VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

Výsledky hledání

sektor: školství× typ: zranitelnost× v celém archivu zrušit filtry

6 karet z 6 položek CZ · EN/orig

· zachyceno

SPOJENO PŘES CVE Oracle Security Alert Advisory CVE-2026-109618 and CVE-2026-109619

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-109618, CVE-2026-109619, Summary: This Security Alert addresses CVE-2026-109618 and CVE-2026-109619. These vulnerabilities, known as PHP2Shell, allow for unauthenticated remote code execution in PHP. Oracle strongly recommends that customers apply the available security patches without delay. The Security Alert advisory will continue to be updated as additional product patches become…

KEV ✓ EPSS 1.00 CVSS 9.8 CVE-2026-109618 CVE-2026-109619 Oracle Festo Apache PHP WAGO Belden QNAP Synology ESET Welotec Juniper Networks HPE METTLER TOLEDO Citrix Cloud Software Group Palo Alto Networks Tenable Splunk Cisco WordPress Drupal Joomla výroba a průmysl školství FI DE FR IT BE US SK CZ CA RU NL AT SE HR GB

tg: zneužíváno tg: zranitelnost tg: rozbor tg: novinka v produktu tg: návod tg: propagace tp: malware tp: phishing tp: dodavatelský řetězec tp: AI tp: průmyslové systémy

· zachyceno · NCSC-FI · Oracle Security Alert Advisory CVE-2026-109618 and CVE-2026-109619 · CERT@VDE · Two critical PHP vulnerabilities in several Festo Didactic products · zachyceno · CERT-FR – avis · Multiples vulnérabilités dans macmon et NRSW (02 novembre 2026) · CSIRT Itálie (ACN) · ESET: aggiornamenti e mitigazioni per le vulnerabilità "PHP2Shell" · Aikido Security · How to patch PHP2Shell with free Aikido Images · Tenable Research · Discover and remediate PHP2Shell exposure with Tenable · ESET WeLiveSecurity · PHP2Shell: What to know about two critical PHP flaws · BleepingComputer · PHP2Shell security flaws now sucessfully exploited in the wild · Qualys · Can’t Patch PHP2Shell Yet? Build a Stopgap with the Controls You Own · CSIRT.CZ – novinky · Kritické zranitelnosti PHP umožňují vzdálené spuštění kódu · zachyceno · Splunk Advisories · SVD-2026-1013: Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Splunk Products - October 2026 · Cisco PSIRT · Vulnerabilities in PHP Affecting Cisco Products: October 2026 · Cyber Centre Kanada · AL26-026 - Critical vulnerabilities impacting PHP - CVE-2026-109618 and CVE-2026-109619 · Malwarebytes Labs · PHP2Shell: Why websites are going offline for emergency security updates · Palo Alto PSIRT · CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: HIGH) · Securelist (Kaspersky) · Critical RCE vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) · Cisco Talos · Two critical RCEs in PHP core · NÚKIB · Upozornění na "php2shell", dvě kritické zranitelnosti v PHP · NCSC-NL · NCSC-2026-0443 [1.00] [H/H] Kwetsbaarheden verholpen in PHP · CERT.at · Kritische Sicherheitslücken in PHP - Updates verfügbar · Palo Alto Unit 42 · Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 · SANS Internet Storm Ctr. · Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st) · zachyceno · CISA Advisories · Critical Vulnerabilities in PHP Require Immediate Patching · CERT-SE · Kritiska sårbarheter i PHP · CERT.hr · UPOZORENJE: Kritične ranjivosti u PHP-u – čeka se nadogradnja · SK-CERT (NBÚ SR) · Národné centrum kybernetickej bezpečnosti SK-CERT varuje pred dvoma kritickými zraniteľnosťami v PHP, identifikovanými a · zachyceno · Fortinet PSIRT · PHP core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619) · Huntress · Rapid Response: php2shell, Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) · zachyceno · Elastic Security · php2shell: Assessing Elastic detection coverage relevant to CVE-2026-109618 and CVE-2026-109619 · zachyceno · Sophos Threat Research · Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

· zachyceno

Vulnerabilities in Moodle

Classification: Important, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 7.1, CVEs: CVE-2026-119553, CVE-2026-119554, CVE-2026-119555, CVE-2026-119556, Summary: CVE-2026-119553 (CVSS: 7.1): Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contains a path traversal vulnerability in the Blackboard question import format. Teachers with question import or lesson edit rights can upload a crafted zip with img src values containing ../…

EPSS 0.00 CVSS 7.1 CVE-2026-119553 CVE-2026-119554 CVE-2026-119555 CVE-2026-119556 Moodle školství FI

tg: zranitelnost

· zachyceno · NCSC-FI · Vulnerabilities in Moodle

SPOJENO PŘES CVE FBI disrupts Chinese hacking tools used to breach critical infrastructure

The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, MicroScan and FishHub, used in attacks that breached critical infrastructure and other organizations worldwide. [...]

KEV ✓ · ransomware EPSS 1.00 CVE-2014-6278 CVE-2015-3306 CVE-2015-5477 CVE-2016-3081 CVE-2019-11510 CVE-2021-22205 CVE-2021-3199 CVE-2023-22894 Microsoft veřejná správa výroba a průmysl zdravotnictví školství US

tg: varování tg: zneužíváno tg: zranitelnost tg: vymáhání práva tp: malware tp: identita tp: špionáž tp: průmyslové systémy

· BleepingComputer · FBI disrupts Chinese hacking tools used to breach critical infrastructure · zachyceno · CISA Advisories · Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data

Vulnerabilità in Moodle

Rilevate due nuove vulnerabilità in Moodle, nota piattaforma open source tipicamente utilizzata per l'erogazione di corsi in modalità e-learning. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato l'accesso ad informazioni sensibili e eludere le funzionalità di sicurezza sui sistemi interessati.

Moodle školství IT

tg: zranitelnost

· CSIRT Itálie (ACN) · Vulnerabilità in Moodle

Rilevate vulnerabilità nel tema WordPress “Design Scuole Italia”

Rilevate quattro vulnerabilità, di cui due con gravità “alta”, in Design Scuole Italia, noto tema WordPress destinato alla realizzazione dei siti istituzionali delle scuole italiane. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di leggere file arbitrari sul filesystem, eludere i meccanismi di autenticazione ed accedere a informazioni sensibili sui sistemi interessati

EPSS 0.01 CVE-2026-87791 CVE-2026-87792 CVE-2026-87793 CVE-2026-89307 WordPress Design Scuole Italia školství IT

tg: zranitelnost tp: identita

· CSIRT Itálie (ACN) · Rilevate vulnerabilità nel tema WordPress “Design Scuole Italia”

SPOJENO PŘES CVE PaperCut NG/MF Critical Zero-Day Exploited in the Wild

Overview On August 27, 2026, PaperCut Software published an urgent security advisory stating that it is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF. PaperCut has confirmed customer incidents and is treating the issue as a security emergency. At the time of writing, the vulnerability has not been assigned a CVE identifier, and PaperCut has not publicly disclosed a CVSS score, vulnerability class, authentication requirements, or the technical details…

KEV ✓ · ransomware EPSS 1.00 CVE-2023-27350 PaperCut Software PaperCut školství výroba a průmysl US

tg: zneužíváno tg: zranitelnost tp: malware

· Rapid7 · PaperCut NG/MF Critical Zero-Day Exploited in the Wild · BleepingComputer · PaperCut warns of NG, MF flaw exploited in zero-day attacks