Knowledge base

Vulnerability Detection Update, October 22 2026

Release Date:




New Detections

  • Authenticated scans flag hosts that trust compromised CA root certificates.

  • TLS certificates with recoverable ECDSA private keys are flagged as invalid.

  • GitLab versions are now detected without credentials.

  • Active check for PHP session remote code execution (CVE-2026-109618, CVE-2026-109619), complementing version-based detection.

  • New web application fingerprints

    • GitLab

    • Nextcloud

    • Plex Media Server

    • Proxmox VE

    • Sonos

    • UniFi Network Application

Bug Fixes and Minor Improvements

  • Printers found on any port now report the printer-ports issue.

  • Improved detection of PHP, JFrog Artifactory, Gitea and Kerio Connect.