--- title: "Security digest: February 12, 2026" url: https://erroneo.us/security/2026-02-12/ description: "February 12, 2026 vulnerability digest: 4 CISA KEV additions (Apple, Microsoft, Notepad++, SolarWinds); 3 critical advisories (crates.io (Rust)). What to…" type: security-digest-day section: "Security Digest" date_published: 2026-02-12 date_modified: 2026-02-12 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: February 12, 2026 4 known exploited (cisa kev) additions and 3 critical advisories. ## Take stock - Do you run any of these? Apple Multiple Products, SolarWinds Web Help Desk, Notepad++ Notepad++, Microsoft Configuration Manager. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-02-15. - crates.io (Rust): 3 critical advisories ( finch-rst , sha-rst , finch_cli_rust ). Check with cargo audit . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Known exploited (CISA KEV) - [CVE-2026-20700](https://erroneo.us/security/cve/CVE-2026-20700/index.md) Apple Multiple Products: Apple Multiple Buffer Overflow Vulnerability (CISA due 2026-03-05) - [CVE-2025-40536](https://erroneo.us/security/cve/CVE-2025-40536/index.md) SolarWinds Web Help Desk: SolarWinds Web Help Desk Security Control Bypass Vulnerability (CISA due 2026-02-15) - [CVE-2025-15556](https://erroneo.us/security/cve/CVE-2025-15556/index.md) Notepad++ Notepad++: Notepad++ Download of Code Without Integrity Check Vulnerability (CISA due 2026-03-05) - [CVE-2024-43468](https://erroneo.us/security/cve/CVE-2024-43468/index.md) Microsoft Configuration Manager: Microsoft Configuration Manager SQL Injection Vulnerability (CISA due 2026-03-05) ## Critical advisories - [GHSA-xp79-9mxw-878j](https://erroneo.us/security/ghsa/GHSA-xp79-9mxw-878j/index.md) `finch-rst` was removed from crates.io for malicious code — crates.io (Rust) finch-rst >= 0 → no fix - [GHSA-vgr2-r5hm-f6gf](https://erroneo.us/security/ghsa/GHSA-vgr2-r5hm-f6gf/index.md) `sha-rst` was removed from crates.io for malicious code — crates.io (Rust) sha-rst >= 0 → no fix - [GHSA-6v2j-vr4h-f632](https://erroneo.us/security/ghsa/GHSA-6v2j-vr4h-f632/index.md) `finch_cli_rust` was removed from crates.io for malicious code — crates.io (Rust) finch_cli_rust >= 0 → no fix --- Source page: https://erroneo.us/security/2026-02-12/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt