Prehľad opravených zraniteľností – august 2026

Adobe opravuje viac ako 50 zraniteľností v rôznych produktoch, z toho niekoľko kritických v ColdFusion, Commerce a Campaign Classic [1][2][3].

Docker opravuje vysoko závažnú zraniteľnosť CopyEscape a upozorňuje na existenciu PoC (proof-of-concept) [4][5][6].

Fortinet opravuje sedem zraniteľností v produktoch FortiClient Windows [7], FortiOS [8][9], FortiSIEM [10], FortiWeb [11][12] a FortiManager (vrátane Cloud) [13].

GitLab verziami 19.2.2, 19.1.4 a 19.0.6 opravuje 14 zraniteľností [14].

Google Chrome/Chromium verziami 151.0.7922.137/.138 (Windows/macOS) a 151.0.7922.137 (Linux) opravuje 5 zraniteľností [15].

Ivanti opravuje produkty Neurons for MDM [16] a Endpoint Manager (EPM) [17].

Metabase, analytická a business intelligence platforma, opravuje kritickú, aktívne zneužívanú zraniteľnosť [18].

Microsoft opravuje viac ako 400 zraniteľností v rámci augustového Patch Tuesday [19].

Nagios Core verziou 4.5.14 a Nagios XI verziou 2026R1.7 opravujú päť zraniteľností [20][21][22][23][24].

rsync verziou 3.5.0 opravuje 33 zraniteľností [25].

Sonatype Nexus Repository 3 CE/Pro verziou 3.95.0 opravuje 10 zraniteľností. Prehľad nájdete na [26].

SonicWall opravuje šesť zraniteľností v GMS [27] a dve v Email Security [28].

TP-Link opravuje osem zraniteľností v rôznych produktoch radov HB, HX, HC, EB, EC, EX, XC, XX, VX [29].

WordPress 7.0.3 opravuje vysoko závažnú zraniteľnosť XSS2Shell vo svojom jadre [30].

XML parser Expat verziou 2.8.3 opravuje stredne závažnú zraniteľnosť [31].


Zdroje

[1] https://blog.qualys.com/vulnerabilities-threat-research/patch-tuesday/2026/08/11/microsoft-patch-tuesday-august-2026-security-update-review [2] https://www.securityweek.com/adobe-urges-immediate-patching-of-critical-coldfusion-campaign-classic-flaws/ [3] https://securityaffairs.com/197149/hacking/adobe-commerce-cve-2026-71362-comes-under-attack-shortly-after-public-disclosure.html [4] https://digital.nhs.uk/cyber-alerts/2026/cc-4828 [5] https://github.com/moby/go-archive/security/advisories/GHSA-hfg8-hc9c-6c3h [6] https://www.imperva.com/blog/copyescape-taking-over-docker-hosts-with-docker-cp/ [7] https://fortiguard.fortinet.com/psirt/FG-IR-26-156 [8] https://fortiguard.fortinet.com/psirt/FG-IR-26-161 [9] https://www.fortiguard.com/psirt/FG-IR-26-162 [10] https://fortiguard.fortinet.com/psirt/FG-IR-26-159 [11] https://fortiguard.fortinet.com/psirt/FG-IR-26-157 [12] https://fortiguard.fortinet.com/psirt/FG-IR-26-158 [13] https://www.fortiguard.com/psirt/FG-IR-26-160 [14] https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-2-released/ [15] https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_01815628406.html [16] https://hub.ivanti.com/s/article/August-2026-Security-Advisory-Ivanti-Neurons-for-MDM [17] https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-EPM-August-2026 [18] https://www.metabase.com/blog/security-update [19] https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+August+2026/33236/ [20] https://www.vulncheck.com/advisories/nagios-core-xi-cmd-cgi-reflected-xss-via-nagformid-parameter [21] https://www.vulncheck.com/advisories/nagios-core-xi-csrf-protection-bypass-via-double-submit-cookie [22] https://www.vulncheck.com/advisories/nagios-core-xi-dom-based-xss-via-jsonquery-js [23] https://www.vulncheck.com/advisories/nagios-core-xi-authenticated-rce-via-custom-variable-macro-injection [24] https://www.vulncheck.com/advisories/nagios-core-xi-authenticated-rce-via-unfiltered-notification-family-macro-substitution [25] https://www.openwall.com/lists/oss-security/2026/08/13/1 [26] https://support.sonatype.com/hc/en-us/sections/203012668-Security-Advisories [27] https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0011 [28] https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0012 [29] https://www.tp-link.com/us/support/faq/5239/ [30] https://www.imperva.com/blog/imperva-customers-protected-against-xss2shell-cve-2026-64638-in-wordpress-core/ [31] https://www.openwall.com/lists/oss-security/2026/08/11/5