EG-FinCIRT https://www.egfincirt.org.eg/ CYBER SECURITY Thu, 22 Oct 2026 06:56:32 +0000 en-US hourly 1 /wp-content/uploads/2021/06/cropped-EG-FINCIRT-logo-2021-original-32x32.png EG-FinCIRT https://www.egfincirt.org.eg/ 32 32 Apple Security Updates – 29 July 2026 https://www.egfincirt.org.eg/apple-security-updates-29-july-2026/ Wed, 29 Jul 2026 06:49:25 +0000 https://www.egfincirt.org.eg/?p=17337 Apple has released security updates to address several vulnerabilities across macOS Tahoe, Sequoia, Sonoma and Safari. The addressed vulnerabilities could allow the attacker to conduct denial-ofservice (DoS) attacks, trigger process or kernel memory corruption, perform spoofing attacks, bypass security restrictions, obtain sensitive information, gain elevated privileges, or execute arbitrary code on the affected systems. Sample […]

The post Apple Security Updates – 29 July 2026 appeared first on EG-FinCIRT.

]]>
  • 256/2026
  • Critical

Apple has released security updates to address several vulnerabilities across macOS Tahoe, Sequoia, Sonoma and Safari.

The addressed vulnerabilities could allow the attacker to conduct denial-ofservice (DoS) attacks, trigger process or kernel memory corruption, perform spoofing attacks, bypass security restrictions, obtain sensitive information, gain elevated privileges, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Apple macOS Sonoma Sandbox Restriction Bypass Vulnerability (CVE-2026- 64702):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Security Bypass

2. Apple macOS Tahoe Buffer Overflow Vulnerability (CVE-2026-43750):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution
Vulnerabilities

Apple Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Apple Security Advisory

References

Apple Security Advisory

The post Apple Security Updates – 29 July 2026 appeared first on EG-FinCIRT.

]]> Progress Security Updates – 28 July 2026 https://www.egfincirt.org.eg/progress-security-updates-28-july-2026/ Tue, 28 Jul 2026 07:36:38 +0000 https://www.egfincirt.org.eg/?p=17332 Progress Software Corporation has released security updates to fix several vulnerabilities affecting multiple Progress products. The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, execute arbitrary operating system commands, and potentially gain unauthorized access to the affected system. Sample of the addressed vulnerabilities: 1. Progress Kemp LoadMaster OS Command Injection […]

The post Progress Security Updates – 28 July 2026 appeared first on EG-FinCIRT.

]]>
  • 255/2026
  • High

Progress Software Corporation has released security updates to fix several vulnerabilities affecting multiple Progress products.

The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, execute arbitrary operating system commands, and potentially gain unauthorized access to the affected system.

Sample of the addressed vulnerabilities:

1. Progress Kemp LoadMaster OS Command Injection Vulnerability (CVE-2026-59686):

  • CVSS: 8.4
  • Attack Vector: Adjacent Network
  • Attack Complexity: Low
  • Privileges Required: High
  • User Interaction: None
  • Consequences: Remote Code Execution

2. Progress MOVEit WAF Incorrect Authorization Vulnerability (CVE-2026- 59689):

  • CVSS: 8.0
  • Attack Vector: Adjacent Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Privileges

The affected products:

  • Progress MOVEit WAF.
  • Progress ECS Connection Manager.
  • Progress Connection Manager.
  • Progress Kemp LoadMaster.
  • Progress Multi-Tenant LoadMaster.
Vulnerabilities
  • CVE-2026-59686
  • CVE-2026-59687
  • CVE-2026-59688
  • CVE-2026-59689
  • CVE-2026-59690
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Progress Security Advisory

References

Progress Security Advisory

The post Progress Security Updates – 28 July 2026 appeared first on EG-FinCIRT.

