Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
CERT Polska has found 6 vulnerabilities (from CVE-2026-67276 to CVE-2026-67279, CVE-2026-67281 and CVE-2026-86060) in Mikrotik RouterOS software.
KEV ✓ EPSS 0.09 CVE-2026-67276 CVE-2026-67279 CVE-2026-67281 CVE-2026-86060 MikroTik PL
The CERT Polska team has identified and coordinated the disclosure of six vulnerabilities in MikroTik RouterOS, including two critical ones. The vulnerabilities are already being actively exploited to take over devices whose SSH service is accessible from the internet. We recommend immediately updating devices to the patched versions and verifying the configuration for signs of compromise.
MikroTik PL
Classification: Severe, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: None, CVEs: CVE-2026-85046, CVE-2026-85052, CVE-2026-85043, CVE-2026-85048, CVE-2026-85045, CVE-2026-85050, CVE-2026-85053, CVE-2026-85042, CVE-2026-85049, CVE-2026-85051, CVE-2026-85047, CVE-2026-85044, Summary: The Stable channel has been updated to 152.0.7977.82/.83 for Windows and Mac and 152.0.7977.82 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available…
KEV ✓ EPSS 0.02 CVE-2026-85042 CVE-2026-85043 CVE-2026-85044 CVE-2026-85045 CVE-2026-85046 CVE-2026-85047 CVE-2026-85048 CVE-2026-85049 CVE-2026-85050 CVE-2026-85051 CVE-2026-85052 CVE-2026-85053 Google FI
Dirty Frag turns low-privileged Linux access into root, and can escape containers. The affected CVEs, how to check if you're exposed, and how to fix it. Category: Vulnerabilities & Threats
EPSS 0.94 CVE-2026-43284 Linux BE HU
Aggiornamenti di sicurezza Jenkins sanano molteplici vulnerabilità, di cui 6 con gravità "alta", presenti nel software open source per l'automazione di processi di integrazione e distribuzione continua (CI/CD).
EPSS 0.01 CVE-2026-84645 CVE-2026-84647 CVE-2026-84648 CVE-2026-84649 CVE-2026-84650 CVE-2026-84652 Jenkins IT
An anonymous security researcher who uses the "Nightmare Eclipse" handle released a CrowdStrike Falcon zero-day exploit named "FalconFlank" that lets attackers escalate privileges on up-to-date Windows systems. [...]
CrowdStrike US
Aggiornamenti di sicurezza risolvono una vulnerabilità con gravità "alta" in Plesk, software per la gestione di server web. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eseguire codice arbitrario sui sistemi interessati.
EPSS < 0.01 CVE-2026-67397 Plesk IT
In a joint advisory released Thursday, the G7 Cyber Security Working Group and the U.S. Cybersecurity and Infrastructure Security Agency, CISA, said organizations should begin moving to post-quantum cryptography now.
US
Rilasciati aggiornamenti per risolvere una vulnerabilità di sicurezza, con gravità “critica”, che interessano il prodotto ASUS Control Center.
EPSS < 0.01 CVE-2026-75754 ASUS IT
Google has updated the Chrome browser to address an actively exploited high-severity zero-day flaw in the V8 engine and 11 other vulnerabilities. [...]
CVE-2026-11645 * CVE-2026-2441 * CVE-2026-3909 * CVE-2026-3910 * CVE-2026-5281 * CVE-2026-85046 * Google US
CONTEXT HPE a emis o alertă de securitate privind mai multe vulnerabilități identificate î...
HPE RO
Aggiornamenti di sicurezza Elastic sanano 2 vulnerabilità con gravità "alta" nel prodotto Kibana.
EPSS < 0.01 CVE-2026-78583 CVE-2026-82302 Elastic IT
Aggiornamenti di sicurezza TP-Link sanano due vulnerabilità, di cui una con gravità "alta", presente in TP-Link Archer AX55 v4. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato, con accesso alla rete locale e in presenza di specifiche configurazioni, di eseguire codice arbitrario e di compromettere la disponibilità del servizio sui sistemi interessati.
