VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

Výsledky hledání

typ: zranitelnost× v celém archivu zrušit filtry

1784 karet z 1914 položek · strana 7 z 30 CZ · EN/orig

24

ZDI-26-671: Adobe Acrobat Reader DC Dialog Object Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-80161.

EPSS 0.00 CVSS 7.8 CVE-2026-80161 Adobe US

tg: zranitelnost

· Zero Day Initiative · ZDI-26-671: Adobe Acrobat Reader DC Dialog Object Type Confusion Remote Code Execution Vulnerability

ZDI-26-672: Adobe Acrobat Reader DC PDF File Parsing Integer Underflow Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-81977.

EPSS 0.00 CVSS 3.3 CVE-2026-81977 Adobe US

tg: zranitelnost

· Zero Day Initiative · ZDI-26-672: Adobe Acrobat Reader DC PDF File Parsing Integer Underflow Information Disclosure Vulnerability

ZDI-26-673: Adobe Acrobat Pro DC Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81988.

EPSS 0.00 CVSS 7.8 CVE-2026-81988 Adobe US

tg: zranitelnost

· Zero Day Initiative · ZDI-26-673: Adobe Acrobat Pro DC Doc Object Use-After-Free Remote Code Execution Vulnerability

ZDI-26-674: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81981.

EPSS 0.00 CVSS 7.8 CVE-2026-81981 Adobe US

tg: zranitelnost

· Zero Day Initiative · ZDI-26-674: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability

ZDI-26-675: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81976.

EPSS 0.00 CVSS 7.8 CVE-2026-81976 Adobe US

tg: zranitelnost

· Zero Day Initiative · ZDI-26-675: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-26-676: Adobe Acrobat Reader DC DigSig Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81973.

EPSS 0.00 CVSS 7.8 CVE-2026-81973 Adobe US

tg: zranitelnost

· Zero Day Initiative · ZDI-26-676: Adobe Acrobat Reader DC DigSig Use-After-Free Remote Code Execution Vulnerability

ZDI-26-677: Adobe Photoshop DCM JPEG-LS Image Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-75771.

EPSS 0.00 CVSS 7.8 CVE-2026-75771 Adobe US

tg: zranitelnost

· Zero Day Initiative · ZDI-26-677: Adobe Photoshop DCM JPEG-LS Image Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-26-678: Adobe Photoshop DCM File Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-75863.

EPSS 0.00 CVSS 7.8 CVE-2026-75863 Adobe US

tg: zranitelnost

· Zero Day Initiative · ZDI-26-678: Adobe Photoshop DCM File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-26-679: Adobe Photoshop DCM JPEG Image Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-75862.

EPSS 0.00 CVSS 7.8 CVE-2026-75862 Adobe US

tg: zranitelnost

· Zero Day Initiative · ZDI-26-679: Adobe Photoshop DCM JPEG Image Parsing Integer Overflow Remote Code Execution Vulnerability

Palo Alto Networks Security Advisories 2026-09-09

Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.7, CVEs: CVE-2026-0310, CVE-2026-0309, CVE-2026-0308, CVE-2026-0307, CVE-2026-0306, CVE-2026-0305, CVE-2026-0304, CVE-2026-0303, CVE-2026-0302, Summary: Multiple security advisories for multiple Paloalto products.

EPSS 0.01 CVSS 7.7 CVE-2026-0302 CVE-2026-0303 CVE-2026-0304 CVE-2026-0305 CVE-2026-0306 CVE-2026-0307 CVE-2026-0308 CVE-2026-0309 CVE-2026-0310 Palo Alto Networks FI

tg: zranitelnost

· NCSC-FI · Palo Alto Networks Security Advisories 2026-09-09

Security update available for Adobe Acrobat and Reader (APSB26-141)

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.8, CVEs: CVE-2026-81996, CVE-2026-81994, CVE-2026-81983, CVE-2026-79907, CVE-2026-79908, CVE-2026-79909, CVE-2026-80161, CVE-2026-81973, CVE-2026-81975, CVE-2026-81976, CVE-2026-81992, CVE-2026-81979, CVE-2026-81980, CVE-2026-81981, CVE-2026-81985, CVE-2026-81986, CVE-2026-81987, CVE-2026-81988, CVE-2026-81989, CVE-2026-81990 (+12 other associated CVEs), Summary: Adobe has released a security update for…

CVSS 8.8 Adobe FI

tg: zranitelnost tg: novinka v produktu

· NCSC-FI · Security update available for Adobe Acrobat and Reader (APSB26-141)

