SchwachstelleSANS @RISK2026-08-06 00:00 UTC
@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30
Providing a reliable, weekly summary of newly discovered attack vectors, vulnerabilities with active exploits, and explanations of how recent attacks worked
Eigenanreicherung — kein Mirror der Originalquelle
Providing a reliable, weekly summary of newly discovered attack vectors, vulnerabilities with active exploits, and explanations of how recent attacks worked
Quelle: SANS @RISK. NEOSEC Intel zeigt aus lizenzrechtlichen Gründen keine 1:1-Spiegelung. Volltext und Experten-Einordnung beim Original.
Verknüpfte Empfehlungen
- CVE-2024-12856CVE-2024-12856
- CVE-2026-11707IBM WebSphere Application Server und Application Server Liberty: Mehrere Schwachstellen
- CVE-2026-11707cve.org:CVE-2026-11707
- CVE-2026-11707cvelistv5:CVE-2026-11707
- CVE-2026-11756cve.org:CVE-2026-11756
- CVE-2026-11756cvelistv5:CVE-2026-11756
- CVE-2026-11841cve.org:CVE-2026-11841
- CVE-2026-11841cvelistv5:CVE-2026-11841
- CVE-2026-12118cvelistv5:CVE-2026-12118
- CVE-2026-12118cve.org:CVE-2026-12118
- CVE-2026-12940IBM Langflow Desktop: Mehrere Schwachstellen
- CVE-2026-12940cve.org:CVE-2026-12940
- CVE-2026-12940cvelistv5:CVE-2026-12940
- CVE-2026-12943IBM Power Hardware Management Console: Schwachstelle ermöglicht Codeausführung
- CVE-2026-12943cve.org:CVE-2026-12943
- CVE-2026-12943cvelistv5:CVE-2026-12943
- CVE-2026-12946cve.org:CVE-2026-12946
- CVE-2026-12946cvelistv5:CVE-2026-12946
- CVE-2026-12946IBM Langflow Desktop: Schwachstelle ermöglicht Codeausführung
- CVE-2026-13435cvelistv5:CVE-2026-13435
- CVE-2026-13435cve.org:CVE-2026-13435
- CVE-2026-14446cve.org:CVE-2026-14446
- CVE-2026-14446cvelistv5:CVE-2026-14446
- CVE-2026-14446IBM WebSphere Application Server und Application Server Liberty: Mehrere Schwachstellen
- CVE-2026-14512cve.org:CVE-2026-14512
- CVE-2026-14512cvelistv5:CVE-2026-14512
- CVE-2026-14529cve.org:CVE-2026-14529
- CVE-2026-14529cvelistv5:CVE-2026-14529
- CVE-2026-14958cve.org:CVE-2026-14958
- CVE-2026-14958cvelistv5:CVE-2026-14958
- CVE-2026-14959cve.org:CVE-2026-14959
- CVE-2026-14959cvelistv5:CVE-2026-14959
- CVE-2026-14973cve.org:CVE-2026-14973
- CVE-2026-14973cvelistv5:CVE-2026-14973
- CVE-2026-15435IBM App Connect Enterprise: Mehrere Schwachstellen
- CVE-2026-15435cve.org:CVE-2026-15435
- CVE-2026-15435cvelistv5:CVE-2026-15435
- CVE-2026-15969cve.org:CVE-2026-15969
- CVE-2026-15969cvelistv5:CVE-2026-15969
- CVE-2026-15971cve.org:CVE-2026-15971
- CVE-2026-15971cvelistv5:CVE-2026-15971
- CVE-2026-15976cve.org:CVE-2026-15976
- CVE-2026-15976cvelistv5:CVE-2026-15976
- CVE-2026-16498cve.org:CVE-2026-16498
- CVE-2026-16498cvelistv5:CVE-2026-16498
- CVE-2026-16498Hashicorp Terraform MCP Server: Mehrere Schwachstellen
- CVE-2026-16503cvelistv5:CVE-2026-16503
- CVE-2026-16503cve.org:CVE-2026-16503
- CVE-2026-16504cvelistv5:CVE-2026-16504
- CVE-2026-16504cve.org:CVE-2026-16504
- CVE-2026-16812Arista VeloCloud Orchestrator — Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
- CVE-2026-16812cvelistv5:CVE-2026-16812
- CVE-2026-17349cvelistv5:CVE-2026-17349
- CVE-2026-17349pgAdmin: Mehrere Schwachstellen
- CVE-2026-17349cve.org:CVE-2026-17349
- CVE-2026-17351cve.org:CVE-2026-17351