]]> Progress Security Updates – 26 July 2026 https://www.egfincirt.org.eg/progress-security-updates-26-july-2026/ Sun, 26 Jul 2026 07:18:11 +0000 https://www.egfincirt.org.eg/?p=17326 Progress Software Corporation has released security updates to fix multiple vulnerabilities affecting MOVEit transfer. The addressed vulnerabilities could allow the attacker to perform session hijacking or cross-site scripting (CSS) attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary scripts and gain unauthorized access to user accounts on the affected system. Sample of the addressed […]

The post Progress Security Updates – 26 July 2026 appeared first on EG-FinCIRT.

]]>
  • 253/2026
  • High

Progress Software Corporation has released security updates to fix multiple vulnerabilities affecting MOVEit transfer.

The addressed vulnerabilities could allow the attacker to perform session hijacking or cross-site scripting (CSS) attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary scripts and gain unauthorized access to user accounts on the affected system.

Sample of the addressed vulnerabilities:

1. Progress MOVEit Transfer Permissive Cross-Domain Security Policy with Untrusted Domains Vulnerability (CVE-2026-15966):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Security Bypass

2. Progress MOVEit Transfer Improper Neutralization of Input Vulnerability (CVE-2026-15968):

  • CVSS: 7.1
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: Low
  • User Interaction: Required
  • Consequences: Cross-Site Scripting
Vulnerabilities
  • CVE-2026-10697
  • CVE-2026-15966
  • CVE-2026-15967
  • CVE-2026-15968
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Progress Security Advisory

References

Progress Security Advisory

The post Progress Security Updates – 26 July 2026 appeared first on EG-FinCIRT.

]]> Check Point Security Update – 26 July 2026 https://www.egfincirt.org.eg/check-point-security-update-26-july-2026/ Sun, 26 Jul 2026 06:57:46 +0000 https://www.egfincirt.org.eg/?p=17319 Check Point has released a security update to fix multiple vulnerabilities affecting Check Point Security Management, Multi-Domain Security Management, and Security Gateways. The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, or execute arbitrary commands and gain access to the affected system. Sample of the addressed vulnerabilities: 1. Check Point […]

The post Check Point Security Update – 26 July 2026 appeared first on EG-FinCIRT.

]]>
  • 252/2026
  • Critical

Check Point has released a security update to fix multiple vulnerabilities affecting Check Point Security Management, Multi-Domain Security Management, and Security Gateways.

The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, or execute arbitrary commands and gain access to the affected system.

Sample of the addressed vulnerabilities:

1. Check Point SmartConsole Authentication Bypass Vulnerability (CVE-2026-16232):

  • CVSS: 9.3
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

2. Check Point Local Privilege Escalation in Gaia Portal Vulnerability (CVE-2026-62145):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Privileges

It should be highlighted that Checkpoint is aware that the vulnerability “CVE-2026- 16232” is actively exploited in the wild.

Vulnerabilities
  • CVE-2026-16232
  • CVE-2026-62144
  • CVE-2026-62145
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Check Point Security Advisory

References

Check Point Security Advisory

The post Check Point Security Update – 26 July 2026 appeared first on EG-FinCIRT.

]]> Microsoft Security Updates – 26 July 2026 https://www.egfincirt.org.eg/microsoft-security-updates-26-july-2026/ Sun, 26 Jul 2026 06:47:03 +0000 https://www.egfincirt.org.eg/?p=17311 Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to perform spoofing or data tampering attacks, gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Microsoft Azure Key Vault Elevation of Privilege Vulnerability […]

The post Microsoft Security Updates – 26 July 2026 appeared first on EG-FinCIRT.

]]>
  • 251/2026
  • Critical

Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products.

The addressed vulnerabilities could allow the attacker to perform spoofing or data tampering attacks, gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Microsoft Azure Key Vault Elevation of Privilege Vulnerability (CVE-2026-62825):

  • CVSS: 10
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Privileges

2. Microsoft M365 Copilot Remote Code Execution Vulnerability (CVE-2026-50517):

  • CVSS: 9.9
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Remote Code Execution
Vulnerabilities

Microsoft MSRC

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Microsoft MSRC

References

Microsoft MSRC

The post Microsoft Security Updates – 26 July 2026 appeared first on EG-FinCIRT.

