Security Advisory – 02 Nov 2026

Security fixes and advisories that landed overnight. Entries are drawn from vendor and public vulnerability notices. Each entry has a short summary, publish time, and any CVE identifiers mentioned. Updated 02 Nov 2026 00:00 GMT.

Top items

NIST

CVE-2026-120189

A vulnerability was identified in D-Link DIR-505 1.10B02. The manipulation of the TFTP Upload Filename Handler in /usr/bin/tftpd’s save_upload_file/mp_upload_file leads to a stack-based buffer overflow and the attack can be carried out remotely.

  • Published: 01 Nov 2026 01:17 GMT
  • CVEs: Not stated in the advisory excerpt
  • Notes: Exploit is publicly available

Related posts

Vault | v2.2.1

Vault v2 2 1: maintenance patch with regression fixes, stability and correctness improvements, upgrade guidance, verify downloads and report regressions

authentik | version/2026.8.5

authentik v2026 8 5: fixes MultipleObjectsReturned endpoints, skips existing Microsoft Entra group members, updates certificate deps for emudhra, UI bug fixes

Caddy | v2.11.7

Caddy v2 11 7: fixes idle timeout regressions, HTTP2 proxy crash and cut streams, adds RFC10036 Incremental for streaming, reliability, placeholders restored