Google Chrome Stable Channel Update

Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 9.6, CVEs: CVE-2026-87464, CVE-2026-87488, CVE-2026-87438, CVE-2026-87527, CVE-2026-87628, CVE-2026-87512, CVE-2026-87585, CVE-2026-87444, CVE-2026-87447, CVE-2026-87440, CVE-2026-87633, CVE-2026-87525, CVE-2026-87578, CVE-2026-87517, CVE-2026-87524, CVE-2026-87569, CVE-2026-87554, CVE-2026-87467, CVE-2026-87492, CVE-2026-87520 (+210 other associated CVEs), Summary: The Chrome team is delighted to announce the…

CVSS 9.6 Google FI

tg: zneužíváno tg: zranitelnost tg: novinka v produktu

· NCSC-FI · Google Chrome Stable Channel Update

SPOJENO PŘES CVE Vulnérabilité dans Microsoft Edge (10 septembre 2026)

Une vulnérabilité a été découverte dans Microsoft Edge. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance. Microsoft indique que la vulnérabilité CVE-2026-85046 est activement exploitée.

KEV ✓ EPSS 0.01 CVE-2026-85046 Microsoft Google veřejná správa FR CA NL US IT

tg: zneužíváno tg: zranitelnost tg: regulace

· CERT-FR – avis · Vulnérabilité dans Microsoft Edge (10 septembre 2026) · Cyber Centre Kanada · Google security advisory (AV26-883) · NCSC-NL · NCSC-2026-0341 [1.00] [M/H] Kwetsbaarheden verholpen in Google Chrome · CISA Advisories · CISA Adds One Known Exploited Vulnerability to Catalog · CSIRT Itálie (ACN) · Google: rilevato sfruttamento di vulnerabilità zero-day in Chrome · CISA KEV · Google Chromium V8 Type Confusion Vulnerability (CVE-2026-85046)

Multiples vulnérabilités dans les produits Palo Alto Networks (10 septembre 2026)

De multiples vulnérabilités ont été découvertes dans les produits Palo Alto Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une injection de code indirecte à distance (XSS).

Palo Alto Networks FR

tg: zranitelnost

· CERT-FR – avis · Multiples vulnérabilités dans les produits Palo Alto Networks (10 septembre 2026)

Multiples vulnérabilités dans HPE Aruba Networking ClearPass Policy Manager (10 septembre 2026)

De multiples vulnérabilités ont été découvertes dans HPE Aruba Networking ClearPass Policy Manager. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

EPSS 0.01 CVE-2026-73769 CVE-2026-73786 CVE-2026-73787 CVE-2026-73788 CVE-2026-73789 HPE FR

tg: zranitelnost

· CERT-FR – avis · Multiples vulnérabilités dans HPE Aruba Networking ClearPass Policy Manager (10 septembre 2026)

36

SPOJENO PŘES CVE Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks

Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks. [...]

KEV ✓ EPSS 0.76 CVE-2026-20079 Cisco veřejná správa US

tg: zneužíváno tg: zranitelnost tp: identita

· BleepingComputer · Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks · CISA KEV · Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-20079) · Cisco PSIRT · Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability

Fortinet security advisory (AV26-023) - Update 1

Serial number: AV26-023Date: January 13, 2026Updated: September 9, 2026 On January 13, 2026, Fortinet published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following: FortiFone 7.0 – versions 7.0.0 to 7.0.1 FortiFone 3.0 – versions 3.0.13 to 3.0.23 FortiOS 7.6 – versions 7.6.0 to 7.6.3 FortiOS 7.4 – versions 7.4.0 to 7.4.8 FortiOS 7.2 – versions 7.2.0 to 7.2.11 FortiOS 7.0 – versions 7.0.0 to 7.0.17 FortiOS 6.4 – versions 6.4.0 to…

KEV ✓ EPSS 0.45 CVE-2025-25249 CVE-2025-47855 CVE-2025-64155 Fortinet CA

tg: zneužíváno tg: zranitelnost

· Cyber Centre Kanada · Fortinet security advisory (AV26-023) - Update 1

Cisco Advance Notification for Publication of September 16, 2026, Security Advisories

On September 16, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: BroadWorks CommPilot Application Software Identity Services Engine (ISE) (security hardening release) Nexus Dashboard (security hardening release) Secure Firewall Adaptive Security Appliance (ASA) (security hardening release) Secure Firewall Management Center (FMC) (security…

Cisco US

tg: zranitelnost tg: novinka v produktu

· Cisco PSIRT · Cisco Advance Notification for Publication of September 16, 2026, Security Advisories

