Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
IBM FR
De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Ubuntu FR
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et un déni de service à distance.
EPSS 0.01 a dalších 10 CVE-2026-46099 CVE-2026-52920 CVE-2026-52924 CVE-2026-53016 CVE-2026-53059 CVE-2026-53131 CVE-2026-53185 CVE-2026-53268 CVE-2026-63886 CVE-2026-63888 CVE-2026-63913 CVE-2026-64189 CVE-2026-64191 CVE-2026-64276 CVE-2026-64277 CVE-2026-64320 CVE-2026-74581 Red Hat FR
De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une atteinte à l'intégrité des données et un contournement de la politique de sécurité.
SUSE FR
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian. Elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un déni de service.
Debian FR
De multiples vulnérabilités ont été découvertes dans Tenable Enclave Security. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
EPSS 0.87 a dalších 4 CVE-2024-22017 CVE-2024-22019 CVE-2024-27980 CVE-2024-27983 CVE-2024-36138 CVE-2025-23166 CVE-2025-23167 CVE-2025-27210 CVE-2025-55130 CVE-2025-55131 CVE-2025-55132 CVE-2025-59465 CVE-2025-59466 CVE-2026-21637 CVE-2026-27140 CVE-2026-27143 CVE-2026-39822 Tenable FR
A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to execute arbitrary PHP code on the server. [...]
[VDE-2026-061] An information disclosure vulnerability in the web GUI of Murrelektronik Xelity switches causes MAC addresses from the device's MAC address table to be written into a server-side log that is exposed via the device's web interface to unauthenticated users. The leak is triggered when an authenticated administrator invokes the 'Copy learned MAC Addresses' function, which causes a syslog error that inserts the affected MAC addresses into the log output. Once the error has been…
EPSS < 0.01 CVE-2026-8173 Murrelektronik výroba a průmysl DE
[VDE-2026-083] Weidmueller security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by an unauthenticated remote code execution vulnerability. IE-SR-2TX-WL-4G routers are also affected by a SMS password authorization bypass vulnerability. Weidmueller has released new firmware versions of the affected products to fix the vulnerabilities.
EPSS 0.01 CVE-2026-63586 CVE-2026-63587 Weidmüller DE
Classification: Severe, Solution: Official Fix, Exploit Maturity: Proof-of-Concept, CVSSv3.1: 9.8, CVEs: CVE-2026-61979, CVE-2026-15981, Summary: The two vulnerabilities observed in exploitation attempts are tracked as CVE-2026-61979 and CVE-2026-15981 and can be chained together to bypass authentication. Because the miniOrange SAML SSO plugin accepts the signature algorithm from incoming SAML responses instead of enforcing the configured one, an attacker can leverage CVE-2026-61979 to select…
EPSS 0.01 CVSS 9.8 CVE-2026-15981 CVE-2026-61979 WordPress miniOrange FI US
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-77995, Summary: Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0 - The manipulation of a cookie value allows actors to login as arbitrary accounts, including admins.
EPSS < 0.01 CVSS 10.0 CVE-2026-77995 Joomla miniOrange FI
Executive Summary ShieldBreak (CVE-2026-69414) is a zero-day elevation-of-privilege vulnerability in the Microsoft Malware Protection Engine used by Microsoft Defender, allowing a low-privilege local attacker to escalate to SYSTEM. A public PoC was released on August 12, 2026, and Microsoft assigned the CVE on August 14, and no patch is available yet. Qualys VMDR provides detection across Windows environments, and Qualys TruRisk Eliminate offers a mitigation that teams can apply now, with…
EPSS 0.11 CVE-2026-50656 CVE-2026-69414 Microsoft US
Serial Number: AV26-841Date: August 21, 2026 As of August 18, 2026, Malcolm is affected by vulnerabilities in the following product: Malcolm Prior to 26.06.1 (CVE-2026-55676) Prior to 26.07.0 (CVE-2026-63133, CVE-2026-63134, CVE-2026-63177) Prior to or equal to 26.07.1 (CVE-2026-19670, CVE-2026-19671) The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. CISA Malcolm | CISA ICS Advisories | CISA
EPSS 0.01 CVSS 8.8 CVE-2026-19670 CVE-2026-19671 CVE-2026-55676 CVE-2026-63133 CVE-2026-63134 CVE-2026-63177 CISA CA US
[VDE-2026-078] Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.