- CVE-2026-17351cvelistv5:CVE-2026-17351
- CVE-2026-17561cve.org:CVE-2026-17561
- CVE-2026-17561cvelistv5:CVE-2026-17561
- CVE-2026-17566cve.org:CVE-2026-17566
- CVE-2026-17566cvelistv5:CVE-2026-17566
- CVE-2026-18108cve.org:CVE-2026-18108
- CVE-2026-18108cvelistv5:CVE-2026-18108
- CVE-2026-18245cve.org:CVE-2026-18245
- CVE-2026-18248cve.org:CVE-2026-18248
- CVE-2026-18248cvelistv5:CVE-2026-18248
- CVE-2026-18452cve.org:CVE-2026-18452
- CVE-2026-18452cvelistv5:CVE-2026-18452
- CVE-2026-18556N-able N-central — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
- CVE-2026-18556cvelistv5:CVE-2026-18556
- CVE-2026-18556N-able N-Central: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
- CVE-2026-18577N-able N-central — N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
- CVE-2026-18577cvelistv5:CVE-2026-18577
- CVE-2026-18588cve.org:CVE-2026-18588
- CVE-2026-18588cvelistv5:CVE-2026-18588
- CVE-2026-18589cve.org:CVE-2026-18589
- CVE-2026-18589cvelistv5:CVE-2026-18589
- CVE-2026-18601cve.org:CVE-2026-18601
- CVE-2026-18601cvelistv5:CVE-2026-18601
- CVE-2026-18602cve.org:CVE-2026-18602
- CVE-2026-18602cvelistv5:CVE-2026-18602
- CVE-2026-18612cve.org:CVE-2026-18612
- CVE-2026-18612cvelistv5:CVE-2026-18612
- CVE-2026-18616cve.org:CVE-2026-18616
- CVE-2026-18616cvelistv5:CVE-2026-18616
- CVE-2026-18667cve.org:CVE-2026-18667
- CVE-2026-18667cvelistv5:CVE-2026-18667
- CVE-2026-18684cve.org:CVE-2026-18684
- CVE-2026-18684cvelistv5:CVE-2026-18684
- CVE-2026-18685cvelistv5:CVE-2026-18685
- CVE-2026-18685cve.org:CVE-2026-18685
- CVE-2026-18686cve.org:CVE-2026-18686
- CVE-2026-20316Cisco Secure Firewall Management Center (FMC) — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability
- CVE-2026-20316cvelistv5:CVE-2026-20316
- CVE-2026-20316Cisco Secure Firewall Management Center: Schwachstelle ermöglicht Offenlegung von Informationen
- CVE-2026-2346cve.org:CVE-2026-2346
- CVE-2026-2346cvelistv5:CVE-2026-2346
- CVE-2026-28323cve.org:CVE-2026-28323
- CVE-2026-28323cvelistv5:CVE-2026-28323
- CVE-2026-28323SolarWinds Web Help Desk: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
- CVE-2026-28812cve.org:CVE-2026-28812
- CVE-2026-28812cvelistv5:CVE-2026-28812
- CVE-2026-33267cve.org:CVE-2026-33267
- CVE-2026-33267cvelistv5:CVE-2026-33267
- CVE-2026-33267Apache Traffic Server: Mehrere Schwachstellen
- CVE-2026-38447cve.org:CVE-2026-38447
- CVE-2026-38447cvelistv5:CVE-2026-38447
- CVE-2026-38708cve.org:CVE-2026-38708
- CVE-2026-38708cvelistv5:CVE-2026-38708
- CVE-2026-38709cve.org:CVE-2026-38709
- CVE-2026-38709cvelistv5:CVE-2026-38709
- CVE-2026-38711cve.org:CVE-2026-38711
- CVE-2026-38711cvelistv5:CVE-2026-38711
- CVE-2026-38713cve.org:CVE-2026-38713
- CVE-2026-38713cvelistv5:CVE-2026-38713
- CVE-2026-39932cve.org:CVE-2026-39932
- CVE-2026-39932cvelistv5:CVE-2026-39932
- CVE-2026-41452cvelistv5:CVE-2026-41452
- CVE-2026-41452cve.org:CVE-2026-41452
- CVE-2026-41920cve.org:CVE-2026-41920
- CVE-2026-41920cvelistv5:CVE-2026-41920
- CVE-2026-42530cvelistv5:CVE-2026-42530
- CVE-2026-42530cve.org:CVE-2026-42530
- CVE-2026-42530NGINX und NGINX Plus: Mehrere Schwachstellen
- CVE-2026-42530NGINX Open-Source ngx_http_v3_module vulnerability
