VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

Výsledky hledání

výrobce: VMware× typ: zranitelnost× v celém archivu zrušit filtry

8 karet z 12 položek CZ · EN/orig

Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.

SPOJENO PŘES CVE VMware: rilevato sfruttamento in rete della CVE-2026-41709

È stato rilevato lo sfruttamento attivo in rete della vulnerabilità CVE-2026-41709 - già sanata dal vendor nel luglio 2026 - presente in VMware ESX, Cloud Foundation, vSphere Foundation e Telco Cloud Platform. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un attaccante con privilegi amministrativi di eseguire determinate operazioni senza che queste vengano registrate nei log di sistema.

KEV ✓ EPSS 0.01 CVE-2026-41709 VMware Broadcom IT US

tg: zneužíváno tg: zranitelnost

· CSIRT Itálie (ACN) · VMware: rilevato sfruttamento in rete della CVE-2026-41709 · zachyceno · CISA KEV · Broadcom VMWare ESX Insufficient Logging Vulnerability (CVE-2026-41709)

· zachyceno

SPOJENO PŘES CVE Vulnérabilité dans Stormshield Management Center (30 octobre 2026)

Une vulnérabilité a été découverte dans Stormshield Management Center. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.

KEV ✓ EPSS 0.83 CVSS 9.8 CVE-2026-111497 Stormshield Broadcom VMware Google Node.js Microsoft Brotli PHP Palo Alto Networks Bun brotlicffi FR FI CA SE US GB IT CZ BE

tg: zneužíváno tg: zranitelnost tg: rozbor tg: novinka v produktu tp: dodavatelský řetězec

· zachyceno · CERT-FR – avis · Vulnérabilité dans Stormshield Management Center (30 octobre 2026) · zachyceno · NCSC-FI · VMSA-2026-0008: Node.js Brotli decoder out-of-bounds write remote code execution vulnerability (CVE-2026-111497) · Cyber Centre Kanada · AL26-027 - Critical vulnerability impacting Google Brotli – CVE-2026-111497 · CERT-SE · Kritisk sårbarhet i Google Brotli · BleepingComputer · CISA warns of hackers now exploiting critical Node2Shell flaw · zachyceno · Sophos Threat Research · Node2Shell (CVE-2026-111497) in active exploitation · Tenable Research · Brotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497) · zachyceno · CISA KEV · Google Brotli Unchecked Return Value Vulnerability (CVE-2026-111497) · Palo Alto PSIRT · CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL) · CSIRT Itálie (ACN) · Google: disponibile PoC per lo sfruttamento della CVE-2026-111497 · CSIRT.CZ (CZ.NIC) · Kritická zranitelnost Broccoli2Shell ohrožuje aplikace využívající HTTP · Aikido Security · Python packages are also vulnerable to the Node2Shell Brotli flaw (CVE-2026-111497)

· zachyceno

SPOJENO PŘES CVE Broadcom VMware security advisory (AV26-1008)

Serial number: AV26-1008 Date: October 7, 2026 As of October 7, 2026, VMware is affected by vulnerabilities in the following products: VMware Fusion MacOS Prior to 26H1u1 VMware Workstation Prior to 26H1u1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347)…

EPSS 0.00 CVSS 9.3 CVE-2026-59346 CVE-2026-59347 Broadcom VMware CA FI FR IT

tg: zranitelnost

· Cyber Centre Kanada · Broadcom VMware security advisory (AV26-1008) · zachyceno · NCSC-FI · VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347) · zachyceno · CERT-FR – avis · Multiples vulnérabilités dans les produits VMware (04 septembre 2026) · CSIRT Itálie (ACN) · Risolte vulnerabilità in VMware Workstation e Fusion

· zachyceno

CISA: Critical VMware RCE flaw now exploited by ransomware gangs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned security teams that ransomware gangs have now joined ongoing attacks exploiting a critical VMware vCenter vulnerability patched in July. [...]

CVE-2024-37079 * CVE-2025-22225 * CVE-2025-60710 * CVE-2026-22719 * CVE-2026-59310 * VMware US

tg: zneužíváno tg: zranitelnost tp: ransomware

· BleepingComputer · CISA: Critical VMware RCE flaw now exploited by ransomware gangs

· zachyceno

ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-59346.

EPSS 0.00 CVSS 7.5 CVE-2026-59346 VMware US

tg: zranitelnost

· zachyceno · Zero Day Initiative · ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability

· zachyceno