Threats Tagged 'nationaal-cyber-security-centr'

Microsoft has addressed vulnerabilities in its Configuration Manager and Defender products. These security issues have been fixed as part of a vendor update. No specific technical details or CVSS scores are provided in the available information.

Microsoft has addressed multiple vulnerabilities in various Azure components, including Key Vault, DevOps, API Center, and Storage. These vulnerabilities involve issues such as improper certificate validation, server-side request forgery, and authorization bypass. No CVSS score is provided, and there is no indication of known exploits in the wild. Patch status is not explicitly stated, and no affected versions are specified.

Microsoft has addressed multiple vulnerabilities in various Dynamics components. Specific details about the vulnerabilities, affected versions, and exploit methods are not provided. No CVSS score is available for these issues. No known exploits in the wild have been reported. The vulnerabilities are associated with CWE-502, which relates to deserialization of untrusted data. No patch links or vendor advisory details are included in the provided information.

A high-severity vulnerability (CVE-2026-88779) affects Citrix NetScaler ADC and NetScaler Gateway products, including their FIPS variants. Multiple versions prior to 14.1-73.41, 13.1-64.28, and 13.1-37.282 are impacted. The vulnerability is publicly known but no confirmed exploits have been observed in the wild. No patch or remediation information is currently available.

CVE-2026-104286 is a critical path traversal vulnerability in Fortinet FortiMail versions 7.0.0 through 7.0.9, 7.2.0 through 7.2.9, 7.4.0 through 7.4.6, 7.6.0 through 7.6.5, and exactly 8.0.0. This flaw allows an unauthenticated attacker to write arbitrary files on the underlying system by sending specially crafted HTTP or HTTPS requests. The vulnerability enables execution of unauthorized code or commands, posing a severe risk to confidentiality, integrity, and availability. An official fix is available from Fortinet to remediate this issue.

Microsoft Threat Intelligence identified active exploitation of CVE-2026-73570, an unauthenticated OS command injection vulnerability in Zimbra Collaboration Suite's SNMP notification path. Exploitation occurred between patch availability on July 20, 2026 and public disclosure on August 13, 2026. Attackers delivered JSP webshells and reverse shells without requiring authentication, achieving privilege escalation through PAM configuration abuse and establishing persistent access via systemd services. Post-exploitation activity included cluster-wide lateral movement using Zimbra SSH keys, collection of authentication secrets and mailbox data, and attempted exfiltration using cloud-storage tools. Multiple organizations across different regions and industries were affected through both automated payload delivery and hands-on-keyboard operations targeting internet-facing Zimbra mail servers.

Multiple vulnerabilities have been addressed in WatchGuard Fireware OS as reported by the Nationaal Cyber Security Centrum. The specific vulnerabilities cover a wide range of common weakness enumerations (CWEs) including issues such as improper input validation, buffer overflows, and access control weaknesses. No CVSS score is provided, and no known exploits in the wild have been reported. Patch availability is not explicitly stated, and no affected versions are detailed in the available information.

Citrix has fixed eight vulnerabilities in NetScaler ADC and NetScaler Gateway affecting certain versions prior to specific patch releases. These vulnerabilities also impact Secure Private Access Hybrid deployments using NetScaler instances. The advisory applies only to customer-managed NetScaler ADC and Gateway systems; Citrix-managed cloud services receive updates directly from the vendor.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.

Active exploitation of three critical vulnerabilities in JFrog Artifactory has been identified, with attackers chaining CVE-2026-42016, CVE-2026-42018, and CVE-2026-82329 to bypass authentication and gain administrative control. CVE-2026-42018 exposes internal anonymous-user tokens, CVE-2026-42016 enables privilege escalation through insufficient token validation, and CVE-2026-82329 allows unauthenticated access to administrative privileges. Post-exploitation activities include creating persistent administrator accounts, deploying malicious Groovy plugins for code execution, and installing Rust-based backdoors. Exploitation was observed between August 15 and September 8, 2026, affecting multiple organizations. Data indicates 67-69% of organizations running Artifactory had vulnerable instances at initial publication, with slow patching velocity for lower-severity CVEs despite active exploitation across environments.