EPSS 0.01 CVE-2026-14946 CVE-2026-14947 CVE-2026-14948 CVE-2026-14949 CVE-2026-14950 CVE-2026-14951 CVE-2026-14952 CVE-2026-14953 Frauscher Sensortechnik doprava DE
Rilasciati aggiornamenti di sicurezza per risolvere diverse vulnerabilità, di cui due con gravità “alta”, in Zimbra Collaboration, nota piattaforma di collaborazione e-mail sviluppata da Synacor Inc. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a utenti malintenzionati remoti di eseguire codice arbitrario sui sistemi interessati.
KEV ✓ EPSS 0.72 CVE-2026-50054 CVE-2026-73570 Synacor Zimbra IT
[vde-2025-056] This advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queries. Successful exploitation could impact the availability, integrity, and confidentiality of affected PLCnext Control devices. All issues are resolved in PLCnext firmware version 2026.0.3.
EPSS 0.01 CVE-2025-41769 CVE-2025-41770 CVE-2025-41771 Phoenix Contact DE
On August 12, 2026, we released versions 19.2.2, 19.1.4, 19.0.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch…
EPSS 0.01 CVSS 8.7 CVE-2025-9486 CVE-2026-10053 CVE-2026-15216 CVE-2026-15217 CVE-2026-15423 CVE-2026-16494 CVE-2026-16627 CVE-2026-18244 CVE-2026-18433 CVE-2026-19228 CVE-2026-4879 CVE-2026-6821 CVE-2026-7427 CVE-2026-8667 GitLab US
De multiples vulnérabilités ont été découvertes dans Roundcube. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une falsification de requêtes côté serveur (SSRF).
EPSS 0.01 CVE-2026-74997 CVE-2026-74998 CVE-2026-74999 CVE-2026-75000 CVE-2026-75002 CVE-2026-75004 CVE-2026-75006 CVE-2026-75007 CVE-2026-75010 Roundcube FR
[VDE-2025-007] The Year 2038 Problem affects systems using a 32-bit integer to represent time as the number of seconds since January 1, 1970. On January 19, 2038, at 03:14:07 UTC, the time value will exceed the maximum for a 32-bit integer, causing an overflow and resetting it to a negative number.
EPSS < 0.01 CVE-2025-0101 WAGO DE
[PPSA-2026-003] The Linux kernel used in the IndustrialPI, 'linux-image-revpi-v8', prior to version 6.12.91-revpi0-rpi-v8 contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can give an attacker full control over the device.
KEV ✓ EPSS 0.98 CVE-2026-31431 CVE-2026-43284 CVE-2026-46300 Pilz výroba a průmysl DE
OverviewOn July 29, 2026, the Ruby on Rails project published a security advisory for CVE-2026-66066, an arbitrary file read in Active Storage applications that use the Vips image processor with untrusted uploads. The affected Active Storage ranges are < 7.2.3.2, >= 8.0, < 8.0.5.1, and >= 8.1, < 8.1.3.1. Vips is the default Active Storage variant processor for applications that load Rails 7.0 or later defaults. Rails 6 applications are affected only when they explicitly configure Vips.Our…
EPSS 0.30 CVSS 9.5 CVE-2026-66066 Ruby on Rails US IT
For the latest discoveries in cyber research for the week of 27th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Minnesota IT Services has confirmed coordinated cyberattacks affecting more than 30 community water utilities across the state. The incidents briefly disrupted a treatment plant in Braham and affected industrial control systems. Officials reported that drinking water safety was not affected. While the attack was not officially attributed, federal…
KEV ✓ · ransomware EPSS 0.95 CVSS 9.8 CVE-2026-20316 CVE-2026-42897 CVE-2026-59309 CVE-2026-59310 CVE-2026-59726 CVE-2026-63077 CVE-2026-66066 Cisco Broadcom JetBrains Microsoft vodárenství finance zdravotnictví telekomunikace IL
[VDE-2026-065] A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application directory.
EPSS < 0.01 CVE-2026-9593 Endress+Hauser DE
[VDE-2026-008] Multiple vulnerabilities have been identified in the firmware of CHARX SEC-3xxx EV charging controllers, including the CHARX SEC-3000, SEC-3050, SEC-3100, and SEC-3150 models. The flaws could allow attackers to compromise the devices remotely, resulting in a complete loss of confidentiality, integrity, and availability.
