SchwachstelleSANS @RISK2026-07-09 00:00 UTC
@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26
Providing a reliable, weekly summary of newly discovered attack vectors, vulnerabilities with active exploits, and explanations of how recent attacks worked
Eigenanreicherung — kein Mirror der Originalquelle
Providing a reliable, weekly summary of newly discovered attack vectors, vulnerabilities with active exploits, and explanations of how recent attacks worked
Quelle: SANS @RISK. NEOSEC Intel zeigt aus lizenzrechtlichen Gründen keine 1:1-Spiegelung. Volltext und Experten-Einordnung beim Original.
Verknüpfte Empfehlungen
- CVE-2025-23350cve.org:CVE-2025-23350
- CVE-2025-23350cvelistv5:CVE-2025-23350
- CVE-2025-23351cve.org:CVE-2025-23351
- CVE-2025-23351cvelistv5:CVE-2025-23351
- CVE-2026-10109IBM DB2: Mehrere Schwachstellen
- CVE-2026-10109cve.org:CVE-2026-10109
- CVE-2026-10109cvelistv5:CVE-2026-10109
- CVE-2026-10134cvelistv5:CVE-2026-10134
- CVE-2026-10134cve.org:CVE-2026-10134
- CVE-2026-10140cvelistv5:CVE-2026-10140
- CVE-2026-10140cve.org:CVE-2026-10140
- CVE-2026-10536cvelistv5:CVE-2026-10536
- CVE-2026-10536HTTP/2 stream-dependency tree UAF
- CVE-2026-10536HTTP/2 stream-dependency tree UAF
- CVE-2026-10536cURL: Mehrere Schwachstellen
- CVE-2026-10536cve.org:CVE-2026-10536
- CVE-2026-10539cve.org:CVE-2026-10539
- CVE-2026-10539cvelistv5:CVE-2026-10539
- CVE-2026-11564cvelistv5:CVE-2026-11564
- CVE-2026-11564Native CA trust persist
- CVE-2026-11564cve.org:CVE-2026-11564
- CVE-2026-11708cve.org:CVE-2026-11708
- CVE-2026-11708IBM WebSphere Application Server: Mehrere Schwachstellen
- CVE-2026-11708cvelistv5:CVE-2026-11708
- CVE-2026-11712cve.org:CVE-2026-11712
- CVE-2026-11712cvelistv5:CVE-2026-11712
- CVE-2026-14198cvelistv5:CVE-2026-14198
- CVE-2026-14198cve.org:CVE-2026-14198
- CVE-2026-14241cvelistv5:CVE-2026-14241
- CVE-2026-14241Mozilla Firefox: Schwachstelle ermöglicht Codeausführung
- CVE-2026-14241cve.org:CVE-2026-14241
- CVE-2026-14363MediaWiki und Extensions: Mehrere Schwachstellen
- CVE-2026-14363cvelistv5:CVE-2026-14363
- CVE-2026-14363cve.org:CVE-2026-14363
- CVE-2026-14544cve.org:CVE-2026-14544
- CVE-2026-14544cvelistv5:CVE-2026-14544
- CVE-2026-23537cve.org:CVE-2026-23537
- CVE-2026-23537cvelistv5:CVE-2026-23537
- CVE-2026-24013cvelistv5:CVE-2026-24013
- CVE-2026-24013cve.org:CVE-2026-24013
- CVE-2026-24013OSV-Eintrag
- CVE-2026-24014cvelistv5:CVE-2026-24014
- CVE-2026-24014OSV-Eintrag
- CVE-2026-24014cve.org:CVE-2026-24014
- CVE-2026-24270cve.org:CVE-2026-24270
- CVE-2026-24270cvelistv5:CVE-2026-24270
- CVE-2026-33264cve.org:CVE-2026-33264
- CVE-2026-33264Apache Airflow: Mehrere Schwachstellen
- CVE-2026-33264cvelistv5:CVE-2026-33264
- CVE-2026-33264Apache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize()
- CVE-2026-33264OSV-Eintrag
- CVE-2026-34037cve.org:CVE-2026-34037
- CVE-2026-34037cvelistv5:CVE-2026-34037
- CVE-2026-34037Coolify: Mehrere Schwachstellen
- CVE-2026-34038Coolify: Schwachstelle ermöglicht Codeausführung und Offenlegung
- CVE-2026-34038cve.org:CVE-2026-34038
- CVE-2026-34038cvelistv5:CVE-2026-34038
- CVE-2026-34047cve.org:CVE-2026-34047
- CVE-2026-34047cvelistv5:CVE-2026-34047
- CVE-2026-34048cve.org:CVE-2026-34048
- CVE-2026-34048cvelistv5:CVE-2026-34048
- CVE-2026-38968cve.org:CVE-2026-38968
- CVE-2026-38968cvelistv5:CVE-2026-38968
- CVE-2026-38968ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing.
