Overview of notable vulnerabilities

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Overview of notable vulnerabilities

below you will find an overview of notable vulnerabilities from last week that we did not have time to cover in more detail: Adobe fixes over 50 vulnerabilities in various products, including several critical ones in ColdFusion, Commerce and Campaign Classic [1][2][3]. Docker fixes the high-severity CopyEscape vulnerability and warns of the existence of a PoC [4][5][6]. Fortinet fixes seven vulnerabilities in FortiClientWindows [7], FortiOS [8][9], FortiSIEM [10], FortiWeb [11][12] and FortiManager (including Cloud) [13]. GitLab fixes 14 vulnerabilities in versions 19.2.2, 19.1.4 and 19.0.6 [14]. Google Chrome/Chromium fixes 5 vulnerabilities in versions 151.0.7922.137/.138 (Windows/macOS) and 151.0.7922.137 (Linux) [15]. Ivanti fixes its Neurons for MDM [16] and Endpoint Manager (EPM) [17] products. Metabase, an analytics and business intelligence platform, fixes a critical, actively exploited vulnerability [18]. Microsoft fixes over 400 vulnerabilities as part of the August Patch Tuesday [19]. Nagios Core version 4.5.14 and Nagios XI version 2026R1.7 fix five vulnerabilities [20][21][22][23][24]. rsync version 3.5.0 fixes 33 vulnerabilities [25]. Sonatype Nexus Repository 3 CE/Pro version 3.95.0 fixes 10 vulnerabilities. An overview can be found at [26]. SonicWall fixes six vulnerabilities in GMS [27] and two in Email Security [28]. TP-Link fixes eight vulnerabilities in various products of the HB, HX, HC, EB, EC, EX, XC, XX, VX series [29]. WordPress 7.0.3 fixes the high-severity XSS2Shell vulnerability in its core [30]. The Expat XML parser version 2.8.3 fixes a medium-severity vulnerability [31].

Links

By CESNET, z.s.p.o. Michaela Ručková on 17. 8. 2026.

Report feedback

[TLP:CLEAR] Overview of notable vulnerabilities

Links