Netzwerksicherheit
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-14198: Critical Luecke in Fastify Fastify\/Middie
@fastify/middie versions 9.1.0 through 9.3.2 decode the encoded slash %2F inside path parameter values before matching middleware paths, while Fastify's...
NETZWERKSICHERHEIT
SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT
Unknown threat actors are leveraging the ScreenConnect remote access tool as a way to deploy and execute AsyncRAT. Kaspersky said...
NETZWERKSICHERHEIT
Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters
Argo CD, a widely used tool for deploying software to Kubernetes, has an unpatched flaw in its repo-server component that...
NETZWERKSICHERHEIT
🟠 CVE-2026-50734: High Schwachstelle
Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All. An unauthenticated network attacker...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-8655: Critical Luecke in Citrix Netscaler_Application_Delivery_Controller
Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC...
ANWENDUNGSSICHERHEIT
🔴 CVE-2026-8452: Critical Luecke in Citrix Netscaler_Application_Delivery_Controller
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is...
NETZWERKSICHERHEIT
282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study
Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access...
NETZWERKSICHERHEIT
RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS
A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, then...
ANWENDUNGSSICHERHEIT
🟠 CVE-2026-55844: High Schwachstelle
Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2025.5.0, The iOS...
NETZWERKSICHERHEIT
236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers
New findings unearthed by Infoblox show that more than 236,000 websites are using investment scam templates built using a legitimate...