Výsledky hledání

téma: DDoS× v celém archivu zrušit filtry

192 karet z 200 položek · strana 2 z 4 CZ · EN/orig

Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.

13. 10. 2026 · zachyceno 22:02

CVE-2026-70072 Windows Netlogon Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-70072 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-70072 Windows Netlogon Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-96861 Network Device Enrollment Service (NDES) Denial of Service Vulnerability

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-96861 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-96861 Network Device Enrollment Service (NDES) Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-96866 Network Device Enrollment Service (NDES) Denial of Service Vulnerability

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-96866 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-96866 Network Device Enrollment Service (NDES) Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-96248 Windows Host Guardian Service Denial of Service Vulnerability

Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-96248 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-96248 Windows Host Guardian Service Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-96236 ASP.NET Core Denial of Service Vulnerability

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-96236 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-96236 ASP.NET Core Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-70181 ASP.NET Core Denial of Service Vulnerability

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-70181 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-70181 ASP.NET Core Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-70196 ASP.NET Core Denial of Service Vulnerability

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-70196 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-70196 ASP.NET Core Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-70159 ASP.NET Core Denial of Service Vulnerability

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-70159 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-70159 ASP.NET Core Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-70186 ASP.NET Core Denial of Service Vulnerability

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-70186 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-70186 ASP.NET Core Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-70031 Windows iSCSI Denial of Service Vulnerability

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-70031 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-70031 Windows iSCSI Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-88099 Windows Failover Cluster Denial of Service Vulnerability

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-88099 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-88099 Windows Failover Cluster Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-87716 Windows Storage Spaces Controller Denial of Service Vulnerability

Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-87716 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-87716 Windows Storage Spaces Controller Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-85324 Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-85324 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-85324 Active Directory Federation Services (AD FS) Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-85321 Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-85321 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-85321 Active Directory Federation Services (AD FS) Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-85319 Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-85319 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-85319 Active Directory Federation Services (AD FS) Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-70163 Microsoft OpenSSH for Windows Denial of Service Vulnerability

Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-70163 Microsoft US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-70163 Microsoft OpenSSH for Windows Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-83855 Windows WLAN Service Denial of Service Vulnerability

Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-83855 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-83855 Windows WLAN Service Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-83843 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-83843 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-83843 Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-83667 Windows Active Directory Domain Services Denial of Service Vulnerability

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-83667 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-83667 Windows Active Directory Domain Services Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-83655 Network Policy Server (NPS) Denial of Service Vulnerability

Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-83655 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-83655 Network Policy Server (NPS) Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-83648 Windows Active Directory Domain Services Denial of Service Vulnerability

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-83648 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-83648 Windows Active Directory Domain Services Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-69651 .NET Denial of Service Vulnerability

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-69651 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-69651 .NET Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-70133 Windows SMB Server Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-70133 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-70133 Windows SMB Server Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-70155 Windows DNS Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-70155 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-70155 Windows DNS Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-70166 Windows DNS Denial of Service Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-70166 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-70166 Windows DNS Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-70082 Windows DNS Denial of Service Vulnerability

Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-70082 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-70082 Windows DNS Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-70079 Windows DNS Denial of Service Vulnerability

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-70079 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-70079 Windows DNS Denial of Service Vulnerability

13. 10. 2026 · zachyceno 22:02

CVE-2026-70033 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.

EPSS 0.01 CVE-2026-70033 US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 22:02 · Microsoft Security · CVE-2026-70033 Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

13. 10. 2026 15:20

Russian internet provider SkyNet reports outages after cyberattack claimed by Ukrainian hackers

One of St. Petersburg's major internet providers said its network had been under a distributed denial-of-service (DDoS) attack since October 6, affecting services including online gaming, voice calls and video conferencing.

