Tento report bol preložený pomocou AI; preklad zatiaľ nikto neskontroloval. Pôvodný jazyk: čeština.
[TLP:CLEAR] Prehľad zaujímavých zraniteľností
nižšie nájdete prehľad zaujímavých zraniteľností, ktorým sme sa nestihli venovať bližšie: Apache opravuje zraniteľnosti v produktoch Airflow a ZooKeeper [1][2][3][4][5][6][7][8][9][10][11][12][13]. Arista opravuje rad zraniteľností vo svojich produktoch [14]. Atlassian opravuje 161 zraniteľností vo svojich produktoch [15]. Citrix opravuje 2 zraniteľnosti v produkte Citrix Workspace app for Windows [16]. CPython obsahuje 2 zraniteľnosti [17] [18]. F5 opravuje jednu zraniteľnosť v produkte NGINX Open Source [19]. FRRouting FRR obsahuje jednu stredne závažnú zraniteľnosť vo verziách do 8.5 [20]. Záplatu nájdete na [21]. GDCM obsahuje 6 zraniteľností, zatiaľ bez opravy. Možné mitigácie nájdete na [22]. GNU opravuje 4 zraniteľnosti v produkte GNU C Library [23]. Google Chrome/Chromium verziami 153.0.8010.47/.48 pre Windows a Mac a 153.0.8010.47 pre Linux opravuje rad zraniteľností [24]. GRUB2 (grub-efi-amd64-signed) obsahuje 1 zraniteľnosť s nízkou závažnosťou [25]. PoC nájdete na [26]. HPE opravuje rad zraniteľností v rôznych produktoch [27]. Jetty opravuje 2 zraniteľnosti [28][29]. MCP Atlassian opravuje jednu zraniteľnosť v balíku mcp-atlassian (pip) [30]. Microsoft opravuje veľké množstvo zraniteľností v produkte Windows [31]. MikroTik verziami 7.22.2 (stable) a 7.21.4 (long-term) opravuje jednu zraniteľnosť [32]. MISP verziou 2.5.46 opravuje kritickú zraniteľnosť [33] [34]. Mozilla Foundation opravuje rad zraniteľností verziami produktov Thunderbird 153.3 [35], Thunderbird 140.16 [36], Thunderbird 156 [37], Firefox ESR 153.3 [38], Firefox ESR 140.16 [39], Firefox ESR 115.41 [40], Firefox 156 [41]. MySQL MCP Server opravuje kritickú zraniteľnosť v balíku mysql-mcp-server (pip) [42]. Nagios XI verziou 5.9.3 opravuje tri zraniteľnosti [43]. Netbox verziou 4.7.1 opravuje viacero zraniteľností [44][45]. Open5GS opravuje zraniteľnosť [46]. Patch nájdete na [47]. WSO2 API Manager obsahuje zraniteľnosť (CVE-2026-5430) [48], pri ktorej bolo zaznamenané aktívne zneužitie [49].
Odkazy
- [1] https://www.openwall.com/lists/oss-security/2026/09/15/15
- [2] https://www.openwall.com/lists/oss-security/2026/09/15/14
- [3] https://www.openwall.com/lists/oss-security/2026/09/15/13
- [4] https://www.openwall.com/lists/oss-security/2026/09/15/12
- [5] https://www.openwall.com/lists/oss-security/2026/09/15/11
- [6] https://www.openwall.com/lists/oss-security/2026/09/15/10
- [7] https://www.openwall.com/lists/oss-security/2026/09/15/9
- [8] https://www.openwall.com/lists/oss-security/2026/09/15/8
- [9] https://www.openwall.com/lists/oss-security/2026/09/15/7
- [10] https://www.openwall.com/lists/oss-security/2026/09/15/6
- [11] https://www.openwall.com/lists/oss-security/2026/09/15/5
- [12] https://www.openwall.com/lists/oss-security/2026/09/15/4
- [13] https://www.openwall.com/lists/oss-security/2026/09/15/3
- [14] https://www.arista.com/en/support/advisories-notices/securityadvisory
- [15] https://confluence.atlassian.com/security/security-bulletin-september-15-2026-1822852209.html
- [16] https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697034&articleTitle=Citrix_Workspace_app_for_Windows_Security_Bulletin_CVE_2026_78546_and_CVE_2026_78547
- [17] https://mail.python.org/archives/list/security-announce@python.org/thread/EFJWGAZJA56AKSBR2WHMHQZO7RRLZPRH/
- [18] https://mail.python.org/archives/list/security-announce@python.org/thread/57TBTLL2W6APMZR3A25B2YV7GL3EPTDJ/
- [19] https://my.f5.com/manage/s/article/K000162604?utm_source=f5support&utm_medium=RSS
- [20] https://www.cve.org/CVERecord?id=CVE-2022-42917
- [21] https://github.com/FRRouting/frr/commit/972cdc560e339d70c0ee5fb70ec636ab78f00bca
- [22] https://www.openwall.com/lists/oss-security/2026/09/10/13
- [23] https://www.openwall.com/lists/oss-security/2026/09/14/31
- [24] https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html
- [25] https://www.openwall.com/lists/oss-security/2026/09/13/5
- [26] https://github.com/Luppa90/grub-serial-mmio-lockdown-bypass
- [27] https://support.hpe.com/connect/s/securitybulletinlibrary?language=en_US&archive=false#sort=%40hpescuniversaldate%20descending&layout=table&numberOfResults=25&f:@kmdoclanguagecode=[cv1871440]&hpe=1
- [28] https://github.com/jetty/jetty.project/security/advisories/GHSA-85fq-fc5f-7j7g
- [29] https://github.com/jetty/jetty.project/security/advisories/GHSA-gpg9-4257-cfm3
- [30] https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-489g-7rxv-6c8q
- [31] https://msrc.microsoft.com/update-guide/vulnerability
- [32] https://mikrotik.com/supportsec/cve-2026-52346/
- [33] https://www.cve.org/CVERecord?id=CVE-2026-90961
- [34] https://github.com/MISP/MISP/commit/0ee058548
- [35] https://www.mozilla.org/en-US/security/advisories/mfsa2026-96/
- [36] https://www.mozilla.org/en-US/security/advisories/mfsa2026-95/
- [37] https://www.mozilla.org/en-US/security/advisories/mfsa2026-94/
- [38] https://www.mozilla.org/en-US/security/advisories/mfsa2026-93/
- [39] https://www.mozilla.org/en-US/security/advisories/mfsa2026-92/
- [40] https://www.mozilla.org/en-US/security/advisories/mfsa2026-91/
- [41] https://www.mozilla.org/en-US/security/advisories/mfsa2026-90/
- [42] https://github.com/designcomputer/mysql_mcp_server/security/advisories/GHSA-rqfv-2mw9-78g2
- [43] https://www.nagios.com/security-disclosures/nagios-xi/nagios-xi-5-9/
- [44] https://nvd.nist.gov/vuln/detail/cve-2026-86175
- [45] https://nvd.nist.gov/vuln/detail/cve-2026-86176
- [46] https://www.rapid7.com/db/vulnerabilities/cve-2026-90707/
- [47] https://github.com/open5gs/open5gs/commit/ddd683a35f8aaac2b7b9884a24cd53bddfc65238
- [48] https://www.cve.org/CVERecord?id=CVE-2026-5430
- [49] https://www.cisa.gov/news-events/bulletins/sb26-222
Za CESNET, z.s.p.o. Táňa Macháčková dňa 17. 9. 2026.