Skip to main content
Griffin Technology PartnersGTP

Public security advisories

GTP Security Intelligence

Current vulnerabilities, known exploitation, Microsoft security updates, and practical guidance from Griffin Technology Partners.

Primary sources

Microsoft Security Response Center
CISA Known Exploited Vulnerabilities

Subscribe via RSS

Vulnerability intelligence

Security bulletins

Last collection: October 14, 2026
Six-hour refresh · Public-source information only

Showing the most recent saved intelligence. One or more sources are awaiting a successful refresh; source dates are listed below.

7,889 bulletins · Page 82 of 329

JSON feed
Medium
CVE-2026-59998Microsoft

sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.

Review the authoritative advisory for the vulnerability description and applicability.

CVSS
4.8
Update availability
Security update available

Affected: azl3 openssh 9.8p1-10 on Azure Linux 3.0 · azl3 openssh 9.8p1-8 on Azure Linux 3.0 · +1 more

Updated

High
CVE-2026-87489Microsoft

Chromium CVE-2026-87489: Memory corruption in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

CVSS
8.8
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based) · azl3 nodejs 24.21.0-1 on Azure Linux 3.0

Updated

High
CVE-2026-87536Microsoft

Chromium CVE-2026-87536: Use after free in V8

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

CVSS
8.8
Update availability
Patch status unknown

Affected: Microsoft Edge (Chromium-based) · azl3 nodejs 24.21.0-1 on Azure Linux 3.0

Updated

Severity not suppliedKnown exploited
CVE-2026-67279MikroTik

Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability

Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This vulnerability can be chained to achieve unauthenticated exploitation of CVE-2026-86060.

CVSS
Not supplied
Update availability
Patch status unknown

Affected: RouterOS

Added to CISA KEV

Severity not suppliedKnown exploited
CVE-2026-87902WordPress

WordPress Core Remote File Inclusion Vulnerability

WordPress Core contains a remote file inclusion vulnerability which could allow an unauthenticated attacker to make page-template resolution include a chosen readable local `.php` file outside the active theme directories, leading to remote code execution.

CVSS
Not supplied
Update availability
Patch status unknown

Affected: Core

Added to CISA KEV

Sources & coverage

The collection starts with 90 days of Microsoft updates and CISA additions, plus older Microsoft vulnerabilities still listed by CISA. Older entries do not imply that a product remains supported. Counts describe this collection, not every vulnerability or any customer environment.

Microsoft Security Response Center (opens in a new tab)

Last successful check: October 13, 2026

CISA Known Exploited Vulnerabilities (opens in a new tab)

Last successful check: October 14, 2026

Managed by GTP?

Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.

Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.