]]> Google Chrome Security Update – 26 July 2026 https://www.egfincirt.org.eg/google-chrome-security-update-26-july-2026/ Sun, 26 Jul 2026 06:37:00 +0000 https://www.egfincirt.org.eg/?p=17305 Google has released an updated Chrome version 150.0.7871.186/.187 for Windows and Mac and 150.0.7871.186 for Linux. The addressed vulnerabilities could allow the attacker to bypass security restrictions or execute arbitrary code on the affected systems via a specially crafted HTML page. Sample of the addressed vulnerabilities: Google Chrome Use-After-Free in Blink Vulnerability (CVE-2026-16805): CVSS: 8.8 […]

The post Google Chrome Security Update – 26 July 2026 appeared first on EG-FinCIRT.

]]>
  • 250/2026
  • High

Google has released an updated Chrome version 150.0.7871.186/.187 for Windows and Mac and 150.0.7871.186 for Linux.

The addressed vulnerabilities could allow the attacker to bypass security restrictions or execute arbitrary code on the affected systems via a specially crafted HTML page.

Sample of the addressed vulnerabilities:

Google Chrome Use-After-Free in Blink Vulnerability (CVE-2026-16805):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Remote Code Execution
Vulnerabilities
  • CVE-2026-16804
  • CVE-2026-16805
  • CVE-2026-16806
  • CVE-2026-16807
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Update

References

Google Chrome Security Update

The post Google Chrome Security Update – 26 July 2026 appeared first on EG-FinCIRT.

]]> Google Chrome Security Update – 22 July 2026 https://www.egfincirt.org.eg/google-chrome-security-update-22-july-2026/ Wed, 22 Jul 2026 08:35:50 +0000 https://www.egfincirt.org.eg/?p=17295 Google has released an updated Chrome version 150.0.7871.181/.182 for Windows and Mac and 150.0.7871.181 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial of service and spoofing attacks, bypass security restrictions, obtain sensitive information, trigger memory corruption, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: Google Chrome […]

The post Google Chrome Security Update – 22 July 2026 appeared first on EG-FinCIRT.

]]>
  • 249/2026
  • High

Google has released an updated Chrome version 150.0.7871.181/.182 for Windows and Mac and 150.0.7871.181 for Linux.

The addressed vulnerabilities could allow the attacker to conduct denial of service and spoofing attacks, bypass security restrictions, obtain sensitive information, trigger memory corruption, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

Google Chrome Use After Free in Aura Vulnerability (CVE-2026-15905):

  • CVSS: 7.8
  • Attack Vector: Local
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Denial of Service
Vulnerabilities

Google Chrome Security Update

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Update

References

Google Chrome Security Update

The post Google Chrome Security Update – 22 July 2026 appeared first on EG-FinCIRT.

]]> Aruba Security Updates – 22 July 2026 https://www.egfincirt.org.eg/aruba-security-updates-22-july-2026/ Wed, 22 Jul 2026 08:17:25 +0000 https://www.egfincirt.org.eg/?p=17289 HPE Aruba has released security updates to fix several vulnerabilities across multiple HPE Aruba products and third-party components. The addressed vulnerabilities could allow the attacker to conduct denial-ofservice, cross-site scripting, and server-side request forgery attacks, trigger memory corruption, obtain sensitive information, gain elevated privileges, manipulate files, bypass security restrictions, execute arbitrary code/commands, and gain access […]

The post Aruba Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]>
  • 248/2026
  • High

HPE Aruba has released security updates to fix several vulnerabilities across multiple HPE Aruba products and third-party components.

