diff --git a/docs/console/security/security_alarms.md b/docs/console/security/security_alarms.md
index c351f74f..b9de0422 100644
--- a/docs/console/security/security_alarms.md
+++ b/docs/console/security/security_alarms.md
@@ -9,10 +9,11 @@ Cette page est mise à jour quotidiennement afin de tenir compte des vulnérabil
| Date | Référence(s) | CVSS | Titre | Description | Service(s) | Sévérité | Traitement |
|---------------------|-----------------|-------------|--------------|---------|-------------|----------------|-------------|
+| 10/05/2026 | [DSA-2026-019](https://www.dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1) | 9.8-5.6 | **DSA-2026-019 : Vulnérabilités multiples dans Dell ObjectScale** | Plusieurs vulnérabilités affectant Dell ObjectScale, dont une utilisation d'identifiants codés en dur permettant à un attaquant non authentifié d'accéder au système de fichiers, une mauvaise gestion des privilèges OS, une injection de formules CSV et un contournement d'authentification | Object Storage | 🟠 Important | ✅ La remédiation de vos environnements ObjectScale est prise en charge par Cloud Temple. Aucune action de votre part n’est nécessaire. |
| 06/04/2026 | [DSA-2026-143](https://www.dell.com/support/kbdoc/en-us/000449325/dsa-2026-143-security-update-for-dell-objectscale-prior-to-4-1-0-3-and-4-2-0-0-insertion-of-sensitive-information-into-log-file-vulnerability) | 7.8 | **DSA-2026-143 : Vulnérabilité dans Dell ObjectScale (CVE-2026-28261)** | Une vulnérabilité (CVE-2026-28261) dans Dell ObjectScale liée à l'insertion d'informations sensibles dans les fichiers journaux permet à un attaquant local d'exposer des secrets et d'élever ses privilèges pour compromettre le système. | Object Storage | 🟡 Modérée | ✅ La remédiation de vos environnements ObjectScale est prise en charge par Cloud Temple. Aucune action de votre part n’est nécessaire. |
| 23/03/2026 | [XSA-480](https://docs.vates.tech/security/advisories/2026/vates-sa-2026-005/) | 7.8 | **Vulnérabilité XCP-NG (CVE-2026-23554)** | Une vulnérabilité (CVE-2026-23554) a été identifiée dans XCP-ng 8.3, affectant spécifiquement les systèmes basés sur des processeurs Intel x86, permettant à une VM de compromettre l'hôte (escalade de privilèges ou DoS). | IaaS OpenSource | 🟠 Important | ✅ La mise à jour de vos instances XCP-ng est planifiée dès la validation des correctifs par Cloud Temple. Aucune action de votre part n'est nécessaire. |
| 29/01/2026 | [Bulletin éditeur](https://xcp-ng.org/blog/2026/01/29/january-2026-security-and-maintenance-updates-for-xcp-ng-8-3-lts/) | 2.9 - 8.5 | **Vulnérabilités XCP-NG** | Plusieurs vulnérabilités ont été découvertes dans XCP-ng. La plus importante permet une escalade de privilèges d'une VM vers le dom0. D'autres failles permettent l'exécution de code arbitraire via l'émulation NVMe ou des fuites de données confidentielles entre machines virtuelles. | IaaS OpenSource | 🟠 Important | ✅ La mise à jour de vos instances XCP-ng est planifiée dès la validation des correctifs par Cloud Temple. Aucune action de votre part n'est nécessaire. |
-| 23/01/2026 | [DSA-2026-047](https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities) | 4.4 - 8.8 | **DSA-2026-047 : Vulnérabilités dans Dell ObjectScale** | De multiples vulnérabilités dans Dell ObjectScale liées à des identifiants par défaut et des transmissions/stockages en texte clair permettent des compromissions locales ou distantes. | Object Storage | 🟠 Important | ✅ La remédiation de vos environnements ObjectScale est prise en charge par Cloud Temple. Aucune action de votre part n’est nécessaire. |
+| 23/01/2026 | [DSA-2026-047](https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities) | 4.4-8.8 | **DSA-2026-047 : Vulnérabilités dans Dell ObjectScale** | De multiples vulnérabilités dans Dell ObjectScale liées à des identifiants par défaut et des transmissions/stockages en texte clair permettent des compromissions locales ou distantes. | Object Storage | 🟠 Important | ✅ La remédiation de vos environnements ObjectScale est prise en charge par Cloud Temple. Aucune action de votre part n’est nécessaire. |
| 23/12/2025 | [CVE-2025-14443](https://access.redhat.com/security/cve/CVE-2025-14443) | 8.5 | **Vulnérabilité dans Red Hat OpenShift (CVE-2025-14443)** | Une vulnérabilité dans le composant `openshift-apiserver` permet une élévation de privilèges. L'exploitation nécessite une authentification préalable. | PaaS OpenShift | 🟠 Important | ✅ La mise à jour de vos instances OpenShift est planifiée dès la validation des correctifs par Cloud Temple. Aucune action de votre part n'est nécessaire.|
| 30/09/2025 | [VMSA-2025-0016](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150) | 8.5 | **VMSA-2025-0016 : Vulnérabilité dans VMware vCenter (CVE-2025-41250)** | Une vulnérabilité (CVE-2025-41250) permet à un attaquant authentifié de modifier les emails de notification des tâches planifiées. | IaaS By VMware | 🟠 Important | ✅ La mise à jour de vos instances vCenter est planifiée dès la validation des correctifs par Cloud Temple. Aucune action de votre part n'est nécessaire. La mise à jour est signalée dans les notifications Console.. |
| 30/09/2025 | [VMSA-2025-0015](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149) | 7.6 | **VMSA-2025-0015 : Vulnérabilité dans VMware Tools (Windows)** | Une vulnérabilité (CVE-2025-41246) affectant VMware Tools pour Windows permet une élévation de privilèges (nécessite un accès local authentifié). | IaaS By VMware | 🟡 Modérée | ⚠️ Nous vous recommandons de mettre à jour les VMware Tools sur vos machines virtuelles. Les versions VM Tools corrigées sont embarquées dans les packages ESXi mis à disposition par Cloud Temple. |
diff --git a/i18n/de/docusaurus-plugin-content-docs/current/console/security/security_alarms.md b/i18n/de/docusaurus-plugin-content-docs/current/console/security/security_alarms.md
index 65bd1368..ec70a04a 100644
--- a/i18n/de/docusaurus-plugin-content-docs/current/console/security/security_alarms.md
+++ b/i18n/de/docusaurus-plugin-content-docs/current/console/security/security_alarms.md
@@ -9,24 +9,25 @@ Diese Seite wird täglich aktualisiert, um neu identifizierte Schwachstellen zu
| Datum | Referenz(en) | CVSS | Titel | Beschreibung | Dienst(e) | Schweregrad | Maßnahme |
|---------------------|-----------------|-------------|--------------|---------|-------------|----------------|-------------|
-| 06/04/2026 | [DSA-2026-143](https://www.dell.com/support/kbdoc/en-us/000449325/dsa-2026-143-security-update-for-dell-objectscale-prior-to-4-1-0-3-and-4-2-0-0-insertion-of-sensitive-information-into-log-file-vulnerability) | 7.8 | **DSA-2026-143: Schwachstelle in Dell ObjectScale (CVE-2026-28261)** | Eine Schwachstelle (CVE-2026-28261) in Dell ObjectScale, die mit der Einfügung sensibler Informationen in Protokolldateien zusammenhängt, ermöglicht es einem lokalen Angreifer, Geheimnisse offenzulegen und seine Privilegien zu erhöhen, um das System zu kompromittieren. | Object Storage | 🟡 Mittel | ✅ Die Behebung Ihrer ObjectScale-Umgebungen wird von Cloud Temple übernommen. Es sind keine Maßnahmen Ihrerseits erforderlich. |
-| 23/03/2026 | [XSA-480](https://docs.vates.tech/security/advisories/2026/vates-sa-2026-005/) | 7.8 | **XCP-NG-Schwachstelle (CVE-2026-23554)** | Eine Schwachstelle (CVE-2026-23554) wurde in XCP-ng 8.3 identifiziert, die speziell Systeme auf Basis von Intel x86-Prozessoren betrifft und es einer VM ermöglicht, den Host zu kompromittieren (Privilegieneskalation oder DoS). | IaaS OpenSource | 🟠 Hoch | ✅ Das Update Ihrer XCP-ng-Instanzen ist ab der Validierung der Patches durch Cloud Temple geplant. Es sind keine Maßnahmen Ihrerseits erforderlich. |
-| 29/01/2026 | [Herstellerbulletin](https://xcp-ng.org/blog/2026/01/29/january-2026-security-and-maintenance-updates-for-xcp-ng-8-3-lts/) | 2.9 - 8.5 | **XCP-NG-Schwachstellen** | Mehrere Schwachstellen wurden in XCP-ng entdeckt. Die schwerwiegendste ermöglicht eine Privilegieneskalation von einer VM auf dom0. Weitere Lücken ermöglichen die Ausführung beliebigen Codes über die NVMe-Emulation oder das Auslaufen vertraulicher Daten zwischen virtuellen Maschinen. | IaaS OpenSource | 🟠 Hoch | ✅ Das Update Ihrer XCP-ng-Instanzen ist ab der Validierung der Patches durch Cloud Temple geplant. Es sind keine Maßnahmen Ihrerseits erforderlich. |
-| 23/01/2026 | [DSA-2026-047](https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities) | 4.4 - 8.8 | **DSA-2026-047: Schwachstellen in Dell ObjectScale** | Mehrere Schwachstellen in Dell ObjectScale, die mit Standardanmeldedaten sowie unverschlüsselter Übertragung/Speicherung im Klartext zusammenhängen, ermöglichen lokale oder remote Kompromittierungen. | Object Storage | 🟠 Hoch | ✅ Die Behebung Ihrer ObjectScale-Umgebungen wird von Cloud Temple übernommen. Es sind keine Maßnahmen Ihrerseits erforderlich. |
-| 23/12/2025 | [CVE-2025-14443](https://access.redhat.com/security/cve/CVE-2025-14443) | 8.5 | **Schwachstelle in Red Hat OpenShift (CVE-2025-14443)** | Eine Schwachstelle in der Komponente `openshift-apiserver` ermöglicht eine Privilegieneskalation. Die Ausnutzung erfordert eine vorherige Authentifizierung. | PaaS OpenShift | 🟠 Hoch | ✅ Das Update Ihrer OpenShift-Instanzen ist ab der Validierung der Patches durch Cloud Temple geplant. Es sind keine Maßnahmen Ihrerseits erforderlich.|
-| 30/09/2025 | [VMSA-2025-0016](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150) | 8.5 | **VMSA-2025-0016: Schwachstelle in VMware vCenter (CVE-2025-41250)** | Eine Schwachstelle (CVE-2025-41250) ermöglicht es einem authentifizierten Angreifer, die Benachrichtigungs-E-Mails für geplante Aufgaben zu ändern. | IaaS By VMware | 🟠 Hoch | ✅ Das Update Ihrer vCenter-Instanzen ist ab der Validierung der Patches durch Cloud Temple geplant. Es sind keine Maßnahmen Ihrerseits erforderlich. Das Update wird in den Console-Benachrichtigungen angezeigt. |
-| 30/09/2025 | [VMSA-2025-0015](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149) | 7.6 | **VMSA-2025-0015: Schwachstelle in VMware Tools (Windows)** | Eine Schwachstelle (CVE-2025-41246) in VMware Tools für Windows ermöglicht eine Privilegieneskalation (erfordert einen authentifizierten lokalen Zugriff). | IaaS By VMware | 🟡 Mittel | ⚠️ Wir empfehlen, die VMware Tools auf Ihren virtuellen Maschinen zu aktualisieren. Die korrigierten VM Tools-Versionen sind in den von Cloud Temple bereitgestellten ESXi-Paketen enthalten. |
-| 07/08/2025 | [DSA-2025-154](https://www.dell.com/support/kbdoc/en-us/000262308/dsa-2025-154-security-update-for-dell-ecs-and-objectscale-use-of-hard-coded-ssh-cryptographic-key-vulnerability) | 8.4 | **DSA-2025-154: Schwachstelle in Dell ObjectScale (CVE-2025-26476)** | Eine Schwachstelle (CVE-2025-26476) in Dell ObjectScale (< 4.0.0.0), die mit der Verwendung fest codierter SSH-Schlüssel zusammenhängt, ermöglicht einen nicht authentifizierten lokalen Zugriff. | Object Storage | 🟠 Hoch | ✅ Die Behebung Ihrer ObjectScale-Umgebungen wird von Cloud Temple übernommen. Es sind keine Maßnahmen Ihrerseits erforderlich. |
-| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 9.3 | **VMSA-2025-0013: Schwerwiegende Schwachstellen in VMware ESXi** | Mehrere schwerwiegende Schwachstellen betreffen VMware ESXi. Patches werden vom Hersteller bereitgestellt. | IaaS By VMware | 🟠 Hoch | ⚠️ Wir empfehlen, Ihre Hypervisor zu aktualisieren. Die korrigierten ESXi-Versionen sind ab ihrer Validierung durch Cloud Temple verfügbar. Console weist auf ESXi-Systeme hin, die ein Update benötigen. |
-| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 7.1 | **VMSA-2025-0013: Schwachstelle in VMware Tools (CVE-2025-41239)** | Eine Schwachstelle (CVE-2025-41239) in VMware Tools ermöglicht die Offenlegung sensibler Informationen über nicht initialisierte vSockets. Patches werden vom Hersteller bereitgestellt. | IaaS By VMware | 🟡 Mittel | ⚠️ Wir empfehlen, die VMware Tools auf Ihren virtuellen Maschinen zu aktualisieren. Die korrigierten VM Tools-Versionen sind in den von Cloud Temple bereitgestellten ESXi-Paketen enthalten. |