EPSS < 0.01 CVE-2026-18167 TP-Link IT
Classification: Critical, Solution: Temporary Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-15630, Summary: Casdoor is an open-source Access Management (IAM) platform used to manage web applications. An authorization bypass vulnerability affects Casdoor versions 3.115.0 and earlier. The vulnerability allows a non-global organization administrator to perform unauthorized administrative actions against arbitrary organizations by exploiting inconsistent object resolution…
EPSS < 0.01 CVE-2026-15630 Casdoor FI
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-73749, CVE-2026-73750, CVE-2026-73751, CVE-2026-73752, CVE-2026-73753, CVE-2026-73782, CVE-2026-73781, CVE-2026-73780, CVE-2026-73779, CVE-2026-73778, CVE-2026-73777, CVE-2026-73776, CVE-2026-73775, CVE-2026-73774, CVE-2026-73773, CVE-2026-73771, CVE-2026-73770, CVE-2026-73768, CVE-2026-73767, CVE-2026-73766 (+14 other associated CVEs), Summary: Potential Security Impact: Local: Access…
CVSS 9.8 HPE FI
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à l'intégrité des données.
IBM FR
De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Elles permettent à un attaquant de provoquer une atteinte à l'intégrité des données, un contournement de la politique de sécurité et un problème de sécurité non spécifié par l'éditeur.
EPSS 0.05 a dalších 9 CVE-2026-43206 CVE-2026-46037 CVE-2026-46242 CVE-2026-46274 CVE-2026-46319 CVE-2026-52923 CVE-2026-52956 CVE-2026-52972 CVE-2026-53133 CVE-2026-53182 CVE-2026-53205 CVE-2026-53224 CVE-2026-53233 CVE-2026-53246 CVE-2026-53366 CVE-2026-64530 CVE-2026-64600 SUSE Linux FR
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian. Elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un déni de service.
EPSS 0.01 CVE-2025-40074 CVE-2026-64216 CVE-2026-64581 CVE-2026-74626 CVE-2026-74653 CVE-2026-74662 CVE-2026-80536 CVE-2026-80557 CVE-2026-80562 CVE-2026-80572 CVE-2026-80583 CVE-2026-80590 CVE-2026-80725 Debian Linux FR
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et un déni de service à distance.
De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
EPSS 0.01 a dalších 6 CVE-2026-84329 CVE-2026-84331 CVE-2026-84332 CVE-2026-84334 CVE-2026-84335 CVE-2026-84347 CVE-2026-84348 CVE-2026-84349 CVE-2026-84350 CVE-2026-84351 CVE-2026-84353 CVE-2026-84354 CVE-2026-84355 CVE-2026-84356 CVE-2026-84357 CVE-2026-84358 CVE-2026-84359 Microsoft FR
De multiples vulnérabilités ont été découvertes dans Sonicwall Network Security Manager. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un contournement de la politique de sécurité.
EPSS 0.02 CVE-2026-78327 CVE-2026-78328 CVE-2026-81939 SonicWall FR
De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
EPSS < 0.01 CVE-2026-78583 CVE-2026-78593 CVE-2026-78595 CVE-2026-78596 CVE-2026-82298 CVE-2026-82299 CVE-2026-82302 Elastic FR
Serial Number: AV26-882Date: September 3, 2026 As of September 3, 2026, SUSE is affected by vulnerabilities in the following product: Rancher Prior to 2.15.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Release v2.15.1 · rancher/rancher · GitHub SUSE Update Advisories
SUSE CA
Serial Number: AV26-881Date: September 3, 2026 As of September 3, 2026, Siemens is affected by a vulnerability in the following products: Mendix SAML (Mendix 10 compatible) Prior to V4.2.3 Mendix SAML (Mendix 11 compatible) Prior to V4.2.3 Mendix SAML (Mendix 9.24 compatible) Prior to V3.6.27 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. SSA-887643: Account Hijacking Vulnerability in Mendix SAML…
Siemens CA
Serial Number: AV26-880Date: September 3, 2026 As of September 3, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 1.123.76 Prior to 2.35.4 Prior to 2.36.2 Prior to 2.37.7 Prior to 2.38.2 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Overview · n8n-io/n8n · GitHub
n8n CA
Hewlett Packard Enterprise (HPE) has patched a critical vulnerability in the ArubaOS-CX network operating system that could lead to remote code execution. [...]
CVE-2026-73749 * CVE-2026-73750 * CVE-2026-73751 * CVE-2026-73752 * CVE-2026-73753 * CVE-2026-73777 * CVE-2026-73778 * CVE-2026-73779 * CVE-2026-73780 * CVE-2026-73781 * CVE-2026-73782 * HPE US
Serial Number: AV26-879Date: September 3, 2026 As of September 2, 2026, AMD is affected by vulnerabilities in the following products: 2nd Gen AMD EPYC™ Processors all except RomePI 1.0.0.H 3rd Gen AMD EPYC™ Processors all except MilanPI 1.0.0.C 4th Gen AMD EPYC™ Processors all except GenoaPI 1.0.0.8 AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics all except ComboAM4 1.0.0.B all except ComboAM4v2 1.2.0.B AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics all except…
AMD CA
A recently patched critical vulnerability (CVE-2026-32475) in the Elementor Pro plugin for WordPress is being exploited in attacks that deliver a webshell payload and execute arbitrary commands on the server. [...]
