Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
Disponibile una Proof of Concept (PoC) per lo sfruttamento della CVE-2026-94488 - già sanata dal vendor - presente in Telegram Desktop, client desktop dell'omonima piattaforma di messaggistica. Tale vulnerabilità potrebbe consentire a un utente malintenzionato remoto di eludere i meccanismi di sicurezza sui sistemi interessati.
EPSS < 0.01 CVE-2026-94488 Telegram IT
Risolte 3 vulnerabilità con gravità “alta” nel prodotto ntopng, utilizzato per l'analisi e il monitoraggio del traffico di rete. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di accedere ad informazioni sensibili, eludere le funzionalità di sicurezza, eseguire codice arbitrario ed effettuare modifiche non autorizzate sui sistemi interessati.
EPSS 0.01 CVE-2026-82412 CVE-2026-83621 CVE-2026-84990 ntopng ntop IT
Direct references to unsafe objects (IDOR) in Tankuam Places by Kompini Tue, 09/22/2026 - 12:21 Aviso Affected Resources Tankuam Places, versions published before 25 November 2025. Description INCIBE has coordinated the publication of a critical-severity vulnerability affecting Tankuam Places by Kompini, a software programme for managing municipal facilities. The vulnerability was discovered by Xavi Márquez González.This vulnerability has been assigned the following code, CVSS v4.0 base score,…
EPSS < 0.01 CVSS 9.3 CVE-2026-93556 Kompini veřejná správa ES
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco ThousandEyes Virtual Appliance. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-20350.
EPSS < 0.01 CVSS 7.2 CVE-2026-20350 Cisco US
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-94301, Summary: A previously released fix for a critical Apache MINA deserialization vulnerability was not correctly backported to the 2.0.x and 2.1.x branches. Versions previously considered fixed therefore remain vulnerable to an allow-list bypass when processing Java serialized objects. Successful exploitation can potentially result in remote code execution in applications using the…
EPSS < 0.01 CVSS 9.8 CVE-2026-94301 Apache FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.5, CVEs: CVE-2026-90997, CVE-2026-79651, CVE-2026-74909, CVE-2026-19607, CVE-2026-17526, CVE-2026-18212, Summary: Keycloak 26.7.4 addresses multiple security vulnerabilities affecting authentication and authorization functionality. The vulnerabilities include privilege escalation allowing a user with impersonation privileges to impersonate a realm administrator, unauthenticated denial-of-service…
EPSS 0.01 CVSS 7.5 CVE-2026-17526 CVE-2026-18212 CVE-2026-19607 CVE-2026-74909 CVE-2026-79651 CVE-2026-90997 Keycloak FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 8.7, CVEs: CVE-2026-94277, CVE-2026-94372, CVE-2026-94373, CVE-2026-94374, CVE-2026-94379, CVE-2026-94381, CVE-2026-94383, CVE-2026-94393, CVE-2026-94394, CVE-2026-94401, CVE-2026-94404, Summary: MISP has released version 2.5.47 following an extensive security review. More than 30 security findings were reviewed, with 27 confirmed vulnerabilities fixed and retested. The issues include remote code execution…
EPSS 0.01 CVSS 8.7 CVE-2026-94277 CVE-2026-94372 CVE-2026-94373 CVE-2026-94374 CVE-2026-94379 CVE-2026-94381 CVE-2026-94383 CVE-2026-94393 CVE-2026-94394 CVE-2026-94401 CVE-2026-94404 MISP FI
Une vulnérabilité a été découverte dans SolarWinds Access Rights Manager. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.
EPSS 0.01 CVE-2026-28326 SolarWinds FR CA IT
De multiples vulnérabilités ont été découvertes dans Moodle. Elles permettent à un attaquant de provoquer une injection SQL (SQLi) et un contournement de la politique de sécurité.
