CERT Polska coordinated disclosure of 4 vulnerabilities (CVE-2026-110468, CVE-2026-110469, CVE-2026-112204 and CVE-2026-112205) found in WidzialniCMS software.CERT PolskaRead More
CERT News
CERT announcements
Podatności w oprogramowaniu WidzialniCMS
CERT Polska koordynował ujawnienie 4 podatności (CVE-2026-110468, CVE-2026-110469, CVE-2026-112204 oraz CVE-2026-112205) znalezionych w oprogramowaniu WidzialniCMS.CERT PolskaRead More
Vulnerability in KAMSOFT ZSIRep CLIENT library
Improper Certificate Validation vulnerability (CVE-2026-113618) has been found in KAMSOFT ZSIRep CLIENT library.CERT PolskaRead More
Podatność w bibliotece KAMSOFT ZSIREP CLIENT
W bibliotece KAMSOFT ZSIRep CLIENT wykryto podatność typu Improper Certificate Validation (CVE-2026-113618)CERT PolskaRead More
Latest
C3RB3R attacks Synology NAS: how to protect your files | Kaspersky official blog
C3RB3R ransomware is attacking Synology NAS devices running outdated versions of DiskStation Manager (DSM). We explain how to protect your
CERT Polska uruchamia program bug bounty dla administracji publicznej
Startuje program bug bounty – uruchomiony na autorskiej platformie hack.cert.pl, stworzonej i obsługiwanej przez CERT Polska. Cały proces zgłaszania i obsługi
Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years
The NCSC warns that ‘tech on the cheap’ has left UK organisations exposed to AI uncovering and exploiting longstanding cyber
Artificial intelligence and cyber intrusion
An NCSC assessment that examines current AI-enabled threat trends and projections of the threat landscape to 2028.All FeedRead More
Vulnerabilities in Request Tracker and RT for Incident Response software
During its own research, CERT Polska has found 3 XSS vulnerabilities (from CVE-2026-105454 to CVE-2026-105456) in Request Tracker (RT) and
Podatności w oprogramowaniu Request Tracker oraz RT for Incident Response
W ramach własnych badań CERT Polska wykrył 3 podatności XSS w oprogramowaniu Request Tracker oraz RT for Incident Response (od
Podatności w oprogramowaniu ARKETEAM Protectel
CERT Polska otrzymał zgłoszenie dotyczące 5 podatności (od CVE-2025-68391 do CVE-2025-68395) wykrytych w oprogramowaniu ARKETEAM Protectel.CERT PolskaRead More
Vulnerabilities in ARKETEAM Protectel software
CERT Polska has received a report about 5 vulnerabilities (from CVE-2025-68391 to CVE-2025-68395) found in ARKETEAM Protectel software.CERT PolskaRead More
Vulnerabilities in Płatnik software
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-110970 to CVE-2026-110972) found in Płatnik software.CERT PolskaRead More
Podatności w oprogramowaniu Płatnik
W oprogramowaniu Płatnik wykryto 3 podatności różnego typu (od CVE-2026-110970 do CVE-2026-110972)CERT PolskaRead More
Podatności w oprogramowaniu Szafir
W oprogramowaniu Szafir wykryto 3 podatności różnego typu (CVE-2026-93570, CVE-2026-93571 oraz CVE-2026-106036)CERT PolskaRead More
Vulnerabilities in Szafir software
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-93570, CVE-2026-93571 and CVE-2026-106036) found in Szafir software.CERT PolskaRead More
Vulnerabilities in Zimbra Collaboration software
During its own research, CERT Polska has found 2 XSS vulnerabilities (CVE-2026-66911 and CVE-2026-66912) in Zimbra Collaboration software.CERT PolskaRead More
Podatności w oprogramowaniu Zimbra Collaboration
W ramach własnych badań CERT Polska odkrył 2 podatności XSS (CVE-2026-66911 i CVE-2026-66912) w oprogramowaniu Zimbra Collaboration.CERT PolskaRead More
Vulnerability in Wing FTP Server software
Path Traversal vulnerability (CVE-2026-105420) has been found in Wing FTP Server software.CERT PolskaRead More
Podatność w oprogramowaniu Wing FTP Server
W oprogramowaniu Wing FTP Server wykryto podatność typu Path Traversal (CVE-2026-105420).CERT PolskaRead More
Vulnerability in KGS Software tia Viewer software
Stored Cross-Site Scripting vulnerability (CVE-2026-105987) has been found in KGS Software tia Viewer software.CERT PolskaRead More
Podatność w oprogramowaniu KGS Software tia Viewer
W oprogramowaniu KGS Software tia Viewer wykryto podatność typu Stored Cross-Site Scripting (CVE-2026-105987).CERT PolskaRead More
Vulnerabilities in twofactor_gauthenticator plugin for Roundcube
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-107145 to CVE-2026-107147) found in twofactor_gauthenticator plugin for Roundcube.CERT PolskaRead
Podatności we wtyczce twofactor_gauthenticator dla Roundcube
CERT Polska otrzymał zgłoszenie dotyczące 3 podatności (od CVE-2026-107145 do CVE-2026-107147) wykrytych we wtyczce twofactor_gauthenticator dla Roundcube.CERT PolskaRead More
From industry concern to practical action: the value of working with regulators
How industry, the NCSC and the FCA worked together to help organisations share information while protecting market integrityAll FeedRead More
Vulnerabilities in boneIO products
CERT Polska has received a report about 11 vulnerabilities (from CVE-2026-77052 to CVE-2026-77062) found in boneIO products.CERT PolskaRead More