-| 01/07/2025 | [XSA-470](https://xenbits.xen.org/xsa/advisory-470.html) | N/A | **XCP-NG-Schwachstelle durch fehlerhafte Ausnahmebehandlung** [Herstellerbulletin](https://xcp-ng.org/blog/2025/07/03/july-2025-security-and-maintenance-update-for-xcp-ng-8-2-lts/) | Eine Schwachstelle wurde in XCP-NG entdeckt, die es privilegiertem Code, der von einer virtuellen Maschine ausgeführt wird, ermöglicht, einen Hypervisor-Crash auszulösen und damit einen Denial-of-Service (DoS) des gesamten Hosts zu verursachen. | IaaS OpenSource | 🟡 Mittel | ✅ Das Update Ihrer XCP-ng-Instanzen ist ab der Validierung der Patches durch Cloud Temple geplant. Es sind keine Maßnahmen Ihrerseits erforderlich.|
-| 23/05/2025 | [XSA-468](https://xenbits.xen.org/xsa/advisory-468.html) | 8.8-9.0 | **XCP-NG-Schwachstellen in den Windows-PV-Treibern (XSA-468)** [Herstellerbulletin](https://xcp-ng.org/blog/2025/05/27/xsa-468-windows-pv-driver-vulnerabilities/) | Mehrere Schwachstellen (CVE-2025-27462, CVE-2025-27463, CVE-2025-27464) in den Windows-PV-Treibern ermöglichen nicht privilegierten Benutzern, innerhalb von Windows-VMs Systemprivilegien zu erlangen. | IaaS OpenSource | 🟠 Hoch | ⚠️ Wir empfehlen, die Windows-PV-Treiber Ihrer virtuellen Maschinen auf die im Sicherheitsbulletin angegebenen korrigierten Versionen zu aktualisieren. ✅ Das Update Ihrer XCP-ng-Instanzen ist ab der Validierung der Patches durch Cloud Temple geplant. |
-| 22/05/2025 | [XSA-469, INTEL-SA](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | 4.9-6.5 | **XCP-NG-Schwachstellen im Intel-Mikrocode und Xen (XSA-469, INTEL-SA)** [Herstellerbulletin](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | Sicherheitspatches für XCP-ng wurden veröffentlicht, die mehrere Schwachstellen im Intel-Mikrocode und Xen beheben. | IaaS OpenSource | 🟡 Mittel | ✅ Das Update Ihrer XCP-ng-Instanzen ist ab der Validierung der Patches durch Cloud Temple geplant. Es sind keine Maßnahmen Ihrerseits erforderlich.|
-| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-6.8 | **VMSA-2025-0010: Mehrere Schwachstellen in VMware ESXi (CVE-2025-41226, CVE-2025-41227, CVE-2025-41228)** | Mehrere Schwachstellen in VMware ESXi wurden gemeldet: Schwachstelle für Denial-of-Service bei Gastoperationen (CVE-2025-41226), Schwachstelle für Denial-of-Service (CVE-2025-41227), Cross-Site-Scripting-Schwachstelle (XSS) (CVE-2025-41228). Patches werden vom Hersteller bereitgestellt. | IaaS By VMware | 🟡 Mittel | ⚠️ Wir empfehlen, Ihre Hypervisor zu aktualisieren. Die korrigierten ESXi-Versionen sind ab ihrer Validierung durch Cloud Temple verfügbar. Console weist auf ESXi-Systeme hin, die ein Update benötigen. |
-| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-8.8 | **VMSA-2025-0010: Mehrere Schwachstellen in vCenter (CVE-2025-41225, CVE-2025-41228)** | Mehrere Schwachstellen in VMware vCenter wurden gemeldet: Schwachstelle für authentifizierte Befehlsausführung in VMware vCenter Server (CVE-2025-41225), Cross-Site-Scripting-Schwachstelle (XSS) (CVE-2025-41228). Patches werden vom Hersteller bereitgestellt. | IaaS By VMware | 🟠 Hoch | ✅ Das Update Ihrer vCenter-Instanzen ist ab der Validierung der Patches durch Cloud Temple geplant. Es sind keine Maßnahmen Ihrerseits erforderlich. Das Update wird in den Console-Benachrichtigungen angezeigt. |
-| 14/05/2025 | [VMSA-2025-0007](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683) | 6.1 | **VMSA-2025-0007: Unsichere Dateiverwaltung in VMware Tools (CVE-2025-22247)** | Eine Schwachstelle in der Dateiverwaltung von VMware Tools wurde gemeldet. Patches werden vom Hersteller bereitgestellt. | IaaS By VMware | 🟡 Mittel | ⚠️ Wir empfehlen, die VMware Tools auf Ihren virtuellen Maschinen zu aktualisieren. Die korrigierten VM Tools-Versionen sind in den von Cloud Temple bereitgestellten ESXi-Paketen enthalten. |
-| 25/03/2025 | [VMSA-2025-0005](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25518) | 7.8 | **VMSA-2025-0005: Authentifizierungsumgehung in VMware Tools für Windows (CVE-2025-22230)** | Eine Schwachstelle zur Umgehung der Authentifizierung in VMware Tools für Windows wurde gemeldet. Patches werden vom Hersteller bereitgestellt. | IaaS By VMware | 🟠 Hoch | ⚠️ Wir empfehlen, die VMware Tools auf Ihren virtuellen Maschinen zu aktualisieren. Die korrigierten VM Tools-Versionen sind in den von Cloud Temple bereitgestellten ESXi-Paketen enthalten. |
-| 04/03/2025 | [VMSA-2025-0004](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390) | 7.1-9.3 | **VMSA-2025-0004: Mehrere Schwachstellen in VMware ESXi (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)** | Mehrere Schwachstellen in VMware ESXi wurden gemeldet: VMCI-Heap-Overflow-Schwachstelle (CVE-2025-22224), von VMware als kritisch eingestuft, Schwachstelle für willkürliches Schreiben in VMware ESXi (CVE-2025-22225), HGFS-Informationenoffenlegungsschwachstelle (CVE-2025-22226). Patches werden vom Hersteller bereitgestellt. | IaaS By VMware | 🟠 Hoch | ⚠️ Wir empfehlen, Ihre Hypervisor zu aktualisieren. Die korrigierten ESXi-Versionen sind ab ihrer Validierung durch Cloud Temple verfügbar. Console weist auf ESXi-Systeme hin, die ein Update benötigen. |
+| 10/05/2026 | [DSA-2026-019](https://www.dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1) | 9.8-5.6 | **DSA-2026-019: Mehrere Schwachstellen in Dell ObjectScale** | Mehrere Schwachstellen betreffen Dell ObjectScale, darunter die Verwendung hartcodierter Anmeldeinformationen, die einem nicht authentifizierten Angreifer Zugriff auf das Dateisystem ermöglichen, eine fehlerhafte OS-Rechteverwaltung, eine CSV-Formelinjektion und eine Authentifizierungsumgehung | Object Storage | 🟠 Wichtig | ✅ Die Behebung Ihrer ObjectScale-Umgebungen wird von Cloud Temple übernommen. Es ist keine Maßnahme Ihrerseits erforderlich. |
+| 06/04/2026 | [DSA-2026-143](https://www.dell.com/support/kbdoc/en-us/000449325/dsa-2026-143-security-update-for-dell-objectscale-prior-to-4-1-0-3-and-4-2-0-0-insertion-of-sensitive-information-into-log-file-vulnerability) | 7.8 | **DSA-2026-143 : Schwachstelle in Dell ObjectScale (CVE-2026-28261)** | Eine Schwachstelle (CVE-2026-28261) in Dell ObjectScale im Zusammenhang mit dem Einfügen sensibler Informationen in Protokolldateien ermöglicht es einem lokalen Angreifer, Geheimnisse offenzulegen und seine Privilegien zu erweitern, um das System zu kompromittieren. | Object Storage | 🟡 Moderat | ✅ Die Behebung Ihrer ObjectScale-Umgebungen wird von Cloud Temple übernommen. Es ist keine Aktion Ihrerseits erforderlich. |
+| 23/03/2026 | [XSA-480](https://docs.vates.tech/security/advisories/2026/vates-sa-2026-005/) | 7.8 | **XCP-NG Schwachstelle (CVE-2026-23554)** | In XCP-ng 8.3 wurde eine Schwachstelle (CVE-2026-23554) identifiziert, die speziell auf Intel x86-Prozessoren basierende Systeme betrifft und es einer VM ermöglicht, den Host zu kompromittieren (Privilegienerweiterung oder DoS). | IaaS OpenSource | 🟠 Wichtig | ✅ Die Aktualisierung Ihrer XCP-ng-Instanzen ist geplant, sobald die Patches von Cloud Temple validiert wurden. Es ist keine Aktion Ihrerseits erforderlich. |
+| 29/01/2026 | [Hersteller-Bulletin](https://xcp-ng.org/blog/2026/01/29/january-2026-security-and-maintenance-updates-for-xcp-ng-8-3-lts/) | 2.9 - 8.5 | **XCP-NG Schwachstellen** | In XCP-ng wurden mehrere Schwachstellen entdeckt. Die wichtigste ermöglicht eine Privilegienerweiterung von einer VM zum dom0. Andere Schwachstellen ermöglichen die Ausführung von beliebigem Code über die NVMe-Emulation oder den Abfluss vertraulicher Daten zwischen virtuellen Maschinen. | IaaS OpenSource | 🟠 Wichtig | ✅ Die Aktualisierung Ihrer XCP-ng-Instanzen ist geplant, sobald die Patches von Cloud Temple validiert wurden. Es ist keine Aktion Ihrerseits erforderlich. |
+| 23/01/2026 | [DSA-2026-047](https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities) | 4.4 - 8.8 | **DSA-2026-047 : Schwachstellen in Dell ObjectScale** | Mehrere Schwachstellen in Dell ObjectScale im Zusammenhang mit Standard-Anmeldeinformationen und der Übertragung/Speicherung im Klartext ermöglichen lokale oder Remote-Kompromittierungen. | Object Storage | 🟠 Wichtig | ✅ Die Behebung Ihrer ObjectScale-Umgebungen wird von Cloud Temple übernommen. Es ist keine Aktion Ihrerseits erforderlich. |
+| 23/12/2025 | [CVE-2025-14443](https://access.redhat.com/security/cve/CVE-2025-14443) | 8.5 | **Schwachstelle in Red Hat OpenShift (CVE-2025-14443)** | Eine Schwachstelle in der Komponente `openshift-apiserver` ermöglicht eine Ausweitung von Berechtigungen. Die Ausnutzung erfordert eine vorherige Authentifizierung. | PaaS OpenShift | 🟠 Wichtig | ✅ Die Aktualisierung Ihrer OpenShift-Instanzen ist geplant, sobald die Patches von Cloud Temple validiert wurden. Es ist keine Aktion Ihrerseits erforderlich. |
+| 30/09/2025 | [VMSA-2025-0016](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150) | 8.5 | **VMSA-2025-0016: Schwachstelle in VMware vCenter (CVE-2025-41250)** | Eine Schwachstelle (CVE-2025-41250) ermöglicht es einem authentifizierten Angreifer, Benachrichtigungs-E-Mails für geplante Aufgaben zu ändern. | IaaS By VMware | 🟠 Wichtig | ✅ Die Aktualisierung Ihrer vCenter-Instanzen ist geplant, sobald die Patches von Cloud Temple validiert wurden. Es ist keine Aktion Ihrerseits erforderlich. Das Update wird in den Konsolen-Benachrichtigungen angezeigt. |
+| 30/09/2025 | [VMSA-2025-0015](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149) | 7.6 | **VMSA-2025-0015: Schwachstelle in VMware Tools (Windows)** | Eine Schwachstelle (CVE-2025-41246) in VMware Tools für Windows ermöglicht eine Ausweitung von Berechtigungen (erfordert authentifizierten lokalen Zugriff). | IaaS By VMware | 🟡 Mäßig | ⚠️ Wir empfehlen Ihnen, die VMware Tools auf Ihren virtuellen Maschinen zu aktualisieren. Die korrigierten VM-Tools-Versionen sind in den von Cloud Temple bereitgestellten ESXi-Paketen enthalten. |
+| 07/08/2025 | [DSA-2025-154](https://www.dell.com/support/kbdoc/en-us/000262308/dsa-2025-154-security-update-for-dell-ecs-and-objectscale-use-of-hard-coded-ssh-cryptographic-key-vulnerability) | 8.4 | **DSA-2025-154 : Schwachstelle in Dell ObjectScale (CVE-2025-26476)** | Eine Schwachstelle (CVE-2025-26476) in Dell ObjectScale (< 4.0.0.0) im Zusammenhang mit der Verwendung hartcodierter SSH-Schlüssel ermöglicht lokalen unauthentifizierten Zugriff. | Object Storage | 🟠 Wichtig | ✅ Die Behebung Ihrer ObjectScale-Umgebungen wird von Cloud Temple übernommen. Es ist keine Aktion Ihrerseits erforderlich. |
+| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 9.3 | **VMSA-2025-0013 : Wichtige Schwachstellen in VMware ESXi** | Mehrere wichtige Schwachstellen betreffen VMware ESXi. Patches werden vom Hersteller bereitgestellt. | IaaS By VMware | 🟠 Wichtig | ⚠️ Wir empfehlen Ihnen, Ihre Hypervisoren zu aktualisieren. Die korrigierten ESXi-Versionen sind verfügbar, sobald sie von Cloud Temple validiert wurden. Console zeigt die ESXi an, die ein Update benötigen. |
+| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 7.1 | **VMSA-2025-0013 : Schwachstelle in VMware Tools (CVE-2025-41239)** | Eine Schwachstelle (CVE-2025-41239) in VMware Tools ermöglicht die Preisgabe sensibler Informationen über nicht initialisierte vSockets. Patches werden vom Hersteller bereitgestellt. | IaaS By VMware | 🟡 Mäßig | ⚠️ Wir empfehlen Ihnen, VMware Tools auf Ihren virtuellen Maschinen zu aktualisieren. Die korrigierten VM Tools-Versionen sind in den ESXi-Paketen enthalten, die von Cloud Temple zur Verfügung gestellt werden. |
+| 01/07/2025 | [XSA-470](https://xenbits.xen.org/xsa/advisory-470.html) | N/A | **XCP-NG-Schwachstelle durch fehlerhafte Ausnahmebehandlung**
[Hersteller-Bulletin](https://xcp-ng.org/blog/2025/07/03/july-2025-security-and-maintenance-update-for-xcp-ng-8-2-lts/) | Eine Schwachstelle wurde in XCP-NG entdeckt, die es privilegiertem Code innerhalb einer virtuellen Maschine ermöglicht, einen Absturz des Hypervisors zu verursachen, was zu einem Denial of Service (DoS) des gesamten Hosts führen kann. | IaaS OpenSource | 🟡 Mäßig | ✅ Das Update Ihrer XCP-ng-Instanzen ist geplant, sobald die Patches von Cloud Temple validiert wurden. Kein Handeln Ihrerseits erforderlich. |
+| 23/05/2025 | [XSA-468](https://xenbits.xen.org/xsa/advisory-468.html) | 8.8-90 | **XCP-NG-Vulnerabilitäten in den PV-Windows-Treibern (XSA-468)**
[Herausgeber-Bulletin](https://xcp-ng.org/blog/2025/05/27/xsa-468-windows-pv-driver-vulnerabilities/) | Mehrere Schwachstellen (CVE-2025-27462, CVE-2025-27463, CVE-2025-27464) in den PV-Windows-Treibern ermöglichen es unprivilegierten Benutzern, Systemrechte innerhalb der Windows-VMs zu erlangen. | IaaS OpenSource | 🟠 Wichtig | ⚠️ Wir empfehlen Ihnen, die PV-Windows-Treiber Ihrer virtuellen Maschinen auf in der Sicherheitsmitteilung angegebenen korrigierten Versionen zu aktualisieren. ✅ Die Aktualisierung Ihrer XCP-ng-Instanzen ist ab der Validierung der Patches durch Cloud Temple geplant. |
+| 22/05/2025 | [XSA-469, INTEL-SA](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-83/) | 4.9-6.5 | **XCP-NG-Vulnerabilitäten im Intel-Microcode und Xen (XSA-469, INTEL-SA)**
[Herausgeber-Bulletin](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | Sicherheitspatches für XCP-ng wurden veröffentlicht, die mehrere Schwachstellen im Intel-Microcode und Xen beheben. | IaaS OpenSource | 🟡 Mäßig | ✅ Die Aktualisierung Ihrer XCP-ng-Instanzen ist ab der Validierung der Patches durch Cloud Temple geplant. Keine Aktion von Ihrer Seite erforderlich. |
+| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-6.8 | **VMSA-2025-0010: Mehrere Schwachstellen in VMware ESXi (CVE-2025-41226, CVE-2025-41227, CVE-2025-41228)** | Es wurden mehrere Schwachstellen in VMware ESXi gemeldet: Denial-of-Service-Schwachstelle bei Gastoperationen (CVE-2025-41226), Denial-of-Service-Schwachstelle (CVE-2025-41227), Cross-Site-Scripting (XSS)-Schwachstelle (CVE-2025-41228). Patches werden vom Hersteller bereitgestellt. | IaaS By VMware | 🟡 Mäßig | ⚠️ Wir empfehlen Ihnen, Ihre Hypervisoren zu aktualisieren. Die gepatchten ESXi-Versionen sind verfügbar, sobald sie von Cloud Temple validiert wurden. Die Konsole zeigt Ihnen an, welche ESXi aktualisiert werden müssen. |
+| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-8.8 | **VMSA-2025-0010: Mehrere Schwachstellen in vCenter (CVE-2025-41225, CVE-2025-41228)** | Es wurden mehrere Schwachstellen in VMware vCenter gemeldet: Authentifizierte Befehlsausführung in VMware vCenter Server (CVE-2025-41225), Cross-Site-Scripting (XSS)-Schwachstelle (CVE-2025-41228). Patches werden vom Hersteller bereitgestellt. | IaaS By VMware | 🟠 Wichtig | ✅ Die Aktualisierung Ihrer vCenter-Instanzen ist eingeplant, sobald die Patches von Cloud Temple validiert wurden. Es ist keine Aktion Ihrerseits erforderlich. |
+| 14/05/2025 | [VMSA-2025-0007](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683) | 6.1 | **VMSA-2025-0007: Unsichere Dateiverwaltung in VMware Tools (CVE-2025-22247)** | Es wurde eine unsichere Dateiverwaltung in VMware Tools gemeldet. Patches werden vom Hersteller bereitgestellt. | IaaS By VMware | 🟡 Mäßig | ⚠️ Wir empfehlen Ihnen, VMware Tools auf Ihren virtuellen Maschinen zu aktualisieren. |
+| 25/03/2025 | [VMSA-2025-0005](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25518) | 7.8 | **VMSA-2025-0005: Authentifizierungsumgehung in VMware Tools für Windows (CVE-2025-22230)** | Es wurde eine Schwachstelle zur Umgehung der Authentifizierung in VMware Tools für Windows gemeldet. Patches werden vom Hersteller bereitgestellt. | IaaS By VMware | 🟠 Wichtig | ⚠️ Wir empfehlen Ihnen, VMware Tools auf Ihren virtuellen Maschinen zu aktualisieren. |
+| 04/03/2025 | [VMSA-2025-0004](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390) | 7.1-9.3 | **VMSA-2025-0004: Mehrere Schwachstellen in VMware ESXi (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)** | Es wurden mehrere Schwachstellen in VMware ESXi gemeldet: Heap-Überlauf-Schwachstelle in VMCI (CVE-2025-22224), von VMware als kritisch eingestuft, Arbiträrer Schreibzugriff in VMware ESXi (CVE-2025-22225), HGFS-Informationsleck-Schwachstelle (CVE-2025-22226). Patches werden vom Hersteller bereitgestellt. | IaaS By VMware | 🟠 Wichtig | ⚠️ Wir empfehlen Ihnen, Ihre Hypervisoren zu aktualisieren. Die gepatchten ESXi-Versionen sind verfügbar, sobald sie von Cloud Temple validiert wurden. Die Konsole zeigt Ihnen an, welche ESXi aktualisiert werden müssen. |
## Informationen
diff --git a/i18n/en/docusaurus-plugin-content-docs/current/console/security/security_alarms.md b/i18n/en/docusaurus-plugin-content-docs/current/console/security/security_alarms.md
index 073132c0..4d6716e3 100644
--- a/i18n/en/docusaurus-plugin-content-docs/current/console/security/security_alarms.md
+++ b/i18n/en/docusaurus-plugin-content-docs/current/console/security/security_alarms.md
@@ -9,24 +9,25 @@ This page is updated daily to account for newly identified vulnerabilities.
| Date | Reference(s) | CVSS | Title | Description | Service(s) | Severity | Remediation |
|---------------------|-----------------|-------------|--------------|---------|-------------|----------------|-------------|
-| 06/04/2026 | [DSA-2026-143](https://www.dell.com/support/kbdoc/en-us/000449325/dsa-2026-143-security-update-for-dell-objectscale-prior-to-4-1-0-3-and-4-2-0-0-insertion-of-sensitive-information-into-log-file-vulnerability) | 7.8 | **DSA-2026-143: Vulnerability in Dell ObjectScale (CVE-2026-28261)** | A vulnerability (CVE-2026-28261) in Dell ObjectScale related to the insertion of sensitive information into log files allows a local attacker to expose secrets and escalate privileges to compromise the system. | Object Storage | 🟡 Moderate | ✅ Remediation of your ObjectScale environments is handled by Cloud Temple. No action is required on your part. |
-| 23/03/2026 | [XSA-480](https://docs.vates.tech/security/advisories/2026/vates-sa-2026-005/) | 7.8 | **XCP-NG Vulnerability (CVE-2026-23554)** | A vulnerability (CVE-2026-23554) has been identified in XCP-ng 8.3, specifically affecting systems based on Intel x86 processors, allowing a VM to compromise the host (privilege escalation or DoS). | IaaS OpenSource | 🟠 High | ✅ The update of your XCP-ng instances is scheduled upon patch validation by Cloud Temple. No action is required on your part. |
-| 29/01/2026 | [Bulletin éditeur](https://xcp-ng.org/blog/2026/01/29/january-2026-security-and-maintenance-updates-for-xcp-ng-8-3-lts/) | 2.9 - 8.5 | **XCP-NG Vulnerabilities** | Several vulnerabilities have been discovered in XCP-ng. The most severe allows privilege escalation from a VM to dom0. Other flaws allow arbitrary code execution via NVMe emulation or leakage of confidential data between virtual machines. | IaaS OpenSource | 🟠 High | ✅ The update of your XCP-ng instances is scheduled upon patch validation by Cloud Temple. No action is required on your part. |
-| 23/01/2026 | [DSA-2026-047](https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities) | 4.4 - 8.8 | **DSA-2026-047: Vulnerabilities in Dell ObjectScale** | Multiple vulnerabilities in Dell ObjectScale related to default credentials and plaintext transmission/storage allow local or remote compromises. | Object Storage | 🟠 High | ✅ Remediation of your ObjectScale environments is handled by Cloud Temple. No action is required on your part. |
-| 23/12/2025 | [CVE-2025-14443](https://access.redhat.com/security/cve/CVE-2025-14443) | 8.5 | **Vulnerability in Red Hat OpenShift (CVE-2025-14443)** | A vulnerability in the `openshift-apiserver` component allows privilege escalation. Exploitation requires prior authentication. | PaaS OpenShift | 🟠 High | ✅ The update of your OpenShift instances is scheduled upon patch validation by Cloud Temple. No action is required on your part.|
-| 30/09/2025 | [VMSA-2025-0016](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150) | 8.5 | **VMSA-2025-0016: Vulnerability in VMware vCenter (CVE-2025-41250)** | A vulnerability (CVE-2025-41250) allows an authenticated attacker to modify notification emails for scheduled tasks. | IaaS By VMware | 🟠 High | ✅ The update of your vCenter instances is scheduled upon patch validation by Cloud Temple. No action is required on your part. The update is flagged in Console notifications. |
-| 30/09/2025 | [VMSA-2025-0015](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149) | 7.6 | **VMSA-2025-0015: Vulnerability in VMware Tools (Windows)** | A vulnerability (CVE-2025-41246) affecting VMware Tools for Windows allows privilege escalation (requires authenticated local access). | IaaS By VMware | 🟡 Moderate | ⚠️ We recommend updating VMware Tools on your virtual machines. The corrected VM Tools versions are included in the ESXi packages made available by Cloud Temple. |
-| 07/08/2025 | [DSA-2025-154](https://www.dell.com/support/kbdoc/en-us/000262308/dsa-2025-154-security-update-for-dell-ecs-and-objectscale-use-of-hard-coded-ssh-cryptographic-key-vulnerability) | 8.4 | **DSA-2025-154: Vulnerability in Dell ObjectScale (CVE-2025-26476)** | A vulnerability (CVE-2025-26476) in Dell ObjectScale (< 4.0.0.0) related to the use of hardcoded SSH keys allows unauthenticated local access. | Object Storage | 🟠 High | ✅ Remediation of your ObjectScale environments is handled by Cloud Temple. No action is required on your part. |
-| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 9.3 | **VMSA-2025-0013: Critical Vulnerabilities in VMware ESXi** | Several critical vulnerabilities affect VMware ESXi. Patches are provided by the vendor. | IaaS By VMware | 🟠 High | ⚠️ We recommend updating your hypervisors. The corrected ESXi versions are available upon validation by Cloud Temple. Console indicates which ESXi hosts require an update. |
-| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 7.1 | **VMSA-2025-0013: Vulnerability in VMware Tools (CVE-2025-41239)** | A vulnerability (CVE-2025-41239) in VMware Tools allows disclosure of sensitive information via uninitialized vSockets. Patches are provided by the vendor. | IaaS By VMware | 🟡 Moderate | ⚠️ We recommend updating VMware Tools on your virtual machines. The corrected VM Tools versions are included in the ESXi packages made available by Cloud Temple. |
-| 01/07/2025 | [XSA-470](https://xenbits.xen.org/xsa/advisory-470.html) | N/A | **XCP-NG Vulnerability via Improper Exception Handling** [Bulletin éditeur](https://xcp-ng.org/blog/2025/07/03/july-2025-security-and-maintenance-update-for-xcp-ng-8-2-lts/) | A vulnerability has been discovered in XCP-NG, allowing privileged code executed from a virtual machine to cause a hypervisor crash, resulting in a denial of service (DoS) for the entire host. | IaaS OpenSource | 🟡 Moderate | ✅ The update of your XCP-ng instances is scheduled upon patch validation by Cloud Temple. No action is required on your part.|
-| 23/05/2025 | [XSA-468](https://xenbits.xen.org/xsa/advisory-468.html) | 8.8-9.0 | **XCP-NG Vulnerabilities in Windows PV Drivers (XSA-468)** [Bulletin éditeur](https://xcp-ng.org/blog/2025/05/27/xsa-468-windows-pv-driver-vulnerabilities/) | Several vulnerabilities (CVE-2025-27462, CVE-2025-27463, CVE-2025-27464) in Windows PV drivers allow non-privileged users to obtain system privileges inside Windows VMs. | IaaS OpenSource | 🟠 High | ⚠️ We recommend updating the Windows PV drivers on your virtual machines to the corrected versions indicated in the security bulletin. ✅ The update of your XCP-ng instances is scheduled upon patch validation by Cloud Temple. |
