VulnerabilitySANS @RISK
Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 21
NEOSEC enrichment — no mirror of the original source
> Anfang der weitergeleiteten Nachricht: > > Von: "SANS AtRisk" <consensussecurityvulnerabilityalert@email.sans.org> > Betreff: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 21 > Datum: 28. Mai 2026 um 16:02:54 MESZ > An: <be@neosec.eu> > Antwort an: "S
Source: SANS @RISK. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Linked advisories
- CVE-2018-25357Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP code t…
- CVE-2024-12802SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manag…
- CVE-2025-71210A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected instal…
- CVE-2025-71211A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected instal…
- CVE-2026-20223A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site r…
- CVE-2026-23663CVE-2026-23663
- CVE-2026-23663Microsoft Global Secure Access (GSA) Information Disclosure Vulnerability
- CVE-2026-23663Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-24207NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A successful exploit of this vulnerability mi…
- CVE-2026-2586An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send cra…
- CVE-2026-2587A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The…
- CVE-2026-26147CVE-2026-26147
- CVE-2026-26147Microsoft Azure: Mehrere Schwachstellen
- CVE-2026-26147Azure Stack HCI Information Disclosure Vulnerability
- CVE-2026-26147Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.
- CVE-2026-29518Rsync: Mehrere Schwachstellen
- CVE-2026-29518Rsync: TOCTOU-Race-Condition
- CVE-2026-29518Debian rsync: security update
- CVE-2026-29518Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write
- CVE-2026-29518rsync vulnerabilities
- CVE-2026-29518Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file wri…
- CVE-2026-29518rsync vulnerabilities
- CVE-2026-3039Debian bind9: security update
- CVE-2026-3039BIND 9 server memory exhaustion during GSS-API TKEY negotiation
- CVE-2026-3039Bind vulnerabilities
- CVE-2026-3039BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and proces…
- CVE-2026-3039Internet Systems Consortium BIND: Mehrere Schwachstellen
- CVE-2026-31986Use of Hard-coded Cryptographic Key vulnerability in Apache OFBiz.
- CVE-2026-32253Sunshine is a self-hosted game stream host for Moonlight. In versions prior to 2026.516.143833, the client-certificate authentication can be bypassed because…
- CVE-2026-33117Azure SDK for Java Security Feature Bypass Vulnerability
- CVE-2026-33117The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison …
- CVE-2026-33278Unbound: Mehrere Schwachstellen
- CVE-2026-33278NLnet Labs Unbound: Use-After-Free
- CVE-2026-33278Debian unbound: security update
- CVE-2026-33278Possible arbitrary code execution during DNSSEC validation
- CVE-2026-33278Unbound vulnerabilities
- CVE-2026-33278Unbound vulnerabilities
- CVE-2026-33278NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote c…
- CVE-2026-33642Debian kitty: security update
- CVE-2026-33642Kitty is a cross-platform GPU based terminal. In versions 0.46.2 and below, the handle_compose_command() function in kitty/graphics.c performs bounds validat…
- CVE-2026-33843CVE-2026-33843
- CVE-2026-33843Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
- CVE-2026-33843Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a…
- CVE-2026-34336Windows DWM Core Library Elevation of Privilege Vulnerability
- CVE-2026-34336Buffer over-read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- CVE-2026-34336Microsoft Windows: Heap-basierter Pufferüberlauf
- CVE-2026-34926Trend Micro Apex One — Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
- CVE-2026-34926Trend Micro Apex One: Mehrere Schwachstellen ermöglichen Privilegieneskalation und die Ausführung von Code
- CVE-2026-34926A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to…
- CVE-2026-35430CVE-2026-35430
- CVE-2026-35430Azure Privileged Identity Management (PIM) Elevation of Privilege Vulnerability
- CVE-2026-35430Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized attacker to elevate privileges over a net…
- CVE-2026-3593Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation
- CVE-2026-3593A use-after-free vulnerability exists within the DNS-over-HTTPS implementation.
