<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="/rss-style.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:media="http://search.yahoo.com/mrss/" xmlns:dc="http://purl.org/dc/elements/1.1/">
<channel>
<title><![CDATA[Team IT Security - 📰 Alle Kategorien]]></title>
<link><![CDATA[https://tsecurity.de/export/rss/alle-kategorien.xml?q=2025+posts+from+product%2F]]></link>
<description><![CDATA[Das Gesamte Cyber Threat Intelligence Feed-Archiv von TSecurity.de. Alle Nachrichten, Sicherheitsmeldungen, Videos, Downloads und Analysen in einer zentralen Übersicht.]]></description>
<language>de-DE</language>
<lastBuildDate>Tue, 28 Jul 2026 22:41:44 +0200</lastBuildDate>
<pubDate>Tue, 28 Jul 2026 22:41:44 +0200</pubDate>
<ttl>15</ttl>
<copyright>2026 Team IT Security</copyright>
<managingEditor>lakandor@tsecurity.de (Horus Sirius)</managingEditor>
<webMaster>lakandor@tsecurity.de (Horus Sirius)</webMaster>
<category>IT Security</category>
<category>Cybersecurity</category>
<category>Nachrichten</category>
<generator>Team IT Security RSS Generator v2.0</generator>
<image>
<url>https://tsecurity.de/favicon.ico</url>
<title><![CDATA[Team IT Security - 📰 Alle Kategorien]]></title>
<link><![CDATA[https://tsecurity.de/export/rss/alle-kategorien.xml?q=2025+posts+from+product%2F]]></link>
</image>
<atom:link href="https://tsecurity.de/export/rss/it-security.xml?q=2025+posts+from+product%2F" rel="self" type="application/rss+xml" />
<item>
<title><![CDATA[CVE-2026-64390 | Linux Kernel up to 7.1.3 Ksmbd SMB2_LOCK conn race condition (Nessus ID 329970)]]></title>
<description><![CDATA[A vulnerability marked as very critical has been reported in Linux Kernel up to 7.1.3. This impacts the function SMB2_LOCK of the component Ksmbd. Performing a manipulation of the argument conn results in race condition.

This vulnerability is known as CVE-2026-64390. Remote exploitation of the a...]]></description>
<link>https://tsecurity.de/de/3695674/sicherheitsluecken/cve-2026-64390-linux-kernel-up-to-713-ksmbd-smb2lock-conn-race-condition-nessus-id-329970/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695674/sicherheitsluecken/cve-2026-64390-linux-kernel-up-to-713-ksmbd-smb2lock-conn-race-condition-nessus-id-329970/</guid>
<pubDate>Sun, 26 Jul 2026 15:20:42 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">very critical</a> has been reported in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. This impacts the function <code>SMB2_LOCK</code> of the component <em>Ksmbd</em>. Performing a manipulation of the argument <em>conn</em> results in race condition.

This vulnerability is known as <a href="https://vuldb.com/cve/CVE-2026-64390">CVE-2026-64390</a>. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64439 | Linux Kernel up to 6.18.38/7.1.3 Crypto rfc3961_simplified.c use after free (Nessus ID 329965)]]></title>
<description><![CDATA[A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.38/7.1.3. This issue affects the function krb5_aead_encrypt/krb5_aead_decrypt/rfc8009_encrypt/rfc8009_decrypt of the file rfc3961_simplified.c of the component Crypto. This manipulation causes use after free.

Th...]]></description>
<link>https://tsecurity.de/de/3695672/sicherheitsluecken/cve-2026-64439-linux-kernel-up-to-61838713-crypto-rfc3961simplifiedc-use-after-free-nessus-id-329965/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695672/sicherheitsluecken/cve-2026-64439-linux-kernel-up-to-61838713-crypto-rfc3961simplifiedc-use-after-free-nessus-id-329965/</guid>
<pubDate>Sun, 26 Jul 2026 15:20:41 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">very critical</a> has been reported in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.18.38/7.1.3</a>. This issue affects the function <code>krb5_aead_encrypt/krb5_aead_decrypt/rfc8009_encrypt/rfc8009_decrypt</code> of the file <em>rfc3961_simplified.c</em> of the component <em>Crypto</em>. This manipulation causes use after free.

This vulnerability appears as <a href="https://vuldb.com/cve/CVE-2026-64439">CVE-2026-64439</a>. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64263 | Linux Kernel up to 6.18.38/7.1.3 fuse-uring fuse_uring_cancel null pointer dereference (Nessus ID 329967)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 6.18.38/7.1.3. It has been classified as critical. This vulnerability affects the function fuse_uring_cancel of the component fuse-uring. The manipulation leads to null pointer dereference.

This vulnerability is referenced as CVE-2026-64263. Remote...]]></description>
<link>https://tsecurity.de/de/3695673/sicherheitsluecken/cve-2026-64263-linux-kernel-up-to-61838713-fuse-uring-fuseuringcancel-null-pointer-dereference-nessus-id-329967/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695673/sicherheitsluecken/cve-2026-64263-linux-kernel-up-to-61838713-fuse-uring-fuseuringcancel-null-pointer-dereference-nessus-id-329967/</guid>
<pubDate>Sun, 26 Jul 2026 15:20:41 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.18.38/7.1.3</a>. It has been classified as <a href="https://vuldb.com/kb/risk">critical</a>. This vulnerability affects the function <code>fuse_uring_cancel</code> of the component <em>fuse-uring</em>. The manipulation leads to null pointer dereference.

This vulnerability is referenced as <a href="https://vuldb.com/cve/CVE-2026-64263">CVE-2026-64263</a>. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64369 | Linux Kernel up to 6.12.96/6.18.38/7.1.3 s390 load_unaligned_zeropad infinite loop (Nessus ID 329966)]]></title>
<description><![CDATA[A vulnerability labeled as critical has been found in Linux Kernel up to 6.12.96/6.18.38/7.1.3. Affected is the function load_unaligned_zeropad of the component s390. Such manipulation leads to infinite loop.

This vulnerability is uniquely identified as CVE-2026-64369. The attack can be launched...]]></description>
<link>https://tsecurity.de/de/3695671/sicherheitsluecken/cve-2026-64369-linux-kernel-up-to-6129661838713-s390-loadunalignedzeropad-infinite-loop-nessus-id-329966/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695671/sicherheitsluecken/cve-2026-64369-linux-kernel-up-to-6129661838713-s390-loadunalignedzeropad-infinite-loop-nessus-id-329966/</guid>
<pubDate>Sun, 26 Jul 2026 15:20:40 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability labeled as <a href="https://vuldb.com/kb/risk">critical</a> has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.12.96/6.18.38/7.1.3</a>. Affected is the function <code>load_unaligned_zeropad</code> of the component <em>s390</em>. Such manipulation leads to infinite loop.

This vulnerability is uniquely identified as <a href="https://vuldb.com/cve/CVE-2026-64369">CVE-2026-64369</a>. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[IT Security News Hourly Summary 2026-07-26 15h : 1 posts]]></title>
<description><![CDATA[1 posts were published in the last hour 12:31 : Security Affairs newsletter Round 587 by Pierluigi Paganini – INTERNATIONAL EDITION
Read more →
The post IT Security News Hourly Summary 2026-07-26 15h : 1 posts appeared first on IT Security News.]]></description>
<link>https://tsecurity.de/de/3695669/it-security-nachrichten/it-security-news-hourly-summary-2026-07-26-15h-1-posts/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695669/it-security-nachrichten/it-security-news-hourly-summary-2026-07-26-15h-1-posts/</guid>
<pubDate>Sun, 26 Jul 2026 15:18:46 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>1 posts were published in the last hour 12:31 : Security Affairs newsletter Round 587 by Pierluigi Paganini – INTERNATIONAL EDITION</p>
<p class="more-link-p"><a class="more-link" href="https://www.itsecuritynews.info/it-security-news-hourly-summary-2026-07-26-15h-1-posts/">Read more →</a></p>
<p>The post <a href="https://www.itsecuritynews.info/it-security-news-hourly-summary-2026-07-26-15h-1-posts/">IT Security News Hourly Summary 2026-07-26 15h : 1 posts</a> appeared first on <a href="https://www.itsecuritynews.info/">IT Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Windows Explorer: 30% schneller beim Löschen dank NTFS-Optimierung - Börse Express]]></title>
<description><![CDATA[Windows Server 2025: Strengere Aktivierung ab August. Auf der Serverseite bereitet Microsoft einen bedeutenden Sicherheitsschritt vor. Ab August ...]]></description>
<link>https://tsecurity.de/de/3695647/windows-server/windows-explorer-30-schneller-beim-loeschen-dank-ntfs-optimierung-boerse-express/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695647/windows-server/windows-explorer-30-schneller-beim-loeschen-dank-ntfs-optimierung-boerse-express/</guid>
<pubDate>Sun, 26 Jul 2026 14:55:41 +0200</pubDate>
<category>🪟 Windows Server</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<b>Windows Server</b> 2025: Strengere Aktivierung ab August. Auf der Serverseite bereitet Microsoft einen bedeutenden Sicherheitsschritt vor. Ab August ...]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2022-40771 | Zoho ManageEngine ServiceDesk Plus getAsDoc xml external entity reference (ZDI-22-1612 / EUVD-2022-44037)]]></title>
<description><![CDATA[A vulnerability identified as problematic has been detected in Zoho ManageEngine ServiceDesk Plus. The impacted element is the function getAsDoc. This manipulation causes xml external entity reference.

This vulnerability is handled as CVE-2022-40771. The attack can be initiated remotely. There i...]]></description>
<link>https://tsecurity.de/de/3695629/sicherheitsluecken/cve-2022-40771-zoho-manageengine-servicedesk-plus-getasdoc-xml-external-entity-reference-zdi-22-1612-euvd-2022-44037/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695629/sicherheitsluecken/cve-2022-40771-zoho-manageengine-servicedesk-plus-getasdoc-xml-external-entity-reference-zdi-22-1612-euvd-2022-44037/</guid>
<pubDate>Sun, 26 Jul 2026 14:29:48 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">problematic</a> has been detected in <a href="https://vuldb.com/product/zoho_manageengine:servicedesk_plus">Zoho ManageEngine ServiceDesk Plus</a>. The impacted element is the function <code>getAsDoc</code>. This manipulation causes xml external entity reference.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2022-40771">CVE-2022-40771</a>. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2022-40772 | Zoho ManageEngine ServiceDesk Plus MSP generateSQLReport input validation (ZDI-22-1613 / EUVD-2022-44038)]]></title>
<description><![CDATA[A vulnerability classified as critical was found in Zoho ManageEngine ServiceDesk Plus MSP. Affected by this issue is the function generateSQLReport. The manipulation results in improper input validation.

This vulnerability is identified as CVE-2022-40772. The attack can be executed remotely. Th...]]></description>
<link>https://tsecurity.de/de/3695630/sicherheitsluecken/cve-2022-40772-zoho-manageengine-servicedesk-plus-msp-generatesqlreport-input-validation-zdi-22-1613-euvd-2022-44038/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695630/sicherheitsluecken/cve-2022-40772-zoho-manageengine-servicedesk-plus-msp-generatesqlreport-input-validation-zdi-22-1613-euvd-2022-44038/</guid>
<pubDate>Sun, 26 Jul 2026 14:29:48 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">critical</a> was found in <a href="https://vuldb.com/product/zoho_manageengine:servicedesk_plus_msp">Zoho ManageEngine ServiceDesk Plus MSP</a>. Affected by this issue is the function <code>generateSQLReport</code>. The manipulation results in improper input validation.

This vulnerability is identified as <a href="https://vuldb.com/cve/CVE-2022-40772">CVE-2022-40772</a>. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2022-40765 | Mitel MiVoice Connect up to 19.3 Edge Gateway command injection (EUVD-2022-44031)]]></title>
<description><![CDATA[A vulnerability was found in Mitel MiVoice Connect up to 19.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Edge Gateway Component. Such manipulation leads to command injection.

This vulnerability is listed as CVE-2022-40765. The attack m...]]></description>
<link>https://tsecurity.de/de/3695631/sicherheitsluecken/cve-2022-40765-mitel-mivoice-connect-up-to-193-edge-gateway-command-injection-euvd-2022-44031/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695631/sicherheitsluecken/cve-2022-40765-mitel-mivoice-connect-up-to-193-edge-gateway-command-injection-euvd-2022-44031/</guid>
<pubDate>Sun, 26 Jul 2026 14:29:48 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/mitel:mivoice_connect">Mitel MiVoice Connect up to 19.3</a> and classified as <a href="https://vuldb.com/kb/risk">critical</a>. Affected by this vulnerability is an unknown functionality of the component <em>Edge Gateway Component</em>. Such manipulation leads to command injection.

This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2022-40765">CVE-2022-40765</a>. The attack must be carried out from within the local network. In addition, an exploit is available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2022-40777 | Interspire Email Marketer up to 6.5.0 surveys_submit.php unrestricted upload (EUVD-2022-44043)]]></title>
<description><![CDATA[A vulnerability classified as critical has been found in Interspire Email Marketer up to 6.5.0. This affects an unknown function of the file surveys_submit.php. This manipulation causes unrestricted upload.

The identification of this vulnerability is CVE-2022-40777. The attack needs to be done w...]]></description>
<link>https://tsecurity.de/de/3695627/sicherheitsluecken/cve-2022-40777-interspire-email-marketer-up-to-650-surveyssubmitphp-unrestricted-upload-euvd-2022-44043/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695627/sicherheitsluecken/cve-2022-40777-interspire-email-marketer-up-to-650-surveyssubmitphp-unrestricted-upload-euvd-2022-44043/</guid>
<pubDate>Sun, 26 Jul 2026 14:29:47 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">critical</a> has been found in <a href="https://vuldb.com/product/interspire:email_marketer">Interspire Email Marketer up to 6.5.0</a>. This affects an unknown function of the file <em>surveys_submit.php</em>. This manipulation causes unrestricted upload.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2022-40777">CVE-2022-40777</a>. The attack needs to be done within the local network. There is no exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2022-40797 | Roxy Fileman 1.4.6 PHAR conf.json unrestricted upload (ID 169964 / EUVD-2022-44063)]]></title>
<description><![CDATA[A vulnerability identified as critical has been detected in Roxy Fileman 1.4.6. This vulnerability affects unknown code of the file conf.json of the component PHAR Handler. This manipulation causes unrestricted upload.

This vulnerability is handled as CVE-2022-40797. The attack can be initiated ...]]></description>
<link>https://tsecurity.de/de/3695628/sicherheitsluecken/cve-2022-40797-roxy-fileman-146-phar-confjson-unrestricted-upload-id-169964-euvd-2022-44063/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695628/sicherheitsluecken/cve-2022-40797-roxy-fileman-146-phar-confjson-unrestricted-upload-id-169964-euvd-2022-44063/</guid>
<pubDate>Sun, 26 Jul 2026 14:29:47 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">critical</a> has been detected in <a href="https://vuldb.com/product/roxy:fileman">Roxy Fileman 1.4.6</a>. This vulnerability affects unknown code of the file <em>conf.json</em> of the component <em>PHAR Handler</em>. This manipulation causes unrestricted upload.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2022-40797">CVE-2022-40797</a>. The attack can be initiated remotely. There is not any exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-17459 | perwendel spark up to 2.9.4 SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink (Issue 1296 / EUVD-2026-49054)]]></title>
<description><![CDATA[A vulnerability classified as critical was found in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/ExternalResourceHandler.jav of the component SparkJava. Executing a manipulation can lead to symlink follo...]]></description>
<link>https://tsecurity.de/de/3695626/sicherheitsluecken/cve-2026-17459-perwendel-spark-up-to-294-sparkjava-externalresourcehandlerjav-staticfilesexternallocation-symlink-issue-1296-euvd-2026-49054/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695626/sicherheitsluecken/cve-2026-17459-perwendel-spark-up-to-294-sparkjava-externalresourcehandlerjav-staticfilesexternallocation-symlink-issue-1296-euvd-2026-49054/</guid>
<pubDate>Sun, 26 Jul 2026 14:29:46 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">critical</a> was found in <a href="https://vuldb.com/product/perwendel:spark">perwendel spark up to 2.9.4</a>. This vulnerability affects the function <code>staticFiles.externalLocation</code> of the file <em>src/main/java/spark/resource/ExternalResourceHandler.jav</em> of the component <em>SparkJava</em>. Executing a manipulation can lead to symlink following.

This vulnerability is registered as <a href="https://vuldb.com/cve/CVE-2026-17459">CVE-2026-17459</a>. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-17458 | mf-yang openclaw-cn up to 0.2.1 Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgery (Issue 562 / EUVD-2026-49053)]]></title>
<description><![CDATA[A vulnerability classified as critical has been found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.ts of the component Browser Control HTTP API. Performing a manipulation results in server-side request forgery.

This vul...]]></description>
<link>https://tsecurity.de/de/3695625/sicherheitsluecken/cve-2026-17458-mf-yang-openclaw-cn-up-to-021-browser-control-http-api-agentactts-clickviaplaywright-server-side-request-forgery-issue-562-euvd-2026-49053/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695625/sicherheitsluecken/cve-2026-17458-mf-yang-openclaw-cn-up-to-021-browser-control-http-api-agentactts-clickviaplaywright-server-side-request-forgery-issue-562-euvd-2026-49053/</guid>
<pubDate>Sun, 26 Jul 2026 14:29:45 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">critical</a> has been found in <a href="https://vuldb.com/product/mf-yang:openclaw-cn">mf-yang openclaw-cn up to 0.2.1</a>. This affects the function <code>clickViaPlaywright</code> of the file <em>src/browser/routes/agent.act.ts</em> of the component <em>Browser Control HTTP API</em>. Performing a manipulation results in server-side request forgery.

This vulnerability is cataloged as <a href="https://vuldb.com/cve/CVE-2026-17458">CVE-2026-17458</a>. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The project was informed of the problem early through an issue report but has not responded yet.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64805 | JetBrains WebStorm up to 2026.1 code injection (WID-SEC-2026-2507)]]></title>
<description><![CDATA[A vulnerability was found in JetBrains WebStorm up to 2026.1. It has been rated as critical. Affected is an unknown function. Performing a manipulation results in code injection.