EPSS 0.02 CVE-2026-32475 WordPress Elementor US
Aruba Networks heeft meerdere kwetsbaarheden verholpen in het AOS-CX netwerk besturingssysteem en de bijbehorende componenten, waaronder de command line interface, API endpoints en web-based management interface. De kwetsbaarheden in AOS-CX betreffen onder andere onbevoegde toegang via bypass van authenticatie, remote code execution door onjuiste verwerking van input zoals format strings en command injection, privilege escalatie door onjuiste toegang tot systeemfuncties, en denial-of-service…
Serial Number: AV26-878Date: September 3, 2026 As of September 2, 2026, F5 is affected by vulnerabilities in the following products: BIG-IP (all modules) Prior to 17.1.3.4 Prior to 17.5.1.8 Prior to 21.0.0.3 Prior to 21.1.0.1 BIG-IQ Prior to 8.4.2.1 NGINX Gateway Fabric Prior to 2.6.8 NGINX Ingress Controller Prior to 2026-lts-r5 Prior to 5.6.0 NGINX JavaScript 9.9 Prior to 1.0.1 APM Clients Prior to 7.2.6 BIG-IP APM Multiple versions The Cyber Centre encourages users and administrators to…
F5 CA
Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-62916 Microsoft US
Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-65818 US
Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network.
EPSS 0.01 CVE-2026-69857 US
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-83711 Microsoft US
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.
EPSS < 0.01 CVE-2026-80098 US
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70352 US
Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-70178 Microsoft US
Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVE-2026-62906 Microsoft US
Serial Number: AV26-877Date: September 3, 2026 As of September 2, 2026, Jenkins Project is affected by vulnerabilities in the following products: Jenkins ALL except 2.568.3 ALL except 2.580 Jenkins Allure Plugin Prior to or equal to 2.35.2 Jenkins Customizable Header Plugin Prior to or equal to 295.v2544b_ca_19b_97 Jenkins File Parameter Plugin Prior to or equal to 425.v3fa_801681b_5e Jenkins GitLab Plugin Prior to or equal to 1.9.16 Jenkins LDAP Plugin Prior to or equal to 807.809.vd3a…
Jenkins CA
HPE heeft meerdere kwetsbaarheden verholpen in HPE Networking Fabric Composer. De kwetsbaarheden in HPE Networking Fabric Composer betreffen onder andere authenticatiebypasses, privilege-escalaties, remote code execution, command injection, cross-site scripting (XSS), denial-of-service, arbitrary file write, path traversal, en onbevoegde toegang tot gevoelige informatie. Sommige kwetsbaarheden kunnen door ongeauthenticeerde aanvallers op afstand worden misbruikt, terwijl andere exploitatie…
EPSS 0.01 CVE-2026-76658 HPE NL
Rilevate 14 vulnerabilità di sicurezza, di cui una con gravità “critica” e 8 con gravità "alta", in Craft CMS, noto sistema di gestione dei contenuti utilizzato per la realizzazione di siti web.
EPSS 0.01 CVE-2026-79989 CVE-2026-79990 CVE-2026-79991 CVE-2026-84794 CVE-2026-84795 CVE-2026-84796 CVE-2026-84798 CVE-2026-84800 CVE-2026-84801 Craft CMS IT
Serial Number: AV26-876Date: September 3, 2026 As of September 2, 2026, Cisco is affected by vulnerabilities in the following products: Cisco IOS XR Software Multiple versions Cisco Nexus 9000 Series Switches Multiple products Cisco Desk Phone 9800 Series and Video Phone 8875 Prior to 5.0(1) IP Phone 7800 and 8800 Prior to 14.4(1)SR3 IP Phone 8845 and 8865 Prior to14.4(1)SR4 Wireless IP Phone 8821 Prior to 11.0(6)SR8 The Cyber Centre encourages users and administrators to review the provided…
Cisco CA
Rilasciati aggiornamenti di sicurezza per risolvere una vulnerabilità con gravità “alta” presente in prodotti Grafana, nota applicazione web per la visualizzazione e l’analisi interattiva di dati. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato, in presenza di specifiche condizioni, di eludere i meccanismi di autenticazione sui sistemi interessati.