EPSS 0.02 a dalších 3 CVE-2026-44093 CVE-2026-44094 CVE-2026-44095 CVE-2026-44096 CVE-2026-44097 CVE-2026-44098 CVE-2026-44099 CVE-2026-44100 CVE-2026-44101 CVE-2026-44102 CVE-2026-44103 CVE-2026-44104 CVE-2026-44105 CVE-2026-44106 CVE-2026-44107 CVE-2026-44108 CVE-2026-7849 Phoenix Contact energetika doprava DE
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Phoenix Contact CHARX SEC-3000 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-41032.
EPSS < 0.01 CVSS 6.5 CVE-2026-41032 Phoenix Contact US DE
[Advisory2026-06_VDE-2026-041] CODESYS PROFINET is an add‑on for the CODESYS Development System that provides a fully integrated PROFINET protocol stack along with diagnostic capabilities. When a PROFINET Controller is configured, this vulnerable protocol stack is downloaded to and executed by CODESYS Control runtime systems. The vulnerability in the CODESYS PROFINET Controller is caused by an out‑of‑bounds write during the processing of received invalid PROFINET communication data. Triggering…
EPSS < 0.01 CVE-2026-35226 CODESYS DE
On July 29, 2026, we released versions 19.2.1, 19.1.3, 19.0.5 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch…
EPSS 0.01 CVSS 8.5 CVE-2025-14562 CVE-2026-12436 CVE-2026-13113 CVE-2026-14341 CVE-2026-14351 CVE-2026-15077 CVE-2026-15831 CVE-2026-15975 CVE-2026-16553 CVE-2026-3093 CVE-2026-4672 CVE-2026-6267 CVE-2026-6336 GitLab US
Apple ha rilasciato aggiornamenti di sicurezza per risolvere diverse vulnerabilità presenti nei propri prodotti.
Apple IT
[VDE-2026-076] The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bundled third-party components dnsmasq, OpenSC and OpenSSL. All are fixed in firmware 2.3.0.
EPSS 0.03 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 CVE-2025-69421 CVE-2026-14167 CVE-2026-14168 CVE-2026-14169 CVE-2026-14171 CVE-2026-22795 CVE-2026-22796 CVE-2026-2291 CVE-2026-40510 CVE-2026-4893 CVE-2026-5172 ads-tec Industrial IT Weidmüller DE
[VDE-2026-085] A remote unauthenticated attacker can exploit a SQL injection vulnerability in PROCON-WEB SCADA to execute arbitrary commands.
EPSS 0.01 CVE-2026-16462 Weidmueller DE
[VDE-2026-077] The affected products belong to the Controller or Servo Drive product family and contain a vulnerability in a security-critical activation mechanism for service access. The signature verification of a file used for SSH activation can be compromised, which could allow unauthorized access to the device.
EPSS < 0.01 CVE-2026-14837 Lenze výroba a průmysl DE
[VDE-2026-044] Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.
[VDE-2026-058] Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual
Helmholz DE
[VDE-2026-045] A vulnerability was discovered in several Endress+Hauser products that can be accessed via ethernet.
EPSS 0.01 CVE-2024-8751 Endress+Hauser DE
Adobe ha rilasciato aggiornamenti di sicurezza per risolvere molteplici vulnerabilità, di cui 13 con gravità “critica” e 50 con gravità “alta”, in molteplici prodotti.
Adobe IT
Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
EPSS 0.01 CVE-2026-54982 Plug US IT
[VDE-2026-063] Multiple Murrelektronik network-enabled devices respond to SNMPv2c 'GETBULK' requests with disproportionately large response packets when the requesting party specifies a large max-repetitions value. This response amplification allows the affected devices to be misused as reflectors in distributed denial-of-service (DDoS) attacks against arbitrary third-party victims on the internet.
EPSS 0.05 CVE-2008-4309 Murrelektronik DE
[VDE-2026-066] This update deploys cumulative Microsoft Windows security patches through March 2026 for LTSB 2016, LTSC 2019, and LTSC 2021.
EPSS 0.02 CVE-2026-23673 CVE-2026-25171 CVE-2026-25172 CVE-2026-25174 CVE-2026-25175 CVE-2026-25179 CVE-2026-25181 CVE-2026-25185 CVE-2026-26111 CVE-2026-26128 METTLER TOLEDO Microsoft DE
[VDE-2026-062] Several Murrelektronik devices using Profinet are shipped with the default SNMP community names ('public' for read access and 'private' for write access). If these community strings remain unchanged in the field, an unauthenticated attacker with network access to the device can read its configuration and, depending on the writable OIDs, modify device settings.
