X XFediYour place in the Fediverse
XFEDI

Remote profile

ActivityPub

Alexander V. Leonov

@[email protected]

Vulnerability assessment, *nix security, compliance management, security automation

Open remote profile ↗
Posts

🚨 October #Microsoft #PatchTuesday: 1,409 vulns. 🔥 Windows Shell MOTW bypass exploited in the wild (CVE-2026-96951), 💥 public exploits: Raw Image Extension RCE (CVE-2026-21413) & Windows Health Service EoP (CVE-2026-85884). #Vulristics
➡️ https://avleonov.com/2026/10/20/i184-october-microsoft-patch-tuesday/

Media attachment
Alexander V. LeonovOctober Microsoft Patch TuesdayOctober Microsoft Patch Tuesday. A total of 1,409 vulnerabilities. For comparison, there were 973 in September, an increase of about 45%. 🙈 Thirteen products had fixes for 20 or more vulnerabilities: Microsoft Office Excel (68), Windows Kernel (46), Role: DNS Server (41), Windows Installer (38),...
↩ Reply ♡ 0 · ↻ 0 ↗ Original

🚨 Check Point RCE (CVE-2026-85102): unauth RCE via X.509 validation flaw in VPN negotiation, exploited since Sep 12, CISA KEV Sep 22, public PoC Oct 7, 11,849 potentially exposed gateways #CheckPoint #RCE
➡️ https://avleonov.com/2026/10/12/i177-about-remote-code-execution-check-point-quantum-security-gateway-cve202685102-vulnerability/

Media attachment
Alexander V. LeonovAbout Remote Code Execution - Check Point Quantum Security Gateway (CVE-2026-85102) vulnerabilityAbout Remote Code Execution - Check Point Quantum Security Gateway (CVE-2026-85102) vulnerability. Check Point Quantum Security Gateway is an enterprise security gateway and next-generation firewall (NGFW) designed to protect network infrastructure from cyberattacks and unauthorized access.
↩ Reply ♡ 0 · ↻ 0 ↗ Original