SkyNet telekomunikace US

tg: incident tp: DDoS

13. 10. 2026 15:20 · The Record · Russian internet provider SkyNet reports outages after cyberattack claimed by Ukrainian hackers

13. 10. 2026 · zachyceno 20:00

Persistent Denial of Service in Admin Profile

CVSSv3 Score: 4.8 An Uncaught Exception vulnerability [CWE-248] in FortiSandbox may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests. Revised on 2026-10-13 00:00:00

CVSS 4.8 Fortinet US

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 20:00 · Fortinet PSIRT · Persistent Denial of Service in Admin Profile

13. 10. 2026 · zachyceno 14:00

Vulnérabilité dans NetApp StorageGRID (13 octobre 2026)

Une vulnérabilité a été découverte dans NetApp StorageGRID. Elle permet à un attaquant de provoquer un déni de service à distance.

EPSS 0.00 CVE-2026-22056 NetApp FR

tg: zranitelnost tp: DDoS

13. 10. 2026 · zachyceno 14:00 · CERT-FR – avis · Vulnérabilité dans NetApp StorageGRID (13 octobre 2026)

12. 10. 2026 · zachyceno 15:30

Multiples vulnérabilités dans MongoDB (12 octobre 2026)

De multiples vulnérabilités ont été découvertes dans les produits MongoDB. Elles permettent à un attaquant de provoquer un déni de service à distance et un problème de sécurité non spécifié par l'éditeur.

MongoDB FR

tg: zranitelnost tp: DDoS

12. 10. 2026 · zachyceno 15:30 · CERT-FR – avis · Multiples vulnérabilités dans MongoDB (12 octobre 2026)

9. 10. 2026 15:31

SPOJENO PŘES CVE Citrix security advisory (AV26-1023)

Serial Number: AV26-1023 Date: October 9, 2026 NetScaler ADC and NetScaler Gateway Prior to 13.1-64.29 Prior to 14.1-73.46 NetScaler ADC FIPS Prior to 14.1-73.46 FIPS Prior to 13.1-37.283 FIPS & NDcPP The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-107406 Citrix Security Advisories

EPSS 0.02 CVE-2026-107406 Citrix CA IT FR

tg: zranitelnost tp: DDoS

9. 10. 2026 15:31 · Cyber Centre Kanada · Citrix security advisory (AV26-1023) 9. 10. 2026 09:56 · CSIRT Itálie (ACN) · Rilevata vulnerabilità in prodotti Citrix NetScaler 9. 10. 2026 · zachyceno 16:00 · CERT-FR – avis · Vulnérabilité dans Citrix NetScaler ADC et Gateway (09 octobre 2026)

9. 10. 2026 · zachyceno 16:00

Multiples vulnérabilités dans les produits Nextcloud (09 octobre 2026)

De multiples vulnérabilités ont été découvertes dans les produits Nextcloud. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.

EPSS 0.00 CVE-2026-68493 CVE-2026-77165 CVE-2026-77166 CVE-2026-77169 CVE-2026-82985 Nextcloud FR

tg: zranitelnost tp: DDoS

9. 10. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans les produits Nextcloud (09 octobre 2026)

8. 10. 2026 20:00

SPOJENO PŘES CVE Making sure the checks get printed

Welcome to this week’s edition of the Threat Source newsletter. My name is Pierre Cadieux, and I’ll be helping contribute to these newsletters. A little about me: I’ve been working in the cybersecurity industry in many roles over the past 20+ years, first focusing on endpoint security, policies, and firewalls, then moving to risk management and compliance, disaster recovery, and investigations. I spent about 15 years as a consultant working across many well-known consultancy firms and…

KEV ✓ EPSS 0.11 CVSS 8.7 CVE-2026-88779 Cisco Citrix Google US CA FI GB FR IT

tg: zneužíváno tg: zranitelnost tg: rozbor tg: názor tg: přehled tp: malware tp: DDoS tp: AI

