VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

Výsledky hledání

typ: zranitelnost× v celém archivu zrušit filtry

4561 karet z 5035 položek · strana 12 z 77 CZ · EN/orig

Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.

· zachyceno

ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-88812.

EPSS < 0.01 CVSS 7.8 CVE-2026-88812 X.Org US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation Vulnerability

· zachyceno

ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2026-93515.

EPSS < 0.01 CVSS 5.5 CVE-2026-93515 X.Org US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability

· zachyceno

ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2026-93516.

EPSS < 0.01 CVSS 5.5 CVE-2026-93516 X.Org US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability

· zachyceno

ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93517.

EPSS < 0.01 CVSS 7.8 CVE-2026-93517 X.Org US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation Vulnerability

· zachyceno

ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93518.

EPSS < 0.01 CVSS 7.8 CVE-2026-93518 X.Org US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability

· zachyceno

ZDI-26-764: X.Org Server XFixes Pointer Barrier Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93519.

EPSS < 0.01 CVSS 7.8 CVE-2026-93519 X.Org US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-764: X.Org Server XFixes Pointer Barrier Heap-based Buffer Overflow Privilege Escalation Vulnerability

· zachyceno

ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93520.

EPSS < 0.01 CVSS 7.8 CVE-2026-93520 X.Org US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability

· zachyceno

ZDI-26-766: X.Org Server RandR Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93521.

EPSS < 0.01 CVSS 7.8 CVE-2026-93521 X.Org US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-766: X.Org Server RandR Heap-based Buffer Overflow Privilege Escalation Vulnerability

· zachyceno

ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93522.

EPSS < 0.01 CVSS 7.8 CVE-2026-93522 X.Org US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation Vulnerability

· zachyceno

ZDI-26-757: (0Day) Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2026-111105.

EPSS < 0.01 CVSS 7.0 CVE-2026-111105 Telegram US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-757: (0Day) Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability

· zachyceno

Multiple vulnerabilities resolved in Junos OS

Classification: Critical, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 9.8, CVEs: CVE-2026-101954, CVE-2026-101952, CVE-2026-102077, CVE-2026-101983, CVE-2026-101982, CVE-2026-101981, CVE-2026-101979, CVE-2026-101976, CVE-2026-101975, CVE-2026-101972, CVE-2026-101964, CVE-2026-101963, CVE-2026-101962, CVE-2026-101961, CVE-2026-101959, CVE-2026-101949, CVE-2026-33798, CVE-2026-33796, CVE-2026-33795, CVE-2026-33792 (+133 other associated CVEs), Summary: Multiple vulnerabilities…

CVSS 9.8 Juniper Networks FI

tg: zranitelnost

· zachyceno · NCSC-FI · Multiple vulnerabilities resolved in Junos OS

· zachyceno

SPOJENO PŘES CVE Inductive Automation Ignition Software

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.8, CVEs: CVE-2026-92817, Summary: Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level.

EPSS < 0.01 CVSS 8.8 CVE-2026-92817 Inductive Automation výroba a průmysl energetika FI US

tg: zranitelnost tp: průmyslové systémy

· zachyceno · NCSC-FI · Inductive Automation Ignition Software · zachyceno · CISA Advisories · Inductive Automation Ignition Software

· zachyceno

In Drupal multiple vulnerabilities

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-108097, Summary: Drupal core: - CVE-2026-108097: A remote code execution vulnerability exists within the Field UI module in Drupal core. - CVE-2026-108515: The Drupal core Link module provides a field type that can be used for internal and external URLs. - CVE-2026-108514:The Navigation module doesn't sufficiently sanitize certain attributes, which can lead to a cross-site scripting …

EPSS < 0.01 CVE-2026-108097 CVE-2026-108099 CVE-2026-108514 CVE-2026-108515 CVE-2026-110738 Drupal FI

tg: zranitelnost

· zachyceno · NCSC-FI · In Drupal multiple vulnerabilities

· zachyceno

SPOJENO PŘES CVE Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability (CVE-2026-21589)

CISA added CVE-2026-21589 to the Known Exploited Vulnerabilities catalog. Affected product: Atlassian Multiple Products. Remediation due date: 2026-10-18.

