Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
Serial Number: AV26-1004 Date: October 6, 2026 As of October 5, 2026, Rapid7 is affected by a vulnerability in the following product: Velociraptor Prior to 0.77.3 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CVE-2026-78411 Velociraptor Server Metadata update with Insufficient Permission Check Rapid7 Security Advisories
EPSS < 0.01 CVE-2026-78411 Rapid7 CA
De kwetsbaarheid bevindt zich in meerdere producten binnen het Atlassian Data Center-platform, waaronder Jira Software, Jira Service Management, Confluence, Bitbucket, Bamboo, Crowd, Crucible en Fisheye. De kwetsbaarheid betreft een Arbitrary File Access-probleem waarmee ongeauthenticeerde aanvallers specifieke bestanden binnen de rootdirectory van de webapplicatie kunnen benaderen. Exploitatie vereist kennis van het exacte bestandspad en de bestandsnaam. Hierdoor kunnen mogelijk gevoelige…
Atlassian NL
Serial number: AV26-1003 Date: October 6, 2026 As of October 5, 2026, Android published a security bulletin to address vulnerabilities affecting Android devices. The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Android Security Bulletin—October 2026
Android CA
Apache Software Foundation ha rilasciato aggiornamenti per risolvere alcune vulnerabilità di sicurezza, di cui 3 con gravità "alta", in Apache Struts, framework open source per lo sviluppo di applicazioni web Java basato sul modello MVC (Model-View-Controller).
EPSS 0.01 CVE-2026-104711 CVE-2026-104712 CVE-2026-104713 Apache IT
View CSAF Summary Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions that were developed according to the cybersecurity requirements, threat landscape, and industry practices that existed at the time of their release. As cybersecurity threats and security expectations have evolved, these end-of-life…
EPSS 0.81 CVSS 9.1 CVE-2010-2965 CVE-2014-9195 CVE-2023-46143 CVE-2026-8065 CVE-2026-8066 CVE-2026-8067 Hitachi Energy Wind River energetika US FI
View CSAF Summary Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution. The following versions of Savannah lwIP SMTP client are affected: lwIP SMTP client 2.2.1 (CVE-2026-15340) CVSS Vendor Equipment v3 9.8 Savannah lwIP SMTP client 1 Vulnerability Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Background Critical Infrastructure Sectors: Energy, Water and Wastewater Systems…
EPSS < 0.01 CVE-2026-15340 Savannah energetika vodárenství US
View CSAF Summary Hitachi Energy is aware of RCE (Remote Code Execution) vulnerability in Apache ActiveMQ component of SOI product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks affecting confidentiality, integrity, and availability of the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. The following versions of Hitachi Energy SOI are affected: SOI vers:SOI/>=2.0.0|<=2.2.0 (CVE…
KEV ✓ EPSS 0.98 CVE-2026-34197 Hitachi Energy Apache energetika US
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain full unauthorized access to the device. The following versions of Johnson Controls EasyIO FG are affected: EasyIO FG firmware <=2.0b52 (CVE-2026-27872, CVE-2026-27873) CVSS Vendor Equipment v3 7.7 Johnson Controls EasyIO FG firmware 2 Vulnerabilities Use of Hard-coded Credentials, Improper Privilege Management Background Critical Infrastructure Sectors: Critical Manufacturing, Commercial…
EPSS < 0.01 CVE-2026-27872 CVE-2026-27873 Johnson Controls výroba a průmysl veřejná správa doprava energetika US
View CSAF Summary Hitachi Energy is aware of unauthenticated servlet access vulnerabilities that affect Asset Suite product versions listed in this document. These vulnerabilities can be exploited to potentially cause confidentiality, integrity and availability impact on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. The following versions of Hitachi Energy Asset Suite are affected: Asset Suite vers:Asset_Suite/<=9.9.0 (CVE-2026…
EPSS < 0.01 CVE-2026-11796 CVE-2026-7395 Hitachi Energy energetika US
View CSAF Summary Hitachi Energy is aware of open-source software vulnerabilities that affect REB500 product versions listed in this document. These vulnerabilities can be exploited to carry out Denial of Service (DoS) attack on the product. Please refer to the Recommended Immediate Actions for information about the mitigation/remediation. The following versions of Hitachi Energy REB500 are affected: REB500 vers:REB500/<=8.3.3.1 (CVE-2024-8176, CVE-2025-59375) CVSS Vendor Equipment v3 6.5…
EPSS 0.01 CVE-2024-8176 CVE-2025-59375 Hitachi Energy energetika US
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-75818 to CVE-2026-75820) found in GNU Aspell software.
