
Vulnerabilities

Google Chrome Security Updates

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Updates

References

Google Chrome Security Updates

The post Google Chrome Security Updates – 18 May 2026 appeared first on EG-FinCIRT.

]]> Apache Tomcat Security Update – 17 May 2026 https://egfincirt-wpn.azurewebsites.net/apache-tomcat-security-update-17-may-2026/ Sun, 17 May 2026 06:02:17 +0000 https://www.egfincirt.org.eg/?p=16578 Apache Tomcat has released a security update to address several vulnerabilities affecting Apache Tomcat. The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, obtain sensitive information, bypass security restrictions, or gain access to the affected system. Sample of the addressed vulnerabilities: 1. Apache Tomcat Digest Authentication Bypass Vulnerability (CVE-2026- 43512): CVSS: 9.8 Attack […]

The post Apache Tomcat Security Update – 17 May 2026 appeared first on EG-FinCIRT.

]]>
  • 138/202
  • Critical

Apache Tomcat has released a security update to address several vulnerabilities affecting Apache Tomcat.

The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, obtain sensitive information, bypass security restrictions, or gain access to the affected system.

Sample of the addressed vulnerabilities:

1. Apache Tomcat Digest Authentication Bypass Vulnerability (CVE-2026- 43512):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

2. Apache Tomcat HTTP/2 Request Header Validation Vulnerability (CVE-2026- 41293):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Bypass Security
Vulnerabilities
  • CVE-2026-43512
  • CVE-2026-43513
  • CVE-2026-43514
  • CVE-2026-43515
  • CVE-2026-42498
  • CVE-2026-41293
  • CVE-2026-41284
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Apache Tomcat Security Advisory

References

Apache Tomcat Security Advisory

The post Apache Tomcat Security Update – 17 May 2026 appeared first on EG-FinCIRT.

]]> Microsoft Security Update – 15 May 2026 https://egfincirt-wpn.azurewebsites.net/microsoft-security-update-15-may-2026/ Fri, 15 May 2026 12:38:26 +0000 https://www.egfincirt.org.eg/?p=16566 Microsoft has released a security update to address a vulnerability affecting Microsoft Exchange Server. The addressed vulnerability could allow attackers to conduct spoofing attacks through a cross-site scripting (XSS) flaw, potentially leading to the execution of arbitrary JavaScript code within the victim’s web browser context. The addressed vulnerability: Microsoft Exchange Server 2016 Spoofing Vulnerability (CVE-2026-42897): […]

The post Microsoft Security Update – 15 May 2026 appeared first on EG-FinCIRT.

]]>
  • 136/2026
  • High

Microsoft has released a security update to address a vulnerability affecting Microsoft Exchange Server.

The addressed vulnerability could allow attackers to conduct spoofing attacks through a cross-site scripting (XSS) flaw, potentially leading to the execution of arbitrary JavaScript code within the victim’s web browser context.

The addressed vulnerability:

Microsoft Exchange Server 2016 Spoofing Vulnerability (CVE-2026-42897):

  • CVSS: 8.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Cross-Site Scripting

The affected products:

  • Microsoft Exchange Server 2016.
  • Microsoft Exchange Server 2019.
  • Microsoft Exchange Server Subscription Edition RTM.

It should be highlighted that Microsoft is aware that the vulnerability “CVE-2026- 42897” is being exploited in the wild.

Vulnerabilities

CVE-2026-42897

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Microsoft MSRC

References

Microsoft MSRC

The post Microsoft Security Update – 15 May 2026 appeared first on EG-FinCIRT.

]]> Cisco Security Updates – 15 May 2026 https://egfincirt-wpn.azurewebsites.net/cisco-security-updates-15-may-2026/ Fri, 15 May 2026 12:26:48 +0000 https://www.egfincirt.org.eg/?p=16560 Cisco has released security updates to address several vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to obtain sensitive information, gain elevated privileges, bypass security restrictions, and gain access to the affected systems. Sample of addressed vulnerabilities: 1. Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability (CVE- 2026-20182): CVSS: 10 Attack Vector: […]

The post Cisco Security Updates – 15 May 2026 appeared first on EG-FinCIRT.

]]>
  • 135/2026
  • Critical

Cisco has released security updates to address several vulnerabilities affecting multiple Cisco products.

The addressed vulnerabilities could allow the attacker to obtain sensitive information, gain elevated privileges, bypass security restrictions, and gain access to the affected systems.

