Sec Feed Reader

CERT/CC Vulnerability Notes

Uebersicht

Quellen-ID (source_id): certcc_vuln
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: threat_intel
Provider: feed
Sprache: de
Zielgruppe: —
Tags:
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:17 UTC	2026-10-21 10:17 UTC	0	-	-	Tue, 20 Oct 2026 18:09:44 GMT

Letzte Eintraege

85 Eintraege · 50 pro Seite · Seite 1 von 2

Veroeffentlicht	Titel	CVEs	Severity
2026-10-20 18:09	VU#645818: Xerj Console API Authentication Bypass Leads to Unauthorized Credential Minting	CVE-2026-97406	-
2026-10-14 15:11	VU#410595: Google BoringSSL Name Constraints Bypass in SAN Validation Logic	—	-
2026-10-14 15:11	VU#948176: Multiple TLS Libraries can Bypass Delegation Enforcement	CVE-2026-34073 CVE-2026-3547 CVE-2026-3833	HIGH
2026-10-14 12:39	VU#166125: Bisheng has authentication bypass vulnerabilities	CVE-2026-100156 CVE-2026-96679 CVE-2026-96681	-
2026-10-13 19:24	VU#456950: Komodo Periphery Agent Contains an OS Command Injection Vulnerability	CVE-2026-110005	-
2026-10-13 19:21	VU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration	CVE-2026-16753	-
2026-10-13 18:27	VU#573195: Go, OpenSSL, Apple, LibreSSL, pyca, wolfSSL Name-Constraint Inconsistency in RFC 5280 Implementation	CVE-2026-34073 CVE-2026-3833	MEDIUM
2026-10-13 18:14	VU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE	CVE-2026-104937	-
2026-10-12 14:52	VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1	CVE-2026-103521 CVE-2026-103522 CVE-2026-103523 +8	HIGH
2026-10-01 14:33	VU#553437: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations	CVE-2026-12855	HIGH
2026-09-28 19:36	VU#762428: Authlib library contains a signature‑verification bypass vulnerability	CVE-2026-96760	CRITICAL
2026-09-25 16:25	VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities	CVE-2026-18311 CVE-2026-18312 CVE-2026-18320	MEDIUM
2026-09-24 19:27	VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise	CVE-2026-82987 CVE-2026-82988 CVE-2026-82989	CRITICAL
2026-09-24 15:44	VU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerability	CVE-2026-75907	HIGH
2026-09-23 18:22	VU#273940: Enterprise Access Management EAM does not rotate RSA keys	CVE-2026-82356	HIGH
2026-09-23 17:41	VU#754548: Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlers	CVE-2026-86867	MEDIUM
2026-09-22 18:13	VU#738147: Vendor-signed UEFI Shell applications allow Secure Boot bypass	—	-
2026-09-17 15:02	VU#280377: Dokploy is vulnerable to OS command injection	—	-
2026-09-16 17:10	VU#369093: MLflow dspy and statsmodels flavors bypass pickle deserialization control	CVE-2026-96775 CVE-2026-96804	HIGH
2026-09-16 15:18	VU#212479: Sentry Seer vulnerability allows attacker-controlled input to be executed in a privileged environment	CVE-2026-90999	CRITICAL
2026-09-11 20:11	VU#369611: ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index	CVE-2026-84286	-
2026-09-10 17:46	VU#687587: AOMEI Backupper amwrtdrv.sys local privilege escalation vulnerability allows arbitrary writes to physical disks	CVE-2026-12780	HIGH
2026-09-08 15:05	VU#718077: UEFI Shell module embedded in SPI Flash can be used to bypass Secure Boot	CVE-2026-20293 CVE-2026-33197 CVE-2026-6485	HIGH
2026-09-08 14:42	VU#859658: Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability	CVE-2025-20701	HIGH
2026-09-08 14:23	VU#943094: ONLYOFFICE ownCloud integration plugin contains a Server-Side Request Forgery (SSRF) vulnerability	CVE-2026-84282	MEDIUM
2026-09-03 17:03	VU#889462: Casdoor authentication server is vulnerable to authorization bypass	CVE-2026-15630	CRITICAL
