Announcements Archives - EG-FinCIRT https://www.egfincirt.org.eg/category/announcements/ CYBER SECURITY Tue, 14 Jul 2026 09:27:34 +0000 en-US hourly 1 /wp-content/uploads/2021/06/cropped-EG-FINCIRT-logo-2021-original-32x32.png Announcements Archives - EG-FinCIRT https://www.egfincirt.org.eg/category/announcements/ 32 32 IBM Security Updates – 07 July 2026 https://www.egfincirt.org.eg/ibm-security-updates-07-july-2026/ Tue, 07 Jul 2026 09:07:08 +0000 https://www.egfincirt.org.eg/?p=17073 IBM has released security updates to address several vulnerabilities affecting multiple IBM products. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, bypass security restrictions, gain elevated privileges, obtain sensitive information, perform server-side request forgery and cross-site scripting attacks, execute arbitrary code, and gain access to the affected systems. Sample of addressed vulnerabilities: […]

The post IBM Security Updates – 07 July 2026 appeared first on EG-FinCIRT.

]]>
  • 217/2026
  • Critical

IBM has released security updates to address several vulnerabilities affecting multiple IBM products.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, bypass security restrictions, gain elevated privileges, obtain sensitive information, perform server-side request forgery and cross-site scripting attacks, execute arbitrary code, and gain access to the affected systems.

Sample of addressed vulnerabilities:

1. IBM Db2 Remote Code Execution due to Improper Pre-Auth DRDA Handshake Handling Vulnerability (CVE-2026-10109):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

2. IBM WebSphere Application Server Liberty Authorization Bypass Vulnerability (CVE-2026-11714):

  • CVSS: 8.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Security Bypass

The affected products:

  • IBM DB2.
  • IBM WebSphere.
  • IBM DataPower Gateway.
Vulnerabilities

IBM Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

IBM Security Advisory

References

IBM Security Advisory

The post IBM Security Updates – 07 July 2026 appeared first on EG-FinCIRT.

]]> BeyondTrust Security Updates – 07 July 2026 https://www.egfincirt.org.eg/beyondtrust-security-updates-07-july-2026/ Tue, 07 Jul 2026 08:27:15 +0000 https://www.egfincirt.org.eg/?p=17054 BeyondTrust has released security updates to address vulnerabilities affecting Remote Support (RS), Privileged Remote Access (PRA), and Privilege Management for Windows. The addressed vulnerabilities could allow the attacker to bypass security restrictions, conduct denial of service attacks, or execute arbitrary code and gain access to the affected product. Sample of the addressed vulnerabilities: 1. BeyondTrust […]

The post BeyondTrust Security Updates – 07 July 2026 appeared first on EG-FinCIRT.

]]>
  • 215/2026
  • Critical

BeyondTrust has released security updates to address vulnerabilities affecting Remote Support (RS), Privileged Remote Access (PRA), and Privilege Management for Windows.

The addressed vulnerabilities could allow the attacker to bypass security restrictions, conduct denial of service attacks, or execute arbitrary code and gain access to the affected product.

Sample of the addressed vulnerabilities:

1. BeyondTrust Improper Neutralization of Special Elements Used in an OS Command Vulnerability (CVE-2026-1731):

  • CVSS 4.0: 9.9
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

2. BeyondTrust Uncontrolled Resource Consumption Vulnerability (CVE-2026- 40140):

  • CVSS 4.0: 8.7
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial of Service

It should be highlighted that security researchers publicly disclosed a proof-ofconcept (PoC) for the vulnerability “CVE-2026-1731” that exists in the wild.

Vulnerabilities
  • CVE-2026-1232
  • CVE-2026-1731
  • CVE-2026-40138
  • CVE-2026-40139
  • CVE-2026-40140
  • CVE-2026-40141
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

BeyondTrust Security Advisory

References

Security Advisories | BeyondTrust

The post BeyondTrust Security Updates – 07 July 2026 appeared first on EG-FinCIRT.