- CVE-2026-3660IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow …
- CVE-2026-3660IBM Engineering Lifecycle Management: fehlerhafte Autorisierung
- CVE-2026-39821CVE-2026-39821
- CVE-2026-39821Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
- CVE-2026-39821Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
- CVE-2026-39821The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com")…
- CVE-2026-39821Golang Go-Module (Net, Image, Crypto: Mehrere Schwachstellen
- CVE-2026-39824Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows
- CVE-2026-39824Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows
- CVE-2026-39824NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum size of a NTUnicodeString (a 16-bit numb…
- CVE-2026-39830Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
- CVE-2026-39830Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
- CVE-2026-39830A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine c…
- CVE-2026-39830Golang.org/x/crypto/ssh: Verklemmung (Deadlock)
- CVE-2026-39831Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh
- CVE-2026-39831Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh
- CVE-2026-39831The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Si…
- CVE-2026-39831Golang.org/x/crypto/ssh: Sicherheitslücke
- CVE-2026-39832CVE-2026-39832
- CVE-2026-39832Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent
- CVE-2026-39832Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent
- CVE-2026-39832When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restri…
- CVE-2026-39833CVE-2026-39833
- CVE-2026-39833Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent
- CVE-2026-39833Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent
- CVE-2026-39833The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without …
- CVE-2026-39834CVE-2026-39834
- CVE-2026-39834Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh
- CVE-2026-39834Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh
- CVE-2026-39834When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loo…
- CVE-2026-40367Microsoft Word Remote Code Execution Vulnerability
- CVE-2026-40367Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-40367Microsoft: Dereferenzierung nicht vertrauenswürdiger Zeiger
- CVE-2026-40411CVE-2026-40411
- CVE-2026-40411Azure Virtual Network Gateway Remote Code Execution Vulnerability
- CVE-2026-40411Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network.
- CVE-2026-40412CVE-2026-40412
- CVE-2026-40412Azure Orbital Spatio Remote Code Execution Vulnerability
- CVE-2026-40412Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code over a network.
- CVE-2026-41054Debian haveged: security update
- CVE-2026-41054Missing exit out of permission check in haveged could lead to root exploit
- CVE-2026-41054In `src/havegecmd.c`, the `socket_handler` function performs a credential check on the abstract UNIX socket (`\0/sys/entropy/haveged`). However, while it det…
- CVE-2026-41054haveged vulnerability
- CVE-2026-41090CVE-2026-41090
- CVE-2026-41090Microsoft Copilot Tampering Vulnerability
- CVE-2026-41090Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to perform tampering…
- CVE-2026-41091Microsoft Defender — Microsoft Defender Link Following Vulnerability
- CVE-2026-41091Microsoft Defender und Malware Protection Engine: Mehrere Schwachstellen
- CVE-2026-41091Microsoft Defender Elevation of Privilege Vulnerability
- CVE-2026-41091Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.
- CVE-2026-41104Microsoft Planetary Computer Pro Information Disclosure Vulnerability
- CVE-2026-41104Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose information over a network.
- CVE-2026-41104Microsoft Planetary Computer: Deserialisierung nicht vertrauenswürdiger Daten
- CVE-2026-41292NLnet Labs Unbound: Ressourcenzuweisung ohne Begrenzung
- CVE-2026-41292Long list of incoming EDNS options degrades performance
- CVE-2026-41292NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options…
- CVE-2026-41919Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache OFBiz.
- CVE-2026-42508CVE-2026-42508
- CVE-2026-42508Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts
- CVE-2026-42508Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts
- CVE-2026-42508Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @…
- CVE-2026-42834Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability
- CVE-2026-42834Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.
- CVE-2026-42834Microsoft Windows Admin Center in Azure Portal: Folgen symbolischer Links (Link Following)
- CVE-2026-42901CVE-2026-42901
- CVE-2026-42901Microsoft Entra ID Elevation of Privilege Vulnerability
- CVE-2026-42901Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-42944NLnet Labs Unbound: numerischer Abschneidefehler
- CVE-2026-42944Heap overflow with multiple NSID, COOKIE, PADDING EDNS options
- CVE-2026-42944NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie …
- CVE-2026-42959NLnet Labs Unbound: Zugriff auf nicht initialisierten Zeiger
- CVE-2026-42959Crash during DNSSEC validation of malicious content
- CVE-2026-42959NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious …
- CVE-2026-42960NLnet Labs Unbound: Annahme nicht vertrauenswürdiger Zusatzdaten
- CVE-2026-42960Possible cache poisoning via promiscuous records for the authority section
- CVE-2026-42960NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section. Promiscuous RRSets that c…
- CVE-2026-43618Rsync: Ganzzahlüberlauf
- CVE-2026-43618Rsync < 3.4.3 Integer Overflow Information Disclosure
- CVE-2026-43618Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is not checked for over…
- CVE-2026-44159Tyler Identity Local (TID-L) uses documented, default administrative credentials. Users are not required to change the credentials before deployment. TID-L h…
- CVE-2026-44930An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an attacker to retrieve arbitrary certificates …
- CVE-2026-44930Apache CXF: LDAP-Injection
- CVE-2026-45434Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution
- CVE-2026-45434Unzureichende Authentifizierung in Apache OFBiz durch Fehler in der Passwortänderungs-Logik führt zu Remote-Code-Ausführung Dieses Problem betrifft Apache OFBiz: vor Version 24.
