CERT-EU

CERT-EU, CERT for the EU institutions, bodies, and agencies.

Website: https://cert.europa.eu
Inactive EU Voice Mastodon account: https://social.network.europa.eu/@cert
Mandate: https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX%3A32018Q0113%2801%29

Last Notes

2026-10-15 09:38:56 UTC

Critical Vulnerability in Cisco Secure Email Gateway (CERT-EU Security Advisory 2026-017)
On 14 October 2026, Cisco published a security advisory addressing a critical vulnerability affecting the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. This vulnerability could allow an unauthenticated, remote attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.
The Cisco PSIRT is aware of active exploitation of this vulnerability.
CERT-EU strongly recommends updating the Content Scanner Tools package or upgrading Cisco AsyncOS Software to a fixed release as soon as possible, prioritising appliances reachable from the internet. CERT-EU also recommends checking all affected appliances for indicators of compromise.
https://www.cert.europa.eu/publications/security-advisories/2026-017/

2026-09-28 17:55:54 UTC

Another day, another critical vulnerability in an edge device. We’ve analysed the CVE-2026-88771, one of the many vulnerabilities disclosed by Citrix recently, based on observed exploitation attempts, and set out what we learned and key takeaways. 🔍🔒
If you’re managing Citrix infrastructure, now’s the time to check for compromise!
https://www.cert.europa.eu/blog/taking-execute-logging-a-bit-too-literally-cve-2026-88771
#cybersecurity #cve-2026-88771 #vulnerability

2026-09-27 17:41:25 UTC

Critical Vulnerabilities in Citrix NetScaler ADC and Gateway (CERT-EU Security Advisory 2026-014)
On 27 September 2026, Citrix published a security bulletin addressing 8 vulnerabilities affecting customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway, among which 2 critical unauthenticated Remote Code Execution (RCE) vulnerabilities. Citrix has confirmed active exploitation of these 2 critical vulnerabilities in the wild.
CERT-EU recommends updating affected software and running a compromise assessment on those exposed on the internet.
https://www.cert.europa.eu/publications/security-advisories/2026-014/

2026-09-22 16:54:58 UTC

Critical Vulnerability in F5 BIG-IP APM (CERT-EU Security Advisory 2026-013)
On 22 September 2026, F5 published an advisory addressing a critical vulnerability affecting its BIG-IP APM product. The vendor confirmed active exploitation in the wild.
CERT-EU recommends taking appropriate actions as soon as possible.
https://www.cert.europa.eu/publications/security-advisories/2026-013/

2026-07-22 08:41:10 UTC

Critical Vulnerability in Microsoft SharePoint (CERT-EU Security Advisory 2026-009)
On 14 July 2026, Microsoft released a security update addressing a critical Remote Code Execution (RCE) in Microsoft SharePoint Server. On 20 July 2026, WatchTowr identified a proof-of-concept exploit code, and later, successful exploitation attempts.
CERT-EU strongly recommend to update affected servers and to rotate credentials on any assets that may have been vulnerable and exposed on the internet.
https://www.cert.europa.eu/publications/security-advisories/2026-009/

2026-06-10 11:56:32 UTC

Critical vulnerabilities in Ivanti Sentry (CERT-EU Security Advisory 2026-008)
On 9 June 2026, Ivanti released a security advisory addressing two critical vulnerabilities in their Sentry products[1]. An attacker could exploit those flaws to achieve unauthenticated remote code execution on the vulnerable device.
https://www.cert.europa.eu/publications/security-advisories/2026-008/

2026-05-06 08:46:11 UTC

Critical Vulnerability in PAN-OS (CERT-EU Security Advisory 2026-006)
On 6 May 2026, Palo Alto published a security advisory addressing a critical vulnerability affecting PAN-OS. This vulnerability allows an unauthenticated attacker to execute arbitrary code with root privileges.
Palo Alto observed limited exploitation of this vulnerability. It is strongly recommended updating affected appliances as soon as patches will be available, and to apply workarounds and mitigation in the meantime.
https://www.cert.europa.eu/publications/security-advisories/2026-006/

2026-04-03 07:57:05 UTC

#CyberSecurity
#SupplyChain
#CERTEU
A compromised version of Trivy gave attackers access to the European Commission’s europa.eu platform hosted on AWS.
We have published our analysis – what happened, who is affected, and what to do – in full transparency and in agreement with the European Commission.
https://cert.europa.eu/blog/european-commission-cloud-breach-trivy-supply-chain

2024-10-31 12:27:06 UTC

QNAP NAS Zero-Day Vulnerabilities (CERT-EU Security Advisory 2024-115)
On October 29 and 30, 2024, QNAP released patches for two critical zero-day vulnerabilities, CVE-2024-50387 and CVE-2024-50388, affecting NAS devices. These vulnerabilities allow remote attackers to gain root access and execute arbitrary commands on compromised devices.
https://www.cert.europa.eu/publications/security-advisories/2024-115/

2024-10-23 16:31:15 UTC

Critical 0-day Vulnerability in Fortinet FortiManager (CERT-EU Security Advisory 2024-113)
On October 23, 2024, Fortinet released a security advisory addressing a critical 0-day vulnerability in its FortiManager product. If exploited, a remote unauthenticated attacker could execute arbitrary code or commands on the affected device.
It is strongly recommended to apply the update. When not possible, it is recommended to apply the workarounds. In all cases, it is recommended to search for evidence of a potential compromise.
https://www.cert.europa.eu/publications/security-advisories/2024-113/

2024-08-27 08:08:00 UTC

Critical Vulnerability in SonicWall SonicOS (CERT-EU Security Advisory 2024-089)
On August 23, 2024, SonicWall issued a security advisory regarding a critical access control vulnerability (CVE-2024-40766) in its SonicOS. This flaw could allow attackers to gain unauthorised access to resources or cause the firewall crash.
It is recommended updating as soon as possible.
https://www.cert.europa.eu/publications/security-advisories/2024-089/