Bundesamt für Sicherheit in der Informationstechnik vulnerabilities and threats

CVE-2026-43494 is a vulnerability in the Linux kernel that allows privilege escalation. The Linux kernel is the core component of the Linux operating system. This vulnerability affects multiple Linux distributions including Amazon Linux 2 and Debian Linux. No CVSS score or detailed technical exploitation information is provided. There is no indication of known exploits in the wild or available patches at this time.

Memcached ist ein Cache Server für Datenbanken.

NVidia ist ein Hersteller von Grafikkarten.

ImageMagick ist eine Sammlung von Programmbibliotheken und Werkzeugen, die Grafiken in zahlreichen Formaten verarbeiten kann.

Multiple vulnerabilities have been identified in ImageMagick, a collection of libraries and tools for processing graphics in numerous formats. These vulnerabilities affect various distributions including Amazon Linux 2 and Debian Linux, as well as open source versions. The issues are cataloged under several CVE identifiers, indicating multiple distinct security flaws. The severity is assessed as medium. No CVSS score is provided, and no known exploits in the wild have been reported. Patch status is not confirmed from the available data.

Der Kernel stellt den Kern des Linux Betriebssystems dar.

A vulnerability identified as CVE-2026-45717 affects Budibase, an open-source low-code platform used for creating internal applications such as admin panels. The issue allows an attacker to bypass security controls. The affected versions include Budibase versions prior to 3.38.1. There is no CVSS score available, no known exploits in the wild, and no patch or remediation information provided by the vendor. The vulnerability was published by the Bundesamt für Sicherheit in der Informationstechnik. Due to the lack of detailed technical information and absence of a vendor advisory specifying a fix, the patch status is not confirmed.

Budibase, an open-source low-code platform for building internal applications, has multiple vulnerabilities affecting versions prior to 3.38.2. These vulnerabilities are catalogued under CVE-2026-46424, CVE-2026-46425, CVE-2026-46426, and CVE-2026-46427. No CVSS scores or detailed technical descriptions are provided. There are no known exploits in the wild, and no patch or remediation information is currently available from the vendor advisory. The affected product is not a cloud service. Due to the lack of detailed impact or exploitability data, the severity is assessed as medium based on the presence of multiple vulnerabilities in a platform used for internal application development.

Vim (Vi IMproved) ist eine Weiterentwicklung des Texteditors vi.

Multiple critical security vulnerabilities have been identified in Kiali components used in Red Hat OpenShift Service Mesh versions 3.0 and 3.1. These vulnerabilities affect the Axios HTTP client, Go certificate chain building, and the follow-redirects library, leading to issues such as denial of service, HTTP transport hijacking, arbitrary HTTP header injection, authentication bypass, information disclosure, and JSON response tampering. Red Hat has released updated Kiali versions 2.4.16 for OpenShift Service Mesh 3.0 and 2.11.10 for OpenShift Service Mesh 3.1 that address these issues. The advisories provide RPM packages and documentation for remediation. No known exploits in the wild have been reported at this time.

Multiple vulnerabilities have been identified in FreeRDP, an open-source implementation of the Remote Desktop Protocol (RDP), affecting versions prior to 3.26.0. These vulnerabilities are cataloged under CVE-2026-44420 and CVE-2026-40033. No CVSS score is currently available for these issues. There are no known exploits in the wild at this time. The vendor advisory from the Bundesamt für Sicherheit in der Informationstechnik does not provide explicit patch or remediation details. Users of FreeRDP versions earlier than 3.26.0 should be aware of these vulnerabilities and monitor for updates or official fixes.

Multiple vulnerabilities have been reported in KDE applications Kdenlive and Okular. KDE is a graphical desktop environment for Linux systems. No specific details about the vulnerabilities, affected versions, or impacts are provided.

Multiple vulnerabilities in the HCL BigFix WebUI applications allow information disclosure. BigFix is a solution used for detecting and managing physical and virtual endpoints. No specific affected versions or detailed technical information are provided.

A memory corruption vulnerability exists in the LibRaw library used by Red Hat Enterprise Linux (RHEL) 8. This flaw can be triggered by processing malicious RAW image files, potentially allowing code execution. Red Hat has released an important security update fixing this issue in RHEL 8.8. Users of affected versions should apply the update to mitigate the risk.

A vulnerability identified as CVE-2026-45130 affects the Vim text editor, which is an enhanced version of vi. The vulnerability allows for a denial of service (DoS) condition. The affected products include Microsoft Azure Linux distributions and open source versions of Vim. There is no CVSS score available for this vulnerability, and no known exploits in the wild have been reported. No patch or remediation information is currently provided by the vendor advisory from the Bundesamt für Sicherheit in der Informationstechnik. The vulnerability does not appear to be related to a cloud service, so remediation would depend on vendor or community updates to the affected software.

CVE-2026-45548 is a vulnerability in Budibase, an open-source low-code platform for building internal applications such as admin panels. The vulnerability allows for information disclosure in affected versions up to and including 3.34.4. There is no CVSS score or detailed technical information available about the nature or exploitation of the vulnerability. No known exploits are reported in the wild, and no official patch or remediation guidance is provided in the available data.

Multiple vulnerabilities have been identified in Apache CloudStack version 4.20.3.0, an open source platform for managing large networks of virtual machines as a highly available and scalable Infrastructure as a Service (IaaS) cloud computing solution. The software was originally developed by Citrix and later contributed to the Apache Foundation. No detailed technical or impact information is provided.

Multiple vulnerabilities in Netgate pfSense versions 2.7.2 and 2.8.0 allow execution of arbitrary code with administrator privileges. pfSense is a software edge firewall with router and VPN functionality.

Multiple vulnerabilities have been identified in IBM App Connect Enterprise Certified Container, a product that combines IBM Integration Bus technologies with cloud-native technologies. No specific details about the nature of these vulnerabilities, affected versions, or impacts are provided in the available data.

Multiple vulnerabilities have been identified in Microsoft GitHub Enterprise, a web-based version control service for software development projects. Specific details about these vulnerabilities, including their nature, impact, and affected versions, are not provided in the available information.