8. 10. 2026 20:00 · Cisco Talos · Making sure the checks get printed 5. 10. 2026 13:45 · Cyber Centre Kanada · Citrix security advisory (AV26-996) 5. 10. 2026 · zachyceno 04:00 · NCSC-FI · Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88779 5. 10. 2026 · zachyceno 16:00 · Sophos Threat Research · Citrix NetScaler vulnerability (CVE-2026-88779) in active exploitation 5. 10. 2026 · zachyceno 16:00 · CERT-FR – avis · Vulnérabilité dans Citrix NetScaler ADC et Gateway (05 octobre 2026) 4. 10. 2026 23:58 · BleepingComputer · Citrix patches NetScaler SAML zero-day exploited in attacks 4. 10. 2026 19:05 · CSIRT Itálie (ACN) · Vulnerabilità in prodotti Citrix NetScaler 4. 10. 2026 · zachyceno 22:00 · CISA KEV · Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779) 28. 9. 2026 · CERT-FR – alerty · Multiples vulnérabilités dans Citrix NetScaler ADC et Gateway (28 septembre 2026)

7. 10. 2026 18:00

Cisco NX-OS Software Control Plane Denial of Service Vulnerability

A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by sending a high rate of UDP or TCP connections to a data plane interface on an affected device. A successful exploit could allow the attacker to cause instability to various routing and control plane…

EPSS 0.00 CVE-2026-20173 Cisco US

tg: zranitelnost tp: DDoS

7. 10. 2026 18:00 · Cisco PSIRT · Cisco NX-OS Software Control Plane Denial of Service Vulnerability

7. 10. 2026 · zachyceno 16:00

Multiples vulnérabilités dans WordPress (07 octobre 2026)

De multiples vulnérabilités ont été découvertes dans WordPress. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

WordPress FR

tg: zranitelnost tp: DDoS

7. 10. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans WordPress (07 octobre 2026)

5. 10. 2026 · zachyceno 16:00

Multiples vulnérabilités dans Zabbix (05 octobre 2026)

De multiples vulnérabilités ont été découvertes dans Zabbix. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

EPSS 0.00 CVE-2026-59782 CVE-2026-59783 CVE-2026-59785 CVE-2026-59786 CVE-2026-59787 CVE-2026-59788 Zabbix FR

tg: zranitelnost tp: DDoS

5. 10. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans Zabbix (05 octobre 2026)

4. 10. 2026 13:19

NCSC-2026-0399 [1.00] [M/H] Kwetsbaarheid verholpen in Citrix NetScaler ADC en NetScaler Gateway

Citrix heeft een kwetsbaarheid verholpen in NetScaler ADC en NetScaler Gateway. De kwetsbaarheid betreft een geheugenoverflow in versies van NetScaler ADC en NetScaler Gateway die ouder zijn dan 14.1-73.41 en 13.1-64.28. Deze kwetsbaarheid kan leiden tot een Denial of Service (DoS) waarbij de normale beschikbaarheid van de dienst wordt verstoord.

Citrix NL

tg: zranitelnost tp: DDoS

4. 10. 2026 13:19 · NCSC-NL · NCSC-2026-0399 [1.00] [M/H] Kwetsbaarheid verholpen in Citrix NetScaler ADC en NetScaler Gateway

2. 10. 2026 · zachyceno 17:00

Multiples vulnérabilités dans Apache HTTP Server (02 octobre 2026)

De multiples vulnérabilités ont été découvertes dans Apache HTTP Server. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

EPSS 0.01 a dalších 3 CVE-2026-47360 CVE-2026-48005 CVE-2026-56153 CVE-2026-56154 CVE-2026-56449 CVE-2026-57941 CVE-2026-58415 CVE-2026-59685 CVE-2026-59797 CVE-2026-63045 CVE-2026-63292 CVE-2026-63686 CVE-2026-63718 CVE-2026-73636 CVE-2026-73637 CVE-2026-79768 CVE-2026-93546 Apache FR

tg: zranitelnost tp: DDoS

2. 10. 2026 · zachyceno 17:00 · CERT-FR – avis · Multiples vulnérabilités dans Apache HTTP Server (02 octobre 2026)

1. 10. 2026 16:29

WatchGuard security advisory (AV26-981)