This vulnerability is reported as CVE-2026-64805. The attack is possible to be carried out remotely. No exploit exist...]]></description>
<link>https://tsecurity.de/de/3695606/sicherheitsluecken/cve-2026-64805-jetbrains-webstorm-up-to-20261-code-injection-wid-sec-2026-2507/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695606/sicherheitsluecken/cve-2026-64805-jetbrains-webstorm-up-to-20261-code-injection-wid-sec-2026-2507/</guid>
<pubDate>Sun, 26 Jul 2026 14:04:33 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/jetbrains:webstorm">JetBrains WebStorm up to 2026.1</a>. It has been rated as <a href="https://vuldb.com/kb/risk">critical</a>. Affected is an unknown function. Performing a manipulation results in code injection.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-64805">CVE-2026-64805</a>. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64807 | JetBrains WebStorm up to 2026.1 Linter Configuration code injection (WID-SEC-2026-2507)]]></title>
<description><![CDATA[A vulnerability was found in JetBrains WebStorm up to 2026.1 and classified as problematic. The impacted element is an unknown function of the component Linter Configuration. The manipulation results in code injection.

This vulnerability is cataloged as CVE-2026-64807. The attack may be launched...]]></description>
<link>https://tsecurity.de/de/3695604/sicherheitsluecken/cve-2026-64807-jetbrains-webstorm-up-to-20261-linter-configuration-code-injection-wid-sec-2026-2507/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695604/sicherheitsluecken/cve-2026-64807-jetbrains-webstorm-up-to-20261-linter-configuration-code-injection-wid-sec-2026-2507/</guid>
<pubDate>Sun, 26 Jul 2026 14:04:32 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/jetbrains:webstorm">JetBrains WebStorm up to 2026.1</a> and classified as <a href="https://vuldb.com/kb/risk">problematic</a>. The impacted element is an unknown function of the component <em>Linter Configuration</em>. The manipulation results in code injection.

This vulnerability is cataloged as <a href="https://vuldb.com/cve/CVE-2026-64807">CVE-2026-64807</a>. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64804 | JetBrains WebStorm 2021.1/2024.3 code injection (WID-SEC-2026-2507)]]></title>
<description><![CDATA[A vulnerability was found in JetBrains WebStorm 2021.1/2024.3. It has been declared as problematic. This impacts an unknown function. Such manipulation leads to code injection.

This vulnerability is documented as CVE-2026-64804. The attack can be executed remotely. There is not any exploit avail...]]></description>
<link>https://tsecurity.de/de/3695605/sicherheitsluecken/cve-2026-64804-jetbrains-webstorm-2021120243-code-injection-wid-sec-2026-2507/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695605/sicherheitsluecken/cve-2026-64804-jetbrains-webstorm-2021120243-code-injection-wid-sec-2026-2507/</guid>
<pubDate>Sun, 26 Jul 2026 14:04:32 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/jetbrains:webstorm">JetBrains WebStorm 2021.1/2024.3</a>. It has been declared as <a href="https://vuldb.com/kb/risk">problematic</a>. This impacts an unknown function. Such manipulation leads to code injection.

This vulnerability is documented as <a href="https://vuldb.com/cve/CVE-2026-64804">CVE-2026-64804</a>. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64806 | JetBrains WebStorm 2021.1/2024.3 Interpreter code injection (WID-SEC-2026-2507)]]></title>
<description><![CDATA[A vulnerability has been found in JetBrains WebStorm 2021.1/2024.3 and classified as problematic. The affected element is an unknown function of the component Interpreter. The manipulation leads to code injection.

This vulnerability is listed as CVE-2026-64806. The attack may be initiated remote...]]></description>
<link>https://tsecurity.de/de/3695603/sicherheitsluecken/cve-2026-64806-jetbrains-webstorm-2021120243-interpreter-code-injection-wid-sec-2026-2507/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695603/sicherheitsluecken/cve-2026-64806-jetbrains-webstorm-2021120243-interpreter-code-injection-wid-sec-2026-2507/</guid>
<pubDate>Sun, 26 Jul 2026 14:04:31 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability has been found in <a href="https://vuldb.com/product/jetbrains:webstorm">JetBrains WebStorm 2021.1/2024.3</a> and classified as <a href="https://vuldb.com/kb/risk">problematic</a>. The affected element is an unknown function of the component <em>Interpreter</em>. The manipulation leads to code injection.

This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-64806">CVE-2026-64806</a>. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64810 | JetBrains IntelliJ IDEA up to 2026.1 Notification cross site scripting (WID-SEC-2026-2505)]]></title>
<description><![CDATA[A vulnerability, which was classified as problematic, was found in JetBrains IntelliJ IDEA up to 2026.1. This affects an unknown function of the component Notification. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-64810. The attack can be execute...]]></description>
<link>https://tsecurity.de/de/3695602/sicherheitsluecken/cve-2026-64810-jetbrains-intellij-idea-up-to-20261-notification-cross-site-scripting-wid-sec-2026-2505/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695602/sicherheitsluecken/cve-2026-64810-jetbrains-intellij-idea-up-to-20261-notification-cross-site-scripting-wid-sec-2026-2505/</guid>
<pubDate>Sun, 26 Jul 2026 14:04:30 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">problematic</a>, was found in <a href="https://vuldb.com/product/jetbrains:intellij_idea">JetBrains IntelliJ IDEA up to 2026.1</a>. This affects an unknown function of the component <em>Notification</em>. The manipulation results in cross site scripting.

This vulnerability is identified as <a href="https://vuldb.com/cve/CVE-2026-64810">CVE-2026-64810</a>. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64814 | JetBrains IntelliJ IDEA up to 2026.1 improper authorization (WID-SEC-2026-2505)]]></title>
<description><![CDATA[A vulnerability classified as critical was found in JetBrains IntelliJ IDEA up to 2026.1. The affected element is an unknown function. Executing a manipulation can lead to improper authorization.

The identification of this vulnerability is CVE-2026-64814. The attack may be launched remotely. The...]]></description>
<link>https://tsecurity.de/de/3695600/sicherheitsluecken/cve-2026-64814-jetbrains-intellij-idea-up-to-20261-improper-authorization-wid-sec-2026-2505/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695600/sicherheitsluecken/cve-2026-64814-jetbrains-intellij-idea-up-to-20261-improper-authorization-wid-sec-2026-2505/</guid>
<pubDate>Sun, 26 Jul 2026 14:04:29 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">critical</a> was found in <a href="https://vuldb.com/product/jetbrains:intellij_idea">JetBrains IntelliJ IDEA up to 2026.1</a>. The affected element is an unknown function. Executing a manipulation can lead to improper authorization.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2026-64814">CVE-2026-64814</a>. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64811 | JetBrains IntelliJ IDEA up to 2026.1.4 Development Container Configuration code injection (WID-SEC-2026-2505)]]></title>
<description><![CDATA[A vulnerability marked as problematic has been reported in JetBrains IntelliJ IDEA. This vulnerability affects unknown code of the component Development Container Configuration. This manipulation causes code injection.

This vulnerability is handled as CVE-2026-64811. The attack can be initiated ...]]></description>
<link>https://tsecurity.de/de/3695601/sicherheitsluecken/cve-2026-64811-jetbrains-intellij-idea-up-to-202614-development-container-configuration-code-injection-wid-sec-2026-2505/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695601/sicherheitsluecken/cve-2026-64811-jetbrains-intellij-idea-up-to-202614-development-container-configuration-code-injection-wid-sec-2026-2505/</guid>
<pubDate>Sun, 26 Jul 2026 14:04:29 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">problematic</a> has been reported in <a href="https://vuldb.com/product/jetbrains:intellij_idea">JetBrains IntelliJ IDEA</a>. This vulnerability affects unknown code of the component <em>Development Container Configuration</em>. This manipulation causes code injection.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-64811">CVE-2026-64811</a>. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64812 | JetBrains IntelliJ IDEA up to 2026.1 injection (WID-SEC-2026-2505)]]></title>
<description><![CDATA[A vulnerability described as critical has been identified in JetBrains IntelliJ IDEA up to 2026.1. This issue affects some unknown processing. Such manipulation leads to injection.

This vulnerability is uniquely identified as CVE-2026-64812. The attack can be launched remotely. No exploit exists...]]></description>
<link>https://tsecurity.de/de/3695598/sicherheitsluecken/cve-2026-64812-jetbrains-intellij-idea-up-to-20261-injection-wid-sec-2026-2505/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695598/sicherheitsluecken/cve-2026-64812-jetbrains-intellij-idea-up-to-20261-injection-wid-sec-2026-2505/</guid>
<pubDate>Sun, 26 Jul 2026 14:04:28 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability described as <a href="https://vuldb.com/kb/risk">critical</a> has been identified in <a href="https://vuldb.com/product/jetbrains:intellij_idea">JetBrains IntelliJ IDEA up to 2026.1</a>. This issue affects some unknown processing. Such manipulation leads to injection.

This vulnerability is uniquely identified as <a href="https://vuldb.com/cve/CVE-2026-64812">CVE-2026-64812</a>. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64813 | JetBrains IntelliJ IDEA up to 2026.1 improper authorization (WID-SEC-2026-2505)]]></title>
<description><![CDATA[A vulnerability classified as problematic has been found in JetBrains IntelliJ IDEA up to 2026.1. Impacted is an unknown function. Performing a manipulation results in improper authorization.

This vulnerability was named CVE-2026-64813. The attack may be initiated remotely. There is no available...]]></description>
<link>https://tsecurity.de/de/3695599/sicherheitsluecken/cve-2026-64813-jetbrains-intellij-idea-up-to-20261-improper-authorization-wid-sec-2026-2505/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695599/sicherheitsluecken/cve-2026-64813-jetbrains-intellij-idea-up-to-20261-improper-authorization-wid-sec-2026-2505/</guid>
<pubDate>Sun, 26 Jul 2026 14:04:28 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">problematic</a> has been found in <a href="https://vuldb.com/product/jetbrains:intellij_idea">JetBrains IntelliJ IDEA up to 2026.1</a>. Impacted is an unknown function. Performing a manipulation results in improper authorization.

This vulnerability was named <a href="https://vuldb.com/cve/CVE-2026-64813">CVE-2026-64813</a>. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[A Promising Process For Nuclear Fuel Re-use and Disposal?]]></title>
<description><![CDATA[A Canadian lab has run a chemical process on real spent nuclear fuel "and pulled out 90% of the long-lived danger in 24 hours, the part that forces a burial site to last 100,000 years," notes the blog Autonocio, "with the leftovers meant to fuel a reactor."


The standard plan for spent nuclear f...]]></description>
<link>https://tsecurity.de/de/3695586/it-security-nachrichten/a-promising-process-for-nuclear-fuel-re-use-and-disposal/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695586/it-security-nachrichten/a-promising-process-for-nuclear-fuel-re-use-and-disposal/</guid>
<pubDate>Sun, 26 Jul 2026 13:48:14 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A Canadian lab has run a chemical process on real spent nuclear fuel "and pulled out 90% of the long-lived danger in 24 hours, the part that forces a burial site to last 100,000 years," notes the blog Autonocio, "with the leftovers meant to fuel a reactor."


The standard plan for spent nuclear fuel is to wait it out. You pull the used bundles from a reactor, sit them in a pool of water for seven to ten years while the heat and radiation come down, seal them in concrete casks, and look for somewhere deep and geologically dull to leave them for the next hundred thousand years. Canada has been hunting for that burial site since the 1980s and still doesn't have one in the ground. 

A company in Saint John, New Brunswick thinks most of what makes that waste dangerous never needed to go in the ground at all. Moltex Energy Canada says a chemical process it calls WATSS can strip 90% of the long-lived material out of used Canada Deuterium Uranium [CANDU] fuel in 24 hours, and that the concentrated leftovers become fuel for a reactor it wants to build on the same site. The recovery step isn't a slide in a pitch deck anymore. In 2025, World Nuclear News reported that Canadian Nuclear Laboratories ran the process on real used fuel from a commercial Canadian reactor and confirmed the 90% figure. 

None of it is generating power yet. What exists is a validated chemical step and a reactor design waiting in line at a regulator. The rest is a 2030s problem. 

"The chemistry has a lab result behind it. The reactor does not exist..." the article points out. "Moltex is aiming to have its first WATSS and SSR-W units running at Point Lepreau by the early-to-mid 2030s... Not everyone buys the pitch. Critics have argued the reprocessing creates its own stream of byproducts, that the economics are unproven, and that a single site's stockpile is finite." 

But Moltex "isn't alone in trying to burn nuclear waste instead of bury it," the article notes, with Switzerland and Denmark "chasing the same goal a different way."


 Switzerland's Transmutex drives a subcritical reactor with a particle accelerator, feeding it spent fuel alongside thorium... Denmark's Copenhagen Atomics is building a thorium molten-salt reactor that fits inside a shipping container and runs on the leftovers from conventional plants. 


Thanks to long-time Slashdot reader kwelch007 for sharing the article.
<p></p><div class="share_submission">
<a class="slashpop" href="http://twitter.com/home?status=A+Promising+Process+For+Nuclear+Fuel+Re-use+and+Disposal%3F%3A+https%3A%2F%2Fnews.slashdot.org%2Fstory%2F26%2F07%2F26%2F0456203%2F%3Futm_source%3Dtwitter%26utm_medium%3Dtwitter"><img src="https://a.fsdn.com/sd/twitter_icon_large.png"></a>
<a class="slashpop" href="http://www.facebook.com/sharer.php?u=https%3A%2F%2Fnews.slashdot.org%2Fstory%2F26%2F07%2F26%2F0456203%2Fa-promising-process-for-nuclear-fuel-re-use-and-disposal%3Futm_source%3Dslashdot%26utm_medium%3Dfacebook"><img src="https://a.fsdn.com/sd/facebook_icon_large.png"></a>



</div><p><a href="https://news.slashdot.org/story/26/07/26/0456203/a-promising-process-for-nuclear-fuel-re-use-and-disposal?utm_source=rss1.0moreanon&amp;utm_medium=feed">Read more of this story</a> at Slashdot.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2024-14040 | Linux Kernel nexthop weight/resvd1 allocation of resources (EUVD-2024-55701)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel and classified as very critical. The impacted element is an unknown function of the component nexthop. Such manipulation of the argument weight/resvd1 leads to allocation of resources.

This vulnerability is traded as CVE-2024-14040. The attack may be lau...]]></description>
<link>https://tsecurity.de/de/3695567/sicherheitsluecken/cve-2024-14040-linux-kernel-nexthop-weightresvd1-allocation-of-resources-euvd-2024-55701/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695567/sicherheitsluecken/cve-2024-14040-linux-kernel-nexthop-weightresvd1-allocation-of-resources-euvd-2024-55701/</guid>
<pubDate>Sun, 26 Jul 2026 13:38:57 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel</a> and classified as <a href="https://vuldb.com/kb/risk">very critical</a>. The impacted element is an unknown function of the component <em>nexthop</em>. Such manipulation of the argument <em>weight/resvd1</em> leads to allocation of resources.

This vulnerability is traded as <a href="https://vuldb.com/cve/CVE-2024-14040">CVE-2024-14040</a>. The attack may be launched remotely. There is no exploit available.

It is advisable to implement a patch to correct this issue.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64530 | Linux Kernel up to 7.1.4 cls_api net/sched/cls_api.c tcf_qevent_handle use after free (EUVD-2026-49051)]]></title>
<description><![CDATA[A vulnerability has been found in Linux Kernel up to 7.1.4 and classified as very critical. The affected element is the function tcf_qevent_handle of the file net/sched/cls_api.c of the component cls_api. This manipulation causes use after free.

This vulnerability appears as CVE-2026-64530. The ...]]></description>
<link>https://tsecurity.de/de/3695566/sicherheitsluecken/cve-2026-64530-linux-kernel-up-to-714-clsapi-netschedclsapic-tcfqeventhandle-use-after-free-euvd-2026-49051/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695566/sicherheitsluecken/cve-2026-64530-linux-kernel-up-to-714-clsapi-netschedclsapic-tcfqeventhandle-use-after-free-euvd-2026-49051/</guid>
<pubDate>Sun, 26 Jul 2026 13:38:49 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.4</a> and classified as <a href="https://vuldb.com/kb/risk">very critical</a>. The affected element is the function <code>tcf_qevent_handle</code> of the file <em>net/sched/cls_api.c</em> of the component <em>cls_api</em>. This manipulation causes use after free.

This vulnerability appears as <a href="https://vuldb.com/cve/CVE-2026-64530">CVE-2026-64530</a>. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64478 | Linux Kernel up to 7.1.3 ALSA USB Audio snd_dualsense_ih_match null pointer dereference (EUVD-2026-48822)]]></title>
<description><![CDATA[A vulnerability classified as problematic was found in Linux Kernel up to 7.1.3. Impacted is the function snd_dualsense_ih_match of the component ALSA USB Audio. Executing a manipulation can lead to null pointer dereference.

This vulnerability appears as CVE-2026-64478. The attack requires local...]]></description>
<link>https://tsecurity.de/de/3695565/sicherheitsluecken/cve-2026-64478-linux-kernel-up-to-713-alsa-usb-audio-snddualsenseihmatch-null-pointer-dereference-euvd-2026-48822/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695565/sicherheitsluecken/cve-2026-64478-linux-kernel-up-to-713-alsa-usb-audio-snddualsenseihmatch-null-pointer-dereference-euvd-2026-48822/</guid>
<pubDate>Sun, 26 Jul 2026 13:38:43 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">problematic</a> was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. Impacted is the function <code>snd_dualsense_ih_match</code> of the component <em>ALSA USB Audio</em>. Executing a manipulation can lead to null pointer dereference.