Moodle FR
Serial number: AV26-503Date: May 25, 2026Updated: September 21, 2026 On May 24, 2026, Roundcube published security advisories to address vulnerabilities in the following product: Roundcube Webmail – versions prior to 1.6.16 Roundcube Webmail – versions prior to 1.7.1 Update 1 Open-source reporting indicates that CVE-2026-48842 is being exploited in the wild. The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates. Roundcube Webmail 1…
EPSS 0.02 CVE-2026-48842 Roundcube CA FR
Serial number: AV26-603Date: June 16, 2026Updated: September 21, 2026 On June 16, 2026, Zyxel published a security advisory to address vulnerabilities in the following products: GS1900 series switches – multiple versions and models Update 1 On September 21, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-7273 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply the…
KEV ✓ EPSS 0.03 CVE-2026-7273 Zyxel CA US IT
Serial number: AV26-513Date: May 27, 2026Updated: September 21, 2026 On May 27, 2026, Veeam published security advisories to address vulnerabilities in the following products: Veeam Backup & Replication – 13 versions prior to 13.0.2.29 Veeam ONE – versions prior to 13.0.2.6723 Veeam Service Provider Console – 9.2 versions prior to 9.2.1.33875 Update 1 Open-source reporting indicates that CVE-2026-32996 is being exploited in the wild. The Cyber Centre encourages users and administrators to…
EPSS < 0.01 CVE-2026-32996 Veeam CA
Serial number: AV26-946Date: September 21, 2026 As of September 21, 2026, MISP is affected by vulnerabilities in the following product: MISP Prior to 2.5.47 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Strip the client id from module-result event reports Read only api keys can regain full role powers Refuse a MISP export upload whose content is a path or URL
MISP CA
Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell' that affects the platform's Core component. [...]
WordPress US
Serial number: AV26-945Date: September 21, 2026 As of September 17, 2026, MongoDB is affected by vulnerabilities in the following products: Mongoid Multiple versions C Driver Multiple versions The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Security Related: Common Vulnerabilities and Exposures (CVEs)
MongoDB CA
Serial number: AV26-944Date: September 21, 2026 As of September 18, 2026, Exim is affected by vulnerabilities in the following product: Exim Prior to 4.100.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Exim Security Release - 4.100.1 Exim Internet Mailer
Exim CA
Serial number: AV26-943Date: September 21, 2026 As of September 18, 2026, IBM is affected by vulnerabilities in the following products: CICS TX Advanced Version 10.1 Guardium Data Protection Version 12.2 IBM MQ Multiple versions IBM MQ for HPE NonStop Versions 8.1.0 to 8.1.0.40 Sterling File Gateway Prior to or equal to 6.2.0.6_1, 6.2.1.0 to 6.2.1.2 and 6.2.2.0 to 6.2.2.1 WebSphere Application Server Versions 8.5 and 9.0 IBM i Versions 7.3, 7.4, 7.5 and 7.6 spectrum-lsf IBM Platform RTM…
IBM CA
[VDE-2026-089] The Lenze VPN client is vulnerable to a Remote Code Execution. The vulnerability would allow an attacker to perform a remote code execution on the computer running the client with elevated privileges.
EPSS 0.01 CVSS 9.6 CVE-2026-75925 Lenze IXON výroba a průmysl energetika vodárenství DE US
Aggiornamenti di sicurezza di Zohocorp sanano due vulnerabilità, con gravità alta, presenti nel prodotto ManageEngine DataSecurity Plus. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di eludere i controlli di autenticazione e di compromettere l'integrità dei dati sui sistemi interessati.
EPSS 0.03 CVE-2026-18911 CVE-2026-18912 Zoho IT
Rilevate diverse vulnerabilità di sicurezza, di cui due con gravità “alta” e due con gravità “critica” in Synology DiskStation Manager (DSM). Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di scrivere/leggere file arbitrari sul filesystem e compromettere la disponibilità dei sistemi interessati.
EPSS 0.01 CVE-2026-13639 CVE-2026-13673 CVE-2026-13684 CVE-2026-6205 Synology IT
Disponibili Proof of Concept (PoC) per lo sfruttamento delle CVE-2026-55556 e CVE-2026-61548 - già sanate dal vendor- presenti in rsyslog, software open source per la raccolta e l'elaborazione dei log. Tali vulnerabilità potrebbero consentire a un utente malintenzionato remoto di eseguire codice arbitrario e di compromettere la disponibilità del servizio sui sistemi interessati.
EPSS 0.01 CVE-2026-55556 CVE-2026-61548 rsyslog IT
Aggiornamenti di sicurezza sanano nuove vulnerabilità, di cui 3 con gravità "critica" e 6 con gravità "alta", in MongoDB C Driver e Mongoid. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di eludere i meccanismi di sicurezza, accedere a informazioni sensibili, alterare o eliminare dati e compromettere la disponibilità del servizio sui sistemi interessati.