KEV ✓ EPSS 0.99 CVSS 9.3 CVE-2026-21589 Atlassian US FI CA IT

tg: zneužíváno tg: zranitelnost tg: rozbor

· zachyceno · CISA KEV · Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability (CVE-2026-21589) · SANS Internet Storm Ctr. · Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th) · BleepingComputer · Hackers exploit critical Atlassian flaw after public PoC release · Rapid7 · CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products · zachyceno · NCSC-FI · Atlassian: CVE-2026-21589 - Arbitrary File Access Vulnerability impacts Multiple Products · Cyber Centre Kanada · Atlassian security advisory (AV26-1002) · CSIRT Itálie (ACN) · Risolta vulnerabilità in prodotti Atlassian

· zachyceno

Multiples vulnérabilités dans les produits Palo Alto Networks (15 octobre 2026)

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance. Palo Alto Networks indique que la...

Palo Alto Networks FR

tg: zranitelnost

· zachyceno · CERT-FR – avis · Multiples vulnérabilités dans les produits Palo Alto Networks (15 octobre 2026)

· zachyceno

· zachyceno

SPOJENO PŘES CVE Vulnérabilité dans les produits Microsoft (15 octobre 2026)

Une vulnérabilité a été découverte dans les produits Microsoft. Elle permet à un attaquant de provoquer une élévation de privilèges.

EPSS 0.01 CVE-2026-88164 Microsoft FR US

tg: zranitelnost

· zachyceno · CERT-FR – avis · Vulnérabilité dans les produits Microsoft (15 octobre 2026) · zachyceno · Microsoft Security · CVE-2026-88164 Microsoft Office SharePoint Elevation of Privilege Vulnerability

· zachyceno

Multiples vulnérabilités dans les produits Juniper Networks (15 octobre 2026)

De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Juniper Networks FR

tg: zranitelnost tp: DDoS

· zachyceno · CERT-FR – avis · Multiples vulnérabilités dans les produits Juniper Networks (15 octobre 2026)

· zachyceno

· zachyceno

· zachyceno

· zachyceno

Multiples vulnérabilités dans les produits F5 (15 octobre 2026)

De multiples vulnérabilités ont été découvertes dans les produits F5. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

EPSS 0.01 CVE-2026-15176 CVE-2026-93479 CVE-2026-95101 CVE-2026-97205 CVE-2026-97629 F5 FR

tg: zranitelnost

· zachyceno · CERT-FR – avis · Multiples vulnérabilités dans les produits F5 (15 octobre 2026)

NCSC-2026-0429 [1.00] [H/H] Kwetsbaarheid verholpen in Cisco Secure Email Gateway

Cisco heeft een kwetsbaarheid verholpen in Cisco Secure Email Gateway, specifiek in de Advanced Malware Protection feature. De kwetsbaarheid bevindt zich in de wijze waarop de Advanced Malware Protection feature e-mailbijlagen verwerkt wanneer de file reputation service is ingeschakeld. Een niet-geauthenticeerde externe aanvaller kan hierdoor willekeurige bestanden schrijven naar het onderliggende besturingssysteem. Misbruik van deze kwetsbaarheid kan leiden tot het uitvoeren van commando's met…

Cisco NL

tg: zneužíváno tg: zranitelnost

· NCSC-NL · NCSC-2026-0429 [1.00] [H/H] Kwetsbaarheid verholpen in Cisco Secure Email Gateway

IBM security advisory (AV26-1040)

Serial number: AV26-1040 Date: October 14, 2026 As of October 13, 2026, IBM is affected by vulnerabilities in the following products: WebSphere Application Server Prior to or equal to 8.5 Prior to or equal to 9.0 WebSphere Application Server - Liberty Prior to or equal to 26.0.0.10 mcp-context-forge Prior to or equal to 1.0.2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Bulletin: IBM…

EPSS < 0.01 CVE-2026-103499 IBM CA

tg: zranitelnost tp: DDoS

· Cyber Centre Kanada · IBM security advisory (AV26-1040)

Cisco Advance Notification for Publication of October 21, 2026, Security Advisories

