Výsledky hledání

ZDI-26-644: Oracle VirtualBox VMSVGA Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-60155.

EPSS < 0.01 CVSS 7.5 CVE-2026-60155 Oracle US

tg: zranitelnost

9. 9. 2026 · zachyceno 10. 9. 2026 00:30 · Zero Day Initiative · ZDI-26-644: Oracle VirtualBox VMSVGA Race Condition Local Privilege Escalation Vulnerability

SPOJENO PŘES CVE ZDI-26-645: Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-84387.

EPSS 0.02 CVSS 7.2 CVE-2026-84387 Fortinet US FI

tg: zranitelnost

9. 9. 2026 · zachyceno 10. 9. 2026 00:30 · Zero Day Initiative · ZDI-26-645: Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution Vulnerability 9. 9. 2026 · zachyceno 04:30 · NCSC-FI · FortiSandbox Cron Job Injection in Remote Backup

ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-59346.

EPSS < 0.01 CVSS 7.5 CVE-2026-59346 VMware US

tg: zranitelnost

9. 9. 2026 · zachyceno 10. 9. 2026 00:30 · Zero Day Initiative · ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability

SPOJENO PŘES CVE ZDI-26-624: Backblaze Personal Computer Backup bzbackup Link Following Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Backblaze Personal Computer Backup. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.1. The following CVEs are assigned: CVE-2026-19820.

EPSS < 0.01 CVSS 6.1 CVE-2026-19820 Backblaze US

tg: zranitelnost

9. 9. 2026 · zachyceno 10. 9. 2026 00:00 · Zero Day Initiative · ZDI-26-624: Backblaze Personal Computer Backup bzbackup Link Following Denial-of-Service Vulnerability

ZDI-26-623: Linux Kernel IPv6 Multicast Routing Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8.

CVSS 8.8 Linux US

tg: zranitelnost

9. 9. 2026 · zachyceno 23:33 · Zero Day Initiative · ZDI-26-623: Linux Kernel IPv6 Multicast Routing Use-After-Free Local Privilege Escalation Vulnerability

Security Alert: Microsoft Releases September 2026 Security Updates

Microsoft JP

tg: zranitelnost tg: novinka v produktu

9. 9. 2026 04:36 · JPCERT/CC · Security Alert: Microsoft Releases September 2026 Security Updates

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-141)

Adobe JP

tg: zranitelnost

9. 9. 2026 04:36 · JPCERT/CC · Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-141)

Security Advisory Ivanti Sentry (CVE-2026-83527)

Classification: Severe, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.0: 8.1, CVEs: CVE-2026-83527, Summary: Ivanti has released updates for Ivanti Sentry that address one high severity vulnerability. This vulnerability impacts deployments managed by EPMM and Ivanti Neurons for MDM. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. CVE-2026-83527 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS:3.0 8.1 An Authentication Bypass…

EPSS 0.02 CVSS 8.1 CVE-2026-83527 Ivanti FI

tg: zranitelnost tg: novinka v produktu tp: identita

9. 9. 2026 · zachyceno 04:30 · NCSC-FI · Security Advisory Ivanti Sentry (CVE-2026-83527)

Security Advisory - Ivanti Endpoint Manager Mobile (CVE-2026-18851)

Classification: Severe, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.0: 8.8, CVEs: CVE-2026-18851, Summary: Ivanti has released updates for Ivanti Endpoint Manager Mobile (EPMM) which addresses one high severity vulnerability. Successful exploitation could lead to privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. CVE-2026-18851 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS:3.0 8.8 Missing authorization in…

EPSS 0.01 CVSS 8.8 CVE-2026-18851 Ivanti FI

tg: zranitelnost

9. 9. 2026 · zachyceno 04:30 · NCSC-FI · Security Advisory - Ivanti Endpoint Manager Mobile (CVE-2026-18851)

Security Advisory Ivanti Neurons for ITSM (Multiple CVEs)