- CVE-2026-42530NGINX Open-Source ngx_http_v3_module vulnerability
- CVE-2026-42533cvelistv5:CVE-2026-42533
- CVE-2026-42533NGINX NGINX Plus: Mehrere Schwachstellen
- CVE-2026-42533nginx regression
- CVE-2026-42533NGINX Map directive and Regex matching vulnerability
- CVE-2026-42533NGINX Map directive and Regex matching vulnerability
- CVE-2026-42533cve.org:CVE-2026-42533
- CVE-2026-42533NGINX Map directive and Regex matching vulnerability
- CVE-2026-42533nginx vulnerabilities
- CVE-2026-44090cvelistv5:CVE-2026-44090
- CVE-2026-44090cve.org:CVE-2026-44090
- CVE-2026-44091cve.org:CVE-2026-44091
- CVE-2026-44091cvelistv5:CVE-2026-44091
- CVE-2026-44092cvelistv5:CVE-2026-44092
- CVE-2026-44092cve.org:CVE-2026-44092
- CVE-2026-47876cve.org:CVE-2026-47876
- CVE-2026-47876cvelistv5:CVE-2026-47876
- CVE-2026-47876VMware Produkte: Mehrere Schwachstellen
- CVE-2026-48031Go Restful API Boilerplate: Hardcoded JWT Secret "random" Allows Token Forgery
- CVE-2026-48031Go Restful API Boilerplate: Hardcoded JWT Secret "random" Allows Token Forgery in github.com/dhax/go-base
- CVE-2026-48031cve.org:CVE-2026-48031
- CVE-2026-48031cvelistv5:CVE-2026-48031
- CVE-2026-48317cve.org:CVE-2026-48317
- CVE-2026-48317cvelistv5:CVE-2026-48317
- CVE-2026-48323cve.org:CVE-2026-48323
- CVE-2026-48323cvelistv5:CVE-2026-48323
- CVE-2026-48326cve.org:CVE-2026-48326
- CVE-2026-48326cvelistv5:CVE-2026-48326
- CVE-2026-48330cve.org:CVE-2026-48330
- CVE-2026-48330cvelistv5:CVE-2026-48330
- CVE-2026-48331cve.org:CVE-2026-48331
- CVE-2026-48331cvelistv5:CVE-2026-48331
- CVE-2026-48333cve.org:CVE-2026-48333
- CVE-2026-48333cvelistv5:CVE-2026-48333
- CVE-2026-48449cve.org:CVE-2026-48449
- CVE-2026-48449cvelistv5:CVE-2026-48449
- CVE-2026-50493cve.org:CVE-2026-50493
- CVE-2026-50493cvelistv5:CVE-2026-50493
- CVE-2026-50493DirectX Graphics Kernel Elevation of Privilege Vulnerability
- CVE-2026-50493Microsoft Windows Produkte: Mehrere Schwachstellen
- CVE-2026-51785cve.org:CVE-2026-51785
- CVE-2026-51785cvelistv5:CVE-2026-51785
- CVE-2026-52134cve.org:CVE-2026-52134
- CVE-2026-52134cvelistv5:CVE-2026-52134
- CVE-2026-52680cve.org:CVE-2026-52680
- CVE-2026-52680cvelistv5:CVE-2026-52680
- CVE-2026-52855cve.org:CVE-2026-52855
- CVE-2026-52855Wings exposes node configuration secrets through egg configuration-file templating
- CVE-2026-52855cvelistv5:CVE-2026-52855
- CVE-2026-53384cve.org:CVE-2026-53384
- CVE-2026-53384cvelistv5:CVE-2026-53384
- CVE-2026-53384Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
- CVE-2026-53384serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails
- CVE-2026-54128cve.org:CVE-2026-54128
- CVE-2026-54128cvelistv5:CVE-2026-54128
- CVE-2026-54128Windows DHCP Client Remote Code Execution Vulnerability
- CVE-2026-54680cvelistv5:CVE-2026-54680
- CVE-2026-54680cve.org:CVE-2026-54680
- CVE-2026-54680Logging operator has Fluentd configuration injection that allows remote code execution
- CVE-2026-54725vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API
- CVE-2026-54725cve.org:CVE-2026-54725
- CVE-2026-54725cvelistv5:CVE-2026-54725
- CVE-2026-55129cve.org:CVE-2026-55129
- CVE-2026-55129cvelistv5:CVE-2026-55129
- CVE-2026-55129Microsoft Office Remote Code Execution Vulnerability
