VIRY.CZ RADAR je monitor bezpečnostních hrozeb: advisories, zranitelnosti a threat intel z 65 veřejných zdrojů z 25 zemí, česky a na jednom místě. V archivu máme 10 484 položek.
Jsem „protkán“ AI. Snažím se pochopit zdrojové texty a bez vymýšlení je zestručnit a převést do českého jazyka, případně s využitím AI seskupit. Patřičně jsem pak hrdý na týdenní reporty, kde s pomocí AI zpracovávám stovky článků a hledám v nich souvislosti. Používám ale i čistou matematiku, takže pokud například více zdrojů mluví o shodné CVE chybě, seskupím to do jednoho příspěvku. Doporučuji se přihlásit k jejich odběru. Pokud se Vám líbím, nebráním se finanční podpoře :-)
Původní „Igiho stránka o virech“ se odstěhovala sem.
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. [...]
KEV ✓ EPSS 0.01 CVE-2026-114625 Arista Arista Networks NL CA IT US
This week, Axios reported that major US banks were detecting third-party AI agents operating inside customer accounts. In many cases, customers have given the agents their usernames and passwords so they could act on their behalf. This kind of access can violate a bank’s rules. Bianco Research president Jim Bianco raised the question during Unchained’s Bits + Bips livestream on October 26: “Are you protecting me, or are you protecting your own profits?” Bianco described traditional finance’s…
Attackers abuse legitimate MDM platforms to deploy rogue RMM tools, turning device management into a pathway for remote access and persistence.
US
In his LABScon 26 keynote, delivered in his inimitable comedic style, Harvard University professor James Mickens questions whether the scale of current AI investment is justified. Starting from US tech capex of roughly 1.4% of GDP in the second quarter of 2025, he argues that computers are already good enough, and notes that the world has so many CPUs and GPUs that they are put to work solving cryptocurrency puzzles to make imaginary money. More seriously, the AI models that investment is…
OpenAI US
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.5, CVEs: CVE-2026-97631, Summary: The vulnerability, with a severity rating of 9.5 out of 10, resides in the TianoCore EDK II, an open source codebase that hardware makers and cloud providers use to create the UEFI firmware that runs during the boot-up sequence. Last year, a representative of the UEFI Forum called EDK2 the “preeminent solution / implementation of the UEFI specifications.” Virtually all…
EPSS 0.01 CVSS 9.5 CVE-2026-97631 TianoCore Microsoft AMI Insyde FI IT
Attackers have begun probing the Internet for systems unpatched against a recently disclosed critical Oracle E-Business Suite (EBS) vulnerability. [...]
CVE-2025-61882 * CVE-2026-101767 * CVE-2026-35273 * Oracle US
The FBI seized the domain of a “bulletproof” hosting provider accused of facilitating a range of cybercrimes, including money laundering and the distribution of child sexual abuse material.
US
Rilevate 11 vulnerabilità, di cui 3 con gravità “alta”, nei prodotti Acronis Cyber Protect 17 e Cyber Protect Cloud Agent. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di accedere ad informazioni sensibili e manipolarle, nonché di elevare i propri privilegi sui sistemi interessati.
EPSS 0.00 CVE-2025-30414 CVE-2026-87102 CVE-2026-87103 Acronis IT
On October 27, Google issued a new Stable channel update for Chrome. Most users are on Chrome’s Stable channel. The desktop update brings Chrome to versions 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 for Linux. The update includes 52 security fixes, including four rated Critical. On the same day, Mozilla issued Security Advisory 2026-118, which fixes 167 vulnerabilities. Firefox 159 also introduces several new features. Both updates will roll out over the coming days and weeks. How…
Path Traversal vulnerability (CVE-2026-105420) has been found in Wing FTP Server software.
EPSS 0.01 CVE-2026-105420 Wing FTP Server PL
Why connecting exposure, adversary intelligence, and response should help organizations intervene earlier.
SG
A critical PHP flaw, leaked Linux kernel reports, a poisoned LiteLLM release, and more, all in seven days. Which threats called for immediate action, and which generated more noise than real danger?
Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 52 nuove vulnerabilità di sicurezza, di cui 4 con gravità “critica” e 46 con gravità “alta”.
Google IT
Cisco heeft kwetsbaarheden verholpen in Secure Firewall ASA, Threat Defense en Management Center softwareproducten. Cisco heeft de kwetsbaarheden gegroepeerd naar acht verschillende kwetsbaarheidsklassen (CWE's) en aan iedere groep één CVE-kenmerk toegekend. De kwetsbaarheden betreffen verschillende beveiligingsproblemen, waaronder onvoldoende toegangscontrole, onjuiste verwerking van invoergegevens, fouten in beveiligingsmechanismen en onjuiste afhandeling van uitzonderingssituaties. Vier van…
KEV ✓ · ransomware EPSS 0.89 CVE-2026-20079 CVE-2026-20316 CVE-2026-20329 CVE-2026-20330 CVE-2026-20331 CVE-2026-20332 Cisco NL
Background Network-connected surveillance cameras are now widespread in both home and enterprise environments, so securing them is essential to safeguarding physical spaces and sensitive assets. As these devices continue to gain new features and network connectivity capabilities, vulnerabilities in their implementation can have significant security implications. During our research, we discovered a denial-of-service vulnerability that affects Intelbras IP cameras systems. The flaw resides in a…
Intelbras RU
Veeam ha rilasciato aggiornamenti di sicurezza per risolvere 9 vulnerabilità, di cui 2 con gravità “critica” e 3 con gravità “alta”, nei prodotti Backup and Replication, ONE, Agent per Linux e Backup per Microsoft 365.
EPSS 0.00 CVE-2026-105477 CVE-2026-106076 CVE-2026-106077 CVE-2026-107671 CVE-2026-108142 Veeam IT
An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q2 2026 and Q3 2026
SK
Ukrainian national Artem Stryzhak, 36, had pleaded guilty last year to charges related to participating in at least two well-known ransomware groups.
Aikido launches external network pentesting: AI agents attack your internet-facing systems from the outside and report only findings they actually exploit. Category: Company Updates
Aikido BE
Proofpoint US
TeamViewer ha rilasciato aggiornamenti di sicurezza per sanare 9 vulnerabilità con gravità “alta” in vari prodotti. Tali vulnerabilità potrebbero consentire a un attaccante, in alcuni casi non autenticato, di elevare i propri privilegi o di eseguire codice arbitrario sui sistemi interessati.
EPSS 0.00 CVE-2026-111582 CVE-2026-111583 CVE-2026-111584 CVE-2026-111585 CVE-2026-92372 CVE-2026-92374 CVE-2026-92375 CVE-2026-92376 CVE-2026-92377 TeamViewer IT
Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise. In Splunk Enterprise zijn verschillende kwetsbaarheden aanwezig in versies eerder dan 10.4.4 (en enkele andere specifieke versies). Deze omvatten onder andere: - onjuiste verificatie in de Data Management REST API waardoor gebruikers met bepaalde rollen toegang kunnen krijgen tot of verwijderen van SPL2 preview jobs en resultaten die zij niet bezitten - onvoldoende limieten in request-header parsing in de JavaScript logger…
Splunk NL
Aggiornamenti di sicurezza sanano una vulnerabilità con gravità "alta" in OAuthLib, libreria open source per Python ampiamente utilizzata per l'implementazione dei protocolli di autorizzazione OAuth 1.0 e OAuth 2.0. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione sui sistemi interessati.
This technical analysis details a sophisticated Android malware campaign targeting the Indian banking sector. The report examines seven distinct trojan families that facilitate banking fraud through coordinated phishing, credential theft, and unauthorized cryptojacking. Group-IB provides an in-depth breakdown of the attack chain, malware capabilities, and the infrastructure used to compromise mobile devices.
