This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Overview of interesting vulnerabilities
below is an overview of interesting vulnerabilities that we did not cover in more detail: Arista fixes 24 vulnerabilities in CloudVision Portal and CloudVision CUE [1]. Apache fixes several vulnerabilities in CXF, DolphinScheduler, Allura, Impala, log4net, YuniKorn, Jackrabbit, Camel Karavan, Geode, OpenOffice and Fesod [2][3][4][5][6][7]. Bricksforge fixes a critical, actively exploited vulnerability in its WordPress plugin in version 3.1.8.10 [8][9]. Cisco fixes 35 vulnerabilities in NX-OS, Nexus 3000/9000, Meraki, Application Policy Infrastructure Controller, Smart Software Manager On-Prem and Finesse [10]. FFmpeg fixes 10 vulnerabilities [11]. Google fixes 25 vulnerabilities in Android [12]. Google Chrome/Chromium fixes 247 vulnerabilities in versions 155.0.8059.39/.40 for Windows and macOS and 155.0.8059.39 for Linux [13]. MariaDB fixes 13 vulnerabilities in MariaDB Server, Connector/Node.js and Connector/C [14]. MongoDB fixes 17 vulnerabilities in Ops Manager, libmongocrypt and the drivers for C, C++, Go, PHP and Python [15]. Mozilla fixes 79 vulnerabilities in Firefox 158, Firefox ESR 115.43 and 153.5 [16][17][18]. HPE fixes 10 vulnerabilities in HPE Telco Intelligent Assurance and HPE Intelligent Management Center (iMC) [19][20]. RabbitMQ fixes 8 vulnerabilities in RabbitMQ Server in versions 3.13.19, 4.0.24, 4.1.15, 4.2.10 and 4.3.5, and 3 vulnerabilities in RabbitMQ Java client in version 5.37.0 [21]. WordPress fixes 7 vulnerabilities in version 7.1.3 [22]. X.Org fixes 3 vulnerabilities in X.Org Server and Xwayland in versions xorg-server 21.1.25 and xwayland 24.1.14 [23]. Zephyr fixes 21 vulnerabilities in its Bluetooth and network protocol implementations [24].
Links
- [1] https://www.arista.com/en/support/advisories-notices/securityadvisory
- [2] https://www.openwall.com/lists/oss-security/2026/10/07/
- [3] https://www.openwall.com/lists/oss-security/2026/10/08/
- [4] https://www.openwall.com/lists/oss-security/2026/10/09/
- [5] https://www.openwall.com/lists/oss-security/2026/10/10/
- [6] https://www.openwall.com/lists/oss-security/2026/10/12/
- [7] https://www.openwall.com/lists/oss-security/2026/10/13/
- [8] https://thehackernews.com/2026/10/attackers-exploit-cvss-100-bricksforge.html
- [9] https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/bricksforge/bricksforge-3189-unauthenticated-arbitrary-file-upload-via-temporaryfileuploads-parameter
- [10] https://sec.cloudapps.cisco.com/security/center/publicationListing.x
- [11] https://app.opencve.io/cve/?vendor=ffmpeg
- [12] https://source.android.com/docs/security/bulletin/2026/2026-10-01
- [13] https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html
- [14] https://app.opencve.io/cve/?vendor=mariadb
- [15] https://app.opencve.io/cve/?q=vendor%3Amongodb&page=1
- [16] https://www.mozilla.org/en-US/security/advisories/mfsa2026-106/
- [17] https://www.mozilla.org/en-US/security/advisories/mfsa2026-107/
- [18] https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/
- [19] https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05165en_us&docLocale=en_US
- [20] https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05157en_us&docLocale=en_US
- [21] https://app.opencve.io/cve/?vendor=rabbitmq
- [22] https://wordpress.org/news/2026/10/wordpress-7-1-3-maintenance-and-security-release/
- [23] https://www.openwall.com/lists/oss-security/2026/10/07/23
- [24] https://www.cvedetails.com/vulnerability-list/assigner-83/Zephyr-Project.html?page=1&order=7
By CESNET, z.s.p.o. Henrieta Paločková on 13. 10. 2026.