EPSS < 0.01 CVE-2026-75818 CVE-2026-75820 GNU PL
Rilevate molteplici vulnerabilità di sicurezza, di cui 11 con gravita "alta", nei chipset Qualcomm, componenti hardware impiegati in dispositivi mobili, sistemi embedded, apparati di rete, piattaforme automotive e altri sistemi basati sulle tecnologie Qualcomm Snapdragon e FastConnect.
EPSS < 0.01 CVE-2025-10286 CVE-2025-11689 CVE-2026-25267 CVE-2026-25291 CVE-2026-25302 CVE-2026-57537 CVE-2026-57545 CVE-2026-57546 CVE-2026-57554 CVE-2026-57555 CVE-2026-57559 Qualcomm IT
Disponibili Proof of Concept (PoC) per lo sfruttamento di 4 nuove vulnerabilità di sicurezza, di cui 2 con gravità “critica” e 2 con gravità “alta”, che interessano il software Langflow, nota piattaforma open-source che permette di costruire, testare e distribuire applicazioni e agenti basati su intelligenza artificiale.
EPSS 0.04 CVE-2026-105697 CVE-2026-105699 CVE-2026-105740 CVE-2026-105741 Langflow IT
Rilasciati aggiornamenti di sicurezza per risolvere una vulnerabilità con gravità "critica" in HPE Integrated Lights-Out (iLO) 7, piattaforma di gestione integrata nei server HPE che consente l'amministrazione remota completa dell'hardware. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione sui sistemi interessati e accedere all'interfaccia di gestione con privilegi amministrativi.
EPSS < 0.01 CVE-2026-79820 HPE IT
Insecure deserialization in the TrueLayer Magento 2 plugin Tue, 10/06/2026 - 10:47 Aviso Affected Resources TrueLayer Magento 2 Plugin, versions 2.4.0 through 2.4.2. Description INCIBE has coordinated the disclosure of a high-severity vulnerability affecting the TrueLayer Magento 2 Plugin, a payment integration plugin for Magento 2. The vulnerability, classified as insecure deserialization, could allow remote code execution by injecting specially crafted PHP objects into the cache backend used…
EPSS < 0.01 CVSS 7.5 CVE-2026-103831 Magento TrueLayer ES
Microsoft heeft out-of-band, vooruitlopend op de maandelijkse update voor oktober, een kwetsbaarheid verholpen in Microsoft Exchange Server. De kwetsbaarheid betreft zwakke autorisatiecontroles binnen Microsoft Exchange Server. Een geauthenticeerde aanvaller kan hierdoor op afstand via het netwerk privileges escaleren. Dit betekent dat een aanvaller met geldige inloggegevens hogere rechten kan verkrijgen dan waarvoor deze geautoriseerd is, wat kan leiden tot ongeautoriseerde administratieve…
Microsoft NL
SQL Injection (SQLi) in eLoanApp Platform by RDL Technologies Tue, 10/06/2026 - 11:15 Aviso Affected Resources eLoanApp Platform. Description INCIBE has coordinated the publication of a high severity vulnerability affecting eLoanApp Platform by RDL Technologies, loan management software. The vulnerability was discovered by Gonzalo Aguilar García (6h4ack). This vulnerability has been assigned the following code, CVSS v4.0 base score, CVSS vector and CWE vulnerability type: CVE-2026-4889: CVSS v4…
EPSS < 0.01 CVSS 7.8 CVE-2026-4889 RDL Technologies finance ES
Google ha pubblicato il bollettino di sicurezza Android di ottobre, contenente correzioni per 25 vulnerabilità, di cui 7 con gravità “critica” e 18 con gravità “alta”.
EPSS < 0.01 a dalších 8 CVE-2026-49937 CVE-2026-55265 CVE-2026-55266 CVE-2026-55269 CVE-2026-55270 CVE-2026-55279 CVE-2026-55280 CVE-2026-55286 CVE-2026-58815 CVE-2026-58834 CVE-2026-58835 CVE-2026-58841 CVE-2026-58854 CVE-2026-58856 CVE-2026-58859 CVE-2026-58865 CVE-2026-58880 Google IT FR
[VDE-2026-108] The aas-edge-client is a reference implementation of an Asset Administration Shell (AAS) edge application, published by Murrelektronik GmbH on GitHub for the LNI 4.0 testbed demonstrator. Its REST API is bound to all network interfaces on TCP port 18000, requires no authentication and accepts cross-origin requests from any origin. The reference implementation was never intended for productive use and is no longer maintained. Affected are all aas-edge-client versions.