MISP security advisory (AV26-901)

Serial Number: AV26-901Date: September 9, 2026 As of September 4, 2026, misp is affected by vulnerabilities in the following product: misp Prior to or equal to 2.5.45 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Authorise the sharing group whenever one is submitted

MISP CA

tg: zranitelnost

· Cyber Centre Kanada · MISP security advisory (AV26-901)

NVIDIA security advisory (AV26-900)

Serial Number: AV26-900Date: September 9, 2026 As of September 8, 2026, NVIDIA is affected by vulnerabilities in the following product: Triton Inference Server Versions 0.0 to 26.03 Versions 0.0 to 26.06 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Bulletin: Triton Inference Server - September 2026 NVIDIA Product Security

NVIDIA CA

tg: zranitelnost tp: AI

· Cyber Centre Kanada · NVIDIA security advisory (AV26-900)

Aggiornamenti Ivanti

Ivanti ha rilasciato aggiornamenti di sicurezza che sanano 10 vulnerabilità, di cui 6 con gravità "critica" e 4 con gravità "alta" in alcuni prodotti. Tali vulnerabilità potrebbero consentire a un attaccante remoto, in alcuni casi non autenticato, di eseguire codice arbitrario sui sistemi interessati, di eludere i meccanismi di autorizzazione o di ottenere privilegi elevati.

EPSS 0.02 CVE-2026-12645 CVE-2026-12646 CVE-2026-12647 CVE-2026-12648 CVE-2026-12650 CVE-2026-12651 CVE-2026-12744 CVE-2026-12745 CVE-2026-18851 CVE-2026-83527 Ivanti IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Aggiornamenti Ivanti

NCSC-2026-0364 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Illustrator

Adobe heeft meerdere kwetsbaarheden verholpen in Adobe Illustrator. De kwetsbaarheden bevinden zich in de wijze waarop Adobe Illustrator bestanden verwerkt. Eén kwetsbaarheid betreft een onjuiste autorisatie die het mogelijk maakt dat een aanvaller willekeurige code uitvoert wanneer een gebruiker een kwaadaardig bestand opent. Een andere kwetsbaarheid betreft onjuiste inputvalidatie, waardoor eveneens code-uitvoering mogelijk is bij het openen van speciaal vervaardigde bestanden. Daarnaast is…

Adobe NL

tg: zranitelnost

· NCSC-NL · NCSC-2026-0364 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Illustrator

NCSC-2026-0363 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Experience Manager

Adobe heeft meerdere kwetsbaarheden verholpen in Adobe Experience Manager. Adobe Experience Manager bevat meerdere Cross-Site Scripting (XSS) kwetsbaarheden, waaronder DOM-based en stored XSS. Deze kwetsbaarheden stellen een aanvaller in staat om kwaadaardige JavaScript-code te injecteren en uit te voeren binnen de browsers van gebruikers die een speciaal vervaardigde webpagina bezoeken of met deze pagina's interacteren. De stored XSS kwetsbaarheden ontstaan door onvoldoende input sanitatie en…

Adobe NL

tg: zranitelnost

· NCSC-NL · NCSC-2026-0363 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Experience Manager

Commvault security advisory (AV26-899)

Serial Number: AV26-899Date: September 9, 2026 Commvault security advisory (AV26-899) As of September 8, 2026, Commvault is affected by vulnerabilities in the following product: Commvault Cloud 36.0 Prior to 11.36.123 40.0 Prior to 11.40.72 44.0 Prior to 11.44.20 46.0 Prior to 11.46.20 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Commvault Cloud Security Advisories

Commvault CA

tg: zranitelnost

· Cyber Centre Kanada · Commvault security advisory (AV26-899)

NCSC-2026-0362 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe ColdFusion

Adobe heeft meerdere kwetsbaarheden verholpen in Adobe ColdFusion. De kwetsbaarheden in Adobe ColdFusion omvatten onder andere een stored Cross-Site Scripting (XSS) waarbij een aanvaller met lage privileges kwaadaardige scripts kan injecteren in formulier velden die vervolgens uitgevoerd worden in de browser van een gebruiker. Daarnaast is er een kwetsbaarheid in de dynamische code-evaluatie die het mogelijk maakt voor een aanvaller met lage privileges om zonder gebruikersinteractie…

Adobe NL

tg: zranitelnost

· NCSC-NL · NCSC-2026-0362 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe ColdFusion