]]> Microsoft Security Updates – 06 July 2026 https://www.egfincirt.org.eg/microsoft-security-updates-06-july-2026/ Mon, 06 Jul 2026 07:56:30 +0000 https://www.egfincirt.org.eg/?p=17041 Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to perform spoofing attacks, obtain sensitive information, gain elevated privileges, bypass security restrictions, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability […]

The post Microsoft Security Updates – 06 July 2026 appeared first on EG-FinCIRT.

]]>
  • 213/2026
  • Critical

Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products.

The addressed vulnerabilities could allow the attacker to perform spoofing attacks, obtain sensitive information, gain elevated privileges, bypass security restrictions, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability (CVE- 2026-57100):

  • CVSS: 9.9
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Gain Privileges

2. Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVE-2026-58289):

  • CVSS: 9.0
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution
Vulnerabilities

Microsoft MSRC

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Microsoft MSRC

References

Microsoft MSRC

The post Microsoft Security Updates – 06 July 2026 appeared first on EG-FinCIRT.

]]> Mozilla Firefox Security Update – 06 July 2026 https://www.egfincirt.org.eg/mozilla-firefox-security-update-06-july-2026/ Mon, 06 Jul 2026 07:50:45 +0000 https://www.egfincirt.org.eg/?p=17032 Mozilla has released an updated Firefox version 152.0.4 to fix a critical vulnerability. The addressed vulnerability could allow the attacker to trigger memory corruption attacks or execute arbitrary code on the affected system. The addressed vulnerability: Mozilla Firefox Memory Safety Bugs Vulnerability (CVE-2026-14241): CVSS: 9.8 Attack Vector: Network Attack Complexity: Low Privileges Required: None User […]

The post Mozilla Firefox Security Update – 06 July 2026 appeared first on EG-FinCIRT.

]]>
  • 212/2026
  • Critical

Mozilla has released an updated Firefox version 152.0.4 to fix a critical vulnerability.

The addressed vulnerability could allow the attacker to trigger memory corruption attacks or execute arbitrary code on the affected system.

The addressed vulnerability:

Mozilla Firefox Memory Safety Bugs Vulnerability (CVE-2026-14241):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution
Vulnerabilities

CVE-2026-14241

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Mozilla Firefox Security Advisory

References

Mozilla Firefox Security Advisory

The post Mozilla Firefox Security Update – 06 July 2026 appeared first on EG-FinCIRT.

]]> Google Chrome Security Update – 05 July 2026 https://www.egfincirt.org.eg/google-chrome-security-update-05-july-2026/ Sun, 05 Jul 2026 07:44:25 +0000 https://www.egfincirt.org.eg/?p=17026 Google has released an updated Chrome version 150.0.7871.46/.47 for Windows and Mac and 150.0.7871.46 for Linux. The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems via a crafted HTML page. Sample of the addressed vulnerabilities: 1. Google Chrome Use […]

The post Google Chrome Security Update – 05 July 2026 appeared first on EG-FinCIRT.

]]>
  • 211/2026
  • Critical

Google has released an updated Chrome version 150.0.7871.46/.47 for Windows and Mac and 150.0.7871.46 for Linux.

The addressed vulnerabilities could allow the attacker to bypass security restrictions, gain elevated privileges, obtain sensitive information, or execute arbitrary code on the affected systems via a crafted HTML page.

Sample of the addressed vulnerabilities:

1. Google Chrome Use After Free Vulnerability (CVE-2026-13782):

  • CVSS: 10
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Bypass Security

2. Google Chrome Remote Code Execution Vulnerability (CVE-2026-14121):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code ExecutionWrite here analysis section
Vulnerabilities

Google Chrome Security Update

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Update

References

Google Chrome Security Update

The post Google Chrome Security Update – 05 July 2026 appeared first on EG-FinCIRT.

