EG-FinCIRT https://www.egfincirt.org.eg/ CYBER SECURITY Tue, 14 Jul 2026 09:27:34 +0000 en-US hourly 1 /wp-content/uploads/2021/06/cropped-EG-FINCIRT-logo-2021-original-32x32.png EG-FinCIRT https://www.egfincirt.org.eg/ 32 32 IBM Security Updates – 07 July 2026 https://egfincirt-wpn.azurewebsites.net/ibm-security-updates-07-july-2026/ Tue, 07 Jul 2026 09:07:08 +0000 https://www.egfincirt.org.eg/?p=17073 IBM has released security updates to address several vulnerabilities affecting multiple IBM products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, bypass security restrictions, gain elevated privileges, obtain sensitive information, perform server-side request forgery and cross-site scripting attacks, execute arbitrary code, and gain access to the affected systems. Sample of addressed vulnerabilities: […]

The post IBM Security Updates – 07 July 2026 appeared first on EG-FinCIRT.

]]>
  • 217/2026
  • Critical

IBM has released security updates to address several vulnerabilities affecting multiple IBM products.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, bypass security restrictions, gain elevated privileges, obtain sensitive information, perform server-side request forgery and cross-site scripting attacks, execute arbitrary code, and gain access to the affected systems.

Sample of addressed vulnerabilities:

1. IBM Db2 Remote Code Execution due to Improper Pre-Auth DRDA Handshake Handling Vulnerability (CVE-2026-10109):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

2. IBM WebSphere Application Server Liberty Authorization Bypass Vulnerability (CVE-2026-11714):

  • CVSS: 8.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Security Bypass

The affected products:

  • IBM DB2.
  • IBM WebSphere.
  • IBM DataPower Gateway.
Vulnerabilities

IBM Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

IBM Security Advisory

References

IBM Security Advisory

The post IBM Security Updates – 07 July 2026 appeared first on EG-FinCIRT.

]]> Elastic Security Updates – 07 July 2026 https://egfincirt-wpn.azurewebsites.net/elastic-security-updates-07-july-2026/ Tue, 07 Jul 2026 08:43:26 +0000 https://www.egfincirt.org.eg/?p=17062 Elastic has released security updates to address several vulnerabilities affecting multiple Elastic products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, manipulate data, obtain sensitive information, gain elevated privileges, perform server-side request forgery (SSRF), and cross-site scripting (XSS) attacks, leading to unauthorized access to the affected systems. Sample of addressed vulnerabilities: 1. […]

The post Elastic Security Updates – 07 July 2026 appeared first on EG-FinCIRT.

]]>
  • 216/2026
  • High

Elastic has released security updates to address several vulnerabilities affecting multiple Elastic products.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, manipulate data, obtain sensitive information, gain elevated privileges, perform server-side request forgery (SSRF), and cross-site scripting (XSS) attacks, leading to unauthorized access to the affected systems.

Sample of addressed vulnerabilities:

1. Kibana Improper Output Neutralization for Logs Vulnerability (CVE-2026- 49091):

  • CVSS: 8.0
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: Low
  • User Interaction: Required
  • Consequences: Data Manipulation

2. Kibana Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-42398):

  • CVSS: 7.7
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Server-Side Request Forgery

The affected products:

  • Elasticsearch.
  • Kibana.
  • Fleet Server.
  • Elastic Defend.
Vulnerabilities

Elastic Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Elastic Security Advisory

References

Elastic Security Advisory

The post Elastic Security Updates – 07 July 2026 appeared first on EG-FinCIRT.

]]> BeyondTrust Security Updates – 07 July 2026 https://egfincirt-wpn.azurewebsites.net/beyondtrust-security-updates-07-july-2026/ Tue, 07 Jul 2026 08:27:15 +0000 https://www.egfincirt.org.eg/?p=17054 BeyondTrust has released security updates to address vulnerabilities affecting Remote Support (RS), Privileged Remote Access (PRA), and Privilege Management for Windows. The addressed vulnerabilities could allow the attacker to bypass security restrictions, conduct denial of service attacks, or execute arbitrary code and gain access to the affected product. Sample of the addressed vulnerabilities: 1. BeyondTrust […]

The post BeyondTrust Security Updates – 07 July 2026 appeared first on EG-FinCIRT.

