Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
CISA added CVE-2026-67279 to the Known Exploited Vulnerabilities catalog. Affected product: MikroTik RouterOS. Remediation due date: 2026-09-28.
KEV ✓ EPSS 0.02 CVE-2026-67279 MikroTik US
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
IBM FR
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian LTS. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un déni de service.
De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service à distance et une atteinte à la confidentialité des données.
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
EPSS < 0.01 CVE-2026-72662 CVE-2026-72668 CVE-2026-78582 CVE-2026-82294 CVE-2026-82300 CVE-2026-94396 CVE-2026-94397 CVE-2026-94398 CVE-2026-94399 CVE-2026-94400 CVE-2026-94408 Elastic FR
Serial number: AV26-961Date: September 24, 2026 As of September 23, 2026, WebPros is affected by vulnerabilities in the following products: Plesk Versions 18.0.34 to 18.0.80.7 Version 18.0.81.0 Plesk extension "Plesk RESTful API" Versions 2.4.2 to 2.4.6 Plesk extension "Site Import" Prior to or equal to 1.12.1 WP Toolkit for cPanel Prior to or equal to 6.11.2-10794 cPanel/WHM Prior to 11.134.0.57 Prior to 11.136.0.41 Prior to 11.138.0.8 The Cyber Centre encourages users and administrators to…
EPSS 0.01 CVE-2026-68492 CVE-2026-87898 CVE-2026-87899 CVE-2026-87900 WebPros Plesk cPanel CA
A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security. [...]
CVE-2020-12641 * CVE-2020-35730 * CVE-2021-44026 * CVE-2023-5631 * CVE-2025-49113 * CVE-2025-68461 * CVE-2026-48842 * Roundcube US
Rilevate 3 vulnerabilità di sicurezza, di cui 2 con gravità "alta", in PaperCut NG/MF, software di gestione e monitoraggio della stampa per ambienti aziendali. Tali vulnerabilità, qualora sfruttate in particolari condizioni, potrebbero consentire ad un utente remoto malintenzionato di eseguire codice arbitrario sui sistemi interessati.
EPSS 0.01 CVE-2026-14780 CVE-2026-82077 PaperCut IT
24. September 2026 Beschreibung In der OAuth Komponente von F5 BIG-IP APM existiert eine kritische Schwachstelle, welche dass unauthentifizierte Ausführen von Schadcode aus der Ferne erlaubt. Betroffen sind Systeme, welche BIG-IP APM als Authorisierungsserver via OAuth-Funktionalität nutzen. Es liegen Informationen vor, dass diese Lücke bereits aktiv ausgenutzt wird, daher empfiehlt sich die Überprüfung der eigenen Instanzen auf etwaige Indicators of Compromise, welche ebenfalls im…
KEV ✓ EPSS 0.27 CVSS 9.8 CVE-2026-94127 F5 AT RO SE US HU FR CA IT
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to run system level commands or execute arbitrary code. The following versions of Eufy Omni C20, Omni X10 Pro are affected: Omni C20 <1.6.4 (CVE-2026-93289, CVE-2026-93290, CVE-2026-93291) Omni X10 Pro <1.6.4 (CVE-2026-93289) CVSS Vendor Equipment Vulnerabilities v3 9.4 Eufy Eufy Omni C20, Omni X10 Pro Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Use of Hard…
EPSS 0.01 CVSS 9.4 CVE-2026-93289 CVE-2026-93290 CVE-2026-93291 Eufy US
View CSAF Summary This advisory is revoked. Re-investigation confirmed the reported behavior is expected platform configuration and does not expose the protected attribute. The following versions of Siemens Mendix Runtime are affected: Siemens Mendix Runtime vers:all/* (CVE-2026-7891) CVSS Vendor Equipment Vulnerabilities v3 9.1 Siemens Siemens Mendix Runtime Insecure Inherited Permissions Background Critical Infrastructure Sectors: Critical Manufacturing Countries/Areas Deployed: Worldwide…
CVSS 9.1 CVE-2026-7891 Siemens výroba a průmysl US
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication controls, gain unauthorized access to sensitive data and privileged device functionality, modify device configuration, disrupt device operation. The following versions of Botslab G980H Dashcams are affected: G980H dash cam series 30010_QHG980HN5294SysFW+ (CVE-2026-84399, CVE-2026-82566, CVE-2026-85496, CVE-2026-77967, CVE-2026-88761, CVE-2026-82716, CVE-2026-84403, CVE-2026-75558,…
EPSS < 0.01 CVSS 8.8 CVE-2026-75558 CVE-2026-77967 CVE-2026-79959 CVE-2026-81630 CVE-2026-82566 CVE-2026-82585 CVE-2026-82708 CVE-2026-82716 CVE-2026-84399 CVE-2026-84403 CVE-2026-85496 CVE-2026-87118 CVE-2026-88761 CVE-2026-88956 Botslab doprava US
DESCRIERE Experții în securitate cibernetică au descoperit o vulnerabilitate critică, CVE-...
