Anwendungssicherheit

ANWENDUNGSSICHERHEIT

🟠 CVE-2026-75092: High Schwachstelle

A privilege escalation flaw was found in the scan_mysql actor of leapp-upgrade-el9toel10 (provided by leapp-repository). During RHEL 9 to RHEL...

17. Sep. 2026 Keine Kommentare

ANWENDUNGSSICHERHEIT

🟠 CVE-2026-91004: High Schwachstelle

A vulnerability has been found in SourceCodester Online Faculty Clearance System 1.0. The impacted element is an unknown function of...

17. Sep. 2026 Keine Kommentare

ANWENDUNGSSICHERHEIT

🟠 CVE-2026-75983: High Schwachstelle

The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all...

17. Sep. 2026 Keine Kommentare

ANWENDUNGSSICHERHEIT

🟠 CVE-2026-57134: High Schwachstelle

PraisonAI is a multi-agent teams system. From 1.5.1 until 1.7.2, MCPSecurity.evaluatePolicy() in src/praisonai-ts/src/mcp/security.ts invokes the configured credential validator only when...

17. Sep. 2026 Keine Kommentare

ANWENDUNGSSICHERHEIT

🟠 CVE-2026-57112: High Schwachstelle

PraisonAI is a multi-agent teams system. From praisonaiagents 0.6.0 until 1.6.59 and PraisonAI 3.10.0 until 4.6.59, ToolsMCPServer.run_sse() in src/praisonai-agents/praisonaiagents/mcp/mcp_server.py m...

17. Sep. 2026 Keine Kommentare

ANWENDUNGSSICHERHEIT

🟠 CVE-2026-1758: High Schwachstelle

Session fixation vulnerability in Secomea GateManager (webserver module) allows Session Fixation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Version...

17. Sep. 2026 Keine Kommentare

ANWENDUNGSSICHERHEIT

🟠 CVE-2026-91924: High Schwachstelle

pgweb through 0.17.0 leaves the POST /api/connect endpoint unguarded when connect-backend authorization is configured, allowing attackers to supply arbitrary database...

17. Sep. 2026 Keine Kommentare

ANWENDUNGSSICHERHEIT

🟠 CVE-2026-45048: High Schwachstelle

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not...

17. Sep. 2026 Keine Kommentare

ANWENDUNGSSICHERHEIT

🟠 CVE-2026-57137: High Schwachstelle

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, createAgentLoop() in src/praisonai-ts/src/ai/agent-loop.ts passes executable tools to generateText() before invoking...

17. Sep. 2026 Keine Kommentare

ANWENDUNGSSICHERHEIT

🟠 CVE-2026-77853: High Schwachstelle

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4. A...

17. Sep. 2026 Keine Kommentare