]]>
  • 215/2026
  • Critical

BeyondTrust has released security updates to address vulnerabilities affecting Remote Support (RS), Privileged Remote Access (PRA), and Privilege Management for Windows.

The addressed vulnerabilities could allow the attacker to bypass security restrictions, conduct denial of service attacks, or execute arbitrary code and gain access to the affected product.

Sample of the addressed vulnerabilities:

1. BeyondTrust Improper Neutralization of Special Elements Used in an OS Command Vulnerability (CVE-2026-1731):

  • CVSS 4.0: 9.9
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

2. BeyondTrust Uncontrolled Resource Consumption Vulnerability (CVE-2026- 40140):

  • CVSS 4.0: 8.7
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial of Service

It should be highlighted that security researchers publicly disclosed a proof-ofconcept (PoC) for the vulnerability “CVE-2026-1731” that exists in the wild.

Vulnerabilities
  • CVE-2026-1232
  • CVE-2026-1731
  • CVE-2026-40138
  • CVE-2026-40139
  • CVE-2026-40140
  • CVE-2026-40141
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

BeyondTrust Security Advisory

References

Security Advisories | BeyondTrust

The post BeyondTrust Security Updates – 07 July 2026 appeared first on EG-FinCIRT.

]]> Linux Security Updates – 07 July 2026 https://egfincirt-wpn.azurewebsites.net/linux-security-updates-07-july-2026/ Tue, 07 Jul 2026 08:07:28 +0000 https://www.egfincirt.org.eg/?p=17048 Linux has released security updates to address several vulnerabilities in the Linux Kernel. The addressed vulnerabilities could allow the attacker to trigger memory corruption, conduct denial-of-service attacks, bypass security restrictions, gain elevated privileges, manipulate data, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Linux Container Runtime Interface (CRI) Security […]

The post Linux Security Updates – 07 July 2026 appeared first on EG-FinCIRT.

]]>
  • 214/2026
  • High

Linux has released security updates to address several vulnerabilities in the Linux Kernel.

The addressed vulnerabilities could allow the attacker to trigger memory corruption, conduct denial-of-service attacks, bypass security restrictions, gain elevated privileges, manipulate data, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Linux Container Runtime Interface (CRI) Security Bypass Vulnerability (CVE- 2026-53492):

  • CVSS: 8.2
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Security Bypass

2. Linux kernel’s Eventpoll Mechanism Use-After-Free Vulnerability (CVE-2026-46242):

  • CVSS: 7.0
  • Attack Vector: Local
  • Attack Complexity: High
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Privileges

It should be highlighted that security researchers disclosed a proof-of-concept (PoC) exploit for the vulnerability “CVE-2026-46242” that exists in the wild.

Vulnerabilities
  • CVE-2026-46242
  • CVE-2026-53492
  • CVE-2026-53359
  • CVE-2026-53360
Mitigations

The enterprise should deploy the patches as soon as the testing phase is completed and should check with its vendors for updates, if any.

Below is a sample of the distributors’ fixes:

References

The post Linux Security Updates – 07 July 2026 appeared first on EG-FinCIRT.

]]> Microsoft Security Updates – 06 July 2026 https://egfincirt-wpn.azurewebsites.net/microsoft-security-updates-06-july-2026/ Mon, 06 Jul 2026 07:56:30 +0000 https://www.egfincirt.org.eg/?p=17041 Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to perform spoofing attacks, obtain sensitive information, gain elevated privileges, bypass security restrictions, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability […]

The post Microsoft Security Updates – 06 July 2026 appeared first on EG-FinCIRT.

]]>
  • 213/2026
  • Critical

Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products.

