Advisories from national CERTs.

WordPress: Multiple vulnerabilities Translated from German

Harbor: Multiple vulnerabilities Translated from German

Veeam Backup Enterprise Manager: Multiple vulnerabilities Translated from German

Microsoft GitHub Enterprise: Multiple vulnerabilities Translated from German

Devolutions Server: Multiple vulnerabilities Translated from German

Aruba ClearPass Policy Manager: Multiple vulnerabilities Translated from German

Aruba ArubaOS Switch: Multiple vulnerabilities Translated from German

NetBox: Vulnerability allows information disclosure Translated from German

Vulnerability fixed in Atlassian Data Center products Translated from Dutch

Incident affecting ASOS customers

ASOS has said it is investigating a cyber incident and that some customer personal information may have been accessed.

Vulnerability fixed in Microsoft Exchange Server Translated from Dutch

Vulnerability in Atlassian products Translated from French

A vulnerability has been discovered in Atlassian products. It allows an attacker to cause a breach of data confidentiality.

Multiple vulnerabilities in Google Android Translated from French

Multiple vulnerabilities have been discovered in Google Android. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.

Vulnerability in Microsoft Office Translated from French

A vulnerability has been discovered in Microsoft Office. It allows an attacker to cause remote arbitrary code execution.

Linux Kernel: Multiple vulnerabilities Translated from German

LibreOffice: Multiple vulnerabilities Translated from German

Red Hat Enterprise Linux (libgd): Vulnerability allows code execution Translated from German

Checkmk: Multiple vulnerabilities Translated from German

CUPS: Vulnerability allows denial of service Translated from German

Samsung Android: Multiple vulnerabilities Translated from German

Camunda: Vulnerability allows gaining administrator rights Translated from German

Atlassian products (Bamboo, Bitbucket, Confluence, Crucible, Fisheye and Jira): Vulnerability allows information disclosure Translated from German

GnuPG: Vulnerability allows file manipulation Translated from German

HPE Integrated Lights-Out: Vulnerability allows privilege escalation Translated from German

vllm: Multiple vulnerabilities allow denial of service Translated from German

Zammad: Multiple vulnerabilities Translated from German

OpenJPEG: Vulnerability allows denial of service Translated from German

Keycloak: Vulnerability allows bypassing security measures Translated from German

Joplin: Vulnerability allows bypassing security measures Translated from German

Angular: Vulnerability allows information disclosure Translated from German

Progress Software Sitefinity Next.js Renderer SDK: Vulnerability allows file manipulation Translated from German

BuildKit: Multiple vulnerabilities Translated from German

Android Patchday Oktober 2026: Multiple vulnerabilities Translated from German

Dell has fixed vulnerabilities in Container storage modules Translated from Dutch

Multiple vulnerabilities in Zabbix Translated from French

Multiple vulnerabilities have been discovered in Zabbix. Some of them allow an attacker to cause remote denial of service, a breach of data confidentiality and a breach of data integrity.

Multiple vulnerabilities in OpenOffice Translated from French

Multiple vulnerabilities have been discovered in OpenOffice. They allow an attacker to cause remote arbitrary code execution.

Multiple vulnerabilities in Google Chrome Translated from French

Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.

Vulnerability in GitLab Translated from French

A vulnerability has been discovered in GitLab. It allows an attacker to cause remote arbitrary code execution.

Vulnerability in Microsoft Exchange Server Translated from French

A vulnerability has been discovered in Microsoft Exchange Server. It allows an attacker to cause privilege escalation.

Vulnerability in Citrix NetScaler ADC and Gateway Translated from French

A vulnerability has been discovered in Citrix NetScaler ADC and Gateway. It allows an attacker to cause remote denial of service. CISA reports that vulnerability CVE-2026-88779 is being actively exploited.

Bouncy Castle for Java: Multiple vulnerabilities Translated from German

ImageMagick: Vulnerability allows bypassing security measures Translated from German

RabbitMQ: Vulnerability allows denial of service Translated from German

Google Chrome / Microsoft Edge: Multiple vulnerabilities Translated from German

Apache Struts: Multiple vulnerabilities Translated from German

Langflow: Multiple vulnerabilities Translated from German

Zabbix: Multiple vulnerabilities Translated from German

Rapid7 Velociraptor: Multiple vulnerabilities Translated from German

Zabbix (Frontend): Vulnerability allows cross-site scripting Translated from German

Apache Traffic Server: Vulnerability allows bypassing security measures Translated from German