EPSS 0.01 CVE-2026-93393 CVE-2026-93758 CVE-2026-93759 CVE-2026-93760 CVE-2026-93761 CVE-2026-93762 CVE-2026-93763 CVE-2026-93764 CVE-2026-93765 MongoDB IT
Rilevate due vulnerabilità con gravità “alta” nel noto server di posta Exim. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato l'accesso ad informazioni sensibili, la modifica non autorizzata di dati o codice e compromettere la disponibilità sul sistema interessato.
EPSS < 0.01 CVE-2026-94054 CVE-2026-94056 Exim IT
Cross-Site Scripting (XSS) en la plataforma de chatbots con IA de 1millionbot Mon, 09/21/2026 - 10:56 Aviso Affected Resources Plataforma de chatbot con IA (SaaS) de 1millionbot. Description INCIBE has coordinated the disclosure of a low-severity vulnerability affecting 1millionbot’s AI Chatbot Platform (SaaS), a technology solution that enables the creation and deployment of conversational virtual assistants and autonomous agents for businesses and public administrations. The vulnerability was…
EPSS 0.01 CVSS 5.1 CVE-2026-91921 1millionbot ES
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.5, CVEs: CVE-2026-94054, CVE-2026-94055, CVE-2026-94056, CVE-2026-94057, Summary: Multiple security vulnerabilities have been disclosed in Exim affecting Proxy Protocol processing, TLS handling and SMTP message processing. The vulnerabilities are addressed in Exim 4.100.1. The most significant issue, CVE-2026-94054, is an out-of-bounds write that can be triggered over the network without authentication…
EPSS < 0.01 CVSS 7.5 CVE-2026-94054 CVE-2026-94055 CVE-2026-94056 CVE-2026-94057 Exim FI
Classification: Severe, Solution: Temporary Fix, Exploit Maturity: Functional, CVSSv4.0: 9.4, CVEs: CVE-2026-93958, CVE-2026-94036, Summary: Security vulnerabilities affecting multiple D-Link router models can result in administrative compromise or command execution, and public exploit material is available. CVE-2026-93958 affects the D-Link R95 and allows OS command injection through the DHMAPI interface. The attack can be performed remotely and can result in execution of arbitrary commands on…
EPSS 0.03 CVSS 9.4 CVE-2026-93958 CVE-2026-94036 D-Link FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-90817, Summary: A critical remote code execution vulnerability has been disclosed in REDCap. CVE-2026-90817 affects survey passthrough routing and Data Import processing and can allow an unauthenticated attacker to execute arbitrary code on the REDCap server. Exploitation requires knowledge of a valid public survey hash. An attacker with such a hash can manipulate HTTP requests to reach…
EPSS 0.04 CVSS 9.8 CVE-2026-90817 REDCap FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.4, CVEs: CVE-2026-94083, CVE-2026-94084, Summary: The Open Information Security Foundation (OISF) has released Suricata 8.0.7 to address a large number of security vulnerabilities. The release includes vulnerabilities that OISF rates Critical and is described by OISF as the Suricata release with the highest number of vulnerability reports to date. Two newly assigned vulnerabilities, CVE-2026-94083 and CVE…
EPSS 0.01 CVSS 9.4 CVE-2026-94083 CVE-2026-94084 OISF FI
De multiples vulnérabilités ont été découvertes dans Synology DSM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
EPSS 0.01 CVSS 9.8 CVE-2026-13623 CVE-2026-13635 CVE-2026-13639 CVE-2026-13666 CVE-2026-13673 CVE-2026-13683 CVE-2026-13684 CVE-2026-6205 Synology FR FI
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer une élévation de privilèges et un problème de sécurité non spécifié par l'éditeur.
Microsoft FR
De multiples vulnérabilités ont été découvertes dans les produits Mattermost. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Mattermost FR
Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode. OpenAI has patched both. [...]