WordPress RO
Over the last few days, Google issued several different Chrome updates. On September 22, Google released a Stable Channel Update for Desktop. This is the most important one for desktop users. It brings Chrome to version 154.0.8037.57 for Linux and versions 154.0.8037.57/.58 for Windows and Mac. The update includes 108 security fixes including 11 rated Critical. It will roll out over the coming days and weeks. One day later, Google released Chrome 155 for Android, version 155.0.8059.16, to a…
EPSS 0.01 CVE-2026-95281 CVE-2026-95350 CVE-2026-95357 Google US
Apache ha rilasciato aggiornamenti di sicurezza per risolvere 15 vulnerabilità, di cui 4 con gravità "critica" e 9 con gravità "alta", in Apache Tomcat e Apache Tomcat Native. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di eludere i meccanismi di sicurezza, alterare il contenuto delle richieste HTTP e compromettere la disponibilità del servizio sui sistemi interessati.
EPSS 0.01 CVE-2026-75973 CVE-2026-76183 CVE-2026-77762 CVE-2026-77791 CVE-2026-78383 CVE-2026-78437 CVE-2026-79677 CVE-2026-86243 CVE-2026-86246 CVE-2026-86247 CVE-2026-86248 CVE-2026-86350 CVE-2026-87022 Apache IT
Rilasciati aggiornamenti di sicurezza che risolvono 7 vulnerabilità, di cui una con gravità “alta” e 2 con gravità “critica”, in GitLab Community Edition (CE) ed Enterprise Edition (EE). Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di accedere ad informazioni riservate o eseguire codice arbitrario sui sistemi interessati.
EPSS 0.01 CVE-2026-89078 CVE-2026-92470 CVE-2026-93577 GitLab IT
Aggiornamenti di sicurezza Zoho sanano 14 vulnerabilità, di cui 2 con gravità “critica” e 12 con gravità “alta”, che interessano i prodotti ManageEngine Applications Manager, Applications Manager Plugin, OpManager, OpManager Enterprise Edition, OpManager Nexus, OpManager Nexus Enterprise Edition, OpManager MSP, Firewall Analyzer e Network Configuration Manager Enterprise Edition.
EPSS 0.08 CVE-2026-14913 CVE-2026-15358 CVE-2026-19599 CVE-2026-75825 CVE-2026-76978 CVE-2026-76979 CVE-2026-76980 CVE-2026-84787 CVE-2026-84789 CVE-2026-86677 CVE-2026-86678 CVE-2026-86681 CVE-2026-86683 CVE-2026-86708 Zoho ManageEngine IT
Rilevata una vulnerabilità di sicurezza con gravità "alta" in WatchGuard AuthPoint Authentication Gateway, componente on-premise della piattaforma MFA AuthPoint che collega Active Directory/LDAP e gestisce l'autenticazione RADIUS. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione sui sistemi interessati.
