WolfSSL, GeoVision, VTK vulnerabilities

Sicherheitsmeldung mit Schweregrad noch nicht bewertet. Betroffene Kennungen: CVE-2026-12485, CVE-2026-12486, CVE-2026-12488, CVE-2026-12846, CVE-2026-12847. Technische Details im Tab „Originaltext“; empfohlene Schritte in der Checkliste.

Originaltext der Quelle (nicht übersetzt) – die deutsche Zusammenfassung findest du im Tab „Kurzfassung".

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed three vulnerabilities in WolfSSF, fourteen in GeoVision, and one vulnerability in VTK-DICOM.The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco’s third-party vulnerability disclosure policy. For Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from Snort.org, and our latest Vulnerability Advisories are always posted on Talos Intelligence’s website.WolfSSL vulnerabilitiesDiscovered by Ankur Tyagi of Cisco Talos.WolfSSL aims to provide "lightweight and embedded security solutions" for both individual and business needs. WolfSSL is an open-source product to provide secure data transfer. Talos discovered two improper input validation vulnerabilities (TALOS-2026-2409 (CVE-2026-28739) and TALOS-2026-2410 (CVE-2026-25106)) and one integer underflow vulnerability (TALOS-2026-2408 (CVE-2026-33091)) in WolfSSL. GeoVision vulnerabilitiesDiscovered by Philippe Laulheret of Cisco Talos.GeoVision specializes in security technologies, including cameras and monitoring solutions, access control, and machine-identification.Talos released 14 advisories for GeoVision vulnerabilities, covering 37 CVEs: TALOS-2026-2411 (CVE-2026-12488) memory corruption vulnerabilitiesTALOS-2026-2379 (CVE-2026-12486, CVE-2026-12849, CVE-2026-12850, CVE-2026-12851) OS command injection vulnerabilitiesTALOS-2026-2377 (CVE-2026-12485, CVE-2026-12846, CVE-2026-12847, CVE-2026-12848) buffer overflow …

Vollständiger Originalartikel ↗

• Betroffenheit im eigenen Stack prüfen (CVE-2026-12485, CVE-2026-12486, CVE-2026-12488, CVE-2026-12846, CVE-2026-12847): Versionen/Komponenten abgleichen.
• Originalquelle / Hersteller-Advisory lesen: https://blog.talosintelligence.com/wolfssl-vulnerabilities/
• Verfügbaren Patch oder Workaround einspielen und dokumentieren.