Security Digest archive
February 2026
3 editorial briefs, 28 known exploited (cisa kev) additions and 100 critical advisories across 19 digest days.
Friday, February 27, 2026
- Critical 3 advisories: code.vikunja.io/api, vitess.io/vitess, langflow
Thursday, February 26, 2026
Wednesday, February 25, 2026
- Act now Cisco SD-WAN CVE-2026-20127: CVSS 10 Bypass, ED 26-03
- KEV CVE-2026-20127 Cisco Catalyst SD-WAN Controller and Manager
- KEV CVE-2022-20775 Cisco SD-WAN
- Critical 18 advisories: n8n, @angular/ssr, n8n, n8n, bugsink, rustfs, budibase, parse-dashboard, @oneuptime/common, n8n, @enclave-vm/core, parse-dashboard …
Tuesday, February 24, 2026
- KEV CVE-2026-25108 Soliton Systems K.K FileZen
- Critical 4 advisories: @oneuptime/common, @actual-app/sync-server, statamic/cms, @frangoteam/fuxa
Monday, February 23, 2026
- Critical 2 advisories: ormar, org.apache.camel:camel-keycloak
Friday, February 20, 2026
- KEV CVE-2025-68461 Roundcube Webmail
- KEV CVE-2025-49113 Roundcube Webmail
- Critical 2 advisories: fast-xml-parser, mlflow
Thursday, February 19, 2026
- Critical 5 advisories: semantic-kernel, org.wso2.carbon.apimgt:org.wso2.carbon.…, swiper, github.com/akuity/kargo, github.com/dagu-org/dagu
Wednesday, February 18, 2026
- KEV CVE-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs)
- KEV CVE-2021-22175 GitLab GitLab
- Critical 2 advisories: ghost, nltk
Tuesday, February 17, 2026
- KEV CVE-2026-2441 Google Chromium
- KEV CVE-2024-7694 TeamT5 ThreatSonar Anti-Ransomware
- KEV CVE-2020-7796 Synacor Zimbra Collaboration Suite
- KEV CVE-2008-0015 Microsoft Windows
- Critical 5 advisories: openclaw, @openclaw/nextcloud-talk, pterodactyl/panel, openclaw, openclaw
Friday, February 13, 2026
- KEV CVE-2026-1731 BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)
- Critical 2 advisories: polymarket-client-sdks, idno/known
Thursday, February 12, 2026
- KEV CVE-2026-20700 Apple Multiple Products
- KEV CVE-2025-40536 SolarWinds Web Help Desk
- KEV CVE-2025-15556 Notepad++ Notepad++
- KEV CVE-2024-43468 Microsoft Configuration Manager
- Critical 3 advisories: finch-rst, sha-rst, finch_cli_rust
Wednesday, February 11, 2026
- Critical 2 advisories: github.com/milvus-io/milvus, set-in
Tuesday, February 10, 2026
- Check exposure FortiOS CVE-2025-68686: SSL-VPN Symlink Patch Bypass in KEV
- KEV CVE-2026-21533 Microsoft Windows
- KEV CVE-2026-21525 Microsoft Windows
- KEV CVE-2026-21519 Microsoft Windows
- KEV CVE-2026-21514 Microsoft Office
- KEV CVE-2026-21513 Microsoft Windows
- KEV CVE-2026-21510 Microsoft Windows
- Critical 3 advisories: @casl/ability, org.apache.druid.extensions:druid-basic…, azure-ai-language-conversations-authori…
Monday, February 9, 2026
- Critical 4 advisories: @nyariv/sandboxjs, fuxa-server, fuxa-server, github.com/gofiber/fiber/v2
Friday, February 6, 2026
- Critical 10 advisories: uniswap-utils, gogs.io/gogs, finch-rust, evm-units, keylime, dydx-v4-client, sha-rust, polymarket-clients-sdk, semantic-kernel, devcode-it/openstamanager
Thursday, February 5, 2026
- KEV CVE-2026-24423 SmarterTools SmarterMail
- KEV CVE-2025-11953 React Native Community CLI
- Critical 6 advisories: @payloadcms/drizzle, github.com/dunglas/frankenphp, @nyariv/sandboxjs, @nyariv/sandboxjs, @nyariv/sandboxjs, @nyariv/sandboxjs
Wednesday, February 4, 2026
- Critical 15 advisories: fuxa-server, github.com/rancher/local-path-provision…, n8n, survey-pdf, fuxa-server, n8n, fuxa-server, n8n, github.com/alist-org/alist/v3, fuxa-server, n8n, n8n …
Tuesday, February 3, 2026
- KEV CVE-2025-64328 Sangoma FreePBX
- KEV CVE-2025-40551 SolarWinds Web Help Desk
- KEV CVE-2021-39935 GitLab Community and Enterprise Editions
- KEV CVE-2019-19006 Sangoma FreePBX
- Critical 4 advisories: @builder.io/qwik-city, github.com/navidrome/navidrome, unstructured, com.hubspot.jinjava:jinjava
Monday, February 2, 2026
- Check exposure Notepad++ Updater Hijack: State Actor Served Bad Updates
- Critical 8 advisories: langroid, ai.h2o:h2o-core, locutus, @signalk/set-system-time, ci4-cms-erp/ci4ms, bambuddy, @nyariv/sandboxjs, vllm