The addressed vulnerabilities could allow the attacker to perform spoofing attacks, obtain sensitive information, gain elevated privileges, bypass security restrictions, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability (CVE- 2026-57100):

  • CVSS: 9.9
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Privileges

2. Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2026-58289):

  • CVSS: 9.0
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution
Vulnerabilities

Microsoft MSRC

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Microsoft MSRC

References

Microsoft MSRC

The post Microsoft Security Updates – 06 July 2026 appeared first on EG-FinCIRT.

]]> Mozilla Firefox Security Update – 06 July 2026 https://egfincirt-wpn.azurewebsites.net/mozilla-firefox-security-update-06-july-2026/ Mon, 06 Jul 2026 07:50:45 +0000 https://www.egfincirt.org.eg/?p=17032 Mozilla has released an updated Firefox version 152.0.4 to fix a critical vulnerability. The addressed vulnerability could allow the attacker to trigger memory corruption attacks or execute arbitrary code on the affected system. The addressed vulnerability: Mozilla Firefox Memory Safety Bugs Vulnerability (CVE-2026-14241): CVSS: 9.8 Attack Vector: Network Attack Complexity: Low Privileges Required: None User […]

The post Mozilla Firefox Security Update – 06 July 2026 appeared first on EG-FinCIRT.

]]>
  • 212/2026
  • Critical

Mozilla has released an updated Firefox version 152.0.4 to fix a critical vulnerability.

The addressed vulnerability could allow the attacker to trigger memory corruption attacks or execute arbitrary code on the affected system.

The addressed vulnerability:

Mozilla Firefox Memory Safety Bugs Vulnerability (CVE-2026-14241):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution
Vulnerabilities

CVE-2026-14241

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Mozilla Firefox Security Advisory

References

Mozilla Firefox Security Advisory

The post Mozilla Firefox Security Update – 06 July 2026 appeared first on EG-FinCIRT.

]]> Google Chrome Security Update – 05 July 2026 https://egfincirt-wpn.azurewebsites.net/google-chrome-security-update-05-july-2026/ Sun, 05 Jul 2026 07:44:25 +0000 https://www.egfincirt.org.eg/?p=17026 Google has released an updated Chrome version 150.0.7871.46/.47 for Windows and Mac and 150.0.7871.46 for Linux. The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems via a crafted HTML page. Sample of the addressed vulnerabilities: 1. Google Chrome Use […]

The post Google Chrome Security Update – 05 July 2026 appeared first on EG-FinCIRT.

]]>
  • 211/2026
  • Critical

Google has released an updated Chrome version 150.0.7871.46/.47 for Windows and Mac and 150.0.7871.46 for Linux.

The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems via a crafted HTML page.

Sample of the addressed vulnerabilities:

1. Google Chrome Use After Free Vulnerability (CVE-2026-13782):

  • CVSS: 10
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Bypass Security

2. Google Chrome Remote Code Execution Vulnerability (CVE-2026-14121):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code ExecutionWrite here analysis section
Vulnerabilities

Google Chrome Security Update

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Update

References

Google Chrome Security Update

The post Google Chrome Security Update – 05 July 2026 appeared first on EG-FinCIRT.

]]> Cisco Security Updates – 05 July 2026 https://egfincirt-wpn.azurewebsites.net/cisco-security-updates-05-july-2026/ Sun, 05 Jul 2026 07:35:51 +0000 https://www.egfincirt.org.eg/?p=17020 Cisco has released security updates to address several vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to conduct denial of service attacks or obtain sensitive information on the affected systems. Sample of addressed vulnerabilities: 1. Cisco Catalyst Center Arbitrary File Read Vulnerability (CVE-2026-20191): CVSS: 7.5 Attack Vector: Network Attack Complexity: Low […]

The post Cisco Security Updates – 05 July 2026 appeared first on EG-FinCIRT.

]]>
  • 210/2026
  • High

Cisco has released security updates to address several vulnerabilities affecting multiple Cisco products.

The addressed vulnerabilities could allow the attacker to conduct denial of service attacks or obtain sensitive information on the affected systems.

