This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Overview of interesting vulnerabilities
Below is an overview of interesting vulnerabilities that we have not covered in more detail: Apache fixes several vulnerabilities in Tomcat, Tomcat Native and Qpid Broker [1][2][3][4][5][6][7]. cPanel fixes 3 vulnerabilities in cPanel & WHM and WP Toolkit [8]. D-Link fixes 3 vulnerabilities in its products [9][10][11]. Dell fixes multiple vulnerabilities in its products [12]. Google Chrome fixes 108 vulnerabilities with versions 154.0.8037.57 for Linux and 154.0.8037.57/.58 for Windows and Mac [13]. HPE fixes 11 vulnerabilities in Networking Analytics and Telco service Orchestrator [14][15]. Kubernetes fixes 2 vulnerabilities in the kube-controller-manager and kubelet components [16][17]. LibreOffice fixes 8 vulnerabilities in its products [18]. Linux Kernel fixes a large number of vulnerabilities with versions 6.12.110, 6.18.52, 7.2.6 and 7.3-rc2 [19]. Mattermost fixes several vulnerabilities with versions 11.11.0, 11.9.2, 11.8.6, 11.7.11 and 11.10.2 [20]. Microsoft fixes 2 vulnerabilities in Microsof Edge and Outlook [21][22]. NVIDIA fixes 19 vulnerabilities in NeMo Speech and Infrastructure Controller [23][24]. Suricata fixes 67 vulnerabilities with version 8.0.7 [25]. X.org fixes one vulnerability in libXrender with version 0.9.12 [26].
Links
- [1] https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.109
- [2] https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.100
- [3] https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.121
- [4] https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.59
- [5] https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.25
- [6] https://tomcat.apache.org/security-native.html#Fixed_in_Apache_Tomcat_Native_Connector_2.0.16_/_1.3.9
- [7] https://qpid.apache.org/components/broker-j/security.html
- [8] https://thehackernews.com/2026/09/new-cpanel-flaw-lets-hosting-account_0272795595.html
- [9] https://nvd.nist.gov/vuln/detail/cve-2026-94089
- [10] https://nvd.nist.gov/vuln/detail/cve-2026-94036
- [11] https://nvd.nist.gov/vuln/detail/cve-2026-94050
- [12] https://www.dell.com/support/security/cs-cz
- [13] https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html
- [14] https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05137en_us&docLocale=en_US
- [15] https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05151en_us&docLocale=en_US
- [16] https://github.com/kubernetes/kubernetes/issues/142097
- [17] https://github.com/kubernetes/kubernetes/issues/142098
- [18] https://lists.debian.org/debian-security-announce/2026/msg00424.html
- [19] https://lore.kernel.org/linux-cve-announce/?t=20260925103112-
- [20] https://docs.mattermost.com/security-guide/security-updates
- [21] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70125
- [22] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88097
- [23] https://nvidia.custhelp.com/app/answers/detail/a_id/5885
- [24] https://nvidia.custhelp.com/app/answers/detail/a_id/5879
- [25] https://forum.suricata.io/t/suricata-8-0-7-released/6467
- [26] https://access.redhat.com/security/cve/cve-2026-88807
By CESNET, z.s.p.o. Ondrej Pavlovič on 25. 9. 2026.