The addressed vulnerabilities could allow the attacker to conduct denial-ofservice, cross-site scripting, and server-side request forgery attacks, trigger memory corruption, obtain sensitive information, gain elevated privileges, manipulate files, bypass security restrictions, execute arbitrary code/commands, and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. HPE Aruba Networking AOS-CX Low-Privilege Authenticated Buffer Overflow Vulnerability (CVE-2026-44880):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Remote Code Execution

2. HPE Aruba Networking EdgeConnect SD-WAN Gateways Authenticated Path Traversal in Web Interface Vulnerability (CVE-2026-44878):

  • CVSS: 7.2
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: High
  • User Interaction: None
  • Consequences: Obtain Information

Sample of the affected products:

  • Aruba Networking AOS-CX.
  • Aruba Networking EdgeConnect SD-WAN Gateways.
  • HPE Telco Automated Assurance and HPE Telco Intelligent Assurance.
  • HPE Telco Service Orchestrator.
Vulnerabilities

Aruba Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Aruba Security Advisory

References

Aruba Security Advisory

The post Aruba Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]> Oracle Security Patch Updates – 22 July 2026 https://www.egfincirt.org.eg/oracle-security-patch-updates-22-july-2026/ Wed, 22 Jul 2026 07:46:39 +0000 https://www.egfincirt.org.eg/?p=17280 Oracle released its critical patch updates for July 2026, containing 1449 new security patches across multiple affected Oracle products and third-party components. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, bypass security restrictions, perform cross-site-scripting (XSS), server-side-request-forgery (SSRF), and SQL injection attacks, obtain sensitive information, manipulate data, or execute arbitrary code, […]

The post Oracle Security Patch Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]>
  • 247/2026
  • Critical

Oracle released its critical patch updates for July 2026, containing 1449 new security patches across multiple affected Oracle products and third-party components.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, bypass security restrictions, perform cross-site-scripting (XSS), server-side-request-forgery (SSRF), and SQL injection attacks, obtain sensitive information, manipulate data, or execute arbitrary code, and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. Oracle Access Manager Gain Access Vulnerability (CVE-2026-60358):

  • CVSS: 10
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

2. Oracle WebLogic Server Proxy Plug-in Data Modification Vulnerability (CVE- 2026-60365):

  • CVSS: 10
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Data Manipulation
Vulnerabilities
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Oracle Advisory – July 2026

References

The post Oracle Security Patch Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]> SolarWinds Security Updates – 22 July 2026 https://www.egfincirt.org.eg/solarwinds-security-updates-22-july-2026/ Wed, 22 Jul 2026 07:33:42 +0000 https://www.egfincirt.org.eg/?p=17275 SolarWinds has released security updates to address several vulnerabilities affecting multiple SolarWinds products. The addressed vulnerabilities could allow the attacker to perform stored cross-site cripting attacks, gain elevated privileges, manipulate files, or execute arbitrary code, and gain access to the affected systems. Sample of the addressed vulnerabilities: 1. SolarWinds Serv-U Remote Code Execution Vulnerability (CVE-2026-28311): […]

The post SolarWinds Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]>
  • 246/2026
  • Critical

SolarWinds has released security updates to address several vulnerabilities affecting multiple SolarWinds products.

The addressed vulnerabilities could allow the attacker to perform stored cross-site cripting attacks, gain elevated privileges, manipulate files, or execute arbitrary code, and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. SolarWinds Serv-U Remote Code Execution Vulnerability (CVE-2026-28311):

  • CVSS: 9.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: High
  • User Interaction: None
  • Consequences: Remote Code Execution

2. SolarWinds Serv-U Privilege Escalation Vulnerability (CVE-2026-28310):

  • CVSS: 9.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: High
  • User Interaction: None
  • Consequences: Gain Privileges

The affected products:

  • SolarWinds Database Performance Analyzer.
  • SolarWinds Observability Self-Hosted.
  • SolarWinds Serv-U.
Vulnerabilities