- CVE-2026-45495Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-45495Microsoft Edge: Path Traversal: '.../...//'
- CVE-2026-45495Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-45495Microsoft Edge: Mehrere Schwachstellen
- CVE-2026-45498Microsoft Defender — Microsoft Defender Denial of Service Vulnerability
- CVE-2026-45498Microsoft Defender Denial of Service Vulnerability
- CVE-2026-45498Microsoft Defender Denial of Service Vulnerability
- CVE-2026-45584Microsoft Malware Protection Engine: Heap-basierter Pufferüberlauf
- CVE-2026-45584Microsoft Defender Remote Code Execution Vulnerability
- CVE-2026-45584Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network.
- CVE-2026-45585Windows BitLocker Security Feature Bypass Vulnerability
- CVE-2026-45585Microsoft Windows: Befehlsinjektion
- CVE-2026-45585Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnera…
- CVE-2026-45659Microsoft SharePoint Server — Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
- CVE-2026-45659Microsoft SharePoint Server 2016 und SharePoint Server 2019: Schwachstelle ermöglicht Codeausführung
- CVE-2026-45659Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2026-45659Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- CVE-2026-46333Linux Kernel: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
- CVE-2026-46333Linux Kernel: Sicherheitslücke
- CVE-2026-46333Debian linux: security update
- CVE-2026-46333Debian linux: security update
- CVE-2026-46333ptrace: slightly saner 'get_dumpable()' logic
- CVE-2026-46333Linux kernel vulnerabilities
- CVE-2026-46333Linux kernel vulnerabilities
- CVE-2026-46333In the Linux kernel, the following vulnerability has been resolved:
- CVE-2026-46333Linux kernel vulnerabilities
- CVE-2026-46333Linux kernel vulnerabilities
- CVE-2026-46595CVE-2026-46595
- CVE-2026-46595Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh
- CVE-2026-46595Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh
- CVE-2026-46595Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key…
- CVE-2026-46624CVE-2026-46624
- CVE-2026-46624Twenty is an open source CRM. From 1.7.7 through 1.16.7, a critical Remote Code Execution (RCE) vulnerability exists in Twenty CRM via a chained SQL Injectio…
- CVE-2026-47280CVE-2026-47280
- CVE-2026-47280Azure Resource Manager Elevation of Privilege Vulnerability
- CVE-2026-47280Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-47323Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering
- CVE-2026-47323Apache Camel: fehlerhafte Behandlung von Groß-/Kleinschreibung
- CVE-2026-47783memcached: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
- CVE-2026-47783Memcached: beobachtbare Zeitabweichung (Seitenkanal)
- CVE-2026-47783In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.
- CVE-2026-47783Memcached vulnerabilities
- CVE-2026-47783OSV-Eintrag
- CVE-2026-47783In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid usernam…
- CVE-2026-47784Memcached: beobachtbare Zeitabweichung (Seitenkanal)
- CVE-2026-47784In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
- CVE-2026-47784OSV-Eintrag
- CVE-2026-47784In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_ch…
- CVE-2026-48172LiteSpeed cPanel Plugin — LiteSpeed cPanel Plugin Privilege Escalation Vulnerability
- CVE-2026-48172LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation (possibly to root), as exploited in the wild in May 2026. Detection is best done vi…
- CVE-2026-48207Deserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializer could bypass documented DeserializationPolicy validation hooks during redu…
- CVE-2026-48207Apache Fory: Deserialisierung nicht vertrauenswürdiger Daten
- CVE-2026-48686CVE-2026-48686
- CVE-2026-48686FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) decoder. The funct…
- CVE-2026-48689CVE-2026-48689
- CVE-2026-48689FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamic_binary_buffer_t class (src/dynamic_binary_buffer.…
- CVE-2026-48898Joomla: Mehrere Schwachstellen
- CVE-2026-48898bitnami joomla: unzureichende Zugriffskontrolle
- CVE-2026-48898Joomla! Core - [20260513] - Privilege escalation through com_users batch task
- CVE-2026-48898An improper access check allows privilege escalation through the com_users batch task.
