Threats Tagged 'bundesamt-f-r-sicherheit-in-de'

A vulnerability has been identified in Wazuh Manager version 5.0.0-beta3 that allows privilege escalation. Wazuh is an open-source security monitoring platform providing intrusion detection, log analysis, and SIEM capabilities. This issue could enable an attacker to gain elevated privileges within the affected system. No CVSS score or detailed technical exploitation information is currently available. There are no known exploits in the wild at this time. No official patch or remediation guidance has been provided yet by the vendor.

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Multiple vulnerabilities have been identified in Red Hat Hardened Images RPMs, affecting Fedora and related Red Hat products. Red Hat has issued security advisories RHSA-2026:7288 and RHSA-2026:7191 addressing these issues. The advisories announce updates for the affected RPMs but do not specify fixed CVEs or detailed vulnerability descriptions. No known exploits are reported in the wild. The vendor provides official updates and guidance through their security advisories and image repositories.

Multiple vulnerabilities have been identified in CoreDNS, a DNS server, as reported by the Bundesamt für Sicherheit in der Informationstechnik under CVE-2026-33190 and related CVEs. The advisory references Red Hat's security update for Submariner, a Kubernetes operator related to cross-cluster connectivity, which includes fixes for several CVEs including some listed here. No specific technical details or exploitation methods are provided. The affected version is listed as '=azl3', but this version identifier is non-standard and not further clarified. No CVSS score is available for these vulnerabilities.

Multiple vulnerabilities have been identified in Kemp LoadMaster version 7.2.63.2, a load balancer solution by Progress Software. These vulnerabilities are cataloged under CVE-2026-33691 and CVE-2026-8037. No CVSS score or detailed technical exploit information is currently available. There are no known exploits in the wild at this time. The vendor has not provided explicit patch or remediation information in the available data.

Red Hat OpenShift Container Platform 4.22.3 includes security updates addressing multiple vulnerabilities, including a URI authority bypass in the fast-uri package (CVE-2026-6322). This update fixes bugs and enhances security for on-premise or private cloud Kubernetes deployments. Users of OpenShift Container Platform 4.22 are advised to upgrade to version 4.22.3 to apply these important security fixes.

CVE-2026-26740 is a high severity vulnerability affecting Red Hat AI Inference Server 3.2.2 (ROCm). It is listed in a Red Hat security advisory but no official fix or patch is currently available. The vulnerability involves an issue classified under multiple CWEs including CWE-787 (out-of-bounds write), indicating potential memory corruption. The advisory does not provide detailed technical exploitation information or known exploits in the wild. No affected version ranges are explicitly stated beyond the product name and version 3.2.2. The vendor advisory does not mention any remediation or mitigation steps, nor does it indicate that the issue is already mitigated.

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fix(es): * ruby: net-imap: Net::IMAP: Denial of Service via crafted IMAP responses (CVE-2026-42245) * ruby/net-imap: ruby: Net::IMAP: IMAP Command Injection via Symbol Arguments (CVE-2026-42258) * net-imap: ruby: Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS (CVE-2026-42246) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat has issued a security advisory (RHSA-2026:29986) for Red Hat Hardened Images RPMs, including updates to the jq package versions 1.8.2-0.1.hum1 for aarch64 and x86_64 architectures. The advisory addresses multiple CVEs, including CVE-2026-40612 and eight others, covering various vulnerabilities. The update is classified as a bug fix and enhancement update. No specific details on the nature of the vulnerabilities or exploits in the wild are provided. The advisory does not explicitly state that a patch is available but references updated RPM versions. No known exploits in the wild have been reported. The severity is assessed as medium.