- CVE-2026-55129Microsoft Office Produkte: Mehrere Schwachstellen
- CVE-2026-56197cve.org:CVE-2026-56197
- CVE-2026-56197cvelistv5:CVE-2026-56197
- CVE-2026-56197Windows Admin Center (WAC) Remote Code Execution Vulnerability
- CVE-2026-57834cve.org:CVE-2026-57834
- CVE-2026-57834cvelistv5:CVE-2026-57834
- CVE-2026-58046cve.org:CVE-2026-58046
- CVE-2026-58046cvelistv5:CVE-2026-58046
- CVE-2026-58150cve.org:CVE-2026-58150
- CVE-2026-58150cvelistv5:CVE-2026-58150
- CVE-2026-58155cve.org:CVE-2026-58155
- CVE-2026-58155cvelistv5:CVE-2026-58155
- CVE-2026-58162cve.org:CVE-2026-58162
- CVE-2026-58162cvelistv5:CVE-2026-58162
- CVE-2026-59243Apache Airflow FAB provider: Schwachstelle ermöglicht Erlangen von Administratorrechten
- CVE-2026-59243cve.org:CVE-2026-59243
- CVE-2026-59243cvelistv5:CVE-2026-59243
- CVE-2026-59309cve.org:CVE-2026-59309
- CVE-2026-59309cvelistv5:CVE-2026-59309
- CVE-2026-59310Broadcom VMware vCenter — Broadcom VMware vCenter Path Traversal Vulnerability
- CVE-2026-59310cvelistv5:CVE-2026-59310
- CVE-2026-60112cvelistv5:CVE-2026-60112
- CVE-2026-60112cve.org:CVE-2026-60112
- CVE-2026-60113cve.org:CVE-2026-60113
- CVE-2026-60113cvelistv5:CVE-2026-60113
- CVE-2026-62870Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-62870cve.org:CVE-2026-62870
- CVE-2026-62870cvelistv5:CVE-2026-62870
- CVE-2026-62870Microsoft Excel (2016), Office (2019, 2021 und 2024) und 365 Apps: Schwachstelle ermöglicht Codeausführung
- CVE-2026-63221cve.org:CVE-2026-63221
- CVE-2026-63221cvelistv5:CVE-2026-63221
- CVE-2026-63223cve.org:CVE-2026-63223
- CVE-2026-63223cvelistv5:CVE-2026-63223
- CVE-2026-64827cve.org:CVE-2026-64827
- CVE-2026-64827cvelistv5:CVE-2026-64827
- CVE-2026-65321cve.org:CVE-2026-65321
- CVE-2026-65321cvelistv5:CVE-2026-65321
- CVE-2026-65802Microsoft Edge for Android Information Disclosure Vulnerability
- CVE-2026-65802cve.org:CVE-2026-65802
- CVE-2026-65802cvelistv5:CVE-2026-65802
- CVE-2026-65802Microsoft Edge: Mehrere Schwachstellen
- CVE-2026-66033cve.org:CVE-2026-66033
- CVE-2026-66033cvelistv5:CVE-2026-66033
- CVE-2026-66033libssh2: Mehrere Schwachstellen
- CVE-2026-66033libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation
- CVE-2026-66034cve.org:CVE-2026-66034
- CVE-2026-66034cvelistv5:CVE-2026-66034
- CVE-2026-66034libssh2 Heap Out-of-Bounds Read via publickey subsystem
- CVE-2026-66035cve.org:CVE-2026-66035
- CVE-2026-66035libssh2 Heap Buffer Overflow via ETM Cipher Negotiation
- CVE-2026-66035cvelistv5:CVE-2026-66035
- CVE-2026-66310Microsoft Edge for Android Information Disclosure Vulnerability
- CVE-2026-66310cve.org:CVE-2026-66310
- CVE-2026-66310cvelistv5:CVE-2026-66310
- CVE-2026-66315Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-66315cve.org:CVE-2026-66315
- CVE-2026-66315cvelistv5:CVE-2026-66315
- CVE-2026-66318Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- CVE-2026-66318cve.org:CVE-2026-66318
- CVE-2026-66318cvelistv5:CVE-2026-66318
- CVE-2026-66321Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-66321cve.org:CVE-2026-66321
- CVE-2026-66321cvelistv5:CVE-2026-66321
- CVE-2026-66322Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2026-66322cve.org:CVE-2026-66322
- CVE-2026-66322cvelistv5:CVE-2026-66322
