Advisories from national CERTs.

Multiple vulnerabilities in Zabbix Agent Translated from French

Multiple vulnerabilities have been discovered in Zabbix Agent. They allow an attacker to cause a security problem not specified by the vendor.

Vulnerability in Microsoft Office Translated from French

A vulnerability has been discovered in Microsoft Office. It allows an attacker to cause remote arbitrary code execution.

Multiple vulnerabilities in LibreNMS Translated from French

Multiple vulnerabilities have been discovered in LibreNMS. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality and a breach of data integrity.

Multiple vulnerabilities in Wireshark Translated from French

Multiple vulnerabilities have been discovered in Wireshark. They allow an attacker to cause remote arbitrary code execution and remote denial of service.

Multiple vulnerabilities in PHP Translated from French

Multiple vulnerabilities have been discovered in PHP. Some of them allow an attacker to cause remote denial of service, a breach of data confidentiality and a breach of data integrity.

Multiple vulnerabilities in GitLab Translated from French

Multiple vulnerabilities have been discovered in GitLab. Some of them allow an attacker to cause arbitrary code execution, a breach of data confidentiality and remote cross-site scripting (XSS).

Multiple vulnerabilities in Papercut Translated from French

Multiple vulnerabilities have been discovered in Papercut. Some of them allow an attacker to cause remote arbitrary code execution, a breach of data confidentiality and remote cross-site scripting (XSS).

BusyBox: Multiple vulnerabilities Translated from German

GIMP: Multiple vulnerabilities Translated from German

sudo: Vulnerability allows code execution Translated from German

Drupal Erweiterungen: Multiple vulnerabilities Translated from German

Wireshark: Multiple vulnerabilities Translated from German

QT: Vulnerability allows denial of service Translated from German

Red Hat Enterprise Linux (FreeIPA): Multiple vulnerabilities Translated from German

Apache Tomcat APR/native Connector: Multiple vulnerabilities Translated from German

Gitea: Vulnerability allows information disclosure Translated from German

KeePassXC: Multiple vulnerabilities allow denial of service and information disclosure Translated from German

Red Hat Ansible Automation Platform (automation-controller): Multiple vulnerabilities Translated from German

vllm: Multiple vulnerabilities Translated from German

Vercel Next.js: Vulnerability allows code execution Translated from German

GitLab: Multiple vulnerabilities Translated from German

Rancher: Vulnerability allows cross-site scripting Translated from German

WordPress: Vulnerability allows code execution Translated from German

Fleet: Multiple vulnerabilities Translated from German

Paessler PRTG: Multiple vulnerabilities Translated from German

OpenCTI: Multiple vulnerabilities Translated from German

MLflow: Multiple vulnerabilities allow code execution Translated from German

CyberPanel: Multiple vulnerabilities allow information disclosure Translated from German

Keycloak: Multiple vulnerabilities Translated from German

MediaWiki: Vulnerability allows information disclosure Translated from German

Forcepoint Next Generation Firewall: Vulnerability allows bypassing security measures Translated from German

ffmpeg: Vulnerability allows bypassing security measures Translated from German

Nutanix AOS: Multiple vulnerabilities allow an unspecified attack Translated from German

Kubernetes (kubelet, kube-controller-manager): Multiple vulnerabilities Translated from German

Microsoft Outlook: Vulnerability allows code execution Translated from German

OpenBao: Multiple vulnerabilities Translated from German

Vulnerabilities fixed in IBM Langflow OSS and IBM MQ Appliance Translated from Dutch

Vulnerabilities fixed in Adobe Connect and Adobe Connect Android Mobile App Translated from Dutch

Vulnerabilities fixed in Adobe Experience Manager Forms JEE Translated from Dutch

Vulnerability fixed in WordPress Translated from Dutch

Vulnerabilities fixed in SolarWinds Observability Self-Hosted Translated from Dutch

Vulnerability fixed in Check Point Security Management and Log Servers Translated from Dutch

Multiple vulnerabilities in Mattermost Server Translated from French

Multiple vulnerabilities have been discovered in Mattermost Server. They allow an attacker to cause remote denial of service and a breach of data confidentiality.

Multiple vulnerabilities in HPE Aruba Networking products Translated from French

Multiple vulnerabilities have been discovered in HPE Aruba Networking products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

Multiple vulnerabilities in FoxIT products Translated from French

Multiple vulnerabilities have been discovered in FoxIT products. Some of them allow an attacker to cause arbitrary code execution, privilege escalation and a breach of data confidentiality.

Vulnerability in F5 BIG-IP Translated from French

A vulnerability has been discovered in F5 BIG-IP. It allows an attacker to cause remote arbitrary code execution. The vendor reports that vulnerability CVE-2026-94127 is being actively exploited. Indicators of…

Multiple vulnerabilities in Google Chrome Translated from French

Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.

Multiple vulnerabilities in SolarWinds Observability Self-Hosted Translated from French

Multiple vulnerabilities have been discovered in SolarWinds Observability Self-Hosted. They allow an attacker to cause remote arbitrary code execution.

Vulnerability in WordPress Translated from French

A vulnerability has been discovered in WordPress. It allows an attacker to cause remote arbitrary code execution.

Multiple vulnerabilities in Apache Tomcat Translated from French

Multiple vulnerabilities have been discovered in Apache Tomcat. Some of them allow an attacker to cause remote denial of service, a breach of data integrity and a security policy bypass.