Endpunktsicherheit
ENDPUNKTSICHERHEIT
Why Modern SOCs Need Multi-Layered Detections
The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attackers adapted, and the back-and-forth continued. Today,...
ENDPUNKTSICHERHEIT
🔴 CVE-2026-13439: Critical Schwachstelle
The Easy Form Builder by WhiteStudio plugin for WordPress is vulnerable to Unauthenticated Privilege Escalation to Administrator in versions up...
ENDPUNKTSICHERHEIT
Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs
An Android app that can draw over other windows and write to shared storage can slip instructions to the AI...
ENDPUNKTSICHERHEIT
Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library
Cybersecurity researchers have discovered a NuGet typosquat that's unlike the typical information-stealing malware distributed via package registries: usual info-stealers: it's...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-16247: High Schwachstelle
In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup. During this process, existing permissions on %ProgramData%...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-16246: High Schwachstelle
In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-63760: High Schwachstelle
SurrealDB before 3.1.0 fails to enforce the configured recursion depth limit in the value and JSON parser when processing nested...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-63747: High Schwachstelle
SurrealDB versions before 3.1.0 contain a denial of service vulnerability in the RPC use handler that panics when db is...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-54910: High Schwachstelle
FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to version 1.4.3-beta, the `subtitlesHandler` endpoint (`GET /api/media/subtitles`) accepts two...
ENDPUNKTSICHERHEIT
🟠 CVE-2026-63756: High Schwachstelle
SurrealDB versions before 3.1.0 contain a time-of-check/time-of-use race condition in the HTTP /rpc endpoint that allows unauthenticated requests to inherit...