Bundesamt für Sicherheit in der Informationstechnik vulnerabilities and threats

A vulnerability in IBM App Connect Enterprise, which integrates IBM Integration Bus with cloud-native technologies, allows code execution. The affected versions are prior to and including 13.0.7.1. A fix is available in version 13.0.7.1.

A vulnerability has been identified in NetApp ActiveIQ Unified Manager, a management solution for NetApp storage products. The flaw potentially allows manipulation of data and disclosure of information. No specific affected versions or detailed technical information are provided. There is no CVSS score or known exploits in the wild at this time.

A cross-site scripting (XSS) vulnerability has been identified in MISP, an open-source threat intelligence sharing platform. This vulnerability affects versions prior to 2.5.37 and version 2.5.37 itself. The issue has been addressed in version 2.5.37.

A vulnerability in LiteLLM, an open-source gateway providing a unified interface for various Large Language Models (LLMs), allows for code execution and information disclosure. The issue affects versions prior to and including 1.83.7. A fix is available in version 1.83.7.

A vulnerability identified as CVE-2026-42826 affects Microsoft Azure DevOps, potentially allowing information disclosure. The vulnerability is publicly known but lacks detailed technical information, CVSS scoring, or confirmed exploit activity. No specific affected versions or patch information are provided.

A vulnerability identified as CVE-2026-33823 affects Microsoft Teams, a collaboration and communication tool. The issue involves information disclosure, but no further technical details or affected versions are provided. No CVSS score or exploit status is available.

Budibase, an open-source low-code platform for building internal applications, has a security vulnerability identified as CVE-2026-42239. This flaw allows attackers to bypass security controls and potentially escalate privileges. A fix for this vulnerability is available in version 3.35.10.

Multiple vulnerabilities in Microsoft 365 Copilot Business Chat could allow information disclosure. Microsoft Copilot is an AI assistant integrated into various Microsoft products. No specific affected versions or detailed impact information are provided.

Der Kernel stellt den Kern des Linux Betriebssystems dar.

A vulnerability identified as CVE-2026-8063 affects MongoDB, an open-source document database. The flaw allows for a denial of service condition. No specific affected versions or detailed technical information are provided.

Multiple vulnerabilities have been identified in VMware Tanzu Spring Cloud Config, a platform for deploying and managing Spring applications in cloud environments using microservices architectures. Specific details about the nature of these vulnerabilities, their impact, and affected versions are not provided in the available information.

Multiple vulnerabilities have been identified in OpenSearch, an open-source software package for search, analytics, and observability applications. These issues affect versions prior to 2.19.4.0. A fix is available in version 2.19.4.0.

Flowise, an open-source user interface for creating Large Language Models (LLMs), has multiple vulnerabilities that allow information disclosure. These issues affect versions prior to 3.0.12. The vulnerabilities have been addressed in version 3.0.12.

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) allow information disclosure. Cisco ISE is an attribute-based access control solution. No specific affected versions or CVSS score are provided. No known exploits in the wild have been reported.

A vulnerability in Cisco Network Services Orchestrator (NSO) allows for a denial of service condition. NSO integrates network automation and orchestration tools with physical and virtual infrastructure. The issue affects versions prior to 6.4.1.3, with version 6.4.1.3 containing the fix.

A vulnerability in Cisco Prime Infrastructure allows information disclosure. Cisco Prime Infrastructure integrates wireless and wired network management with application performance monitoring and troubleshooting capabilities. No specific affected versions or detailed impact metrics are provided.

Multiple vulnerabilities have been identified in Cisco Unity Connection, a voicemail and integrated messaging product. These affect versions prior to and including 14SU5. The vendor has released version 14SU5 as a fix for these issues.

A vulnerability identified as CVE-2026-6691 affects MongoDB, an open-source document database. The vulnerability reportedly allows code execution. No specific affected versions or detailed technical information are provided.

A vulnerability in Dell PowerScale OneFS, a NAS platform optimized for managing large data volumes in enterprise environments, allows manipulation of files. The issue affects versions prior to 9.5.1.7 and is fixed in version 9.5.1.7.

An information disclosure vulnerability exists in Argo CD, an open source GitOps-based continuous delivery tool for Kubernetes. The issue affects versions prior to 3.2.11 and is fixed in version 3.2.11.