]]> Progress Kemp LoadMaster Security Update – 02 July 2026 https://www.egfincirt.org.eg/progress-kemp-loadmaster-security-update-02-july-2026/ Thu, 02 Jul 2026 07:18:09 +0000 https://www.egfincirt.org.eg/?p=17015 Progress has released a security update to address multiple vulnerabilities across Progress Kemp LoadMaster. The addressed vulnerabilities could allow the unauthenticated attacker to bypass security restrictions or execute arbitrary code on the affected system. Sample of the addressed vulnerabilities: Progress Kemp LoadMaster OS Command Injection Vulnerability (CVE-2026- 8037): CVSS: 9.6 Attack Vector: Adjacent Attack Complexity: […]

The post Progress Kemp LoadMaster Security Update – 02 July 2026 appeared first on EG-FinCIRT.

]]>
  • 209/2026
  • Critical

Progress has released a security update to address multiple vulnerabilities across Progress Kemp LoadMaster.

The addressed vulnerabilities could allow the unauthenticated attacker to bypass security restrictions or execute arbitrary code on the affected system.

Sample of the addressed vulnerabilities:

Progress Kemp LoadMaster OS Command Injection Vulnerability (CVE-2026- 8037):

  • CVSS: 9.6
  • Attack Vector: Adjacent
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

It should be highlighted that security researchers disclosed a proof-of-concept (PoC) exploit that exists in the wild for the vulnerability “CVE-2026-8037”.

Vulnerabilities
  • CVE-2026-8037
  • CVE-2026-33691
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Progress Kemp LoadMaster Security Update

References

Progress Kemp LoadMaster Security Update

The post Progress Kemp LoadMaster Security Update – 02 July 2026 appeared first on EG-FinCIRT.

]]> Adobe Security Updates – 01 July 2026 https://www.egfincirt.org.eg/adobe-security-updates-01-july-2026/ Wed, 01 Jul 2026 11:49:22 +0000 https://www.egfincirt.org.eg/?p=16996 Adobe has released security updates to address several vulnerabilities affecting Adobe ColdFusion and Adobe Campaign Classic. The addressed vulnerabilities could allow the attacker to bypass security restrictions, manipulate files, gain elevated privileges, or execute arbitrary commands on the affected product. Sample of the addressed vulnerabilities: 1. Adobe ColdFusion Unrestricted Upload of File with Dangerous Type […]

The post Adobe Security Updates – 01 July 2026 appeared first on EG-FinCIRT.

]]>
  • 207/2026
  • Critical

Adobe has released security updates to address several vulnerabilities affecting Adobe ColdFusion and Adobe Campaign Classic.

The addressed vulnerabilities could allow the attacker to bypass security restrictions, manipulate files, gain elevated privileges, or execute arbitrary commands on the affected product.

Sample of the addressed vulnerabilities:

1. Adobe ColdFusion Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-48276):

  • CVSS: 10.0
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

2. Adobe ColdFusion Improper Input Validation Vulnerability (CVE-2026- 48315):

  • CVSS: 9.3
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Gain Privileges
Vulnerabilities
  • CVE-2026-48276
  • CVE-2026-48277
  • CVE-2026-48281
  • CVE-2026-48316
  • CVE-2026-48282
  • CVE-2026-48283
  • CVE-2026-48313
  • CVE-2026-48315
  • CVE-2026-48307
  • CVE-2026-48285
  • CVE-2026-48314
  • CVE-2026-48286
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Adobe Security Advisory

References

Adobe Security Advisory

The post Adobe Security Updates – 01 July 2026 appeared first on EG-FinCIRT.

]]> Apache Tomcat Security Update – 01 July 2026 https://www.egfincirt.org.eg/apache-tomcat-security-update-01-july-2026/ Wed, 01 Jul 2026 10:49:22 +0000 https://www.egfincirt.org.eg/?p=16967 Apache Tomcat has released a security update to address several vulnerabilities affecting Apache Tomcat. The addressed vulnerabilities could allow the attacker to perform cross-site scripting attacks or bypass security restrictions on the affected system. Sample of the addressed vulnerabilities: 1. Apache Tomcat Invalid CRL Configuration Vulnerability (CVE-2026-53434): CVSS: 9.1 Attack Vector: Network Attack Complexity: Low […]

The post Apache Tomcat Security Update – 01 July 2026 appeared first on EG-FinCIRT.