EPSS < 0.01 CVE-2026-95676 WatchGuard IT
Adobe heeft 18 kritieke kwetsbaarheden verholpen in Adobe Campaign Classic. De kwetsbaarheden betreffen onder meer code- en OS-command-injectie, SQL-injectie, onvoldoende autorisatie, onvoldoende invoervalidatie en Server-Side Request Forgery (SSRF). Alle 18 kwetsbaarheden zijn als kritiek aangemerkt en tien kunnen zonder authenticatie op afstand worden misbruikt. Succesvol misbruik kan onder meer leiden tot het uitvoeren van willekeurige code, privilege-escalatie, het omzeilen van…
EPSS 0.03 CVE-2026-73369 CVE-2026-75699 CVE-2026-75703 CVE-2026-75721 CVE-2026-75723 CVE-2026-82004 CVE-2026-84412 CVE-2026-89275 Adobe NL
Classification: Important, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 7.5, CVEs: CVE-2026-77544, CVE-2026-77555, CVE-2026-77556, CVE-2026-77558, CVE-2026-95861, CVE-2026-95862, Summary: Ubiquiti has corrected six vulnerabilities affecting current UniFi gateway devices. An attacker with network access to an affected device can exploit the vulnerabilities to cause a denial-of-service condition and interrupt network connectivity. The affected product families include Dream…
EPSS 0.01 CVSS 7.5 CVE-2026-77544 CVE-2026-77555 CVE-2026-77556 CVE-2026-77558 CVE-2026-95861 CVE-2026-95862 Ubiquiti FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 9.9, CVEs: CVE-2026-34689, CVE-2026-48361, CVE-2026-75682, CVE-2026-75684, CVE-2026-75686, CVE-2026-75689, CVE-2026-75697, CVE-2026-75698, CVE-2026-83964, Summary: Adobe has corrected nine vulnerabilities in Adobe Connect and its Android mobile application. The most serious vulnerability is an SQL injection issue that can allow a low-privileged attacker to execute arbitrary code. Other vulnerabilities can…
EPSS 0.01 CVSS 9.9 CVE-2026-34689 CVE-2026-48361 CVE-2026-75682 CVE-2026-75684 CVE-2026-75686 CVE-2026-75689 CVE-2026-75697 CVE-2026-75698 CVE-2026-83964 Adobe FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 9.8, CVEs: CVE-2026-73581, CVE-2026-75973, CVE-2026-76183, CVE-2026-77756, CVE-2026-77762, CVE-2026-77791, CVE-2026-78383, CVE-2026-78437, CVE-2026-79677, CVE-2026-86248, CVE-2026-86350, CVE-2026-87022, Summary: Apache has disclosed multiple vulnerabilities affecting supported Apache Tomcat releases. The vulnerabilities include bypassing access restrictions on WebSocket endpoints, HTTP/2 request-header…
EPSS 0.01 CVSS 9.8 CVE-2026-73581 CVE-2026-75973 CVE-2026-76183 CVE-2026-77756 CVE-2026-77762 CVE-2026-77791 CVE-2026-78383 CVE-2026-78437 CVE-2026-79677 CVE-2026-86248 CVE-2026-86350 CVE-2026-87022 Apache FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 9.3, CVEs: CVE-2026-77987, CVE-2026-77912, CVE-2026-75101, Summary: GitHub has corrected three vulnerabilities in GitHub Enterprise Server. The most serious is a server-side request forgery vulnerability in the notebook viewer. An attacker could use response timing to extract instance secrets and ultimately execute code on the appliance. Exploitation requires no authentication when private mode is disabled and…
EPSS 0.01 CVSS 9.3 CVE-2026-75101 CVE-2026-77912 CVE-2026-77987 GitHub FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 9.8, CVEs: CVE-2026-95274, CVE-2026-95275, CVE-2026-95276, CVE-2026-95277, CVE-2026-95278, CVE-2026-95279, CVE-2026-95280, CVE-2026-95281, CVE-2026-95282, CVE-2026-95283, CVE-2026-95284, CVE-2026-95285, CVE-2026-95286, CVE-2026-95287, CVE-2026-95288, CVE-2026-95289, CVE-2026-95290, CVE-2026-95291, CVE-2026-95292, CVE-2026-95293 (+88 other associated CVEs), Summary: Chrome 154 fixes 108 vulnerabilities,…
CVSS 9.8 Google FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Functional, CVSSv4.0: 9.4, CVEs: CVE-2026-94571, CVE-2026-94572, Summary: Input-validation vulnerabilities in OpenStack Octavia allow an authenticated tenant who owns a load balancer to inject arbitrary directives into its generated HAProxy configuration. Successful exploitation can execute commands as root on the provider-managed amphora, disclose other tenants’ TLS private keys and certificates, expose the deployment heartbeat…
EPSS 0.01 CVSS 9.4 CVE-2026-94571 CVE-2026-94572 OpenStack FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-28324, CVE-2026-28325, Summary: SolarWinds Observability Self-Hosted contains two vulnerabilities that could allow unauthenticated remote code execution. CVE-2026-28324 results from insufficient integrity checks and affects installations using a non-default, insecure configuration. CVE-2026-28325 results from deserialization of untrusted data when the product uses a specific…
EPSS 0.02 CVSS 9.8 CVE-2026-28324 CVE-2026-28325 SolarWinds FI CA IT FR
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-87121, CVE-2026-91018, Summary: Two memory-safety vulnerabilities affect lwIP versions 2.0.1–2.2.1. CVE-2026-87121 is an out-of-bounds write in the MQTT client that could allow an unauthenticated network attacker to execute code on an affected device. CVE-2026-91018 is an adjacent-network double-free vulnerability that could cause denial of service, memory corruption or code execution…
EPSS 0.01 CVSS 9.8 CVE-2026-87121 CVE-2026-91018 lwIP FI
CISA added CVE-2026-71362 to the Known Exploited Vulnerabilities catalog. Affected product: Adobe Commerce and Magento. Remediation due date: 2026-09-27.
