Anwendungssicherheit
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-59681: High Schwachstelle
A OS command injection vulnerability in yast2-auth-client allows an attacker who controls Active Directory configuration values to execute arbitrary commands...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-84200: Critical Schwachstelle
Kyverno versions v1.9.0 through v1.12.7 contain a policy exception handling flaw. When a policy in enforce mode is combined with...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-18808: Critical Schwachstelle
Improper Control of Generation of Code ('Code Injection') vulnerability in Klemsan Electrical Electronics Inc. KIO (Klemsan Internet Objects) allows Code...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-18210: Critical Schwachstelle
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in TRtek Technological Products Computer Software Hardware...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-51744: Critical Schwachstelle
Incorrect access control in the recv_mesh_info_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to force mesh configuration synchronization from...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-18765: Critical Schwachstelle
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Teracity Software Technologies Inc. E-OSB allows...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-83772: Critical Schwachstelle
A vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function c_set_reports_decode...
ANWENDUNGSSICHERHEIT
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote...
ANWENDUNGSSICHERHEIT
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Forescout Research - Vedere Labs said it used Anthropic's Claude to port a working pre-authentication remote code execution (RCE) exploit...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-71257: High Luecke in Apache Wicket
Apache Wicket enforces the upload limits configured on a form or upload field while parsing a multipart request with Apache...