Skip to main content
Griffin Technology PartnersGTP

Public security advisories

GTP Security Intelligence

Current vulnerabilities, known exploitation, Microsoft security updates, and practical guidance from Griffin Technology Partners.

Primary sources

Microsoft Security Response Center
CISA Known Exploited Vulnerabilities

Subscribe via RSS
Known exploited511Public exploitation evidenceCritical706Highest vendor severityHigh severity4,344Includes MSRC ImportantRecently updated1,860Updated or KEV-added in 7 days

Vulnerability intelligence

Security bulletins

Last collection: October 24, 2026
Six-hour refresh · Public-source information only

Showing the most recent saved intelligence. One or more sources are awaiting a successful refresh; source dates are listed below.

10,727 bulletins · Page 221 of 447

JSON feed
High
CVE-2026-55969Microsoft

Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: integer overflow in TProtocol::checkReadBytesAvailable()

Review the authoritative advisory for the vulnerability description and applicability.

CVSS
7.5
Update availability
Security update available

Affected: azl3 influxdb 2.7.5-19 on Azure Linux 3.0 · azl3 kata-containers-cc 3.15.0.aks0-16 on Azure Linux 3.0 · +6 more

Updated

View technical details for CVE-2026-55969MSRC
High
CVE-2026-66373Microsoft

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending…

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free. NOTE: this issue exists because of an incomplete fix for CVE-2026-25243.

CVSS
7.5
Update availability
Patch status unknown

Affected: azl3 valkey 8.0.10-1 on Azure Linux 3.0 · azl3 valkey 8.0.11-1 on Azure Linux 3.0 · +1 more

Updated

View technical details for CVE-2026-66373MSRC
Severity not suppliedKnown exploited
CVE-2026-5430WSO2

WSO2 Multiple Products Path Traversal Vulnerability

WSO2 API Control Plane, API Manager, Traffic Manager & Universal Gateway contain a path traversal vulnerability that could allow for unrestricted file upload and lead to remote code execution.

CVSS
Not supplied
Update availability
Patch status unknown

Affected: Multiple Products

Added to CISA KEV

View technical details for CVE-2026-5430CISA

Sources & coverage

The collection starts with 90 days of Microsoft updates and CISA additions, plus older Microsoft vulnerabilities still listed by CISA. Older entries do not imply that a product remains supported. Counts describe this collection, not every vulnerability or any customer environment.

Microsoft Security Response Center (opens in a new tab)

Last successful check: October 24, 2026

CISA Known Exploited Vulnerabilities (opens in a new tab)

Last successful check: October 24, 2026

Managed by GTP?

Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.

Contact GTPManaged Security Services

Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.