- CVE-2026-38971cvelistv5:CVE-2026-38971
- CVE-2026-38971cve.org:CVE-2026-38971
- CVE-2026-39253cve.org:CVE-2026-39253
- CVE-2026-39253cvelistv5:CVE-2026-39253
- CVE-2026-40047cvelistv5:CVE-2026-40047
- CVE-2026-40047Apache Camel: Mehrere Schwachstellen
- CVE-2026-40047cve.org:CVE-2026-40047
- CVE-2026-40138cvelistv5:CVE-2026-40138
- CVE-2026-40138cve.org:CVE-2026-40138
- CVE-2026-40138BeyondTrust Privileged Remote Access und Remote Support: Mehrere Schwachstellen
- CVE-2026-40139cvelistv5:CVE-2026-40139
- CVE-2026-40139cve.org:CVE-2026-40139
- CVE-2026-40141cvelistv5:CVE-2026-40141
- CVE-2026-40141cve.org:CVE-2026-40141
- CVE-2026-41106Microsoft 365 Copilot: Schwachstelle ermöglicht Privilegieneskalation
- CVE-2026-41106cvelistv5:CVE-2026-41106
- CVE-2026-41106cve.org:CVE-2026-41106
- CVE-2026-41106Microsoft 365 Copilot Elevation of Privilege Vulnerability
- CVE-2026-43867cve.org:CVE-2026-43867
- CVE-2026-43867cvelistv5:CVE-2026-43867
- CVE-2026-44935Fleet: Mehrere Schwachstellen
- CVE-2026-44935Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
- CVE-2026-44935Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
- CVE-2026-44935cve.org:CVE-2026-44935
- CVE-2026-44935cvelistv5:CVE-2026-44935
- CVE-2026-44935Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer in github.com/rancher/fleet
- CVE-2026-45499cvelistv5:CVE-2026-45499
- CVE-2026-45499cve.org:CVE-2026-45499
- CVE-2026-45499Microsoft Azure und Entra: Mehrere Schwachstellen ermöglichen Privilegieneskalation
- CVE-2026-45499Azure OpenAI Elevation of Privilege Vulnerability
- CVE-2026-46454cvelistv5:CVE-2026-46454
- CVE-2026-46454cve.org:CVE-2026-46454
- CVE-2026-46455cvelistv5:CVE-2026-46455
- CVE-2026-46455cve.org:CVE-2026-46455
- CVE-2026-46456cvelistv5:CVE-2026-46456
- CVE-2026-46456cve.org:CVE-2026-46456
- CVE-2026-48203cvelistv5:CVE-2026-48203
- CVE-2026-48203cve.org:CVE-2026-48203
- CVE-2026-48204cvelistv5:CVE-2026-48204
- CVE-2026-48204cve.org:CVE-2026-48204
- CVE-2026-48205cvelistv5:CVE-2026-48205
- CVE-2026-48205cve.org:CVE-2026-48205
- CVE-2026-48276cve.org:CVE-2026-48276
- CVE-2026-48276cvelistv5:CVE-2026-48276
- CVE-2026-48276Adobe ColdFusion: Mehrere Schwachstellen
- CVE-2026-48277cvelistv5:CVE-2026-48277
- CVE-2026-48277cve.org:CVE-2026-48277
- CVE-2026-48281cvelistv5:CVE-2026-48281
- CVE-2026-48281cve.org:CVE-2026-48281
- CVE-2026-48282Adobe ColdFusion — Adobe ColdFusion Path Traversal Vulnerability
- CVE-2026-48282cvelistv5:CVE-2026-48282
- CVE-2026-48283cve.org:CVE-2026-48283
- CVE-2026-48283cvelistv5:CVE-2026-48283
- CVE-2026-48286cve.org:CVE-2026-48286
- CVE-2026-48286cvelistv5:CVE-2026-48286
- CVE-2026-48313cvelistv5:CVE-2026-48313
- CVE-2026-48313cve.org:CVE-2026-48313
- CVE-2026-48315cve.org:CVE-2026-48315
- CVE-2026-48315cvelistv5:CVE-2026-48315
- CVE-2026-48316cve.org:CVE-2026-48316
- CVE-2026-48316cvelistv5:CVE-2026-48316
- CVE-2026-50160cve.org:CVE-2026-50160
- CVE-2026-50160cvelistv5:CVE-2026-50160
- CVE-2026-50195Google Cloud Platform (GKE containerd): Mehrere Schwachstellen
- CVE-2026-50195containerd: CRI checkpoint import allows local image tag poisoning