This vulnerability appears as <a href="https://vuldb.com/cve/CVE-2026-64478">CVE-2026-64478</a>. The attack requires local access. There is no available exploit.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64477 | Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc1 resctrl cpu_to_node out-of-bounds (EUVD-2026-48821)]]></title>
<description><![CDATA[A vulnerability classified as critical has been found in Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc1. This issue affects the function cpu_to_node of the component resctrl. Performing a manipulation results in out-of-bounds read.

This vulnerability is reported as CVE-2026-64477. The attack r...]]></description>
<link>https://tsecurity.de/de/3695564/sicherheitsluecken/cve-2026-64477-linux-kernel-up-to-612956183871372-rc1-resctrl-cputonode-out-of-bounds-euvd-2026-48821/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695564/sicherheitsluecken/cve-2026-64477-linux-kernel-up-to-612956183871372-rc1-resctrl-cputonode-out-of-bounds-euvd-2026-48821/</guid>
<pubDate>Sun, 26 Jul 2026 13:38:32 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">critical</a> has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc1</a>. This issue affects the function <code>cpu_to_node</code> of the component <em>resctrl</em>. Performing a manipulation results in out-of-bounds read.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-64477">CVE-2026-64477</a>. The attack requires a local approach. No exploit exists.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64475 | Linux Kernel up to 7.2-rc1 Vfio Pci vfio_pci_core_register_device use after free (EUVD-2026-48819)]]></title>
<description><![CDATA[A vulnerability described as very critical has been identified in Linux Kernel up to 7.2-rc1. Affected by this vulnerability is the function vfio_pci_core_register_device of the component Vfio Pci. The manipulation results in use after free.

This vulnerability is reported as CVE-2026-64475. The ...]]></description>
<link>https://tsecurity.de/de/3695563/sicherheitsluecken/cve-2026-64475-linux-kernel-up-to-72-rc1-vfio-pci-vfiopcicoreregisterdevice-use-after-free-euvd-2026-48819/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695563/sicherheitsluecken/cve-2026-64475-linux-kernel-up-to-72-rc1-vfio-pci-vfiopcicoreregisterdevice-use-after-free-euvd-2026-48819/</guid>
<pubDate>Sun, 26 Jul 2026 13:38:24 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability described as <a href="https://vuldb.com/kb/risk">very critical</a> has been identified in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc1</a>. Affected by this vulnerability is the function <code>vfio_pci_core_register_device</code> of the component <em>Vfio Pci</em>. The manipulation results in use after free.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-64475">CVE-2026-64475</a>. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64476 | Linux Kernel up to 7.2-rc1 vfio-pci driver vfio_pci.c vfio_pci_dev_set_pm_runtime_get disable_idle_d3 race condition (EUVD-2026-48820)]]></title>
<description><![CDATA[A vulnerability has been found in Linux Kernel up to 7.2-rc1 and classified as critical. This affects the function vfio_pci_dev_set_pm_runtime_get of the file vfio_pci.c of the component vfio-pci driver. Performing a manipulation of the argument disable_idle_d3 results in race condition.

This vu...]]></description>
<link>https://tsecurity.de/de/3695562/sicherheitsluecken/cve-2026-64476-linux-kernel-up-to-72-rc1-vfio-pci-driver-vfiopcic-vfiopcidevsetpmruntimeget-disableidled3-race-condition-euvd-2026-48820/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695562/sicherheitsluecken/cve-2026-64476-linux-kernel-up-to-72-rc1-vfio-pci-driver-vfiopcic-vfiopcidevsetpmruntimeget-disableidled3-race-condition-euvd-2026-48820/</guid>
<pubDate>Sun, 26 Jul 2026 13:38:20 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc1</a> and classified as <a href="https://vuldb.com/kb/risk">critical</a>. This affects the function <code>vfio_pci_dev_set_pm_runtime_get</code> of the file <em>vfio_pci.c</em> of the component <em>vfio-pci driver</em>. Performing a manipulation of the argument <em>disable_idle_d3</em> results in race condition.

This vulnerability was named <a href="https://vuldb.com/cve/CVE-2026-64476">CVE-2026-64476</a>. The attack needs to be approached locally. There is no available exploit.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64472 | Linux Kernel up to 7.2-rc1 Vfio Mlx5 race condition (EUVD-2026-48816)]]></title>
<description><![CDATA[A vulnerability labeled as very critical has been found in Linux Kernel up to 7.2-rc1. This impacts an unknown function of the component Vfio Mlx5. Executing a manipulation can lead to race condition.

This vulnerability is registered as CVE-2026-64472. It is possible to launch the attack remotel...]]></description>
<link>https://tsecurity.de/de/3695560/sicherheitsluecken/cve-2026-64472-linux-kernel-up-to-72-rc1-vfio-mlx5-race-condition-euvd-2026-48816/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695560/sicherheitsluecken/cve-2026-64472-linux-kernel-up-to-72-rc1-vfio-mlx5-race-condition-euvd-2026-48816/</guid>
<pubDate>Sun, 26 Jul 2026 13:38:19 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability labeled as <a href="https://vuldb.com/kb/risk">very critical</a> has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc1</a>. This impacts an unknown function of the component <em>Vfio Mlx5</em>. Executing a manipulation can lead to race condition.

This vulnerability is registered as <a href="https://vuldb.com/cve/CVE-2026-64472">CVE-2026-64472</a>. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64474 | Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3 Vfio vfio_mig_get_next_state infinite loop (EUVD-2026-48818)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3. It has been rated as problematic. This impacts the function vfio_mig_get_next_state of the component Vfio. Performing a manipulation results in infinite loop.

This vulnerability is identified as CVE-2026-64474. The at...]]></description>
<link>https://tsecurity.de/de/3695561/sicherheitsluecken/cve-2026-64474-linux-kernel-up-to-661446129561838713-vfio-vfiomiggetnextstate-infinite-loop-euvd-2026-48818/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695561/sicherheitsluecken/cve-2026-64474-linux-kernel-up-to-661446129561838713-vfio-vfiomiggetnextstate-infinite-loop-euvd-2026-48818/</guid>
<pubDate>Sun, 26 Jul 2026 13:38:19 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3</a>. It has been rated as <a href="https://vuldb.com/kb/risk">problematic</a>. This impacts the function <code>vfio_mig_get_next_state</code> of the component <em>Vfio</em>. Performing a manipulation results in infinite loop.

This vulnerability is identified as <a href="https://vuldb.com/cve/CVE-2026-64474">CVE-2026-64474</a>. The attack is only possible with local access. There is not any exploit available.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-17457 | mf-yang openclaw-cn up to 0.2.1 Scheme navigation-guard.ts assertBrowserNavigationAllowed url information disclosure (Issue 561 / EUVD-2026-49052)]]></title>
<description><![CDATA[A vulnerability described as problematic has been identified in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserNavigationAllowed of the file src/browser/navigation-guard.ts of the component Scheme Handler. Such manipulation of the argument url leads to inform...]]></description>
<link>https://tsecurity.de/de/3695558/sicherheitsluecken/cve-2026-17457-mf-yang-openclaw-cn-up-to-021-scheme-navigation-guardts-assertbrowsernavigationallowed-url-information-disclosure-issue-561-euvd-2026-49052/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695558/sicherheitsluecken/cve-2026-17457-mf-yang-openclaw-cn-up-to-021-scheme-navigation-guardts-assertbrowsernavigationallowed-url-information-disclosure-issue-561-euvd-2026-49052/</guid>
<pubDate>Sun, 26 Jul 2026 13:38:14 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability described as <a href="https://vuldb.com/kb/risk">problematic</a> has been identified in <a href="https://vuldb.com/product/mf-yang:openclaw-cn">mf-yang openclaw-cn up to 0.2.1</a>. Affected by this issue is the function <code>assertBrowserNavigationAllowed</code> of the file <em>src/browser/navigation-guard.ts</em> of the component <em>Scheme Handler</em>. Such manipulation of the argument <em>url</em> leads to information disclosure.

This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-17457">CVE-2026-17457</a>. The attack may be performed from remote. In addition, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64473 | Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc1 VFIO vfio_unregister_group_dev race condition (EUVD-2026-48817)]]></title>
<description><![CDATA[A vulnerability marked as very critical has been reported in Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc1. Affected is the function vfio_unregister_group_dev of the component VFIO. The manipulation leads to race condition.

This vulnerability is documented as CVE-2026-64473. The attack can be...]]></description>
<link>https://tsecurity.de/de/3695559/sicherheitsluecken/cve-2026-64473-linux-kernel-up-to-612956183871372-rc1-vfio-vfiounregistergroupdev-race-condition-euvd-2026-48817/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695559/sicherheitsluecken/cve-2026-64473-linux-kernel-up-to-612956183871372-rc1-vfio-vfiounregistergroupdev-race-condition-euvd-2026-48817/</guid>
<pubDate>Sun, 26 Jul 2026 13:38:14 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">very critical</a> has been reported in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc1</a>. Affected is the function <code>vfio_unregister_group_dev</code> of the component <em>VFIO</em>. The manipulation leads to race condition.

This vulnerability is documented as <a href="https://vuldb.com/cve/CVE-2026-64473">CVE-2026-64473</a>. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[Microsoft in 2026: Was für den Privatnutzer bleibt – eine Einschätzung]]></title>
<description><![CDATA[Microsoft macht schon seit einigen Monaten einen weitreichenden Kulturwandel durch, der auch das ohnehin fragliche Verhältnis zum Privatnutzer neu ausrichtet. Selbstredend waren die Redmonder nie wirklich eine auf Consumer fokussierte Technikschmiede, so wie das etwa bei Apple der Fall ist, aber ...]]></description>
<link>https://tsecurity.de/de/3695543/it-nachrichten/microsoft-in-2026-was-fuer-den-privatnutzer-bleibt-eine-einschaetzung/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695543/it-nachrichten/microsoft-in-2026-was-fuer-den-privatnutzer-bleibt-eine-einschaetzung/</guid>
<pubDate>Sun, 26 Jul 2026 13:15:13 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div><img src="https://www.drwindows.de/news/wp-content/uploads/2025/10/was_nun_nadella.jpg" class="attachment-single-thumb size-single-thumb wp-post-image" alt="Satya Nadella, CEO von Microsoft" decoding="async" fetchpriority="high" srcset="https://www.drwindows.de/news/wp-content/uploads/2025/10/was_nun_nadella.jpg 720w, https://www.drwindows.de/news/wp-content/uploads/2025/10/was_nun_nadella-300x150.jpg 300w, https://www.drwindows.de/news/wp-content/uploads/2025/10/was_nun_nadella-643x322.jpg 643w" sizes="(max-width: 720px) 100vw, 720px"></div>
<p>Microsoft macht schon seit einigen Monaten einen weitreichenden Kulturwandel durch, der auch das ohnehin fragliche Verhältnis zum Privatnutzer neu ausrichtet. Selbstredend waren die Redmonder nie wirklich eine auf Consumer fokussierte Technikschmiede, so wie das etwa bei Apple der Fall ist, aber die zunehmende Transformation vom Cloudriesen zur AI First-Company bringt auch für uns große Veränderungen […]</p>
<p>Der Beitrag <a href="https://www.drwindows.de/news/microsoft-in-2026-was-fuer-den-privatnutzer-bleibt-eine-einschaetzung">Microsoft in 2026: Was für den Privatnutzer bleibt – eine Einschätzung</a> erschien zuerst auf <a href="https://www.drwindows.de/news">Dr. Windows</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Crime blotter: A second arrest in the 2025 FedEx robbery]]></title>
<description><![CDATA[A woman who stole from a Wendy's returned for her AirPods, a shooting followed an argument about an Apple Watch, and another FedEx robbery in Memphis, all in this week's Apple Crime Blotter.AirPods 4The latest in an occasional AppleInsider feature, looking at the world of Apple-related crime. Con...]]></description>
<link>https://tsecurity.de/de/3695530/ios-mac-os/crime-blotter-a-second-arrest-in-the-2025-fedex-robbery/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695530/ios-mac-os/crime-blotter-a-second-arrest-in-the-2025-fedex-robbery/</guid>
<pubDate>Sun, 26 Jul 2026 13:08:48 +0200</pubDate>
<category>🍏 iOS / Mac OS</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A woman who stole from a Wendy's returned for her <a href="https://appleinsider.com/inside/airpods" title="AirPods" data-kpt="1">AirPods</a>, a shooting followed an argument about an Apple Watch, and another FedEx robbery in Memphis, all in this week's Apple Crime Blotter.<br><br><div><img src="https://photos5.appleinsider.com/gallery/68335-144037-AirPods-4-case-xl.jpg" alt="White wireless earbuds resting in an open charging case on a soft gray fabric surface, with the case lid tilted back and earbuds partially seated in their slots" height="738" class=""><br><span>AirPods 4</span></div><br>The latest in an occasional <em>AppleInsider</em> feature, looking at the world of Apple-related crime.<br><br><br> <a href="https://appleinsider.com/articles/26/07/26/crime-blotter-a-second-arrest-in-the-2025-fedex-robbery?utm_source=rss">Continue Reading on AppleInsider</a> | <a href="https://forums.appleinsider.com/discussion/245063?urm_source=rss">Discuss on our Forums</a>]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64406 | Linux Kernel up to 7.2-rc2 Bluetooth bt_accept_dequeue use after free (Nessus ID 329977)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.2-rc2. It has been classified as very critical. The affected element is the function bt_accept_dequeue of the component Bluetooth. The manipulation leads to use after free.

This vulnerability is listed as CVE-2026-64406. The attack may be initiat...]]></description>
<link>https://tsecurity.de/de/3695522/sicherheitsluecken/cve-2026-64406-linux-kernel-up-to-72-rc2-bluetooth-btacceptdequeue-use-after-free-nessus-id-329977/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695522/sicherheitsluecken/cve-2026-64406-linux-kernel-up-to-72-rc2-bluetooth-btacceptdequeue-use-after-free-nessus-id-329977/</guid>
<pubDate>Sun, 26 Jul 2026 12:50:51 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc2</a>. It has been classified as <a href="https://vuldb.com/kb/risk">very critical</a>. The affected element is the function <code>bt_accept_dequeue</code> of the component <em>Bluetooth</em>. The manipulation leads to use after free.

This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-64406">CVE-2026-64406</a>. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64375 | Linux Kernel up to 7.1.3 proc filesystem call_proc_get_link race condition (Nessus ID 329978)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.1.3. It has been declared as very critical. This impacts the function call_proc_get_link of the component proc filesystem. The manipulation results in race condition.

This vulnerability is reported as CVE-2026-64375. The attack requires a local a...]]></description>
<link>https://tsecurity.de/de/3695523/sicherheitsluecken/cve-2026-64375-linux-kernel-up-to-713-proc-filesystem-callprocgetlink-race-condition-nessus-id-329978/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695523/sicherheitsluecken/cve-2026-64375-linux-kernel-up-to-713-proc-filesystem-callprocgetlink-race-condition-nessus-id-329978/</guid>
<pubDate>Sun, 26 Jul 2026 12:50:51 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. It has been declared as <a href="https://vuldb.com/kb/risk">very critical</a>. This impacts the function <code>call_proc_get_link</code> of the component <em>proc filesystem</em>. The manipulation results in race condition.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-64375">CVE-2026-64375</a>. The attack requires a local approach. No exploit exists.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64372 | Linux Kernel up to 7.1.3 pcc pcc_cpufreq_do_osc use after free (Nessus ID 329975)]]></title>
<description><![CDATA[A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.1.3. Impacted is the function pcc_cpufreq_do_osc of the component pcc. Such manipulation leads to use after free.

This vulnerability is listed as CVE-2026-64372. The attack must be carried out locally. Ther...]]></description>
<link>https://tsecurity.de/de/3695520/sicherheitsluecken/cve-2026-64372-linux-kernel-up-to-713-pcc-pcccpufreqdoosc-use-after-free-nessus-id-329975/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695520/sicherheitsluecken/cve-2026-64372-linux-kernel-up-to-713-pcc-pcccpufreqdoosc-use-after-free-nessus-id-329975/</guid>
<pubDate>Sun, 26 Jul 2026 12:50:50 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">very critical</a>, was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. Impacted is the function <code>pcc_cpufreq_do_osc</code> of the component <em>pcc</em>. Such manipulation leads to use after free.

This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-64372">CVE-2026-64372</a>. The attack must be carried out locally. There is no available exploit.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64384 | Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3 SMB Client SMB2_notify_init double free (Nessus ID 329976)]]></title>
<description><![CDATA[A vulnerability classified as very critical has been found in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3. Impacted is the function SMB2_notify_init of the component SMB Client. This manipulation causes double free.

The identification of this vulnerability is CVE-2026-64384. It is possible ...]]></description>
<link>https://tsecurity.de/de/3695521/sicherheitsluecken/cve-2026-64384-linux-kernel-up-to-661446129561838713-smb-client-smb2notifyinit-double-free-nessus-id-329976/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695521/sicherheitsluecken/cve-2026-64384-linux-kernel-up-to-661446129561838713-smb-client-smb2notifyinit-double-free-nessus-id-329976/</guid>
<pubDate>Sun, 26 Jul 2026 12:50:50 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">very critical</a> has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3</a>. Impacted is the function <code>SMB2_notify_init</code> of the component <em>SMB Client</em>. This manipulation causes double free.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2026-64384">CVE-2026-64384</a>. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64431 | Linux Kernel NTFS post_write_mst_fixup memory corruption (Nessus ID 329973)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel. It has been rated as critical. Affected by this vulnerability is the function post_write_mst_fixup of the component NTFS. Performing a manipulation results in memory corruption.

This vulnerability is cataloged as CVE-2026-64431. It is possible to initia...]]></description>
<link>https://tsecurity.de/de/3695518/sicherheitsluecken/cve-2026-64431-linux-kernel-ntfs-postwritemstfixup-memory-corruption-nessus-id-329973/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695518/sicherheitsluecken/cve-2026-64431-linux-kernel-ntfs-postwritemstfixup-memory-corruption-nessus-id-329973/</guid>
<pubDate>Sun, 26 Jul 2026 12:50:49 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel</a>. It has been rated as <a href="https://vuldb.com/kb/risk">critical</a>. Affected by this vulnerability is the function <code>post_write_mst_fixup</code> of the component <em>NTFS</em>. Performing a manipulation results in memory corruption.