- CVE-2026-66402cvelistv5:CVE-2026-66402
- CVE-2026-66402cve.org:CVE-2026-66402
- CVE-2026-66418cve.org:CVE-2026-66418
- CVE-2026-66418cvelistv5:CVE-2026-66418
- CVE-2026-66421cve.org:CVE-2026-66421
- CVE-2026-66421cvelistv5:CVE-2026-66421
- CVE-2026-66713cve.org:CVE-2026-66713
- CVE-2026-66713Apache Axis2: Schwachstelle ermöglicht Codeausführung
- CVE-2026-66713cvelistv5:CVE-2026-66713
- CVE-2026-66803cve.org:CVE-2026-66803
- CVE-2026-66803Azure Cosmos DB Remote Code Execution Vulnerability
- CVE-2026-66803cvelistv5:CVE-2026-66803
- CVE-2026-66803Microsoft Azure Cosmos DB: Schwachstelle ermöglicht Codeausführung
- CVE-2026-67289cvelistv5:CVE-2026-67289
- CVE-2026-67289cve.org:CVE-2026-67289
- CVE-2026-67324GitPython unsafe clone option gate bypass through joined short options
- CVE-2026-67324cve.org:CVE-2026-67324
- CVE-2026-67324cvelistv5:CVE-2026-67324
- CVE-2026-67330cve.org:CVE-2026-67330
- CVE-2026-67330cvelistv5:CVE-2026-67330
- CVE-2026-67340cve.org:CVE-2026-67340
- CVE-2026-67340cvelistv5:CVE-2026-67340
- CVE-2026-67340ArcadeDB: Trigger scripts run with java.lang.* allowed, enabling OS command execution (RCE)
- CVE-2026-67341cve.org:CVE-2026-67341
- CVE-2026-67341cvelistv5:CVE-2026-67341
- CVE-2026-67341ArcadeDB: Scripting authorization gate (GHSA-48qw-824m-86pr) bypassed via SQL DEFINE FUNCTION ... LANGUAGE js
- CVE-2026-67822cve.org:CVE-2026-67822
- CVE-2026-67822cvelistv5:CVE-2026-67822
- CVE-2026-68502cve.org:CVE-2026-68502
- CVE-2026-68502cvelistv5:CVE-2026-68502
- CVE-2026-68503cve.org:CVE-2026-68503
- CVE-2026-68503cvelistv5:CVE-2026-68503
- CVE-2026-68579cve.org:CVE-2026-68579
- CVE-2026-68579cvelistv5:CVE-2026-68579
- CVE-2026-68579FreeRDP: Schwachstelle ermöglicht Codeausführung
- CVE-2026-68770cve.org:CVE-2026-68770
- CVE-2026-68770cvelistv5:CVE-2026-68770
- CVE-2026-68771cve.org:CVE-2026-68771
- CVE-2026-68771cvelistv5:CVE-2026-68771
- CVE-2026-69083cve.org:CVE-2026-69083
- CVE-2026-69083cvelistv5:CVE-2026-69083
- CVE-2026-69084cve.org:CVE-2026-69084
- CVE-2026-69084cvelistv5:CVE-2026-69084
- CVE-2026-69085cve.org:CVE-2026-69085
- CVE-2026-69085cvelistv5:CVE-2026-69085
- CVE-2026-69240cvelistv5:CVE-2026-69240
- CVE-2026-69240Sequelize: SQL Injection (Oracle DB)
- CVE-2026-69240cve.org:CVE-2026-69240
- CVE-2026-9390cve.org:CVE-2026-9390
- CVE-2026-9390cvelistv5:CVE-2026-9390
- CVE-2026-9487cve.org:CVE-2026-9487
- CVE-2026-9487cvelistv5:CVE-2026-9487
Mehr zu @RISK®
Weitere News-Einträge
- Schwachstellesans-atrisk-mail2026-08-27@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 33
- Schwachstellesans-atrisk-mail2026-08-20@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32
- Schwachstellesans-atrisk-mail2026-08-13@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31
- Schwachstellesans-atrisk-mail2026-07-30@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 29
- Schwachstellesans-atrisk-mail2026-07-23@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 28
- Schwachstellesans-atrisk-mail2026-07-16@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27
- Schwachstellesans-atrisk-mail2026-07-09@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26
- Schwachstellesans-atrisk-mail2026-06-25@RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 25
ID