Classification: Critical, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv3.1: 9.9, CVEs: CVE-2026-12744, CVE-2026-12745, CVE-2026-12651, CVE-2026-12650, CVE-2026-12648, CVE-2026-12645, CVE-2026-12646, CVE-2026-12647, Summary: Ivanti has released updates for Ivanti Neurons for ITSM (N-ITSM) which addresses High and Critical severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Additionally, it’s important for…

EPSS 0.03 CVSS 9.9 CVE-2026-12645 CVE-2026-12646 CVE-2026-12647 CVE-2026-12648 CVE-2026-12650 CVE-2026-12651 CVE-2026-12744 CVE-2026-12745 Ivanti FI

tg: zranitelnost tg: novinka v produktu tp: AI

9. 9. 2026 · zachyceno 04:30 · NCSC-FI · Security Advisory Ivanti Neurons for ITSM (Multiple CVEs)

FortiOS & FortiProxy ZTNA Portal Improper Certificate Validation

Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.3, CVEs: CVE-2026-84393, Summary: An improper certificate validation vulnerability [CWE-295] in FortiOS and FortiProxy Agentless ZTNA portal may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the ZTNA portal and the backend destination website.

EPSS < 0.01 CVSS 7.3 CVE-2026-84393 Fortinet FI

tg: zranitelnost

9. 9. 2026 · zachyceno 04:30 · NCSC-FI · FortiOS & FortiProxy ZTNA Portal Improper Certificate Validation

FortiMonitorOnSight JWT used for authentication in web GUI signed with static key

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6, CVEs: CVE-2026-84390, Summary: An Inclusion of Sensitive Information in Source Code vulnerability [CWE-540] in FortiMonitorOnSight web portal may allow a remote unauthenticated attacker to bypass authentication via forged or reused JWT

EPSS 0.01 CVSS 9.6 CVE-2026-84390 Fortinet FI

tg: zranitelnost tp: identita

9. 9. 2026 · zachyceno 04:30 · NCSC-FI · FortiMonitorOnSight JWT used for authentication in web GUI signed with static key

Improper Authentication of FortiPAM Server

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.1, CVEs: CVE-2026-84388, Summary: An improper authentication vulnerability [CWE-287] in the Fortinet Privileged Access Agent Chrome Extension may allow a remote unauthenticated attacker to proxy a user's browser traffic through attacker controlled servers if the user visits a malicious website. Remediation for this issue required coordinated changes in two components: FortiPAM and the Fortinet…

EPSS < 0.01 CVSS 9.1 CVE-2026-84388 Fortinet FI

tg: zranitelnost

9. 9. 2026 · zachyceno 04:30 · NCSC-FI · Improper Authentication of FortiPAM Server

SPOJENO PŘES CVE Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

Classification: Important, Solution: Official Fix, Exploit Maturity: Proof-of-Concept, CVSSv3.1: 7.1, CVEs: CVE-2026-20293, Summary: A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access to an affected device to bypass UEFI Secure Boot validation checks…

EPSS < 0.01 CVSS 7.1 CVE-2026-20293 Cisco FI FR US

tg: zranitelnost

9. 9. 2026 · zachyceno 04:30 · NCSC-FI · Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability 9. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Vulnérabilité dans les produits Cisco (09 septembre 2026) 8. 9. 2026 18:00 · Cisco PSIRT · Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

SPOJENO PŘES CVE SAP Security Patch Day - September 2026

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.0: 10.0, CVEs: CVE-2026-44756, CVE-2026-58240, CVE-2026-76969, CVE-2026-66768, CVE-2026-58243, CVE-2026-76958, CVE-2026-76967, CVE-2026-66767, CVE-2026-2332, CVE-2026-76968, CVE-2026-44766, CVE-2026-76971, CVE-2026-34477, CVE-2026-76977, CVE-2026-76960, CVE-2026-76961, CVE-2026-76959, CVE-2026-76962, CVE-2026-76963, CVE-2026-58234, Summary: On 8th of September 2026, SAP security patch day saw the release of…

