Watch ·
Bulletin for Tuesday, September 15, 2026
Every morning, what just entered the two registers, and what to do about it. Advisories are grouped by update: one line, one action.
+6breaches, in 4 sectors+3advisories, in 3 updates1actively exploited126,000accounts affected, as reported
Deal with these first
Exploited · Network
Cisco Secure Email GatewayApply the vendor’s patch.
Critical · 126,000 accounts
Greenberg TraurigWatch your statements. On any unknown debit, block the card and request a refund — French law (art. L133-18) entitles you to it.
CVSS 9.8 · PyPI
esphome-device-builderFixed in 1.0.12
pip install --upgrade "esphome-device-builder>=1.0.12"
Today’s breaches 6
Other1
Banking and finance1
Retail3
Industry1
Today’s advisories 3
Cisco Secure Email GatewayNetwork · Exploitedvendor patch
- CVE-2026-76461InjectionCritical
esphome-device-builderPyPI · CVSS 9.8→ 1.0.12
pip install --upgrade "esphome-device-builder>=1.0.12"- CVE-2026-59178Authentication bypass · CVSS 9.8 · < 1.0.12Critical
github.com/zitadel/zitadelGo · CVSS 8.1→ 4.15.3
go get github.com/zitadel/zitadel@v4.15.3- CVE-2026-56668Authentication bypass · CVSS 8.1 · < 4.15.3High
Get the bulletin every morning
The same content, no ads, no tracking: priorities, breaches by sector, advisories by update with the command to copy.
An entry joins the bulletin on the day it reaches the site, not on the date of the advisory or the disclosure: a flaw GitHub published last night is in this morning’s bulletin.