Insights — neonotu

Red Hat Enterprise Linux (postgis, virtuoso-opensource): several vulnerabilities

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports several vulnerabilities in Red Hat Enterprise Linux (postgis, virtuoso-opensource) with severity high. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Check Point Security Gateway, Spark Firewall und Security Management: Code execution possible

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports several vulnerabilities in Check Point Security Gateway, Spark Firewall und Security Management with severity high. The stated impact is code execution. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Attack vector: over the network
Access needed: none

VLC: several vulnerabilities

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports several vulnerabilities in VLC with severity high. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Attack vector: over the network
Access needed: none
Security update: not yet available

GeoNetwork: Bypassing security controls possible

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports one vulnerability in GeoNetwork with severity high. The stated impact is bypassing security controls. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Attack vector: over the network
Access needed: none

Joplin: several vulnerabilities

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports several vulnerabilities in Joplin with severity high. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Palo Alto Networks Cortex XDR Broker VM: Code execution with administrator privileges possible

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports one vulnerability in Palo Alto Networks Cortex XDR Broker VM with severity high. The stated impact is code execution with administrator privileges. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Palo Alto Networks PAN-OS: several vulnerabilities

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports several vulnerabilities in Palo Alto Networks PAN-OS with severity high. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Linux Kernel: several vulnerabilities

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports several vulnerabilities in Linux Kernel with severity high. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Red Hat Enterprise Linux (lxml): Bypassing security controls possible

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports one vulnerability in Red Hat Enterprise Linux (lxml) with severity high. The stated impact is bypassing security controls. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Attack vector: over the network
Access needed: none

Netty: several vulnerabilities

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports several vulnerabilities in Netty with severity high. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Attack vector: over the network
Access needed: none

PackageKit: several vulnerabilities

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports several vulnerabilities in PackageKit with severity high. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Attack vector: local only

Apache ActiveMQ Artemis: several vulnerabilities

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports several vulnerabilities in Apache ActiveMQ Artemis with severity high. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Arista EOS: several vulnerabilities

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports several vulnerabilities in Arista EOS with severity high. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Budibase: several vulnerabilities

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports several vulnerabilities in Budibase with severity critical. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Kyverno: several vulnerabilities

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports several vulnerabilities in Kyverno with severity high. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Attack vector: over the network
Access needed: yes, an account is needed

Drupal Erweiterungen: several vulnerabilities

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports several vulnerabilities in Drupal Erweiterungen with severity high. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Palo Alto Networks GlobalProtect App: Privilege escalation possible

Thu, 10 Sep 2026 00:00:00 +0000

CERT-Bund (BSI) reports one vulnerability in Palo Alto Networks GlobalProtect App with severity high. The stated impact is privilege escalation. The full description, affected versions and recommended action are available from CERT-Bund (BSI).

Attack vector: local only

Check Point VPN producten: several vulnerabilities

Thu, 10 Sep 2026 00:00:00 +0000

NCSC-NL reports several vulnerabilities in Check Point VPN producten with severity critical. Affected: CVE-2026-85102, CVE-2026-85103. The full description, affected versions and recommended action are available from NCSC-NL.

Check Point Products: several vulnerabilities

Thu, 10 Sep 2026 00:00:00 +0000

CERT-EU — Security Advisories reports several vulnerabilities in Check Point Products with severity critical. The full description, affected versions and recommended action are available from CERT-EU — Security Advisories.

Attack vector: over the network
Access needed: none

Adobe Illustrator: several vulnerabilities