KEV ✓ EPSS 0.90 CVE-2026-71362 Adobe US
De multiples vulnérabilités ont été découvertes dans Zabbix Agent. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Zabbix FR
Une vulnérabilité a été découverte dans Microsoft Office. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.
EPSS < 0.01 CVE-2026-70125 Microsoft FR US
De multiples vulnérabilités ont été découvertes dans LibreNMS. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
LibreNMS FR
Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution (RCE) vulnerability in the VPN certificate-handling functionality of its Security Gateway product. [...]
KEV ✓ EPSS 0.54 CVE-2026-85102 Check Point US
Serial Number: AV26-960Date: September 23, 2026 As of September 23, 2026, Forcepoint is affected by a vulnerability in the following product: Forcepoint Security Engine (NGFW) Versions 7.1.0 to 7.1.13 Versions 7.3.0 to 7.3.1 Version 7.33 Version 7.4.0 to 7.4.1 Version 7.5.0 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Forcepoint Hub Forcepoint Help and Resource Center
Forcepoint CA
Serial number: AV26-959Date: September 23, 2026 As of September 21, 2026, Dell is affected by vulnerabilities in the following products: Dell Command Powershell Provider (DCPP) Prior to 2.10.2 Dell Command Monitor (DCM) Prior to 10.13.2 Dell Inventory Collector Client Prior to 15.0.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. DSA-2026-379: Security Update for Dell Command | PowerShell Provider …
Dell CA
Serial number: AV26-958Date: September 23, 2026 As of September 22, 2026, MikroTik is affected by a vulnerability in the following product: RouterOS Prior to 7.25beta5 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. 7.25beta [development] is released!
MikroTik CA
Serial number: AV26-957Date: September 23, 2026 As of September 22, 2026, NVIDIA is affected by vulnerabilities in the following products: Infrastructure Controller Versions 0 to 1.9 NeMo Speech Versions 0.0 to 2.9 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Bulletin: NVIDIA Infrastructure Controller - September 2026 Security Bulletin: NVIDIA NeMo Speech - September 2026 NVIDIA Product…
NVIDIA CA
Serial Number: AV26-956Date: September 23, 2026 As of September 22, 2026, GitHub is affected by vulnerabilities in the following product: Enterprise Server 3.17.0 Prior to 3.17.21 3.18.0 Prior to 3.18.15 3.19.0 Prior to 3.19.12 3.20.0 Prior to 3.20.8 3.21.0 Prior to 3.21.6 3.22.0 Prior to 3.22.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Release notes - GitHub Enterprise Server 3.17 Docs Release…
GitHub CA
Serial number: AV26-955Date: September 23, 2026 As of September 22, 2026, Google published a security advisory to address vulnerabilities in the following product: Stable Channel Chrome for Desktop Versions prior to 154.0.8037.57/.58 (Windows/Mac), and 54.0.8037.57 (Linux) The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Google Chrome Security Advisory
Google CA
Serial number: AV26-954Date: September 23, 2026 As of September 22, 2026, Ubiquiti Inc is affected by vulnerabilities in the following products: Cloud Gateways Prior to 5.1.31 Dream Machines Prior to 5.1.31 Dream Routers Prior to 5.1.31 Dream Wall Prior to 5.1.31 Enterprise Firewalls Prior to 5.1.31 Express Prior to 4.0.21 Express 7 Prior to 5.1.31 UniFi Gateways Prior to 5.1.26 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates…
Ubiquiti CA
Serial number: AV26-953Date: September 23, 2026 As of September 22, 2026, Adobe is affected by vulnerabilities in the following products: AEM 6.5 Forms JEE Prior to or equal to 6.5.25 AEM 6.5 LTS Forms JEE Prior to or equal to 6.5 LTS SP2 Adobe Bridge Prior to or equal to 15.1.7 (LTS) Prior to or equal to 16.0.6 Adobe Connect Prior to or equal to 12.11 Adobe Connect Android Mobile App Prior to or equal to 4.4 C2PA Tool Prior to or equal to c2patool-v0.26.70 Content Credentials Rust SDK Prior to…
