Netzwerksicherheit
NETZWERKSICHERHEIT
🟠 CVE-2026-19221: High Schwachstelle
The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of...
NETZWERKSICHERHEIT
Sherlock Holmes Was the ‚OG‘ Social Engineer
The crime solver wore disguises, spied on targets, and built intelligence networks long before modern-day tactics emerged. He has lessons...
NETZWERKSICHERHEIT
Linux Botnet Evooo1Bot Expands Mirai Capabilities Well Beyond DDoS
The botnet adds exploitation modules, credential theft, and reverse SOCKS relays to turn compromised devices into persistent attacker infrastructure....
ANWENDUNGSSICHERHEIT
🟡 CVE-2026-77769: Medium Schwachstelle
The report.list procedure in packages/trpc/src/routers/report.ts accepted a projectId and a dashboardId and returned getReportsByDashboardId(dashboardId). The enforceAccess middleware in packages/trpc...
ANWENDUNGSSICHERHEIT
🟡 CVE-2026-77768: Medium Schwachstelle
The report.get procedure in packages/trpc/src/routers/report.ts accepted only a reportId and returned getReportById(reportId) directly. The enforceAccess middleware in packages/trpc/src/trpc.ts evalua...
NETZWERKSICHERHEIT
🟠 CVE-2026-75796: High Schwachstelle
The AI Engine WordPress plugin before 3.6.1 does not verify that the requesting user is authorized to act on the...
CLOUD-SICHERHEIT
🟠 CVE-2026-77775: High Schwachstelle
Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header. _resolve_openai_upstream_base in headroom/proxy/handlers/openai.py accepts the...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-61400: High Schwachstelle
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache CloudStack's run and get diagnostics functionality...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-77776: Critical Schwachstelle
Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at several points...
NETZWERKSICHERHEIT
New CUSTODY Framework Constrains AI Agents Inside the Network
Enterprise cybersecurity expert Jake Williams joins the Dark Reading News Desk to explain why he decided to release his new...