erroneo.us
Search all guides⌘K

Digest · Thursday

Security digest: February 12, 2026

4 known exploited (cisa kev) additions and 3 critical advisories.

All digests · RSS · Markdown

Take stock

  • Do you run any of these? Apple Multiple Products, SolarWinds Web Help Desk, Notepad++ Notepad++, Microsoft Configuration Manager. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-02-15.
  • crates.io (Rust): 3 critical advisories (finch-rst, sha-rst, finch_cli_rust). Check with cargo audit.
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Known exploited (CISA KEV) 4

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

CVEProduct and flawCISA due
CVE-2026-20700Apple Multiple Products
Apple Multiple Buffer Overflow Vulnerability		2026-03-05
CVE-2025-40536SolarWinds Web Help Desk
SolarWinds Web Help Desk Security Control Bypass Vulnerability		2026-02-15
CVE-2025-15556Notepad++ Notepad++
Notepad++ Download of Code Without Integrity Check Vulnerability		2026-03-05
CVE-2024-43468Microsoft Configuration Manager
Microsoft Configuration Manager SQL Injection Vulnerability		2026-03-05

Critical advisories by ecosystem 3

GitHub-reviewed advisories rated critical, published this day (Pacific time).

crates.io (Rust) 3

Check: cargo audit