NewsGolem.de — Security
Red Hat: Kritische Sicherheitslücke in Apache HTTP Server entdeckt
Teaser from the source
Auf der CVE-Skala hat die kritische Sicherheitslücke eine Bewertung von 9,8 von 10 Punkten erhalten. Ein Patch ist deshalb sinnvoll. ( Apache , Red Hat )
This is the RSS-feed teaser. Read the full article at the original source.
Read at Golem.de — SecurityMore on Red
Other advisories
- Not ratedCVE-2026-18742The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'data-text-sec', 'data-title', and 'title' Attributes via Custom HTML Block…
- Not ratedCVE-2026-126697Quick Page/Post Redirect Plugin: Sicherheitslücke
- Not ratedCVE-2026-126697Quick Page/Post Redirect Plugin: Sicherheitslücke
- Not ratedCVE-2026-126697The Quick Page/Post Redirect Plugin WordPress plugin before 5.2.4 was distributed with a hidden update mechanism that fetched Quick Page/Post Redirect Plugin…
- Not ratedosv:CLEANSTART-2026-TJ37903Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata
- Not ratedosv:CLEANSTART-2026-EQ83185jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments, even when those classes violate the declared type or would be ...
- Not ratedosv:CLEANSTART-2026-HR73179In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials
- Not ratedosv:CLEANSTART-2026-VT97144In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver
Other news entries
- No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software UpdateNewsSecurityWeek
- Thousands of GitHub repos hit with secret-stealing malwareNewsCSO Online
- FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’NewsSecurityWeek
- SCKit abuses ScreenConnect to deploy remote access and target technician sessionsNewsMicrosoft Threat Intelligence
- ARTEX and beyond: AI-enabled penetration testing platformsNewsCisco Talos
- In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data BreachNewsSecurityWeek
- Microsoft Struggles to Restore Email and Other Services in a Global OutageNewsSecurityWeek
- Red Hat Quay: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
ID