-| 22/05/2025 | [XSA-469, INTEL-SA](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | 4.9-6.5 | **XCP-NG Vulnerabilities in Intel Microcode and Xen (XSA-469, INTEL-SA)** [Bulletin éditeur](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | Security patches for XCP-ng have been released, fixing several vulnerabilities in Intel microcode and Xen. | IaaS OpenSource | 🟡 Moderate | ✅ The update of your XCP-ng instances is scheduled upon patch validation by Cloud Temple. No action is required on your part.|
-| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-6.8 | **VMSA-2025-0010: Multiple Vulnerabilities in VMware ESXi (CVE-2025-41226, CVE-2025-41227, CVE-2025-41228)** | Multiple vulnerabilities in VMware ESXi have been reported: Guest operation denial of service vulnerability (CVE-2025-41226), Denial of service vulnerability (CVE-2025-41227), Cross-Site Scripting (XSS) vulnerability (CVE-2025-41228). Patches are provided by the vendor. | IaaS By VMware | 🟡 Moderate | ⚠️ We recommend updating your hypervisors. The corrected ESXi versions are available upon validation by Cloud Temple. Console indicates which ESXi hosts require an update. |
-| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-8.8 | **VMSA-2025-0010: Multiple Vulnerabilities in vCenter (CVE-2025-41225, CVE-2025-41228)** | Multiple vulnerabilities in VMware vCenter have been reported: VMware vCenter Server authenticated command execution vulnerability (CVE-2025-41225), Cross-Site Scripting (XSS) vulnerability (CVE-2025-41228). Patches are provided by the vendor. | IaaS By VMware | 🟠 High | ✅ The update of your vCenter instances is scheduled upon patch validation by Cloud Temple. No action is required on your part. The update is flagged in Console notifications. |
-| 14/05/2025 | [VMSA-2025-0007](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683) | 6.1 | **VMSA-2025-0007: Insecure File Management Vulnerability in VMware Tools (CVE-2025-22247)** | An insecure file management vulnerability in VMware Tools has been reported. Patches are provided by the vendor. | IaaS By VMware | 🟡 Moderate | ⚠️ We recommend updating VMware Tools on your virtual machines. The corrected VM Tools versions are included in the ESXi packages made available by Cloud Temple. |
-| 25/03/2025 | [VMSA-2025-0005](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25518) | 7.8 | **VMSA-2025-0005: Authentication Bypass Vulnerability in VMware Tools for Windows (CVE-2025-22230)** | An authentication bypass vulnerability in VMware Tools for Windows has been reported. Patches are provided by the vendor. | IaaS By VMware | 🟠 High | ⚠️ We recommend updating VMware Tools on your virtual machines. The corrected VM Tools versions are included in the ESXi packages made available by Cloud Temple |
-| 04/03/2025 | [VMSA-2025-0004](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390) | 7.1-9.3 | **VMSA-2025-0004: Multiple Vulnerabilities in VMware ESXi (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)** | Multiple vulnerabilities in VMware ESXi have been reported: VMCI heap overflow vulnerability (CVE-2025-22224) rated Critical by VMware, Arbitrary write vulnerability in VMware ESXi (CVE-2025-22225), HGFS information disclosure vulnerability (CVE-2025-22226). Patches are provided by the vendor. | IaaS By VMware | 🟠 High | ⚠️ We recommend updating your hypervisors. The corrected ESXi versions are available upon validation by Cloud Temple. Console indicates which ESXi hosts require an update. |
+| 10/05/2026 | [DSA-2026-019](https://www.dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1) | 9.8-5.6 | **DSA-2026-019: Multiple Vulnerabilities in Dell ObjectScale** | Multiple vulnerabilities affecting Dell ObjectScale, including the use of hard-coded credentials allowing an unauthenticated attacker to access the file system, improper OS privilege management, CSV formula injection, and authentication bypass | Object Storage | 🟠 Important | ✅ Remediation of your ObjectScale environments is handled by Cloud Temple. No action is required on your part. |
+| 06/04/2026 | [DSA-2026-143](https://www.dell.com/support/kbdoc/en-us/000449325/dsa-2026-143-security-update-for-dell-objectscale-prior-to-4-1-0-3-and-4-2-0-0-insertion-of-sensitive-information-into-log-file-vulnerability) | 7.8 | **DSA-2026-143 : Vulnerability in Dell ObjectScale (CVE-2026-28261)** | A vulnerability (CVE-2026-28261) in Dell ObjectScale related to the insertion of sensitive information into log files allows a local attacker to expose secrets and escalate their privileges to compromise the system. | Object Storage | 🟡 Moderate | ✅ The remediation of your ObjectScale environments is handled by Cloud Temple. No action is required on your part. |
+| 23/03/2026 | [XSA-480](https://docs.vates.tech/security/advisories/2026/vates-sa-2026-005/) | 7.8 | **XCP-NG Vulnerability (CVE-2026-23554)** | A vulnerability (CVE-2026-23554) has been identified in XCP-ng 8.3, specifically affecting systems based on Intel x86 processors, allowing a VM to compromise the host (escalade de privilèges ou DoS). | IaaS OpenSource | 🟠 Important | ✅ The update of your XCP-ng instances is scheduled upon validation of the patches by Cloud Temple. No action is required on your part. |
+| 29/01/2026 | [Vendor advisory](https://xcp-ng.org/blog/2026/01/29/january-2026-security-and-maintenance-updates-for-xcp-ng-8-3-lts/) | 2.9 - 8.5 | **XCP-NG Vulnerabilities** | Several vulnerabilities have been discovered in XCP-ng. The most critical allows a privilege escalation from a VM to dom0. Other flaws allow arbitrary code execution via NVMe emulation or confidential data leaks between virtual machines. | IaaS OpenSource | 🟠 Important | ✅ The update of your XCP-ng instances is scheduled upon validation of the patches by Cloud Temple. No action is required on your part. |
+| 23/01/2026 | [DSA-2026-047](https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities) | 4.4 - 8.8 | **DSA-2026-047 : Vulnerabilities in Dell ObjectScale** | Multiple vulnerabilities in Dell ObjectScale related to default credentials and cleartext transmissions/storage allow local or remote compromises. | Object Storage | 🟠 Important | ✅ The remediation of your ObjectScale environments is handled by Cloud Temple. No action is required on your part. |
+| 23/12/2025 | [CVE-2025-14443](https://access.redhat.com/security/cve/CVE-2025-14443) | 8.5 | **Vulnerability in Red Hat OpenShift (CVE-2025-14443)** | A vulnerability in the `openshift-apiserver` component allows for privilege escalation. Exploitation requires prior authentication. | PaaS OpenShift | 🟠 Important | ✅ The update of your OpenShift instances is scheduled as soon as the patches are validated by Cloud Temple. No action on your part is required. |
+| 30/09/2025 | [VMSA-2025-0016](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150) | 8.5 | **VMSA-2025-0016: Vulnerability in VMware vCenter (CVE-2025-41250)** | A vulnerability (CVE-2025-41250) allows an authenticated attacker to modify notification emails for scheduled tasks. | IaaS By VMware | 🟠 Important | ✅ The update of your vCenter instances is scheduled as soon as the patches are validated by Cloud Temple. No action on your part is required. The update is indicated in the Console notifications. |
+| 30/09/2025 | [VMSA-2025-0015](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149) | 7.6 | **VMSA-2025-0015: Vulnerability in VMware Tools (Windows)** | A vulnerability (CVE-2025-41246) affecting VMware Tools for Windows allows for privilege escalation (requires authenticated local access). | IaaS By VMware | 🟡 Moderate | ⚠️ We recommend updating VMware Tools on your virtual machines. The patched VM Tools versions are included in the ESXi packages provided by Cloud Temple. |
+| 07/08/2025 | [DSA-2025-154](https://www.dell.com/support/kbdoc/en-us/000262308/dsa-2025-154-security-update-for-dell-ecs-and-objectscale-use-of-hard-coded-ssh-cryptographic-key-vulnerability) | 8.4 | **DSA-2025-154 : Vulnerability in Dell ObjectScale (CVE-2025-26476)** | A vulnerability (CVE-2025-26476) in Dell ObjectScale (< 4.0.0.0) related to the use of hard-coded SSH keys allows unauthenticated local access. | Object Storage | 🟠 Important | ✅ The remediation of your ObjectScale environments is handled by Cloud Temple. No action on your part is required. |
+| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 9.3 | **VMSA-2025-0013 : Important Vulnerabilities in VMware ESXi** | Several important vulnerabilities affect VMware ESXi. Patches are provided by the vendor. | IaaS By VMware | 🟠 Important | ⚠️ We recommend updating your hypervisors. The corrected ESXi versions are available as soon as they are validated by Cloud Temple. Console indicates the ESXi requiring an update. |
+| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 7.1 | **VMSA-2025-0013 : Vulnerability in VMware Tools (CVE-2025-41239)** | A vulnerability (CVE-2025-41239) in VMware Tools allows sensitive information disclosure via uninitialized vSockets. Patches are provided by the vendor. | IaaS By VMware | 🟡 Moderate | ⚠️ We recommend updating VMware Tools on your virtual machines. The corrected VM Tools versions are included in the ESXi packages made available by Cloud Temple. |
+| 01/07/2025 | [XSA-470](https://xenbits.xen.org/xsa/advisory-470.html) | N/A | **XCP-NG vulnerability due to improper exception handling**
[Vendor bulletin](https://xcp-ng.org/blog/2025/07/03/july-2025-security-and-maintenance-update-for-xcp-ng-8-2-lts/) | A vulnerability was discovered in XCP-NG, allowing privileged code executed from a virtual machine to crash the hypervisor, resulting in a denial of service (DoS) of the entire host. | IaaS OpenSource | 🟡 Moderate | ✅ Updating your XCP-ng instances is scheduled as soon as the patches are validated by Cloud Temple. No action is required on your part. |
+| 23/05/2025 | [XSA-468](https://xenbits.xen.org/xsa/advisory-468.html) | 8.8-9.0 | **XCP-NG vulnerabilities in Windows PV drivers (XSA-468)**
[Publisher bulletin](https://xcp-ng.org/blog/2025/05/27/xsa-468-windows-pv-driver-vulnerabilities/) | Several vulnerabilities (CVE-2025-27462, CVE-2025-27463, CVE-2025-27464) in Windows PV drivers allow unprivileged users to obtain system privileges within Windows VMs. | IaaS OpenSource | 🟠 Important | ⚠️ We recommend updating the Windows PV drivers of your virtual machines to the corrected versions indicated in the security bulletin. ✅ The update of your XCP-ng instances is planned as soon as the patches are validated by Cloud Temple. |
+| 22/05/2025 | [XSA-469, INTEL-SA](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | 4.9-6.5 | **XCP-NG vulnerabilities in Intel microcode and Xen (XSA-469, INTEL-SA)**
[Publisher bulletin](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | Security patches for XCP-ng have been published, correcting several vulnerabilities in Intel microcode and Xen. | IaaS OpenSource | 🟡 Moderate | ✅ The update of your XCP-ng instances is planned as soon as the patches are validated by Cloud Temple. No action is required from your side.|
+| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-6.8 | **VMSA-2025-0010: Multiple vulnerabilities in VMware ESXi (CVE-2025-41226, CVE-2025-41227, CVE-2025-41228)** | Multiple vulnerabilities have been reported in VMware ESXi: Guest operation denial of service vulnerability (CVE-2025-41226), Denial of service vulnerability (CVE-2025-41227), Cross Site Scripting (XSS) vulnerability (CVE-2025-41228). Fixes are provided by the vendor. | IaaS By VMware | 🟡 Moderate | ⚠️ We recommend that you update your hypervisors. The patched ESXi versions are available once validated by Cloud Temple. The Console indicates which ESXi instances require an update. |
+| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-8.8 | **VMSA-2025-0010: Multiple vulnerabilities in vCenter (CVE-2025-41225, CVE-2025-41228)** | Multiple vulnerabilities have been reported in VMware vCenter: Authenticated command execution vulnerability in VMware vCenter Server (CVE-2025-41225), Cross Site Scripting (XSS) vulnerability (CVE-2025-41228). Fixes are provided by the vendor. | IaaS By VMware | 🟠 Important | ✅ Updating your vCenter instances is scheduled as soon as the patches are validated by Cloud Temple. No action is required on your part. |
+| 14/05/2025 | [VMSA-2025-0007](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683) | 6.1 | **VMSA-2025-0007: Insecure file management vulnerability in VMware Tools (CVE-2025-22247)** | An insecure file management vulnerability in VMware Tools has been reported. Fixes are provided by the vendor. | IaaS By VMware | 🟡 Moderate | ⚠️ We recommend that you update VMware Tools on your virtual machines. |
+| 25/03/2025 | [VMSA-2025-0005](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25518) | 7.8 | **VMSA-2025-0005: Authentication bypass vulnerability in VMware Tools for Windows (CVE-2025-22230)** | An authentication bypass vulnerability in VMware Tools for Windows has been reported. Fixes are provided by the vendor. | IaaS By VMware | 🟠 Important | ⚠️ We recommend that you update VMware Tools on your virtual machines. |
+| 04/03/2025 | [VMSA-2025-0004](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390) | 7.1-9.3 | **VMSA-2025-0004: Multiple vulnerabilities in VMware ESXi (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)** | Multiple vulnerabilities have been reported in VMware ESXi: VMCI heap overflow vulnerability (CVE-2025-22224) rated Critical by VMware, Arbitrary write vulnerability in VMware ESXi (CVE-2025-22225), HGFS information disclosure vulnerability (CVE-2025-22226). Fixes are provided by the vendor. | IaaS By VMware | 🟠 Important | ⚠️ We recommend that you update your hypervisors. The patched ESXi versions are available once validated by Cloud Temple. The Console indicates which ESXi instances require an update. |
## Information
diff --git a/i18n/es/docusaurus-plugin-content-docs/current/console/security/security_alarms.md b/i18n/es/docusaurus-plugin-content-docs/current/console/security/security_alarms.md
index 9c7c6b1c..c70e33a0 100644
--- a/i18n/es/docusaurus-plugin-content-docs/current/console/security/security_alarms.md
+++ b/i18n/es/docusaurus-plugin-content-docs/current/console/security/security_alarms.md
@@ -9,24 +9,25 @@ Esta página se actualiza diariamente para tener en cuenta las vulnerabilidades
| Fecha | Referencia(s) | CVSS | Título | Descripción | Servicio(s) | Severidad | Tratamiento |
|---------------------|-----------------|-------------|--------------|---------|-------------|----------------|-------------|
-| 06/04/2026 | [DSA-2026-143](https://www.dell.com/support/kbdoc/en-us/000449325/dsa-2026-143-security-update-for-dell-objectscale-prior-to-4-1-0-3-and-4-2-0-0-insertion-of-sensitive-information-into-log-file-vulnerability) | 7.8 | **DSA-2026-143 : Vulnerabilidad en Dell ObjectScale (CVE-2026-28261)** | Una vulnerabilidad (CVE-2026-28261) en Dell ObjectScale relacionada con la inserción de información sensible en archivos de registro permite a un atacante local exponer secretos y elevar sus privilegios para comprometer el sistema. | Object Storage | 🟡 Moderada | ✅ La remediación de sus entornos ObjectScale está gestionada por Cloud Temple. No es necesaria ninguna acción por su parte. |
-| 23/03/2026 | [XSA-480](https://docs.vates.tech/security/advisories/2026/vates-sa-2026-005/) | 7.8 | **Vulnerabilidad XCP-NG (CVE-2026-23554)** | Se ha identificado una vulnerabilidad (CVE-2026-23554) en XCP-ng 8.3, afectando específicamente a sistemas basados en procesadores Intel x86, lo que permite a una VM comprometer el host (escalamiento de privilegios o DoS). | IaaS OpenSource | 🟠 Importante | ✅ La actualización de sus instancias XCP-ng está programada una vez que los parches sean validados por Cloud Temple. No es necesaria ninguna acción por su parte. |
-| 29/01/2026 | [Bulletin éditeur](https://xcp-ng.org/blog/2026/01/29/january-2026-security-and-maintenance-updates-for-xcp-ng-8-3-lts/) | 2.9 - 8.5 | **Vulnerabilidades XCP-NG** | Se han descubierto varias vulnerabilidades en XCP-ng. La más grave permite un escalamiento de privilegios desde una VM hacia el dom0. Otras fallas permiten la ejecución de código arbitrario a través de la emulación NVMe o fugas de datos confidenciales entre máquinas virtuales. | IaaS OpenSource | 🟠 Importante | ✅ La actualización de sus instancias XCP-ng está programada una vez que los parches sean validados por Cloud Temple. No es necesaria ninguna acción por su parte. |
-| 23/01/2026 | [DSA-2026-047](https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities) | 4.4 - 8.8 | **DSA-2026-047 : Vulnerabilidades en Dell ObjectScale** | Múltiples vulnerabilidades en Dell ObjectScale relacionadas con credenciales por defecto y transmisiones/almacenamiento en texto claro permiten compromisos locales o remotos. | Object Storage | 🟠 Importante | ✅ La remediación de sus entornos ObjectScale está gestionada por Cloud Temple. No es necesaria ninguna acción por su parte. |
-| 23/12/2025 | [CVE-2025-14443](https://access.redhat.com/security/cve/CVE-2025-14443) | 8.5 | **Vulnerabilidad en Red Hat OpenShift (CVE-2025-14443)** | Una vulnerabilidad en el componente `openshift-apiserver` permite una elevación de privilegios. La explotación requiere una autenticación previa. | PaaS OpenShift | 🟠 Importante | ✅ La actualización de sus instancias OpenShift está programada una vez que los parches sean validados por Cloud Temple. No es necesaria ninguna acción por su parte.|
-| 30/09/2025 | [VMSA-2025-0016](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150) | 8.5 | **VMSA-2025-0016 : Vulnerabilidad en VMware vCenter (CVE-2025-41250)** | Una vulnerabilidad (CVE-2025-41250) permite a un atacante autenticado modificar los correos electrónicos de notificación de las tareas programadas. | IaaS By VMware | 🟠 Importante | ✅ La actualización de sus instancias vCenter está programada una vez que los parches sean validados por Cloud Temple. No es necesaria ninguna acción por su parte. La actualización se indica en las notificaciones de Console. |
-| 30/09/2025 | [VMSA-2025-0015](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149) | 7.6 | **VMSA-2025-0015 : Vulnerabilidad en VMware Tools (Windows)** | Una vulnerabilidad (CVE-2025-41246) que afecta a VMware Tools para Windows permite una elevación de privilegios (requiere acceso local autenticado). | IaaS By VMware | 🟡 Moderada | ⚠️ Recomendamos actualizar VMware Tools en sus máquinas virtuales. Las versiones corregidas de VM Tools están incluidas en los paquetes ESXi disponibles a través de Cloud Temple. |
-| 07/08/2025 | [DSA-2025-154](https://www.dell.com/support/kbdoc/en-us/000262308/dsa-2025-154-security-update-for-dell-ecs-and-objectscale-use-of-hard-coded-ssh-cryptographic-key-vulnerability) | 8.4 | **DSA-2025-154 : Vulnerabilidad en Dell ObjectScale (CVE-2025-26476)** | Una vulnerabilidad (CVE-2025-26476) en Dell ObjectScale (< 4.0.0.0) relacionada con el uso de claves SSH codificadas en duro permite un acceso local no autenticado. | Object Storage | 🟠 Importante | ✅ La remediación de sus entornos ObjectScale está gestionada por Cloud Temple. No es necesaria ninguna acción por su parte. |
-| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 9.3 | **VMSA-2025-0013 : Vulnerabilidades críticas en VMware ESXi** | Varias vulnerabilidades críticas afectan a VMware ESXi. El editor proporciona parches. | IaaS By VMware | 🟠 Importante | ⚠️ Recomendamos actualizar sus hipervisores. Las versiones corregidas de ESXi están disponibles una vez validadas por Cloud Temple. Console le indica qué ESXi requieren una actualización. |
-| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 7.1 | **VMSA-2025-0013 : Vulnerabilidad en VMware Tools (CVE-2025-41239)** | Una vulnerabilidad (CVE-2025-41239) en VMware Tools permite la divulgación de información sensible a través de vSockets no inicializados. El editor proporciona parches. | IaaS By VMware | 🟡 Moderada | ⚠️ Recomendamos actualizar VMware Tools en sus máquinas virtuales. Las versiones corregidas de VM Tools están incluidas en los paquetes ESXi disponibles a través de Cloud Temple. |
-| 01/07/2025 | [XSA-470](https://xenbits.xen.org/xsa/advisory-470.html) | N/A | **Vulnerabilidad XCP-NG mediante una mala gestión de excepciones** [Bulletin éditeur](https://xcp-ng.org/blog/2025/07/03/july-2025-security-and-maintenance-update-for-xcp-ng-8-2-lts/) | Se ha descubierto una vulnerabilidad en XCP-NG que permite que código privilegiado ejecutado desde una máquina virtual provoque un fallo en el hipervisor, causando una denegación de servicio (DoS) en todo el host. | IaaS OpenSource | 🟡 Moderada | ✅ La actualización de sus instancias XCP-ng está programada una vez que los parches sean validados por Cloud Temple. No es necesaria ninguna acción por su parte.|
-| 23/05/2025 | [XSA-468](https://xenbits.xen.org/xsa/advisory-468.html) | 8.8-9.0 | **Vulnerabilidades XCP-NG en los controladores PV de Windows (XSA-468)** [Bulletin éditeur](https://xcp-ng.org/blog/2025/05/27/xsa-468-windows-pv-driver-vulnerabilities/) | Varias vulnerabilidades (CVE-2025-27462, CVE-2025-27463, CVE-2025-27464) en los controladores PV de Windows permiten a usuarios no privilegiados obtener privilegios de sistema dentro de las VM de Windows. | IaaS OpenSource | 🟠 Importante | ⚠️ Recomendamos actualizar los controladores PV de Windows de sus máquinas virtuales a las versiones corregidas indicadas en el boletín de seguridad. ✅ La actualización de sus instancias XCP-ng está programada una vez que los parches sean validados por Cloud Temple. |
-| 22/05/2025 | [XSA-469, INTEL-SA](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | 4.9-6.5 | **Vulnerabilidades XCP-NG en el microcódigo Intel y Xen (XSA-469, INTEL-SA)** [Bulletin éditeur](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | Se han publicado parches de seguridad para XCP-ng que corrigen varias vulnerabilidades en el microcódigo Intel y Xen. | IaaS OpenSource | 🟡 Moderada | ✅ La actualización de sus instancias XCP-ng está programada una vez que los parches sean validados por Cloud Temple. No es necesaria ninguna acción por su parte.|
-| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-6.8 | **VMSA-2025-0010 : Múltiples vulnerabilidades en VMware ESXi (CVE-2025-41226, CVE-2025-41227, CVE-2025-41228)** | Se han reportado varias vulnerabilidades en VMware ESXi: Vulnerabilidad de denegación de servicio en operaciones invitadas (CVE-2025-41226), Vulnerabilidad de denegación de servicio (CVE-2025-41227), Vulnerabilidad de tipo Cross Site Scripting (XSS) (CVE-2025-41228). El editor proporciona parches. | IaaS By VMware | 🟡 Moderada | ⚠️ Recomendamos actualizar sus hipervisores. Las versiones corregidas de ESXi están disponibles una vez validadas por Cloud Temple. Console le indica qué ESXi requieren una actualización. |
-| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-8.8 | **VMSA-2025-0010 : Múltiples vulnerabilidades en vCenter (CVE-2025-41225, CVE-2025-41228)** | Se han reportado varias vulnerabilidades en VMware vCenter: Vulnerabilidad de ejecución de comandos autenticada en VMware vCenter Server (CVE-2025-41225), Vulnerabilidad de tipo Cross Site Scripting (XSS) (CVE-2025-41228). El editor proporciona parches. | IaaS By VMware | 🟠 Importante | ✅ La actualización de sus instancias vCenter está programada una vez que los parches sean validados por Cloud Temple. No es necesaria ninguna acción por su parte. La actualización se indica en las notificaciones de Console. |
-| 14/05/2025 | [VMSA-2025-0007](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683) | 6.1 | **VMSA-2025-0007 : Vulnerabilidad de gestión de archivos insegura en VMware Tools (CVE-2025-22247)** | Se ha reportado una vulnerabilidad de gestión de archivos insegura en VMware Tools. El editor proporciona parches. | IaaS By VMware | 🟡 Moderada | ⚠️ Recomendamos actualizar VMware Tools en sus máquinas virtuales. Las versiones corregidas de VM Tools están incluidas en los paquetes ESXi disponibles a través de Cloud Temple. |