]]>
  • 205/2026
  • Critical

Apache Tomcat has released a security update to address several vulnerabilities affecting Apache Tomcat.

The addressed vulnerabilities could allow the attacker to perform cross-site scripting attacks or bypass security restrictions on the affected system.

Sample of the addressed vulnerabilities:

1. Apache Tomcat Invalid CRL Configuration Vulnerability (CVE-2026-53434):

  • CVSS: 9.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Bypass Security

2. Apache Tomcat Number Guess Example Cross-Site Scripting Vulnerability (CVE-2026-50229):

  • CVSS: 6.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Cross-Site Scripting
Vulnerabilities
  • CVE-2026-50229
  • CVE-2026-53404
  • CVE-2026-53434
  • CVE-2026-55276
  • CVE-2026-55955
  • CVE-2026-55956
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Apache Tomcat Security Advisory

References

Apache Tomcat Security Advisory

The post Apache Tomcat Security Update – 01 July 2026 appeared first on EG-FinCIRT.

]]> Google Chrome Security Updates – 25 June 2026 https://www.egfincirt.org.eg/google-chrome-security-updates-25-june-2026/ Thu, 25 Jun 2026 12:28:57 +0000 https://www.egfincirt.org.eg/?p=16931 Google has released an updated Chrome version 149.0.7827.196/197 for Windows and Mac, and 149.0.7827.196 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial of service attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems via a crafted HTML page. Sample of the addressed vulnerabilities: 1. Google […]

The post Google Chrome Security Updates – 25 June 2026 appeared first on EG-FinCIRT.

]]>
  • 199/2026
  • Critical

Google has released an updated Chrome version 149.0.7827.196/197 for Windows and Mac, and 149.0.7827.196 for Linux.

The addressed vulnerabilities could allow the attacker to conduct denial of service attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems via a crafted HTML page.

Sample of the addressed vulnerabilities:

1. Google Chrome Use After Free in WebGL Vulnerability (CVE-2026-13028):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Bypass Security

2. Google Chrome Use After Free in Blink Vulnerability (CVE-2026-13031):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Remote Code Execution
Vulnerabilities

Google Chrome Security Updates

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Updates

References

Google Chrome Security Updates

The post Google Chrome Security Updates – 25 June 2026 appeared first on EG-FinCIRT.

]]> Google Chrome Security Updates – 24 June 2026 https://www.egfincirt.org.eg/google-chrome-security-updates-24-june-2026/ Wed, 24 Jun 2026 11:48:34 +0000 https://www.egfincirt.org.eg/?p=16924 Google has released an updated Chrome version 149.0.7827.155/.156 for Windows and Mac and 149.0.7827.155 for Linux. The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Google Chrome Digital Credentials Use After Free Vulnerability […]

The post Google Chrome Security Updates – 24 June 2026 appeared first on EG-FinCIRT.

]]>
  • 198/2026
  • Critical

Google has released an updated Chrome version 149.0.7827.155/.156 for Windows and Mac and 149.0.7827.155 for Linux.

The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Google Chrome Digital Credentials Use After Free Vulnerability (CVE-2026- 12440):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Security Bypass

2. Google Chrome WebView Inappropriate Implementation Vulnerability (CVE- 2026-12448):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Gain Privileges
Vulnerabilities

Google Chrome Security Updates

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Updates

References

Google Chrome Security Updates

The post Google Chrome Security Updates – 24 June 2026 appeared first on EG-FinCIRT.

]]> Cisco Security Updates – 21 June 2026 https://www.egfincirt.org.eg/cisco-security-updates-21-june-2026/ Sun, 21 Jun 2026 07:16:08 +0000 https://www.egfincirt.org.eg/?p=16906 Cisco has released security updates to address several vulnerabilities affecting multiple Cisco products. The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, perform denial of service attacks, or executemarbitrary commands on the affected system. Sample of the addressed vulnerabilities: 1. Cisco Identity Services Engine Remote Code Execution Vulnerability (CVE-2026-20181): CVSS: […]

The post Cisco Security Updates – 21 June 2026 appeared first on EG-FinCIRT.