Adobe CA
Serial number: AV26-951Date: September 23, 2026 As of September 22, 2026, Hewlett Packard Enterprise (HPE) is affected by vulnerabilities in the following products: Analytics and Location Engine (ALE) Prior to or equal to 5.0.0.0 HPE Telco Service Orchestrator Prior to or equal to 5.6.0 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HPESBNW05137 rev.1 - Multiple Vulnerabilities in HPE Networking…
Executive Summary CISA added three actively exploited Linux kernel vulnerabilities: CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964 to its KEV Catalog on September 18, 2026, triggering a 3-day remediation deadline that passed on September 21. Under CISA BOD 26-04, a 3-day window applies to CVE-2025-39682 across all assets, and for the other two, the deadline is 3 days for publicly exposed assets and 14 days for internal assets. With the September 21 deadline now passed, affected systems…
KEV ✓ EPSS 0.03 CVSS 9.8 CVE-2025-39682 CVE-2025-39964 CVE-2026-53266 Linux Red Hat US FI
IBM heeft 12 kwetsbaarheden verholpen in IBM MQ, IBM MQ Appliance en Langflow OSS. De kwetsbaarheden kunnen leiden tot het uitvoeren van willekeurige code of commando's. Vier kwetsbaarheden zijn als kritiek aangemerkt en kunnen zonder authenticatie en gebruikersinteractie op afstand worden misbruikt. De kwetsbaarheid met kenmerk CVE-2026-10747 heeft een CVSS-score van 10,0 en betreft een heap-based buffer overflow in IBM MQ. De kwetsbaarheden met kenmerk CVE-2026-79724, CVE-2026-85025 en CVE…
EPSS 0.01 CVE-2026-10747 CVE-2026-79724 CVE-2026-81204 CVE-2026-85025 IBM NL
Disponibili Proof of Concept (PoC) per lo sfruttamento di 6 vulnerabilità, di cui 4 con gravità “alta”, in Notepad++. Tali vulnerabilità potrebbero consentire ad un attaccante di eseguire codice arbitrario, eludere i meccanismi di verifica dell’integrità dei componenti utilizzati dall’applicazione e compromettere il corretto funzionamento dei sistemi interessati.
EPSS < 0.01 CVE-2026-77605 CVE-2026-85279 CVE-2026-85288 CVE-2026-85995 CVE-2026-86054 CVE-2026-86056 Notepad++ IT
Adobe heeft 9 kwetsbaarheden verholpen in Adobe Connect en de Adobe Connect Android Mobile App. De kwetsbaarheden zijn verholpen in Adobe Connect 12.12 en Adobe Connect Android Mobile App 4.5. De kwetsbaarheden betreffen verschillende beveiligingsproblemen in Adobe Connect, waaronder SQL-injectie, Cross-Site Scripting (XSS), onvoldoende invoervalidatie, path traversal en onvoldoende certificaatvalidatie. De kwetsbaarheden hebben CVSS-scores variërend van middel tot kritiek. Van de in totaal 9…
EPSS 0.01 CVE-2026-34689 CVE-2026-75682 CVE-2026-75684 CVE-2026-75686 CVE-2026-75689 CVE-2026-75697 CVE-2026-75698 Adobe NL
Adobe heeft 6 kwetsbaarheden verholpen in Adobe Experience Manager (AEM) Forms op Java Enterprise Edition (JEE), waaronder AEM 6.5 Forms en AEM 6.5 LTS Forms. De kwetsbaarheden betreffen verschillende beveiligingsproblemen, waaronder onjuiste autorisatie, onvoldoende invoervalidatie, Server-Side Request Forgery (SSRF), Cross-Site Scripting (XSS) en Cross-Site Request Forgery (CSRF). Alle zes kwetsbaarheden zijn als kritiek aangemerkt en twee kunnen zonder authenticatie op afstand worden…
EPSS 0.01 CVE-2026-75745 Adobe NL
Disponibile Proof of Concept (PoC) per lo sfruttamento di una vulnerabilità presente nei dispositivi D-Link DAP-1360 non più supportati. Tale vulnerabilità potrebbe consentire ad un utente malintenzionato remoto non autenticato di eseguire codice arbitrario sui sistemi interessati.
