[ Advisories · last 30 days ]

Advisories from national CERTs.

Security advisories, alerts and news from government security teams in Europe and the UK. German, French and Dutch advisories are shown in English translation; each one links to the original.

All · 804 NCSC-NL · 64 NCSC-UK · 8 CERT-EU · 6 CERT-FR · 162 BSI CERT-Bund · 564

BSI CERT-Bund29 Sep 2026WID-SEC-2026-3673

OpenClaw: Multiple vulnerabilities Translated from German
CVE-2026-102806CVE-2026-102807
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3671

Moodle: Multiple vulnerabilities Translated from German
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3670

TeamViewer: Multiple vulnerabilities Translated from German
CVE-2026-19743CVE-2026-92371CVE-2026-92370+2 more CVEs
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3669

Gitea: Vulnerability allows information disclosure Translated from German
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3667

OpenProject: Multiple vulnerabilities Translated from German
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3666

OWASP ModSecurity: Multiple vulnerabilities Translated from German
CVE-2026-73857CVE-2026-73856CVE-2026-61812+1 more CVEs
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3663

OpenBSD: Multiple vulnerabilities Translated from German
CVE-2026-12245CVE-2026-19401CVE-2026-18664+5 more CVEs
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3658

Hitachi Energy RTU500: Multiple vulnerabilities Translated from German
CVE-2023-46143CVE-2010-2965CVE-2026-8065+3 more CVEs
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3655

IBM InfoSphere Data Replication: Multiple vulnerabilities Translated from German
CVE-2026-33937CVE-2026-33941CVE-2026-33939+3 more CVEs
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3647

TIBCO Administrator: Vulnerability allows privilege escalation Translated from German
CVE-2026-4034
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3646

WatchGuard Fireware OS: Multiple vulnerabilities Translated from German
CVE-2026-86104CVE-2026-86136CVE-2026-86105+12 more CVEs
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3645

Webmin: Vulnerability allows cross-site scripting Translated from German
CVE-2026-49243
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3644

LiteLLM: Vulnerability allows privilege escalation and code execution Translated from German
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3643

RPM: Vulnerability allows code execution Translated from German
CVE-2026-95520
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3641

OPNsense: Vulnerability allows bypassing security measures Translated from German
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3636

Joomla: Multiple vulnerabilities Translated from German
CVE-2026-92227CVE-2026-90914CVE-2026-90913+13 more CVEs
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3635

Devolutions Server: Multiple vulnerabilities Translated from German
CVE-2026-100288CVE-2026-93332CVE-2026-100286+3 more CVEs
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3634

Ollama: Vulnerability allows code execution Translated from German
CVE-2026-102697
BSI CERT-Bund29 Sep 2026WID-SEC-2026-3633

HPE OneView: Multiple vulnerabilities Translated from German
CVE-2026-76718CVE-2026-76719CVE-2026-76720
CERT-FR29 Sep 2026CERTFR-2026-AVI-1236

Vulnerability in Apple products Translated from French

A vulnerability has been discovered in Apple products. It allows an attacker to cause remote arbitrary code execution. Apple reports that vulnerability CVE-2026-86950 is being actively exploited.
CVE-2026-86950
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3619

libpng: Vulnerability allows denial of service Translated from German
Risk mediumCVE-2026-46675
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3622

PCRE (Perl Compatible Regular Expressions): Vulnerability allows code execution Translated from German
Risk mediumCVE-2026-103111
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3625

WebKitGTK: Multiple vulnerabilities Translated from German
CVE-2026-64782CVE-2026-11057CVE-2026-9913+230 more CVEs
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3618

GNU libc: Vulnerability allows denial of service Translated from German
CVE-2026-97399
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3612

gcc: Vulnerability allows file manipulation and denial of service Translated from German
CVE-2026-102010
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3623

IBM DataPower Gateway: Multiple vulnerabilities Translated from German
CVE-2026-31411CVE-2025-39766CVE-2026-46331+199 more CVEs
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3627

FasterXML Jackson Databind: Vulnerability allows denial of service Translated from German
CVE-2026-19032
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3629

Froxlor: Multiple vulnerabilities Translated from German
CVE-2026-109961CVE-2026-109963CVE-2026-109960+1 more CVEs
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3626

Red Hat Enterprise Linux (cjose): Vulnerability allows denial of service and data manipulation Translated from German
CVE-2026-53938
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3631

DENX U-Boot: Vulnerability allows code execution Translated from German
CVE-2026-15390
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3616

Langflow: Multiple vulnerabilities Translated from German
CVE-2026-105698CVE-2026-101861CVE-2026-105697
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3617

LiteLLM: Vulnerability allows bypassing security measures and potentially privilege escalation Translated from German
CVE-2026-93355
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3620

GeoServer: Vulnerability allows code execution and information disclosure Translated from German
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3630

Apache Airflow Providers: Multiple vulnerabilities Translated from German
CVE-2026-81930CVE-2026-81914CVE-2026-86843+1 more CVEs
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3628

Ghostscript: Vulnerability allows privilege escalation Translated from German
CVE-2026-19547
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3632

Zabbix: Vulnerability allows information disclosure Translated from German
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3624

Wind River VxWorks 7: Multiple vulnerabilities Translated from German
CVE-2026-102004CVE-2026-97686CVE-2026-102005+1 more CVEs
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3615

Octopus Deploy: Vulnerability allows code execution Translated from German
CVE-2026-101169
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3621

IBM App Connect Enterprise: Multiple vulnerabilities Translated from German
CVE-2026-92595CVE-2026-59871CVE-2022-35948+13 more CVEs
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3614

Keycloak (Micrometer): Vulnerability allows denial of service Translated from German
CVE-2026-101333
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3613