Sample of addressed vulnerabilities:

1. Cisco Catalyst Center Arbitrary File Read Vulnerability (CVE-2026-20191):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Obtain Information

2. ClamAV PE File Format Processing Memory Corruption Vulnerability (CVE- 2026-20213):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial of Service

The affected products:

  • Cisco Secure Endpoint Connector.
  • Cisco Catalyst Center.
Vulnerabilities
  • CVE-2026-20213
  • CVE-2026-20214
  • CVE-2026-20215
  • CVE-2026-20216
  • CVE-2026-20217
  • CVE-2026-20243
  • CVE-2026-20244
  • CVE-2026-20191
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Cisco Security Updates

References

Cisco Security Updates

The post Cisco Security Updates – 05 July 2026 appeared first on EG-FinCIRT.

]]> Progress Kemp LoadMaster Security Update – 02 July 2026 https://egfincirt-wpn.azurewebsites.net/progress-kemp-loadmaster-security-update-02-july-2026/ Thu, 02 Jul 2026 07:18:09 +0000 https://www.egfincirt.org.eg/?p=17015 Progress has released a security update to address multiple vulnerabilities across Progress Kemp LoadMaster. The addressed vulnerabilities could allow the unauthenticated attacker to bypass security restrictions or execute arbitrary code on the affected system. Sample of the addressed vulnerabilities: Progress Kemp LoadMaster OS Command Injection Vulnerability (CVE-2026- 8037): CVSS: 9.6 Attack Vector: Adjacent Attack Complexity: […]

The post Progress Kemp LoadMaster Security Update – 02 July 2026 appeared first on EG-FinCIRT.

]]>
  • 209/2026
  • Critical

Progress has released a security update to address multiple vulnerabilities across Progress Kemp LoadMaster.

The addressed vulnerabilities could allow the unauthenticated attacker to bypass security restrictions or execute arbitrary code on the affected system.

Sample of the addressed vulnerabilities:

Progress Kemp LoadMaster OS Command Injection Vulnerability (CVE-2026- 8037):

  • CVSS: 9.6
  • Attack Vector: Adjacent
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

It should be highlighted that security researchers disclosed a proof-of-concept (PoC) exploit that exists in the wild for the vulnerability “CVE-2026-8037”.

Vulnerabilities
  • CVE-2026-8037
  • CVE-2026-33691
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Progress Kemp LoadMaster Security Update

References

Progress Kemp LoadMaster Security Update

The post Progress Kemp LoadMaster Security Update – 02 July 2026 appeared first on EG-FinCIRT.

]]> libssh2 Security Update – 01 July 2026 https://egfincirt-wpn.azurewebsites.net/libssh2-security-update-01-july-2026/ Wed, 01 Jul 2026 11:57:07 +0000 https://www.egfincirt.org.eg/?p=17001 libssh2 has released a security update to fix a vulnerability affecting client installations of the libssh2 library. The addressed vulnerability could allow the attacker to corrupt heap memory and potentially achieve remote code execution on the affected system. The addressed vulnerability: libssh2 Remote Code Execution Vulnerability (CVE-2026-55200): CVSS: 8.3 Attack Vector: Network Attack Complexity: Low […]

The post libssh2 Security Update – 01 July 2026 appeared first on EG-FinCIRT.

]]>
  • 208/2026
  • High

libssh2 has released a security update to fix a vulnerability affecting client installations of the libssh2 library.

The addressed vulnerability could allow the attacker to corrupt heap memory and potentially achieve remote code execution on the affected system.

The addressed vulnerability:

libssh2 Remote Code Execution Vulnerability (CVE-2026-55200):

  • CVSS: 8.3
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Remote Code Execution

It should be highlighted that security researchers disclosed a proof-of-concept (PoC) exploit that exists in the wild for the vulnerability “CVE-2026-55200”.

Vulnerabilities

CVE-2026-55200

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Also, coordinate with vendors using the referenced third-party component to assess and confirm their exposure to the identified vulnerability.