EPSS 0.01 CVSS 10.0 a dalších 3 CVE-2026-44766 CVE-2026-58234 CVE-2026-58240 CVE-2026-58243 CVE-2026-66767 CVE-2026-66768 CVE-2026-76958 CVE-2026-76959 CVE-2026-76960 CVE-2026-76961 CVE-2026-76962 CVE-2026-76963 CVE-2026-76967 CVE-2026-76968 CVE-2026-76969 CVE-2026-76971 CVE-2026-76977 SAP FI FR

tg: zranitelnost tp: DDoS

9. 9. 2026 · zachyceno 04:30 · NCSC-FI · SAP Security Patch Day - September 2026 8. 9. 2026 · zachyceno 15:30 · CERT-FR – avis · Multiples vulnérabilités dans les produits SAP (08 septembre 2026)

Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days

Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 10.0, CVEs: CVE-2026-69805, CVE-2026-58649, CVE-2026-69806, CVE-2026-69439, CVE-2026-69821, CVE-2026-69624, CVE-2026-62810, CVE-2026-69395, CVE-2026-62762, CVE-2026-62813, CVE-2026-69809, CVE-2026-69359, CVE-2026-69524, CVE-2026-69546, CVE-2026-72978, CVE-2026-57099, CVE-2026-69304, CVE-2026-69401, CVE-2026-70352, CVE-2026-62895 (+1151 other associated CVEs), Summary: Today is Microsoft's September 2026 Patch…

CVSS 10.0 Microsoft FI

tg: zneužíváno tg: zranitelnost

9. 9. 2026 · zachyceno 04:30 · NCSC-FI · Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days

September 3, 2026: ScreenConnect® Remote Access: Guest File Transfer Advisory

Classification: Severe, Solution: Workaround, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: ConnectWise has identified an issue affecting file transfer behavior in ScreenConnect® Remote Access Support and Access sessions. The issue affects both Cloud and On-Premise deployments. A CVE identifier and an official fix will be issued within the week. Until the official fix is available, partners can reduce risk today by disabling the ability for technicians to transfer files. This…

ConnectWise FI

tg: zranitelnost

9. 9. 2026 · zachyceno 03:30 · NCSC-FI · September 3, 2026: ScreenConnect® Remote Access: Guest File Transfer Advisory

SVD-2026-0901: Advance Notice of Publication of Splunk Security Advisories - September 2026

On September 16, 2026, Splunk PSIRT will publish advisories to disclose security vulnerability advisories for Splunk Enterprise, Universal Forwarder, and Splunk Apps and Add-ons.

Splunk US

tg: zranitelnost

9. 9. 2026 · zachyceno 23:33 · Splunk Advisories · SVD-2026-0901: Advance Notice of Publication of Splunk Security Advisories - September 2026

Multiples vulnérabilités dans les produits Microsoft (09 septembre 2026)

De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Microsoft FR

tg: zranitelnost

9. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans les produits Microsoft (09 septembre 2026)

Multiples vulnérabilités dans Microsoft Azure (09 septembre 2026)

De multiples vulnérabilités ont été découvertes dans Microsoft Azure. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.

EPSS 0.01 CVE-2026-62895 CVE-2026-69854 CVE-2026-77909 CVE-2026-81349 CVE-2026-83948 Microsoft FR

tg: zranitelnost

9. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans Microsoft Azure (09 septembre 2026)

Multiples vulnérabilités dans Microsoft .Net (09 septembre 2026)

De multiples vulnérabilités ont été découvertes dans Microsoft .Net. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

EPSS 0.01 CVE-2026-58649 CVE-2026-69304 CVE-2026-69439 CVE-2026-69522 CVE-2026-69806 CVE-2026-71328 Microsoft FR

tg: zranitelnost

9. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans Microsoft .Net (09 septembre 2026)

Multiples vulnérabilités dans Microsoft Office (09 septembre 2026)

De multiples vulnérabilités ont été découvertes dans Microsoft Office. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.

