Overview of notable vulnerabilities

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Overview of notable vulnerabilities

below you will find an overview of notable vulnerabilities that we did not have time to cover in more detail: SonicWall fixes 3 vulnerabilities in Network Security Manager (NSM) On-Prem in versions 4.3.0 and earlier [1]. pdfforge PDF Architect contains 4 vulnerabilities disclosed as 0-days; no fix is available yet [2][3][4][5]. Attackers are actively exploiting critical RCE vulnerabilities in the Super Forms and Elementor Pro plugins [6][7]. Google Chrome/Chromium versions 152.0.7977.82/.83 for Windows and macOS and version 152.0.7977.82 for Linux fix 12 vulnerabilities; an actively exploited exploit exists for one of them (CVE-2026-85046, type confusion in V8) [8]. HPE fixes 11 vulnerabilities in HPE StoreEasy and 19 vulnerabilities in HPE Telco Intelligent Assurance [9][10][11][12][13][14][15][16][17]. Elastic Kibana versions 8.19.21, 9.4.6 and 9.5.3 fix multiple vulnerabilities [18][19][20][21][22][23][24]. MongoDB fixes 20 vulnerabilities in various products; an overview can be found, for example, at [25]. Jenkins versions 2.580 (weekly) and 2.568.3 (LTS) fix 13 vulnerabilities in the core, with further fixes in plugins and tools [26]. Curl fixes 9 vulnerabilities [27].

Links

By CESNET, z.s.p.o. Michaela Jarošová on 4. 9. 2026.

Report feedback

[TLP:CLEAR] Overview of notable vulnerabilities

Links