- CVE-2026-48899bitnami joomla: unzureichende Zugriffskontrolle
- CVE-2026-48899Joomla! Core - [20260515] - Incorrect Access Control in sample data plugins
- CVE-2026-48899An improper access check allows privilege escalation through the com_users batch task.
- CVE-2026-48904bitnami joomla: unzureichende Zugriffskontrolle
- CVE-2026-48904Joomla! Core - [20260514] - Privilege escalation through com_users webservice endpoints
- CVE-2026-48904An improper access check allows privelege escalation through the com_users group editing webservice endpoint.
- CVE-2026-5433Honeywell Control
- CVE-2026-5433Honeywell Control Network Module (CNM) enthält eine Befehls-Injektion-Schwachstelle in der Weboberfläche.
- CVE-2026-5946Invalid handling of CLASS != IN
- CVE-2026-5946ISC BIND 9: Lesen außerhalb des zugewiesenen Speichers (Out-of-bounds Read)
- CVE-2026-5946Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`,…
- CVE-2026-5947SIG(0) validation during query flood may lead to undefined behavior
- CVE-2026-5947isc bind: Race-Condition
- CVE-2026-5947Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG(0), it…
- CVE-2026-7251Eppendorf BioFlo 320 is vulnerable to due to VNC server using a hard-coded password. If a remote attacker knows the network address of any BioFlo 320 model w…
- CVE-2026-7251Der Eppendorf BioFlo 320 ist anfällig aufgrund eines VNC-Servers mit hartkodierter Anmeldedaten.
- CVE-2026-7374Red Hat OpenShift Virtualization: Schwachstelle ermöglicht Privilegieneskalation
- CVE-2026-7374Kubevirt: Folgen symbolischer Links (Link Following)
- CVE-2026-7374A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace …
- CVE-2026-7374Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability
- CVE-2026-8495CVE-2026-8495
- CVE-2026-8495Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing.
- CVE-2026-8598An undocumented configuration export port is accessible on some models
- CVE-2026-8598Ein nicht dokumentierter Konfigurationsexport-Port ist auf einigen Modellen von ZKTeco-CCTV-Kameras zugänglich.
- CVE-2026-8602In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to…
- CVE-2026-8602ScadaBR: fehlende Authentifizierung für kritische Funktion
- CVE-2026-8603In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system.
- CVE-2026-8603scadabr: Betriebssystem-Befehlsinjektion
- CVE-2026-8605In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin.
- CVE-2026-8605scadabr: hartcodierte Zugangsdaten
- CVE-2026-8631A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software. This potential vulnerability may allow escalation of pr…
- CVE-2026-8631HP Linux Imaging and Printing Software: Heap-basierter Pufferüberlauf
- CVE-2026-8633CVE-2026-8633
- CVE-2026-8633IBM WebSphere Application Server: Mehrere Schwachstellen
- CVE-2026-8633IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Lib…
- CVE-2026-8670Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay).
- CVE-2026-8670syslink software Avantra: unzureichender Sitzungsablauf
- CVE-2026-8711NGINX JavaScript vulnerability
- CVE-2026-8711F5 NGINX JavaScript: Heap-basierter Pufferüberlauf
- CVE-2026-8711NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*…
- CVE-2026-8948Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
- CVE-2026-8948Mozilla Firefox: Sicherheitslücke
- CVE-2026-8948Same-origin policy bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.
- CVE-2026-8950Mozilla Firefox: Sicherheitslücke
- CVE-2026-8950Debian thunderbird: security update
- CVE-2026-8950Debian firefox-esr: security update
- CVE-2026-8950Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbir…
- CVE-2026-8953Mozilla Firefox: Use-After-Free
- CVE-2026-8953Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 14…
- CVE-2026-8956Mozilla Firefox: Ganzzahlüberlauf
- CVE-2026-8956Integer overflow in the Networking: JAR component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
- CVE-2026-8959Sandbox-Escape aufgrund fehlerhafter Grenzwertprüfung in der Widget: Win32-Komponente.
