Overview of interesting vulnerabilities

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.

[TLP:CLEAR] Overview of interesting vulnerabilities

below is an overview of interesting vulnerabilities that we did not cover in more detail: Acronis fixes 2 vulnerabilities in Acronis Cyber Infrastructure [1][2]. Apache fixes several vulnerabilities in its products Airflow [3], bRPC [4], IoTDB [5][6][7][8], Pulsar [9][10][11][12], Pulsar Manager [13], Tomcat [14][15][16] and Traffic [17]. Arista fixes two vulnerabilities in its products [18][19] and also states that none of its products are currently affected by the recent vulnerabilities in PHP [20]. Atlassian fixes more than 150 vulnerabilities in its products [21]. BIND9 fixes 4 vulnerabilities in versions 9.21.27 and 9.20.30 [22][23]. C-ares fixes 11 vulnerabilities in version 1.34.9 [24]. Cisco fixes a large number of vulnerabilities in Expressway [25][26][27], IOS XR [28], Secure Client [29], Snort 3 [30][31][32][33][34][35][36], Unified CCX, Unified Intelligence Center [37] and in products of the Unified Communications group [38][39]. Drupal fixes several vulnerabilities in its products [40]. The private keys of eight certificates of eMudhra, an Indian certification authority, were exposed due to faulty generation, which allowed anyone to create a trusted certificate [41]. F5 NGINX fixes 2 vulnerabilities [42][43]. HAProxy fixes 2 vulnerabilities in versions 3.2.26 and 3.3.17 [44][45]. HPE fixes several vulnerabilities in its products [46][47]. The Linux Kernel ksmbd module contains 2 prematurely disclosed vulnerabilities allowing RCE, whose fixes have not yet been merged into stable releases [48][49]. Instructions for verifying whether the module is present in your distribution and temporary mitigations can be found at [50]. Microsoft fixes 2 vulnerabilities in Entra Application Proxy [51] and Exchange Online [52]. MikroTik RouterOS fixes 1 vulnerability in versions 7.23.3 (long-term) and 7.24 (stable) [53]. MongoDB fixes 1 high-severity vulnerability in Compass version 1.49.15 [54]. OpenVPN fixes 1 vulnerability in version 3.11.8 [55]. Perl fixes 1 critical vulnerability in Net-LibSSH version 0.0004 [56]. QPACK implementations fix 1 vulnerability in quic-go 0.57.0 [57], Cloudflare quiche 0.29.3 [58], lsquic 4.9.0 [59] and Wireshark 4.6.2/4.4.12 [60]. Splunk fixes several vulnerabilities in versions of its products Enterprise 10.4.4, 10.2.8, 10.0.11 and 9.4.16 [61][62][63], and SOAR 8.7.0 [64][65][66]. Tailscale SSH reports several vulnerabilities allowing LPE, with fixes scheduled for release by the end of 27.10.2026 [67]. Instructions for temporary mitigations as well as further information can be found at [67]. Ubiquity fixes 4 vulnerabilities in product versions airMAX M 6.3.26, LTU PTMP 2.4.2, LTU PTP 1.5.7, SolarPoint / SolarSwitch 2.0.3 [68]. Wasmtime fixes 2 critical sandbox escape vulnerabilities in versions 36.0.19, 48.0.7 and 49.0.4 [69][70].

Links

By CESNET, z.s.p.o. Ondrej Pavlovič on 27. 10. 2026.

Report feedback

[TLP:CLEAR] Overview of interesting vulnerabilities

Links