Overview of interesting vulnerabilities

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] Overview of interesting vulnerabilities

below is an overview of interesting vulnerabilities that we did not cover in more detail: PostgreSQL fixes 28 vulnerabilities in versions 18.6, 17.11, 16.15, 15.19, 14.24 and 19 Beta 3 [1]. NGINX fixes 1 vulnerability in the HTTP DAV module in version 1.29.7 [2]. Linux Kernel fixes 2 vulnerabilities allowing local privilege escalation [3][4]. Apache Struts fixes 5 vulnerabilities in versions 6.11.0 and 7.3.0 [5][6][7][8][9]. OpenVPN fixes 2 vulnerabilities in versions 2.6.22 and 2.7.6 [10][11]. Apache CloudStack fixes 19 vulnerabilities in versions 4.20.3.1 and 4.22.1.1 [12]. Microsoft fixes 21 vulnerabilities in the cloud services Azure, Entra ID and Exchange Online and in the products Word and Remote Help [13]. Mattermost fixes 12 vulnerabilities in the server in versions 11.10.0, 11.9.1, 11.8.5, 11.7.8 and 10.11.23, and four vulnerabilities in the desktop application in versions 6.3 and 6.2.3 [14]. Joomla! fixes 10 vulnerabilities in versions 5.4.8 and 6.1.3 [15]. Dell fixes 20 vulnerabilities in the products ObjectScale (4.3.0.1), OpenManage Enterprise (4.7.0) and PowerStore (5.0.0.2-2761110) [16][17][18]. FFmpeg fixes 7 vulnerabilities [19][20][21][22][23][24][25]. Arista fixes a vulnerability in the gRPC-go library in the products Arista EOS, Streaming Telemetry Agent and Wi-Fi Access Points [26]. Atlassian fixes 172 vulnerabilities in the products Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira and Jira Service Management [27]. Splunk fixes over 200 vulnerabilities in the products Splunk Enterprise (10.4.2, 10.2.6, 10.0.9, 9.4.14), Universal Forwarder (same versions), Enterprise Security (8.6.1), SOAR (8.6.0), SOAR Connectors and in apps and add-ons [28][29][30][31][32][33][34][35]. Slackware fixes 31 vulnerabilities with the packages mozilla-firefox and mozilla-thunderbird in version 140.14.0esr [36]. HPE fixes 5 vulnerabilities in the products B-Series SANnav Management Portal (3.0.0a, 3.0.1) and in the BIOS of ProLiant, Alletra and Synergy servers (1.80_05-29-2026, 1.50_07-24-2026) [37][38]. F5 warns of a vulnerability in Intel processors (SMM) in the products BIG-IP, F5OS and F5OS-C. A fix is so far available only for F5OS-A in version 1.8.4 [39]. Google Chrome/Chromium fixes 22 vulnerabilities in versions 151.0.7922.173/.174 for Windows and macOS and version 151.0.7922.173 for Linux [40][41]. Wazuh fixes eight vulnerabilities in version 4.14.7 [42][43][44][45][46][47][48][49][50][51][52][53].

Links

By CESNET, z.s.p.o. Henrieta Paločková on 21. 8. 2026.

Report feedback

[TLP:CLEAR] Overview of interesting vulnerabilities

Links