Below is a sample of the distributors’ fixes:

References

The post libssh2 Security Update – 01 July 2026 appeared first on EG-FinCIRT.

]]> Adobe Security Updates – 01 July 2026 https://egfincirt-wpn.azurewebsites.net/adobe-security-updates-01-july-2026/ Wed, 01 Jul 2026 11:49:22 +0000 https://www.egfincirt.org.eg/?p=16996 Adobe has released security updates to address several vulnerabilities affecting Adobe ColdFusion and Adobe Campaign Classic. The addressed vulnerabilities could allow the attacker to bypass security restrictions, manipulate files, gain elevated privileges, or execute arbitrary commands on the affected product. Sample of the addressed vulnerabilities: 1. Adobe ColdFusion Unrestricted Upload of File with Dangerous Type […]

The post Adobe Security Updates – 01 July 2026 appeared first on EG-FinCIRT.

]]>
  • 207/2026
  • Critical

Adobe has released security updates to address several vulnerabilities affecting Adobe ColdFusion and Adobe Campaign Classic.

The addressed vulnerabilities could allow the attacker to bypass security restrictions, manipulate files, gain elevated privileges, or execute arbitrary commands on the affected product.

Sample of the addressed vulnerabilities:

1. Adobe ColdFusion Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-48276):

  • CVSS: 10.0
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

2. Adobe ColdFusion Improper Input Validation Vulnerability (CVE-2026- 48315):

  • CVSS: 9.3
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Gain Privileges
Vulnerabilities
  • CVE-2026-48276
  • CVE-2026-48277
  • CVE-2026-48281
  • CVE-2026-48316
  • CVE-2026-48282
  • CVE-2026-48283
  • CVE-2026-48313
  • CVE-2026-48315
  • CVE-2026-48307
  • CVE-2026-48285
  • CVE-2026-48314
  • CVE-2026-48286
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Adobe Security Advisory

References

Adobe Security Advisory

The post Adobe Security Updates – 01 July 2026 appeared first on EG-FinCIRT.

]]> Citrix Security Updates – 01 July 2026 https://egfincirt-wpn.azurewebsites.net/citrix-security-updates-01-july-2026/ Wed, 01 Jul 2026 11:00:15 +0000 https://www.egfincirt.org.eg/?p=16969 Citrix has released security updates to address several vulnerabilities affecting Citrix XenServer, Citrix NetScaler ADC, and Citrix NetScaler Gateway. The addressed vulnerabilities could allow the attacker to conduct denial of service attacks, trigger memory corruption, obtain sensitive information, or execute arbitrary code, and gain unauthorized access to the affected systems. Sample of the addressed vulnerabilities: […]

The post Citrix Security Updates – 01 July 2026 appeared first on EG-FinCIRT.

]]>
  • 206/2024
  • High

Citrix has released security updates to address several vulnerabilities affecting Citrix XenServer, Citrix NetScaler ADC, and Citrix NetScaler Gateway.

The addressed vulnerabilities could allow the attacker to conduct denial of service attacks, trigger memory corruption, obtain sensitive information, or execute arbitrary code, and gain unauthorized access to the affected systems.

Sample of the addressed vulnerabilities:

1. Insufficient Input Validation in NetScaler ADC and NetScaler Gateway Vulnerability (CVE-2026-8451):

  • CVSS 4.0: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Attack Requirements: None
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Obtain Information

2. Race Condition in NetScaler ADC and NetScaler Gateway Vulnerability (CVE- 2026-8452):

  • CVSS 4.0: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Attack Requirements: None
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial of Service
Vulnerabilities
  • CVE-2026-8451
  • CVE-2026-8452
  • CVE-2026-8655
  • CVE-2026-10816
  • CVE-2026-10817
  • CVE-2026-13474
  • CVE-2026-23556
  • CVE-2026-23558
  • CVE-2026-23559
  • CVE-2026-23560
  • CVE-2026-23561
  • CVE-2025-54505
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed. 

Citrix Security Updates

References

Citrix Security Updates

The post Citrix Security Updates – 01 July 2026 appeared first on EG-FinCIRT.