On October 21, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: Expressway Series (security hardening release) IOS XR Software for ASR 9000 Series Routers Secure Client Snort (security hardening release) Unified Communications products (security hardening release) To remediate vulnerabilities to be disclosed on October 21, 2026, Cisco…

Cisco US

tg: zranitelnost

· Cisco PSIRT · Cisco Advance Notification for Publication of October 21, 2026, Security Advisories

Risolte vulnerabilità in prodotti IBM

IBM ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità, di cui 2 con gravità “critica” e 5 con gravità “alta”, nei prodotti WebSphere Application Server - Liberty e WebSphere Application Server. Tali vulnerabilità potrebbero consentire a un utente malintenzionato remoto di eludere i meccanismi di autenticazione e di autorizzazione o di eseguire codice arbitrario sui sistemi interessati.

EPSS < 0.01 CVE-2026-101294 CVE-2026-105442 CVE-2026-105443 CVE-2026-93895 CVE-2026-93905 CVE-2026-93909 CVE-2026-95695 IBM IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Risolte vulnerabilità in prodotti IBM

Adobe security advisory (AV26-1039)

Serial number: AV26-1039 Date: October 14, 2026 As of October 13, 2026, Adobe is affected by vulnerabilities in the following products: Adobe Bridge Prior to or equal to 16.0.7 Adobe Bridge (LTS) Prior to or equal to 15.1.8 Adobe ColdFusion 2025 Version 2025.0.13 Adobe ColdFusion 2023 Version 2023.0.25 Adobe Commerce Multiple versions Adobe Commerce B2B Multiple versions Adobe Credentials SDK Multiple versions Adobe Dimension Prior to or equal to 4.1.8 Adobe Experience Manager Multiple versions…

Adobe CA

tg: zranitelnost

· Cyber Centre Kanada · Adobe security advisory (AV26-1039)

Risolte vulnerabilità in prodotti Ubiquiti

Ubiquiti ha rilasciato aggiornamenti di sicurezza che sanano alcune vulnerabilità, di cui 2 con gravità "alta", in UniFi Protect AI Key, componente della piattaforma di videosorveglianza IP UniFi Protect. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un attaccante remoto di eseguire codice arbitrario e compromettere la disponibilità del servizio sui sistemi interessati.

EPSS 0.01 CVE-2026-110455 CVE-2026-110459 Ubiquiti IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Risolte vulnerabilità in prodotti Ubiquiti

NCSC-2026-0428 [1.00] [M/H] Kwetsbaarheden verholpen in Fortinet FortiSandbox

Fortinet heeft kwetsbaarheden verholpen in FortiSandbox. De kwetsbaarheid met kenmerk CVE-2026-107656 heeft een CVSS-score van 9,6 en betreft een authenticatieomzeiling in de webmanagementinterface van FortiSandbox. Een niet-geauthenticeerde kwaadwillende kan via speciaal vervaardigde HTTP-verzoeken de authenticatie omzeilen en ongeautoriseerd code of commando's uitvoeren. De kwetsbaarheden met kenmerk CVE-2026-106172 en CVE-2026-106170 zijn beide als middelmatig ingeschaald. CVE-2026-106172…

EPSS 0.01 CVE-2026-106170 CVE-2026-106172 CVE-2026-107656 Fortinet NL

tg: zranitelnost

· NCSC-NL · NCSC-2026-0428 [1.00] [M/H] Kwetsbaarheden verholpen in Fortinet FortiSandbox

Citrix: risolte vulnerabilità in UniconOS

Citrix ha rilasciato aggiornamenti di sicurezza per risolvere 3 vulnerabilità, di cui una con gravità "alta", in UniconOS, sistema operativo per endpoint precedentemente noto come "eLux", utilizzato principalmente in ambienti di virtualizzazione desktop (VDI/DaaS). Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un attaccante locale, autenticato con privilegi limitati, di elevare i propri privilegi sul sistema interessato.

EPSS < 0.01 CVE-2026-53562 Citrix IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Citrix: risolte vulnerabilità in UniconOS

Disponibili PoC per lo sfruttamento di vulnerabilità in Wazuh

Rilasciati aggiornamenti di sicurezza che risolvono diverse nuove vulnerabilità in Wazuh, di cui 3 con gravità “critica” e 5 con gravità “alta”. Per le CVE-2026-74035, CVE-2026-74036, CVE-2026-74037, CVE-2026-74040, CVE-2026-74041, CVE-2026-74043 e CVE-2026-74045 risulta disponibile un Proof of Concept (PoC) in rete.