This vulnerability is cataloged as <a href="https://vuldb.com/cve/CVE-2026-64431">CVE-2026-64431</a>. It is possible to initiate the attack remotely. There is no exploit available.

Applying a patch is the recommended action to fix this issue.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64463 | Linux Kernel up to 7.2-rc2 Typec Tcpci Driver rt1711h_probe denial of service (Nessus ID 329974)]]></title>
<description><![CDATA[A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3/7.2-rc2. This issue affects the function rt1711h_probe of the component Typec Tcpci Driver. Executing a manipulation can lead to denial of service.

This vulnerability is handled as CV...]]></description>
<link>https://tsecurity.de/de/3695519/sicherheitsluecken/cve-2026-64463-linux-kernel-up-to-72-rc2-typec-tcpci-driver-rt1711hprobe-denial-of-service-nessus-id-329974/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695519/sicherheitsluecken/cve-2026-64463-linux-kernel-up-to-72-rc2-typec-tcpci-driver-rt1711hprobe-denial-of-service-nessus-id-329974/</guid>
<pubDate>Sun, 26 Jul 2026 12:50:49 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">critical</a>, was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3/7.2-rc2</a>. This issue affects the function <code>rt1711h_probe</code> of the component <em>Typec Tcpci Driver</em>. Executing a manipulation can lead to denial of service.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-64463">CVE-2026-64463</a>. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64306 | Linux Kernel up to 7.1.3 DRBG drbg_ctr_generate uninitialized variable (Nessus ID 329971)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.1.3. It has been rated as very critical. The affected element is the function drbg_ctr_generate of the component DRBG. Performing a manipulation results in use of uninitialized variable.

This vulnerability was named CVE-2026-64306. The attack may...]]></description>
<link>https://tsecurity.de/de/3695516/sicherheitsluecken/cve-2026-64306-linux-kernel-up-to-713-drbg-drbgctrgenerate-uninitialized-variable-nessus-id-329971/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695516/sicherheitsluecken/cve-2026-64306-linux-kernel-up-to-713-drbg-drbgctrgenerate-uninitialized-variable-nessus-id-329971/</guid>
<pubDate>Sun, 26 Jul 2026 12:50:48 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. It has been rated as <a href="https://vuldb.com/kb/risk">very critical</a>. The affected element is the function <code>drbg_ctr_generate</code> of the component <em>DRBG</em>. Performing a manipulation results in use of uninitialized variable.

This vulnerability was named <a href="https://vuldb.com/cve/CVE-2026-64306">CVE-2026-64306</a>. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64309 | Linux Kernel up to 6.12.95/6.18.38/7.1.3 ccp initialization (Nessus ID 329972)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 6.12.95/6.18.38/7.1.3 and classified as critical. This vulnerability affects unknown code of the component ccp. The manipulation results in improper initialization.

This vulnerability is known as CVE-2026-64309. It is possible to launch the attack ...]]></description>
<link>https://tsecurity.de/de/3695517/sicherheitsluecken/cve-2026-64309-linux-kernel-up-to-6129561838713-ccp-initialization-nessus-id-329972/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695517/sicherheitsluecken/cve-2026-64309-linux-kernel-up-to-6129561838713-ccp-initialization-nessus-id-329972/</guid>
<pubDate>Sun, 26 Jul 2026 12:50:48 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.12.95/6.18.38/7.1.3</a> and classified as <a href="https://vuldb.com/kb/risk">critical</a>. This vulnerability affects unknown code of the component <em>ccp</em>. The manipulation results in improper initialization.

This vulnerability is known as <a href="https://vuldb.com/cve/CVE-2026-64309">CVE-2026-64309</a>. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[IT Security News Hourly Summary 2026-07-26 12h : 1 posts]]></title>
<description><![CDATA[1 posts were published in the last hour 9:31 : Top 10 Best Active Directory Management Tools 2026
Read more →
The post IT Security News Hourly Summary 2026-07-26 12h : 1 posts appeared first on IT Security News.]]></description>
<link>https://tsecurity.de/de/3695488/it-security-nachrichten/it-security-news-hourly-summary-2026-07-26-12h-1-posts/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695488/it-security-nachrichten/it-security-news-hourly-summary-2026-07-26-12h-1-posts/</guid>
<pubDate>Sun, 26 Jul 2026 12:19:08 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>1 posts were published in the last hour 9:31 : Top 10 Best Active Directory Management Tools 2026</p>
<p class="more-link-p"><a class="more-link" href="https://www.itsecuritynews.info/it-security-news-hourly-summary-2026-07-26-12h-1-posts/">Read more →</a></p>
<p>The post <a href="https://www.itsecuritynews.info/it-security-news-hourly-summary-2026-07-26-12h-1-posts/">IT Security News Hourly Summary 2026-07-26 12h : 1 posts</a> appeared first on <a href="https://www.itsecuritynews.info/">IT Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-30603 | Qianniao QN-L23PA0904 20250721.1640 Firmware Update iu.sh backdoor]]></title>
<description><![CDATA[A vulnerability was found in Qianniao QN-L23PA0904 20250721.1640. It has been declared as critical. This affects an unknown function of the file iu.sh of the component Firmware Update Handler. Executing a manipulation can lead to backdoor.

The identification of this vulnerability is CVE-2026-306...]]></description>
<link>https://tsecurity.de/de/3695449/sicherheitsluecken/cve-2026-30603-qianniao-qn-l23pa0904-202507211640-firmware-update-iush-backdoor/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695449/sicherheitsluecken/cve-2026-30603-qianniao-qn-l23pa0904-202507211640-firmware-update-iush-backdoor/</guid>
<pubDate>Sun, 26 Jul 2026 11:51:00 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/qianniao:qn-l23pa0904">Qianniao QN-L23PA0904 20250721.1640</a>. It has been declared as <a href="https://vuldb.com/kb/risk">critical</a>. This affects an unknown function of the file <em>iu.sh</em> of the component <em>Firmware Update Handler</em>. Executing a manipulation can lead to backdoor.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2026-30603">CVE-2026-30603</a>. The physical device can be targeted for the attack. There is no exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-5349 | Trendnet TEW-657BRM 1.00.1 /setup.cgi add_apcdb mac_pc_dba stack-based overflow]]></title>
<description><![CDATA[A vulnerability marked as critical has been reported in Trendnet TEW-657BRM 1.00.1. The affected element is the function add_apcdb of the file /setup.cgi. The manipulation of the argument mac_pc_dba leads to stack-based buffer overflow. This vulnerability only affects products that are no longer ...]]></description>
<link>https://tsecurity.de/de/3695450/sicherheitsluecken/cve-2026-5349-trendnet-tew-657brm-1001-setupcgi-addapcdb-macpcdba-stack-based-overflow/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695450/sicherheitsluecken/cve-2026-5349-trendnet-tew-657brm-1001-setupcgi-addapcdb-macpcdba-stack-based-overflow/</guid>
<pubDate>Sun, 26 Jul 2026 11:51:00 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">critical</a> has been reported in <a href="https://vuldb.com/product/trendnet:tew-657brm">Trendnet TEW-657BRM 1.00.1</a>. The affected element is the function <code>add_apcdb</code> of the file <em>/setup.cgi</em>. The manipulation of the argument <em>mac_pc_dba</em> leads to stack-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is documented as <a href="https://vuldb.com/cve/CVE-2026-5349">CVE-2026-5349</a>. The attack can be initiated remotely. Additionally, an exploit exists.

The vendor confirms, that "[t]he product in question (...) has been discontinued and end of life since June 23, 2011, that is more than 14 years ago. We no longer provide support for this product, so we are not able to confirm the vulnerabilities. We will make an announcement on our website's product support page and notify customers who registered their products with us."]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-26895 | osTicket 1.18.2 /pwreset.php information disclosure]]></title>
<description><![CDATA[A vulnerability has been found in osTicket 1.18.2 and classified as problematic. Impacted is an unknown function of the file /pwreset.php. This manipulation causes information disclosure.

This vulnerability is handled as CVE-2026-26895. The attack can be initiated remotely. There is not any expl...]]></description>
<link>https://tsecurity.de/de/3695448/sicherheitsluecken/cve-2026-26895-osticket-1182-pwresetphp-information-disclosure/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695448/sicherheitsluecken/cve-2026-26895-osticket-1182-pwresetphp-information-disclosure/</guid>
<pubDate>Sun, 26 Jul 2026 11:50:59 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability has been found in <a href="https://vuldb.com/product/osticket">osTicket 1.18.2</a> and classified as <a href="https://vuldb.com/kb/risk">problematic</a>. Impacted is an unknown function of the file <em>/pwreset.php</em>. This manipulation causes information disclosure.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-26895">CVE-2026-26895</a>. The attack can be initiated remotely. There is not any exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-5350 | Trendnet TEW-657BRM 1.00.1 /setup.cgi update_pcdb mac_pc_dba stack-based overflow]]></title>
<description><![CDATA[A vulnerability described as critical has been identified in Trendnet TEW-657BRM 1.00.1. The impacted element is the function update_pcdb of the file /setup.cgi. The manipulation of the argument mac_pc_dba results in stack-based buffer overflow. This vulnerability only affects products that are n...]]></description>
<link>https://tsecurity.de/de/3695446/sicherheitsluecken/cve-2026-5350-trendnet-tew-657brm-1001-setupcgi-updatepcdb-macpcdba-stack-based-overflow/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695446/sicherheitsluecken/cve-2026-5350-trendnet-tew-657brm-1001-setupcgi-updatepcdb-macpcdba-stack-based-overflow/</guid>
<pubDate>Sun, 26 Jul 2026 11:50:58 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability described as <a href="https://vuldb.com/kb/risk">critical</a> has been identified in <a href="https://vuldb.com/product/trendnet:tew-657brm">Trendnet TEW-657BRM 1.00.1</a>. The impacted element is the function <code>update_pcdb</code> of the file <em>/setup.cgi</em>. The manipulation of the argument <em>mac_pc_dba</em> results in stack-based buffer overflow. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-5350">CVE-2026-5350</a>. The attack can be launched remotely. Moreover, an exploit is present.

The vendor confirms, that "[t]he product in question (...) has been discontinued and end of life since June 23, 2011, that is more than 14 years ago. We no longer provide support for this product, so we are not able to confirm the vulnerabilities. We will make an announcement on our website's product support page and notify customers who registered their products with us."]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-25212 | Percona up to 3.6 Add data source os command injection]]></title>
<description><![CDATA[A vulnerability, which was classified as critical, was found in Percona up to 3.6. This issue affects some unknown processing of the component Add data source. The manipulation results in os command injection.

This vulnerability is known as CVE-2026-25212. It is possible to launch the attack rem...]]></description>
<link>https://tsecurity.de/de/3695447/sicherheitsluecken/cve-2026-25212-percona-up-to-36-add-data-source-os-command-injection/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695447/sicherheitsluecken/cve-2026-25212-percona-up-to-36-add-data-source-os-command-injection/</guid>
<pubDate>Sun, 26 Jul 2026 11:50:58 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">critical</a>, was found in <a href="https://vuldb.com/product/percona">Percona up to 3.6</a>. This issue affects some unknown processing of the component <em>Add data source</em>. The manipulation results in os command injection.

This vulnerability is known as <a href="https://vuldb.com/cve/CVE-2026-25212">CVE-2026-25212</a>. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[WhatsApp: Diese Änderung bei den Emoji-Reaktionen würde mich sehr glücklich machen]]></title>
<description><![CDATA[Daumen hoch, Herz, Lachtränen, erstauntes Gesicht, trauriges Gesicht, gefaltete Hände: Wenn ihr in WhatsApp eine Nachricht länger antippt, schlägt euch die App sechs Emoji vor,…
Dieser Artikel WhatsApp: Diese Änderung bei den Emoji-Reaktionen würde mich sehr glücklich machen erschien zuerst auf S...]]></description>
<link>https://tsecurity.de/de/3695422/android-tipps/whatsapp-diese-aenderung-bei-den-emoji-reaktionen-wuerde-mich-sehr-gluecklich-machen/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695422/android-tipps/whatsapp-diese-aenderung-bei-den-emoji-reaktionen-wuerde-mich-sehr-gluecklich-machen/</guid>
<pubDate>Sun, 26 Jul 2026 11:21:52 +0200</pubDate>
<category>🤖 Android Tipps</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<img width="2048" height="1254" src="https://i0.wp.com/www.smartdroid.de/wp-content/uploads/2025/11/WhatsApp-Logo-Hero-1-scaled.jpg?fit=2048%2C1254&amp;ssl=1" class="attachment-medium size-medium wp-post-image" alt="WhatsApp-Logo Hero" decoding="async" fetchpriority="high" srcset="https://i0.wp.com/www.smartdroid.de/wp-content/uploads/2025/11/WhatsApp-Logo-Hero-1-scaled.jpg?w=2048&amp;ssl=1 2048w, https://i0.wp.com/www.smartdroid.de/wp-content/uploads/2025/11/WhatsApp-Logo-Hero-1-scaled.jpg?resize=1200%2C735&amp;ssl=1 1200w, https://i0.wp.com/www.smartdroid.de/wp-content/uploads/2025/11/WhatsApp-Logo-Hero-1-scaled.jpg?resize=1536%2C940&amp;ssl=1 1536w, https://i0.wp.com/www.smartdroid.de/wp-content/uploads/2025/11/WhatsApp-Logo-Hero-1-scaled.jpg?w=1800&amp;ssl=1 1800w" sizes="(max-width: 2048px) 100vw, 2048px"><p>Daumen hoch, Herz, Lachtränen, erstauntes Gesicht, trauriges Gesicht, gefaltete Hände: Wenn ihr in WhatsApp eine Nachricht länger antippt, schlägt euch die App sechs Emoji vor,…</p>
<p>Dieser Artikel <a rel="nofollow" href="https://www.smartdroid.de/whatsapp-diese-aenderung-bei-den-emoji-reaktionen-wuerde-mich-sehr-gluecklich-machen/">WhatsApp: Diese Änderung bei den Emoji-Reaktionen würde mich sehr glücklich machen</a> erschien zuerst auf <a rel="nofollow" href="https://www.smartdroid.de/">SmartDroid.de</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64469 | Linux Kernel up to 7.2-rc2 binder binder_thread_release to_proc use after free (Nessus ID 329983)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.2-rc2. It has been declared as very critical. This affects the function binder_thread_release of the component binder. Such manipulation of the argument to_proc leads to use after free.

This vulnerability is referenced as CVE-2026-64469. It is po...]]></description>
<link>https://tsecurity.de/de/3695421/sicherheitsluecken/cve-2026-64469-linux-kernel-up-to-72-rc2-binder-binderthreadrelease-toproc-use-after-free-nessus-id-329983/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695421/sicherheitsluecken/cve-2026-64469-linux-kernel-up-to-72-rc2-binder-binderthreadrelease-toproc-use-after-free-nessus-id-329983/</guid>
<pubDate>Sun, 26 Jul 2026 11:20:32 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc2</a>. It has been declared as <a href="https://vuldb.com/kb/risk">very critical</a>. This affects the function <code>binder_thread_release</code> of the component <em>binder</em>. Such manipulation of the argument <em>to_proc</em> leads to use after free.

This vulnerability is referenced as <a href="https://vuldb.com/cve/CVE-2026-64469">CVE-2026-64469</a>. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64371 | Linux Kernel up to 7.1.3 procfs ptrace_may_access race condition (Nessus ID 329982)]]></title>
<description><![CDATA[A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.1.3. This issue affects the function ptrace_may_access of the component procfs. This manipulation causes race condition.

This vulnerability is tracked as CVE-2026-64371. The attack is restricted to loc...]]></description>
<link>https://tsecurity.de/de/3695420/sicherheitsluecken/cve-2026-64371-linux-kernel-up-to-713-procfs-ptracemayaccess-race-condition-nessus-id-329982/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695420/sicherheitsluecken/cve-2026-64371-linux-kernel-up-to-713-procfs-ptracemayaccess-race-condition-nessus-id-329982/</guid>
<pubDate>Sun, 26 Jul 2026 11:20:31 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">very critical</a>, has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. This issue affects the function <code>ptrace_may_access</code> of the component <em>procfs</em>. This manipulation causes race condition.

This vulnerability is tracked as <a href="https://vuldb.com/cve/CVE-2026-64371">CVE-2026-64371</a>. The attack is restricted to local execution. No exploit exists.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64395 | Linux Kernel up to 7.1.3 ksmbd vfs_clone_file_range/vfs_copy_file_range information disclosure (Nessus ID 329980)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3. It has been declared as problematic. Affected by this issue is the function vfs_clone_file_range/vfs_copy_file_range of the component ksmbd. Such manipulation leads to information disclosure.

This vulnerabilit...]]></description>
<link>https://tsecurity.de/de/3695418/sicherheitsluecken/cve-2026-64395-linux-kernel-up-to-713-ksmbd-vfsclonefilerangevfscopyfilerange-information-disclosure-nessus-id-329980/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695418/sicherheitsluecken/cve-2026-64395-linux-kernel-up-to-713-ksmbd-vfsclonefilerangevfscopyfilerange-information-disclosure-nessus-id-329980/</guid>
<pubDate>Sun, 26 Jul 2026 11:20:30 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3</a>. It has been declared as <a href="https://vuldb.com/kb/risk">problematic</a>. Affected by this issue is the function <code>vfs_clone_file_range/vfs_copy_file_range</code> of the component <em>ksmbd</em>. Such manipulation leads to information disclosure.

This vulnerability is documented as <a href="https://vuldb.com/cve/CVE-2026-64395">CVE-2026-64395</a>. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64318 | Linux Kernel up to 7.1.3 partitions aix_partition pp_count out-of-bounds (Nessus ID 329981)]]></title>
<description><![CDATA[A vulnerability classified as problematic was found in Linux Kernel up to 7.1.3. This affects the function aix_partition of the component partitions. Executing a manipulation of the argument pp_count can lead to out-of-bounds read.

