Anwendungssicherheit
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-75626: Critical Schwachstelle
SpiderFoot fails to HTML-escape correlation titles built from external scan data sources including server banners and metadata. Attackers can inject...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-75852: Critical Schwachstelle
ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-34884: Critical Schwachstelle
SSRF via set_skywalking_url Tool and GraphQL expression injection vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0....
ANWENDUNGSSICHERHEIT
One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025
A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple industries for...
ANWENDUNGSSICHERHEIT
Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets
Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web-based SCADA / HMI software...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-74868: High Schwachstelle
SiYuan versions before 3.7.4 contain an unthrottled brute-force vulnerability in the Publish Service Basic Auth implementation (PublishServiceTransport.RoundTrip() in kernel/server/proxy/publish.go). ...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-59910: High Luecke in Dell Objectscale
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-56686: High Luecke in Dell Objectscale
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-74802: High Schwachstelle
SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-74997: High Schwachstelle
In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk plugin is subject to remote...