OpenAI US
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9, CVEs: CVE-2026-61781, CVE-2026-61817, CVE-2026-61818, CVE-2026-61819, CVE-2026-61820, CVE-2026-61821, CVE-2026-61822, Summary: Multiple security vulnerabilities have been disclosed in pg_partman, a PostgreSQL extension used to create and automatically maintain partitioned database tables. CVE-2026-61781 9.9 SQL injection and privilege escalation through partition configuration, potentially leading to…
EPSS 0.01 CVSS 9.9 CVE-2026-61781 CVE-2026-61817 CVE-2026-61818 CVE-2026-61819 CVE-2026-61820 CVE-2026-61821 CVE-2026-61822 PostgreSQL pg_partman FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9, CVEs: CVE-2026-84031, CVE-2026-82340, CVE-2026-84436, CVE-2026-84862, CVE-2026-81937, CVE-2026-84073, CVE-2026-84082, CVE-2026-81657, CVE-2026-81626, CVE-2026-81656, CVE-2026-84034, CVE-2026-84064, CVE-2026-84078, CVE-2026-81933, CVE-2026-84075, CVE-2026-80441, CVE-2026-80442, CVE-2026-84071, CVE-2026-81669, CVE-2026-81623, Summary: IBM has released a security update addressing multiple vulnerabilities…
EPSS 0.01 CVSS 9.9 a dalších 3 CVE-2026-81626 CVE-2026-81656 CVE-2026-81657 CVE-2026-81669 CVE-2026-81933 CVE-2026-81937 CVE-2026-82340 CVE-2026-84031 CVE-2026-84034 CVE-2026-84064 CVE-2026-84071 CVE-2026-84073 CVE-2026-84075 CVE-2026-84078 CVE-2026-84082 CVE-2026-84436 CVE-2026-84862 IBM FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.3, CVEs: CVE-2026-75885, Summary: A high-severity vulnerability has been disclosed in the web console of Red Hat OpenShift Container Platform, an enterprise Kubernetes platform used to deploy and manage containerized applications.
EPSS 0.01 CVSS 9.3 CVE-2026-75885 Red Hat FI
Classification: Critical, Solution: Unavailable, Exploit Maturity: Functional, CVSSv3.1: 10.0, CVEs: CVE-2026-93738, CVE-2026-93739, CVE-2026-93740, CVE-2026-93741, CVE-2026-93742, Summary: Multiple critical vulnerabilities have been disclosed in the Totolink A3002MU, an AC1200 wireless router providing Wi-Fi, routing and access-point functionality. The vulnerabilities affect several router management functions and include remotely triggerable buffer overflows and command injection. The attacks…
EPSS 0.02 CVSS 10.0 CVE-2026-93738 CVE-2026-93739 CVE-2026-93740 CVE-2026-93741 CVE-2026-93742 Totolink FI
A joint law enforcement advisory warns that the North Korean hacking group WaterPlum compromised at least 30,000 devices worldwide from December 2025 through July 2026 and transferred more than $10.7 million in stolen cryptocurrency to North Korea. [...]
US
Classification: Severe, Solution: Official Fix, Exploit Maturity: Functional, CVSSv3.1: 8.8, CVEs: CVE-2026-80844, CVE-2026-81000, CVE-2026-68121, CVE-2026-74469, Summary: A coordinated disclosure has made public four Linux kernel vulnerabilities capable of local privilege escalation to root: DirtyAH6 (CVE-2026-80844), TUNderflow (CVE-2026-81000), PPPoEject (CVE-2026-68121) and DiagSpill (CVE-2026-74469). Public proof-of-concept exploits are available. The first three generally require…
EPSS 0.01 CVSS 8.8 CVE-2026-68121 CVE-2026-74469 CVE-2026-80844 CVE-2026-81000 Linux FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 8.8, CVEs: CVE-2026-15579, Summary: Moxa has disclosed an out-of-bounds write vulnerability in the Web login functionality of TN-4500B Series Ethernet switches. The vulnerability can be exploited remotely without authentication by supplying an overly long username, potentially causing a buffer overflow and denial of service. Moxa has released firmware 2.1, which addresses the vulnerability. Affected…
EPSS 0.01 CVSS 8.8 CVE-2026-15579 Moxa FI CA FR
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-93203, CVE-2026-93201, CVE-2026-93196, CVE-2026-93192, CVE-2026-93190, CVE-2026-93189, CVE-2026-93178, CVE-2026-93177, CVE-2026-93176, CVE-2026-93175, CVE-2026-93170, CVE-2026-93165, CVE-2026-93154, CVE-2026-93151, CVE-2026-93148, CVE-2026-93147, CVE-2026-93144, CVE-2026-93138, CVE-2026-93137, CVE-2026-93127 (+146 other associated CVEs), Summary: The Linux kernel project has disclosed a…