This vulnerability is registered as CVE-2026-64318. It is possib...]]></description>
<link>https://tsecurity.de/de/3695419/sicherheitsluecken/cve-2026-64318-linux-kernel-up-to-713-partitions-aixpartition-ppcount-out-of-bounds-nessus-id-329981/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695419/sicherheitsluecken/cve-2026-64318-linux-kernel-up-to-713-partitions-aixpartition-ppcount-out-of-bounds-nessus-id-329981/</guid>
<pubDate>Sun, 26 Jul 2026 11:20:30 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">problematic</a> was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. This affects the function <code>aix_partition</code> of the component <em>partitions</em>. Executing a manipulation of the argument <em>pp_count</em> can lead to out-of-bounds read.

This vulnerability is registered as <a href="https://vuldb.com/cve/CVE-2026-64318">CVE-2026-64318</a>. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[Hundreds asked ChatGPT for poison and bioweapon recipes and some got step-by-step high school level guides]]></title>
<description><![CDATA[In summer 2025, OpenAI internally flagged GPT-5 as high-risk because it helped users create biological hazards, but downgraded the model's risk rating that fall. According to the Wall Street Journal, some users got step-by-step instructions for making poisons and biological weapons. Hundreds aske...]]></description>
<link>https://tsecurity.de/de/3695387/ai-nachrichten/hundreds-asked-chatgpt-for-poison-and-bioweapon-recipes-and-some-got-step-by-step-high-school-level-guides/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695387/ai-nachrichten/hundreds-asked-chatgpt-for-poison-and-bioweapon-recipes-and-some-got-step-by-step-high-school-level-guides/</guid>
<pubDate>Sun, 26 Jul 2026 10:54:13 +0200</pubDate>
<category>🔧 AI Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p><img width="1312" height="816" src="https://the-decoder.com/wp-content/uploads/2026/07/chatgpt_bioweapon.png" class="attachment-full size-full wp-post-image" alt="" decoding="async" fetchpriority="high"></p>
<p>        In summer 2025, OpenAI internally flagged GPT-5 as high-risk because it helped users create biological hazards, but downgraded the model's risk rating that fall. According to the Wall Street Journal, some users got step-by-step instructions for making poisons and biological weapons. Hundreds asked for that kind of information.</p>
<p>The article <a href="https://the-decoder.com/hundreds-asked-chatgpt-for-poison-and-bioweapon-recipes-and-some-got-step-by-step-high-school-level-guides/">Hundreds asked ChatGPT for poison and bioweapon recipes and some got step-by-step high school level guides</a> appeared first on <a href="https://the-decoder.com/">The Decoder</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[Windows 11: Copilot-Taste lässt sich jetzt deaktivieren oder neu belegen - it boltwise]]></title>
<description><![CDATA[... Windows Server 2025 erste Bereitschaftsmeldungen für TPM-basierte Nachweise anzeigen, und diese Anforderung wird voraussichtlich mit zukünftigen ...]]></description>
<link>https://tsecurity.de/de/3695371/windows-server/windows-11-copilot-taste-laesst-sich-jetzt-deaktivieren-oder-neu-belegen-it-boltwise/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695371/windows-server/windows-11-copilot-taste-laesst-sich-jetzt-deaktivieren-oder-neu-belegen-it-boltwise/</guid>
<pubDate>Sun, 26 Jul 2026 10:36:45 +0200</pubDate>
<category>🪟 Windows Server</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[... <b>Windows Server</b> 2025 erste Bereitschaftsmeldungen für TPM-basierte Nachweise anzeigen, und diese Anforderung wird voraussichtlich mit zukünftigen ...]]></content:encoded>
</item>
<item>
<title><![CDATA[Deskora Download - Automatischer Desktop-Organizer]]></title>
<description><![CDATA[Der kostenlose Deskora Download organisiert Verknüpfungen, Verzeichnisse und Dateien und bringt so im Handumdrehen Ordnung auf Ihren Windows-Desktop.			(Weiter lesen)]]></description>
<link>https://tsecurity.de/de/3695364/it-security-nachrichten/deskora-download-automatischer-desktop-organizer/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695364/it-security-nachrichten/deskora-download-automatischer-desktop-organizer/</guid>
<pubDate>Sun, 26 Jul 2026 10:30:57 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<a href="https://winfuture.de/download/product/4203/"><img hspace="5" border="0" align="left" alt="Windows, Desktop, Icons, Deskora" width="1920" height="1080" src="https://i.wfcdn.de/teaser/1920/90088.jpg"></a>
			Der kostenlose Deskora Download organisiert Verknüpfungen, Verzeichnisse und Dateien und bringt so im Handumdrehen Ordnung auf Ihren Windows-Desktop.			(<a href="https://winfuture.de/download/product/4203/">Weiter lesen</a>)]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-33746 | ConvoyPanel panel up to 4.5.0 JWTService::decode improper authentication (GHSA-92pg-3w49-4w5x)]]></title>
<description><![CDATA[A vulnerability was found in ConvoyPanel panel up to 4.5.0. It has been rated as critical. This impacts the function JWTService::decode. The manipulation leads to improper authentication.

This vulnerability is referenced as CVE-2026-33746. Remote exploitation of the attack is possible. No exploi...]]></description>
<link>https://tsecurity.de/de/3695351/sicherheitsluecken/cve-2026-33746-convoypanel-panel-up-to-450-jwtservicedecode-improper-authentication-ghsa-92pg-3w49-4w5x/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695351/sicherheitsluecken/cve-2026-33746-convoypanel-panel-up-to-450-jwtservicedecode-improper-authentication-ghsa-92pg-3w49-4w5x/</guid>
<pubDate>Sun, 26 Jul 2026 10:22:34 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/convoypanel:panel">ConvoyPanel panel up to 4.5.0</a>. It has been rated as <a href="https://vuldb.com/kb/risk">critical</a>. This impacts the function <code>JWTService::decode</code>. The manipulation leads to improper authentication.

This vulnerability is referenced as <a href="https://vuldb.com/cve/CVE-2026-33746">CVE-2026-33746</a>. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34974 | thorsten phpMyFAQ up to 4.1.0 SVG SvgSanitizer.php edit_faq cross site scripting (GHSA-5crx-pfhq-4hgg)]]></title>
<description><![CDATA[A vulnerability categorized as problematic has been discovered in thorsten phpMyFAQ up to 4.1.0. Affected by this issue is the function edit_faq of the file SvgSanitizer.php of the component SVG Handler. The manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-202...]]></description>
<link>https://tsecurity.de/de/3695350/sicherheitsluecken/cve-2026-34974-thorsten-phpmyfaq-up-to-410-svg-svgsanitizerphp-editfaq-cross-site-scripting-ghsa-5crx-pfhq-4hgg/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695350/sicherheitsluecken/cve-2026-34974-thorsten-phpmyfaq-up-to-410-svg-svgsanitizerphp-editfaq-cross-site-scripting-ghsa-5crx-pfhq-4hgg/</guid>
<pubDate>Sun, 26 Jul 2026 10:22:33 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability categorized as <a href="https://vuldb.com/kb/risk">problematic</a> has been discovered in <a href="https://vuldb.com/product/thorsten:phpmyfaq">thorsten phpMyFAQ up to 4.1.0</a>. Affected by this issue is the function <code>edit_faq</code> of the file <em>SvgSanitizer.php</em> of the component <em>SVG Handler</em>. The manipulation results in cross site scripting.

This vulnerability is cataloged as <a href="https://vuldb.com/cve/CVE-2026-34974">CVE-2026-34974</a>. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[Metatogger Download - Tag-Editor für Audiodateien]]></title>
<description><![CDATA[Der Download von Metatogger bringt schnell Ordnung in Ihre digitale Musiksammlung, indem es fehlende Metadaten ergänzt und fehlerhafte Daten korrigiert. Metatogger 7.7.2.1 kann automatisch Informationen wie ...			(Weiter lesen)]]></description>
<link>https://tsecurity.de/de/3695329/downloads/metatogger-download-tag-editor-fuer-audiodateien/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695329/downloads/metatogger-download-tag-editor-fuer-audiodateien/</guid>
<pubDate>Sun, 26 Jul 2026 10:09:35 +0200</pubDate>
<category>💾 Downloads</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<a href="https://winfuture.de/download/product/4162/"><img hspace="5" border="0" align="left" alt="Audio, Tags, Metatogger" width="1920" height="1080" src="https://i.wfcdn.de/teaser/1920/81572.png"></a>
			Der Download von Metatogger bringt schnell Ordnung in Ihre digitale Musiksammlung, indem es fehlende Metadaten ergänzt und fehlerhafte Daten korrigiert. Metatogger 7.7.2.1 kann automatisch Informationen wie ...			(<a href="https://winfuture.de/download/product/4162/">Weiter lesen</a>)]]></content:encoded>
</item>
<item>
<title><![CDATA[WinScript Download - Windows anpassen und optimieren]]></title>
<description><![CDATA[Der kostenlose WinScript Download stellt Ihnen verschiedene Werkzeuge bereit, mit denen Sie Windows beschleunigen und entrümpeln und es zudem privater machen. Sie können außerdem essenzielle Programme ...			(Weiter lesen)]]></description>
<link>https://tsecurity.de/de/3695328/downloads/winscript-download-windows-anpassen-und-optimieren/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695328/downloads/winscript-download-windows-anpassen-und-optimieren/</guid>
<pubDate>Sun, 26 Jul 2026 10:09:34 +0200</pubDate>
<category>💾 Downloads</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<a href="https://winfuture.de/download/product/4159/"><img hspace="5" border="0" align="left" alt="Tuning, Optimierung, systemoptimierung, WinScript" width="1920" height="1080" src="https://i.wfcdn.de/teaser/1920/79547.png"></a>
			Der kostenlose WinScript Download stellt Ihnen verschiedene Werkzeuge bereit, mit denen Sie Windows beschleunigen und entrümpeln und es zudem privater machen. Sie können außerdem essenzielle Programme ...			(<a href="https://winfuture.de/download/product/4159/">Weiter lesen</a>)]]></content:encoded>
</item>
<item>
<title><![CDATA[Am 31. Juni ist Schluss: Wer die Steuererklärung 2025 jetzt nicht abgibt, zahlt mindestens 25 Euro pro Monat]]></title>
<description><![CDATA[Millionen Steuerzahler müssen ihre Erklärung für 2025 bis Ende Juli beim Finanzamt einreichen, danach wird automatisch ein Verspätungszuschlag fällig. Dabei lohnt sich die Abgabe!
																					Dieser Artikel wurde einsortiert unter 
																	Download,																	Finanzen & St...]]></description>
<link>https://tsecurity.de/de/3695316/it-nachrichten/am-31-juni-ist-schluss-wer-die-steuererklaerung-2025-jetzt-nicht-abgibt-zahlt-mindestens-25-euro-pro-monat/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695316/it-nachrichten/am-31-juni-ist-schluss-wer-die-steuererklaerung-2025-jetzt-nicht-abgibt-zahlt-mindestens-25-euro-pro-monat/</guid>
<pubDate>Sun, 26 Jul 2026 10:00:21 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[Millionen Steuerzahler müssen ihre Erklärung für 2025 bis Ende Juli beim Finanzamt einreichen, danach wird automatisch ein Verspätungszuschlag fällig. Dabei lohnt sich die Abgabe!
																					Dieser Artikel wurde einsortiert unter 
																	<a href="https://www.netzwelt.de/download/index.html">Download</a>,																	<a href="https://www.netzwelt.de/download/finanzen/index.html">Finanzen &amp; Steuern</a>.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-17434 | nanocoai NanoClaw up to 2.0.64 add_mcp_server request.ts handleAddMcpServer improper authorization (Issue 2762 / EUVD-2026-49049)]]></title>
<description><![CDATA[A vulnerability was found in nanocoai NanoClaw up to 2.0.64. It has been declared as critical. Affected is the function handleAddMcpServer of the file src/modules/self-mod/request.ts of the component add_mcp_server. Executing a manipulation can lead to improper authorization.

The identification ...]]></description>
<link>https://tsecurity.de/de/3695271/sicherheitsluecken/cve-2026-17434-nanocoai-nanoclaw-up-to-2064-addmcpserver-requestts-handleaddmcpserver-improper-authorization-issue-2762-euvd-2026-49049/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695271/sicherheitsluecken/cve-2026-17434-nanocoai-nanoclaw-up-to-2064-addmcpserver-requestts-handleaddmcpserver-improper-authorization-issue-2762-euvd-2026-49049/</guid>
<pubDate>Sun, 26 Jul 2026 09:19:22 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/nanocoai:nanoclaw">nanocoai NanoClaw up to 2.0.64</a>. It has been declared as <a href="https://vuldb.com/kb/risk">critical</a>. Affected is the function <code>handleAddMcpServer</code> of the file <em>src/modules/self-mod/request.ts</em> of the component <em>add_mcp_server</em>. Executing a manipulation can lead to improper authorization.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2026-17434">CVE-2026-17434</a>. The attack may be launched remotely. Furthermore, there is an exploit available.

A patch should be applied to remediate this issue.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-63720 | koxudaxi datamodel-code-generator up to 0.69.x customBasePath code injection (545a96c5 / EUVD-2026-49050)]]></title>
<description><![CDATA[A vulnerability, which was classified as critical, was found in koxudaxi datamodel-code-generator up to 0.69.x. Impacted is an unknown function. The manipulation of the argument customBasePath results in code injection.

This vulnerability is reported as CVE-2026-63720. The attack can be launched...]]></description>
<link>https://tsecurity.de/de/3695269/sicherheitsluecken/cve-2026-63720-koxudaxi-datamodel-code-generator-up-to-069x-custombasepath-code-injection-545a96c5-euvd-2026-49050/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695269/sicherheitsluecken/cve-2026-63720-koxudaxi-datamodel-code-generator-up-to-069x-custombasepath-code-injection-545a96c5-euvd-2026-49050/</guid>
<pubDate>Sun, 26 Jul 2026 09:19:21 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">critical</a>, was found in <a href="https://vuldb.com/product/koxudaxi:datamodel-code-generator">koxudaxi datamodel-code-generator up to 0.69.x</a>. Impacted is an unknown function. The manipulation of the argument <em>customBasePath</em> results in code injection.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-63720">CVE-2026-63720</a>. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-17433 | nanocoai NanoClaw up to 2.0.64 MCP Server Approval chat-sdk-bridge.ts createChatSdkBridge.setup improper authorization (Issue 2761 / EUVD-2026-49048)]]></title>
<description><![CDATA[A vulnerability was found in nanocoai NanoClaw up to 2.0.64. It has been classified as critical. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization.

This...]]></description>
<link>https://tsecurity.de/de/3695270/sicherheitsluecken/cve-2026-17433-nanocoai-nanoclaw-up-to-2064-mcp-server-approval-chat-sdk-bridgets-createchatsdkbridgesetup-improper-authorization-issue-2761-euvd-2026-49048/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695270/sicherheitsluecken/cve-2026-17433-nanocoai-nanoclaw-up-to-2064-mcp-server-approval-chat-sdk-bridgets-createchatsdkbridgesetup-improper-authorization-issue-2761-euvd-2026-49048/</guid>
<pubDate>Sun, 26 Jul 2026 09:19:21 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/nanocoai:nanoclaw">nanocoai NanoClaw up to 2.0.64</a>. It has been classified as <a href="https://vuldb.com/kb/risk">critical</a>. This impacts the function <code>createChatSdkBridge.setup</code> of the file <em>src/channels/chat-sdk-bridge.ts</em> of the component <em>MCP Server Approval</em>. Performing a manipulation results in improper authorization.

This vulnerability was named <a href="https://vuldb.com/cve/CVE-2026-17433">CVE-2026-17433</a>. The attack needs to be approached locally. In addition, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64484 | Linux Kernel up to 7.1.3 ALSA snd_ctl_new1 null pointer dereference (EUVD-2026-48828)]]></title>
<description><![CDATA[A vulnerability described as very critical has been identified in Linux Kernel up to 7.1.3. This vulnerability affects the function snd_ctl_new1 of the component ALSA. Such manipulation leads to null pointer dereference.

This vulnerability is documented as CVE-2026-64484. The attack needs to be ...]]></description>
<link>https://tsecurity.de/de/3695267/sicherheitsluecken/cve-2026-64484-linux-kernel-up-to-713-alsa-sndctlnew1-null-pointer-dereference-euvd-2026-48828/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695267/sicherheitsluecken/cve-2026-64484-linux-kernel-up-to-713-alsa-sndctlnew1-null-pointer-dereference-euvd-2026-48828/</guid>
<pubDate>Sun, 26 Jul 2026 09:19:20 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability described as <a href="https://vuldb.com/kb/risk">very critical</a> has been identified in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. This vulnerability affects the function <code>snd_ctl_new1</code> of the component <em>ALSA</em>. Such manipulation leads to null pointer dereference.

This vulnerability is documented as <a href="https://vuldb.com/cve/CVE-2026-64484">CVE-2026-64484</a>. The attack needs to be performed locally. There is not any exploit available.

Upgrading the affected component is recommended.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64485 | Linux Kernel up to 6.18.38/7.1.3 ALSA: compress snd_compr_task_new allocation of resources (EUVD-2026-48829)]]></title>
<description><![CDATA[A vulnerability has been found in Linux Kernel up to 6.18.38/7.1.3 and classified as very critical. This affects the function snd_compr_task_new of the component ALSA: compress. This manipulation causes allocation of resources.