SolarWinds Security Updates

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

SolarWinds Security Updates

References

SolarWinds Security Updates

The post SolarWinds Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]> Elastic Security Updates – 22 July 2026 https://www.egfincirt.org.eg/elastic-security-updates-22-july-2026/ Wed, 22 Jul 2026 07:16:11 +0000 https://www.egfincirt.org.eg/?p=17269 Elastic has released security updates to address several vulnerabilities across Elasticsearch and Kibana. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, trigger memory corruption, obtain sensitive information, manipulate data, and perform server-side request forgery (SSRF) attacks on the affected systems. Sample of addressed vulnerabilities: 1. Authorization Bypass Through User-Controlled Key in Kibana […]

The post Elastic Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]>
  • 245/2026
  • High

Elastic has released security updates to address several vulnerabilities across Elasticsearch and Kibana.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, trigger memory corruption, obtain sensitive information, manipulate data, and perform server-side request forgery (SSRF) attacks on the affected systems.

Sample of addressed vulnerabilities:

1. Authorization Bypass Through User-Controlled Key in Kibana Vulnerability (CVE-2026-56147):

  • CVSS: 7.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Obtain Information

2. Allocation of Resources Without Limits or Throttling in Kibana Vulnerability (CVE-2026-42397):

  • CVSS: 6.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Denial of Service
Vulnerabilities

Elastic Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Elastic Security Advisory

References

Elastic Security Advisory

The post Elastic Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]> Mozilla Firefox Security Updates – 22 July 2026 https://www.egfincirt.org.eg/mozilla-firefox-security-updates-22-july-2026/ Wed, 22 Jul 2026 06:27:23 +0000 https://www.egfincirt.org.eg/?p=17262 Mozilla has released security updates to address several vulnerabilities fixed in Firefox 153, Firefox ESR 140.13, and Firefox ESR 115.38. The addressed vulnerabilities could allow the attacker to gain elevated privileges, bypass security restrictions, obtain sensitive information, conduct denial-ofservice attacks, trigger memory corruption, perform spoofing and clickjacking attacks, execute arbitrary code, or gain access to […]

The post Mozilla Firefox Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]>
  • 244/2026
  • Critical

Mozilla has released security updates to address several vulnerabilities fixed in Firefox 153, Firefox ESR 140.13, and Firefox ESR 115.38.

The addressed vulnerabilities could allow the attacker to gain elevated privileges, bypass security restrictions, obtain sensitive information, conduct denial-ofservice attacks, trigger memory corruption, perform spoofing and clickjacking attacks, execute arbitrary code, or gain access to the affected system.

Sample of the addressed vulnerabilities:

1. Mozilla Firefox Memory Safety Bugs Vulnerability (CVE-2026-16361):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

2. Mozilla Firefox Mitigation Bypass in the DOM: Security Component Vulnerability (CVE-2026-16394):

  • CVSS: 9.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Security Bypass
Vulnerabilities

Mozilla Firefox Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Mozilla Firefox Security Advisory

References

Mozilla Firefox Security Advisory

The post Mozilla Firefox Security Updates – 22 July 2026 appeared first on EG-FinCIRT.

]]> Tenable Security Updates – 21 July 2026 https://www.egfincirt.org.eg/tenable-security-updates-21-july-2026/ Tue, 21 Jul 2026 07:39:50 +0000 https://www.egfincirt.org.eg/?p=17256 Tenable has released security updates to address several vulnerabilities across Tenable Security Center and third-party software components. The addressed vulnerabilities could allow the attacker to perform SQL injection, blind SQL injection, and command injection attacks, obtain sensitive information, manipulate files, bypass security restrictions, or execute arbitrary code, and gain access to the affected system. Sample […]

The post Tenable Security Updates – 21 July 2026 appeared first on EG-FinCIRT.

]]>
  • 243/2026
  • Critical

Tenable has released security updates to address several vulnerabilities across Tenable Security Center and third-party software components.

The addressed vulnerabilities could allow the attacker to perform SQL injection, blind SQL injection, and command injection attacks, obtain sensitive information, manipulate files, bypass security restrictions, or execute arbitrary code, and gain access to the affected system.