- CVE-2026-8959Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderb…
- CVE-2026-9082Drupal Core — Drupal Core SQL Injection Vulnerability
- CVE-2026-9082Drupal core - Highly critical - SQL injection - SA-CORE-2026-004
- CVE-2026-9082Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal Drupal core allows SQL Injection.
- CVE-2026-9384A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi o…
- CVE-2026-9384Eine Schwachstelle wurde in Totolink A8000RU 7.
- CVE-2026-9388A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi …
- CVE-2026-9388Eine Schwachstelle wurde in Totolink A8000RU 7.
- CVE-2026-9404A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi of the componen…
- CVE-2026-9404Eine Schwachstelle wurde in Totolink A8000RU 7.
- CVE-2026-9408A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. Affected by this issue is the function setStaticDhcpRules of the file /cgi-bin/cstecgi.…
- CVE-2026-9408Eine Schwachstelle wurde in Totolink A8000RU 7.
- CVE-2026-9432A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setWiFiAdvancedCfg of the file /cgi-bin/…
- CVE-2026-9432Eine Sicherheitslücke wurde in Totolink A8000RU 7.
- CVE-2026-9436A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setL2tpServerCfg of the file /cgi-bin/cstecgi.cgi of the …
- CVE-2026-9436Eine Schwachstelle wurde in Totolink A8000RU 7.
- CVE-2026-9454A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setOpenVpnCertGenerationCfg of the file /cgi-bin/cstec…
- CVE-2026-9454Eine Schwachstelle wurde in Totolink A8000RU 7.
- CVE-2026-9458A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The impacted element is the function setWanCfg of the file /cgi-bin/cstecgi.cgi of th…
- CVE-2026-9458Eine Schwachstelle wurde in Totolink A8000RU 7.
- CVE-2026-9475A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the compo…
- CVE-2026-9475Eine Schwachstelle wurde in Totolink A8000RU 7.
- CVE-2026-9478A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function setParentalRules of the file /cgi-bin/cstecgi.cgi of the com…
- CVE-2026-9478Eine Schwachstelle wurde in Totolink A8000RU 7.
- CVE-2026-9543A vulnerability has been found in Totolink N300RH 6.1c.1353_B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the compon…
- CVE-2026-9543Eine Schwachstelle wurde in Totolink N300RH 6.
- CVE-2026-9642CVE-2026-9642
- CVE-2026-9642There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access)
Affected vendors and products
- Apache Software Foundation Apache CXF
- Apache Software Foundation Apache Fory
- Apache Software Foundation Apache OFBiz
- Apache Software Foundation Apache Cxf
- Apache Software Foundation Apache Fory
- Apache Software Foundation Apache Ofbiz
- Cisco Cisco Secure Workload
- Cisco Secure Workload
- Debian Debian BIND9
- Debian Fastnetmon
- Debian Firefox-esr
- Debian Kitty
More on Fwd
Other advisories
- HighCVE-2026-77095CvFWD enthielt eine Nullzeiger-Dereferenzierung, die die Verfügbarkeit des Dienstes beeinträchtigte.
- HighCVE-2026-77094CvFWD enthielt einen Lese-/Schreibzugriff außerhalb der Grenzen, der die Verfügbarkeit des Dienstes beeinträchtigte.
- HighCVE-2026-77093CvFWD enthielt einen Ganzzahlüberlauf, der die Verfügbarkeit des Dienstes beeinträchtigte.
- Not ratedosv:CVE-2026-53338net: airoha: Add NULL check for of_reserved_mem_lookup() in airoha_qdma_init_hfwd_queues()
- Not ratedosv:GO-2026-4899Sliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted in github.com/bishopfox/sliver
- Not ratedosv:GHSA-c279-989m-238fSliver: Nil Pointer Dereference in tunnelCloseHandler causes panic when a reverse tunnel (rportfwd) close is attempted
- Not ratedosv:CVE-2026-23070Octeontx2-af: Add proper checks for fwdata
- Not ratedosv:CVE-2023-53372sctp: fix a potential overflow in sctp_ifwdtsn_skip
Other news entries
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 20VulnerabilitySANS @RISK
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 19VulnerabilitySANS @RISK
- Fwd: OUCH! World Cup Fever: Don’t Let Scammers ScoreNewsSANS OUCH!
- Fwd: OUCH! The Power of the Passphrase: Why Longer Beats SmarterNewsSANS OUCH!
ID