CVSS 9.8 Linux FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-5516, CVE-2026-10027, CVE-2026-10575, CVE-2026-10744, CVE-2026-10747, CVE-2026-10751, CVE-2026-10853, CVE-2026-10858, CVE-2026-11381, CVE-2026-11375, CVE-2026-11378, CVE-2026-11716, CVE-2026-11729, CVE-2026-11725, CVE-2026-11726, CVE-2026-11727, CVE-2026-11728, Summary: IBM has issued security updates for IBM MQ addressing multiple vulnerabilities, including CVE-2026-10747, a CVSS 10.0…
EPSS 0.01 CVSS 10.0 CVE-2026-10027 CVE-2026-10575 CVE-2026-10744 CVE-2026-10747 CVE-2026-10751 CVE-2026-10853 CVE-2026-10858 CVE-2026-11375 CVE-2026-11378 CVE-2026-11381 CVE-2026-11716 CVE-2026-11725 CVE-2026-11726 CVE-2026-11727 CVE-2026-11728 CVE-2026-11729 CVE-2026-5516 IBM FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-62874, CVE-2026-68791, CVE-2026-69399, CVE-2026-70009, CVE-2026-69843, CVE-2026-69865, CVE-2026-70200, CVE-2026-83944, CVE-2026-77903, CVE-2026-78501, CVE-2026-83946, CVE-2026-85878, CVE-2026-85885, CVE-2026-85887, CVE-2026-85889, CVE-2026-85917, CVE-2026-87701, CVE-2026-55946, Summary: Microsoft has addressed multiple vulnerabilities affecting Azure, Microsoft Fabric, Azure AI Foundry,…
EPSS 0.01 CVSS 10.0 a dalších 1 CVE-2026-62874 CVE-2026-68791 CVE-2026-69399 CVE-2026-69843 CVE-2026-69865 CVE-2026-70009 CVE-2026-70200 CVE-2026-77903 CVE-2026-78501 CVE-2026-83944 CVE-2026-83946 CVE-2026-85878 CVE-2026-85885 CVE-2026-85887 CVE-2026-85889 CVE-2026-85917 CVE-2026-87701 Microsoft FI
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6, CVEs: CVE-2026-93374, CVE-2026-93372, CVE-2026-93375, CVE-2026-93382, CVE-2026-93387, CVE-2026-93373, CVE-2026-93381, CVE-2026-93379, CVE-2026-93377, CVE-2026-93380, CVE-2026-93384, CVE-2026-93383, CVE-2026-93376, CVE-2026-93378, CVE-2026-93385, CVE-2026-93386, Summary: Google released Chrome 153.0.8010.52/.53 for Windows/Mac and 153.0.8010.52 for Linux on 17 September. The update contains 16 security…
EPSS < 0.01 CVSS 9.6 CVE-2026-93372 CVE-2026-93373 CVE-2026-93374 CVE-2026-93375 CVE-2026-93376 CVE-2026-93377 CVE-2026-93378 CVE-2026-93379 CVE-2026-93380 CVE-2026-93381 CVE-2026-93382 CVE-2026-93383 CVE-2026-93384 CVE-2026-93385 CVE-2026-93386 CVE-2026-93387 Google FI FR
Serial number: AV26-942Date: September 18, 2026 As of September 18, 2026, ABB published a security advisory to address vulnerabilities in the following product: Freelance Controller Multiple versions and models The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Freelance SECURITY - Missing Length Check CVE ID: CVE-2023-5778 ABB Cyber security alerts and notifications
EPSS < 0.01 CVE-2023-5778 ABB CA
Serial number: AV26-940Date: September 18, 2026 As of September 9, 2026, Arista Networks is affected by vulnerabilities in the following product: EOS Multiple versions and platforms The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Advisory 0174 Arista Networks Advisories & Notices
Serial number: AV26-939Date: September 18, 2026 As of September 17, 2026, Google is affected by vulnerabilities in the following product: Chrome Prior to 153.0.8010.53 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Stable Channel Update for Desktop
Google CA
Serial number: AV26-937Date: September 18, 2026 As of September 4, 2026, Advantech is affected by vulnerabilities in the following products: EKI-1242EIMS Prior to or equal to V2.00.01 EKI-1242IEIMS Prior to or equal to V2.00.01 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Vulnerabilities Identified in EKI-1242EIMS/EKI-1242IEIMS (PDF) Advantech Security Advisories
Advantech CA
Rilevato PoC pubblico per la la vulnerabilità identificata tramite la CVE-2026-81934 in Redis, sistema per l'archiviazione e la gestione di dati in memoria.