Sample of addressed vulnerabilities:

1. Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability (CVE- 2026-20182):

  • CVSS: 10
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Security Bypass

2. Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability (CVE-2026-20224):

  • CVSS: 8.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Obtain Information

The affected products:

  • Cisco Catalyst SD-WAN Controller.
  • Cisco Catalyst SD-WAN Manager.

It should be highlighted that Cisco is aware that the vulnerability “CVE-2026- 20182” is being exploited in the wild.

Vulnerabilities
  • CVE-2026-20182
  • CVE-2026-20224
  • CVE-2026-20209
  • CVE-2026-20210
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Cisco Security Updates

References

Cisco Security Updates

The post Cisco Security Updates – 15 May 2026 appeared first on EG-FinCIRT.

]]> F5 Security Updates – 14 May 2026 https://egfincirt-wpn.azurewebsites.net/f5-security-updates-14-may-2026/ Thu, 14 May 2026 10:33:02 +0000 https://www.egfincirt.org.eg/?p=16527 F5 has released security updates to address several vulnerabilities affecting multiple F5 products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service and man-in-the-middle attacks, gain elevated privileges, bypass security restrictions, manipulate files, perform cross-site request forgery (CSRF) attacks, obtain sensitive information, execute arbitrary code/commands, and gain access to the affected systems. Sample of […]

The post F5 Security Updates – 14 May 2026 appeared first on EG-FinCIRT.

]]>
  • 129/2026
  • Critical

F5 has released security updates to address several vulnerabilities affecting multiple F5 products.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service and man-in-the-middle attacks, gain elevated privileges, bypass security restrictions, manipulate files, perform cross-site request forgery (CSRF) attacks, obtain sensitive information, execute arbitrary code/commands, and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. BIG-IP iControl REST Vulnerability (CVE-2026-41225):

  • CVSS: 9.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: High
  • User Interaction: None
  • Consequences: Security Bypass

2. BIG-IP and BIG-IQ Configuration Utility Vulnerability (CVE-2026-41957):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Access

Sample of the affected products:

  • BIG-IP and BIG-IP PEM.
  • BIG-IQ.
  • NGINX Plus, NGINX Open Source, and NGINX Instance Manager.
  • F5 WAF for NGINX.
  • NGINX Ingress Controller.
Vulnerabilities

F5 Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

F5 Security Advisory

References

F5 Security Advisory

The post F5 Security Updates – 14 May 2026 appeared first on EG-FinCIRT.

]]> Intel Security Updates – 13 May 2026 https://egfincirt-wpn.azurewebsites.net/intel-security-updates-13-may-2026/ Wed, 13 May 2026 10:35:06 +0000 https://www.egfincirt.org.eg/?p=16522 Intel has released security updates to address several vulnerabilities in multiple Intel products. The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, or perform denial-of-service attacks on the affected product. Samples of the addressed vulnerabilities: 1. Intel® Data Center Graphics Driver for VMware ESXi Buffer Overflow Vulnerability (CVE-2026-20794): CVSS: 9.3 […]

The post Intel Security Updates – 13 May 2026 appeared first on EG-FinCIRT.

]]>
  • 128/2026
  • Critical

Intel has released security updates to address several vulnerabilities in multiple Intel products.

The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, or perform denial-of-service attacks on the affected product.

Samples of the addressed vulnerabilities:

1. Intel® Data Center Graphics Driver for VMware ESXi Buffer Overflow Vulnerability (CVE-2026-20794):

  • CVSS: 9.3
  • Attack Vector: Local
  • Attack Complexity: Low
  • Privileges Required: High
  • User Interaction: None
  • Consequences: Gain Privileges

2. Intel Vision Software Improper Access Control Vulnerability (CVE-2026-20887):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial of Service

Sample of the affected products:

  • Intel Vision software.
  • AI Playground.
  • Intel® EMA.
  • Intel® Connectivity Performance Suite.
  • Intel® Xeon® D-1800 and D-2800 processors.
Vulnerabilities

Intel Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Intel Security Advisory

References

Intel Security Advisory

The post Intel Security Updates – 13 May 2026 appeared first on EG-FinCIRT.