Serial number: AV26-981 Date: October 1, 2026 As of September 30, 2026, WatchGuard is affected by a vulnerability in the following product: Fireware OS Prior to 12.12.3 Prior to 12.5.21 Prior to 2026.2.3 Prior to 2026.3.2 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CVE-2026-86134 — Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service WatchGuard Security…

EPSS 0.00 CVE-2026-86134 WatchGuard CA

tg: zranitelnost tp: DDoS

1. 10. 2026 16:29 · Cyber Centre Kanada · WatchGuard security advisory (AV26-981)

1. 10. 2026 · zachyceno 19:00

Monta monta.app

View CSAF Summary Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks. The following versions of Monta monta.app are affected: monta.app vers:all/* (CVE-2026-95102, CVE-2026-97363, CVE-2026-97212, CVE-2026-93474) CVSS Vendor Equipment Vulnerabilities v3 9.4 Monta Monta monta.app Missing Authentication for Critical Function, Improper…

EPSS 0.00 CVSS 9.4 CVE-2026-93474 CVE-2026-95102 CVE-2026-97212 CVE-2026-97363 Monta energetika doprava US

tg: zranitelnost tp: DDoS tp: průmyslové systémy

1. 10. 2026 · zachyceno 19:00 · CISA Advisories · Monta monta.app

1. 10. 2026 11:55

SPOJENO PŘES CVE Risolte vulnerabilità in CPython

Aggiornamenti di sicurezza risolvono 2 vulnerabilità, di cui 1 con gravità "critica" e 1 con gravità "alta", in CPython, implementazione di riferimento open source del linguaggio di programmazione Python. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato remoto non autenticato di eludere i meccanismi di sicurezza o di compromettere la disponibilità del servizio sui sistemi interessati.

EPSS 0.01 CVSS 9.2 CVE-2026-19445 CVE-2026-19553 Python CPython IT FI FR

tg: zranitelnost tp: DDoS

1. 10. 2026 11:55 · CSIRT Itálie (ACN) · Risolte vulnerabilità in CPython 1. 10. 2026 · zachyceno 04:00 · NCSC-FI · CRITICAL severity vulnerability affecting CPython 1. 10. 2026 · zachyceno 15:30 · CERT-FR – avis · Multiples vulnérabilités dans CPython (01 octobre 2026)

30. 9. 2026 17:49

CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to remote code execution or cause a denial-of-service condition. [...]

CVE-2026-67276 * CVE-2026-84411 * CVE-2026-86060 * MikroTik US

tg: zranitelnost tp: DDoS

30. 9. 2026 17:49 · BleepingComputer · CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

30. 9. 2026 · zachyceno 04:30

SPOJENO PŘES CVE Multiple Vulnerabilities in HPE Networking Instant On APs

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-76721, CVE-2026-76722, CVE-2026-76723, CVE-2026-76724, CVE-2026-76725, CVE-2026-76726, CVE-2026-76727, CVE-2026-76728, CVE-2026-76729, CVE-2026-76730, CVE-2026-76731, CVE-2026-76732, CVE-2026-76733, CVE-2026-76734, CVE-2026-76735, CVE-2026-76736, CVE-2026-76737, CVE-2026-76738, Summary: Multiple Vulnerabilities in HPE Networking Instant On APs

EPSS 0.01 CVSS 9.8 a dalších 1 CVE-2026-76722 CVE-2026-76723 CVE-2026-76724 CVE-2026-76725 CVE-2026-76726 CVE-2026-76727 CVE-2026-76728 CVE-2026-76729 CVE-2026-76730 CVE-2026-76731 CVE-2026-76732 CVE-2026-76733 CVE-2026-76734 CVE-2026-76735 CVE-2026-76736 CVE-2026-76737 CVE-2026-76738 HPE FI FR

tg: zranitelnost tp: DDoS

30. 9. 2026 · zachyceno 04:30 · NCSC-FI · Multiple Vulnerabilities in HPE Networking Instant On APs 30. 9. 2026 · zachyceno 15:00 · CERT-FR – avis · Multiples vulnérabilités dans HPE Aruba Networking Instant On (30 septembre 2026)