]]> Apache Tomcat Security Update – 01 July 2026 https://egfincirt-wpn.azurewebsites.net/apache-tomcat-security-update-01-july-2026/ Wed, 01 Jul 2026 10:49:22 +0000 https://www.egfincirt.org.eg/?p=16967 Apache Tomcat has released a security update to address several vulnerabilities affecting Apache Tomcat. The addressed vulnerabilities could allow the attacker to perform cross-site scripting attacks or bypass security restrictions on the affected system. Sample of the addressed vulnerabilities: 1. Apache Tomcat Invalid CRL Configuration Vulnerability (CVE-2026-53434): CVSS: 9.1 Attack Vector: Network Attack Complexity: Low […]

The post Apache Tomcat Security Update – 01 July 2026 appeared first on EG-FinCIRT.

]]>
  • 205/2026
  • Critical

Apache Tomcat has released a security update to address several vulnerabilities affecting Apache Tomcat.

The addressed vulnerabilities could allow the attacker to perform cross-site scripting attacks or bypass security restrictions on the affected system.

Sample of the addressed vulnerabilities:

1. Apache Tomcat Invalid CRL Configuration Vulnerability (CVE-2026-53434):

  • CVSS: 9.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Bypass Security

2. Apache Tomcat Number Guess Example Cross-Site Scripting Vulnerability (CVE-2026-50229):

  • CVSS: 6.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Cross-Site Scripting
Vulnerabilities
  • CVE-2026-50229
  • CVE-2026-53404
  • CVE-2026-53434
  • CVE-2026-55276
  • CVE-2026-55955
  • CVE-2026-55956
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Apache Tomcat Security Advisory

References

Apache Tomcat Security Advisory

The post Apache Tomcat Security Update – 01 July 2026 appeared first on EG-FinCIRT.

]]> Apple Security Updates – 30 June 2026 https://egfincirt-wpn.azurewebsites.net/apple-security-updates-30-june-2026/ Tue, 30 Jun 2026 09:16:14 +0000 https://www.egfincirt.org.eg/?p=16961 Apple has released security updates to address several vulnerabilities across macOS Tahoe and Safari. The addressed vulnerabilities could allow the attacker to conduct denial-ofservice attacks, trigger memory corruption, clipboard hijacking, manipulate data, obtain sensitive information, or bypass security restrictions on the affected systems. Sample of the addressed vulnerabilities: 1. Apple macOS Tahoe Use-After-Free Vulnerability (CVE-2026-43731): […]

The post Apple Security Updates – 30 June 2026 appeared first on EG-FinCIRT.

]]>
  • 204/2026
  • High

Apple has released security updates to address several vulnerabilities across macOS Tahoe and Safari.

The addressed vulnerabilities could allow the attacker to conduct denial-ofservice attacks, trigger memory corruption, clipboard hijacking, manipulate data, obtain sensitive information, or bypass security restrictions on the affected systems.

Sample of the addressed vulnerabilities:

1. Apple macOS Tahoe Use-After-Free Vulnerability (CVE-2026-43731):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Denial-of-Service

2. Apple macOS Tahoe improved Input Validation Vulnerability (CVE-2026-43725):

  • CVSS: 7.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Bypass Security
Vulnerabilities

Apple Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Apple Security Advisory

References

Apple Security Advisory

The post Apple Security Updates – 30 June 2026 appeared first on EG-FinCIRT.

]]> Linux Security Updates – 28 June 2026 https://egfincirt-wpn.azurewebsites.net/linux-security-updates-28-june-2026/ Sun, 28 Jun 2026 08:53:18 +0000 https://www.egfincirt.org.eg/?p=16952 Linux has released security updates to address several vulnerabilities in the Linux Kernel. The addressed vulnerabilities allow the attacker to conduct denial-of-service attacks, gain elevated privileges, obtain sensitive information, manipulate data, bypass security restrictions, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Linux Kernel’s Traffic Control Packet Editing (pedit) […]

The post Linux Security Updates – 28 June 2026 appeared first on EG-FinCIRT.