Sample of addressed vulnerabilities:

Tenable Security Center SQL Injection Vulnerability (CVE-2026-64877):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Access
Vulnerabilities

Tenable Security Updates

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Tenable Security Updates

References

Tenable Security Updates

The post Tenable Security Updates – 21 July 2026 appeared first on EG-FinCIRT.

]]> WordPress Security Updates – 19 July 2026 https://www.egfincirt.org.eg/wordpress-security-updates-19-july-2026/ Sun, 19 Jul 2026 12:11:07 +0000 https://www.egfincirt.org.eg/?p=17248 WordPress has released security updates to address two vulnerabilities affecting the WordPress Core. The addressed vulnerabilities could allow the attacker to perform SQL injection attacks, which may lead to remote code execution on the affected system. The addressed vulnerabilities: 1. WordPress REST API Batch-Route Confusion Vulnerability (CVE-2026-63030): CVSS: 9.8 Attack Vector: Network Attack Complexity: Low […]

The post WordPress Security Updates – 19 July 2026 appeared first on EG-FinCIRT.

]]>
  • 242/2026
  • Critical

WordPress has released security updates to address two vulnerabilities affecting the WordPress Core.

The addressed vulnerabilities could allow the attacker to perform SQL injection attacks, which may lead to remote code execution on the affected system.

The addressed vulnerabilities:

1. WordPress REST API Batch-Route Confusion Vulnerability (CVE-2026-63030):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

2. WordPress Facilitated SQL Injection Vulnerability (CVE-2026-60137)

  • CVSS: 5.9
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

It should be highlighted that security researchers publicly disclosed a proof-ofconcept (PoC) for the vulnerabilities “CVE-2026-63030” and “CVE-2026-60137” that exist in the wild.

Vulnerabilities
  • CVE-2026-63030
  • CVE-2026-60137
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

WordPress Security Updates

References

WordPress Security Updates

The post WordPress Security Updates – 19 July 2026 appeared first on EG-FinCIRT.

]]> Grafana Security Updates – 19 July 2026 https://www.egfincirt.org.eg/grafana-security-updates-19-july-2026/ Sun, 19 Jul 2026 11:19:51 +0000 https://www.egfincirt.org.eg/?p=17239 Grafana has released security updates to fix several vulnerabilities affecting Grafana, Loki, and Grafana MCP products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, gain elevated privileges, obtain sensitive information, perform server-side request forgery, and cross-site scripting attacks on the affected systems. Sample of the addressed vulnerabilities: 1. Grafana MCP Server-Side Request […]

The post Grafana Security Updates – 19 July 2026 appeared first on EG-FinCIRT.

]]>
  • 241/2026
  • High

Grafana has released security updates to fix several vulnerabilities affecting Grafana, Loki, and Grafana MCP products.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, gain elevated privileges, obtain sensitive information, perform server-side request forgery, and cross-site scripting attacks on the affected systems.

Sample of the addressed vulnerabilities:

1. Grafana MCP Server-Side Request Forgery Vulnerability (CVE-2026-15583):

  • CVSS: 8.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Server-Side Request Forgery

2. Loki Detected_Fields Query Limits Results in Unbounded Memory Allocation Vulnerability (CVE-2026-21729):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial of Service
Vulnerabilities
  • CVE-2026-15583
  • CVE-2026-21729
  • CVE-2026-11769
  • CVE-2026-33382
  • CVE-2026-42129
  • CVE-2026-10601
  • CVE-2026-8609
  • CVE-2026-42127
  • CVE-2026-9029
  • CVE-2026-8595
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Grafana Security Advisory

References

Grafana Security Advisory

The post Grafana Security Updates – 19 July 2026 appeared first on EG-FinCIRT.

