Huntress has observed active exploitation of a deserialization and remote code execution against the SolarWinds Web Help Desk software (CVE-2025-26399).

IBM security advisory (AV26-050)

[Control systems] CISA ICS security advisories (AV26–051)

HPE security advisory (AV26-052)

Red Hat security advisory (AV26-053)

VMware security advisory (AV26-054)

[Control systems] ABB security advisory (AV26-055)

[Control systems] B&R security advisory (AV26-056)

Microsoft Edge security advisory (AV26-057)

GNU security advisory (AV26-047) – Update 1

SmarterTools security advisory (AV25-866) – Update 1

Microsoft security advisory – January 2026 monthly rollup (AV26-024) – Update 1

OpenSSL security advisory (AV26-058)

Fortinet security advisory (AV26-059) – Update 1

Google Chrome security advisory (AV26-060)

AL25-019 - Vulnerabilities impacting Fortinet products - FortiCloud SSO Login Authentication Bypass - CVE-2025-59718 and CVE-2025-59719 - Update 2

HPE security advisory (AV26-061)

[Control systems] Siemens security advisory (AV26-062)

Tenable security advisory (AV26-064)

Drupal security advisory (AV26-065)

[Control systems] B&R security advisory (AV26-066)

Citrix security advisory (AV25-067)

Ivanti security advisory (AV26-068) – Update 1

WatchGuard security advisory (AV26-069)

Microsoft Edge security advisory (AV26-070)

Mozilla security advisory (AV26-071)

IBM security advisory (AV26-072)

Dell security advisory (AV26-073)

[Control systems] CISA ICS security advisories (AV26–074)

VMware security advisory (AV26-075)