Netzwerksicherheit
🟠 CVE-2026-45082: High Schwachstelle
Karakeep is a elf-hostable bookmark-everything app. A Server-Side Request Forgery (SSRF) protection bypass vulnerability was identified in versions prior to...
🟠 CVE-2026-48692: High Luecke in Pavel-Odintsov Fastnetmon
FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentication mechanism. The server is...
🟠 CVE-2026-48132: High Schwachstelle
The Security Gateway does not correctly validate a length value in certain IKE packets when NAT-T is used (4500/UDP). As...
🟠 CVE-2026-48131: High Schwachstelle
The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage...
🟠 CVE-2026-46368: High Schwachstelle
luci-app-https-dns-proxy through 2025.12.29-5 — an optional LuCI web UI add-on for the https-dns-proxy package, distributed through the OpenWrt community packages...
🔴 CVE-2026-48687: Critical Luecke in Pavel-Odintsov Fastnetmon
FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin. The _log() function...
🔴 CVE-2026-48686: Critical Luecke in Pavel-Odintsov Fastnetmon
FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) decoder. The...
Microsoft Defender can now automatically isolate hacked endpoints
Microsoft is testing a new Defender for Endpoint capability that will automatically isolate compromised endpoints to thwart attackers' attempts to...
NETZWERKSICHERHEIT
[THN Webinar] New AI DDoS Attacks Are Smarter. Learn How to Fight Back
Every single day, hackers are finding new ways to crash websites and steal data. But right now, something has changed....
🟠 CVE-2018-25368: High Schwachstelle
Nord VPN 6.14.31 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting an...