EPSS 0.02 CVE-2026-95675 D-Link IT
Rilevate due nuove vulnerabilità in Moodle, nota piattaforma open source tipicamente utilizzata per l'erogazione di corsi in modalità e-learning. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato l'accesso ad informazioni sensibili e eludere le funzionalità di sicurezza sui sistemi interessati.
Authorization bypass through User-Controlled key vulnerability (CVE-2026-92419) has been found in WEBCON BPS software.
EPSS < 0.01 CVE-2026-92419 WEBCON PL
Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 108 nuove vulnerabilità di sicurezza, di cui 11 con gravità “critica” e 25 con gravità “alta”.
Google IT
GitHub ha rilasciato aggiornamenti di sicurezza per risolvere 3 vulnerabilità, di cui 1 con gravità "critica" e 1 con gravità "alta", in GitHub Enterprise Server. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di eseguire codice arbitrario, eludere i meccanismi di sicurezza e accedere a informazioni sensibili sui sistemi interessati.
EPSS 0.01 CVE-2026-77912 CVE-2026-77987 GitHub IT
Arista Networks has released security patches for a zero-day flaw that is being actively exploited and affects VeloCloud Orchestrator (VCO) On-Prem deployments. [...]
CVE-2026-16812 * CVE-2026-7473 * CVE-2026-93952 * Arista Networks US
Adobe ha rilasciato aggiornamenti di sicurezza per risolvere molteplici vulnerabilità, di cui 9 con gravità "critica" e 17 con gravità "alta", nei prodotti InDesign, Content Credentials Rust SDK, C2PA Tool, Bridge, Connect, Experience Manager (AEM) Forms, Substance 3D Modeler, Premiere e Premiere Pro.
EPSS 0.01 a dalších 9 CVE-2026-75682 CVE-2026-75684 CVE-2026-75686 CVE-2026-75689 CVE-2026-75697 CVE-2026-75698 CVE-2026-75743 CVE-2026-75744 CVE-2026-75745 CVE-2026-79906 CVE-2026-81995 CVE-2026-81998 CVE-2026-81999 CVE-2026-82000 CVE-2026-83962 CVE-2026-83963 CVE-2026-84395 Adobe IT
Rilevate tre nuove vulnerabilità, di cui una con gravità "critica" e due con gravità "alta", in Erlang/OTP, piattaforma open source basata sul linguaggio Erlang e sul relativo set di librerie OTP, utilizzata per lo sviluppo di sistemi distribuiti ad alta disponibilità. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione, l'accesso ad informazioni sensibili e compromettere la disponibilità
EPSS < 0.01 CVE-2026-65634 CVE-2026-68956 CVE-2026-89422 Erlang/OTP IT
Aggiornamenti di sicurezza Zoho sanano 2 vulnerabilità in ManageEngine ADSelfService Plus, soluzione per la gestione sicura degli account in ambienti Active Directory. Tali vulnerabilità potrebbero consentire a un utente malintenzionato remoto di eseguire codice arbitrario o di eludere i meccanismi di autenticazione delle API REST sui sistemi interessati.
EPSS 0.05 CVE-2026-74849 CVE-2026-75791 Zoho ManageEngine IT
SolarWinds heeft kwetsbaarheden verholpen in SolarWinds Observability Self-Hosted. De kwetsbaarheden maken ongeauthenticeerde remote code execution mogelijk. Eén kwetsbaarheid ontstaat door deserialisatie van onbetrouwbare data tijdens het gebruik van een specifieke communicatiemodus binnen de software. De andere kwetsbaarheid wordt veroorzaakt door onvoldoende integriteitscontroles, met name bij installaties die afwijken van de standaardconfiguraties en niet-beveiligde instellingen gebruiken.…
SolarWinds NL
Disponibili Proof of Concept (PoC) per lo sfruttamento di tre vulnerabilità, già sanate dal vendor, che interessano il prodotto WordPress Core.
KEV ✓ EPSS 0.96 CVE-2026-87902 CVE-2026-93485 WordPress IT
A Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézet riasztást ad ki a Check Point Security Management Servert érintő CVE-2026-93616 azonosítójú, aktívan kihasznált kritikus sérülékenység kapcsán. A CVSS 9,8-as, előzetes hitelesítés nélkül kihasználható sérülékenység a Check Point Security Management webszolgáltatásában. A hiba directory/path traversal és fájlfeltöltési problémán alapul, amelynek kihasználásával a támadó tetszőleges útvonalról scriptet futtathat, illetve tetszőleges…
KEV ✓ EPSS 0.92 CVSS 9.8 CVE-2026-93616 Check Point HU FR IT US