Patch Sonar: Servers, cloud & backup https://patchsonar.com/tech/servers Exploited vulnerabilities in servers, cloud & backup, in plain English. en-us Linux Kernel: Linux Kernel Missing Initialization of a Variable Vulnerability https://patchsonar.com/cve/CVE-2026-46300 https://patchsonar.com/cve/CVE-2026-46300 Wed, 28 Oct 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 28, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging Vulnerability https://patchsonar.com/cve/CVE-2026-41709 https://patchsonar.com/cve/CVE-2026-41709 Wed, 28 Oct 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 28, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Ahsay AhsayCBS: Ahsay AhsayCBS Command Injection Vulnerability https://patchsonar.com/cve/CVE-2026-105134 https://patchsonar.com/cve/CVE-2026-105134 Wed, 14 Oct 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 14, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Ahsay AhsayCBS: Ahsay AhsayCBS Improper Authentication Vulnerability https://patchsonar.com/cve/CVE-2026-105133 https://patchsonar.com/cve/CVE-2026-105133 Wed, 14 Oct 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 14, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. ISC BIND: ISC BIND Data Processing Errors Vulnerability https://patchsonar.com/cve/CVE-2015-5477 https://patchsonar.com/cve/CVE-2015-5477 Thu, 08 Oct 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Oct 8, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Linux Kernel: Linux Kernel Out-of-Bounds Write Vulnerability https://patchsonar.com/cve/CVE-2026-53266 https://patchsonar.com/cve/CVE-2026-53266 Fri, 18 Sep 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 18, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Linux Kernel: Linux Kernel Race Condition Vulnerability https://patchsonar.com/cve/CVE-2025-39964 https://patchsonar.com/cve/CVE-2025-39964 Fri, 18 Sep 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 18, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Linux Kernel: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability https://patchsonar.com/cve/CVE-2025-39682 https://patchsonar.com/cve/CVE-2025-39682 Fri, 18 Sep 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 18, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Acronis Backup: Acronis Backup Incorrect Default Permissions Vulnerability https://patchsonar.com/cve/CVE-2026-87886 https://patchsonar.com/cve/CVE-2026-87886 Wed, 16 Sep 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Sep 16, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Linux Kernel: Linux Kernel Unspecified Vulnerability https://patchsonar.com/cve/CVE-2026-53362 https://patchsonar.com/cve/CVE-2026-53362 Thu, 27 Aug 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 27, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Linux Kernel: Linux Kernel Out-of-Bounds Write Vulnerability https://patchsonar.com/cve/CVE-2022-0995 https://patchsonar.com/cve/CVE-2022-0995 Wed, 26 Aug 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 26, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Microsoft SQL Server: Microsoft SQL Server Remote Code Execution Vulnerability https://patchsonar.com/cve/CVE-2019-1068 https://patchsonar.com/cve/CVE-2019-1068 Wed, 26 Aug 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 26, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Red Hat Automatic Bug Reporting Tool: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability https://patchsonar.com/cve/CVE-2015-5287 https://patchsonar.com/cve/CVE-2015-5287 Wed, 26 Aug 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 26, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Red Hat Libuser: Red Hat Libuser Race Condition Vulnerability https://patchsonar.com/cve/CVE-2015-3246 https://patchsonar.com/cve/CVE-2015-3246 Wed, 26 Aug 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 26, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability https://patchsonar.com/cve/CVE-2026-21962 https://patchsonar.com/cve/CVE-2026-21962 Mon, 24 Aug 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 24, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Broadcom VMware vCenter: Broadcom VMware vCenter Path Traversal Vulnerability https://patchsonar.com/cve/CVE-2026-59310 https://patchsonar.com/cve/CVE-2026-59310 Tue, 18 Aug 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 18, 2026. CISA says ransomware groups are known to use it. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent. Apache Tomcat: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability https://patchsonar.com/cve/CVE-2026-34486 https://patchsonar.com/cve/CVE-2026-34486 Tue, 04 Aug 2026 12:00:00 GMT Servers, cloud & backup Yes. CISA added this to its catalog of actively exploited vulnerabilities on Aug 4, 2026. What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.