Kubernetes (kubectl): Vulnerability allows file manipulation Translated from German
CVE-2026-19444
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3611

git for Windows: Multiple vulnerabilities allow file manipulation and denial of service Translated from German
CVE-2026-100408CVE-2026-100407
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3610

Bitwarden: Vulnerability allows bypassing security measures Translated from German
CVE-2026-101878
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3609

Apple iOS, iPadOS, macOS Tahoe and Sequoia: Vulnerability allows code execution Translated from German
CVE-2026-86950
BSI CERT-Bund28 Sep 2026WID-SEC-2026-3608

Hazelcast: Vulnerability allows bypassing security measures Translated from German
NCSC-UK28 Sep 2026

Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway

The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.
CERT-FR28 Sep 2026CERTFR-2026-AVI-1235

Multiple vulnerabilities in Citrix NetScaler ADC and Gateway Translated from French

Multiple vulnerabilities have been discovered in Citrix NetScaler ADC and Gateway. Some of them allow an attacker to cause remote arbitrary code execution, remote denial of service and a security policy bypass. Citrix…
CVE-2026-88777CVE-2026-88776CVE-2026-88771+5 more CVEs
CERT-FR28 Sep 2026CERTFR-2026-AVI-1234

Multiple vulnerabilities in MongoDB Translated from French

Multiple vulnerabilities have been discovered in MongoDB. They allow an attacker to cause a breach of data integrity, a security policy bypass and a security problem not specified by the vendor.
CVE-2026-96745CVE-2026-96748CVE-2026-96747+2 more CVEs
CERT-FR28 Sep 2026CERTFR-2026-ALE-011

Multiple vulnerabilities in Citrix NetScaler ADC and Gateway Translated from French

[Update of 5 October 2026] On 4 October 2026, Citrix published an advisory about a new vulnerability (CVE-2026-88779) allowing remote denial of service. CISA reports that this vulnerability is being actively exploited…
AlertCVE-2026-88771CVE-2026-88772CVE-2026-88779
BSI CERT-Bund27 Sep 2026WID-SEC-2026-3591

ImageMagick: Multiple vulnerabilities Translated from German
Risk mediumCVE-2026-109259CVE-2026-109264CVE-2026-106566+30 more CVEs

OpenClaw: Multiple vulnerabilities Translated from German

Moodle: Multiple vulnerabilities Translated from German

TeamViewer: Multiple vulnerabilities Translated from German

Gitea: Vulnerability allows information disclosure Translated from German

OpenProject: Multiple vulnerabilities Translated from German

OWASP ModSecurity: Multiple vulnerabilities Translated from German

OpenBSD: Multiple vulnerabilities Translated from German

Hitachi Energy RTU500: Multiple vulnerabilities Translated from German

IBM InfoSphere Data Replication: Multiple vulnerabilities Translated from German

TIBCO Administrator: Vulnerability allows privilege escalation Translated from German

WatchGuard Fireware OS: Multiple vulnerabilities Translated from German

Webmin: Vulnerability allows cross-site scripting Translated from German

LiteLLM: Vulnerability allows privilege escalation and code execution Translated from German

RPM: Vulnerability allows code execution Translated from German

OPNsense: Vulnerability allows bypassing security measures Translated from German

Joomla: Multiple vulnerabilities Translated from German

Devolutions Server: Multiple vulnerabilities Translated from German

Ollama: Vulnerability allows code execution Translated from German

HPE OneView: Multiple vulnerabilities Translated from German

Vulnerability in Apple products Translated from French

libpng: Vulnerability allows denial of service Translated from German

PCRE (Perl Compatible Regular Expressions): Vulnerability allows code execution Translated from German

WebKitGTK: Multiple vulnerabilities Translated from German

GNU libc: Vulnerability allows denial of service Translated from German

gcc: Vulnerability allows file manipulation and denial of service Translated from German

IBM DataPower Gateway: Multiple vulnerabilities Translated from German

FasterXML Jackson Databind: Vulnerability allows denial of service Translated from German

Froxlor: Multiple vulnerabilities Translated from German

Red Hat Enterprise Linux (cjose): Vulnerability allows denial of service and data manipulation Translated from German

DENX U-Boot: Vulnerability allows code execution Translated from German

Langflow: Multiple vulnerabilities Translated from German

LiteLLM: Vulnerability allows bypassing security measures and potentially privilege escalation Translated from German

GeoServer: Vulnerability allows code execution and information disclosure Translated from German

Apache Airflow Providers: Multiple vulnerabilities Translated from German

Ghostscript: Vulnerability allows privilege escalation Translated from German

Zabbix: Vulnerability allows information disclosure Translated from German

Wind River VxWorks 7: Multiple vulnerabilities Translated from German

Octopus Deploy: Vulnerability allows code execution Translated from German

IBM App Connect Enterprise: Multiple vulnerabilities Translated from German

Keycloak (Micrometer): Vulnerability allows denial of service Translated from German

Kubernetes (kubectl): Vulnerability allows file manipulation Translated from German

git for Windows: Multiple vulnerabilities allow file manipulation and denial of service Translated from German

Bitwarden: Vulnerability allows bypassing security measures Translated from German

Apple iOS, iPadOS, macOS Tahoe and Sequoia: Vulnerability allows code execution Translated from German

Hazelcast: Vulnerability allows bypassing security measures Translated from German

Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway

Multiple vulnerabilities in Citrix NetScaler ADC and Gateway Translated from French

Multiple vulnerabilities in MongoDB Translated from French

Multiple vulnerabilities in Citrix NetScaler ADC and Gateway Translated from French

ImageMagick: Multiple vulnerabilities Translated from German