]]>
  • 202/2026
  • High

Linux has released security updates to address several vulnerabilities in the Linux Kernel.

The addressed vulnerabilities allow the attacker to conduct denial-of-service attacks, gain elevated privileges, obtain sensitive information, manipulate data, bypass security restrictions, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Linux Kernel’s Traffic Control Packet Editing (pedit) Subsystem Privileges Escalation Vulnerability (CVE-2026-46331):

  • CVSS: 7.8
  • Attack Vector: Local
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Privileges

2. Linux Kernel’s drm/xe/dma-buf Subsystem Use-After-Free Vulnerability (CVE-2026-52951):

  • CVSS: 7
  • Attack Vector: Local
  • Attack Complexity: High
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Denial of Service

It should be noted that security researchers disclosed a proof-of-concept (PoC) exploit for the vulnerability “CVE-2026-46331” that exists in the wild.

Vulnerabilities

• Redhat
• Ubuntu

Mitigations

The enterprise should deploy the patches as soon as the testing phase is completed and should check with its vendors for updates, if any.

Below is a sample of the distributors’ fixes:
• Redhat
• Ubuntu

References

• Redhat
• Ubuntu

The post Linux Security Updates – 28 June 2026 appeared first on EG-FinCIRT.

]]> Microsoft Edge Security Update – 28 June 2026 https://egfincirt-wpn.azurewebsites.net/microsoft-edge-security-update-28-june-2026/ Sun, 28 Jun 2026 08:41:42 +0000 https://www.egfincirt.org.eg/?p=16945 Microsoft has released a security update to address a vulnerability affecting Microsoft Edge (Chromium-based). The addressed vulnerability could allow the remote attacker to execute arbitrary code over a network. The addressed Vulnerability: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE- 2026-50521): CVSS: 8.3 Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None […]

The post Microsoft Edge Security Update – 28 June 2026 appeared first on EG-FinCIRT.

]]>
  • 201/2026
  • High

Microsoft has released a security update to address a vulnerability affecting Microsoft Edge (Chromium-based).

The addressed vulnerability could allow the remote attacker to execute arbitrary code over a network.

The addressed Vulnerability:

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE- 2026-50521):

  • CVSS: 8.3
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Remote Code Execution
Vulnerabilities

CVE-2026-50521

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Microsoft Edge Security Update

References

Microsoft Edge Security Update

The post Microsoft Edge Security Update – 28 June 2026 appeared first on EG-FinCIRT.

]]> Google Chrome Security Update – 28 June 2026 https://egfincirt-wpn.azurewebsites.net/google-chrome-security-update-28-june-2026/ Sun, 28 Jun 2026 08:01:23 +0000 https://www.egfincirt.org.eg/?p=16940 Google has released an updated Chrome version 149.0.7827.200/201 for Windows and Mac and 149.0.7827.200 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, bypass security restrictions, or execute arbitrary code on the affected systems via a crafted HTML page. Sample of the addressed vulnerabilities: 1. Google Chrome Integer Overflow in Mojo […]

The post Google Chrome Security Update – 28 June 2026 appeared first on EG-FinCIRT.

]]>
  • 200/2026
  • High

Google has released an updated Chrome version 149.0.7827.200/201 for Windows and Mac and 149.0.7827.200 for Linux.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, bypass security restrictions, or execute arbitrary code on the affected systems via a crafted HTML page.

Sample of the addressed vulnerabilities:

1. Google Chrome Integer Overflow in Mojo Vulnerability (CVE-2026-13281):

  • CVSS: 8.3
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Security Bypass

2. Google Chrome Use after free in AdFilter Vulnerability (CVE-2026-13283):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Remote Code Execution
Vulnerabilities
  • CVE-2026-13281
  • CVE-2026-13282
  • CVE-2026-13283
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Update

References

Google Chrome Security Update

The post Google Chrome Security Update – 28 June 2026 appeared first on EG-FinCIRT.

