Endpunktsicherheit
ENDPUNKTSICHERHEIT
🟠 CVE-2026-14206: High Schwachstelle
The HT Contact Form WordPress plugin before 2.9.3 does not perform any authorization check on the endpoint that returns a...
ENDPUNKTSICHERHEIT
🔴 CVE-2026-15038: Critical Schwachstelle
The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection state and the authenticity of requests to...
ENDPUNKTSICHERHEIT
New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes
Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to...
ENDPUNKTSICHERHEIT
Real emails, hijacked payments: Two H1 2026 attack chains
Gen's H1 2026 Threat Report examines two separate attack chains. One used compromised business inboxes and browser manipulation in a...
ANWENDUNGSSICHERHEIT
🟡 CVE-2026-19266: Medium Schwachstelle
A vulnerability was determined in Kirachon context-engine up to 1.9.0. This affects the function execGitCommand of the file src/mcp/utils/gitUtils.ts of...
ANWENDUNGSSICHERHEIT
🟡 CVE-2026-19268: Medium Schwachstelle
A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts the function getUsageByDateRange of the file src/services/claude-usage.ts of...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-19263: High Schwachstelle
A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. The impacted element is an unknown function of the file...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-67620: High Schwachstelle
Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULT_DENY_LIST omits...
ENDPUNKTSICHERHEIT
Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service
A federal judge in Alexandria, Virginia, sentenced Maksim Silnikau to 16 years in prison on August 5 for creating and...
ENDPUNKTSICHERHEIT
New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch...