[UPDATE] [low] patch: Vulnerability allows denial of service

low

A local attacker can exploit a vulnerability in patch to carry out a denial of service attack.

CSIRTS triage

What: A vulnerability in patch allows a local attacker to carry out a denial of service attack.
Who is affected: Local attackers on systems using the affected version of patch.
Urgency: Remediation is low urgency as the severity is low.
Action: Consider updating or applying mitigations for the patch tool.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch patch

Get an email when a new patch advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: low
Published: 2026-07-28
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0304

Recent advisories for patch

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

highCVE-2026-67527: OpenProject is open-source, web-based project management software. Prior to 17.6.0, PATCH /api…nvd · 2026-07-30
mediumCVE-2026-67217: cJSON through 1.7.19 applies RFC 6902 JSON Patch operations non-atomically in apply_patch() in…nvd · 2026-07-29
highCVE-2026-67215: cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when …nvd · 2026-07-29
high[NEW] [high] SAP Patch Day July 2026cert-bund · 2026-07-29
criticalGitLab Patch Release: 19.2.1, 19.1.3, 19.0.5gitlab · 2026-07-29
criticalGitLab Patch Release: 19.2.1, 19.1.3, 19.0.5gitlab · 2026-07-29

[UPDATE] [low] patch: Vulnerability allows denial of service

CSIRTS triage

Details

Recent advisories for patch

More from CERT-Bund (BSI) Security Advisories