[TLP:CLEAR] Přehled zajímavých zranitelností
Níže naleznete přehled zajímavých zranitelností, kterým jsme se nestihli věnovat blíže: Apache opravuje zranitelnosti v produktech Airflow a ZooKeeper [1][2][3][4][5][6][7][8][9][10][11][12][13]. Arista opravuje řadu zranitelností ve svých produktech [14]. Atlassian opravuje 161 zranitelností ve svých produktech [15]. Citrix opravuje 2 zranitelnosti v produktu Citrix Workspace app for Windows [16]. CPython obsahuje 2 zranitelnosti [17] [18]. F5 opravuje jednu zranitelnost v produktu NGINX Open Source [19]. FRRouting FRR obsahuje jednu středně závažnou zranitelnost ve verzích do 8.5 [20]. Záplatu naleznete na [21]. GDCM obsahuje 6 zranitelností, zatím bez opravy. Možné mitigace naleznete na [22]. GNU opravuje 4 zranitelnosti v produktu GNU C Library [23]. Google Chrome/Chromium verzemi 153.0.8010.47/.48 pro Windows a Mac a 153.0.8010.47 pro Linux opravuje řadu zranitelností [24]. GRUB2 (grub-efi-amd64-signed) obsahuje 1 zranitelnost s nízkou závažností [25]. PoC naleznete na [26]. HPE opravuje řadu zranitelností v různých produktech [27]. Jetty opravuje 2 zranitelnosti [28][29]. MCP Atlassian opravuje jednu zranitelnost v balíčku mcp-atlassian (pip) [30]. Microsoft opravuje velké množství zranitelností v produktu Windows [31]. MikroTik verzemi 7.22.2 (stable) a 7.21.4 (long-term) opravuje jednu zranitelnost [32]. MISP verzí 2.5.46 opravuje kritickou zranitelnost [33] [34]. Mozilla Foundation opravuje řadu zranitelností verzemi produktů Thunderbird 153.3 [35], Thunderbird 140.16 [36], Thunderbird 156 [37], Firefox ESR 153.3 [38], Firefox ESR 140.16 [39], Firefox ESR 115.41 [40], Firefox 156 [41]. MySQL MCP Server opravuje kritickou zranitelnost v balíčku mysql-mcp-server (pip) [42]. Nagios XI verzí 5.9.3 opravuje tři zranitelnosti [43]. Netbox verzí 4.7.1 opravuje více zranitelností [44][45]. Open5GS opravuje zranitelnost [46]. Patch naleznete na [47]. WSO2 API Manager obsahuje zranitelnost (CVE-2026-5430) [48], u níž bylo zaznamenáno aktivní zneužití [49].
Odkazy
- [1] https://www.openwall.com/lists/oss-security/2026/09/15/15
- [2] https://www.openwall.com/lists/oss-security/2026/09/15/14
- [3] https://www.openwall.com/lists/oss-security/2026/09/15/13
- [4] https://www.openwall.com/lists/oss-security/2026/09/15/12
- [5] https://www.openwall.com/lists/oss-security/2026/09/15/11
- [6] https://www.openwall.com/lists/oss-security/2026/09/15/10
- [7] https://www.openwall.com/lists/oss-security/2026/09/15/9
- [8] https://www.openwall.com/lists/oss-security/2026/09/15/8
- [9] https://www.openwall.com/lists/oss-security/2026/09/15/7
- [10] https://www.openwall.com/lists/oss-security/2026/09/15/6
- [11] https://www.openwall.com/lists/oss-security/2026/09/15/5
- [12] https://www.openwall.com/lists/oss-security/2026/09/15/4
- [13] https://www.openwall.com/lists/oss-security/2026/09/15/3
- [14] https://www.arista.com/en/support/advisories-notices/securityadvisory
- [15] https://confluence.atlassian.com/security/security-bulletin-september-15-2026-1822852209.html
- [16] https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697034&articleTitle=Citrix_Workspace_app_for_Windows_Security_Bulletin_CVE_2026_78546_and_CVE_2026_78547
- [17] https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/
- [18] https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/
- [19] https://my.f5.com/manage/s/article/K000162604?utm_source=f5support&utm_medium=RSS
- [20] https://www.cve.org/CVERecord?id=CVE-2022-42917
- [21] https://github.com/FRRouting/frr/commit/972cdc560e339d70c0ee5fb70ec636ab78f00bca
- [22] https://www.openwall.com/lists/oss-security/2026/09/10/13
- [23] https://www.openwall.com/lists/oss-security/2026/09/14/31
- [24] https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html
- [25] https://www.openwall.com/lists/oss-security/2026/09/13/5
- [26] https://github.com/Luppa90/grub-serial-mmio-lockdown-bypass
- [27] https://support.hpe.com/connect/s/securitybulletinlibrary?language=en_US&archive=false#sort=%40hpescuniversaldate%20descending&layout=table&numberOfResults=25&f:@kmdoclanguagecode=[cv1871440]&hpe=1
- [28] https://github.com/jetty/jetty.project/security/advisories/GHSA-85fq-fc5f-7j7g
- [29] https://github.com/jetty/jetty.project/security/advisories/GHSA-gpg9-4257-cfm3
- [30] https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-489g-7rxv-6c8q
- [31] https://msrc.microsoft.com/update-guide/vulnerability
- [32] https://mikrotik.com/supportsec/cve-2026-52346/
- [33] https://www.cve.org/CVERecord?id=CVE-2026-90961
- [34] https://github.com/MISP/MISP/commit/0ee058548
- [35] https://www.mozilla.org/en-US/security/advisories/mfsa2026-96/
- [36] https://www.mozilla.org/en-US/security/advisories/mfsa2026-95/
- [37] https://www.mozilla.org/en-US/security/advisories/mfsa2026-94/
- [38] https://www.mozilla.org/en-US/security/advisories/mfsa2026-93/
- [39] https://www.mozilla.org/en-US/security/advisories/mfsa2026-92/
- [40] https://www.mozilla.org/en-US/security/advisories/mfsa2026-91/
- [41] https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/
- [42] https://github.com/designcomputer/mysql_mcp_server/security/advisories/GHSA-rqfv-2mw9-78g2
- [43] https://www.nagios.com/security-disclosures/nagios-xi/nagios-xi-5-9/
- [44] https://nvd.nist.gov/vuln/detail/cve-2026-86175
- [45] https://nvd.nist.gov/vuln/detail/cve-2026-86176
- [46] https://www.rapid7.com/db/vulnerabilities/cve-2026-90707/
- [47] https://github.com/open5gs/open5gs/commit/ddd683a35f8aaac2b7b9884a24cd53bddfc65238
- [48] https://www.cve.org/CVERecord?id=CVE-2026-5430
- [49] https://www.cisa.gov/news-events/bulletins/sb26-222
Za CESNET-CERTS Táňa Macháčková dne 17. 9. 2026.