Microsoft FR

tg: zranitelnost

9. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans Microsoft Office (09 septembre 2026)

SPOJENO PŘES CVE Vulnérabilité dans Microsoft Edge (09 septembre 2026)

Une vulnérabilité a été découverte dans Microsoft Edge. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.

EPSS 0.01 CVE-2026-70341 Microsoft FR US

tg: zranitelnost

9. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Vulnérabilité dans Microsoft Edge (09 septembre 2026) 28. 8. 2026 · zachyceno 20:03 · Microsoft Security · CVE-2026-70341 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Vulnérabilité dans les produits ESET (09 septembre 2026)

Une vulnérabilité a été découverte dans les produits ESET. Elle permet à un attaquant de provoquer une élévation de privilèges.

EPSS < 0.01 CVE-2026-12858 ESET FR

tg: zranitelnost

9. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Vulnérabilité dans les produits ESET (09 septembre 2026)

Vulnérabilité dans Mozilla Firefox (09 septembre 2026)

Une vulnérabilité a été découverte dans Mozilla Firefox. Elle permet à un attaquant de provoquer un déni de service à distance.

EPSS < 0.01 CVE-2026-86853 Mozilla FR

tg: zranitelnost tp: DDoS

9. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Vulnérabilité dans Mozilla Firefox (09 septembre 2026)

Multiples vulnérabilités dans Postfix (09 septembre 2026)

De multiples vulnérabilités ont été découvertes dans Postfix. Elles permettent à un attaquant de provoquer un déni de service à distance et un contournement de la politique de sécurité.

Postfix FR

tg: zranitelnost tp: DDoS

9. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans Postfix (09 septembre 2026)

Multiples vulnérabilités dans les produits Adobe (09 septembre 2026)

De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Adobe FR

tg: zranitelnost tp: DDoS

9. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans les produits Adobe (09 septembre 2026)

Multiples vulnérabilités dans Citrix Workspace app (09 septembre 2026)

De multiples vulnérabilités ont été découvertes dans Citrix Workspace app. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Citrix FR

tg: zranitelnost

9. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans Citrix Workspace app (09 septembre 2026)

Multiples vulnérabilités dans Xen (09 septembre 2026)

De multiples vulnérabilités ont été découvertes dans Xen. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service à distance et un contournement de la politique de sécurité.

EPSS < 0.01 CVE-2026-62437 CVE-2026-79602 CVE-2026-79603 CVE-2026-79604 CVE-2026-79605 CVE-2026-79606 Xen FR

tg: zranitelnost

9. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans Xen (09 septembre 2026)

SPOJENO PŘES CVE Multiples vulnérabilités dans les produits Ivanti (09 septembre 2026)

De multiples vulnérabilités ont été découvertes dans les produits Ivanti. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un contournement de la politique de sécurité.

EPSS 0.02 CVE-2026-18851 CVE-2026-83527 Ivanti FR CA

tg: zranitelnost

9. 9. 2026 · zachyceno 16:00 · CERT-FR – avis · Multiples vulnérabilités dans les produits Ivanti (09 septembre 2026) 8. 9. 2026 21:22 · Cyber Centre Kanada · Ivanti security advisory (AV26-897)

Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical."Microsoft notes that 2 of the vulnerabilities disclosed this month have been exploited in the wild:CVE-2026-81963 affects Windows Update Stack. CVE-2026-81963 is a elevation of privilege vulnerability associated with Improper Link Resolution Before File Access ('Link Following') and Improper Access Control and…

Microsoft US

tg: zneužíváno tg: zranitelnost

9. 9. 2026 00:16 · Cisco Talos · Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Patch Tuesday - September 2026

Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday, including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch Tuesday ever depends on how we count, but this is by far the most CVEs that Microsoft has ever published in a single day. As Rapid7 noted last month, there is no reason to suppose that Patch Tuesday will…

