Bundesamt für Sicherheit in der Informationstechnik vulnerabilities and threats

A vulnerability in JetBrains IntelliJ IDEA, a Java development environment, allows information disclosure. The flaw affects versions prior to 2024.3.7.1 and is fixed in version 2024.3.7.1.

A vulnerability identified as CVE-2026-44656 affects Vim (Vi IMproved), a text editor derived from vi. The vulnerability is reported by the Bundesamt für Sicherheit in der Informationstechnik and involves affected versions including Microsoft Azure Linux distributions and open-source variants. No CVSS score or detailed technical exploitation information is provided. There are no known exploits in the wild and no patch or remediation details have been disclosed. The vulnerability potentially allows code execution, but specifics are not detailed in the available data.

LiteLLM is an open-source gateway providing a unified interface for various Large Language Models (LLMs). A vulnerability identified as CVE-2026-35029 allows bypassing security measures in LiteLLM. The issue affects versions prior to and including 1.83.0-nightly. A fix is available in version 1.83.0-nightly. No known exploits are reported in the wild. The vendor advisory indicates that remediation is provided, and detection templates exist for identifying the vulnerability.

Multiple vulnerabilities have been identified in the FreeBSD operating system, an open-source Unix derivative. These issues affect versions prior to 13.5 and version 13.5 itself. A fix has been released in version 13.5 to address these vulnerabilities.

Multiple vulnerabilities have been identified in Absolute Secure Access, a security solution that provides secure network access for endpoints regardless of their location. These vulnerabilities affect versions prior to 14.50, including version 14.5. A fix is available in version 14.50.

This entry references multiple vulnerabilities affecting the Google Chrome and Microsoft Edge web browsers. The information provided is minimal, only identifying the browsers and the Debian product without specific details about the vulnerabilities, their impact, or affected versions.

Multiple vulnerabilities have been identified in Rapid7 Velociraptor, a tool used for endpoint detection, response, and digital forensics. These issues affect versions prior to and including 0.76.4. A fix is available in version 0.76.4.

cURL ist eine Client-Software, die das Austauschen von Dateien mittels mehrerer Protokolle wie z. B. HTTP oder FTP erlaubt.

A vulnerability has been identified in Mattermost, a web-based instant messaging service, specifically related to its plugins. The exact nature and method of the attack enabled by this vulnerability are not specified in the available information. There are no known exploits in the wild at this time. No patch or remediation details have been provided by the vendor or authoritative sources. The vulnerability was published by the Bundesamt für Sicherheit in der Informationstechnik on April 27, 2026.

Multiple vulnerabilities have been identified in nginx-ui, an open-source web interface for managing and configuring Nginx web servers. These issues affect versions prior to and including 2.3.8. A fixed version, 2.3.8, has been released to address these vulnerabilities.

Multiple vulnerabilities in Notepad++ before version 8.9.4 allow denial of service (DoS) or information disclosure. Notepad++ is an open-source editor supporting many programming languages on Microsoft Windows. These issues have been addressed in version 8.9.4.

Multiple vulnerabilities have been identified in CoreDNS, a DNS server, as reported by the Bundesamt für Sicherheit in der Informationstechnik under CVE-2026-33190 and related CVEs. The advisory references Red Hat's security update for Submariner, a Kubernetes operator related to cross-cluster connectivity, which includes fixes for several CVEs including some listed here. No specific technical details or exploitation methods are provided. The affected version is listed as '=azl3', but this version identifier is non-standard and not further clarified. No CVSS score is available for these vulnerabilities.

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

This record references multiple vulnerabilities affecting the Google Chrome and Microsoft Edge browsers. The description is minimal and only states that Chrome is an internet browser by Google. No specific technical details, impact, or affected versions are provided.

Strongswan ist eine IPSec-basierte VPN Implementierung.

A vulnerability in HCL BigFix, a solution for detecting and managing physical and virtual endpoints, allows bypassing security measures and potentially escalating privileges. No specific affected versions or CVSS score are provided. No known exploits in the wild have been reported.

A vulnerability in Microsoft ASP.NET allows privilege escalation. This affects versions prior to 10.0.7. The issue has been fixed in version 10.0.7. No public exploit or CVSS score is currently available.

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

CVE-2026-43574 is a vulnerability in OpenClaw, a personal AI assistant designed for local device execution. The flaw allows an attacker to bypass security measures. A fix for this vulnerability is available in version 2026.4.12.

Multiple unspecified vulnerabilities have been identified in Mattermost versions prior to 11.7.0. These vulnerabilities could potentially allow attacks, but specific attack vectors and impacts are not detailed in the available information. No known exploits are reported in the wild. The vulnerabilities are documented by the Bundesamt für Sicherheit in der Informationstechnik. There is no CVSS score or detailed technical description available to assess the exact nature of the weaknesses. Patch availability is not confirmed in the provided data. Users of Mattermost versions below 11.7.