SPOJENO PŘES CVE Kritisk sårbarhet i Citrix NetScaler ADC och NetScaler Gateway

Citrix har publicerat information om en kritisk sårbarhet som påverkar Citrix NetScaler ADC och NetScaler Gateway. Sårbarheten, CVE-2026-19490, har fått CVSS v.4-klassning på 9.3. [1, 2]

KEV ✓ EPSS 0.06 CVSS 9.3 CVE-2026-19490 Citrix SE US

tg: zneužíváno tg: zranitelnost tp: identita

· CERT-SE · Kritisk sårbarhet i Citrix NetScaler ADC och NetScaler Gateway · CISA KEV · Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-19490) · BleepingComputer · Critical Citrix NetScaler auth bypass now leveraged in attacks · Rapid7 · CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway

Fortinet security advisory (AV26-898)

Serial Number: AV26-898Date: September 9, 2026 As of September 8, 2026, Fortinet is affected by vulnerabilities in the following products: FortiOS 7.6 Versions 7.6.1 to 7.6.6 FortiProxy 7.6 Versions 7.6.2 to 7.6.6 FortiPAM Chrome Extension 8.0 All versions FortiPAM Chrome Extension 7.4 All versions FortiSandbox 5.0 Versions 5.0.0 to 5.0.5 FortiSandbox 4.4 Versions 4.4.0 to 4.4.8 FortiSandbox Cloud 5.0 Versions 5.0.4 to 5.0.5 FortiSandbox PaaS 5.0 Versions 5.0.4 to 5.0.5 FortiMonitorOnSight 7.2…

Fortinet CA

tg: zranitelnost

· Cyber Centre Kanada · Fortinet security advisory (AV26-898)

NCSC-2026-0361 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Commerce

Adobe heeft meerdere kwetsbaarheden verholpen in Adobe Commerce. De kwetsbaarheden betreffen onder andere stored Cross-Site Scripting (XSS) waarbij aanvallers kwaadaardige JavaScript-code kunnen injecteren in formulier velden binnen de applicatie. Deze code wordt uitgevoerd in de context van de browser van het slachtoffer en kan ongeautoriseerde acties uitvoeren, zoals het kapen van sessies of het escaleren van privileges. Daarnaast zijn er meerdere incorrecte autorisatieproblemen…

Adobe NL

tg: zranitelnost

· NCSC-NL · NCSC-2026-0361 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Commerce

NCSC-2026-0360 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Photoshop Desktop

Adobe heeft meerdere kwetsbaarheden verholpen in Adobe Photoshop Desktop. De kwetsbaarheden bevinden zich in de verwerking van speciaal vervaardigde bestanden binnen Adobe Photoshop Desktop. Deze omvatten out-of-bounds write, integer overflow of wraparound, uncontrolled search path element en heap-based buffer overflow. Door het openen van kwaadaardig opgemaakte bestanden kan een aanvaller code uitvoeren met de privileges van de gebruiker die de applicatie draait. De kwetsbaarheden kunnen…

Adobe NL

tg: zranitelnost

· NCSC-NL · NCSC-2026-0360 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Photoshop Desktop

NCSC-2026-0359 [1.00] [M/H] Kwetsbaarheid verholpen in Ivanti Endpoint Manager Mobile

Ivanti heeft een kwetsbaarheid verholpen in Ivanti Endpoint Manager Mobile. De kwetsbaarheid betreft een ontbrekende autorisatiecontrole in Ivanti Endpoint Manager Mobile versies ouder dan 12.10.0.0, 12.9.0.2 en 12.8.0.4. Hierdoor kunnen geauthenticeerde gebruikers hun privileges verhogen tot een administratief niveau.

Ivanti NL

tg: zranitelnost

· NCSC-NL · NCSC-2026-0359 [1.00] [M/H] Kwetsbaarheid verholpen in Ivanti Endpoint Manager Mobile

NCSC-2026-0357 [1.00] [M/H] Kwetsbaarheid verholpen in Ivanti Sentry

Ivanti heeft een kwetsbaarheid verholpen in Sentry versies voorafgaand aan R10.8.2, R10.7.3 en R10.6.4. De kwetsbaarheid betreft een authenticatie-bypass die het mogelijk maakt voor externe aanvallers zonder authenticatie om administratieve toegang tot het systeem te verkrijgen. Deze kwetsbaarheid treft meerdere releases van het Sentry-platform en kan leiden tot ongeautoriseerde controle over administratieve functies.

