Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
Aggiornamenti di sicurezza sanano due vulnerabilità, di cui una con gravità "alta", in Mattermost. Tale vulnerabilità, qualora sfruttata da un utente malintenzionato autenticato e in determinate condizioni, potrebbe consentire la modifica non autorizzata di componenti applicativi e la conseguente esecuzione di codice arbitrario sui sistemi interessati.
EPSS 0.00 CVE-2026-93851 Mattermost IT FR
Progress ha rilasciato aggiornamenti di sicurezza per sanare 6 vulnerabilità con gravità “alta” nel prodotto Telerik Document Processing Libraries. Tali vulnerabilità potrebbero consentire a un attaccante remoto, in alcuni casi non autenticato, di compromettere la disponibilità del servizio, eludere i meccanismi di sicurezza e leggere o scrivere file arbitrari sui sistemi interessati.
EPSS 0.00 CVE-2026-118035 CVE-2026-118036 CVE-2026-118037 CVE-2026-118038 CVE-2026-118039 CVE-2026-118040 Progress IT
È stato rilevato lo sfruttamento attivo in rete della vulnerabilità CVE-2026-41709 - già sanata dal vendor nel luglio 2026 - presente in VMware ESX, Cloud Foundation, vSphere Foundation e Telco Cloud Platform. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un attaccante con privilegi amministrativi di eseguire determinate operazioni senza che queste vengano registrate nei log di sistema.
KEV ✓ EPSS 0.01 CVE-2026-41709 VMware Broadcom IT US
CERT Polska has received a report about 5 vulnerabilities (from CVE-2025-68391 to CVE-2025-68395) found in ARKETEAM Protectel software.
EPSS 0.00 CVE-2025-68391 CVE-2025-68395 ARKETEAM PL
Drupal warned admins to patch a critical access bypass vulnerability in the Commerce Core module that attackers are exploiting in the wild. [...]
CVE-2026-108097 * CVE-2026-108099 * CVE-2026-118539 * CVE-2026-9082 * Drupal Commerce Core US
Dell heeft meerdere kritieke kwetsbaarheden verholpen in PowerProtect Data Domain, Data Domain Virtual Edition en Data Domain Management Center. De kritieke wetsbaarheden met kenmerk CVE-2026-103780, CVE-2026-86384, CVE-2026-86397 en CVE-2026-86400 in Dell PowerProtect Data Domain, hebben een CVSS-score van 9.8. Een niet-geauthenticeerde kwaadwillende kan deze kwetsbaarheden op afstand misbruiken om willekeurige opdrachten uit te voeren, inloggegevens te verkrijgen of accounts met verhoogde…
EPSS 0.01 CVE-2026-103780 CVE-2026-103792 CVE-2026-103799 CVE-2026-86384 CVE-2026-86397 CVE-2026-86400 CVE-2026-90717 Dell NL
Display of information in the Forocoches comments editor Fri, 10/30/2026 - 09:49 Aviso Affected Resources Comment editor. Description INCIBE has coordinated the disclosure of a high-severity vulnerability affecting the Forocoches comment editor, a component used to create and edit comments in discussion threads. The vulnerability was discovered by Miguel Jiménez. This vulnerability has been assigned the following code, CVSS v4.0 base score, CVSS vector and CWE vulnerability type: CVE-2026-14467…
EPSS 0.00 CVSS 8.2 CVE-2026-14467 Forocoches ES
Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: None, CVEs: , Summary: A flaw in Telegram for Android could be chained with two other bugs to take full control of a victim's phone through a voice call, once the victim answered, according to security startup NebuSec. The attacker needed only an ordinary Telegram account. Telegram fixed the flaw in version 12.10.4 of the app, released in late September, and NebuSec disclosed it on October 29. Combined with an…
Telegram FI
CISA added CVE-2026-111357 to the Known Exploited Vulnerabilities catalog. Affected product: Ivanti Connect Secure. Remediation due date: 2026-11-02.
KEV ✓ EPSS 0.01 CVE-2026-111357 Ivanti US
CISA added CVE-2026-118527 to the Known Exploited Vulnerabilities catalog. Affected product: Ivanti Connect Secure. Remediation due date: 2026-11-13.
KEV ✓ CVE-2026-118527 Ivanti US
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
IBM FR
De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, un contournement de la politique de sécurité et un déni de service.
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Red Hat FR
De multiples vulnérabilités ont été découvertes dans les produits MongoDB. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à l'intégrité des données, une injection SQL (SQLi) et un contournement de la politique de sécurité.
EPSS 0.00 CVE-2026-116641 CVE-2026-118510 CVE-2026-118581 MongoDB FR
Une vulnérabilité a été découverte dans Stormshield Management Center. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.