]]> Ivanti Security Updates – 13 May 2026 https://egfincirt-wpn.azurewebsites.net/ivanti-security-updates-13-may-2026/ Wed, 13 May 2026 10:14:26 +0000 https://www.egfincirt.org.eg/?p=16509 Ivanti has released security updates to fix several vulnerabilities across multiple Ivanti products. The addressed vulnerabilities could allow the attacker to obtain sensitive information, gain elevated privileges, perform SQL injection attacks, manipulate data, or conduct remote code execution attacks. Sample of the addressed vulnerabilities: 1. Ivanti Xtraction Information Disclosure Vulnerability (CVE-2026-8043): CVSS: 9.6 Attack Vector: […]

The post Ivanti Security Updates – 13 May 2026 appeared first on EG-FinCIRT.

]]>
  • 126/2026
  • Critical

Ivanti has released security updates to fix several vulnerabilities across multiple Ivanti products.

The addressed vulnerabilities could allow the attacker to obtain sensitive information, gain elevated privileges, perform SQL injection attacks, manipulate data, or conduct remote code execution attacks.

Sample of the addressed vulnerabilities:

1. Ivanti Xtraction Information Disclosure Vulnerability (CVE-2026-8043):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Obtain Information

2. Ivanti Endpoint Manager SQL Injection in The Web Console Vulnerability (CVE-2026-8111):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Remote Code Execution

The affected products:

  • Ivanti Endpoint Manager (EPM).
  • Ivanti Virtual Traffic Manager.
  • Ivanti Secure Access Client.
  • Ivanti Xtraction.
Vulnerabilities
  • CVE-2026-7432
  • CVE-2026-7431
  • CVE-2026-8051
  • CVE-2026-8111
  • CVE-2026-8110
  • CVE-2026-8109
  • CVE-2026-8043
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Ivanti Security Advisory

References

Ivanti Security Advisory

The post Ivanti Security Updates – 13 May 2026 appeared first on EG-FinCIRT.

]]> Microsoft May 2026 Patch Tuesday https://egfincirt-wpn.azurewebsites.net/microsoft-may-2026-patch-tuesday/ Wed, 13 May 2026 10:07:02 +0000 https://www.egfincirt.org.eg/?p=16503 Microsoft has released its monthly patch of security updates, known as Patch Tuesday. The mentioned patch addressed 120 flaws across multiple products. Microsoft has addressed multiple vulnerabilities in this release that could allow attackers to gain elevated privileges, perform spoofing attacks, bypass security restrictions, obtain sensitive information, conduct denial-of-service attacks, or execute arbitrary code and […]

The post Microsoft May 2026 Patch Tuesday appeared first on EG-FinCIRT.

]]>
  • 125/2026
  • Critical

Microsoft has released its monthly patch of security updates, known as Patch Tuesday. The mentioned patch addressed 120 flaws across multiple products. Microsoft has addressed multiple vulnerabilities in this release that could allow attackers to gain elevated privileges, perform spoofing attacks, bypass security restrictions, obtain sensitive information, conduct denial-of-service attacks, or execute arbitrary code and gain access to the affected systems.

May’s Patch Tuesday was released to fix security flaws in several Microsoft products, such as Microsoft .NET, Azure Monitor Agent, Windows Admin Center, Microsoft Visual Studio and Visual Studio Code, Power Automate, Microsoft Edge, Windows TCP/IP, Windows Kernel, Windows Hyper-V, Microsoft Teams, Microsoft SQL Server, Windows Admin Center, and Microsoft Office.

Sample of the addressed vulnerabilities:

1. Azure Logic Apps Elevation of Privilege Vulnerability (CVE-2026-42823):

  • CVSS: 9.9
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Privileges

2. Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability (CVE-2026-42898):

  • CVSS: 9.9
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Access
Vulnerabilities

Microsoft MSRC

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Microsoft MSRC

References

Microsoft MSRC

The post Microsoft May 2026 Patch Tuesday appeared first on EG-FinCIRT.

]]> Fortinet Security Updates – 13 May 2026 https://egfincirt-wpn.azurewebsites.net/fortinet-security-updates-13-may-2026/ Wed, 13 May 2026 09:51:06 +0000 https://www.egfincirt.org.eg/?p=16498 Fortinet has released security updates to fix several vulnerabilities affecting multiple Fortinet products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, bypass security restrictions, obtain sensitive information, gain elevated privileges, execute unauthorized code or commands, and gain access to the affected system via specially crafted requests. Sample of the addressed vulnerabilities: 1. […]

The post Fortinet Security Updates – 13 May 2026 appeared first on EG-FinCIRT.

]]>
  • 124/2026
  • Critical

Fortinet has released security updates to fix several vulnerabilities affecting multiple Fortinet products.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, bypass security restrictions, obtain sensitive information, gain elevated privileges, execute unauthorized code or commands, and gain access to the affected system via specially crafted requests.

