ccb.belgium.be

Red Daemons conclude their ECSC 2026 journey in Bochum

After an intensive week of competition, learning and exchange, the European Cybersecurity Challenge (ECSC) 2026 has come to ...
ccb.belgium.be

CyFun® 2025 is here!

As the national authority for Cybersecurity the CCB has developed several initiatives for specific publics which are presented here. The CCB’s mission include being the national CSIRT, the certifying ...
ccb.belgium.be

Warning: Authorization bypass and command injection in Barracuda Email Security Gateway and other Barracuda products, Patch Immediately!

Load Balancer Application Delivery Controller (ADC) Message Archiver (BMA) WAF Control Center (WCC) Web Application Firewall (WAF) Web Security Gateway (WSG) An unauthenticated attacker with access to ...
ccb.belgium.be

Warning: Remote command execution in WordPress Core during upgrade window actively exploited, Patch Immediately!

WordPress (4.7.0, 4.8.0, 4.9.0, 5.0.0, 5.1.0, and more...) This vulnerability allows an unauthenticated attacker to execute arbitrary commands during a full core upgrade process. A server is only ...
ccb.belgium.be

Warning: Critical authentication vulnerability in Canonical LXD and MicroCloud, Patch Immediately!

An attacker can impersonate another user using that other user’s public client TLS certificate. Depending on the user they can impersonate, this gives them full access to the cluster and virtual ...
ccb.belgium.be

Warning: Critical authentication bypass and command injection in Progress WS_FTP, Patch Immediately!

The first vulnerability allows remote attackers to get access to sensitive information, including user credentials, by bypassing authentication. Once logged in, the second one allows them to execute ...
ccb.belgium.be

Warning: Critical Authentication Bypass Vulnerability in Fortinet FortiSandbox, Patch Immediately!

An unauthenticated attacker over the network can exploit this vulnerability by sending crafted HTTP requests to bypass authentication and execute arbitrary code or commands on the affected ...
ccb.belgium.be

Warning: Multiple Vulnerabilities Affecting IBM Langflow, Patch Immediately!

Affected software: Langflow OSS versions 1.0.0 through 1.12.8 CVE-2026-93680: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) CVE-2026-110186: 9.8 (CVSS:3.1/AV:N ...
ccb.belgium.be

Warning: Unauthenticated Remote Code Execution in Oracle E-Business Suite, Patch Immediately!

Oracle E-Business Suite (EBS) is the enterprise resource planning suite large organisations use to run finance, payroll, HR, procurement and supply chain. Oracle Application Object Library is the ...
ccb.belgium.be

Warning: Actively Exploited Vulnerability in VeloCloud Orchestrator (VCO), Patch Immediately!

This vulnerability affects the on-prem VeloCloud Orchestrator (VCO) where any user with a valid VCO login, even the lowest built-in role (Enterprise Read Only), can gain operator privileges and act as ...
ccb.belgium.be

Warning: Unauthenticated Remote Denial of Service in Cisco Secure Firewall ASA and FTD Software, Patch Immediately!

Cisco Secure Firewall ASA Software: 9.16.4.103 and earlier, 9.18.4.94 and earlier, 9.19.1.42 and earlier, 9.20.4.49 and earlier, 9.22.3.26 and earlier, 9.23.1.47 and ...