30. 9. 2026 · zachyceno 04:30

SPOJENO PŘES CVE Multiple vulnerabilities in Wireshark

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.1, CVEs: CVE-2026-95386, CVE-2026-95387, CVE-2026-95388, CVE-2026-95389, CVE-2026-95390, CVE-2026-95391, CVE-2026-95392, CVE-2026-95393, CVE-2026-95394, CVE-2026-95395, CVE-2026-96415, CVE-2026-96416, CVE-2026-96417, CVE-2026-96418, CVE-2026-96419, CVE-2026-96420, CVE-2026-96421, CVE-2026-96422, CVE-2026-96423, Summary: CVE-2026-95386: The TTL file parser could go into an infinite loop. CVE-2026-95387:…

EPSS 0.00 CVSS 8.1 a dalších 2 CVE-2026-95388 CVE-2026-95389 CVE-2026-95390 CVE-2026-95391 CVE-2026-95392 CVE-2026-95393 CVE-2026-95394 CVE-2026-95395 CVE-2026-96415 CVE-2026-96416 CVE-2026-96417 CVE-2026-96418 CVE-2026-96419 CVE-2026-96420 CVE-2026-96421 CVE-2026-96422 CVE-2026-96423 Wireshark FI FR

tg: zranitelnost tp: DDoS

30. 9. 2026 · zachyceno 04:30 · NCSC-FI · Multiple vulnerabilities in Wireshark 24. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans Wireshark (24 septembre 2026)

30. 9. 2026 · zachyceno 15:00

Multiples vulnérabilités dans OpenSSL (30 septembre 2026)

De multiples vulnérabilités ont été découvertes dans OpenSSL. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

EPSS 0.01 CVE-2026-35189 CVE-2026-35191 CVE-2026-42772 CVE-2026-54872 CVE-2026-54873 CVE-2026-54875 CVE-2026-72897 CVE-2026-75804 CVE-2026-75805 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 CVE-2026-84783 CVE-2026-84784 OpenSSL FR

tg: zranitelnost tp: DDoS

30. 9. 2026 · zachyceno 15:00 · CERT-FR – avis · Multiples vulnérabilités dans OpenSSL (30 septembre 2026)

29. 9. 2026 · zachyceno 18:30

Baicells Nova 430H

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to inject malformed messages which may lead to a denial-of-service condition. The following versions of Baicells Nova 430H are affected: Nova 430H eNodeB (model pBS3101SH) <=BaiBLQ_3.0.12 (CVE-2026-96274) CVSS Vendor Equipment Vulnerabilities v3 7.4 Baicells Technologies Baicells Nova 430H Uncaught Exception Background Critical Infrastructure Sectors: Communications, Information Technology Countries/Areas…

EPSS 0.00 CVSS 7.4 CVE-2026-96274 Baicells Technologies telekomunikace US

tg: zranitelnost tp: DDoS

29. 9. 2026 · zachyceno 18:30 · CISA Advisories · Baicells Nova 430H

28. 9. 2026 · zachyceno 04:00

Vulnerabilities in Elasticsearch

Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 6.5, CVEs: CVE-2026-82294, CVE-2026-82300, CVE-2026-94396, CVE-2026-94397, CVE-2026-94398, CVE-2026-94399, CVE-2026-94408, Summary: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). See also: https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-176/390682, See also: https://discuss.elastic.co…

EPSS 0.00 CVSS 6.5 CVE-2026-82294 CVE-2026-82300 CVE-2026-94396 CVE-2026-94397 CVE-2026-94398 CVE-2026-94399 CVE-2026-94408 Elastic FI

tg: zranitelnost tp: DDoS

28. 9. 2026 · zachyceno 04:00 · NCSC-FI · Vulnerabilities in Elasticsearch

25. 9. 2026 · zachyceno 16:00

Multiples vulnérabilités dans le noyau Linux d'Ubuntu (25 septembre 2026)

De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.