KEV ✓ EPSS 0.83 CVSS 9.8 CVE-2026-111497 Stormshield Broadcom VMware Google Node.js Microsoft Brotli PHP Palo Alto Networks Bun brotlicffi FR FI CA SE US GB IT CZ BE
De multiples vulnérabilités ont été découvertes dans Suricata. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Suricata FR
Une vulnérabilité a été découverte dans les produits GitLab. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
EPSS 0.00 CVE-2026-111943 GitLab eMudhra Mozilla Microsoft Google Apple FR US
Une vulnérabilité a été découverte dans Tenable Nessus Plugin. Elle permet à un attaquant de provoquer une atteinte à la confidentialité des données.
EPSS 0.00 CVE-2026-119317 Tenable FR
Une vulnérabilité a été découverte dans Ruby on Rails trilogy. Elle permet à un attaquant de provoquer une injection SQL (SQLi).
Une vulnérabilité a été découverte dans CPython. Elle permet à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
EPSS 0.00 CVE-2026-116566 CPython FR
De multiples vulnérabilités ont été découvertes dans les produits Apple. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données.
EPSS 0.00 CVE-2026-112602 CVE-2026-112605 Apple FR
Categories: Threat Research Tags: advisory, Cursor
Cursor GB
Aggiornamenti di sicurezza sanano alcune vulnerabilità, di cui una con gravità “critica” e 4 con gravità “alta”, in vari prodotti Supermicro. Tali vulnerabilità potrebbero consentire a un attaccante di eseguire codice arbitrario, accedere a informazioni sensibili, elevare i propri privilegi ed eludere i meccanismi di sicurezza e autenticazione sui sistemi interessati.
EPSS 0.00 CVE-2026-18449 CVE-2026-18450 CVE-2026-65211 CVE-2026-65219 CVE-2026-65220 Supermicro IT
Upozorňujeme na aktivně zneužívané zranitelnosti CVE-2026-88771 a CVE-2026-88772 v produktu Citrix Netscaler, které umožňují vzdálené spuštění kódu. Doporučujeme bezodkladně aktualizovat na verzi 14.1-73.37, 13.1-64.23, 14.1-73.37 FIPS nebo 13.1-37.279 a novější podle používané produktové řady. Dále doporučujeme prověřit indikátory kompromitace, jelikož aktualizace nemusí kompromitaci odstranit. Zranitelnosti Zranitelnost CVE-2026-88771 spočívá v nesprávném ověřování vstupů a umožňuje…
KEV ✓ EPSS 0.82 CVSS 9.5 CVE-2026-88771 CVE-2026-88772 Citrix NetScaler veřejná správa finance školství CZ US HU GB FR IT SE
During its own research, CERT Polska has found 2 XSS vulnerabilities (CVE-2026-66911 and CVE-2026-66912) in Zimbra Collaboration software.
EPSS 0.01 CVE-2026-66911 CVE-2026-66912 Zimbra PL
Jenkins Project ha rilasciato aggiornamenti di sicurezza per Jenkins, server open source per l’automazione delle attività di compilazione, verifica e distribuzione del software, che sanano molteplici vulnerabilità, di cui 13 con gravità "alta".
EPSS 0.00 CVE-2026-117612 CVE-2026-117613 CVE-2026-117614 CVE-2026-117615 CVE-2026-117616 CVE-2026-117617 CVE-2026-117618 CVE-2026-117619 CVE-2026-117620 CVE-2026-117621 CVE-2026-117622 CVE-2026-117623 CVE-2026-117624 Jenkins IT
MongoDB ha rilasciato aggiornamenti di sicurezza per sanare alcune vulnerabilità, di cui 2 con gravità “alta”, nei prodotti Database Tools e Laravel. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di eludere i meccanismi di sicurezza e manipolare i dati sui sistemi interessati.
EPSS 0.00 CVE-2026-116641 CVE-2026-118510 MongoDB IT
Serial number: AV26-1104 Date: October 29, 2026 As of October 28, 2026, Mattermost is affected by a vulnerability in the following product: Mattermost Prior to or equal to 11.10.0 Prior to or equal to 11.9.2 Prior to or equal to 11.8.6 Prior to or equal to 11.7.11 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Mattermost Security Updates
Mattermost CA
Elastic ha rilasciato aggiornamenti di sicurezza per Elastic Cloud Enterprise (ECE), piattaforma per la gestione centralizzata di ambienti Elastic, che sanano alcune vulnerabilità, di cui 3 con gravità "alta". Tali vulnerabilità, riconducibili a una risoluzione non adeguata dei collegamenti prima dell'accesso ai file, potrebbero consentire a un attaccante locale di accedere a informazioni riservate, modificare o causare la perdita di dati ed eludere i meccanismi di autenticazione.
