Blog Entries

22. 10. 2026 Thomas Forrer Bug Fixes, NetEye

NetEye 4 – Security Advisory (PHP)

Important: PHP security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the php and glpi packages are now available for NetEye 4. Security Fix for NetEye 4.50 CVEs 1. CVE-2026-109618  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H2. CVE-2026-109619  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H3. CVE-2026-91765  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H4. CVE-2025-14181  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H5. CVE-2026-91767  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H6. CVE-2026-91768  CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N7. CVE-2026-91766  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N8. CVE-2026-92842  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N9. CVE-2026-93682  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N10. CVE-2026-6103   CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N11. CVE-2026-91769   CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N12. CVE-2025-1218   CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L The two most severe CVEs can be triggered by an unauthenticated remote attacker who sends crafted HTTP requests to a PHP application. CVE-2026-109618 corrupts engine memory when request parsing fails on an…

Read More
21. 10. 2026 Patrick Harasser Bug Fixes, NetEye

NetEye 4 – Security Advisory (Grafana)

Important: Grafana security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic Updates for the grafana packages are now available for NetEye 4. Security Fix for NetEye 4.50 CVEs Two of the three CVEs are reachable by any low-privileged authenticated user: an oversized request to the Prometheus rule…

Read More
20. 10. 2026 Luigi Miazzo Bug Fixes, NetEye

Bug Fixes for NetEye 4.50, 4.49

RKE2: Fix of the upgrade to NetEye 4.49 and NetEye 4.50 fresh installations During an upgrade to NetEye 4.49 or a fresh installation of NetEye 4.50, the configuration of the RKE2 service could cause PCS to report all *_virt_ip resources as failed, potentially resulting in brief service interruptions. This behavior was triggered by a routine…

Read More
20. 10. 2026 Davide Zeni Bug Fixes, NetEye

Bug Fixes for NetEye 4.50

Graph titles no longer disappear We fixed an issue where graph titles on ICW2 dashboards disappeared a few seconds after the page loaded.Graph titles now remain visible as expected. List of updated packages To solve the issue mentioned above, the following packages have been updated: Reduced unnecessary Keycloak login events We fixed an issue that…

Read More
19. 10. 2026 Patrick Harasser Bug Fixes, NetEye

NetEye 4 – Security Advisory (Keycloak)

Important: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.50: CVEs Most of the 19 CVEs are Missing/Incorrect Authorization flaws in the Admin REST API and Fine-Grained Admin Permissions (FGAP) v2:…

Read More
16. 10. 2026 Marco Pergher NetEye, NetEye Conference

NetEye Conference DACH: 4 Key Takeaways on IT and Cybersecurity

What happens when Monitoring, Observability and Cybersecurity are no longer treated as separate disciplines?  How can organizations gain a better understanding of complex IT environments? How can they identify relevant threats at an early stage? And how can they turn growing volumes of data and alerts into informed decisions?  These were some of the key…

Read More
15. 10. 2026 Cecilia Marchi Bug Fixes, NetEye

NetEye 4 – Security Advisory (GLPI)

Important: GLPI security update Type/Severity NetEye Product Security has rated this update as having a medium security impact. Topic An update for the glpi packages is now available for NetEye 4. Security Fix for NetEye 4.50 Summary The list of vulnerabilities, regarding to the bundled plugins, patched in this update is: For details on how to apply this…

Read More
14. 10. 2026 Damiano Chini Bug Fixes, NetEye

Bug Fixes for NetEye 4.50

GLPI: Fix of the upgrade to NetEye 4.50 when custom GLPI plugins are installed During the upgrade to NetEye 4.50, NetEye moves the GLPI plugins that you installed manually out of the folder /usr/share/glpi/plugins. Before this fix, NetEye did not correctly identify which plugins were installed manually. On NetEye clusters with manually installed plugins, the…

Read More
12. 10. 2026 Alessio Dallaporta Blue Team, SEC4U

Velociraptor: Endpoint Visibility and Incident Response

When a cyber incident occurs, one of the first challenges is understanding what happened, which systems were involved, and what traces were left behind. In this context, Velociraptor can help: It’s an open-source DFIR tool that can collect and examine endpoint data in a centralized, targeted, and repeatable way. After completing a course focused on…

Read More
09. 10. 2026 Matteo Lorenzini Threat Intelligence

The Next Blackout Might Not Start on Earth

A field briefing on space threat intelligence, for security teams that run zero satellites but depend on dozens of them I don’t work in the space industry. I don’t design satellites, operate ground stations, or even analyze orbital telemetry in real time. Worth saying upfront, because it’s the right starting point for this kind of…

Read More
09. 10. 2026 Patrick Harasser Bug Fixes, NetEye

Bug Fixes for NetEye 4.50

Tornado: Allow disabling forwarding of local system logs to Tornado By default, rsyslog on NetEye nodes forwards all logs it handles to the Tornado event engine. These include the system logs of the NetEye node itself, which can generate a large number of syslog events on Tornado. Until now, there was no way to turn…

Read More
07. 10. 2026 Patrick Harasser Bug Fixes, NetEye

NetEye 4 – Security Advisory (Elastic Stack)

Important: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.50 CVEs Elastic Agent Elasticsearch Kibana Most of the 8 CVEs are resource-exhaustion weaknesses in Elasticsearch. These are Uncontrolled…

Read More
07. 10. 2026 Luca Tecchio Bug Fixes, NetEye

NetEye 4 – Security Advisory (Keycloak)

Important: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.50: Summary This Keycloak update (version 26.8.0) resolves several security issues identified in upstream Keycloak, including those fixed in upstream release 26.7.5:…

Read More
06. 10. 2026 Davide Zeni Bug Fixes, NetEye

Bug Fixes for NetEye 4.50

OIDC group synchronization with read-only LDAP federation Fixed an issue that occurred when OIDC group synchronization was enabled alongside a read-only LDAP federation. The OIDC mapper attempted to modify LDAP-managed group memberships, resulting in the error: Not possible to delete LDAP group mappings as mapper mode is READ_ONLY. The synchronization logic now respects the LDAP…

Read More
03. 10. 2026 Luca Tecchio Bug Fixes, NetEye

NetEye 4 – Security Advisory (GLPI)

Important: GLPI security update Type/Severity NetEye Product Security has rated this update as having a high security impact. Topic An update for the glpi packages is now available for NetEye 4. Security Fix for NetEye 4.50 Summary This is the list of vulnerabilities patched in this update: For details on how to apply this update, which includes the…

Read More

Search by technology

Contact

Contact us
Serviceportal

Archive