Microsoft Google US

tg: zneužíváno tg: zranitelnost tg: přehled

8. 9. 2026 23:44 · Rapid7 · Patch Tuesday - September 2026

Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review

Microsoft kicks off September with its monthly Patch Tuesday release, delivering fixes for security vulnerabilities affecting its products. The security updates are packed with security fixes, providing organizations with important updates to help protect their environments from emerging threats. This Patch Tuesday is Microsoft’s largest security update ever, marking a significant increase over other recent massive releases, including the 570 security flaws fixed in July and 400 fixed in August…

Microsoft Adobe US

tg: zneužíváno tg: zranitelnost tg: přehled

8. 9. 2026 21:11 · Qualys · Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review

NCSC-2026-0353 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows

Microsoft heeft 666 kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorieën schade, zoals genoemd in onderstaande tabel. Microsoft heeft voor Windows 666 kwetsbaarheden verholpen. De 32 ernstigste kwetsbaarheden bevinden zich in meerdere Windows componenten en hebben een CVSS score van 9.0 en hoger toegewezen gekregen. Kwaadwillenden met toegang tot deze componenten kunnen zonder voorafgaande…

Microsoft NL

tg: zranitelnost

8. 9. 2026 20:49 · NCSC-NL · NCSC-2026-0353 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Windows

NCSC-2026-0352 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Office

Microsoft heeft 114 kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorieën schade, zoals genoemd in onderstaande tabel. Voor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen. Microsoft heeft voor Office 114 kwetsbaarheden verholpen. De 4 ernstigste kwetsbaarheden bevinden zich in meerdere Office componenten en hebben…

EPSS 0.01 CVE-2026-66302 CVE-2026-78505 CVE-2026-78509 CVE-2026-78510 Microsoft NL

tg: zranitelnost

8. 9. 2026 20:48 · NCSC-NL · NCSC-2026-0352 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Office

NCSC-2026-0351 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Tools

Microsoft heeft 15 kwetsbaarheden verholpen in diverse Developer Tools. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorieën schade zoals benoemd in onderstaande tabel. De ernstigste kwetsbaarheid met kenmerk CVE-2026-81376 heeft een CVSS-score van 9,6. Een kwaadwillende misbruiken door een gebruiker ertoe te verleiden een speciaal geprepareerde Visual Studio Code-workspace te openen. Hiermee kunnen de Workspace Trust-beperkingen…

EPSS 0.01 CVE-2026-57099 CVE-2026-58611 CVE-2026-58649 CVE-2026-69304 CVE-2026-70334 CVE-2026-78461 CVE-2026-78462 CVE-2026-80097 CVE-2026-81356 CVE-2026-81357 CVE-2026-81376 CVE-2026-81377 CVE-2026-81378 CVE-2026-81379 CVE-2026-81380 CVE-2026-81381 CVE-2026-81383 Microsoft NL

tg: zranitelnost

8. 9. 2026 20:47 · NCSC-NL · NCSC-2026-0351 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Developer Tools

NCSC-2026-0350 [1.00] [M/H] Kwetsbaarheden verholpen in SQL Server

Microsoft heeft 62 kwetsbaarheden verholpen in diverse componenten van SQL Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorieën schade zoals benoemd in onderstaande tabel. ``` SQL Server: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-47297 | 8,10 | Uitvoeren van willekeurige code | | CVE-2026-66814 | 8,80 |…

Microsoft NL

tg: zranitelnost

8. 9. 2026 20:46 · NCSC-NL · NCSC-2026-0350 [1.00] [M/H] Kwetsbaarheden verholpen in SQL Server

NCSC-2026-0349 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Exchange server

Microsoft heeft 9 kwetsbaarheden verholpen in Exchange Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service uit te voeren, zich voor te doen als andere gebruiker, zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens. De ernstigste kwetsbaarheid met kenmerk CVE-2026-69380 heeft een CVSS-score van 9,9 en betreft een autorisatiekwetsbaarheid. Een geauthenticeerde kwaadwillende met beperkte rechten en…