-| 25/03/2025 | [VMSA-2025-0005](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25518) | 7.8 | **VMSA-2025-0005 : Vulnerabilidad de elusión de autenticación en VMware Tools para Windows (CVE-2025-22230)** | Se ha reportado una vulnerabilidad de elusión de autenticación en VMware Tools para Windows. El editor proporciona parches. | IaaS By VMware | 🟠 Importante | ⚠️ Recomendamos actualizar VMware Tools en sus máquinas virtuales. Las versiones corregidas de VM Tools están incluidas en los paquetes ESXi disponibles a través de Cloud Temple |
-| 04/03/2025 | [VMSA-2025-0004](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390) | 7.1-9.3 | **VMSA-2025-0004 : Múltiples vulnerabilidades en VMware ESXi (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)** | Se han reportado varias vulnerabilidades en VMware ESXi: Vulnerabilidad de desbordamiento de heap VMCI (CVE-2025-22224) evaluada como Crítica por VMware, Vulnerabilidad de escritura arbitraria en VMware ESXi (CVE-2025-22225), Vulnerabilidad de divulgación de información HGFS (CVE-2025-22226). El editor proporciona parches. | IaaS By VMware | 🟠 Importante | ⚠️ Recomendamos actualizar sus hipervisores. Las versiones corregidas de ESXi están disponibles una vez validadas por Cloud Temple. Console le indica qué ESXi requieren una actualización. |
+| 10/05/2026 | [DSA-2026-019](https://www.dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1) | 9.8-5.6 | **DSA-2026-019: Múltiples vulnerabilidades en Dell ObjectScale** | Varias vulnerabilidades que afectan a Dell ObjectScale, incluido el uso de credenciales codificadas que permiten a un atacante no autenticado acceder al sistema de archivos, una gestión incorrecta de privilegios del sistema operativo, una inyección de fórmulas CSV y una omisión de autenticación | Object Storage | 🟠 Importante | ✅ La remediación de sus entornos ObjectScale está a cargo de Cloud Temple. No se requiere ninguna acción por su parte. |
+| 06/04/2026 | [DSA-2026-143](https://www.dell.com/support/kbdoc/en-us/000449325/dsa-2026-143-security-update-for-dell-objectscale-prior-to-4-1-0-3-and-4-2-0-0-insertion-of-sensitive-information-into-log-file-vulnerability) | 7.8 | **DSA-2026-143 : Vulnerabilidad en Dell ObjectScale (CVE-2026-28261)** | Una vulnerabilidad (CVE-2026-28261) en Dell ObjectScale relacionada con la inserción de información confidencial en los archivos de registro permite a un atacante local exponer secretos y elevar sus privilegios para comprometer el sistema. | Object Storage | 🟡 Moderada | ✅ La remediación de sus entornos ObjectScale está a cargo de Cloud Temple. No es necesaria ninguna acción por su parte. |
+| 23/03/2026 | [XSA-480](https://docs.vates.tech/security/advisories/2026/vates-sa-2026-005/) | 7.8 | **Vulnerabilidad XCP-NG (CVE-2026-23554)** | Se ha identificado una vulnerabilidad (CVE-2026-23554) en XCP-ng 8.3, que afecta específicamente a los sistemas basados en procesadores Intel x86, lo que permite a una máquina virtual comprometer el host (escalada de privilegios o DoS). | IaaS OpenSource | 🟠 Importante | ✅ La actualización de sus instancias XCP-ng está programada tan pronto como Cloud Temple valide los parches. No es necesaria ninguna acción por su parte. |
+| 29/01/2026 | [Boletín del editor](https://xcp-ng.org/blog/2026/01/29/january-2026-security-and-maintenance-updates-for-xcp-ng-8-3-lts/) | 2.9 - 8.5 | **Vulnerabilidades XCP-NG** | Se han descubierto varias vulnerabilidades en XCP-ng. La más importante permite una escalada de privilegios de una máquina virtual hacia el dom0. Otros fallos permiten la ejecución de código arbitrario a través de la emulación NVMe o fugas de datos confidenciales entre máquinas virtuales. | IaaS OpenSource | 🟠 Importante | ✅ La actualización de sus instancias XCP-ng está programada tan pronto como Cloud Temple valide los parches. No es necesaria ninguna acción por su parte. |
+| 23/01/2026 | [DSA-2026-047](https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities) | 4.4 - 8.8 | **DSA-2026-047 : Vulnerabilidades en Dell ObjectScale** | Múltiples vulnerabilidades en Dell ObjectScale relacionadas con credenciales predeterminadas y transmisiones/almacenamiento en texto claro permiten compromisos locales o remotos. | Object Storage | 🟠 Importante | ✅ La remediación de sus entornos ObjectScale está a cargo de Cloud Temple. No es necesaria ninguna acción por su parte. |
+| 23/12/2025 | [CVE-2025-14443](https://access.redhat.com/security/cve/CVE-2025-14443) | 8.5 | **Vulnerabilidad en Red Hat OpenShift (CVE-2025-14443)** | Una vulnerabilidad en el componente `openshift-apiserver` permite una elevación de privilegios. La explotación requiere una autenticación previa. | PaaS OpenShift | 🟠 Importante | ✅ La actualización de sus instancias de OpenShift está programada en cuanto Cloud Temple valide los parches. No es necesaria ninguna acción por su parte. |
+| 30/09/2025 | [VMSA-2025-0016](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150) | 8.5 | **VMSA-2025-0016: Vulnerabilidad en VMware vCenter (CVE-2025-41250)** | Una vulnerabilidad (CVE-2025-41250) permite a un atacante autenticado modificar los correos electrónicos de notificación de las tareas programadas. | IaaS By VMware | 🟠 Importante | ✅ La actualización de sus instancias de vCenter está programada en cuanto Cloud Temple valide los parches. No es necesaria ninguna acción por su parte. La actualización se indica en las notificaciones de la Consola. |
+| 30/09/2025 | [VMSA-2025-0015](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149) | 7.6 | **VMSA-2025-0015: Vulnerabilidad en VMware Tools (Windows)** | Una vulnerabilidad (CVE-2025-41246) que afecta a VMware Tools para Windows permite una elevación de privilegios (requiere acceso local autenticado). | IaaS By VMware | 🟡 Moderada | ⚠️ Le recomendamos actualizar VMware Tools en sus máquinas virtuales. Las versiones corregidas de VM Tools se incluyen en los paquetes ESXi proporcionados por Cloud Temple. |
+| 07/08/2025 | [DSA-2025-154](https://www.dell.com/support/kbdoc/en-us/000262308/dsa-2025-154-security-update-for-dell-ecs-and-objectscale-use-of-hard-coded-ssh-cryptographic-key-vulnerability) | 8.4 | **DSA-2025-154 : Vulnerabilidad en Dell ObjectScale (CVE-2025-26476)** | Una vulnerabilidad (CVE-2025-26476) en Dell ObjectScale (< 4.0.0.0) relacionada con el uso de claves SSH codificadas permite acceso local no autenticado. | Object Storage | 🟠 Importante | ✅ La remediación de sus entornos ObjectScale está a cargo de Cloud Temple. No se requiere ninguna acción de su parte. |
+| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 9.3 | **VMSA-2025-0013 : Vulnerabilidades importantes en VMware ESXi** | Varias vulnerabilidades importantes afectan VMware ESXi. Los parches son proporcionados por el proveedor. | IaaS By VMware | 🟠 Importante | ⚠️ Recomendamos actualizar sus hipervisores. Las versiones ESXi corregidas están disponibles tan pronto como son validadas por Cloud Temple. Console indica los ESXi que requieren actualización. |
+| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 7.1 | **VMSA-2025-0013 : Vulnerabilidad en VMware Tools (CVE-2025-41239)** | Una vulnerabilidad (CVE-2025-41239) en VMware Tools permite la divulgación de información sensible a través de vSockets no inicializados. Los parches son proporcionados por el proveedor. | IaaS By VMware | 🟡 Moderada | ⚠️ Recomendamos actualizar VMware Tools en sus máquinas virtuales. Las versiones VM Tools corregidas están incluidas en los paquetes ESXi puestos a disposición por Cloud Temple. |
+| 01/07/2025 | [XSA-470](https://xenbits.xen.org/xsa/advisory-470.html) | N/A | **Vulnerabilidad XCP-NG por un manejo inadecuado de excepciones**
[Boletín del editor](https://xcp-ng.org/blog/2025/07/03/july-2025-security-and-maintenance-update-for-xcp-ng-8-2-lts/) | Se ha descubierto una vulnerabilidad en XCP-NG que permite a código privilegiado ejecutado desde una máquina virtual provocar un fallo del hipervisor, causando una denegación de servicio (DoS) del host completo. | IaaS OpenSource | 🟡 Moderada | ✅ La actualización de sus instancias XCP-ng está planificada desde la validación de los parches por parte de Cloud Temple. No se requiere ninguna acción de su parte. |
+| 23/05/2025 | [XSA-468](https://xenbits.xen.org/xsa/advisory-468.html) | 8.8-9.0 | **Vulnerabilidades XCP-NG en los controladores PV de Windows (XSA-468)**
[Boletín del editor](https://xcp-ng.org/blog/2025/05/27/xsa-468-windows-pv-driver-vulnerabilities/) | Múltiples vulnerabilidades (CVE-2025-27462, CVE-2025-27463, CVE-2025-27464) en los controladores PV de Windows permiten a usuarios no privilegiados obtener privilegios de sistema dentro de las VM de Windows. | IaaS OpenSource | 🟠 Importante | ⚠️ Recomendamos actualizar los controladores PV de Windows de sus máquinas virtuales a las versiones corregidas indicadas en el boletín de seguridad. ✅ La actualización de sus instancias XCP-ng está planificada tan pronto como Cloud Temple valide las correcciones. |
+| 22/05/2025 | [XSA-469, INTEL-SA](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | 4.9-6.5 | **Vulnerabilidades XCP-NG en el microcódigo de Intel y Xen (XSA-469, INTEL-SA)**
[Boletín del editor](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | Se han publicado parches de seguridad para XCP-ng, corrigiendo múltiples vulnerabilidades en el microcódigo de Intel y Xen. | IaaS OpenSource | 🟡 Moderada | ✅ La actualización de sus instancias XCP-ng está planificada tan pronto como Cloud Temple valide las correcciones. No es necesaria ninguna acción por su parte. |
+| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-6.8 | **VMSA-2025-0010 : Múltiples vulnerabilidades en VMware ESXi (CVE-2025-41226, CVE-2025-41227, CVE-2025-41228)** | Se han reportado varias vulnerabilidades en VMware ESXi: Vulnerabilidad de denegación de servicio en operaciones de invitado (CVE-2025-41226), vulnerabilidad de denegación de servicio (CVE-2025-41227), vulnerabilidad de tipo Cross Site Scripting (XSS) (CVE-2025-41228). Se proporcionan parches por parte del proveedor. | IaaS By VMware | 🟡 Moderada | ⚠️ Le recomendamos actualizar sus hipervisores. Las versiones corregidas de ESXi están disponibles tan pronto como sean validadas por Cloud Temple. Console le indica los ESXi que requieren actualización. |
+| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-8.8 | **VMSA-2025-0010 : Múltiples vulnerabilidades en vCenter (CVE-2025-41225, CVE-2025-41228)** | Se han reportado varias vulnerabilidades en VMware vCenter: Vulnerabilidad de ejecución de comandos autenticados en VMware vCenter Server (CVE-2025-41225), vulnerabilidad de tipo Cross Site Scripting (XSS) (CVE-2025-41228). Se proporcionan parches por parte del proveedor. | IaaS By VMware | 🟠 Importante | ✅ La actualización de sus instancias vCenter está prevista tan pronto como los parches sean validados por Cloud Temple. No se requiere ninguna acción por su parte. |
+| 14/05/2025 | [VMSA-2025-0007](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683) | 6.1 | **VMSA-2025-0007 : Vulnerabilidad de gestión de archivos no segura en VMware Tools (CVE-2025-22247)** | Se ha reportado una vulnerabilidad de gestión de archivos no segura en VMware Tools. Se proporcionan parches por parte del proveedor. | IaaS By VMware | 🟡 Moderada | ⚠️ Le recomendamos actualizar VMware Tools en sus máquinas virtuales. |
+| 25/03/2025 | [VMSA-2025-0005](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25518) | 7.8 | **VMSA-2025-0005 : Vulnerabilidad de omisión de autenticación en VMware Tools para Windows (CVE-2025-22230)** | Se ha reportado una vulnerabilidad de omisión de autenticación en VMware Tools para Windows. Se proporcionan parches por parte del proveedor. | IaaS By VMware | 🟠 Importante | ⚠️ Le recomendamos actualizar VMware Tools en sus máquinas virtuales. |