EPSS < 0.01 CVE-2026-14199 Grafana IT
Cisco heeft kwetsbaarheden verholpen in Cisco Nexus 9000 Series Switches met Silicon One technologie, Cisco IOS XR Software en Cisco Secure Email. De ernstigste kwetsbaarheid betreft Nexus 9000-switches: als TCP 43210 of 43211 bereikbaar is, kan een aanvaller zonder authenticatie code met rootrechten uitvoeren en de switch laten herstarten. De IOS XR-kwetsbaarheden kunnen, afhankelijk van platform en configuratie, diverse beveiligingsfuncties ondermijnen. De Secure Email-kwetsbaarheden kunnen…
Cisco NL
Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-84115 – già sanata dal vendor – presente in Cleo Harmony.
EPSS < 0.01 CVE-2026-84115 Cleo IT
View CSAF Summary Successful exploitation of this vulnerability could result in memory corruption, a device crash, or a potential remote attack vector without the originating device receiving a CIP error indicating that the request could not be processed. The following versions of Pyramid Solutions NetStaX EtherNet/IP Stack are affected: EtherNet/IP Adapter DLL Kit (EIPA) EtherNet/IP Adapter DLL Kit with CIP Security (EIPA-SECURE) EtherNet/IP Adapter Development Kit (EADK) EtherNet/IP Adapter…
EPSS 0.01 CVSS 9.8 CVE-2026-78012 Pyramid Solutions výroba a průmysl energetika vodárenství US
View CSAF Summary Successful exploitation of these vulnerabilities could result in a loss of webserver availability or allow an attacker to inject malicious scripts that will be executed when other users access the affected page. The following versions of Rockwell Automation ArmorStart LT are affected: ArmorStart LT <=v2.001 (CVE-2026-19471, CVE-2026-19472) CVSS Vendor Equipment Vulnerabilities v3 7.5 Rockwell Automation Rockwell Automation ArmorStart LT Improper Neutralization of Input During…
EPSS 0.01 CVSS 7.5 CVE-2026-19471 CVE-2026-19472 Rockwell Automation výroba a průmysl US
View CSAF Summary Successful exploitation of this vulnerability could give an attacker the ability to run any commands or code of the attacker's choice on a target machine at the logged-in user's permission level. The following versions of Rockwell Automation ControlFLASH are affected: ControlFLASH <=V15.07 (CVE-2026-12663) CVSS Vendor Equipment Vulnerabilities v3 7.3 Rockwell Automation Rockwell Automation ControlFLASH Missing Authentication for Critical Function Background Critical…
EPSS < 0.01 CVSS 7.3 CVE-2026-12663 Rockwell Automation výroba a průmysl energetika vodárenství US
View CSAF Summary Schneider Electric is aware of a vulnerability in the following products: The Easergy C5 is a scalable and interoperable bay controller, protection and merging unit for large and critical infrastructure electrical distribution systems. The Easergy MiCOM P30 is a family of multifunction protection and control relays designed for medium, high and extra high voltage electrical networks. The Easergy MiCOM P40 is a protection relay series for Medium Voltage, High Voltage and Extra…
EPSS < 0.01 CVSS 8.3 CVE-2026-4827 Schneider Electric energetika vodárenství výroba a průmysl US
View CSAF Summary Successful exploitation of these vulnerabilities could allow for an attacker to perform a man-in-the-middle (MitM) attack, cause a factory reset, wipe credentials, or retrieve sensitive information. The following versions of Tycon Systems TPDIN-Monitor-WEB3 are affected: TPDIN-Monitor-WEB3 <=2.2.9 (CVE-2026-77847, CVE-2026-82712, CVE-2026-82684) CVSS Vendor Equipment Vulnerabilities v3 8.8 Tycon Systems Tycon Systems TPDIN-Monitor-WEB3 Use of Hard-coded Credentials, Cross-Site…
EPSS < 0.01 CVSS 8.8 CVE-2026-77847 CVE-2026-82684 CVE-2026-82712 Tycon Systems výroba a průmysl energetika US
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to take control of a high-privilege terminal during installation and run arbitrary commands. The following versions of OPCFoundation OPC UA LocalDiscoveryServer (LDS) are affected: UA-LDS-Installers <1.04.420 (CVE-2026-77477) CVSS Vendor Equipment Vulnerabilities v3 4.6 OPCFoundation OPCFoundation OPC UA LocalDiscoveryServer (LDS) Execution with Unnecessary Privileges Background Critical Infrastructure…