EPSS 0.01 CVE-2026-74035 CVE-2026-74036 CVE-2026-74037 CVE-2026-74040 CVE-2026-74041 CVE-2026-74043 CVE-2026-74045 Wazuh IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Disponibili PoC per lo sfruttamento di vulnerabilità in Wazuh

SPOJENO PŘES CVE NCSC-2026-0427 [1.00] [M/H] Kwetsbaarheden verholpen in Ahsay AhsayCBS

Ahsay heeft kwetsbaarheden verholpen in AhsayCBS tot en met versie 10.3.2. De kwetsbaarheid met kenmerk CVE-2026-105133 heeft een CVSS-score van 7,3 en betreft onvoldoende authenticatie in de functie checkSysPwd van de AhsayCBS API. Een niet-geauthenticeerde kwaadwillende kan de kwetsbaarheid op afstand misbruiken om de authenticatie te omzeilen. De kwetsbaarheid met kenmerk CVE-2026-105134 heeft een CVSS-score van 10,0 en betreft OS-command-injectie in de Replication Receiver via /rps/api/json…

KEV ✓ EPSS 0.82 CVE-2026-105133 CVE-2026-105134 Ahsay NL US

tg: varování tg: zneužíváno tg: zranitelnost tp: malware tp: podvod

· NCSC-NL · NCSC-2026-0427 [1.00] [M/H] Kwetsbaarheden verholpen in Ahsay AhsayCBS · BleepingComputer · Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto · Huntress · Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer

SPOJENO PŘES CVE CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st. [...]

CVE-2023-46805 * CVE-2024-21887 * CVE-2024-21893 * CVE-2025-0282 * CVE-2025-22457 * CVE-2026-104935 * Ivanti US

tg: zneužíváno tg: zranitelnost

· BleepingComputer · CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

Adobe: aggiornamenti di sicurezza

Adobe ha rilasciato aggiornamenti di sicurezza per risolvere molteplici vulnerabilità, di cui 26 con gravità “critica” e 99 con gravità “alta”, nei prodotti Dimension, FrameMaker, Substance 3D, Bridge, Content Credentials SDK, Commerce, ColdFusion, Photoshop ed Experience Manager (AEM).

Adobe IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Adobe: aggiornamenti di sicurezza

Update Windows: Record Patch Tuesday fixes flaw already under attack

Microsoft’s October Patch Tuesday release addresses a record-breaking 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day and two other publicly disclosed flaws. Just when you thought a previous record would stand for a while, Microsoft comes out again with the largest monthly Patch Tuesday release. Microsoft has said its growing use of AI to find and fix security vulnerabilities means users should expect more fixes in its monthly updates. How to apply patches and…

Microsoft US

tg: zneužíváno tg: zranitelnost tg: návod

· Malwarebytes Labs · Update Windows: Record Patch Tuesday fixes flaw already under attack

Risolte vulnerabilità in prodotti Fortinet

Fortinet ha rilasciato aggiornamenti di sicurezza che sanano alcune vulnerabilità, di cui 2 con gravità "critica" e 2 con gravità "alta", in FortiSIEM, FortiMail, FortiSandbox, FortiAnalyzer e FortiManager. Tali vulnerabilità potrebbero consentire ad un attaccante remoto di eseguire codice o comandi non autorizzati, eludere i meccanismi di autenticazione, elevare i propri privilegi e scrivere/leggere file arbitrari sui sistemi interessati.

EPSS 0.01 CVE-2025-46773 CVE-2025-57739 CVE-2026-106173 CVE-2026-107656 Fortinet IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Risolte vulnerabilità in prodotti Fortinet

Risolte vulnerabilità in prodotti Zoom

Zoom ha rilasciato aggiornamenti di sicurezza che risolvono 4 vulnerabilità con gravità "alta" in Zoom Workplace, piattaforma per la comunicazione e la collaborazione, e nei relativi client Zoom. Tali vulnerabilità, qualora sfruttate, permetterebbero a un utente malintenzionato non autenticato di elevare i propri privilegi e di accedere a informazioni sensibili sui sistemi interessati.