Sample of the addressed vulnerabilities:

1. Fortinet FortiAuthenticator Improper Access Control Vulnerability in API Endpoints (CVE-2026-44277):

  • CVSS: 9.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

2. FortiOS CAPWAP Daemon Out-of-Bounds Write Vulnerability (CVE-2025- 53844):

  • CVSS: 8.3
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Privileges

Sample of the affected products:

  • FortiAuthenticator.
  • FortiAnalyzer.
  • FortiManager.
  • FortiClientWindows.
  • FortiOS.
Vulnerabilities
  • CVE-2026-25088
  • CVE-2025-53681
  • CVE-2025-53844
  • CVE-2026-44279
  • CVE-2025-53870
  • CVE-2026-26083
  • CVE-2026-44277
  • CVE-2026-44278
  • CVE-2026-25690
  • CVE-2025-67604
  • CVE-2025-53680
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Fortinet Security Advisory

References

Fortinet Security Advisory

The post Fortinet Security Updates – 13 May 2026 appeared first on EG-FinCIRT.

]]> SAP Security Patch Day May 2026 https://egfincirt-wpn.azurewebsites.net/sap-security-patch-day-may-2026/ Tue, 12 May 2026 09:22:31 +0000 https://www.egfincirt.org.eg/?p=16486 SAP has released security updates to address several vulnerabilities affecting multiple SAP products. SAP has released security updates to address vulnerabilities across multiple SAP products, including SAP S/4HANA, SAP BusinessObjects Business Intelligence Platform, SAP NetWeaver Application Server, SAP Commerce Cloud, SAP HANA, SAP Financial Consolidation, and SAP Incentive and Commission Management. The addressed vulnerabilities could […]

The post SAP Security Patch Day May 2026 appeared first on EG-FinCIRT.

]]>
  • 122/2026
  • Critical

SAP has released security updates to address several vulnerabilities affecting multiple SAP products.

SAP has released security updates to address vulnerabilities across multiple SAP products, including SAP S/4HANA, SAP BusinessObjects Business Intelligence Platform, SAP NetWeaver Application Server, SAP Commerce Cloud, SAP HANA, SAP Financial Consolidation, and SAP Incentive and Commission Management.

The addressed vulnerabilities could allow attackers to execute arbitrary SQL commands, obtain sensitive information, manipulate data, perform cross-site request forgery (CSRF) and cross-site scripting (XSS) attacks, bypass security restrictions, conduct denial-of-service (DoS) attacks, execute arbitrary code, and gain unauthorized access to the affected systems.

Sample of the addressed vulnerabilities:

1. SAP S/4HANA (SAP Enterprise Search for ABAP) SQL Injection Vulnerability (CVE-2026-34260):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Obtain Information

2. SAP Commerce Cloud Configuration Missing Authorization Check Vulnerability (CVE-2026-34263):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Gain Access
Vulnerabilities

SAP Security Patch Day May 2026

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

SAP Security Patch Day May 2026

References

SAP Security Patch Day May 2026

The post SAP Security Patch Day May 2026 appeared first on EG-FinCIRT.

]]> Mozilla Firefox Security Updates – 10 May 2026 https://egfincirt-wpn.azurewebsites.net/mozilla-firefox-security-updates-10-may-2026/ Sun, 10 May 2026 08:19:06 +0000 https://www.egfincirt.org.eg/?p=16458 Mozilla has released an updated Firefox version 150.0.2, Firefox ESR versions 115.35.2 and 140.10.2 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the remote attacker to perform denial-of- service attacks, execute arbitrary code, and gain access to the affected systems. Sample of the addressed vulnerabilities: 1. Mozilla Firefox Incorrect Boundary Conditions in The Audio/Video: […]

The post Mozilla Firefox Security Updates – 10 May 2026 appeared first on EG-FinCIRT.

]]>
  • 118/2026
  • Critical

Mozilla has released an updated Firefox version 150.0.2, Firefox ESR versions 115.35.2 and 140.10.2 to fix multiple vulnerabilities.

The addressed vulnerabilities could allow the remote attacker to perform denial-of- service attacks, execute arbitrary code, and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. Mozilla Firefox Incorrect Boundary Conditions in The Audio/Video: Playback Component (CVE-2026-8091):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial-of-Service

2. Mozilla Firefox Use-after-free in the DOM: Networking Component (CVE- 2026-8090):

  • CVSS: 7.3
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access
Vulnerabilities
  • CVE-2026-8090
  • CVE-2026-8091
  • CVE-2026-8092
  • CVE-2026-8093
  • CVE-2026-8094
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Mozilla Firefox Security Advisory

References

Mozilla Firefox Security Advisory

The post Mozilla Firefox Security Updates – 10 May 2026 appeared first on EG-FinCIRT.