]]> Microsoft Security Updates – 19 July 2026 https://www.egfincirt.org.eg/microsoft-security-updates-19-july-2026/ Sun, 19 Jul 2026 11:07:35 +0000 https://www.egfincirt.org.eg/?p=17233 Microsoft has released security updates to address vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, perform cross-site scripting attacks, or execute arbitrary code and gain access to the affected systems. Sample of the addressed vulnerabilities: 1. Windows Terminal Remote Code Execution Vulnerability (CVE-2026-59117): CVSS: […]

The post Microsoft Security Updates – 19 July 2026 appeared first on EG-FinCIRT.

]]>
  • 240/2026
  • High

Microsoft has released security updates to address vulnerabilities affecting multiple Microsoft products.

The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, perform cross-site scripting attacks, or execute arbitrary code and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. Windows Terminal Remote Code Execution Vulnerability (CVE-2026-59117):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Remote Code Execution

2. Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability (CVE-2026-56171):

  • CVSS: 7.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Obtain Information
Vulnerabilities

Microsoft MSRC

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Microsoft MSRC

References

Microsoft MSRC

The post Microsoft Security Updates – 19 July 2026 appeared first on EG-FinCIRT.

]]> Cisco Security Updates – 16 July 2026 https://www.egfincirt.org.eg/cisco-security-updates-16-july-2026/ Thu, 16 Jul 2026 08:26:28 +0000 https://www.egfincirt.org.eg/?p=17225 Cisco has released security updates to address several vulnerabilities across Cisco RoomOS, Cisco ISE, and Cisco ISE-PIC. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, manipulate files, obtain sensitive information, or bypass access controls on the affected systems, potentially leading to full compromise. Sample of addressed vulnerabilities: 1. Cisco RoomOS Improper […]

The post Cisco Security Updates – 16 July 2026 appeared first on EG-FinCIRT.

]]>
  • 238/2026
  • High

Cisco has released security updates to address several vulnerabilities across Cisco RoomOS, Cisco ISE, and Cisco ISE-PIC.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, manipulate files, obtain sensitive information, or bypass access controls on the affected systems, potentially leading to full compromise.

Sample of addressed vulnerabilities:

1. Cisco RoomOS Improper Access Control Vulnerability (CVE-2026-20150):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Access

2. Cisco RoomOS Improper Restriction of Operations Vulnerability (CVE-2026-20156):

  • CVSS: 8.1
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial-of-Service
Vulnerabilities
  • CVE-2026-20150
  • CVE-2026-20153
  • CVE-2026-20156
  • CVE-2026-20157
  • CVE-2026-20158
  • CVE-2026-20187
  • CVE-2026-20146
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Cisco Security Updates

References

Cisco Security Updates

The post Cisco Security Updates – 16 July 2026 appeared first on EG-FinCIRT.

]]> F5 Security Updates – 16 July 2026 https://www.egfincirt.org.eg/f5-security-updates-16-july-2026/ Thu, 16 Jul 2026 08:12:11 +0000 https://www.egfincirt.org.eg/?p=17219 F5 has released security updates to address several vulnerabilities affecting multiple F5 products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, manipulate files, obtain sensitive information, or execute arbitrary code on the affected system. Sample of the addressed vulnerabilities: 1. NGINX Ingress Controller Vulnerability (CVE-2026-55723): CVSS: 8.3 Attack Vector: Network Attack […]

The post F5 Security Updates – 16 July 2026 appeared first on EG-FinCIRT.

]]>
  • 238/2026
  • High

F5 has released security updates to address several vulnerabilities affecting multiple F5 products.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service (DoS) attacks, manipulate files, obtain sensitive information, or execute arbitrary code on the affected system.

Sample of the addressed vulnerabilities:

1. NGINX Ingress Controller Vulnerability (CVE-2026-55723):

  • CVSS: 8.3
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: File Manipulation

2. NGINX ngx_http_slice_module Vulnerability (CVE-2026-60005):

  • CVSS: 8.2
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Obtain Information

Sample of the affected products:

  • NGINX Ingress Controller.
  • NGINX Instance Manager.
  • F5 WAF for NGINX.
  • NGINX Agent.
  • BIG-IP.
Vulnerabilities
  • CVE-2026-55723
  • CVE-2026-52865
  • CVE-2026-60062
  • CVE-2026-42533
  • CVE-2026-56434
  • CVE-2026-60005
  • CVE-2026-60065
  • CVE-2026-59762
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

F5 Security Advisory

References

F5 Security Advisory

The post F5 Security Updates – 16 July 2026 appeared first on EG-FinCIRT.