EPSS 0.00 CVE-2026-115708 CVE-2026-115709 CVE-2026-115713 Elastic IT
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaining with the PHP2Shell flaws in the wild. [...]
CVE-2026-109618 * CVE-2026-109619 * CVE-2026-46300 * Linux veřejná správa US
Risolte 15 vulnerabilità, di cui 13 con gravità “alta”, che interessano la piattaforma open-source per l'automazione dei workflow n8n.
EPSS 0.00 CVE-2026-118641 CVE-2026-118642 CVE-2026-118643 CVE-2026-118644 CVE-2026-118645 CVE-2026-118646 CVE-2026-118647 CVE-2026-118648 CVE-2026-118649 CVE-2026-118675 CVE-2026-118676 CVE-2026-118678 CVE-2026-118679 n8n IT
Serial number: AV26-1103 Date: October 29, 2026 As of October 28, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 2.44.1 Prior to 2.43.5 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Crafted Workflow ID Gives Access to Data Tables in Other Projects Overview - n8n-io/n8n
n8n CA
Rilasciati aggiornamenti di sicurezza per risolvere 5 vulnerabilità, di cui tre con gravità “alta”, presenti in Grafana, nota applicazione web per la visualizzazione e l’analisi interattiva di dati. Tali vulnerabilità, qualora sfruttate e in presenza di specifiche condizioni, potrebbero consentire a un utente malintenzionato l'elusione dei meccanismi di sicurezza, l'accesso a informazioni sensibili e la modifica non autorizzata di configurazioni sui sistemi target.
EPSS 0.00 CVE-2026-100105 CVE-2026-103506 CVE-2026-88967 Grafana IT
View CSAF Summary Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code execution (RCE) to carry out further attacks and disclosure of sensitive information. Please refer to the Recommended Immediate Actions section for information about the mitigation/remediation. The following versions of Hitachi Energy TRO600 series products are affected: TRO600 vers:TRO600/<=9.2.1.6,…
EPSS 0.00 CVE-2026-106087 CVE-2026-10756 Hitachi Energy energetika US
View CSAF Summary Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens Mendix SAML Module are affected: Mendix SAML (Mendix 10 compatible) vers:intdot/<4.2.4 (CVE-2026-89209) Mendix SAML …
EPSS 0.00 CVE-2026-89209 Siemens Mendix výroba a průmysl US IT
View CSAF Summary Hitachi Energy is aware of OS command injection and Dirty Frag vulnerabilities that affect CoreTec product versions listed in this document. Successful exploitation of these vulnerabilities could result in impact on confidentiality, integrity and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. The following versions of Hitachi Energy CoreTec Product are affected: CoreTec5 vers:CoreTec5/<=3.4.0, 5…
EPSS 0.94 CVE-2026-13162 CVE-2026-43284 Hitachi Energy energetika US
Risolta una vulnerabilità con gravità “critica” in Sophos UTM. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un attaccante remoto non autenticato di eseguire codice arbitrario con privilegi elevati sui sistemi interessati.
EPSS 0.01 CVE-2026-118633 Sophos IT
Juniper Networks ha rilasciato aggiornamenti di sicurezza che sanano 18 vulnerabilità, di cui 2 con gravità "critica" e 8 con gravità "alta", nei prodotti Session Smart Router e Session Smart Conductor, soluzioni dedicate rispettivamente al routing e alla relativa gestione.
EPSS 0.01 CVE-2026-103401 CVE-2026-103402 CVE-2026-103403 CVE-2026-103406 CVE-2026-103407 CVE-2026-103408 CVE-2026-103409 CVE-2026-103410 CVE-2026-103411 CVE-2026-106079 Juniper Networks IT
Cisco released security updates to patch a denial-of-service zero-day in Adaptive Security Appliance (ASA) and Threat Defense (FTD) software that attackers are exploiting to remotely crash vulnerable firewall devices. [...]
CVE-2024-20353 * CVE-2024-20359 * CVE-2025-20333 * CVE-2025-20362 * CVE-2026-20349 * CVE-2026-76418 * CVE-2026-76519 * Cisco US
Apple’s latest updates include a fix for a CoreGraphics bug that may have been exploited in targeted attacks. The fix is now available for older iPhones and iPads. Apple released security updates on October 26. Apple first fixed the flaw in iOS 26.7.1. Its latest updates also bring the fix to older devices that can’t run iOS 26, including the iPhone XS, iPhone XS Max, iPhone XR, and seventh-generation iPad. The iOS 18.7.11 update is a backport: it brings a fix from a newer software version to…
KEV ✓ EPSS 0.26 CVE-2026-86950 Apple US FR CA IT
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-93570, CVE-2026-93571 and CVE-2026-106036) found in Szafir software.