EPSS < 0.01 CVE-2026-94293 Murrelektronik výroba a průmysl DE
Une vulnérabilité a été découverte dans Microsoft Office. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.
EPSS < 0.01 CVSS 7.5 CVE-2026-100208 Microsoft FR US
De multiples vulnérabilités ont été découvertes dans les produits Atlassian. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données.
KEV ✓ · ransomware EPSS 1.00 CVE-2019-13990 CVE-2022-1471 CVE-2022-23521 CVE-2022-41903 CVE-2023-22518 CVE-2023-22522 CVE-2023-22523 CVE-2023-22524 CVE-2023-22527 CVE-2023-46604 CVE-2026-21589 Atlassian FR
Hackers are actively scanning for a Rejetto HFS weak signing key vulnerability, tracked as CVE-2026-61500, that allows session forgery, account takeover, and remote code execution (RCE). [...]
EPSS 0.02 CVE-2026-61500 Rejetto US
Serial Number: AV26-1000 Date: October 5, 2026 As of October 5, 2026, Hewlett Packard Enterprise (HPE) is affected by a vulnerability in the following product: HPE Integrated Lights-Out (iLO) 7 Prior to 1.25.00 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HPESBHF05163 rev.1 - HPE Integrated Lights-Out (iLO) 7 Using COM, User Validation Failure Vulnerability HPE Security Bulletin Library
Serial Number: AV26-999 Date: October 5, 2026 As of October 5, 2026, Progress Software is affected by vulnerabilities in the following product: Progress Telerik Fiddler Classic Prior to 6.0.20262.10021 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Weak Executable Signature Verification Vulnerability (CVE-2026-77805) Progress Trust Center
EPSS < 0.01 CVE-2026-77805 Progress Software CA
Serial Number: AV26-998 Date: October 5, 2026 As of October 2, 2026, GeoVision Inc. is affected by vulnerabilities in the following product: GV-Eye Versions prior to V3.6.0 Android The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GeoVision Security Advisory (PDF) Cyber Security - GeoVision
GeoVision CA
Citrix confirmed late on Friday that it was “tracking a newly observed issue” related to some customer-managed NetScaler deployments but claimed the problem was not connected to vulnerabilities reported last week that also caused alarm among cybersecurity experts.
Citrix US
Progress Software ha rilasciato aggiornamenti di sicurezza per risolvere nuove vulnerabilità in Sitefinity Next.js Renderer e Telerik Fiddler Classic. Tali vulnerabilità, qualora sfruttate, potrebbero permettere a un utente malintenzionato di elevare i propri privilegi o eludere i meccanismi di sicurezza sui sistemi interessati.
EPSS < 0.01 CVE-2026-77805 CVE-2026-92931 Progress Software IT
Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible. [...]
CVE-2021-21551 * CVE-2026-22769 * CVE-2026-63688 * CVE-2026-63692 * CVE-2026-63697 * CVE-2026-71168 * CVE-2026-86360 * CVE-2026-86361 * CVE-2026-86362 * Dell US
Aggiornamenti di sicurezza sanano 31 vulnerabilità, di cui 2 con gravità "critica" e 9 con gravità "alta", nei chipset MediaTek, componenti hardware impiegati in numerosi dispositivi mobili e sistemi embedded.