]]> Google Chrome Security Updates – 25 June 2026 https://egfincirt-wpn.azurewebsites.net/google-chrome-security-updates-25-june-2026/ Thu, 25 Jun 2026 12:28:57 +0000 https://www.egfincirt.org.eg/?p=16931 Google has released an updated Chrome version 149.0.7827.196/197 for Windows and Mac, and 149.0.7827.196 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial of service attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems via a crafted HTML page. Sample of the addressed vulnerabilities: 1. Google […]

The post Google Chrome Security Updates – 25 June 2026 appeared first on EG-FinCIRT.

]]>
  • 199/2026
  • Critical

Google has released an updated Chrome version 149.0.7827.196/197 for Windows and Mac, and 149.0.7827.196 for Linux.

The addressed vulnerabilities could allow the attacker to conduct denial of service attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems via a crafted HTML page.

Sample of the addressed vulnerabilities:

1. Google Chrome Use After Free in WebGL Vulnerability (CVE-2026-13028):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Bypass Security

2. Google Chrome Use After Free in Blink Vulnerability (CVE-2026-13031):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Remote Code Execution
Vulnerabilities

Google Chrome Security Updates

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Updates

References

Google Chrome Security Updates

The post Google Chrome Security Updates – 25 June 2026 appeared first on EG-FinCIRT.

]]> Google Chrome Security Updates – 24 June 2026 https://egfincirt-wpn.azurewebsites.net/google-chrome-security-updates-24-june-2026/ Wed, 24 Jun 2026 11:48:34 +0000 https://www.egfincirt.org.eg/?p=16924 Google has released an updated Chrome version 149.0.7827.155/.156 for Windows and Mac and 149.0.7827.155 for Linux. The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Google Chrome Digital Credentials Use After Free Vulnerability […]

The post Google Chrome Security Updates – 24 June 2026 appeared first on EG-FinCIRT.

]]>
  • 198/2026
  • Critical

Google has released an updated Chrome version 149.0.7827.155/.156 for Windows and Mac and 149.0.7827.155 for Linux.

The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Google Chrome Digital Credentials Use After Free Vulnerability (CVE-2026- 12440):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Security Bypass

2. Google Chrome WebView Inappropriate Implementation Vulnerability (CVE- 2026-12448):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Gain Privileges
Vulnerabilities

Google Chrome Security Updates

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Updates

References

Google Chrome Security Updates

The post Google Chrome Security Updates – 24 June 2026 appeared first on EG-FinCIRT.

]]> F5 Security Update – 23 June 2026 https://egfincirt-wpn.azurewebsites.net/f5-security-update-23-june-2026/ Tue, 23 Jun 2026 08:08:55 +0000 https://www.egfincirt.org.eg/?p=16919 F5 has released a security update to address multiple PostgreSQL vulnerabilities that affect BIG-IP Next for Kubernetes. The addressed vulnerabilities could allow the attacker to execute arbitrary code as the operating system user running the database. Sample of the addressed vulnerabilities: PostgreSQL Missing Validation of Multibyte Character Length Executes Arbitrary Code Vulnerability (CVE-2026-2006): CVSS: 8.8 […]

The post F5 Security Update – 23 June 2026 appeared first on EG-FinCIRT.

]]>
  • 197/2026
  • High

F5 has released a security update to address multiple PostgreSQL vulnerabilities that affect BIG-IP Next for Kubernetes.

The addressed vulnerabilities could allow the attacker to execute arbitrary code as the operating system user running the database.

Sample of the addressed vulnerabilities:

PostgreSQL Missing Validation of Multibyte Character Length Executes Arbitrary Code Vulnerability (CVE-2026-2006):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution
Vulnerabilities
  • CVE-2026-2006
  • CVE-2026-2005
  • CVE-2026-2004
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Also, coordinate with vendors using the referenced third-party component to assess and confirm their exposure to the identified vulnerability.

F5 Security Update

References

F5 Security Update

The post F5 Security Update – 23 June 2026 appeared first on EG-FinCIRT.

]]>