Overview of interesting vulnerabilities

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] Overview of interesting vulnerabilities

below is an overview of interesting vulnerabilities that we did not cover in more detail: Curl fixes 24 vulnerabilities in version 8.23.0, including one of high severity for which remote code execution has been demonstrated under laboratory conditions [1][2]. Drupal Core fixes 3 vulnerabilities in versions 10.6.19, 11.3.19 and 11.4.10, including one critical vulnerability whose exploitation allows code execution under certain conditions [3][4][5]. Eclipse Jetty fixes 8 vulnerabilities in versions 12.1.13, 12.0.39, 11.0.33, 10.0.33, 9.4.65 [6][7][8][9][10][11][12][13]. F5 fixes several vulnerabilities in BIG-IP, CIS, EOB, Aspen Mesh, BIG-IQ, Insight, F5OS, Access and NGINX [14]. Google fixes 10 vulnerabilities in Chrome (Stable) in versions 155.0.8059.84/.85 for Windows and Mac and 155.0.8059.84 for Linux [15], and 10 vulnerabilities in Chrome (Extended stable) in version 152.0.7977.169 for Windows and Mac [16]. HPE fixes 6 vulnerabilities, one of them critical, in versions 3.22 for Integrated Lights-Out 5, 1.79 for Lights-Out 6 and 1.25.01 for Integrated Lights-Out 7 [17]. Juniper fixes several vulnerabilities in JunosOS, JunosOS Evolved and Cloud-Native Router [18]. The Linux Kernel fixes the serious LPE and KVM escape vulnerability vghost (CVE-2026-74580) and the VM escape vulnerability PwnEscape (CVE-2026-99999) [19][20]. Microsoft fixes 1453 vulnerabilities, one of which (Windows Shell) is being actively exploited [21]. Mozilla fixes several vulnerabilities in Thunderbird in versions 158 and 153.5 [22][23]. Palo Alto fixes several Chromium vulnerabilities and 12 of its own vulnerabilities in Cloud NGFW, PAN-OS, Prisma Access, GlobalProtect App, Cortex XSIAM OS Query, Cortex XSOAR OS Query, Checkov by Prisma Cloud and Prisma Browser [24]. SonicWall fixes 2 vulnerabilities in Network Security Manager On-Prem in version 4.4.0 [25].

Links

By CESNET, z.s.p.o. Martin Krajči on 16. 10. 2026.

Report feedback

[TLP:CLEAR] Overview of interesting vulnerabilities

Links