EPSS 0.01 CVE-2026-55007 CVE-2026-69355 CVE-2026-69356 CVE-2026-69361 CVE-2026-69375 CVE-2026-69378 CVE-2026-69380 CVE-2026-69382 CVE-2026-69641 Microsoft NL

tg: zranitelnost tp: identita

8. 9. 2026 20:44 · NCSC-NL · NCSC-2026-0349 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Exchange server

NCSC-2026-0348 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Dynamics

Microsoft heeft 2 kwetsbaarheden verholpen in Dynamics, zowel online als on-premise. De kwetsbaarheden stellen een kwaadwillende in staat om zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens. ``` Microsoft Dynamics 365: |----------------|------|-------------------------------------| | CVE-ID | CVSS | Impact | |----------------|------|-------------------------------------| | CVE-2026-65772 | 8,80 | Uitvoeren van willekeurige…

EPSS 0.02 CVE-2026-65772 CVE-2026-77897 Microsoft NL

tg: zranitelnost

8. 9. 2026 20:44 · NCSC-NL · NCSC-2026-0348 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Dynamics

NCSC-2026-0347 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Azure

Microsoft heeft 4 kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorieën schade, zoals genoemd in onderstaande tabel. De kwetsbaarheid met kenmerk CVE-2026-69854 heeft een CVSS-score van 9,0. Een kwaadwillende die al over een geldige sessie beschikt, kan de kwetsbaarheid onder specifieke voorwaarden, zoals bepaalde protocolinstellingen of configuraties, misbruiken om zijn rechten…

EPSS 0.01 CVE-2026-62895 CVE-2026-69854 CVE-2026-77909 CVE-2026-81961 Microsoft NL

tg: zranitelnost tp: identita

8. 9. 2026 20:39 · NCSC-NL · NCSC-2026-0347 [1.00] [M/H] Kwetsbaarheden verholpen in Microsoft Azure

Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days

Today is Microsoft's September 2026 Patch Tuesday, with security updates released for a record-breaking 966 flaws, including two actively exploited zero-day vulnerabilities. [...]

Microsoft US

tg: zneužíváno tg: zranitelnost

8. 9. 2026 20:18 · BleepingComputer · Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days

Commvault security advisory (AV26-895)

Serial Number: AV26-895Date: September 8, 2026 As of September 8, 2026, Commvault is affected by vulnerabilities in the following product: Commvault Cloud 11.36.0 Prior to 11.36.123 11.40.0 Prior to 11.40.72 11.44.0 Prior to 11.44.20 11.46.0 Prior to 11.46.20 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CV_2026_07_1: Command Center API Authentication Bypass Commvault Cloud Security Advisories

Commvault CA

tg: zranitelnost tp: identita

8. 9. 2026 20:11 · Cyber Centre Kanada · Commvault security advisory (AV26-895)

SAP security advisory – September 2026 monthly rollup (AV26-894)

Serial Number: AV26-894Date: September 8, 2026 As of September 8, 2026, SAP_SE is affected by vulnerabilities in the following products: SAP Extended Passport (EPP) Processing – KRNL64NUC 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT, 7.53, 8.04, WEBDISP 9.16, 9.18, 9.19, 9.20, KERNEL 7.22, 7.53, 7.54, 7.77, 7.89, 7.93, 8.04, 9.16, 9.18, 9.19 and 9.20 SAP NetWeaver (Message Server) - versions KERNEL 9.16, 9.18, 9.19, and 9.20 SAP Cloud Application Programming Model (CAP) prior or equal to 1.183 prior…

SAP CA

tg: zranitelnost

8. 9. 2026 20:03 · Cyber Centre Kanada · SAP security advisory – September 2026 monthly rollup (AV26-894)

Hitachi security advisory (AV26-893)