]]>
  • 195/2026
  • Critical

Cisco has released security updates to address several vulnerabilities affecting multiple Cisco products.

The addressed vulnerabilities could allow the attacker to gain elevated privileges, obtain sensitive information, perform denial of service attacks, or executemarbitrary commands on the affected system.

Sample of the addressed vulnerabilities:

1. Cisco Identity Services Engine Remote Code Execution Vulnerability (CVE-2026-20181):

  • CVSS: 9.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: High
  • User Interaction: None
  • Consequences: Denial of Service

2. Cisco Identity Services Information Disclosure Vulnerability (CVE-2026- 20190):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Obtain Information

The affected products:

  • Cisco Identity Services Engine.
  • Cisco Crosswork Network Controller.
  • Cisco Umbrella Virtual Appliance.
  • Cisco Webex App.
Vulnerabilities
  • CVE-2026-20220
  • CVE-2026-20246
  • CVE-2026-20190
  • CVE-2026-20181
  • CVE-2026-20178
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Cisco Security Updates

References

Cisco Security Updates

The post Cisco Security Updates – 21 June 2026 appeared first on EG-FinCIRT.

]]> Microsoft Security Updates – 21 June 2026 https://www.egfincirt.org.eg/microsoft-security-updates-21-june-2026/ Sun, 21 Jun 2026 06:43:05 +0000 https://www.egfincirt.org.eg/?p=16900 Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products. The addressed vulnerabilities could allow the attacker to gain elevated privileges, perform spoofing attacks, obtain sensitive information, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Azure Active Directory Elevation of Privilege Vulnerability (CVE-2026-45480): CVSS: 10 Attack […]

The post Microsoft Security Updates – 21 June 2026 appeared first on EG-FinCIRT.

]]>
  • 194/2026
  • Critical

Microsoft has released security updates to address several vulnerabilities affecting multiple Microsoft products.

The addressed vulnerabilities could allow the attacker to gain elevated privileges, perform spoofing attacks, obtain sensitive information, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Azure Active Directory Elevation of Privilege Vulnerability (CVE-2026-45480):

  • CVSS: 10
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Privileges

2. M365 Copilot Information Disclosure Vulnerability (CVE-2026-54130):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Obtain information

Sample of the affected products:

  • Microsoft Exchange Online.
  • Microsoft Malware Protection Engine.
  • Azure Active Directory.
  • Microsoft 365 Copilot.
  • Microsoft Dynamics 365.
  • Dynamics 365 Customer Voice.
  • Azure Synapse.
  • Azure AI Bot Service.
Vulnerabilities
  • CVE-2026-47646
  • CVE-2026-47645
  • CVE-2026-48582
  • CVE-2026-48584
  • CVE-2026-47647
  • CVE-2026-54130
  • CVE-2026-42895
  • CVE-2026-45480
  • CVE-2026-32174
  • CVE-2026-32208
  • CVE-2026-47633
  • CVE-2026-50656
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Microsoft MSRC

References

Microsoft MSRC

The post Microsoft Security Updates – 21 June 2026 appeared first on EG-FinCIRT.

]]> Splunk Security Update – 21 June 2026 https://www.egfincirt.org.eg/splunk-security-update-21-june-2026/ Sun, 21 Jun 2026 06:35:01 +0000 https://www.egfincirt.org.eg/?p=16895 Splunk has released a security update to address two vulnerabilities affecting Splunk AI Toolkit. The addressed vulnerabilities could allow the attacker to obtain sensitive information or execute arbitrary OS commands on the affected system. The addressed vulnerabilities: 1. Splunk AI Toolkit OS Command Injection in the btool Configuration Helper Vulnerability (CVE-2026-20266): CVSS: 9.1 Attack Vector: […]

The post Splunk Security Update – 21 June 2026 appeared first on EG-FinCIRT.

