Hitachi Virtual Storage Platform: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Hitachi Virtual Storage Platform ausnutzen, um beliebigen Code auszuführen, die Authentifizierung zu umgehen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-08945 linked CVEs
Open advisory with all CVEs
More on Platform
Other advisories
- MediumCVE-2026-16020Fazile BACAK DefterAsist Financial Advisor Platform: Cross-Site-Scripting (XSS)
- MediumCVE-2026-16020Fazile BACAK DefterAsist Financial Advisor Platform: Cross-Site-Scripting (XSS)
- Not ratedosv:CLEANSTART-2026-PP09847On most platforms, Go uses the given system root certificates
- HighCVE-2026-13676Red Hat OpenShift Container Platform (fast-uri,OpenTelemetry-Go) : Mehrere Schwachstellen
- CriticalCVE-2026-33186Red Hat OpenShift Container Platform (gRPC-Go): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
- CriticalCVE-2026-90959Red Hat Ansible Automation Platform: Mehrere Schwachstellen
- HighCVE-2026-117493Sisense Cloud BI Platform: Cross-Site-Scripting (XSS)
- HighCVE-2026-117494Sisense Cloud BI Platform: Cross-Site-Scripting (XSS)
Other news entries
- Gheist turns GitHub Actions into a secret extraction serviceNewsCSO Online
- Secrets Management Firm Infisical Valued at $600 Million After $40 Million RaiseNewsSecurityWeek
- Hackers hijack Convertr analytics script to steal payment card dataNewsBleepingComputer
- Energy giant ENGIE discloses data breach affecting customersNewsBleepingComputer
- Genesys Hack Exposes Customer Data From Internal SystemsNewsSecurityWeek
- Between alerts: What Attackers Do in the Spaces Ordinary Detection MissesNewsThe Hacker News
- Protecting the vSphere Kubernetes Control Plane: Architecting Zero Trust for Supervisor and VKS with vDefendNewsVMware Security Advisories
- Bubble says an attacker accessed users' third-party API keys and tokens in an active security incidentBreachpwn.watch
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0894
ID