CVSS 4.6 CVE-2026-77477 OPC Foundation energetika vodárenství výroba a průmysl US
View CSAF Summary Successful exploitation of this vulnerability could allow any authenticated user to create projects. The following versions of Inductive Automation Ignition are affected: Ignition <=8.1.53 (CVE-2026-77393) CVSS Vendor Equipment Vulnerabilities v3 8.8 Inductive Automation Inductive Automation Ignition Incorrect Default Permissions Background Critical Infrastructure Sectors: Critical Manufacturing, Energy, Information Technology Countries/Areas Deployed: Worldwide Company…
EPSS 0.01 CVSS 8.8 CVE-2026-77393 Inductive Automation výroba a průmysl energetika US
View CSAF Summary Successful exploitation of these vulnerabilities could result in an attacker accessing sensitive credentials, disrupting connected infrastructure, or manipulating physical equipment, which could present a physical safety risk. The following versions of Tycon Systems TPDIN-Monitor-WEB2 (Update A) are affected: TPDIN-Monitor-WEB2 <2.4.5 (CVE-2026-61884, CVE-2026-55985) CVSS Vendor Equipment Vulnerabilities v3 9.8 Tycon Systems Tycon Systems TPDIN-Monitor-WEB2 Missing…
EPSS 0.01 CVSS 9.8 CVE-2026-55985 CVE-2026-61884 Tycon Systems výroba a průmysl US
View CSAF Summary Successful exploitation of this vulnerability could crash the module. The device requires a restart to recover. The following versions of Rockwell Automation 1756-ENBT Module are affected: 1756-ENBT module vers:all/* (CVE-2025-10478) CVSS Vendor Equipment Vulnerabilities v3 7.5 Rockwell Automation Rockwell Automation 1756-ENBT Module Improper Check for Unusual or Exceptional Conditions Background Critical Infrastructure Sectors: Critical Manufacturing, Food and Agriculture,…
CVSS 7.5 CVE-2025-10478 Rockwell Automation výroba a průmysl doprava vodárenství US
Plaintext Storage of a Password vulnerability (CVE-2026-15933) has been found in OptimiDoc Server (On-Premise) software.
EPSS 0.01 CVE-2026-15933 OptimiDoc PL
F5 ha rilasciato aggiornamenti di sicurezza che sanano 5 nuove vulnerabilità, di cui una con gravità "critica" e 4 con gravità “alta”, in prodotti NGINX, noto software per la gestione del traffico e degli applicativi web.
EPSS 0.01 CVE-2026-18329 CVE-2026-66362 CVE-2026-77180 CVE-2026-78222 CVE-2026-78689 F5 NGINX IT
A Nemzetbiztonsági Szakszolgálat Nemzeti Kiberbiztonsági Intézet (NBSZ NKI) riasztást ad ki Magyarország Ügyészségének nevével és arculati elemeivel visszaélő, zsarolóvírus fertőzéshez vezető adathalász üzenetekről. A bejelentések alapján a támadók hamis, hivatalos megkeresés látszatát keltő leveleket küldenek, amelyekben ügyészségi alkalmazottak nevével élnek vissza. A kampány célja az, hogy a felhasználó a levélben szereplő hivatkozásra kattintson, majd a […]
Cisco ha rilasciato aggiornamenti di sicurezza che risolvono 9 vulnerabilità, di cui 3 con gravità "critica" e 6 con gravità “alta”, che interessano diversi prodotti.
EPSS 0.01 CVE-2026-20212 CVE-2026-20274 CVE-2026-20275 CVE-2026-20276 CVE-2026-20277 CVE-2026-20278 CVE-2026-20279 CVE-2026-20280 CVE-2026-20281 Cisco IT FR
Multiple vulnerabilities in Ocsreports for OCS Inventory NG Fri, 08/28/2026 - 12:18 Aviso Affected Resources Ocsreports 2.12.4. Description INCIBE has coordinated the publication of 5 vulnerabilities: 1 of critical severity and 4 of high severity, affecting Ocsreports in OCS Inventory NG, an open-source solution for the management and inventory of hardware and software assets within an IT infrastructure. The vulnerabilities were discovered by Marc Monfort Muñoz.These vulnerabilities have been…
EPSS 0.01 CVSS 9.4 CVE-2026-76174 CVE-2026-76175 CVE-2026-76176 CVE-2026-76177 CVE-2026-76178 OCS Inventory NG ES