Overview of notable vulnerabilities

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Overview of notable vulnerabilities

below you will find an overview of notable vulnerabilities that we did not have time to cover in more detail: AMD fixes a vulnerability in the RCCL library (part of the AMD ROCm platform) with ROCm version 7.14 [1]. Apache HTTP Server version 2.4.69 fixes 20 vulnerabilities [2]. Apple fixes an actively exploited vulnerability [3] in the CoreGraphics component of the iOS, iPadOS [4], macOS Tahoe [5] and Sequoia [6] operating systems. Cisco fixes an actively exploited [7] critical vulnerability in Catalyst SD-WAN Software [8]. Elastic fixes 11 vulnerabilities in Elasticsearch and Kibana with versions 8.19.22, 9.4.7, 9.5.4 [9][10][11][12][13][14][15][16][17][18][19]. Exim version 4.100.1 fixes four vulnerabilities [20]. GitLab versions 19.0.9 and 18.11.12 [21] fix, also in older branches, two critical vulnerabilities in CE/EE, one of which is actively exploited [22]. Both were previously reported in detail [23]. Versions 19.2.4, 19.3.2 and 19.4.1 also fix a critical vulnerability in GitLab AI Gateway [24]. Google Chrome/Chromium versions 154.0.8037.97/.98 (Windows/macOS) and 154.0.8037.97 (Linux) fix 11 vulnerabilities [25]. Joomla! CMS versions 5.4.9 and 6.1.4 fix 16 vulnerabilities [26]. Kubernetes fixes a vulnerability affecting only Windows clients with versions 1.34.12, 1.35.9 and 1.36.5 of the kubectl tool [27]. Mozilla Foundation fixes over 70 vulnerabilities in Thunderbird versions 153.4 [28], 140.17 [29] and 157 [30], Firefox ESR versions 153.4 [31], 140.17 [32], 115.42 [33] and Firefox 157 [34]. NVIDIA fixes over 120 vulnerabilities in GPU Display Driver and vGPU Software [35], one in DeepStream [36] and one in Networking BlueField and ConnectX [37]. TP-Link fixes an OS command injection in the IPv6 WAN configuration of the TL-WR841N router [38]. WebKitGTK and WPE WebKit version 2.54.0 fix over 230 vulnerabilities [39][40]. x.org fixes three vulnerabilities in the libX11 library [41][42][43], one in libXtst [44] and one in libXpm [45].

Links

By CESNET, z.s.p.o. Michaela Ručková on 2. 10. 2026.

Report feedback

[TLP:CLEAR] Overview of notable vulnerabilities

Links