Ubuntu Linux FR

tg: zranitelnost tp: DDoS

25. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans le noyau Linux d'Ubuntu (25 septembre 2026)

25. 9. 2026 · zachyceno 16:00

Multiples vulnérabilités dans les produits Elastic (25 septembre 2026)

De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.

EPSS 0.00 CVE-2026-72662 CVE-2026-72668 CVE-2026-78582 CVE-2026-82294 CVE-2026-82300 CVE-2026-94396 CVE-2026-94397 CVE-2026-94398 CVE-2026-94399 CVE-2026-94400 CVE-2026-94408 Elastic FR

tg: zranitelnost tp: DDoS

25. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans les produits Elastic (25 septembre 2026)

24. 9. 2026 · zachyceno 04:30

Ubiquiti UniFi Gateways - Multiple Denial-of-Service Vulnerabilities

Classification: Important, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 7.5, CVEs: CVE-2026-77544, CVE-2026-77555, CVE-2026-77556, CVE-2026-77558, CVE-2026-95861, CVE-2026-95862, Summary: Ubiquiti has corrected six vulnerabilities affecting current UniFi gateway devices. An attacker with network access to an affected device can exploit the vulnerabilities to cause a denial-of-service condition and interrupt network connectivity. The affected product families include Dream…

EPSS 0.01 CVSS 7.5 CVE-2026-77544 CVE-2026-77555 CVE-2026-77556 CVE-2026-77558 CVE-2026-95861 CVE-2026-95862 Ubiquiti FI

tg: zranitelnost tp: DDoS

24. 9. 2026 · zachyceno 04:30 · NCSC-FI · Ubiquiti UniFi Gateways - Multiple Denial-of-Service Vulnerabilities

24. 9. 2026 · zachyceno 04:30

Apache Tomcat - Multiple Severe Vulnerabilities

Classification: Severe, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 9.8, CVEs: CVE-2026-73581, CVE-2026-75973, CVE-2026-76183, CVE-2026-77756, CVE-2026-77762, CVE-2026-77791, CVE-2026-78383, CVE-2026-78437, CVE-2026-79677, CVE-2026-86248, CVE-2026-86350, CVE-2026-87022, Summary: Apache has disclosed multiple vulnerabilities affecting supported Apache Tomcat releases. The vulnerabilities include bypassing access restrictions on WebSocket endpoints, HTTP/2 request-header…

EPSS 0.01 CVSS 9.8 CVE-2026-73581 CVE-2026-75973 CVE-2026-76183 CVE-2026-77756 CVE-2026-77762 CVE-2026-77791 CVE-2026-78383 CVE-2026-78437 CVE-2026-79677 CVE-2026-86248 CVE-2026-86350 CVE-2026-87022 Apache FI

tg: zranitelnost tp: DDoS

24. 9. 2026 · zachyceno 04:30 · NCSC-FI · Apache Tomcat - Multiple Severe Vulnerabilities

23. 9. 2026 17:13

HPE security advisory (AV26-951)

Serial number: AV26-951Date: September 23, 2026 As of September 22, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products: Analytics and Location Engine (ALE) Prior to or equal to 5.0.0.0 HPE Telco Service Orchestrator Prior to or equal to 5.6.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HPESBNW05137 rev.1 - Multiple Vulnerabilities in HPE Networking…

Hewlett Packard Enterprise CA

tg: zranitelnost tp: DDoS

23. 9. 2026 17:13 · Cyber Centre Kanada · HPE security advisory (AV26-951)

23. 9. 2026 · zachyceno 15:30

Multiples vulnérabilités dans Mattermost Server (23 septembre 2026)

De multiples vulnérabilités ont été découvertes dans Mattermost Server. Elles permettent à un attaquant de provoquer un déni de service à distance et une atteinte à la confidentialité des données.