Serial Number: AV26-893Date: September 8, 2026 As of September 8, 2026, Hitachi is affected by vulnerabilities in the following product: Cosminexus Component Container Multiple versions and models The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Vulnerability in Cosminexus Hitachi Vulnerability Information

Hitachi CA

tg: zranitelnost

8. 9. 2026 19:29 · Cyber Centre Kanada · Hitachi security advisory (AV26-893)

[Control Systems] Inductive Automation security advisory (AV26-892)

Serial Number: AV26-892Date: September 8, 2026 As of September 4, 2026, Inductive Automation is affected by a vulnerability in the following product: Ignition Prior to or equal to 8.1.53 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CSAF/csaf_files/OT/white/2026/icsa-26-246-06.json at develop · cisagov/CSAF · GitHub Inductive Automation Ignition | CISA

Inductive Automation CA

tg: zranitelnost tp: průmyslové systémy

8. 9. 2026 19:28 · Cyber Centre Kanada · [Control Systems] Inductive Automation security advisory (AV26-892)

JetBrains security advisory (AV26-891)

Serial Number: AV26-891Date: September 8, 2026 As of September 7, 2026, JetBrains is affected by vulnerabilities in the following products: GoLand Prior to 2026.2.2.1 Hub Prior to 2026.2.52442 IntelliJ IDEA Prior to 2026.2.2 YouTrack Multiple versions The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Fixed security issues

JetBrains CA

tg: zranitelnost

8. 9. 2026 19:27 · Cyber Centre Kanada · JetBrains security advisory (AV26-891)

[Control Systems] Siemens security advisory (AV26-890)

Serial Number: AV26-890Date: September 8, 2026 As of September 8, 2026, Siemens is affected by vulnerabilities in the following products: Reyrolle 7SR5 Versions prior to V2.70 Teamcenter Multiple versions and models Siveillance Control Multiple versions and models SIMATIC AX Runtime Multiple versions and models Desigo CC Product Family Multiple versions and models Industrial Edge Management Multiple versions and models SIMOVE Fleetmanager and SIPLANT Multiple versions and models The Cyber…

Siemens CA

tg: zranitelnost tp: průmyslové systémy

8. 9. 2026 19:27 · Cyber Centre Kanada · [Control Systems] Siemens security advisory (AV26-890)

OpenVPN security advisory (AV26-889)

Serial Number: AV26-889Date: September 8, 2026 As of September 7, 2026, OpenVPN is affected by vulnerabilities in the following product: OpenVPN Prior to or equal to 2.6.22 Prior to or equal to 2.7.6 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CVE-2026-84732 - Reliability layer unbounded TLS timeout and acks for non-outstanding packets Security Advisories & Updates | OpenVPN

EPSS < 0.01 CVE-2026-84732 OpenVPN CA

tg: zranitelnost

8. 9. 2026 17:19 · Cyber Centre Kanada · OpenVPN security advisory (AV26-889)

SAP warns of maximum severity 'OVERPASS' kernel vulnerability

SAP has addressed 20 vulnerabilities across multiple products in its September 2026 security updates, including a maximum-severity memory corruption flaw in the SAP Kernel code. [...]

CVE-2026-44756 * CVE-2026-58231 * CVE-2026-58240 * SAP US

tg: zranitelnost

8. 9. 2026 16:55 · BleepingComputer · SAP warns of maximum severity 'OVERPASS' kernel vulnerability

SAP Security Patch Day

Nell’ambito del Security Patch Day di settembre, SAP rilascia aggiornamenti di sicurezza per risolvere molteplici nuove vulnerabilità, di cui 4 con gravità “critica” e 4 con gravità “alta”.

EPSS 0.01 CVE-2026-2332 CVE-2026-44756 CVE-2026-58240 CVE-2026-66767 CVE-2026-66768 CVE-2026-76958 CVE-2026-76967 CVE-2026-76969 SAP IT

tg: zranitelnost

8. 9. 2026 16:14 · CSIRT Itálie (ACN) · SAP Security Patch Day