This vulnerability is handled as CVE-2026-64485. The attack can be i...]]></description>
<link>https://tsecurity.de/de/3695268/sicherheitsluecken/cve-2026-64485-linux-kernel-up-to-61838713-alsa-compress-sndcomprtasknew-allocation-of-resources-euvd-2026-48829/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695268/sicherheitsluecken/cve-2026-64485-linux-kernel-up-to-61838713-alsa-compress-sndcomprtasknew-allocation-of-resources-euvd-2026-48829/</guid>
<pubDate>Sun, 26 Jul 2026 09:19:20 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.18.38/7.1.3</a> and classified as <a href="https://vuldb.com/kb/risk">very critical</a>. This affects the function <code>snd_compr_task_new</code> of the component <em>ALSA: compress</em>. This manipulation causes allocation of resources.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-64485">CVE-2026-64485</a>. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64483 | Linux Kernel up to 7.1.3 ALSA FireWire iSight isight_packet sample_count buffer overflow (EUVD-2026-48827)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.1.3. It has been classified as very critical. Affected by this issue is the function isight_packet of the component ALSA FireWire iSight. Performing a manipulation of the argument sample_count results in buffer overflow.

This vulnerability is ide...]]></description>
<link>https://tsecurity.de/de/3695265/sicherheitsluecken/cve-2026-64483-linux-kernel-up-to-713-alsa-firewire-isight-isightpacket-samplecount-buffer-overflow-euvd-2026-48827/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695265/sicherheitsluecken/cve-2026-64483-linux-kernel-up-to-713-alsa-firewire-isight-isightpacket-samplecount-buffer-overflow-euvd-2026-48827/</guid>
<pubDate>Sun, 26 Jul 2026 09:19:19 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. It has been classified as <a href="https://vuldb.com/kb/risk">very critical</a>. Affected by this issue is the function <code>isight_packet</code> of the component <em>ALSA FireWire iSight</em>. Performing a manipulation of the argument <em>sample_count</em> results in buffer overflow.

This vulnerability is identified as <a href="https://vuldb.com/cve/CVE-2026-64483">CVE-2026-64483</a>. The attack is only possible with local access. There is not any exploit available.

Upgrading the affected component is recommended.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64482 | Linux Kernel up to 7.1.3 ALSA: gus snd_gf1_pcm_volume_control null pointer dereference (EUVD-2026-48826)]]></title>
<description><![CDATA[A vulnerability labeled as critical has been found in Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3. Affected by this issue is the function snd_gf1_pcm_volume_control of the component ALSA: gus. The manipulation results in null pointer dereference.

This vulnerability is cataloged as C...]]></description>
<link>https://tsecurity.de/de/3695266/sicherheitsluecken/cve-2026-64482-linux-kernel-up-to-713-alsa-gus-sndgf1pcmvolumecontrol-null-pointer-dereference-euvd-2026-48826/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695266/sicherheitsluecken/cve-2026-64482-linux-kernel-up-to-713-alsa-gus-sndgf1pcmvolumecontrol-null-pointer-dereference-euvd-2026-48826/</guid>
<pubDate>Sun, 26 Jul 2026 09:19:19 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability labeled as <a href="https://vuldb.com/kb/risk">critical</a> has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3</a>. Affected by this issue is the function <code>snd_gf1_pcm_volume_control</code> of the component <em>ALSA: gus</em>. The manipulation results in null pointer dereference.

This vulnerability is cataloged as <a href="https://vuldb.com/cve/CVE-2026-64482">CVE-2026-64482</a>. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64479 | Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3 ALSA snd_seq_event_dup heap-based overflow (EUVD-2026-48823)]]></title>
<description><![CDATA[A vulnerability categorized as problematic has been discovered in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3. Affected is the function snd_seq_event_dup of the component ALSA. Executing a manipulation can lead to heap-based buffer overflow.

This vulnerability is tracked as CVE-2026-64479. ...]]></description>
<link>https://tsecurity.de/de/3695263/sicherheitsluecken/cve-2026-64479-linux-kernel-up-to-661446129561838713-alsa-sndseqeventdup-heap-based-overflow-euvd-2026-48823/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695263/sicherheitsluecken/cve-2026-64479-linux-kernel-up-to-661446129561838713-alsa-sndseqeventdup-heap-based-overflow-euvd-2026-48823/</guid>
<pubDate>Sun, 26 Jul 2026 09:19:18 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability categorized as <a href="https://vuldb.com/kb/risk">problematic</a> has been discovered in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3</a>. Affected is the function <code>snd_seq_event_dup</code> of the component <em>ALSA</em>. Executing a manipulation can lead to heap-based buffer overflow.

This vulnerability is tracked as <a href="https://vuldb.com/cve/CVE-2026-64479">CVE-2026-64479</a>. The attack is restricted to local execution. No exploit exists.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64481 | Linux Kernel up to 6.12.96/6.18.38/7.1.3 Alsa Hda Cs35l41 cs35l41_remove_dsp privilege escalation (EUVD-2026-48825)]]></title>
<description><![CDATA[A vulnerability marked as very critical has been reported in Linux Kernel up to 6.12.96/6.18.38/7.1.3. This affects the function cs35l41_remove_dsp of the component Alsa Hda Cs35l41. This manipulation causes privilege escalation.

This vulnerability is registered as CVE-2026-64481. Remote exploit...]]></description>
<link>https://tsecurity.de/de/3695264/sicherheitsluecken/cve-2026-64481-linux-kernel-up-to-6129661838713-alsa-hda-cs35l41-cs35l41removedsp-privilege-escalation-euvd-2026-48825/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695264/sicherheitsluecken/cve-2026-64481-linux-kernel-up-to-6129661838713-alsa-hda-cs35l41-cs35l41removedsp-privilege-escalation-euvd-2026-48825/</guid>
<pubDate>Sun, 26 Jul 2026 09:19:18 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">very critical</a> has been reported in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.12.96/6.18.38/7.1.3</a>. This affects the function <code>cs35l41_remove_dsp</code> of the component <em>Alsa Hda Cs35l41</em>. This manipulation causes privilege escalation.

This vulnerability is registered as <a href="https://vuldb.com/cve/CVE-2026-64481">CVE-2026-64481</a>. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[IT Security News Hourly Summary 2026-07-26 09h : 1 posts]]></title>
<description><![CDATA[1 posts were published in the last hour 7:2 : PentesterFlow – AI Tool for Penetration Testers and Bug Hunters to Automate Workflows
Read more →
The post IT Security News Hourly Summary 2026-07-26 09h : 1 posts appeared first on IT Security News.]]></description>
<link>https://tsecurity.de/de/3695262/it-security-nachrichten/it-security-news-hourly-summary-2026-07-26-09h-1-posts/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695262/it-security-nachrichten/it-security-news-hourly-summary-2026-07-26-09h-1-posts/</guid>
<pubDate>Sun, 26 Jul 2026 09:18:02 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>1 posts were published in the last hour 7:2 : PentesterFlow – AI Tool for Penetration Testers and Bug Hunters to Automate Workflows</p>
<p class="more-link-p"><a class="more-link" href="https://www.itsecuritynews.info/it-security-news-hourly-summary-2026-07-26-09h-1-posts/">Read more →</a></p>
<p>The post <a href="https://www.itsecuritynews.info/it-security-news-hourly-summary-2026-07-26-09h-1-posts/">IT Security News Hourly Summary 2026-07-26 09h : 1 posts</a> appeared first on <a href="https://www.itsecuritynews.info/">IT Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34823 | Endian Firewall 3.3.25 Parameter /manage/password/web/ remark cross site scripting]]></title>
<description><![CDATA[A vulnerability marked as problematic has been reported in Endian Firewall 3.3.25. Affected is an unknown function of the file /manage/password/web/ of the component Parameter Handler. This manipulation of the argument remark causes cross site scripting.

This vulnerability is registered as CVE-2...]]></description>
<link>https://tsecurity.de/de/3695229/sicherheitsluecken/cve-2026-34823-endian-firewall-3325-parameter-managepasswordweb-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695229/sicherheitsluecken/cve-2026-34823-endian-firewall-3325-parameter-managepasswordweb-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 08:20:12 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">problematic</a> has been reported in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. Affected is an unknown function of the file <em>/manage/password/web/</em> of the component <em>Parameter Handler</em>. This manipulation of the argument <em>remark</em> causes cross site scripting.

This vulnerability is registered as <a href="https://vuldb.com/cve/CVE-2026-34823">CVE-2026-34823</a>. Remote exploitation of the attack is possible. No exploit is available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34818 | Endian Firewall 3.3.25 Parameter localdomains remark cross site scripting]]></title>
<description><![CDATA[A vulnerability described as problematic has been identified in Endian Firewall 3.3.25. Affected by this vulnerability is an unknown functionality of the file /manage/dnsmasq/localdomains/ of the component Parameter Handler. Such manipulation of the argument remark leads to cross site scripting.
...]]></description>
<link>https://tsecurity.de/de/3695230/sicherheitsluecken/cve-2026-34818-endian-firewall-3325-parameter-localdomains-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695230/sicherheitsluecken/cve-2026-34818-endian-firewall-3325-parameter-localdomains-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 08:20:12 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability described as <a href="https://vuldb.com/kb/risk">problematic</a> has been identified in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. Affected by this vulnerability is an unknown functionality of the file <em>/manage/dnsmasq/localdomains/</em> of the component <em>Parameter Handler</em>. Such manipulation of the argument <em>remark</em> leads to cross site scripting.

This vulnerability is documented as <a href="https://vuldb.com/cve/CVE-2026-34818">CVE-2026-34818</a>. The attack can be executed remotely. There is not any exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34821 | Endian Firewall 3.3.25 Parameter user remark cross site scripting]]></title>
<description><![CDATA[A vulnerability identified as problematic has been detected in Endian Firewall 3.3.25. This affects an unknown function of the file /manage/vpnauthentication/user/ of the component Parameter Handler. The manipulation of the argument remark leads to cross site scripting.

This vulnerability is lis...]]></description>
<link>https://tsecurity.de/de/3695227/sicherheitsluecken/cve-2026-34821-endian-firewall-3325-parameter-user-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695227/sicherheitsluecken/cve-2026-34821-endian-firewall-3325-parameter-user-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 08:20:11 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">problematic</a> has been detected in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. This affects an unknown function of the file <em>/manage/vpnauthentication/user/</em> of the component <em>Parameter Handler</em>. The manipulation of the argument <em>remark</em> leads to cross site scripting.

This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-34821">CVE-2026-34821</a>. The attack may be initiated remotely. There is no available exploit.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34822 | Endian Firewall 3.3.25 Certificate /manage/ca/certificate/ new_cert_name cross site scripting]]></title>
<description><![CDATA[A vulnerability labeled as problematic has been found in Endian Firewall 3.3.25. This impacts an unknown function of the file /manage/ca/certificate/ of the component Certificate Handler. The manipulation of the argument new_cert_name results in cross site scripting.

This vulnerability is catalo...]]></description>
<link>https://tsecurity.de/de/3695228/sicherheitsluecken/cve-2026-34822-endian-firewall-3325-certificate-managecacertificate-newcertname-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695228/sicherheitsluecken/cve-2026-34822-endian-firewall-3325-certificate-managecacertificate-newcertname-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 08:20:11 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability labeled as <a href="https://vuldb.com/kb/risk">problematic</a> has been found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. This impacts an unknown function of the file <em>/manage/ca/certificate/</em> of the component <em>Certificate Handler</em>. The manipulation of the argument <em>new_cert_name</em> results in cross site scripting.

This vulnerability is cataloged as <a href="https://vuldb.com/cve/CVE-2026-34822">CVE-2026-34822</a>. The attack may be launched remotely. There is no exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34819 | Endian Firewall 3.3.25 Parameter openvpnclient.cgi REMARK cross site scripting]]></title>
<description><![CDATA[A vulnerability was found in Endian Firewall 3.3.25. It has been declared as problematic. Impacted is an unknown function of the file /cgi-bin/openvpnclient.cgi of the component Parameter Handler. Such manipulation of the argument REMARK leads to cross site scripting.

This vulnerability is refer...]]></description>
<link>https://tsecurity.de/de/3695225/sicherheitsluecken/cve-2026-34819-endian-firewall-3325-parameter-openvpnclientcgi-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695225/sicherheitsluecken/cve-2026-34819-endian-firewall-3325-parameter-openvpnclientcgi-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 08:20:10 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. It has been declared as <a href="https://vuldb.com/kb/risk">problematic</a>. Impacted is an unknown function of the file <em>/cgi-bin/openvpnclient.cgi</em> of the component <em>Parameter Handler</em>. Such manipulation of the argument <em>REMARK</em> leads to cross site scripting.

This vulnerability is referenced as <a href="https://vuldb.com/cve/CVE-2026-34819">CVE-2026-34819</a>. It is possible to launch the attack remotely. No exploit is available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34820 | Endian Firewall 3.3.25 Parameter /manage/ipsec/ remark cross site scripting]]></title>
<description><![CDATA[A vulnerability categorized as problematic has been discovered in Endian Firewall 3.3.25. The impacted element is an unknown function of the file /manage/ipsec/ of the component Parameter Handler. Executing a manipulation of the argument remark can lead to cross site scripting.

This vulnerabilit...]]></description>
<link>https://tsecurity.de/de/3695226/sicherheitsluecken/cve-2026-34820-endian-firewall-3325-parameter-manageipsec-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695226/sicherheitsluecken/cve-2026-34820-endian-firewall-3325-parameter-manageipsec-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 08:20:10 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability categorized as <a href="https://vuldb.com/kb/risk">problematic</a> has been discovered in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. The impacted element is an unknown function of the file <em>/manage/ipsec/</em> of the component <em>Parameter Handler</em>. Executing a manipulation of the argument <em>remark</em> can lead to cross site scripting.

This vulnerability is tracked as <a href="https://vuldb.com/cve/CVE-2026-34820">CVE-2026-34820</a>. The attack can be launched remotely. No exploit exists.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34815 | Endian Firewall 3.3.25 Parameter /cgi-bin/smtpdomains.cgi DOMAIN cross site scripting]]></title>
<description><![CDATA[A vulnerability, which was classified as problematic, has been found in Endian Firewall 3.3.25. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/smtpdomains.cgi of the component Parameter Handler. Performing a manipulation of the argument DOMAIN results in cross sit...]]></description>
<link>https://tsecurity.de/de/3695223/sicherheitsluecken/cve-2026-34815-endian-firewall-3325-parameter-cgi-binsmtpdomainscgi-domain-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695223/sicherheitsluecken/cve-2026-34815-endian-firewall-3325-parameter-cgi-binsmtpdomainscgi-domain-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 08:20:09 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">problematic</a>, has been found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. Affected by this vulnerability is an unknown functionality of the file <em>/cgi-bin/smtpdomains.cgi</em> of the component <em>Parameter Handler</em>. Performing a manipulation of the argument <em>DOMAIN</em> results in cross site scripting.

This vulnerability is known as <a href="https://vuldb.com/cve/CVE-2026-34815">CVE-2026-34815</a>. Remote exploitation of the attack is possible. No exploit is available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34817 | Endian Firewall 3.3.25 Parameter /cgi-bin/smtprouting.cgi BCC cross site scripting]]></title>
<description><![CDATA[A vulnerability was found in Endian Firewall 3.3.25. It has been rated as problematic. The affected element is an unknown function of the file /cgi-bin/smtprouting.cgi of the component Parameter Handler. Performing a manipulation of the argument BCC results in cross site scripting.

This vulnerab...]]></description>
<link>https://tsecurity.de/de/3695224/sicherheitsluecken/cve-2026-34817-endian-firewall-3325-parameter-cgi-binsmtproutingcgi-bcc-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695224/sicherheitsluecken/cve-2026-34817-endian-firewall-3325-parameter-cgi-binsmtproutingcgi-bcc-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 08:20:09 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. It has been rated as <a href="https://vuldb.com/kb/risk">problematic</a>. The affected element is an unknown function of the file <em>/cgi-bin/smtprouting.cgi</em> of the component <em>Parameter Handler</em>. Performing a manipulation of the argument <em>BCC</em> results in cross site scripting.

This vulnerability is identified as <a href="https://vuldb.com/cve/CVE-2026-34817">CVE-2026-34817</a>. The attack can be initiated remotely. There is not any exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34973 | thorsten phpMyFAQ up to 4.1.0 Search.php searchCustomPages data query logic injection (GHSA-gcp9-5jc8-976x)]]></title>
<description><![CDATA[A vulnerability labeled as problematic has been found in thorsten phpMyFAQ up to 4.1.0. This vulnerability affects the function searchCustomPages of the file phpmyfaq/src/phpMyFAQ/Search.php. Such manipulation leads to improper neutralization of special elements in data query logic.

This vulnera...]]></description>
<link>https://tsecurity.de/de/3695221/sicherheitsluecken/cve-2026-34973-thorsten-phpmyfaq-up-to-410-searchphp-searchcustompages-data-query-logic-injection-ghsa-gcp9-5jc8-976x/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695221/sicherheitsluecken/cve-2026-34973-thorsten-phpmyfaq-up-to-410-searchphp-searchcustompages-data-query-logic-injection-ghsa-gcp9-5jc8-976x/</guid>
<pubDate>Sun, 26 Jul 2026 08:20:08 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability labeled as <a href="https://vuldb.com/kb/risk">problematic</a> has been found in <a href="https://vuldb.com/product/thorsten:phpmyfaq">thorsten phpMyFAQ up to 4.1.0</a>. This vulnerability affects the function <code>searchCustomPages</code> of the file <em>phpmyfaq/src/phpMyFAQ/Search.php</em>. Such manipulation leads to improper neutralization of special elements in data query logic.

This vulnerability is documented as <a href="https://vuldb.com/cve/CVE-2026-34973">CVE-2026-34973</a>. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34816 | Endian Firewall 3.3.25 Parameter domainrouting domain cross site scripting]]></title>
<description><![CDATA[A vulnerability was found in Endian Firewall 3.3.25. It has been classified as problematic. This issue affects some unknown processing of the file /manage/smtpscan/domainrouting/ of the component Parameter Handler. This manipulation of the argument domain causes cross site scripting.