Ivanti NL

tg: zranitelnost tp: identita

· NCSC-NL · NCSC-2026-0357 [1.00] [M/H] Kwetsbaarheid verholpen in Ivanti Sentry

2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server

On 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP) processing, nicknamed "OVERPASS" by the Onapsis Research Labs (ORL), which discovered and responsibly disclosed it[3]. The second, CVE-2026-58240 (CVSS 9.8), nicknamed "S4GET", is a missing authentication…

EPSS 0.00 CVSS 10.0 CVE-2026-44756 CVE-2026-58240 SAP EU

tg: zranitelnost

· CERT-EU · 2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server

Aggiornamenti di sicurezza Android

Aggiornamenti di sicurezza Google sanano 104 vulnerabilità, di cui 31 con gravità “critica” e 73 con gravità “alta”, nei componenti Android. Tali vulnerabilità, qualora sfruttate, potrebbero consentire di eseguire codice arbitrario, elevare i privilegi, accedere a informazioni riservate o compromettere la disponibilità del servizio sui dispositivi interessati.

Google Android IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Aggiornamenti di sicurezza Android

NCSC-2026-0356 [1.00] [M/H] Kwetsbaarheden verholpen in diverse SAP-producten

SAP heeft kwetsbaarheden verholpen in SAP Extended Passport Protocol (EPP) processing library, SAP NetWeaver Message Server, @sap/cds-mtxs NPM library, SAP GUI for Java, SAP ABAP Development Tools voor SAP NetWeaver AS ABAP, SAP Integration Suite, SAP NetWeaver Business Client, SAP Web Dispatcher, Internet Communication Manager, SAP Content Server, SAP S/4HANA Intercompany Matching and Reconciliation module, en SAP Manufacturing Integration and Intelligence. De kwetsbaarheid met kenmerk CVE…

EPSS 0.00 CVE-2026-44756 CVE-2026-58240 CVE-2026-66768 CVE-2026-76969 SAP NL

tg: zranitelnost tp: identita

· NCSC-NL · NCSC-2026-0356 [1.00] [M/H] Kwetsbaarheden verholpen in diverse SAP-producten

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability CVE-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-87491 Google Chromium V8 Out of Bounds Write Vulnerability CVE-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel…

KEV ✓ EPSS 0.76 CVE-2025-25249 CVE-2026-19490 CVE-2026-20079 CVE-2026-87491 Fortinet Citrix Google Cisco veřejná správa US

tg: zneužíváno tg: zranitelnost tg: regulace

· CISA Advisories · CISA Adds Four Known Exploited Vulnerabilities to Catalog

SPOJENO PŘES CVE N-able: rilevato sfruttamento in rete della CVE-2026-86218 in N-central

Gli aggiornamenti di sicurezza rilasciati da N-able sanano tre vulnerabilità, di cui una con gravità "critica" ed una con gravità "alta", in N-central, piattaforma per il monitoraggio e la gestione remota delle infrastrutture IT. Tra queste si segnala la CVE-2026-86218 che risulta essere attivamente sfruttata in rete.

KEV ✓ EPSS 0.01 CVE-2026-86218 N-able IT CA US

tg: zneužíváno tg: zranitelnost

· CSIRT Itálie (ACN) · N-able: rilevato sfruttamento in rete della CVE-2026-86218 in N-central · Cyber Centre Kanada · N-able security advisory (AV26-885) · CISA KEV · N-able N-central Static Code Injection Vulnerability (CVE-2026-86218)

SPOJENO PŘES CVE NCSC-2026-0355 [1.00] [M/H] Kwetsbaarheden verholpen in Fortinet Forti-producten

Fortinet heeft kwetsbaarheden verholpen in FortiAnalyzer, FortiOS, FortiPAM, FortiProxy, FortiSandbox, FortiManager, FortiManager Cloud, FortiMonitorOnSight, FortiClient Windows, FortiSIEM en FortiSOAR. De kwetsbaarheden betreffen verschillende typen fouten in meerdere Fortinet-producten. De ernstigste kwetsbaarheid met kenmerk CVE-2026-26084 heeft een CVSS-score van 8,9. Het betreft een autorisatiekwetsbaarheid in Fortinet FortiSandbox waardoor een ongeauthenticeerde kwaadwillende via speciaal…

EPSS 0.00 CVSS 8.9 CVE-2026-26084 Fortinet NL FI

tg: zranitelnost

· NCSC-NL · NCSC-2026-0355 [1.00] [M/H] Kwetsbaarheden verholpen in Fortinet Forti-producten · NCSC-FI · FortiSandbox Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information