finance SG
SQL injection (SQLi) in the user authentication module of Futurum Software Wed, 10/28/2026 - 09:52 Aviso Affected Resources User authentication module for the business management platform. Description INCIBE has coordinated the disclosure of a critical severity vulnerability affecting the user authentication module of Futurum Software, a cloud-based business management platform designed to create and manage multi-level marketing businesses. The vulnerability was discovered by Diego González…
EPSS 0.00 CVSS 9.1 CVE-2026-14571 Futurum Software ES
Multiple Vulnerabilities in Tactis' NoviGest Desktop App Wed, 10/28/2026 - 09:47 Aviso Affected Resources NoviGest Desktop App, version 7.4.4-292: Java RMI service and XML file import from the SAFT module. Description INCIBE has coordinated the disclosure of two vulnerabilities—one critical and one high severity—that affect NoviGest Desktop App by Tactis Serviços Informáticos, LDA, a clinical management software application. The vulnerabilities were discovered by Pablo Jordán Lucia and Marina…
EPSS 0.00 CVSS 9.4 CVE-2026-112197 CVE-2026-112198 Tactis zdravotnictví ES
WatchGuard ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità, di cui 7 con gravità “critica” e 7 con gravità “alta”, in Fireware OS, sistema operativo utilizzato nei dispositivi di sicurezza perimetrale e di protezione delle reti. Tali vulnerabilità potrebbero consentire a un utente malintenzionato, in determinate condizioni, di eseguire codice arbitrario, di eludere i meccanismi di autenticazione, di accedere a informazioni sensibili o di compromettere la disponibilit
EPSS 0.01 CVE-2026-103593 CVE-2026-103594 CVE-2026-111107 CVE-2026-112709 CVE-2026-112710 CVE-2026-90442 CVE-2026-90464 CVE-2026-90465 CVE-2026-93434 CVE-2026-93857 CVE-2026-93862 CVE-2026-93864 CVE-2026-93865 CVE-2026-93866 WatchGuard IT
Adobe ha rilasciato aggiornamenti di sicurezza per risolvere 12 vulnerabilità, di cui 9 con gravità “critica” e 2 con gravità “alta”, nei prodotti Substance 3D Painter, Connect Desktop, Connect Mobile, Campaign Classic, Creative Cloud Desktop Application.
EPSS 0.01 CVE-2026-104349 CVE-2026-104350 CVE-2026-104351 CVE-2026-104353 CVE-2026-104354 CVE-2026-105489 CVE-2026-105779 CVE-2026-105780 CVE-2026-105781 CVE-2026-48360 CVE-2026-48379 Adobe IT
Tastați adresa magazinului online în browser; evitați linkurile din reclame sau mesaje. N...
obchod RO
Aggiornamenti di sicurezza sanano 180 vulnerabilità di sicurezza, di cui 3 con gravità “critica” e 113 con gravità “alta”, nei prodotti Firefox, Firefox ESR, Thunderbird.
Mozilla IT
Executive Summary Node.js has fixed CVE-2026-111497, a Brotli decoder flaw that can permit remote code execution, in 22.23.4, 24.22.1, and 26.12.1, but upgrading at scale is slow. In Qualys telemetry, only 42,000 of roughly 3 million Node.js installations have been patched, and 1.7 million run end-of-life lines that will never receive a fix. In the meantime, interim mitigations from the Qualys Threat Research Unit narrow the Brotli, DNS, TLS, and keep-alive attack paths, and WAF, IPS, and EDR…
KEV ✓ EPSS 0.83 CVE-2026-105481 CVE-2026-105482 CVE-2026-105483 CVE-2026-106069 CVE-2026-106071 CVE-2026-106072 CVE-2026-106073 CVE-2026-111497 Node.js US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-86974.
EPSS 0.00 CVSS 8.8 CVE-2026-86974 Apple US
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-112656.
EPSS 0.00 CVSS 3.3 CVE-2026-112656 Apple US
This vulnerability allows local attackers to escalate privileges on affected installations of AVG Internet Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-6064.
EPSS 0.00 CVSS 7.3 CVE-2026-6064 AVG US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Valkey. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8.
CVSS 8.8 Valkey US
US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118613.
EPSS 0.00 CVSS 7.8 CVE-2026-118613 Ultralytics US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118614.
EPSS 0.00 CVSS 7.8 CVE-2026-118614 Ultralytics US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118615.