- CVE-2026-50195containerd vulnerabilities
- CVE-2026-50195containerd vulnerabilities
- CVE-2026-50195cve.org:CVE-2026-50195
- CVE-2026-50195cvelistv5:CVE-2026-50195
- CVE-2026-50195containerd: CRI checkpoint import allows local image tag poisoning
- CVE-2026-50195containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd
- CVE-2026-50746cvelistv5:CVE-2026-50746
- CVE-2026-50746Ubiquiti UniFi: Mehrere Schwachstellen
- CVE-2026-50746cve.org:CVE-2026-50746
- CVE-2026-50747cve.org:CVE-2026-50747
- CVE-2026-50747cvelistv5:CVE-2026-50747
- CVE-2026-51947cve.org:CVE-2026-51947
- CVE-2026-51947cvelistv5:CVE-2026-51947
- CVE-2026-5268cvelistv5:CVE-2026-5268
- CVE-2026-5268cve.org:CVE-2026-5268
- CVE-2026-53492containerd CRI checkpoint restore CDI annotation smuggling
- CVE-2026-53492cve.org:CVE-2026-53492
- CVE-2026-53492cvelistv5:CVE-2026-53492
- CVE-2026-53492containerd CRI checkpoint restore CDI annotation smuggling
- CVE-2026-53492containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd
- CVE-2026-53913cvelistv5:CVE-2026-53913
- CVE-2026-53913cve.org:CVE-2026-53913
- CVE-2026-54400cve.org:CVE-2026-54400
- CVE-2026-54400cvelistv5:CVE-2026-54400
- CVE-2026-55115cve.org:CVE-2026-55115
- CVE-2026-55115cvelistv5:CVE-2026-55115
- CVE-2026-55116cvelistv5:CVE-2026-55116
- CVE-2026-55116cve.org:CVE-2026-55116
- CVE-2026-56140cvelistv5:CVE-2026-56140
- CVE-2026-56140cve.org:CVE-2026-56140
- CVE-2026-56278cvelistv5:CVE-2026-56278
- CVE-2026-56278cve.org:CVE-2026-56278
- CVE-2026-56278Flowise: Weak Default Express Session Secret
- CVE-2026-56290Joomlack Page Builder — Joomlack Page Builder Improper Access Control Vulnerability
- CVE-2026-56290cvelistv5:CVE-2026-56290
- CVE-2026-56700cve.org:CVE-2026-56700
- CVE-2026-56700cvelistv5:CVE-2026-56700
- CVE-2026-56700Grav has multiple RCE vectors: unsafe unserialize (x3), command injection in git clone, SSTI blocklist bypass
- CVE-2026-57100cvelistv5:CVE-2026-57100
- CVE-2026-57100cve.org:CVE-2026-57100
- CVE-2026-57100Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
- CVE-2026-57517cve.org:CVE-2026-57517
- CVE-2026-57517cvelistv5:CVE-2026-57517
- CVE-2026-57571cvelistv5:CVE-2026-57571
- CVE-2026-57571cve.org:CVE-2026-57571
- CVE-2026-57571Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE
- CVE-2026-57572Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args
- CVE-2026-57572cvelistv5:CVE-2026-57572
- CVE-2026-57572cve.org:CVE-2026-57572
- CVE-2026-58116cve.org:CVE-2026-58116
- CVE-2026-58116cvelistv5:CVE-2026-58116
- CVE-2026-58126cve.org:CVE-2026-58126
- CVE-2026-58126cvelistv5:CVE-2026-58126
- CVE-2026-58127cve.org:CVE-2026-58127
- CVE-2026-58127cvelistv5:CVE-2026-58127
- CVE-2026-58138cvelistv5:CVE-2026-58138
- CVE-2026-58138cve.org:CVE-2026-58138
- CVE-2026-58166cvelistv5:CVE-2026-58166
- CVE-2026-58166cve.org:CVE-2026-58166
- CVE-2026-58172cvelistv5:CVE-2026-58172
- CVE-2026-58172cve.org:CVE-2026-58172
- CVE-2026-58289Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-58289cve.org:CVE-2026-58289
- CVE-2026-58289Microsoft Edge: Mehrere Schwachstellen
- CVE-2026-58289cvelistv5:CVE-2026-58289