]]>
  • 193/2026
  • Critical

Splunk has released a security update to address two vulnerabilities affecting Splunk AI Toolkit.

The addressed vulnerabilities could allow the attacker to obtain sensitive information or execute arbitrary OS commands on the affected system.

The addressed vulnerabilities:

1. Splunk AI Toolkit OS Command Injection in the btool Configuration Helper Vulnerability (CVE-2026-20266):

  • CVSS: 9.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: High
  • User Interaction: None
  • Consequences: Operating System Command Execution

2. Splunk AI Toolkit Insecure Default Domain Allowlist Vulnerability (CVE-2026-20265):

  • CVSS: 4.3
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Obtain Information
Vulnerabilities
  • CVE-2026-20266
  • CVE-2026-20265
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Splunk Security Update

References

Splunk Security Update

The post Splunk Security Update – 21 June 2026 appeared first on EG-FinCIRT.

]]> Oracle Security Patch Updates – 18 June 2026 https://www.egfincirt.org.eg/oracle-security-patch-updates-18-june-2026/ Thu, 18 Jun 2026 11:09:59 +0000 https://www.egfincirt.org.eg/?p=16889 Oracle released its critical patch updates for June 2026, containing 245 new security patches across multiple affected Oracle products and third-party components. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, obtain sensitive information, manipulate data, or gain access to the affected systems. Sample of the addressed vulnerabilities: 1. Oracle Coherence Centralized Takeover […]

The post Oracle Security Patch Updates – 18 June 2026 appeared first on EG-FinCIRT.

]]>
  • 191/2026
  • Critical

Oracle released its critical patch updates for June 2026, containing 245 new security patches across multiple affected Oracle products and third-party components.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, obtain sensitive information, manipulate data, or gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. Oracle Coherence Centralized Takeover Vulnerability (CVE-2026-35308):

  • CVSS: 10.0
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

2. Oracle Solaris Product of Oracle Systems Data Manipulation Vulnerability (CVE-2026-46978):

  • CVSS: 10.0
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Data Manipulation
Vulnerabilities
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Oracle Advisory – June 2026

References

The post Oracle Security Patch Updates – 18 June 2026 appeared first on EG-FinCIRT.

]]> Mozilla Firefox Security Updates – 17 June 2026 https://www.egfincirt.org.eg/mozilla-firefox-security-updates-17-june-2026/ Wed, 17 Jun 2026 09:38:58 +0000 https://www.egfincirt.org.eg/?p=16882 Mozilla has released updated Firefox version 152 and Firefox ESR versions 115.37 and 140.12 to fix multiple vulnerabilities. The addressed vulnerabilities could allow the attacker to conduct denial-of-service and spoofing attacks, gain elevated privilege, trigger memory corruption, obtain sensitive information, bypass security restrictions, and execute arbitrary code on the affected systems. Sample of the addressed […]

The post Mozilla Firefox Security Updates – 17 June 2026 appeared first on EG-FinCIRT.

]]>
  • 190/2026
  • Critical

Mozilla has released updated Firefox version 152 and Firefox ESR versions 115.37 and 140.12 to fix multiple vulnerabilities.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service and spoofing attacks, gain elevated privilege, trigger memory corruption, obtain sensitive information, bypass security restrictions, and execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1) Mozilla Firefox Same-Origin Policy Bypass in the Networking: Cookies Component Vulnerability (CVE-2026-12304):

  • CVSS: 9.1
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Bypass Security

2) Mozilla Firefox Privilege Escalation in the Graphics: WebRender Component (CVE-2026-12289):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low Firefox
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Gain Privileges
Vulnerabilities

Mozilla Firefox Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Mozilla Firefox Security Advisory

References

Mozilla Firefox Security Advisory

The post Mozilla Firefox Security Updates – 17 June 2026 appeared first on EG-FinCIRT.

