Bulletins

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to replace software and execute arbitrary code with root privileges.

The following versions of Lantronix G520 Series Cellular Gateway are affected:

• G520 Series 2.6.0.4R6_stable (CVE-2026-84409, CVE-2026-91191)

View CSAF

Summary

Successful exploitation of this vulnerability may allow attackers to achieve remote command execution on affected devices, potentially with root privileges, leading to full compromise of the camera system.

The following versions of VIVOTEK Camera Firmware are affected:

• V Series model_FD9187 (CVE-2026-22755)
• …

View CSAF

Summary

Successful exploitation of this vulnerability could allow an attacker to inject malformed messages which may lead to a denial-of-service condition.

The following versions of Baicells Nova 430H are affected:

• Nova 430H eNodeB (model pBS3101SH) <=BaiBLQ_3.0.12 (CVE-2026-96274)

Mendix Studio Pro contains a vulnerability in the module installation process, that could allow an attacker to write or modify arbitrary files in directories outside a developer’s project directory. Siemens has released new versions for the affected products and recommends to update to the latest versions.

CISA is amplifying Citrix’s disclosure of eight new vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway products: CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778. 

CISA has added CVE-2026-88771 and CVE-2026-88772 to its Known Exploited Vulnerabilities (KEV) Catalog. …

View CSAF

Summary

Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication controls, gain unauthorized access to sensitive data and privileged device functionality, modify device configuration, disrupt device operation.

The following versions of Botslab G980H Dashcams are affected:

• G980H dash cam series …

View CSAF

Summary

This advisory is revoked. Re-investigation confirmed the reported behavior is expected platform configuration and does not expose the protected attribute.

The following versions of Siemens Mendix Runtime are affected:

• Siemens Mendix Runtime vers:all/* (CVE-2026-7891)