2026-09-01 13:35	VU#456290: Hugging Face Transformers library writes remote code to disk prior to consent check	CVE-2026-80047	HIGH
2026-08-25 16:11	VU#308749: Remote Code Execution and Arbitrary File Read Vulnerabilities in Kaltura Servers	CVE-2026-19912 CVE-2026-19913	CRITICAL
2026-08-24 14:57	VU#728712: Konami's Metal Gear Online 3 contains a heap-based buffer overflow	CVE-2026-19874	CRITICAL
2026-08-21 14:44	VU#756733: Retraction of "Calix GS7 XGS GS5239XG residential router contains missing authentication vulnerability"	CVE-2026-75501	HIGH
2026-08-19 19:28	VU#874418: RDK-B WebUI contains multiple vulnerabilities	CVE-2026-19505 CVE-2026-19506 CVE-2026-19507 +2	CRITICAL
2026-08-11 15:12	VU#431093: TCG TPM 2.0 reference code found vulnerable to information leakage and timing side-channel attacks	CVE-2026-6726 CVE-2026-6727	HIGH
2026-08-10 14:47	VU#614868: OpenCart ecommerce platform contains directory traversal vulnerability	CVE-2026-18412	CRITICAL
2026-08-07 14:15	VU#987105: The nothings stb TrueType library, up to version 1.26, contains a heap buffer overflow vulnerability	CVE-2026-18497	HIGH
2026-08-06 18:36	VU#487613: Alinto SOGo v5.12.7 vulnerable to cross-site scripting via malformed ICS calendar invitations	CVE-2026-8496	MEDIUM
2026-07-31 15:15	VU#243636: VPS.org one-click deployment templates contain multiple vulnerabilities	CVE-2026-16503 CVE-2026-16504	CRITICAL
2026-07-30 18:09	VU#281278: SGLang contains six different vulnerabilities including RCE, data exfiltration, and credential disclosure	CVE-2026-14890 CVE-2026-15969 CVE-2026-15971 +4	CRITICAL
2026-07-30 15:12	VU#790363: foreUP golf management platform's web API contains multiple vulnerabilities	CVE-2026-15657 CVE-2026-15658	HIGH
2026-07-29 17:25	VU#293714: Arbitrary File Overwrite in Develar app-builder (zipx.Unzip) via Symlink Following on macOS (APFS)	CVE-2026-13723	MEDIUM
2026-07-29 15:18	VU#305509: OPeNDAP Hyrax is vulnerable to SSRF and Credential Disclosure	CVE-2026-16637	MEDIUM
2026-07-28 18:19	VU#141367: AT&T's Arris BGW210-700 gateway contains authentication bypass vulnerability in LAN-side management interface	CVE-2026-16771	HIGH
2026-07-23 15:40	VU#492466: Logto Identity Platform has authentication and authorization failures in core protocol handling	CVE-2026-15611 CVE-2026-15612 CVE-2026-15614 +3	CRITICAL
2026-07-22 17:24	VU#847406: Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission assignment vulnerability	CVE-2026-16157	HIGH
2026-07-22 14:30	VU#360868: Local Privilege escalation vulnerability in Analog Way Picturall Quad Compact Mark II version 3.5.8	CVE-2026-14985	HIGH
2026-07-21 16:42	VU#762226: Plane contains multi-tenant authorization bypass vulnerability	CVE-2026-15342	MEDIUM
2026-07-16 18:00	VU#885548: Denial-of-service vulnerability in HTTP/2 servers via stalled flow-control conditions	CVE-2026-44909 CVE-2026-59173 CVE-2026-59762	HIGH
2026-07-16 14:43	VU#326070: SGLang contains a vulnerable pickle deserialization vulnerability through the expert-parallel subsystem	CVE-2026-14890 CVE-2026-7301 CVE-2026-7304	CRITICAL
2026-07-15 17:08	VU#529388: Privilege escalation vulnerability via unprotected IOCTL interface in Pegatron Tdelo64.sys	CVE-2026-14960 CVE-2026-14961	CRITICAL
2026-07-15 16:07	VU#725167: node-forge Signature Forgery Vulnerabilities in RSA-PKCS and ED25519 Implementations	CVE-2026-33894 CVE-2026-33895	HIGH
2026-07-10 18:19	VU#564823: GNU Wget enables SSRF via unvalidated FTP PASV IPs	CVE-2021-40491 CVE-2026-15146	MEDIUM

Alle Quellen