EPSS 0.00 CVE-2026-95666 CVE-2026-96259 CVE-2026-96260 Mattermost FR

tg: zranitelnost tp: DDoS

23. 9. 2026 · zachyceno 15:30 · CERT-FR – avis · Multiples vulnérabilités dans Mattermost Server (23 septembre 2026)

22. 9. 2026 · zachyceno 18:00

SPOJENO PŘES CVE Siemens WTV676 and WTV776

View CSAF Summary The products listed below contain a denial of service vulnerability that could allow an attacker to force the devices into protection mode under certain conditions. This disables remote connectivity functions (Web Access) to the devices. Siemens has released new versions for the affected products and recommends to update to the latest versions. The following versions of Siemens WTV676 and WTV776 are affected: WTV676-HB6035 Web Interface vers:intdot/<3.94 (CVE-2026-89207)…

EPSS 0.00 CVSS 6.5 CVE-2026-89207 Siemens energetika US IT

tg: zranitelnost tp: DDoS tp: průmyslové systémy

22. 9. 2026 · zachyceno 18:00 · CISA Advisories · Siemens WTV676 and WTV776 17. 9. 2026 09:45 · CSIRT Itálie (ACN) · Aggiornamenti per prodotti Siemens

22. 9. 2026 · zachyceno 04:00

Keycloak — Multiple Security Vulnerabilities

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.5, CVEs: CVE-2026-90997, CVE-2026-79651, CVE-2026-74909, CVE-2026-19607, CVE-2026-17526, CVE-2026-18212, Summary: Keycloak 26.7.4 addresses multiple security vulnerabilities affecting authentication and authorization functionality. The vulnerabilities include privilege escalation allowing a user with impersonation privileges to impersonate a realm administrator, unauthenticated denial-of-service…

EPSS 0.01 CVSS 7.5 CVE-2026-17526 CVE-2026-18212 CVE-2026-19607 CVE-2026-74909 CVE-2026-79651 CVE-2026-90997 Keycloak FI

tg: zranitelnost tg: novinka v produktu tp: DDoS tp: identita

22. 9. 2026 · zachyceno 04:00 · NCSC-FI · Keycloak — Multiple Security Vulnerabilities

21. 9. 2026 · zachyceno 15:30

SPOJENO PŘES CVE Multiples vulnérabilités dans Synology DSM (21 septembre 2026)

De multiples vulnérabilités ont été découvertes dans Synology DSM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

EPSS 0.01 CVSS 9.8 CVE-2026-13623 CVE-2026-13635 CVE-2026-13639 CVE-2026-13666 CVE-2026-13673 CVE-2026-13683 CVE-2026-13684 CVE-2026-6205 Synology FR FI

tg: zranitelnost tp: DDoS

21. 9. 2026 · zachyceno 15:30 · CERT-FR – avis · Multiples vulnérabilités dans Synology DSM (21 septembre 2026) 19. 9. 2026 · zachyceno 04:30 · NCSC-FI · Synology DSM — Multiple Critical Vulnerabilities

17. 9. 2026 · zachyceno 19:00

Mitsubishi Electric CC-Link IE TSN Communication Protocol (Update A)

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker with access to the same network segment to tamper with communication data in the affected product by sending specially crafted packets under specific timing conditions. This could allow the attacker to cause a denial-of-service (DoS) condition in the affected product by interfering with its control function or causing it to operate incorrectly. The following versions of Mitsubishi Electric CC-Link IE TSN…

EPSS 0.00 CVE-2026-13584 Mitsubishi Electric výroba a průmysl US

tg: zranitelnost tp: DDoS tp: průmyslové systémy

17. 9. 2026 · zachyceno 19:00 · CISA Advisories · Mitsubishi Electric CC-Link IE TSN Communication Protocol (Update A)

17. 9. 2026 13:33

US takes down NightmareStresser DDoS-for-hire platform

The U.S. Federal Bureau of Investigation (FBI) seized the domains used by NightmareStresser, one of the world's longest-running distributed denial-of-service (DDoS) platforms. [...]

tg: vymáhání práva tp: DDoS

17. 9. 2026 13:33 · BleepingComputer · US takes down NightmareStresser DDoS-for-hire platform