]]> Splunk Security Updates – 16 July 2026 https://www.egfincirt.org.eg/splunk-security-updates-16-july-2026/ Thu, 16 Jul 2026 08:02:12 +0000 https://www.egfincirt.org.eg/?p=17213 Splunk has released security updates to address several vulnerabilities across Splunk Enterprise and Splunk Cloud Platform. The addressed vulnerabilities could allow the attacker to obtain sensitive information, manipulate files, or bypass security restrictions by performing crosssite request forgery (CSRF) attacks, potentially gaining access to the affected systems. Sample of the addressed vulnerabilities: 1. Splunk Enterprise […]

The post Splunk Security Updates – 16 July 2026 appeared first on EG-FinCIRT.

]]>
  • 237/2026
  • High

Splunk has released security updates to address several vulnerabilities across Splunk Enterprise and Splunk Cloud Platform.

The addressed vulnerabilities could allow the attacker to obtain sensitive information, manipulate files, or bypass security restrictions by performing crosssite request forgery (CSRF) attacks, potentially gaining access to the affected systems.

Sample of the addressed vulnerabilities:

1. Splunk Enterprise SPL Command Safeguards Bypass Vulnerability (CVE-2026-20296):

  • CVSS: 8.3
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Gain Access

2. Splunk Cloud Platform App Install REST Endpoint Path Traversal Vulnerability (CVE-2026-20297):

  • CVSS: 7.2
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: High
  • User Interaction: None
  • Consequences: File Manipulation
Vulnerabilities

Splunk Security Updates

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Splunk Security Updates

References

Splunk Security Updates

The post Splunk Security Updates – 16 July 2026 appeared first on EG-FinCIRT.

]]> Drupal Security Updates – 15 July 2026 https://www.egfincirt.org.eg/drupal-security-updates-15-july-2026/ Wed, 15 Jul 2026 11:50:08 +0000 https://www.egfincirt.org.eg/?p=17206 Drupal has released security updates to address several vulnerabilities affecting multiple Drupal products. The addressed vulnerabilities could allow the attacker to perform cross-site scripting (XSS), path traversal, and SQL injection attacks, gain elevated privileges, bypass security restrictions, obtain sensitive information, or execute arbitrary code on the affected system, potentially leading to full compromise. Sample of […]

The post Drupal Security Updates – 15 July 2026 appeared first on EG-FinCIRT.

]]>
  • 236/2026
  • Critical

Drupal has released security updates to address several vulnerabilities affecting multiple Drupal products.

The addressed vulnerabilities could allow the attacker to perform cross-site scripting (XSS), path traversal, and SQL injection attacks, gain elevated privileges, bypass security restrictions, obtain sensitive information, or execute arbitrary code on the affected system, potentially leading to full compromise.

Sample of the addressed vulnerabilities:

1. Drupal AlternativeCommerce Code Execution Vulnerability (CVE-2026-9726):

  • CVSS Score: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

2. Drupal LocalGov Workflows Information Disclosure Vulnerability (CVE-2026-10768):

  • CVSS Score: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Obtain Information

Sample of the affected products:

  • Drupal Commerce.
  • Drupal Clean RESTful.
  • Drupal Drupal Canvas.
  • Drupal Drupal AlternativeCommerce Basket.
  • Drupal Siteimprove Analytics.
Vulnerabilities

Drupal Security Updates

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Drupal Security Updates

References

Drupal Security Updates

The post Drupal Security Updates – 15 July 2026 appeared first on EG-FinCIRT.

]]>