The identif...]]></description>
<link>https://tsecurity.de/de/3695222/sicherheitsluecken/cve-2026-34816-endian-firewall-3325-parameter-domainrouting-domain-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695222/sicherheitsluecken/cve-2026-34816-endian-firewall-3325-parameter-domainrouting-domain-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 08:20:08 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. It has been classified as <a href="https://vuldb.com/kb/risk">problematic</a>. This issue affects some unknown processing of the file <em>/manage/smtpscan/domainrouting/</em> of the component <em>Parameter Handler</em>. This manipulation of the argument <em>domain</em> causes cross site scripting.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2026-34816">CVE-2026-34816</a>. It is possible to initiate the attack remotely. There is no exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64460 | Linux Kernel up to 6.18.38/7.1.3 Pci Iov drivers/pci/iov.c sriov_restore_vf_rebar_state out-of-bounds (Nessus ID 329992)]]></title>
<description><![CDATA[A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.38/7.1.3. The impacted element is the function sriov_restore_vf_rebar_state of the file drivers/pci/iov.c of the component Pci Iov. Such manipulation leads to out-of-bounds read.

This vulnerability is lis...]]></description>
<link>https://tsecurity.de/de/3695203/sicherheitsluecken/cve-2026-64460-linux-kernel-up-to-61838713-pci-iov-driverspciiovc-sriovrestorevfrebarstate-out-of-bounds-nessus-id-329992/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695203/sicherheitsluecken/cve-2026-64460-linux-kernel-up-to-61838713-pci-iov-driverspciiovc-sriovrestorevfrebarstate-out-of-bounds-nessus-id-329992/</guid>
<pubDate>Sun, 26 Jul 2026 07:48:50 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability categorized as <a href="https://vuldb.com/kb/risk">very critical</a> has been discovered in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.18.38/7.1.3</a>. The impacted element is the function <code>sriov_restore_vf_rebar_state</code> of the file <em>drivers/pci/iov.c</em> of the component <em>Pci Iov</em>. Such manipulation leads to out-of-bounds read.

This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-64460">CVE-2026-64460</a>. The attack must be carried out locally. There is no available exploit.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64287 | Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.3 KVM arm64 pKVM hyp vCPU flush_hyp_vcpu used_lrs out-of-bounds (Nessus ID 329989)]]></title>
<description><![CDATA[A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.3. This affects the function flush_hyp_vcpu of the component KVM arm64 pKVM hyp vCPU. This manipulation of the argument used_lrs causes out-of-bounds read.

This vulnerability ...]]></description>
<link>https://tsecurity.de/de/3695200/sicherheitsluecken/cve-2026-64287-linux-kernel-up-to-661446129661839713-kvm-arm64-pkvm-hyp-vcpu-flushhypvcpu-usedlrs-out-of-bounds-nessus-id-329989/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695200/sicherheitsluecken/cve-2026-64287-linux-kernel-up-to-661446129661839713-kvm-arm64-pkvm-hyp-vcpu-flushhypvcpu-usedlrs-out-of-bounds-nessus-id-329989/</guid>
<pubDate>Sun, 26 Jul 2026 07:48:49 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">very critical</a>, has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.3</a>. This affects the function <code>flush_hyp_vcpu</code> of the component <em>KVM arm64 pKVM hyp vCPU</em>. This manipulation of the argument <em>used_lrs</em> causes out-of-bounds read.

This vulnerability appears as <a href="https://vuldb.com/cve/CVE-2026-64287">CVE-2026-64287</a>. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64480 | Linux Kernel up to 7.1.3 ALSA ice1712 driver aureon.c snd_ctl_new1 null pointer dereference (Nessus ID 329990)]]></title>
<description><![CDATA[A vulnerability identified as very critical has been detected in Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3. Affected by this vulnerability is the function snd_ctl_new1 of the file ice1712.c/ice1724.c/aureon.c of the component ALSA ice1712 driver. The manipulation leads to null poin...]]></description>
<link>https://tsecurity.de/de/3695201/sicherheitsluecken/cve-2026-64480-linux-kernel-up-to-713-alsa-ice1712-driver-aureonc-sndctlnew1-null-pointer-dereference-nessus-id-329990/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695201/sicherheitsluecken/cve-2026-64480-linux-kernel-up-to-713-alsa-ice1712-driver-aureonc-sndctlnew1-null-pointer-dereference-nessus-id-329990/</guid>
<pubDate>Sun, 26 Jul 2026 07:48:49 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">very critical</a> has been detected in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3</a>. Affected by this vulnerability is the function <code>snd_ctl_new1</code> of the file <em>ice1712.c/ice1724.c/aureon.c</em> of the component <em>ALSA ice1712 driver</em>. The manipulation leads to null pointer dereference.

This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-64480">CVE-2026-64480</a>. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64416 | Linux Kernel up to 6.12.96/6.18.38/7.1.3 swap_cgroup lookup_swap_cgroup_id null pointer dereference (Nessus ID 329991)]]></title>
<description><![CDATA[A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.12.96/6.18.38/7.1.3. This vulnerability affects the function lookup_swap_cgroup_id of the component swap_cgroup. Executing a manipulation can lead to null pointer dereference.

This vulnerability appears as C...]]></description>
<link>https://tsecurity.de/de/3695202/sicherheitsluecken/cve-2026-64416-linux-kernel-up-to-6129661838713-swapcgroup-lookupswapcgroupid-null-pointer-dereference-nessus-id-329991/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695202/sicherheitsluecken/cve-2026-64416-linux-kernel-up-to-6129661838713-swapcgroup-lookupswapcgroupid-null-pointer-dereference-nessus-id-329991/</guid>
<pubDate>Sun, 26 Jul 2026 07:48:49 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability categorized as <a href="https://vuldb.com/kb/risk">very critical</a> has been discovered in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.12.96/6.18.38/7.1.3</a>. This vulnerability affects the function <code>lookup_swap_cgroup_id</code> of the component <em>swap_cgroup</em>. Executing a manipulation can lead to null pointer dereference.

This vulnerability appears as <a href="https://vuldb.com/cve/CVE-2026-64416">CVE-2026-64416</a>. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64410 | Linux Kernel up to 7.1.3/7.2-rc2 Netfilter Flowtable nf_flow_offload_add Remote Code Execution (Nessus ID 329988)]]></title>
<description><![CDATA[A vulnerability identified as critical has been detected in Linux Kernel up to 7.1.3/7.2-rc2. Affected is the function nf_flow_offload_add of the component Netfilter Flowtable. Performing a manipulation results in Remote Code Execution.

This vulnerability is reported as CVE-2026-64410. The attac...]]></description>
<link>https://tsecurity.de/de/3695198/sicherheitsluecken/cve-2026-64410-linux-kernel-up-to-71372-rc2-netfilter-flowtable-nfflowoffloadadd-remote-code-execution-nessus-id-329988/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695198/sicherheitsluecken/cve-2026-64410-linux-kernel-up-to-71372-rc2-netfilter-flowtable-nfflowoffloadadd-remote-code-execution-nessus-id-329988/</guid>
<pubDate>Sun, 26 Jul 2026 07:48:48 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">critical</a> has been detected in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3/7.2-rc2</a>. Affected is the function <code>nf_flow_offload_add</code> of the component <em>Netfilter Flowtable</em>. Performing a manipulation results in Remote Code Execution.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-64410">CVE-2026-64410</a>. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64418 | Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc2 shrinker alloc_shrinker_info/expand_shrinker_info use after free (Nessus ID 329987)]]></title>
<description><![CDATA[A vulnerability classified as very critical was found in Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc2. This issue affects the function alloc_shrinker_info/expand_shrinker_info of the component shrinker. Such manipulation leads to use after free.

This vulnerability is uniquely identified as C...]]></description>
<link>https://tsecurity.de/de/3695199/sicherheitsluecken/cve-2026-64418-linux-kernel-up-to-612956183871372-rc2-shrinker-allocshrinkerinfoexpandshrinkerinfo-use-after-free-nessus-id-329987/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695199/sicherheitsluecken/cve-2026-64418-linux-kernel-up-to-612956183871372-rc2-shrinker-allocshrinkerinfoexpandshrinkerinfo-use-after-free-nessus-id-329987/</guid>
<pubDate>Sun, 26 Jul 2026 07:48:48 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">very critical</a> was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc2</a>. This issue affects the function <code>alloc_shrinker_info/expand_shrinker_info</code> of the component <em>shrinker</em>. Such manipulation leads to use after free.

This vulnerability is uniquely identified as <a href="https://vuldb.com/cve/CVE-2026-64418">CVE-2026-64418</a>. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64362 | Linux Kernel up to 7.2-rc2 HID lg-g15 lg_g15_event use after free (Nessus ID 329984)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.2-rc2. It has been classified as critical. Impacted is the function lg_g15_event of the component HID lg-g15. Performing a manipulation results in use after free.

This vulnerability is reported as CVE-2026-64362. The attack requires a local appro...]]></description>
<link>https://tsecurity.de/de/3695197/sicherheitsluecken/cve-2026-64362-linux-kernel-up-to-72-rc2-hid-lg-g15-lgg15event-use-after-free-nessus-id-329984/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695197/sicherheitsluecken/cve-2026-64362-linux-kernel-up-to-72-rc2-hid-lg-g15-lgg15event-use-after-free-nessus-id-329984/</guid>
<pubDate>Sun, 26 Jul 2026 07:48:47 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc2</a>. It has been classified as <a href="https://vuldb.com/kb/risk">critical</a>. Impacted is the function <code>lg_g15_event</code> of the component <em>HID lg-g15</em>. Performing a manipulation results in use after free.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-64362">CVE-2026-64362</a>. The attack requires a local approach. No exploit exists.

Upgrading the affected component is recommended.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64348 | Linux Kernel up to 7.2-rc2 USB iso_stream_schedule hcpriv memory leak (Nessus ID 329985)]]></title>
<description><![CDATA[A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.2-rc2. Affected is the function iso_stream_schedule of the component USB. Executing a manipulation of the argument hcpriv can lead to memory leak.

This vulnerability is registered as CVE-2026-64348. It is p...]]></description>
<link>https://tsecurity.de/de/3695195/sicherheitsluecken/cve-2026-64348-linux-kernel-up-to-72-rc2-usb-isostreamschedule-hcpriv-memory-leak-nessus-id-329985/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695195/sicherheitsluecken/cve-2026-64348-linux-kernel-up-to-72-rc2-usb-isostreamschedule-hcpriv-memory-leak-nessus-id-329985/</guid>
<pubDate>Sun, 26 Jul 2026 07:48:46 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">very critical</a>, was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc2</a>. Affected is the function <code>iso_stream_schedule</code> of the component <em>USB</em>. Executing a manipulation of the argument <em>hcpriv</em> can lead to memory leak.

This vulnerability is registered as <a href="https://vuldb.com/cve/CVE-2026-64348">CVE-2026-64348</a>. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64338 | Linux Kernel up to 7.2-rc2 uss720 uss720_probe allocation of resources (Nessus ID 329986)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.2-rc2. It has been rated as problematic. Affected by this issue is the function uss720_probe of the component uss720. This manipulation causes allocation of resources.

This vulnerability is handled as CVE-2026-64338. It is possible to launch the ...]]></description>
<link>https://tsecurity.de/de/3695196/sicherheitsluecken/cve-2026-64338-linux-kernel-up-to-72-rc2-uss720-uss720probe-allocation-of-resources-nessus-id-329986/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695196/sicherheitsluecken/cve-2026-64338-linux-kernel-up-to-72-rc2-uss720-uss720probe-allocation-of-resources-nessus-id-329986/</guid>
<pubDate>Sun, 26 Jul 2026 07:48:46 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc2</a>. It has been rated as <a href="https://vuldb.com/kb/risk">problematic</a>. Affected by this issue is the function <code>uss720_probe</code> of the component <em>uss720</em>. This manipulation causes allocation of resources.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-64338">CVE-2026-64338</a>. It is possible to launch the attack on the local host. There is not any exploit available.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64412 | Linux Kernel up to 7.2-rc2 ebtables request_module buffer over-read (Nessus ID 329997)]]></title>
<description><![CDATA[A vulnerability marked as very critical has been reported in Linux Kernel up to 7.2-rc2. Affected by this issue is the function request_module of the component ebtables. The manipulation leads to buffer over-read.

This vulnerability is traded as CVE-2026-64412. It is possible to initiate the att...]]></description>
<link>https://tsecurity.de/de/3695164/sicherheitsluecken/cve-2026-64412-linux-kernel-up-to-72-rc2-ebtables-requestmodule-buffer-over-read-nessus-id-329997/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695164/sicherheitsluecken/cve-2026-64412-linux-kernel-up-to-72-rc2-ebtables-requestmodule-buffer-over-read-nessus-id-329997/</guid>
<pubDate>Sun, 26 Jul 2026 06:50:22 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">very critical</a> has been reported in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc2</a>. Affected by this issue is the function <code>request_module</code> of the component <em>ebtables</em>. The manipulation leads to buffer over-read.

This vulnerability is traded as <a href="https://vuldb.com/cve/CVE-2026-64412">CVE-2026-64412</a>. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64471 | Linux Kernel up to 7.1.3 Btusb use after free (Nessus ID 329993)]]></title>
<description><![CDATA[A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.1.3. Affected by this vulnerability is an unknown functionality of the component Btusb. This manipulation causes use after free.

This vulnerability is handled as CVE-2026-64471. It is possible to launc...]]></description>
<link>https://tsecurity.de/de/3695162/sicherheitsluecken/cve-2026-64471-linux-kernel-up-to-713-btusb-use-after-free-nessus-id-329993/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695162/sicherheitsluecken/cve-2026-64471-linux-kernel-up-to-713-btusb-use-after-free-nessus-id-329993/</guid>
<pubDate>Sun, 26 Jul 2026 06:50:21 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">very critical</a>, has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. Affected by this vulnerability is an unknown functionality of the component <em>Btusb</em>. This manipulation causes use after free.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-64471">CVE-2026-64471</a>. It is possible to launch the attack on the local host. There is not any exploit available.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64323 | Linux Kernel up to 7.1.3 UDF udf_load_vat/udf_get_pblock_virt15 lengthHeader/i_size out-of-bounds (Nessus ID 329996)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.1.3. It has been rated as problematic. This impacts the function udf_load_vat/udf_get_pblock_virt15 of the component UDF. The manipulation of the argument lengthHeader/i_size leads to out-of-bounds read.

This vulnerability is uniquely identified ...]]></description>
<link>https://tsecurity.de/de/3695163/sicherheitsluecken/cve-2026-64323-linux-kernel-up-to-713-udf-udfloadvatudfgetpblockvirt15-lengthheaderisize-out-of-bounds-nessus-id-329996/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695163/sicherheitsluecken/cve-2026-64323-linux-kernel-up-to-713-udf-udfloadvatudfgetpblockvirt15-lengthheaderisize-out-of-bounds-nessus-id-329996/</guid>
<pubDate>Sun, 26 Jul 2026 06:50:21 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. It has been rated as <a href="https://vuldb.com/kb/risk">problematic</a>. This impacts the function <code>udf_load_vat/udf_get_pblock_virt15</code> of the component <em>UDF</em>. The manipulation of the argument <em>lengthHeader/i_size</em> leads to out-of-bounds read.

This vulnerability is uniquely identified as <a href="https://vuldb.com/cve/CVE-2026-64323">CVE-2026-64323</a>. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64470 | Linux Kernel up to 7.1.3 btusb btusb.c btusb_probe use after free (Nessus ID 329995)]]></title>
<description><![CDATA[A vulnerability classified as very critical was found in Linux Kernel up to 7.1.3. Affected is the function btusb_probe of the file btusb.c of the component btusb. The manipulation results in use after free.

This vulnerability is known as CVE-2026-64470. Attacking locally is a requirement. No ex...]]></description>
<link>https://tsecurity.de/de/3695161/sicherheitsluecken/cve-2026-64470-linux-kernel-up-to-713-btusb-btusbc-btusbprobe-use-after-free-nessus-id-329995/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695161/sicherheitsluecken/cve-2026-64470-linux-kernel-up-to-713-btusb-btusbc-btusbprobe-use-after-free-nessus-id-329995/</guid>
<pubDate>Sun, 26 Jul 2026 06:50:20 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">very critical</a> was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. Affected is the function <code>btusb_probe</code> of the file <em>btusb.c</em> of the component <em>btusb</em>. The manipulation results in use after free.

This vulnerability is known as <a href="https://vuldb.com/cve/CVE-2026-64470">CVE-2026-64470</a>. Attacking locally is a requirement. No exploit is available.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64522 | Linux Kernel up to 6.18.33/7.0.10 eswitch mode net/mlx5e mlx5e_xfrm_add_state off-by-one (EUVD-2026-48866)]]></title>
<description><![CDATA[A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.33/7.0.10. Affected is the function mlx5e_xfrm_add_state of the file net/mlx5e of the component eswitch mode. The manipulation results in off-by-one.

This vulnerability is identified as CVE-2026-64522. The attack ...]]></description>
<link>https://tsecurity.de/de/3695120/sicherheitsluecken/cve-2026-64522-linux-kernel-up-to-618337010-eswitch-mode-netmlx5e-mlx5exfrmaddstate-off-by-one-euvd-2026-48866/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695120/sicherheitsluecken/cve-2026-64522-linux-kernel-up-to-618337010-eswitch-mode-netmlx5e-mlx5exfrmaddstate-off-by-one-euvd-2026-48866/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:24 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability labeled as <a href="https://vuldb.com/kb/risk">very critical</a> has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.18.33/7.0.10</a>. Affected is the function <code>mlx5e_xfrm_add_state</code> of the file <em>net/mlx5e</em> of the component <em>eswitch mode</em>. The manipulation results in off-by-one.

This vulnerability is identified as <a href="https://vuldb.com/cve/CVE-2026-64522">CVE-2026-64522</a>. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64517 | Linux Kernel up to 6.12.91/6.18.33/7.0.10 GSC xe_gsc_init_post_hwconfig double free (EUVD-2026-48861)]]></title>
<description><![CDATA[A vulnerability described as very critical has been identified in Linux Kernel up to 6.12.91/6.18.33/7.0.10. This impacts the function xe_gsc_init_post_hwconfig of the component GSC. The manipulation results in double free.

