Security tools security incidents and patch status

Today's specials

The fix exists. Somebody has to carry it.

SiteGuard Server Edition4 d EG Secure Solutions SiteGuard Server Edition OS Command Injection 🔥 On the fly · exploitedKEV overdue 1dhigh severity
Fixed in SiteGuard Server Edition for Apache httpd Ver8.00 Update 5, SiteGuard Server Edition for Apache httpd on FreeBSD Ver7.00 Update 6 Advisory
Re-plated 24 Oct ~~On hold (status unknown)~~ → Order up (fix available) Under the heat lamp: 3 days KEV ✓ Record ✓ Vendor ✓
Splunk Enterprise13 h Critical vulnerability public PoCcritical severity
Fixed in 10.4.3, 10.2.7 Advisory
Re-plated 24 Oct ~~On hold (status unknown)~~ → Order up (fix available) KEV – Record ✓ Vendor ✓
Snort 33 d Open Source Snort 3 Command Execution high severity
The vendor: “Cisco has released software updates that address this vulnerability.” Advisory
Re-plated 24 Oct ~~On hold (status unknown)~~ → Order up (fix available) KEV – Record ✓ Vendor ✓

Nobody has said yet. Read the advisory.

FortiSIEM4 d Critical FortiSIEM Flaw Gets Public Exploit PoC public PoCcritical severity
Do now Restrict network access to FortiSIEM now and watch for a vendor fix, since a public exploit exists. No fix named yet. Last checked 24 Oct, 08:26 UTC. Advisory
KEV – Record ✓ Vendor –

Worst week: 19 Oct 2026, 4 new spills.

Each square is a day. Tap one to see what spilled. Heat = critical 4, high 3, medium 2, low 1, update half.