]]> Microsoft Security Updates – 10 May 2026 https://egfincirt-wpn.azurewebsites.net/microsoft-security-updates-10-may-2026/ Sun, 10 May 2026 07:42:05 +0000 https://www.egfincirt.org.eg/?p=16452 Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to obtain sensitive information, conduct spoofing attacks, execute arbitrary code, or gain elevated privileges on the affected systems. Sample of the addressed vulnerabilities: 1. Microsoft Azure DevOps Information Disclosure Vulnerability (CVE-2026- 42826): CVSS: 10.0 Attack […]

The post Microsoft Security Updates – 10 May 2026 appeared first on EG-FinCIRT.

]]>
  • 117/2026
  • Critical

Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products.

The addressed vulnerabilities could allow the attacker to obtain sensitive information, conduct spoofing attacks, execute arbitrary code, or gain elevated privileges on the affected systems.

Sample of the addressed vulnerabilities:

1. Microsoft Azure DevOps Information Disclosure Vulnerability (CVE-2026- 42826):

  • CVSS: 10.0
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Obtain Information

2. Microsoft Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability (CVE-2026-33109):

  • CVSS: 9.9
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Remote Code Execution

Sample of the affected products:

  • Azure DevOps.
  • Microsoft Teams.
  • Microsoft Enterprise Security Token Service (ESTS).
  • Azure Managed Instance for Apache Cassandra.
  • Copilot Chat (Microsoft Edge).
  • Microsoft 365 Copilot’s Business Chat.
Vulnerabilities
  • CVE-2026-42826
  • CVE-2026-35428
  • CVE-2026-35435
  • CVE-2026-34327
  • CVE-2026-33844
  • CVE-2026-33823
  • CVE-2026-32207
  • CVE-2026-40379
  • CVE-2026-33109
  • CVE-2026-33111
  • CVE-2026-41105
  • CVE-2026-26129
  • CVE-2026-26164
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Microsoft MSRC

References

Microsoft MSRC

The post Microsoft Security Updates – 10 May 2026 appeared first on EG-FinCIRT.

]]> Palo Alto Security Update – 06 May 2026 https://egfincirt-wpn.azurewebsites.net/palo-alto-security-update-06-may-2026/ Wed, 06 May 2026 06:41:43 +0000 https://www.egfincirt.org.eg/?p=16440 Palo Alto Networks has released a security update to address a critical vulnerability affecting Palo Alto PAN-OS versions 12.1, 11.2, 11.1, and 10.2. The addressed vulnerability could allow the remote attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. The addressed vulnerability: PAN-OS: Unauthenticated User-Initiated […]

The post Palo Alto Security Update – 06 May 2026 appeared first on EG-FinCIRT.

]]>
  • 115/2026
  • Critical

Palo Alto Networks has released a security update to address a critical vulnerability affecting Palo Alto PAN-OS versions 12.1, 11.2, 11.1, and 10.2.

The addressed vulnerability could allow the remote attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.

The addressed vulnerability:

PAN-OS: Unauthenticated User-Initiated Buffer Overflow Vulnerability in User- ID Authentication Portal (CVE-2026-0300):

  • CVSS: 9.3
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

It should be highlighted that Palo Alto Networks is aware that the vulnerability “CVE-2026-0300” is being exploited in the wild.

Vulnerabilities

CVE-2026-0300

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Palo Alto Security Advisory

References

Palo Alto Security Advisory

The post Palo Alto Security Update – 06 May 2026 appeared first on EG-FinCIRT.

]]> OpenSSL Security Updates – 05 May 2026 https://egfincirt-wpn.azurewebsites.net/openssl-security-updates-05-may-2026/ Tue, 05 May 2026 11:33:54 +0000 https://www.egfincirt.org.eg/?p=16434 OpenSSL has released security updates to address several vulnerabilities affecting OpenSSL Software Services. The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, execute arbitrary code, or obtain sensitive information from the affected system. Sample of the addressed vulnerabilities: 1. OpenSSL Hexadecimal Conversion Heap Buffer Overflow Vulnerability (CVE- 2026-31789): CVSS: 9.8 Attack Vector: Network […]

The post OpenSSL Security Updates – 05 May 2026 appeared first on EG-FinCIRT.