+| 04/03/2025 | [VMSA-2025-0004](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390) | 7.1-9.3 | **VMSA-2025-0004 : Múltiples vulnerabilidades en VMware ESXi (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)** | Se han reportado varias vulnerabilidades en VMware ESXi: Vulnerabilidad de desbordamiento de pila VMCI (CVE-2025-22224) evaluada como Crítica por VMware, vulnerabilidad de escritura arbitraria en VMware ESXi (CVE-2025-22225), vulnerabilidad de divulgación de información HGFS (CVE-2025-22226). Se proporcionan parches por parte del proveedor. | IaaS By VMware | 🟠 Importante | ⚠️ Le recomendamos actualizar sus hipervisores. Las versiones corregidas de ESXi están disponibles tan pronto como sean validadas por Cloud Temple. Console le indica los ESXi que requieren actualización. |
## Información
diff --git a/i18n/it/docusaurus-plugin-content-docs/current/console/security/security_alarms.md b/i18n/it/docusaurus-plugin-content-docs/current/console/security/security_alarms.md
index efe4a68d..c0980b50 100644
--- a/i18n/it/docusaurus-plugin-content-docs/current/console/security/security_alarms.md
+++ b/i18n/it/docusaurus-plugin-content-docs/current/console/security/security_alarms.md
@@ -9,24 +9,25 @@ Questa pagina viene aggiornata quotidianamente per tenere conto delle vulnerabil
| Data | Riferimento/i | CVSS | Titolo | Descrizione | Servizio/i | Severità | Gestione |
|---------------------|-----------------|-------------|--------------|---------|-------------|----------------|-------------|
-| 06/04/2026 | [DSA-2026-143](https://www.dell.com/support/kbdoc/en-us/000449325/dsa-2026-143-security-update-for-dell-objectscale-prior-to-4-1-0-3-and-4-2-0-0-insertion-of-sensitive-information-into-log-file-vulnerability) | 7.8 | **DSA-2026-143: Vulnerabilità in Dell ObjectScale (CVE-2026-28261)** | Una vulnerabilità (CVE-2026-28261) in Dell ObjectScale relativa all'inserimento di informazioni sensibili nei file di log consente a un attaccante locale di rivelare segreti e di elevare i propri privilegi per compromettere il sistema. | Object Storage | 🟡 Moderata | ✅ La risoluzione dei vostri ambienti ObjectScale è gestita da Cloud Temple. Non è necessaria alcuna azione da parte vostra. |
-| 23/03/2026 | [XSA-480](https://docs.vates.tech/security/advisories/2026/vates-sa-2026-005/) | 7.8 | **Vulnerabilità XCP-NG (CVE-2026-23554)** | È stata identificata una vulnerabilità (CVE-2026-23554) in XCP-ng 8.3, che colpisce specificamente i sistemi basati su processori Intel x86, consentendo a una VM di compromettere l'host (elevazione dei privilegi o DoS). | IaaS OpenSource | 🟠 Importante | ✅ L'aggiornamento delle vostre istanze XCP-ng è pianificato non appena i patch verranno validati da Cloud Temple. Non è necessaria alcuna azione da parte vostra. |
-| 29/01/2026 | [Comunicato del produttore](https://xcp-ng.org/blog/2026/01/29/january-2026-security-and-maintenance-updates-for-xcp-ng-8-3-lts/) | 2.9 - 8.5 | **Vulnerabilità XCP-NG** | Sono state scoperte diverse vulnerabilità in XCP-ng. La più grave consente un'elevazione dei privilegi da una VM verso dom0. Altre falle permettono l'esecuzione di codice arbitrario tramite emulazione NVMe o fughe di dati riservati tra macchine virtuali. | IaaS OpenSource | 🟠 Importante | ✅ L'aggiornamento delle vostre istanze XCP-ng è pianificato non appena i patch verranno validati da Cloud Temple. Non è necessaria alcuna azione da parte vostra. |
-| 23/01/2026 | [DSA-2026-047](https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities) | 4.4 - 8.8 | **DSA-2026-047: Vulnerabilità in Dell ObjectScale** | Molteplici vulnerabilità in Dell ObjectScale relative a credenziali predefinite e trasmissioni/archiviazioni in chiaro consentono compromissioni locali o remote. | Object Storage | 🟠 Importante | ✅ La risoluzione dei vostri ambienti ObjectScale è gestita da Cloud Temple. Non è necessaria alcuna azione da parte vostra. |
-| 23/12/2025 | [CVE-2025-14443](https://access.redhat.com/security/cve/CVE-2025-14443) | 8.5 | **Vulnerabilità in Red Hat OpenShift (CVE-2025-14443)** | Una vulnerabilità nel componente `openshift-apiserver` consente un'elevazione dei privilegi. Lo sfruttamento richiede un'autenticazione preventiva. | PaaS OpenShift | 🟠 Importante | ✅ L'aggiornamento delle vostre istanze OpenShift è pianificato non appena i patch verranno validati da Cloud Temple. Non è necessaria alcuna azione da parte vostra.|
-| 30/09/2025 | [VMSA-2025-0016](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150) | 8.5 | **VMSA-2025-0016: Vulnerabilità in VMware vCenter (CVE-2025-41250)** | Una vulnerabilità (CVE-2025-41250) consente a un attaccante autenticato di modificare le email di notifica delle attività pianificate. | IaaS By VMware | 🟠 Importante | ✅ L'aggiornamento delle vostre istanze vCenter è pianificato non appena i patch verranno validati da Cloud Temple. Non è necessaria alcuna azione da parte vostra. L'aggiornamento è segnalato nelle notifiche di Console.. |
-| 30/09/2025 | [VMSA-2025-0015](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149) | 7.6 | **VMSA-2025-0015: Vulnerabilità in VMware Tools (Windows)** | Una vulnerabilità (CVE-2025-41246) che interessa VMware Tools per Windows consente un'elevazione dei privilegi (richiede un accesso locale autenticato). | IaaS By VMware | 🟡 Moderata | ⚠️ Raccomandiamo di aggiornare VMware Tools sulle vostre macchine virtuali. Le versioni di VM Tools corrette sono contenute nei pacchetti ESXi messi a disposizione da Cloud Temple. |
-| 07/08/2025 | [DSA-2025-154](https://www.dell.com/support/kbdoc/en-us/000262308/dsa-2025-154-security-update-for-dell-ecs-and-objectscale-use-of-hard-coded-ssh-cryptographic-key-vulnerability) | 8.4 | **DSA-2025-154: Vulnerabilità in Dell ObjectScale (CVE-2025-26476)** | Una vulnerabilità (CVE-2025-26476) in Dell ObjectScale (< 4.0.0.0) relativa all'uso di chiavi SSH fisse consente un accesso locale non autenticato. | Object Storage | 🟠 Importante | ✅ La risoluzione dei vostri ambienti ObjectScale è gestita da Cloud Temple. Non è necessaria alcuna azione da parte vostra. |
-| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 9.3 | **VMSA-2025-0013: Vulnerabilità critiche in VMware ESXi** | Diverse vulnerabilità critiche interessano VMware ESXi. I patch sono forniti dal produttore. | IaaS By VMware | 🟠 Importante | ⚠️ Raccomandiamo di aggiornare i vostri hypervisor. Le versioni ESXi corrette sono disponibili non appena validate da Cloud Temple. Console indica gli ESXi che richiedono un aggiornamento. |
-| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 7.1 | **VMSA-2025-0013: Vulnerabilità in VMware Tools (CVE-2025-41239)** | Una vulnerabilità (CVE-2025-41239) in VMware Tools consente la divulgazione di informazioni sensibili tramite vSockets non inizializzati. I patch sono forniti dal produttore. | IaaS By VMware | 🟡 Moderata | ⚠️ Raccomandiamo di aggiornare VMware Tools sulle vostre macchine virtuali. Le versioni di VM Tools corrette sono contenute nei pacchetti ESXi messi a disposizione da Cloud Temple. |
-| 01/07/2025 | [XSA-470](https://xenbits.xen.org/xsa/advisory-470.html) | N/A | **Vulnerabilità XCP-NG tramite gestione errata delle eccezioni** [Comunicato del produttore](https://xcp-ng.org/blog/2025/07/03/july-2025-security-and-maintenance-update-for-xcp-ng-8-2-lts/) | È stata scoperta una vulnerabilità in XCP-NG, che consente a codice privilegiato eseguito da una macchina virtuale di causare un crash dell'hypervisor, provocando un denial of service (DoS) dell'intero host. | IaaS OpenSource | 🟡 Moderata | ✅ L'aggiornamento delle vostre istanze XCP-ng è pianificato non appena i patch verranno validati da Cloud Temple. Non è necessaria alcuna azione da parte vostra.|
-| 23/05/2025 | [XSA-468](https://xenbits.xen.org/xsa/advisory-468.html) | 8.8-9.0 | **Vulnerabilità XCP-NG nei driver PV Windows (XSA-468)** [Comunicato del produttore](https://xcp-ng.org/blog/2025/05/27/xsa-468-windows-pv-driver-vulnerabilities/) | Diverse vulnerabilità (CVE-2025-27462, CVE-2025-27463, CVE-2025-27464) nei driver PV Windows consentono agli utenti non privilegiati di ottenere privilegi di sistema all'interno delle VM Windows. | IaaS OpenSource | 🟠 Importante | ⚠️ Raccomandiamo di aggiornare i driver PV Windows delle vostre macchine virtuali alle versioni corrette indicate nel comunicato di sicurezza. ✅ L'aggiornamento delle vostre istanze XCP-ng è pianificato non appena i patch verranno validati da Cloud Temple. |
-| 22/05/2025 | [XSA-469, INTEL-SA](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | 4.9-6.5 | **Vulnerabilità XCP-NG nel microcodice Intel e Xen (XSA-469, INTEL-SA)** [Comunicato del produttore](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | Sono stati pubblicati patch di sicurezza per XCP-ng, che correggono diverse vulnerabilità nel microcodice Intel e Xen. | IaaS OpenSource | 🟡 Moderata | ✅ L'aggiornamento delle vostre istanze XCP-ng è pianificato non appena i patch verranno validati da Cloud Temple. Non è necessaria alcuna azione da parte vostra.|
-| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-6.8 | **VMSA-2025-0010: Multiple vulnerabilità in VMware ESXi (CVE-2025-41226, CVE-2025-41227, CVE-2025-41228)** | Sono state segnalate diverse vulnerabilità in VMware ESXi: Vulnerabilità da denial of service delle operazioni guest (CVE-2025-41226), Vulnerabilità da denial of service (CVE-2025-41227), Vulnerabilità di tipo Cross Site Scripting (XSS) (CVE-2025-41228). I patch sono forniti dal produttore. | IaaS By VMware | 🟡 Moderata | ⚠️ Raccomandiamo di aggiornare i vostri hypervisor. Le versioni ESXi corrette sono disponibili non appena validate da Cloud Temple. Console indica gli ESXi che richiedono un aggiornamento. |
-| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-8.8 | **VMSA-2025-0010: Multiple vulnerabilità in vCenter (CVE-2025-41225, CVE-2025-41228)** | Sono state segnalate diverse vulnerabilità in VMware vCenter: Vulnerabilità di esecuzione di comandi autenticata di VMware vCenter Server (CVE-2025-41225), Vulnerabilità di tipo Cross Site Scripting (XSS) (CVE-2025-41228). I patch sono forniti dal produttore. | IaaS By VMware | 🟠 Importante | ✅ L'aggiornamento delle vostre istanze vCenter è pianificato non appena i patch verranno validati da Cloud Temple. Non è necessaria alcuna azione da parte vostra. L'aggiornamento è segnalato nelle notifiche di Console.. |
-| 14/05/2025 | [VMSA-2025-0007](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683) | 6.1 | **VMSA-2025-0007: Vulnerabilità nella gestione non sicura dei file in VMware Tools (CVE-2025-22247)** | È stata segnalata una vulnerabilità nella gestione non sicura dei file in VMware Tools. I patch sono forniti dal produttore. | IaaS By VMware | 🟡 Moderata | ⚠️ Raccomandiamo di aggiornare VMware Tools sulle vostre macchine virtuali. Le versioni di VM Tools corrette sono contenute nei pacchetti ESXi messi a disposizione da Cloud Temple. |
-| 25/03/2025 | [VMSA-2025-0005](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25518) | 7.8 | **VMSA-2025-0005: Vulnerabilità di bypass dell'autenticazione in VMware Tools per Windows (CVE-2025-22230)** | È stata segnalata una vulnerabilità di bypass dell'autenticazione in VMware Tools per Windows. I patch sono forniti dal produttore. | IaaS By VMware | 🟠 Importante | ⚠️ Raccomandiamo di aggiornare VMware Tools sulle vostre macchine virtuali. Le versioni di VM Tools corrette sono contenute nei pacchetti ESXi messi a disposizione da Cloud Temple |