EPSS 0.29 CVE-1999-0517 Murrelektronik DE
[Advisory2026-04_VDE-2026-040] CODESYS EtherNet/IP is an add‑on for the CODESYS Development System that provides a fully integrated EtherNet/IP protocol stack along with diagnostic capabilities. A flaw in the EtherNet/IP adapter protocol stack library results in a vulnerability within the generated application code. When an EtherNet/IP adapter is configured, this vulnerable protocol stack is downloaded to and executed by CODESYS Control runtime systems. Under certain non‑standard operating…
EPSS < 0.01 CVE-2026-35225 CODESYS DE
[VDE-2026-031] Certain devices in the WAGO System I/O Field series enable an internal diagnostic capability during the initial stages of system startup. This behavior, which is not part of the publicly documented feature set, briefly allows access to system functions before the main operating environment becomes fully active. Under specific conditions, this could permit interactions with system components that are normally protected during regular operation.
EPSS 0.01 CVE-2026-4769 WAGO DE
Aggiornamenti di sicurezza sanano due vulnerabilità con gravità “critica” in Metabase, piattaforma open source di Business Intelligence (BI). Tali vulnerabilità, qualora sfruttate, consentirebbero a un utente malintenzionato autenticato di eseguire codice arbitrario sui sistemi interessati
EPSS 0.04 CVE-2026-59826 CVE-2026-59827 Metabase IT
[VDE-2026-071] Multiple products from JUMO are affected by webserver vulnerability "CVE-2013-6786, CVE-2014-9222, CVE-2014-9223. This vulnerability leads to DOS of the device by using a misfortune cookie and reflected XSS attacks.
EPSS 0.74 CVE-2013-6786 CVE-2014-9222 CVE-2014-9223 JUMO Allegro DE
[VDE-2026-039] The MBS Universal Gateways (UGW-A-Series, UGW-X-Series) connect devices using various digital communication protocols within the field of building automation. Several security vulnerabilities have been identified in the UGW web GUI and the underlying firmware, affecting version V6_0_0_5 and earlier. Among other things, several CGI methods are affected by insufficient input validation and a lack of bounds checking. These flaws allow authorized attackers to perform arbitrary file…
EPSS < 0.01 CVE-2026-35075 CVE-2026-35076 CVE-2026-35077 CVE-2026-35078 CVE-2026-35079 CVE-2026-35080 CVE-2026-35081 CVE-2026-35082 CVE-2026-35083 CVE-2026-35084 CVE-2026-35085 MBS DE
[VDE-2025-067] Motherbox 3 with firmware 1.44 to 1.48 allows an unauthenticated remote attacker read-only access to the internal DB with measurement values from other W&T sensor devices.
EPSS < 0.01 CVE-2025-41689 Wiesemann & Theis DE
[VDE-2026-049] Security advisory for Balluff BNI EGW-720-007-K095 and BAV MA-NC-00025-01 firmware versions prior to 2.4.1. This advisory covers multiple vulnerabilities affecting software components used by the device firmware.
EPSS 0.98 a dalších 3 CVE-2022-23498 CVE-2022-24812 CVE-2022-26148 CVE-2022-28391 CVE-2022-28660 CVE-2022-29170 CVE-2022-31097 CVE-2023-3128 CVE-2024-1442 CVE-2024-56406 CVE-2024-9264 CVE-2025-15467 CVE-2025-41115 CVE-2025-4674 CVE-2025-61732 CVE-2025-68121 CVE-2026-1229 Balluff DE
[VDE-2026-046] Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed credentials. It was found that users with no or low rights can access information from devices that should not be available to them. An attacker can use this information to impersonate authorized users.
EPSS < 0.01 CVE-2026-3323 VEGA DE
On June 24, 2026, we released versions 19.1.1, 19.0.3, 18.11.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch…
EPSS 0.01 CVSS 8.7 CVE-2026-0934 CVE-2026-10086 CVE-2026-10712 CVE-2026-11379 CVE-2026-12053 CVE-2026-12635 CVE-2026-1606 CVE-2026-2238 CVE-2026-3176 CVE-2026-5309 CVE-2026-5796 CVE-2026-5952 CVE-2026-8330 GitLab US
[VDE-2026-070] There is a vulnerability in myREX24V2/myREX24V2.virtual that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.