]]> Fortra Security Update – 16 June 2026 https://www.egfincirt.org.eg/fortra-security-update-16-june-2026/ Tue, 16 Jun 2026 08:49:35 +0000 https://www.egfincirt.org.eg/?p=16871 Fortra has released a security update to fix two vulnerabilities affecting Fortra’s Core Privileged Access Manager (BoKS). The addressed vulnerabilities could allow the attacker to gain elevated privileges or compromise a legacy tar-installed client, which may be able to cause commands to be executed on the affected system. The addressed vulnerabilities: 1. Core Privileged Access […]

The post Fortra Security Update – 16 June 2026 appeared first on EG-FinCIRT.

]]>
  • 188/2026
  • Critical

Fortra has released a security update to fix two vulnerabilities affecting Fortra’s Core Privileged Access Manager (BoKS).

The addressed vulnerabilities could allow the attacker to gain elevated privileges or compromise a legacy tar-installed client, which may be able to cause commands to be executed on the affected system.

The addressed vulnerabilities:

1. Core Privileged Access Manager Autoregistration Service Command Injection Vulnerability (CVE-2026-9862):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Privileges

2. Core Privileged Access Manager Upgrade Tooling Command Injection Vulnerability (CVE-2026-9863):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: High
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Commands Execut
Vulnerabilities
  • CVE-2026-9862
  • CVE-2026-9863
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Fortra Security Advisory

References

Fortra Security Advisory

The post Fortra Security Update – 16 June 2026 appeared first on EG-FinCIRT.

]]> Google Chrome Security Update – 14 June 2026 https://www.egfincirt.org.eg/google-chrome-security-update-14-june-2026/ Sun, 14 Jun 2026 08:35:52 +0000 https://www.egfincirt.org.eg/?p=16858 Google has released an updated Chrome version 149.0.7827.114/.115 for Windows and Mac, and 149.0.7827.114 for Linux. The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, trigger memory corruption, gain elevated privileges, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected system via a crafted HTML page. Sample of the […]

The post Google Chrome Security Update – 14 June 2026 appeared first on EG-FinCIRT.

]]>
  • 186/2026
  • Critical

Google has released an updated Chrome version 149.0.7827.114/.115 for Windows and Mac, and 149.0.7827.114 for Linux.

The addressed vulnerabilities could allow the attacker to conduct denial-of-service attacks, trigger memory corruption, gain elevated privileges, obtain sensitive information, bypass security restrictions, or execute arbitrary code on the affected system via a crafted HTML page.

Sample of the addressed vulnerabilities:

1. Google Chrome Headless Insufficient Policy Enforcement Vulnerability (CVE- 2026-12027):

  • CVSS: 9.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Bypass Security

2. Google Chrome Core Use-After Free Vulnerability (CVE-2026-12007):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Remote Code Execution
Vulnerabilities

Google Chrome Security Update

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Google Chrome Security Update

References

Google Chrome Security Update

The post Google Chrome Security Update – 14 June 2026 appeared first on EG-FinCIRT.

]]> Oracle Security Update – 12 June 2026 https://www.egfincirt.org.eg/oracle-security-update-12-june-2026/ Fri, 12 Jun 2026 08:31:16 +0000 https://www.egfincirt.org.eg/?p=16853 Oracle has released a security update to fix a critical zero-day vulnerability affecting Oracle PeopleSoft Enterprise PeopleTools. The addressed vulnerability could allow the unauthenticated attacker with network access via HTTP to execute arbitrary code, leading to the compromise and a complete takeover of the affected systems. The addressed vulnerability: Oracle PeopleSoft Enterprise PeopleTools Remote Code […]

The post Oracle Security Update – 12 June 2026 appeared first on EG-FinCIRT.

]]>
  • 185/2026
  • Critical

Oracle has released a security update to fix a critical zero-day vulnerability affecting Oracle PeopleSoft Enterprise PeopleTools.

The addressed vulnerability could allow the unauthenticated attacker with network access via HTTP to execute arbitrary code, leading to the compromise and a complete takeover of the affected systems.

The addressed vulnerability:

Oracle PeopleSoft Enterprise PeopleTools Remote Code Execution Vulnerability (CVE-2026-35273):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Remote Code Execution

It should be highlighted that Oracle is aware that the zero-day vulnerability “CVE- 2026-35273” is being exploited in the wild.