EPSS < 0.01 CVE-2026-20519 CVE-2026-20520 CVE-2026-20521 CVE-2026-20522 CVE-2026-20523 CVE-2026-20524 CVE-2026-20525 CVE-2026-20526 CVE-2026-20527 CVE-2026-20586 CVE-2026-20589 MediaTek IT
Dell heeft de kwetsbaarheden verholpen in Container Storage Modules versie 1.18.0 en hoger. De kwetsbaarheden bevinden zich in Dell Container Storage Modules (CSM), die worden gebruikt voor de integratie van Dell-opslagsystemen met containerplatformen zoals Kubernetes en OpenShift. De geïdentificeerde kwetsbaarheden omvatten onder meer authenticatie- en autorisatiebypasses, privilege-escalatie, informatielekken en kwetsbaarheden in CSM-componenten en CSI-drivers. Afhankelijk van de specifieke…
Dell NL
Serial number: AV26-997 Date: October 5, 2026 As of September 29, 2026, IBM is affected by vulnerabilities in the following products: DataStage on Cloud Pak for Data Version 5.4.0.0 Guardium Data Protection Version 12.2 IBM i Version 7.3, 7.4, 7.5 and 7.6 The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates. DataStage on Cloud Pak for Data has several vulnerabilities IBM Guardium Data Protection is affected by multiple…
EPSS < 0.01 CVE-2026-84414 IBM CA IT
Aggiornamenti di sicurezza per LibreOffice sanano 6 vulnerabilità, di cui 1 con gravità "alta" che interessa LibreOffice Calc, applicazione della suite open source dedicata alla gestione dei fogli di calcolo. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eseguire codice arbitrario sui sistemi interessati.
EPSS < 0.01 CVE-2026-63277 LibreOffice IT
Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 11 nuove vulnerabilità di sicurezza. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di eludere i meccanismi di sicurezza, eseguire codice arbitrario e compromettere la disponibilità del servizio sui sistemi interessati.
EPSS < 0.01 CVE-2026-103621 CVE-2026-103622 CVE-2026-103623 CVE-2026-103624 CVE-2026-103625 CVE-2026-103626 CVE-2026-103628 CVE-2026-103629 CVE-2026-103630 CVE-2026-103631 Google IT
Rilasciati aggiornamenti di sicurezza per risolvere una vulnerabilità con gravità “critica” che interessa GitLab AI Gateway. Tale vulnerabilità, qualora sfruttata, potrebbe consentire a un utente autenticato malevolo di eseguire codice arbitrario sui sistemi interessati.
EPSS 0.17 CVSS 9.9 CVE-2026-90970 GitLab IT FR FI US
Aggiornamenti di sicurezza sanano 3 vulnerabilità con gravità “critica” presenti nei prodotti cPanel/WHM (Web Host Manager). Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di eseguire codice arbitrario con privilegi amministrativi sui sistemi interessati.
EPSS 0.01 CVE-2026-93029 CVE-2026-93697 CVE-2026-93698 cPanel IT
De multiples vulnérabilités ont été découvertes dans Zabbix. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
EPSS < 0.01 CVE-2026-59782 CVE-2026-59783 CVE-2026-59785 CVE-2026-59786 CVE-2026-59787 CVE-2026-59788 Zabbix FR
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Google FR
Citrix heeft een kwetsbaarheid verholpen in NetScaler ADC en NetScaler Gateway. De kwetsbaarheid betreft een geheugenoverflow in versies van NetScaler ADC en NetScaler Gateway die ouder zijn dan 14.1-73.41 en 13.1-64.28. Deze kwetsbaarheid kan leiden tot een Denial of Service (DoS) waarbij de normale beschikbaarheid van de dienst wordt verstoord.
Citrix NL
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 6.3, CVEs: CVE-2026-103628, CVE-2026-103626, CVE-2026-103621, CVE-2026-103630, CVE-2026-103625, CVE-2026-103624, CVE-2026-103629, CVE-2026-103622, CVE-2026-103623, CVE-2026-103631, CVE-2026-103627, Summary: The Stable channel has been updated to 154.0.8037.97/.98 for Windows and Mac and 154.0.8037.97 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is…
EPSS < 0.01 CVSS 6.3 CVE-2026-103621 CVE-2026-103622 CVE-2026-103623 CVE-2026-103624 CVE-2026-103625 CVE-2026-103626 CVE-2026-103627 CVE-2026-103628 CVE-2026-103629 CVE-2026-103630 CVE-2026-103631 Google FI
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-63688, CVE-2026-63692, CVE-2026-67269, CVE-2026-54472, CVE-2026-61421, CVE-2026-67273, CVE-2026-67270, CVE-2026-76105, CVE-2026-61411, CVE-2026-70411, CVE-2026-63689, CVE-2026-63691, CVE-2026-63690, Summary: Dell Container Storage Modules remediation is available for Multiple vulnerabilities in third-party that could be exploited by malicious users to compromise the affected system.…
