Overview of notable vulnerabilities

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Overview of notable vulnerabilities

below you will find an overview of notable vulnerabilities that we did not have time to cover in more detail: Apache Directory LDAP API version 2.1.9 fixes 6 vulnerabilities [1]. Apache OpenOffice 4.1.16 contains a vulnerability potentially allowing RCE, which remains unpatched for now. As a temporary mitigation, the Java runtime environment integration can be disabled in the preferences dialog, or opening untrusted files can be avoided altogether [2]. Apache Struts versions 6.12.0 and 7.4.0 fix 4 vulnerabilities [3]. Apache Thrift version 0.25.0 fixes 61 vulnerabilities [4]. CUPS version 2.4.20 fixes 7 vulnerabilities [5][6]. Dell fixes 13 vulnerabilities in Dell Container Storage Modules with version 1.18.0 [7]. Libexpat version 2.9.0 fixes 2 vulnerabilities [8]. LibreOffice versions 26.2.5 and 26.8.0 fix 6 vulnerabilities [9]. Linux Kernel versions 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.112, 6.18.54, 7.2.8, 7.3-rc4 fix a large number of vulnerabilities [10]. Microsoft fixes a high-severity vulnerability with product versions Microsoft Exchange Server Subscription Edition RTM (15.02.2562.053), Microsoft Exchange Server 2016 Cumulative Update 23 (15.01.2507.075), Microsoft Exchange Server 2019 Cumulative Update 15 (15.02.1748.053) and Microsoft Exchange Server 2019 Cumulative Update 14 (15.02.1544.048) [11][12]. Mozilla Foundation fixes 1 vulnerability with Firefox version 157.0.1 [13]. Progress fixes 5 vulnerabilities in Sitefinity Next.js Renderer, the fixed versions of which can be found in the relevant advisory [14], and also fixes one vulnerability with Telerik Fiddler Classic version 6.0.20262.10021 [15]. Zabbix versions 6.0.48, 7.4.13 and 7.0.29 fix 6 vulnerabilities [16].

Links

By CESNET, z.s.p.o. Táňa Macháčková on 6. 10. 2026.

Report feedback

[TLP:CLEAR] Overview of notable vulnerabilities

Links