-| 04/03/2025 | [VMSA-2025-0004](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390) | 7.1-9.3 | **VMSA-2025-0004: Multiple vulnerabilità in VMware ESXi (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)** | Sono state segnalate diverse vulnerabilità in VMware ESXi: Vulnerabilità da heap overflow VMCI (CVE-2025-22224) valutata come Critica da VMware, Vulnerabilità di scrittura arbitraria in VMware ESXi (CVE-2025-22225), Vulnerabilità di divulgazione di informazioni HGFS (CVE-2025-22226). I patch sono forniti dal produttore. | IaaS By VMware | 🟠 Importante | ⚠️ Raccomandiamo di aggiornare i vostri hypervisor. Le versioni ESXi corrette sono disponibili non appena validate da Cloud Temple. Console indica gli ESXi che richiedono un aggiornamento. |
+| 10/05/2026 | [DSA-2026-019](https://www.dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1) | 9.8-5.6 | **DSA-2026-019: Vulnerabilità multiple in Dell ObjectScale** | Diverse vulnerabilità che interessano Dell ObjectScale, tra cui l'utilizzo di credenziali codificate che consentono a un attaccante non autenticato di accedere al file system, una gestione impropria dei privilegi OS, un'iniezione di formule CSV e un bypass dell'autenticazione | Object Storage | 🟠 Importante | ✅ La remediation dei vostri ambienti ObjectScale è gestita da Cloud Temple. Non è richiesta alcuna azione da parte vostra. |
+| 06/04/2026 | [DSA-2026-143](https://www.dell.com/support/kbdoc/en-us/000449325/dsa-2026-143-security-update-for-dell-objectscale-prior-to-4-1-0-3-and-4-2-0-0-insertion-of-sensitive-information-into-log-file-vulnerability) | 7.8 | **DSA-2026-143: Vulnerabilità in Dell ObjectScale (CVE-2026-28261)** | Una vulnerabilità (CVE-2026-28261) in Dell ObjectScale legata all'inserimento di informazioni sensibili nei file di log consente a un attaccante locale di esporre segreti ed elevare i propri privilegi per compromettere il sistema. | Object Storage | 🟡 Moderata | ✅ La risoluzione dei vostri ambienti ObjectScale è gestita da Cloud Temple. Non è necessaria alcuna azione da parte vostra. |
+| 23/03/2026 | [XSA-480](https://docs.vates.tech/security/advisories/2026/vates-sa-2026-005/) | 7.8 | **Vulnerabilità XCP-NG (CVE-2026-23554)** | Una vulnerabilità (CVE-2026-23554) è stata identificata in XCP-ng 8.3, che interessa specificamente i sistemi basati su processori Intel x86, consentendo a una VM di compromettere l'host (escalation di privilegi o DoS). | IaaS OpenSource | 🟠 Importante | ✅ L'aggiornamento delle vostre istanze XCP-ng è pianificato non appena le patch saranno validate da Cloud Temple. Non è necessaria alcuna azione da parte vostra. |
+| 29/01/2026 | [Bollettino del produttore](https://xcp-ng.org/blog/2026/01/29/january-2026-security-and-maintenance-updates-for-xcp-ng-8-3-lts/) | 2.9 - 8.5 | **Vulnerabilità XCP-NG** | Diverse vulnerabilità sono state scoperte in XCP-ng. La più importante consente un'escalation di privilegi da una VM verso il dom0. Altre falle consentono l'esecuzione di codice arbitrario tramite l'emulazione NVMe o fughe di dati riservati tra macchine virtuali. | IaaS OpenSource | 🟠 Importante | ✅ L'aggiornamento delle vostre istanze XCP-ng è pianificato non appena le patch saranno validate da Cloud Temple. Non è necessaria alcuna azione da parte vostra. |
+| 23/01/2026 | [DSA-2026-047](https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities) | 4.4 - 8.8 | **DSA-2026-047: Vulnerabilità in Dell ObjectScale** | Molteplici vulnerabilità in Dell ObjectScale legate a credenziali predefinite e trasmissioni/archiviazione in chiaro consentono compromissioni locali o remote. | Object Storage | 🟠 Importante | ✅ La risoluzione dei vostri ambienti ObjectScale è gestita da Cloud Temple. Non è necessaria alcuna azione da parte vostra. |
+| 23/12/2025 | [CVE-2025-14443](https://access.redhat.com/security/cve/CVE-2025-14443) | 8.5 | **Vulnerabilità in Red Hat OpenShift (CVE-2025-14443)** | Una vulnerabilità nel componente `openshift-apiserver` consente l'elevazione dei privilegi. L'exploitation richiede una previa autenticazione. | PaaS OpenShift | 🟠 Importante | ✅ L'aggiornamento delle istanze OpenShift è pianificato non appena i correttivi saranno validati da Cloud Temple. Non è richiesta alcuna azione da parte vostra.|
+| 30/09/2025 | [VMSA-2025-0016](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36150) | 8.5 | **VMSA-2025-0016: Vulnerabilità in VMware vCenter (CVE-2025-41250)** | Una vulnerabilità (CVE-2025-41250) consente a un utente malintenzionato autenticato di modificare le email di notifica delle attività pianificate. | IaaS By VMware | 🟠 Importante | ✅ L'aggiornamento delle istanze vCenter è pianificato non appena i correttivi saranno validati da Cloud Temple. Non è richiesta alcuna azione da parte vostra. L'aggiornamento è segnalato nelle notifiche della Console. |
+| 30/09/2025 | [VMSA-2025-0015](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149) | 7.6 | **VMSA-2025-0015: Vulnerabilità in VMware Tools (Windows)** | Una vulnerabilità (CVE-2025-41246) che interessa VMware Tools per Windows consente l'elevazione dei privilegi (richiede un accesso locale autenticato). | IaaS By VMware | 🟡 Moderata | ⚠️ Vi raccomandiamo di aggiornare i VMware Tools sulle vostre macchine virtuali. Le versioni corrette di VM Tools sono incluse nei pacchetti ESXi messi a disposizione da Cloud Temple. |
+| 07/08/2025 | [DSA-2025-154](https://www.dell.com/support/kbdoc/en-us/000262308/dsa-2025-154-security-update-for-dell-ecs-and-objectscale-use-of-hard-coded-ssh-cryptographic-key-vulnerability) | 8.4 | **DSA-2025-154 : Vulnerabilità in Dell ObjectScale (CVE-2025-26476)** | Una vulnerabilità (CVE-2025-26476) in Dell ObjectScale (< 4.0.0.0) relativa all'uso di chiavi SSH codificate consente l'accesso locale non autenticato. | Object Storage | 🟠 Importante | ✅ La risoluzione dei vostri ambienti ObjectScale è gestita da Cloud Temple. Non è richiesta alcuna azione da parte vostra. |
+| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 9.3 | **VMSA-2025-0013 : Vulnerabilità importanti in VMware ESXi** | Diverse vulnerabilità importanti interessano VMware ESXi. Le correzioni sono fornite dal fornitore. | IaaS By VMware | 🟠 Importante | ⚠️ Raccomandiamo di aggiornare i vostri hypervisor. Le versioni ESXi corrette sono disponibili non appena vengono convalidate da Cloud Temple. Console indica gli ESXi che richiedono un aggiornamento. |
+| 15/07/2025 | [VMSA-2025-0013](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/VMSA-2025-0013--VMware-ESXi--Workstation--Fusion--and-Tools-updates-address-multiple-vulnerabilities--CVE-2025-41236--CVE-2025-41237--CVE-2025-41238--CVE-2025-41239-/35877) | 7.1 | **VMSA-2025-0013 : Vulnerabilità in VMware Tools (CVE-2025-41239)** | Una vulnerabilità (CVE-2025-41239) in VMware Tools consente la divulgazione di informazioni sensibili tramite vSockets non inizializzati. Le correzioni sono fornite dal fornitore. | IaaS By VMware | 🟡 Moderata | ⚠️ Raccomandiamo di aggiornare VMware Tools sulle vostre macchine virtuali. Le versioni VM Tools corrette sono incluse nei pacchetti ESXi messi a disposizione da Cloud Temple. |
+| 01/07/2025 | [XSA-470](https://xenbits.xen.org/xsa/advisory-470.html) | N/A | **Vulnerabilità XCP-NG dovuta a una gestione errata delle eccezioni**
[Bollettino dell'editore](https://xcp-ng.org/blog/2025/07/03/july-2025-security-and-maintenance-update-for-xcp-ng-8-2-lts/) | È stata scoperta una vulnerabilità in XCP-NG che consente a codice privilegiato, eseguito da una macchina virtuale, di causare un crash dell'hypervisor, provocando un'interruzione di servizio (DoS) dell'intero host. | IaaS OpenSource | 🟡 Moderata | ✅ L'aggiornamento delle vostre istanze XCP-ng è pianificato non appena le patch saranno convalidate da Cloud Temple. Nessuna azione da parte vostra è necessaria.|
+| 23/05/2025 | [XSA-468](https://xenbits.xen.org/xsa/advisory-468.html) | 8.8-9.0 | **Vulnerabilità XCP-NG nei driver PV Windows (XSA-468)**
[Bollettino dell'editore](https://xcp-ng.org/blog/2025/05/27/xsa-468-windows-pv-driver-vulnerabilities/) | Diverse vulnerabilità (CVE-2025-27462, CVE-2025-27463, CVE-2025-27464) nei driver PV Windows consentono a utenti non privilegiati di ottenere privilegi di sistema all'interno delle VM Windows. | IaaS OpenSource | 🟠 Importante | ⚠️ Si consiglia di aggiornare i driver PV Windows delle proprie macchine virtuali alle versioni corrette indicate nel bollettino di sicurezza. ✅ L'aggiornamento delle proprie istanze XCP-ng è pianificato non appena le correzioni saranno validate da Cloud Temple. |
+| 22/05/2025 | [XSA-469, INTEL-SA](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | 4.9-6.5 | **Vulnerabilità XCP-NG nel microcodice Intel e Xen (XSA-469, INTEL-SA)**
[Bollettino dell'editore](https://xcp-ng.org/blog/2025/05/14/may-2025-security-update-for-xcp-ng-8-2-8-3/) | Sono state pubblicate correzioni di sicurezza per XCP-ng, che risolvono diverse vulnerabilità nel microcodice Intel e Xen. | IaaS OpenSource | 🟡 Moderata | ✅ L'aggiornamento delle proprie istanze XCP-ng è pianificato non appena le correzioni saranno validate da Cloud Temple. Nessuna azione è richiesta da parte vostra.|
+| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-6.8 | **VMSA-2025-0010: Molteplici vulnerabilità in VMware ESXi (CVE-2025-41226, CVE-2025-41227, CVE-2025-41228)** | Sono state segnalate diverse vulnerabilità in VMware ESXi: vulnerabilità di tipo denial-of-service delle operazioni guest (CVE-2025-41226), vulnerabilità di tipo denial-of-service (CVE-2025-41227), vulnerabilità di tipo Cross Site Scripting (XSS) (CVE-2025-41228). Patch correttive sono fornite dal fornitore. | IaaS By VMware | 🟡 Moderata | ⚠️ Si consiglia di aggiornare i vostri hypervisor. Le versioni corrette di ESXi sono disponibili al momento della validazione da parte di Cloud Temple. La Console indica gli ESXi che necessitano di aggiornamento. |
+| 21/05/2025 | [VMSA-2025-0010](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717) | 4.3-8.8 | **VMSA-2025-0010: Molteplici vulnerabilità in vCenter (CVE-2025-41225, CVE-2025-41228)** | Sono state segnalate diverse vulnerabilità in VMware vCenter: vulnerabilità di esecuzione di comandi autenticati in VMware vCenter Server (CVE-2025-41225), vulnerabilità di tipo Cross Site Scripting (XSS) (CVE-2025-41228). Patch correttive sono fornite dal fornitore. | IaaS By VMware | 🟠 Importante | ✅ L’aggiornamento delle vostre istanze vCenter è pianificato non appena le patch sono validate da Cloud Temple. Nessuna azione richiesta da parte vostra. |
+| 14/05/2025 | [VMSA-2025-0007](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683) | 6.1 | **VMSA-2025-0007: Vulnerabilità di gestione non sicura dei file in VMware Tools (CVE-2025-22247)** | È stata segnalata una vulnerabilità di gestione non sicura dei file in VMware Tools. Patch correttive sono fornite dal fornitore. | IaaS By VMware | 🟡 Moderata | ⚠️ Si consiglia di aggiornare VMware Tools sulle vostre macchine virtuali. |
+| 25/03/2025 | [VMSA-2025-0005](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25518) | 7.8 | **VMSA-2025-0005: Vulnerabilità di bypass dell’autenticazione in VMware Tools per Windows (CVE-2025-22230)** | È stata segnalata una vulnerabilità di bypass dell’autenticazione in VMware Tools per Windows. Patch correttive sono fornite dal fornitore. | IaaS By VMware | 🟠 Importante | ⚠️ Si consiglia di aggiornare VMware Tools sulle vostre macchine virtuali. |
+| 04/03/2025 | [VMSA-2025-0004](https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390) | 7.1-9.3 | **VMSA-2025-0004: Molteplici vulnerabilità in VMware ESXi (CVE-2025-22224, CVE-2025-22225, CVE-2025-22226)** | Sono state segnalate diverse vulnerabilità in VMware ESXi: vulnerabilità di overflow dell’heap VMCI (CVE-2025-22224) valutata come Critica da VMware, vulnerabilità di scrittura arbitraria in VMware ESXi (CVE-2025-22225), vulnerabilità di divulgazione di informazioni HGFS (CVE-2025-22226). Patch correttive sono fornite dal fornitore. | IaaS By VMware | 🟠 Importante | ⚠️ Si consiglia di aggiornare i vostri hypervisor. Le versioni corrette di ESXi sono disponibili al momento della validazione da parte di Cloud Temple. La Console indica gli ESXi che necessitano di aggiornamento. |
## Informazioni