EPSS < 0.01 CVSS 10.0 CVE-2026-54472 CVE-2026-61411 CVE-2026-61421 CVE-2026-63688 CVE-2026-63689 CVE-2026-63690 CVE-2026-63691 CVE-2026-63692 CVE-2026-67269 CVE-2026-67270 CVE-2026-67273 CVE-2026-70411 CVE-2026-76105 Dell FI
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.4, CVEs: CVE-2026-86325, CVE-2026-86326, Summary: CVE-2026-86325 CVSS 4.0: 9.4 - AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the `account_name` parameter when processing account management requests. An attacker authenticated as…
EPSS < 0.01 CVSS 9.4 CVE-2026-86325 CVE-2026-86326 Moxa FI CA FR
Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.0: 9.8, CVEs: CVE-2026-104286, Summary: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] and Improper Neutralization of NULL Byte or NULL Character [CWE-158] vulnerability may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests. This has been reported to be exploited in the wild, customers are urged to apply…
KEV ✓ EPSS 0.05 CVSS 9.8 CVE-2026-104286 Fortinet FI CA SE NL IT FR US
Serial Number: AV26-994 Date: October 2, 2026 As of October 2, 2026, GitLab is affected by a vulnerability in the following product: GitLab AI Gateway Prior to 19.2.4 Prior to 19.3.2 Prior to 19.4.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. GitLab AI Gateway Critical Patch Release: 19.2.4, 19.3.2, and 19.4.1 GitLab release notes | GitLab Docs
GitLab CA
Serial Number: AV26-993 Date: October 2, 2026 As of October 1, 2026, Hitachi is affected by vulnerabilities in the following product: Hitachi Coding Software Suite Prior to V4.0.0 or later The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Information Regarding Reported Vulnerabilities in Hitachi Coding Software Suite (HCSS) Security Information ID: hitachi-sec-2026-001 (PDF) Hitachi Vulnerability…
Hitachi CA
GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances. [...]
Serial number: AV26-992 Date: October 2, 2026 As of September 29, 2026, MikroTik is affected by vulnerabilities in the following product: RouterOS Prior to 7.24 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. MikroTik RouterOS - CVE-2026-84411
EPSS 0.01 CVSS 9.8 CVE-2026-84411 MikroTik telekomunikace CA IT US
Aggiornamenti di sicurezza Fortra sanano 8 vulnerabilità, di cui 3 con gravità "critica" e 3 con gravità "alta", in Core Privileged Access Manager (BoKS).
EPSS 0.01 CVE-2026-12627 CVE-2026-14316 CVE-2026-79896 CVE-2026-79898 CVE-2026-79899 CVE-2026-79901 Fortra IT
Serial number: AV26-991 Date: October 2, 2026 As of October 1, 2026, Johnson Controls is affected by vulnerabilities in the following products: Easy IO FG Prior to 2.0b52 Easy IO Neo Prior to 3.3b63 Prior to 3.3b25 EasyIO FS32 Prior to 3.0b63 Prior to 3.3b63 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Johnson Controls - Product Security Advisories
Serial number: AV26-990 Date: October 2, 2026 As of October 1, 2026, WatchGuard is affected by a vulnerability in the following product: Endpoint Security Prior to 8.00.26.0012 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CVE-2026-13043 — WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access WatchGuard Security Advisories
EPSS < 0.01 CVSS 9.3 CVE-2026-13043 WatchGuard CA IT FI
TP-Link ha rilasciato aggiornamenti di sicurezza che sanano 8 vulnerabilità, di cui 6 con gravità "alta", nei propri prodotti. Tali vulnerabilità, qualora sfruttate in determinate condizioni, potrebbero consentire a un utente malintenzionato di eludere i meccanismi di sicurezza, accedere a informazioni sensibili, eseguire codice arbitrario o compromettere la disponibilità del servizio sui sistemi interessati.
EPSS 0.01 CVE-2026-102294 CVE-2026-102369 CVE-2026-78578 CVE-2026-84682 CVE-2026-8618 CVE-2026-9032 TP-Link IT
Aggiornamenti di sicurezza Tenable sanano 9 vulnerabilità, di cui 1 con gravità "critica" e 4 con gravità "alta", nel noto vulnerability scanner Nessus.
EPSS < 0.01 CVE-2026-103946 CVE-2026-103947 CVE-2026-103948 CVE-2026-103950 CVE-2026-103951 Tenable IT
Dell has patched two maximum severity vulnerabilities in the Container Storage Modules (CSM) that connect Dell enterprise storage arrays to Kubernetes environments. [...]