EPSS 0.00 CVSS 7.8 CVE-2026-118615 Ultralytics US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118616.
EPSS 0.00 CVSS 7.8 CVE-2026-118616 Ultralytics US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118617.
EPSS 0.00 CVSS 7.8 CVE-2026-118617 Ultralytics US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118618.
EPSS 0.00 CVSS 7.8 CVE-2026-118618 Ultralytics US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-118619.
EPSS 0.01 CVSS 8.8 CVE-2026-118619 Ultralytics US
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2026-118601.
EPSS 0.00 CVSS 6.3 CVE-2026-118601 Alpine US
This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118602.
EPSS 0.00 CVSS 7.8 CVE-2026-118602 Alpine US
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device. The ZDI has assigned a CVSS rating of 8.0. The following CVEs are assigned: CVE-2026-118603.
EPSS 0.00 CVSS 8.0 CVE-2026-118603 Alpine US
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-118604.
EPSS 0.00 CVSS 6.8 CVE-2026-118604 Alpine US
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.0. The following CVEs are assigned: CVE-2026-118605.
EPSS 0.00 CVSS 8.0 CVE-2026-118605 Alpine US
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-118606.
EPSS 0.00 CVSS 8.8 CVE-2026-118606 Alpine US
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-118607.
EPSS 0.01 CVSS 6.8 CVE-2026-118607 Alpine US
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 3.5. The following CVEs are assigned: CVE-2026-118608.
EPSS 0.00 CVSS 3.5 CVE-2026-118608 Alpine US
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-118609.
EPSS 0.00 CVSS 6.8 CVE-2026-118609 Alpine US
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-118610.
EPSS 0.00 CVSS 8.8 CVE-2026-118610 Alpine US
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-118611.
EPSS 0.00 CVSS 6.8 CVE-2026-118611 Alpine US
US
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.1, CVEs: CVE-2023-4863, CVE-2026-16436, CVE-2026-16437, CVE-2026-16438, Summary: Out-of-bounds Write, Weak Password Recovery Mechanism for Forgotten Password, Incorrect Privilege Assignment Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code (CVE-2023-4863), bypass authentication (CVE-2026-16436 and CVE-2026-16437), or perform arbitrary operations (CVE-2026…
KEV ✓ EPSS 1.00 CVSS 9.1 CVE-2023-4863 CVE-2026-16436 CVE-2026-16437 CVE-2026-16438 Mitsubishi Electric výroba a průmysl FI US
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-114595, CVE-2026-114596, CVE-2026-114597, CVE-2026-114598, Summary: Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition, corrupt memory, disclose sensitive information, or potentially execute arbitrary code. The following versions of EPICS Base are affected: EPICS Base release
EPSS 0.01 CVSS 9.8 CVE-2026-114595 CVE-2026-114596 CVE-2026-114597 CVE-2026-114598 EPICS výroba a průmysl FI US
Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.7, CVEs: CVE-2026-111459, CVE-2026-111460, CVE-2026-111461, Summary: This security advisory addresses one vulnerability identified in Moxa Remote Connect Suite (MRC Client) and two vulnerabilities identified in the OnCell G3150A-LTE Series. CVE-2026-111459 - Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client) An improper certificate validation vulnerability…
EPSS 0.01 CVSS 7.7 CVE-2026-111459 CVE-2026-111460 CVE-2026-111461 Moxa FI CA
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.8, CVEs: , Summary: The following updates are published: - iOS 27.2 and iPadOS 27.2 - iOS 26.7.2 and iPadOS 26.7.2 - iOS 18.7.11 and iPadOS 18.7.11 - macOS Golden Gate 27.2 - macOS Tahoe 26.7.2 - macOS Sequoia 15.8.2 - tvOS 27.2 - watchOS 27.2 - visionOS 27.2 - Safari 27.2 - tvOS 26.6.1 (no published CVE entries)
CVSS 8.8 Apple FI
CISA added CVE-2026-46300 to the Known Exploited Vulnerabilities catalog. Affected product: Linux Kernel. Remediation due date: 2026-10-31.
KEV ✓ EPSS 0.16 CVE-2026-46300 Linux US IT