EPSS < 0.01 CVE-2026-108184 CVE-2026-108185 CVE-2026-53418 CVE-2026-53420 Zoom IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Risolte vulnerabilità in prodotti Zoom

SPOJENO PŘES CVE Rilevate vulnerabilità in Commvault

Commvault ha rilasciato aggiornamenti di sicurezza che sanano 10 vulnerabilità, di cui 1 con gravità "critica" e 9 con gravità "alta", in Grid(HSX) CVFS e Commvault Cloud, piattaforma software enterprise per la protezione, il backup e la gestione dei dati.

EPSS < 0.01 CVSS 9.3 CVE-2026-18228 CVE-2026-77090 CVE-2026-77093 CVE-2026-77094 CVE-2026-77095 CVE-2026-77096 CVE-2026-77099 CVE-2026-77100 CVE-2026-97333 CVE-2026-97334 Commvault IT FI

tg: zranitelnost

· CSIRT Itálie (ACN) · Rilevate vulnerabilità in Commvault · zachyceno · NCSC-FI · Critical vulnerabilities in Commvault Cloud

Múltiples vulnerabilidades en TSplus Remote Access

Multiple vulnerabilities in TSplus Remote Access Wed, 10/14/2026 - 10:54 Aviso Affected Resources TSplus Remote Access, version 19.20.3.10. It has been confirmed that this version is affected, although other earlier versions may also be affected. Description INCIBE has coordinated the disclosure of three vulnerabilities: two high-severity and one medium-severity that affect TSplus Remote Access by TSplus, a remote access and Windows application publishing software that allows users to connect…

EPSS < 0.01 CVSS 8.7 CVE-2026-108070 CVE-2026-108071 CVE-2026-108072 TSplus ES

tg: zranitelnost tp: identita

· INCIBE-CERT · Múltiples vulnerabilidades en TSplus Remote Access

Risolte vulnerabilità in Citrix XenServer

Risolte 4 vulnerabilità con gravità "alta" in XenServer, hypervisor basato su Xen che permette di creare, eseguire e gestire macchine virtuali su un server fisico. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad utenti malintenzionati presenti all'interno di macchine virtuali guest di causare interruzioni del servizio o compromettere il sistema host, aggirando le restrizioni di sicurezza.

EPSS < 0.01 CVE-2026-102700 CVE-2026-102701 CVE-2026-79610 CVE-2026-79611 Citrix IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Risolte vulnerabilità in Citrix XenServer

Divulgación no autorizada de información en el servicio web de facturación de Copart

Unauthorised disclosure of information on Copart’s online billing service Wed, 10/14/2026 - 09:27 Aviso Affected Resources Customer invoicing web service. Description INCIBE has coordinated the disclosure of a critical vulnerability affecting Copart’s invoicing web service, a platform that connects sellers with buyers worldwide. The vulnerability was discovered by Mario Romeo Lázaro. This vulnerability has been assigned the following code, CVSS v4.0 base score, CVSS vector and CWE vulnerability…

EPSS < 0.01 CVSS 9.2 CVE-2026-14851 Copart ES

tg: zranitelnost tp: soukromí

· INCIBE-CERT · Divulgación no autorizada de información en el servicio web de facturación de Copart

· zachyceno

Google Extended Stable Update for Desktop

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-106347, CVE-2026-106358, CVE-2026-110136, CVE-2026-110148, CVE-2026-110161, CVE-2026-106184, CVE-2026-106200, CVE-2026-106235, CVE-2026-106383, CVE-2026-110139, CVE-2026-110140, CVE-2026-110141, CVE-2026-110147, CVE-2026-110153, CVE-2026-110155, CVE-2026-110156, CVE-2026-110157, CVE-2026-110160, CVE-2026-110162, CVE-2026-110163 (+8 other associated CVEs), Summary: The Extended Stable…

Google FI

tg: zranitelnost tg: novinka v produktu

· zachyceno · NCSC-FI · Google Extended Stable Update for Desktop