Warnings and recommendations from national cyber security agencies, newest first. Each brief is at most 120 words, bottom line first, and links to the publication it was written from.
CERT-EU · Advisory ·
2026-018: Critical Vulnerabilities in PHP
PHP vulnerabilities concern all PHP versions from 5 onwards.
The PHP foundation announced two critical vulnerabilities in PHP that could lead to remote code execution. CERT-EU advises organisations to prepare for immediate patching. The vulnerabilities affect all PHP versions from PHP 5 onwards.
Recommended by the publisher: CERT-EU recommends identifying PHP-based applications and preparing to patch as soon as fixed versions become available.
2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions
GitLab servers are vulnerable to code execution.
The vulnerability CVE-2026-110264 affects GitLab Community and Enterprise Editions from 7.0 before 18.11.13. GitLab has fixed this critical integer overflow vulnerability. An unauthenticated user could execute arbitrary code on the affected server.
Recommended by the publisher: CERT-EU recommends updating affected assets as soon as possible.
2026-017: Critical Vulnerability in Cisco Secure Email Gateway
Cisco Secure Email Gateway has a critical vulnerability.
The vulnerability CVE-2026-76519 affects Cisco Secure Email Gateway running certain versions of Cisco AsyncOS Software. Cisco has confirmed exploitation. An attacker can write arbitrary files and execute commands with root privileges.
Recommended by the publisher: CERT-EU recommends updating the Content Scanner Tools package or upgrading Cisco AsyncOS Software as soon as possible.
2026-016: Critical Vulnerability in GitLab CE and EE
GitLab CE and EE have a critical vulnerability.
The vulnerability CVE-2026-97229 affects GitLab CE and EE versions before 19.4.2, 19.3.4 and 19.2.8. An unauthenticated attacker can execute arbitrary code on the server. GitLab also fixed other vulnerabilities, including CVE-2026-92883 and CVE-2026-16301.
Recommended by the publisher: CERT-EU recommends upgrading self-managed GitLab CE/EE instances to a fixed version.
2026-015: Critical Vulnerability in Multiple Atlassian Products
Atlassian products have a critical arbitrary file access vulnerability.
The vulnerability CVE-2026-21589 affects Bitbucket Data Center, Confluence Data Center, and other products. An unauthenticated attacker can access specific files. Atlassian notes that some configurations may contain sensitive files.
Recommended by the publisher: CERT-EU recommends upgrading affected installations to a fixed version as soon as possible.
2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway
Citrix NetScaler ADC and Gateway have critical vulnerabilities, says CERT-EU.
Citrix NetScaler ADC and Gateway versions 13.1 before 13.1-64.23 and 14.1 before 14.1-73.37 are affected by 8 vulnerabilities, including 2 critical unauthenticated Remote Code Execution vulnerabilities that Citrix has confirmed are exploited in the wild. The vulnerabilities affect customer-managed deployments. CERT-EU assesses that updating affected software is necessary.
Recommended by the publisher: CERT-EU recommends updating affected software and running a compromise assessment on those exposed on the internet.
2026-012: Critical Vulnerabilities in Check Point Products
Check Point products have critical vulnerabilities.
Check Point Security Gateway, Security Management Server, and Spark Firewall are affected. Vulnerabilities CVE-2026-85102 and CVE-2026-85103 allow an unauthenticated, remote attacker to execute arbitrary code. They affect deployments using Site-to-Site VPN or Remote Access VPN.
Recommended by the publisher: CERT-EU strongly recommends applying the available hotfixes as soon as possible.
2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server
SAP Kernel and NetWeaver are vulnerable to critical exploits.
CVE-2026-44756 and CVE-2026-58240 affect SAP products, allowing remote exploitation without authentication, and can result in arbitrary operating system command execution. Onapsis assesses that successful exploitation allows a remote attacker to execute arbitrary operating system commands on the SAP host with SAP administrative privileges. The vulnerabilities are remotely exploitable.
Recommended by the publisher: CERT-EU strongly recommends applying SAP Security Notes 3747649 and 3759472 as soon as possible.
2026-010: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway
Citrix NetScaler ADC and Gateway have critical vulnerabilities.
CVE-2026-19489 and CVE-2026-19490 affect NetScaler ADC and NetScaler Gateway versions 14.1 before 14.1-73.32 and 13.1 before 13.1-63.21. These vulnerabilities can lead to Denial of Service or authentication bypass. CERT-EU recommends updating affected devices.
Recommended by the publisher: CERT-EU recommends updating affected devices as soon as possible.