Podatności w produktach boneIO
W produktach boneIO wykryto 11 podatności różnego typu (od CVE-2026-77052 do CVE-2026-77062)CERT PolskaRead More
Vulnerabilities in CGM CLININET software
CERT Polska has received a report about 11 vulnerabilities (CVE-2025-30043 and from CVE-2025-30045 to CVE-2025-30047, from CVE-2025-30049 to CVE-2025-30054 and
Podatności w oprogramowaniu CGM CLININET
Zespłół CERT Polska otrzymał zgłoszenia dotyczące 11 podatności (CVE-2025-30043 oraz od CVE-2025-30045 do CVE-2025-30047, od CVE-2025-30049 do CVE-2025-30054 i CVE-2025-58403)
Vulnerability in MTW CleanShot X software
Deserialization of Untrusted Data vulnerability (CVE-2026-16477) has been found in MTW CleanShot X software.CERT PolskaRead More
Podatność w oprogramowaniu MTW CleanShot X
W oprogramowaniu MTW CleanShot X wykryto podatność związaną z deserializacją niezaufanych danych (CVE-2026-16477).CERT PolskaRead More
TR-102 Critical Vulnerabilities in PHP (Potentially Exploited) – CVE-2026-109618 and CVE-2026-109619
Introduction Two critical security vulnerabilities, CVE-2026-109618 and CVE-2026-109619, have been reported in the PHP runtime. Both have a CVSS v4.0
Critical security issue affecting PHP
The NCSC is encouraging UK organisations to prepare for immediate updating of systems using PHP.All FeedRead More
Seven Core Research Areas for a Rapidly Evolving Cyber Landscape
This post presents seven core research areas for a rapidly evolving cyber landscape.SEI BlogRead More
Introducing a new AI chapter in the NCSC research problem book
A revolution is underway at the intersection of AI and cyber security.All FeedRead More
Vulnerability in NordVPN software
Incorrect Authorization vulnerability (CVE-2026-106030) has been found in NordVPN software.CERT PolskaRead More
Podatność w oprogramowaniu NordVPN
W oprogramowaniu NordVPN wykryto podatność typu Incorrect Authorization (CVE-2026-106030).CERT PolskaRead More
Komunikacja kryzysowa w cyberbezpieczeństwie
Cisza po incydencie cyberbezpieczeństwa jest równie groźna jak sam atak. Gdy brakuje rzetelnych informacji, szybko pojawiają się plotki, domysły i
Podatność w oprogramowaniu Sparx Systems Enterprise Architect
W oprogramowaniu Sparx Systems Enterprise Architect wykryto podatność typu Improper restriction of XML external entity reference (CVE-2026-88794).CERT PolskaRead More
Vulnerability in Sparx Systems Enterprise Architect software
Improper restriction of XML external entity reference vulnerability (CVE-2026-88794) has been found in Sparx Systems Enterprise Architect software.CERT PolskaRead More
Podatności w centralach telefonicznych Slican
W centralach telefonicznych Slican wykryto 3 podatności różnego typu (CVE-2026-35088, CVE-2026-63314 oraz CVE-2026-63315)CERT PolskaRead More
Vulnerabilities in Slican telephone exchanges
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-35088, CVE-2026-63314 and CVE-2026-63315) found in Slican telephone exchanges.CERT PolskaRead More
Using TLS to protect data
Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.All
Post-quantum updates to our TLS guidance
The NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate.All FeedRead More
TR-101 Security Recommendations for Industrial, Operational Technology (OT) and Internet of Things (IoT) Devices
TR-101 – Security Recommendations for Industrial, Operational Technology (OT) and Internet of Things (IoT) Devices Overview Industrial, Operational Technology (OT)
A Five-Step Framework to Sufficient Realism in Cyber Simulations
This blog post proposes a five-step framework for determining the needed realism of a simulated environment.SEI BlogRead More
Vulnerability in Payload CMS software
SQL Injection vulnerability (CVE-2026-63316) has been found in Payload CMS software.CERT PolskaRead More
Podatność w oprogramowaniu Payload CMS
W oprogramowaniu Payload CMS wykryto podatność typu SQL Injection (CVE-2026-63316).CERT PolskaRead More
Help the NCSC understand how organisations approach external attack surface risk
We’re looking to hear from people involved in evaluating, selecting or adopting EASM.All FeedRead More
China-linked malicious actors called out by UK and international partners for targeting sensitive data globally
Joint advisory with international partners highlights malicious targeting of organisations from a range of sectors across the globe.All FeedRead More
Vulnerability in Ollama software
Relative Path Traversal vulnerability (CVE-2026-103663) has been found in Ollama software.CERT PolskaRead More
Podatność w oprogramowaniu Ollama
W oprogramowaniu Ollama wykryto podatność typu Relative Path Traversal (CVE-2026-103663).CERT PolskaRead More
Incident affecting ASOS customers
ASOS has said it is investigating a cyber incident and that some customer personal information may have been accessed.All FeedRead
Navigating Program Complexity with the Waypoints Framework
Learn how the Waypoints Framework helps program managers visualize activities, synchronize dependencies, and manage risks effectively.SEI BlogRead More