Belgium CCB News alt

Critical Improper Certificate Validation in Cisco Webex Allows User Impersonation (CVSS 9.8)

The Centre for Cybersecurity Belgium issued a critical security warning for CVE-2026-20184, an improper certificate-validation vulnerability (CWE-295) affecting Cisco Webex versions 39.6 through 45.4. The vulnerability carries a CVSS 9.8 score and enables remote, unauthenticated attackers to impersonate any user within the Cisco Webex service by supplying a crafted token during SSO with Control Hub, potentially compromising confidentiality, integrity, and availability. CCB strongly recommends installing vendor updates with highest priority and upscaling monitoring and detection capabilities to identify suspicious activity.

OpenClaw Privilege Escalation CVE-2026-41329 Patched

The Centre for Cybersecurity Belgium has issued an urgent security advisory warning of CVE-2026-41329, a critical privilege escalation vulnerability in OpenClaw versions up to and including 2026.3.28 with CVSS 9.9. The flaw stems from improper context validation during heartbeat processing that allows attackers to bypass sandbox restrictions without credentials. CCB strongly recommends immediate patching to version 2026.3.31 and enhanced monitoring for suspicious activity.

Critical Spinnaker RCE Vulnerabilities, CVSS 10.0, Patch Now

The Centre for Cybersecurity Belgium has issued a critical security advisory warning of two remote code execution vulnerabilities in Spinnaker, an open-source multi-cloud continuous delivery platform. CVE-2026-32613 and CVE-2026-32604 both carry a CVSS score of 10.0, the maximum severity rating, affecting expression parsing and gitrepo artifact type handling respectively. The vulnerabilities allow authenticated attackers to execute arbitrary code or access internal resources by exploiting insufficient input validation and improper sanitisation of user-controlled input such as branch names and file paths. CCB strongly recommends installing updates for vulnerable installations with the highest priority after thorough testing.