EPSS 0.01 CVE-2026-10521 Helmholz MB connect line DE
Aggiornamenti di sicurezza sanano una vulnerabilità con gravità “alta” in prodotti TP-Link. Tale vulnerabilità, qualora sfruttata, potrebbe consentire a un utente malintenzionato di eseguire codice arbitrario sui sistemi interessati.
EPSS 0.01 CVE-2026-11834 TP-Link IT
[Advisory2026-02_VDE-2026-011] The CODESYS Control runtime system provides a user management mechanism with multiple privilege groups. While only the privileged Administrators and Developer groups are intended to load or debug applications on the controller, users in the restricted Service group are allowed to perform maintenance operations, including explicitly replacing the boot application. In addition to access control, the CODESYS Control runtime system includes an optional application…
EPSS < 0.01 CVE-2025-41660 CODESYS DE
[Advisory2026-03_VDE-2026-018] The CODESYS Control runtime system's CmpAuditLog component allows potentially unauthenticated remote attackers to control the format string of processed log messages. Due to the internal processing logic, the impact is limited to a crash of the CODESYS Control runtime.
EPSS < 0.01 CVE-2026-3509 CODESYS DE
[Advisory2026-08_VDE-2026-056] The CODESYS Control runtime system provides a user management mechanism with multiple privilege groups including the visualization administrators group, which is intended solely to manage visualization users. Due to insufficient authorization checks an authenticated remote user with low-privileged visualization administrator access can delete higher-privileged accounts. However, independent mechanisms protect the deletion of the last remaining device admin user,…
EPSS < 0.01 CVE-2026-8046 CODESYS DE
[Advisory2026-10_VDE-2026-057] The CmpWebServer component in the CODESYS Control Runtime allows users to create browser-based visualizations for monitoring and controlling industrial processes. Due to improper bounds checking, a specially crafted HTTP request from an unauthenticated remote attacker may lead to a size-limited out-of-bounds write, causing a denial of service of the affected device. The CODESYS Control runtime system is only affected if the web server is active, which by default…
EPSS < 0.01 CVE-2026-8047 CODESYS DE
Aggiornamento di sicurezza Google di giugno risolve molteplici vulnerabilità, di cui 11 con gravità “critica” e 20 con gravità “alta”, nei dispositivi Pixel.
Google IT
[VDE-2026-038] Multiple vulnerabilities have been identified in the TBEN-Lx-SE-M2 firmware prior to version 2.1.2.0 in Managed Ethernet Switches.
EPSS 0.42 CVE-2025-68615 CVE-2026-5416 TURCK DE
Rilevata una vulnerabilità di sicurezza con gravità “alta” in componenti UEFI shim utilizzati da diversi prodotti software e ambienti di avvio, firmati tramite la catena di certificazione Microsoft UEFI. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di protezione Secure Boot ed eseguire codice arbitrario nella fase di avvio dei sistemi interessati.
EPSS < 0.01 CVE-2026-8863 Microsoft IT US
Rilasciati gli aggiornamenti di sicurezza di giugno che risolvono 4 nuove vulnerabilità, di cui due con gravità “critica” e due con gravità “alta”, in diversi prodotti Ivanti. Tra queste, si evidenzia la CVE-2026-10520, per la quale risulta disponibile un Proof of Concept (PoC) in rete.
KEV ✓ EPSS 1.00 CVE-2026-10520 Ivanti IT
On June 10, 2026, we released versions 19.0.2, 18.11.5, 18.10.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for vulnerabilities in patch releases. There are two types of patch…
EPSS < 0.01 CVSS 8.7 CVE-2026-10087 CVE-2026-10733 CVE-2026-1500 CVE-2026-3553 CVE-2026-6269 CVE-2026-6277 CVE-2026-6552 CVE-2026-6976 CVE-2026-7250 CVE-2026-8589 CVE-2026-9204 CVE-2026-9694 GitLab US
[VDE-2026-064] Multiple vulnerabilities have been discovered in LabX Standard v21.3.22. Most of the vulnerabilities are fixed in LabX Standard v21.4.23. The Vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467 and CVE-2025-58187 are not yet fixed. The fix will be available in the upcoming releases. Notice: LabX Standard was formerly known as LabX Cloud Local.
EPSS 0.75 CVE-2025-15467 CVE-2025-58187 CVE-2025-69419 CVE-2026-0915 METTLER TOLEDO DE