EPSS < 0.01 CVE-2026-81934 Redis IT
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-88097 Microsoft US
Serial number: AV26-936Date: September 18, 2026 As of September 17, 2026, Grafana is affected by vulnerabilities in the following product: Grafana OSS Version 12.3.0 to 12.4.10 Version 13.0.0 to 13.08 Version 13.1.0 to 13.1.5 Version 13.2.0 to 13.2.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Geomap MapLibre XSS Grafana Security Advisories
Grafana CA
CONTEXT La data de 16 septembrie 2026, Cisco a publicat informații privind o vulnerabilitate criti...
Cisco RO
CONTEXT La nivelul Directoratului Național de Securitate Cibernetică (DNSC) au fost observate ten...
Zimbra RO
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-39682 Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management…
KEV ✓ EPSS 0.03 CVE-2025-39682 Linux veřejná správa US
Check Point Software has released security updates to address a critical vulnerability that can let attackers execute code with root privileges on management systems. [...]
CVE-2026-16232 * CVE-2026-50751 * CVE-2026-85102 * CVE-2026-85103 * CVE-2026-91843 * Check Point US
Risolte molteplici vulnerabilità di cui 3 con gravità ”alta” in Grafana, nota applicazione web per la visualizzazione e l’analisi interattiva di dati. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di elevare i propri privilegi e/o di eseguire codice arbitrario remoto sui sistemi interessati
EPSS 0.01 CVE-2026-15815 CVE-2026-76154 CVE-2026-79656 Grafana IT
Check Point heeft een kwetsbaarheid verholpen in Check Point's Security Management and Log Servers. De kwetsbaarheid betreft een stack overflow die optreedt tijdens het ongeauthenticeerde inlogproces. Een aanvaller kan deze kwetsbaarheid op afstand misbruiken om willekeurige code uit te voeren met rootrechten. Hierdoor kan de aanvaller authenticatie omzeilen en volledige controle over het systeem verkrijgen. Voor exploitatie is geen voorafgaande authenticatie vereist.
Check Point NL
Rilasciato aggiornamento che risolve 2 vulnerabilità di sicurezza, con gravità “critica”, in pgAdmin, nota piattaforma di amministrazione e sviluppo open source per PostgreSQL. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a un utente malintenzionato di eludere i meccanismi di autenticazione e di scrivere file arbitrari sul filesystem dei sistemi interessati
EPSS 0.01 CVE-2026-86863 CVE-2026-86864 pgAdmin IT
Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 16 nuove vulnerabilità di sicurezza, di cui 2 con gravità “critica” e 7 con gravità “alta”.
EPSS < 0.01 CVE-2026-93372 CVE-2026-93373 CVE-2026-93374 CVE-2026-93375 CVE-2026-93377 CVE-2026-93379 CVE-2026-93381 CVE-2026-93382 CVE-2026-93387 Google IT
Stored Cross-Site Scripting (XSS) in T-Systems’ TAO 2.0 Fri, 09/18/2026 - 11:30 Aviso Affected Resources TAO 2.0 Description INCIBE has coordinated the publication of a medium-severity vulnerability affecting T-Systems’ TAO 2.0 suite, a management platform for the public sector. The vulnerability was discovered by Cayetano de Juan Úbeda.This vulnerability has been assigned the following code, CVSS v4.0 base score, CVSS vector and CWE vulnerability type:CVE-2026-92976: CVSS v4.0: 5.1 | CVSS:4.0…
EPSS < 0.01 CVSS 5.1 CVE-2026-92976 T-Systems veřejná správa ES
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-19772.
CVSS 7.8 CVE-2026-19772 Linux Mint US