EPSS 0.00 CVE-2026-106036 CVE-2026-93570 CVE-2026-93571 Szafir PL
Multiple vulnerabilities in SABBATIC application Thu, 10/29/2026 - 17:50 Aviso Affected Resources SABBATIC. Description INCIBE has coordinated the publication of 5 medium severity vulnerability, affecting SABBATIC application, software for digitizing expense receipts and invoices. The vulnerabilities were discovered by David Padilla Alvarado y Víctor Manuel Pérez Cámara. These vulnerabilities have been assigned the following codes, CVSS v4.0 base score, CVSS vector and CWE vulnerability type…
EPSS 0.00 CVSS 4.8 CVE-2026-5697 CVE-2026-5698 CVE-2026-5699 CVE-2026-5700 CVE-2026-5702 SABBATIC ES
Reflected Cross-Site Scripting in ICT Innovations’ PHP-CGI/PHP-FPM configuration Thu, 10/29/2026 - 09:38 Aviso Affected Resources Insecure runtime configuration in PHP-CGI/PHP-FPM. Description INCIBE has coordinated the publication of a medium severity vulnerability affecting the PHP-CGI/PHP-FPM configuration of ICT Innovations, a web-based multi-user package. The vulnerability was discovered by Gonzalo Aguilar García (6h4ack). This vulnerability has been assigned the following code, CVSS v4.0…
EPSS 0.00 CVSS 5.1 CVE-2026-7190 ICT Innovations ES
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-80844.
EPSS 0.00 CVSS 8.8 CVE-2026-80844 Linux US
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93826.
EPSS 0.00 CVSS 7.8 CVE-2026-93826 Linux US
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-72315.
EPSS 0.00 CVSS 7.2 CVE-2026-72315 Linux US
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-98231.
EPSS 0.00 CVSS 7.8 CVE-2026-98231 Linux US
This vulnerability allows local attackers to escalate privileges on affected installations of FreeBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-58093.
EPSS 0.00 CVSS 8.8 CVE-2026-58093 FreeBSD US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118623.
CVSS 7.8 CVE-2026-118623 MLflow US
This vulnerability allows remote attackers to disclose sensitive information on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.4. The following CVEs are assigned: CVE-2026-118624.
CVSS 5.4 CVE-2026-118624 MLflow US
This vulnerability allows remote attackers to escalate privileges on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2026-118625.
CVSS 6.3 CVE-2026-118625 MLflow US
This vulnerability allows remote attackers to escalate privileges on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.4. The following CVEs are assigned: CVE-2026-118626.
CVSS 5.4 CVE-2026-118626 MLflow US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118627.
CVSS 7.8 CVE-2026-118627 MLflow US
This vulnerability allows remote attackers to disclose sensitive information on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2026-118628.
CVSS 8.2 CVE-2026-118628 MLflow US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-37052.
EPSS 0.01 CVSS 7.8 CVE-2024-37052 MLflow US
This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-64849.
KEV ✓ EPSS 0.10 CVSS 6.8 CVE-2026-64849 MLflow veřejná správa US CA
This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.7. The following CVEs are assigned: CVE-2026-71211.
EPSS 0.00 CVSS 7.7 CVE-2026-71211 MLflow US
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: This security release features fixes for multiple issues. Because this is a security release, it is recommended that you update your sites immediately. As a courtesy, the security fixes were backported to all branches eligible to receive security fixes (currently through 4.7). As a reminder, only the most recent version of WordPress is actively supported. The backports are in…
WordPress FI
Classification: Low, Solution: Not Defined, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: On November 4, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: Identity Services Engine (ISE) UCS Central Software Unified Communications Manager To remediate vulnerabilities to be disclosed on November 4, 2026, Cisco strongly…
Cisco FI
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6, CVEs: CVE-2026-118306, CVE-2026-118331, CVE-2026-118348, CVE-2026-118344, CVE-2026-118357, CVE-2026-118318, CVE-2026-118350, CVE-2026-118339, CVE-2026-118305, CVE-2026-118317, CVE-2026-118320, CVE-2026-118322, CVE-2026-118329, CVE-2026-118354, CVE-2026-118340, CVE-2026-118321, CVE-2026-118337, CVE-2026-118352, CVE-2026-118355, CVE-2026-118307 (+32 other associated CVEs), Summary: The Stable channel…
CVSS 9.6 Google FI