]]>
  • 114/2026
  • Critical

OpenSSL has released security updates to address several vulnerabilities affecting OpenSSL Software Services.

The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, execute arbitrary code, or obtain sensitive information from the affected system.

Sample of the addressed vulnerabilities:

1. OpenSSL Hexadecimal Conversion Heap Buffer Overflow Vulnerability (CVE- 2026-31789):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

2. OpenSSL Out-of-Bounds Read in AES-CFB-128 Vulnerability (CVE-2026- 28386):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial of Service
Vulnerabilities
  • CVE-2026-28386
  • CVE-2026-28387
  • CVE-2026-28388
  • CVE-2026-28389
  • CVE-2026-28390
  • CVE-2026-31789
  • CVE-2026-31790
  • CVE-2026-2673
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

OpenSSL Security Updates

References

OpenSSL Security Updates

The post OpenSSL Security Updates – 05 May 2026 appeared first on EG-FinCIRT.

]]> Progress Security Update – 03 May 2026 https://egfincirt-wpn.azurewebsites.net/progress-security-update-03-may-2026/ Sun, 03 May 2026 08:25:27 +0000 https://www.egfincirt.org.eg/?p=16421 Progress Software Corporation has released a security update to fix two vulnerabilities affecting MOVEit Automation. The addressed vulnerabilities could allow the attacker to gain elevated privileges or bypass authentication and gain access to the affected system. The addressed vulnerabilities: 1. Progress MOVEit Automation Authentication Bypass Vulnerability (CVE- 2026-4670): CVSS: 9.8 Attack Vector: Network Attack Complexity: […]

The post Progress Security Update – 03 May 2026 appeared first on EG-FinCIRT.

]]>
  • 111/2026
  • Critical

Progress Software Corporation has released a security update to fix two vulnerabilities affecting MOVEit Automation.

The addressed vulnerabilities could allow the attacker to gain elevated privileges or bypass authentication and gain access to the affected system.

The addressed vulnerabilities:

1. Progress MOVEit Automation Authentication Bypass Vulnerability (CVE- 2026-4670):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

2. Progress MOVEit Automation Privilege Escalation Vulnerability (CVE-2026-5174):

  • CVSS: 7.7
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Privileges
Vulnerabilities
  • CVE-2026-4670
  • CVE-2026-5174
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Progress Security Advisory

References

Progress Security Advisory

The post Progress Security Update – 03 May 2026 appeared first on EG-FinCIRT.

]]> Apache Tomcat Security Update – 03 May 2026 https://egfincirt-wpn.azurewebsites.net/apache-tomcat-security-update-03-may-2026/ Sun, 03 May 2026 08:03:17 +0000 https://www.egfincirt.org.eg/?p=16409 Apache Tomcat has released a security update to address several vulnerabilities affecting Apache Tomcat. The addressed vulnerabilities could allow the attacker to bypass security restrictions, perform request smuggling attacks, obtain sensitive information from server logs, or redirect victims to attacker-controlled sites to perform phishing or other social engineering attacks. Sample of the addressed vulnerabilities: 1. […]

The post Apache Tomcat Security Update – 03 May 2026 appeared first on EG-FinCIRT.

]]>
  • 110/2026
  • Critical

Apache Tomcat has released a security update to address several vulnerabilities affecting Apache Tomcat.

The addressed vulnerabilities could allow the attacker to bypass security restrictions, perform request smuggling attacks, obtain sensitive information from server logs, or redirect victims to attacker-controlled sites to perform phishing or other social engineering attacks.

Sample of the addressed vulnerabilities:

1. Apache Tomcat OSCP Checks Authentication Bypass Vulnerability (CVE-2026-29145):

  • CVSS: 9.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Bypass Security

2. Apache Tomcat Kubernetes Bearer Tokens Exposure Vulnerability (CVE-2026-34487):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Obtain Information
Vulnerabilities
  • CVE-2026-24734
  • CVE-2026-24880
  • CVE-2026-25854
  • CVE-2026-29129
  • CVE-2026-29145
  • CVE-2026-29146
  • CVE-2026-32990
  • CVE-2026-34483
  • CVE-2026-34486
  • CVE-2026-34487
  • CVE-2026-34500
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Apache Tomcat Security Advisory

References

Apache Tomcat Security Advisory

The post Apache Tomcat Security Update – 03 May 2026 appeared first on EG-FinCIRT.

]]>