CVE-2021-21551 * CVE-2026-22769 * CVE-2026-54472 * CVE-2026-61421 * CVE-2026-63688 * CVE-2026-63692 * CVE-2026-67269 * CVE-2026-67273 * Dell US
DESCRIERE Experții în securitate cibernetică au descoperit o vulnerabilitate critică, CVE-...
Fortinet RO
Aggiornamenti di sicurezza sanano diverse vulnerabilità presenti in Apache HTTP Server, di cui 3 con gravità "critica" e 13 con gravità "alta".
EPSS 0.01 CVE-2026-46729 CVE-2026-47360 CVE-2026-48005 CVE-2026-56153 CVE-2026-56154 CVE-2026-56449 CVE-2026-57941 CVE-2026-59685 CVE-2026-59797 CVE-2026-63045 CVE-2026-63292 CVE-2026-63686 CVE-2026-63718 CVE-2026-73636 CVE-2026-73637 CVE-2026-93546 Apache IT
Local Argument Injection vulnerability (CVE-2026-91784) has been found in cjbassi/gotop software.
EPSS < 0.01 CVE-2026-91784 gotop PL
Multiple vulnerabilities in the Repasat application Fri, 10/02/2026 - 09:52 Aviso Affected Resources Repasat application. Description INCIBE has coordinated the publication of 15 medium-severity vulnerabilities affecting the Repasat application, a business management software programme that enables all business operations to be consolidated onto a single platform. The vulnerabilities were discovered by David Padilla Alvarado. These vulnerabilities have been assigned the following codes, CVSS v4…
EPSS 0.02 CVE-2026-59668 CVE-2026-59669 CVE-2026-59670 CVE-2026-59671 CVE-2026-59672 CVE-2026-59673 CVE-2026-59674 CVE-2026-59675 CVE-2026-59676 CVE-2026-59677 CVE-2026-59678 CVE-2026-59679 CVE-2026-59680 CVE-2026-59681 CVE-2026-59682 CVE-2026-59683 REPASAT ES
Rilevato lo sfruttamento attivo in rete delle vulnerabilità CVE-2026-102489 e CVE-2026-102490 - già sanate dal vendor - relative a Zammad, soluzione open source di help desk, ticketing e customer support. Qualora le due vulnerabilità fossero sfruttate in sequenza nell'ambito di una catena di attacco, un attore malevolo potrebbe dapprima ottenere l'esecuzione di codice come utente "zammad" e successivamente elevare i propri privilegi fino a "root" sul sistema interessato.
KEV ✓ EPSS 0.22 CVE-2026-102489 CVE-2026-102490 Zammad IT US NL
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-90443, CVE-2026-90444, CVE-2026-90445, CVE-2026-90446, CVE-2026-90447, CVE-2026-90448, CVE-2026-90449, CVE-2026-90450, CVE-2026-90451, CVE-2026-90452, CVE-2026-90453, CVE-2026-90454, CVE-2026-90455, CVE-2026-90456, CVE-2026-90457, CVE-2026-101104, CVE-2026-96613, CVE-2026-64892, CVE-2026-15952, CVE-2026-15953 (+9 other associated CVEs), Summary: CISA released six Industrial Control…
CVSS 9.8 ABB Johnson Controls Monta Armatura LLC FI
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.4, CVEs: CVE-2026-103655, Summary: MISP contains a vulnerability in its two-factor authentication (TOTP) verification process that permits a valid one-time code to be accepted more than once within its time-based validity window. The issue exists in the user login flow where a TOTP code is verified as a second authentication factor. Because the system did not record whether a given TOTP period had…
EPSS < 0.01 CVSS 9.4 CVE-2026-103655 MISP FI
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.4, CVEs: CVE-2026-93495, CVE-2026-14157, CVE-2026-13313, Summary: CVE-2026-93495 (CVSS: 7.0): ASUS has released a BIOS update for the affected motherboard models listed below and strongly recommends updating to the latest version to ensure optimal protection. This update addresses a security vulnerability related to improper initialization in certain ASUS motherboards. If exploited, the issue could…
EPSS 0.01 CVSS 9.4 CVE-2026-13313 CVE-2026-14157 CVE-2026-93495 ASUS FI IT