Brand ClaimErleben, was verbindet

Recent Advisories

Notice: You can now also find information from the Vulnerability Advisory Service in the CTI portal!
The CTI portal is available at the following address: https://cti-portal.telekom.net/portal/cti/advisories
RiskAdvisoryDateStatusTitle
Risk 3 2024-0426 2026-10-26 update Eclipse Jetty: Vulnerability allows Denial of Service
Risk 3 2024-0317 2026-10-26 update KEYTRAP Internet Systems Consortium BIND: Multiple Vulnerabilities allow Denial of Service
Risk 3 2024-0245 2026-10-26 update expat: Multiple Vulnerabilities allow Denial of Service
Risk 3 2022-2186 2026-10-26 update expat: Vulnerability allows Denial of Service
Risk 2 2022-1002 2026-10-26 update VMware Tanzu Spring Framework: Multiple Vulnerabilities allow Denial of Service
Risk 2 2018-1326 2026-10-26 update Pivotal Spring Framework: Vulnerability allows Denial of Service
Risk 4 2016-0693 2026-10-26 update expat: Vulnerability allows code execution
Risk 3 2026-4054 2026-10-23 new Drupal Modules (View Unpublished, Simple OAuth and Domain Login Restrict): Multiple Vulnerabilities allow bypassing security measures
Risk 2 2026-4052 2026-10-23 new Livewire: Vulnerability allows bypassing security measures
Risk 2 2026-4051 2026-10-23 new KNIME Analytics Platform: Vulnerability allows information disclosure
Risk 3 2026-4050 2026-10-23 new Qt Core QXmlStream parser: Vulnerability allows Denial of Service
Risk 3 2026-4049 2026-10-23 new OpenBSD: Vulnerability allows unspecified attack
Risk 3 2026-4048 2026-10-23 new IBM App Connect Enterprise: Multiple Vulnerabilities
Risk 3 2026-4046 2026-10-23 new Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator: Multiple Vulnerabilities allow unspecified attack
Risk 2 2026-4044 2026-10-23 new OpenProject: Vulnerability allows information disclosure
Risk 4 2026-4042 2026-10-23 new MongoDB C# Driver: Multiple Vulnerabilities
Risk 3 2026-4041 2026-10-23 new OpenVPN 3 Core Library: Vulnerability allows information disclosure
Risk 2 2026-4040 2026-10-23 new Devolutions Server: Multiple Vulnerabilities
Risk 3 2026-4039 2026-10-23 new Mattermost Server: Multiple Vulnerabilities allow unspecified attack
Risk 4 2026-4038 2026-10-23 new Arista VeloCloud Orchestrator: Vulnerability allows SQL-Injection and potentially privilege escalation
Risk 4 2026-4037 2026-10-23 new Aruba ArubaOS: Multiple Vulnerabilities
Risk 3 2026-4035 2026-10-23 new rsyslog: Vulnerability allows manipulation of files
Risk 2 2026-4008 2026-10-23 update Red Hat Enterprise Linux cockpit-machines: Multiple Vulnerabilities allow information disclosure
Risk 3 2026-3964 2026-10-23 update Roundcube Webmail: Multiple Vulnerabilities
Risk 4 2026-3961 2026-10-23 update Laravel: Multiple Vulnerabilities