- CVE-2026-58449cvelistv5:CVE-2026-58449
- CVE-2026-58466cve.org:CVE-2026-58466
- CVE-2026-58466cvelistv5:CVE-2026-58466
- CVE-2026-58521cve.org:CVE-2026-58521
- CVE-2026-58521cvelistv5:CVE-2026-58521
- CVE-2026-59099cve.org:CVE-2026-59099
- CVE-2026-59099cvelistv5:CVE-2026-59099
- CVE-2026-6556cve.org:CVE-2026-6556
- CVE-2026-6556cvelistv5:CVE-2026-6556
- CVE-2026-7663cvelistv5:CVE-2026-7663
- CVE-2026-7663cve.org:CVE-2026-7663
- CVE-2026-7803cvelistv5:CVE-2026-7803
- CVE-2026-7803cve.org:CVE-2026-7803
- CVE-2026-7839cvelistv5:CVE-2026-7839
- CVE-2026-7839UltraVNC: Mehrere Schwachstellen
- CVE-2026-7839cve.org:CVE-2026-7839
- CVE-2026-7840cvelistv5:CVE-2026-7840
- CVE-2026-7840cve.org:CVE-2026-7840
- CVE-2026-7871cvelistv5:CVE-2026-7871
- CVE-2026-7871cve.org:CVE-2026-7871
- CVE-2026-7873cve.org:CVE-2026-7873
- CVE-2026-7873cvelistv5:CVE-2026-7873
- CVE-2026-7874cvelistv5:CVE-2026-7874
- CVE-2026-7874cve.org:CVE-2026-7874
- CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway — Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- CVE-2026-8452cvelistv5:CVE-2026-8452
- CVE-2026-8452Citrix Systems NetScaler ADC und Gateway: Mehrere Schwachstellen
- CVE-2026-8631A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of pr…
- CVE-2026-8631cve.org:CVE-2026-8631
- CVE-2026-8631Red Hat Enterprise Linux (openCryptoki, hplip, 389-ds-base): Mehrere Schwachstellen
- CVE-2026-8631cvelistv5:CVE-2026-8631
- CVE-2026-8631HPLIP vulnerabilities
- CVE-2026-8655cve.org:CVE-2026-8655
- CVE-2026-8655cvelistv5:CVE-2026-8655
- CVE-2026-8924trailing dot domain super cookie
- CVE-2026-8924cURL: Mehrere Schwachstellen
- CVE-2026-8924curl vulnerabilities
- CVE-2026-8924cve.org:CVE-2026-8924
- CVE-2026-8924cvelistv5:CVE-2026-8924
- CVE-2026-8924trailing dot domain super cookie
- CVE-2026-8926password leak with netrc and user in URL
- CVE-2026-8926cve.org:CVE-2026-8926
- CVE-2026-8926cvelistv5:CVE-2026-8926
- CVE-2026-8926password leak with netrc and user in URL
- CVE-2026-9181ESRI ArcGIS: Mehrere Schwachstellen
- CVE-2026-9181cve.org:CVE-2026-9181
- CVE-2026-9181cvelistv5:CVE-2026-9181
- CVE-2026-9547SSH improper host validation
- CVE-2026-9547cve.org:CVE-2026-9547
- CVE-2026-9547SSH improper host validation
- CVE-2026-9547cvelistv5:CVE-2026-9547
Mehr zu @RISK®
Weitere News-Einträge
- Schwachstellesans-atrisk-mail2026-08-27@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 33
- Schwachstellesans-atrisk-mail2026-08-20@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32
- Schwachstellesans-atrisk-mail2026-08-13@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31
- Schwachstellesans-atrisk-mail2026-08-06@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30
- Schwachstellesans-atrisk-mail2026-07-30@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 29
- Schwachstellesans-atrisk-mail2026-07-23@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 28
- Schwachstellesans-atrisk-mail2026-07-16@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27
- Schwachstellesans-atrisk-mail2026-06-25@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 25
ID