Vulnerabilities

CVE-2026-35273

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Oracle Security Advisory

References

Oracle Security Advisory

The post Oracle Security Update – 12 June 2026 appeared first on EG-FinCIRT.

]]> Splunk Security Updates – 11 June 2026 https://www.egfincirt.org.eg/splunk-security-updates-11-june-2026/ Thu, 11 Jun 2026 08:19:31 +0000 https://www.egfincirt.org.eg/?p=16845 Splunk has released security updates to address several vulnerabilities affecting multiple Splunk products. The addressed vulnerabilities could allow the attacker to perform server-side request forgery (SSRF), conduct cross-site scripting (XSS) attacks, manipulate data, bypass security restrictions, obtain sensitive information, or execute arbitrary code on the affected systems. Sample of the addressed vulnerabilities: 1. Splunk Enterprise […]

The post Splunk Security Updates – 11 June 2026 appeared first on EG-FinCIRT.

]]>
  • 184/2026
  • Critical

Splunk has released security updates to address several vulnerabilities affecting multiple Splunk products.

The addressed vulnerabilities could allow the attacker to perform server-side request forgery (SSRF), conduct cross-site scripting (XSS) attacks, manipulate data, bypass security restrictions, obtain sensitive information, or execute arbitrary code on the affected systems.

Sample of the addressed vulnerabilities:

1. Splunk Enterprise Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint Vulnerability (CVE-2026-20253):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Data Manipulation

2. Splunk Secure Gateway Remote Code Execution through Deserialization of Untrusted Data Vulnerability (CVE-2026-20251):

  • CVSS: 8.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Consequences: Remote Code Execution

The affected products:

  • Splunk SOAR.
  • Splunk Enterprise.
  • Splunk Secure Gateway.
  • Splunk Cloud Platform.
Vulnerabilities
  • CVE-2026-20260
  • CVE-2026-20259
  • CVE-2026-20258
  • CVE-2026-20257
  • CVE-2026-20256
  • CVE-2026-20255
  • CVE-2026-20254
  • CVE-2026-20253
  • CVE-2026-20252
  • CVE-2026-20251
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Splunk Security Updates

References

Splunk Security Updates

The post Splunk Security Updates – 11 June 2026 appeared first on EG-FinCIRT.

]]> Adobe Security Updates – 10 June 2026 https://www.egfincirt.org.eg/adobe-security-updates-10-june-2026/ Wed, 10 Jun 2026 10:48:50 +0000 https://www.egfincirt.org.eg/?p=16832 Adobe has released security updates to address several vulnerabilities affecting multiple Adobe products. The addressed vulnerabilities could allow the attacker to bypass security restrictions, manipulate data, obtain sensitive information, perform denial-ofservice and cross-site scripting attacks, execute arbitrary code, and gain access to the affected systems. Sample of the addressed vulnerabilities: 1. Adobe Experience Manager Forms […]

The post Adobe Security Updates – 10 June 2026 appeared first on EG-FinCIRT.

]]>
  • 181/2026
  • Critical

Adobe has released security updates to address several vulnerabilities affecting multiple Adobe products.

The addressed vulnerabilities could allow the attacker to bypass security restrictions, manipulate data, obtain sensitive information, perform denial-ofservice and cross-site scripting attacks, execute arbitrary code, and gain access to the affected systems.

Sample of the addressed vulnerabilities:

1. Adobe Experience Manager Forms Cross-Site Scripting Vulnerability (CVE- 2026-34691):

  • CVSS: 9.3
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Cross-Site Scripting

2. Adobe ColdFusion Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) Vulnerability (CVE-2026-47932):

  • CVSS: 8.8
  • Attack Vector: Adjacent
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: Required
  • Consequences: Security Bypass
Vulnerabilities

Adobe Security Advisory

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Adobe Security Advisory

References

Adobe Security Advisory

The post Adobe Security Updates – 10 June 2026 appeared first on EG-FinCIRT.

]]>