This vulnerability is cataloged as CVE-2026-64517. The attack may be lau...]]></description>
<link>https://tsecurity.de/de/3695115/sicherheitsluecken/cve-2026-64517-linux-kernel-up-to-61291618337010-gsc-xegscinitposthwconfig-double-free-euvd-2026-48861/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695115/sicherheitsluecken/cve-2026-64517-linux-kernel-up-to-61291618337010-gsc-xegscinitposthwconfig-double-free-euvd-2026-48861/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:23 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability described as <a href="https://vuldb.com/kb/risk">very critical</a> has been identified in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.12.91/6.18.33/7.0.10</a>. This impacts the function <code>xe_gsc_init_post_hwconfig</code> of the component <em>GSC</em>. The manipulation results in double free.

This vulnerability is cataloged as <a href="https://vuldb.com/cve/CVE-2026-64517">CVE-2026-64517</a>. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64518 | Linux Kernel up to 6.12.91/6.18.33/7.0.10 Tcp Ao Established Key tcp_ao_established_key out-of-bounds (EUVD-2026-48862)]]></title>
<description><![CDATA[A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.91/6.18.33/7.0.10. Affected is the function tcp_ao_established_key of the component Tcp Ao Established Key. This manipulation causes out-of-bounds read.

This vulnerability is registered as CVE-2026-64518. Remot...]]></description>
<link>https://tsecurity.de/de/3695116/sicherheitsluecken/cve-2026-64518-linux-kernel-up-to-61291618337010-tcp-ao-established-key-tcpaoestablishedkey-out-of-bounds-euvd-2026-48862/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695116/sicherheitsluecken/cve-2026-64518-linux-kernel-up-to-61291618337010-tcp-ao-established-key-tcpaoestablishedkey-out-of-bounds-euvd-2026-48862/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:23 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">very critical</a> has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.12.91/6.18.33/7.0.10</a>. Affected is the function <code>tcp_ao_established_key</code> of the component <em>Tcp Ao Established Key</em>. This manipulation causes out-of-bounds read.

This vulnerability is registered as <a href="https://vuldb.com/cve/CVE-2026-64518">CVE-2026-64518</a>. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64519 | Linux Kernel up to 6.12.91/6.18.33/7.0.10 NFSD nfsd4_revoke_states infinite loop (EUVD-2026-48863)]]></title>
<description><![CDATA[A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.91/6.18.33/7.0.10. This affects the function nfsd4_revoke_states of the component NFSD. Executing a manipulation can lead to infinite loop.

The identification of this vulnerability is CVE-2026-64519. The attac...]]></description>
<link>https://tsecurity.de/de/3695117/sicherheitsluecken/cve-2026-64519-linux-kernel-up-to-61291618337010-nfsd-nfsd4revokestates-infinite-loop-euvd-2026-48863/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695117/sicherheitsluecken/cve-2026-64519-linux-kernel-up-to-61291618337010-nfsd-nfsd4revokestates-infinite-loop-euvd-2026-48863/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:23 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability categorized as <a href="https://vuldb.com/kb/risk">critical</a> has been discovered in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.12.91/6.18.33/7.0.10</a>. This affects the function <code>nfsd4_revoke_states</code> of the component <em>NFSD</em>. Executing a manipulation can lead to infinite loop.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2026-64519">CVE-2026-64519</a>. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64520 | Linux Kernel up to 6.18.33/7.0.10 arm_ffa buffer overflow (EUVD-2026-48864)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 6.18.33/7.0.10. It has been rated as very critical. The impacted element is an unknown function of the component arm_ffa. Performing a manipulation results in buffer overflow.

This vulnerability was named CVE-2026-64520. The attack may be initiated...]]></description>
<link>https://tsecurity.de/de/3695118/sicherheitsluecken/cve-2026-64520-linux-kernel-up-to-618337010-armffa-buffer-overflow-euvd-2026-48864/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695118/sicherheitsluecken/cve-2026-64520-linux-kernel-up-to-618337010-armffa-buffer-overflow-euvd-2026-48864/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:23 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.18.33/7.0.10</a>. It has been rated as <a href="https://vuldb.com/kb/risk">very critical</a>. The impacted element is an unknown function of the component <em>arm_ffa</em>. Performing a manipulation results in buffer overflow.

This vulnerability was named <a href="https://vuldb.com/cve/CVE-2026-64520">CVE-2026-64520</a>. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64521 | Linux Kernel up to 6.18.33/7.0.10 pinctrl pinconf_pins_show deadlock (EUVD-2026-48865)]]></title>
<description><![CDATA[A vulnerability identified as problematic has been detected in Linux Kernel up to 6.18.33/7.0.10. This impacts the function pinconf_pins_show of the component pinctrl. The manipulation leads to deadlock.

This vulnerability is referenced as CVE-2026-64521. The attack can only be performed from a ...]]></description>
<link>https://tsecurity.de/de/3695119/sicherheitsluecken/cve-2026-64521-linux-kernel-up-to-618337010-pinctrl-pinconfpinsshow-deadlock-euvd-2026-48865/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695119/sicherheitsluecken/cve-2026-64521-linux-kernel-up-to-618337010-pinctrl-pinconfpinsshow-deadlock-euvd-2026-48865/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:23 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">problematic</a> has been detected in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.18.33/7.0.10</a>. This impacts the function <code>pinconf_pins_show</code> of the component <em>pinctrl</em>. The manipulation leads to deadlock.

This vulnerability is referenced as <a href="https://vuldb.com/cve/CVE-2026-64521">CVE-2026-64521</a>. The attack can only be performed from a local environment. No exploit is available.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64513 | Linux Kernel up to 6.18.38/7.1.3 KVM handle_tpr_below_threshold denial of service (EUVD-2026-48857)]]></title>
<description><![CDATA[A vulnerability has been found in Linux Kernel up to 6.18.38/7.1.3 and classified as critical. Affected by this vulnerability is the function handle_tpr_below_threshold of the component KVM. Performing a manipulation results in denial of service.

This vulnerability is known as CVE-2026-64513. Re...]]></description>
<link>https://tsecurity.de/de/3695111/sicherheitsluecken/cve-2026-64513-linux-kernel-up-to-61838713-kvm-handletprbelowthreshold-denial-of-service-euvd-2026-48857/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695111/sicherheitsluecken/cve-2026-64513-linux-kernel-up-to-61838713-kvm-handletprbelowthreshold-denial-of-service-euvd-2026-48857/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:22 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.18.38/7.1.3</a> and classified as <a href="https://vuldb.com/kb/risk">critical</a>. Affected by this vulnerability is the function <code>handle_tpr_below_threshold</code> of the component <em>KVM</em>. Performing a manipulation results in denial of service.

This vulnerability is known as <a href="https://vuldb.com/cve/CVE-2026-64513">CVE-2026-64513</a>. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64515 | Linux Kernel up to 6.12.91/6.18.33/7.0.10 mac80211 defragmentation routine heap-based overflow (EUVD-2026-48859)]]></title>
<description><![CDATA[A vulnerability labeled as very critical has been found in Linux Kernel up to 6.12.91/6.18.33/7.0.10. The impacted element is the function defragmentation routine of the component mac80211. Executing a manipulation can lead to heap-based buffer overflow.

This vulnerability is tracked as CVE-2026...]]></description>
<link>https://tsecurity.de/de/3695112/sicherheitsluecken/cve-2026-64515-linux-kernel-up-to-61291618337010-mac80211-defragmentation-routine-heap-based-overflow-euvd-2026-48859/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695112/sicherheitsluecken/cve-2026-64515-linux-kernel-up-to-61291618337010-mac80211-defragmentation-routine-heap-based-overflow-euvd-2026-48859/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:22 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability labeled as <a href="https://vuldb.com/kb/risk">very critical</a> has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.12.91/6.18.33/7.0.10</a>. The impacted element is the function <code>defragmentation routine</code> of the component <em>mac80211</em>. Executing a manipulation can lead to heap-based buffer overflow.

This vulnerability is tracked as <a href="https://vuldb.com/cve/CVE-2026-64515">CVE-2026-64515</a>. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64516 | Linux Kernel up to 7.0.10 Drm Amgpu Vce1 drm/amdgpu/vce1 out-of-bounds (EUVD-2026-48860)]]></title>
<description><![CDATA[A vulnerability marked as very critical has been reported in Linux Kernel up to 7.0.10. This affects an unknown function of the file drm/amdgpu/vce1 of the component Drm Amgpu Vce1. The manipulation leads to out-of-bounds read.

This vulnerability is listed as CVE-2026-64516. The attack may be in...]]></description>
<link>https://tsecurity.de/de/3695113/sicherheitsluecken/cve-2026-64516-linux-kernel-up-to-7010-drm-amgpu-vce1-drmamdgpuvce1-out-of-bounds-euvd-2026-48860/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695113/sicherheitsluecken/cve-2026-64516-linux-kernel-up-to-7010-drm-amgpu-vce1-drmamdgpuvce1-out-of-bounds-euvd-2026-48860/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:22 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">very critical</a> has been reported in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.0.10</a>. This affects an unknown function of the file <em>drm/amdgpu/vce1</em> of the component <em>Drm Amgpu Vce1</em>. The manipulation leads to out-of-bounds read.

This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-64516">CVE-2026-64516</a>. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64514 | Linux Kernel up to 7.1.3 userfaultfd userfaultfd_must_wait/userfaultfd_huge_must_wait encoding error (EUVD-2026-48858)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.1.3. It has been declared as very critical. The affected element is the function userfaultfd_must_wait/userfaultfd_huge_must_wait of the component userfaultfd. Such manipulation leads to encoding error.

This vulnerability is uniquely identified a...]]></description>
<link>https://tsecurity.de/de/3695114/sicherheitsluecken/cve-2026-64514-linux-kernel-up-to-713-userfaultfd-userfaultfdmustwaituserfaultfdhugemustwait-encoding-error-euvd-2026-48858/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695114/sicherheitsluecken/cve-2026-64514-linux-kernel-up-to-713-userfaultfd-userfaultfdmustwaituserfaultfdhugemustwait-encoding-error-euvd-2026-48858/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:22 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. It has been declared as <a href="https://vuldb.com/kb/risk">very critical</a>. The affected element is the function <code>userfaultfd_must_wait/userfaultfd_huge_must_wait</code> of the component <em>userfaultfd</em>. Such manipulation leads to encoding error.

This vulnerability is uniquely identified as <a href="https://vuldb.com/cve/CVE-2026-64514">CVE-2026-64514</a>. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-66038 | FFmpeg up to 8.1.2 LCL/ZLIB Video Decoder lcldec.c zlib_decomp information disclosure (Nessus ID 329734)]]></title>
<description><![CDATA[A vulnerability was found in FFmpeg up to 8.1.2. It has been classified as problematic. This affects the function zlib_decomp of the file lcldec.c of the component LCL/ZLIB Video Decoder. This manipulation causes information disclosure.

This vulnerability is tracked as CVE-2026-66038. The attack...]]></description>
<link>https://tsecurity.de/de/3695106/sicherheitsluecken/cve-2026-66038-ffmpeg-up-to-812-lclzlib-video-decoder-lcldecc-zlibdecomp-information-disclosure-nessus-id-329734/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695106/sicherheitsluecken/cve-2026-66038-ffmpeg-up-to-812-lclzlib-video-decoder-lcldecc-zlibdecomp-information-disclosure-nessus-id-329734/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:21 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/ffmpeg">FFmpeg up to 8.1.2</a>. It has been classified as <a href="https://vuldb.com/kb/risk">problematic</a>. This affects the function <code>zlib_decomp</code> of the file <em>lcldec.c</em> of the component <em>LCL/ZLIB Video Decoder</em>. This manipulation causes information disclosure.

This vulnerability is tracked as <a href="https://vuldb.com/cve/CVE-2026-66038">CVE-2026-66038</a>. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to install a patch to address this issue.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-66041 | FFmpeg up to 8.1.2 vf_quirc filter av_image_copy_plane out-of-bounds write (Nessus ID 329731)]]></title>
<description><![CDATA[A vulnerability was found in FFmpeg up to 8.1.2. It has been rated as critical. Affected is the function av_image_copy_plane of the component vf_quirc filter. Performing a manipulation results in out-of-bounds write.

This vulnerability is cataloged as CVE-2026-66041. It is possible to initiate t...]]></description>
<link>https://tsecurity.de/de/3695107/sicherheitsluecken/cve-2026-66041-ffmpeg-up-to-812-vfquirc-filter-avimagecopyplane-out-of-bounds-write-nessus-id-329731/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695107/sicherheitsluecken/cve-2026-66041-ffmpeg-up-to-812-vfquirc-filter-avimagecopyplane-out-of-bounds-write-nessus-id-329731/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:21 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/ffmpeg">FFmpeg up to 8.1.2</a>. It has been rated as <a href="https://vuldb.com/kb/risk">critical</a>. Affected is the function <code>av_image_copy_plane</code> of the component <em>vf_quirc filter</em>. Performing a manipulation results in out-of-bounds write.

This vulnerability is cataloged as <a href="https://vuldb.com/cve/CVE-2026-66041">CVE-2026-66041</a>. It is possible to initiate the attack remotely. There is no exploit available.

To fix this issue, it is recommended to deploy a patch.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64511 | Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3 ACPI NFIT Core drivers/acpi/nfit/core.c acpi_nfit_uc_error_notify null pointer dereference (EUVD-2026-48855)]]></title>
<description><![CDATA[A vulnerability identified as problematic has been detected in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3. The affected element is the function acpi_nfit_uc_error_notify of the file drivers/acpi/nfit/core.c of the component ACPI NFIT Core. Performing a manipulation results in null pointer d...]]></description>
<link>https://tsecurity.de/de/3695108/sicherheitsluecken/cve-2026-64511-linux-kernel-up-to-661446129561838713-acpi-nfit-core-driversacpinfitcorec-acpinfitucerrornotify-null-pointer-dereference-euvd-2026-48855/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695108/sicherheitsluecken/cve-2026-64511-linux-kernel-up-to-661446129561838713-acpi-nfit-core-driversacpinfitcorec-acpinfitucerrornotify-null-pointer-dereference-euvd-2026-48855/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:21 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">problematic</a> has been detected in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3</a>. The affected element is the function <code>acpi_nfit_uc_error_notify</code> of the file <em>drivers/acpi/nfit/core.c</em> of the component <em>ACPI NFIT Core</em>. Performing a manipulation results in null pointer dereference.

This vulnerability is identified as <a href="https://vuldb.com/cve/CVE-2026-64511">CVE-2026-64511</a>. The attack is only possible with local access. There is not any exploit available.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64510 | Linux Kernel up to 7.1.3 Nfit Core acpi_nfit_init use after free (EUVD-2026-48854)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.1.3. It has been classified as very critical. Impacted is the function acpi_nfit_init of the component Nfit Core. This manipulation causes use after free.

This vulnerability is handled as CVE-2026-64510. It is possible to launch the attack on the...]]></description>
<link>https://tsecurity.de/de/3695109/sicherheitsluecken/cve-2026-64510-linux-kernel-up-to-713-nfit-core-acpinfitinit-use-after-free-euvd-2026-48854/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695109/sicherheitsluecken/cve-2026-64510-linux-kernel-up-to-713-nfit-core-acpinfitinit-use-after-free-euvd-2026-48854/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:21 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. It has been classified as <a href="https://vuldb.com/kb/risk">very critical</a>. Impacted is the function <code>acpi_nfit_init</code> of the component <em>Nfit Core</em>. This manipulation causes use after free.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-64510">CVE-2026-64510</a>. It is possible to launch the attack on the local host. There is not any exploit available.

Upgrading the affected component is recommended.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64512 | Linux Kernel up to 7.1.3 Cppc drivers/acpi/cppc_acpi.c cpc_write access_width out-of-bounds (EUVD-2026-48856)]]></title>
<description><![CDATA[A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.1.3. This impacts the function cpc_write of the file drivers/acpi/cppc_acpi.c of the component Cppc. This manipulation of the argument access_width causes out-of-bounds read.

This vulnerability appears as C...]]></description>
<link>https://tsecurity.de/de/3695110/sicherheitsluecken/cve-2026-64512-linux-kernel-up-to-713-cppc-driversacpicppcacpic-cpcwrite-accesswidth-out-of-bounds-euvd-2026-48856/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695110/sicherheitsluecken/cve-2026-64512-linux-kernel-up-to-713-cppc-driversacpicppcacpic-cpcwrite-accesswidth-out-of-bounds-euvd-2026-48856/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:21 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">critical</a>, has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. This impacts the function <code>cpc_write</code> of the file <em>drivers/acpi/cppc_acpi.c</em> of the component <em>Cppc</em>. This manipulation of the argument <em>access_width</em> causes out-of-bounds read.

This vulnerability appears as <a href="https://vuldb.com/cve/CVE-2026-64512">CVE-2026-64512</a>. The attack requires local access. There is no available exploit.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-66039 | FFmpeg up to 8.1.2 MACE6 Audio Decoder mace_decode_frame bytes_per_packet integer overflow (Nessus ID 329729)]]></title>
<description><![CDATA[A vulnerability was found in FFmpeg up to 8.1.2. It has been declared as critical. This impacts the function mace_decode_frame of the component MACE6 Audio Decoder. Such manipulation of the argument bytes_per_packet leads to integer overflow.

This vulnerability is listed as CVE-2026-66039. The a...]]></description>
<link>https://tsecurity.de/de/3695103/sicherheitsluecken/cve-2026-66039-ffmpeg-up-to-812-mace6-audio-decoder-macedecodeframe-bytesperpacket-integer-overflow-nessus-id-329729/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695103/sicherheitsluecken/cve-2026-66039-ffmpeg-up-to-812-mace6-audio-decoder-macedecodeframe-bytesperpacket-integer-overflow-nessus-id-329729/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:20 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/ffmpeg">FFmpeg up to 8.1.2</a>. It has been declared as <a href="https://vuldb.com/kb/risk">critical</a>. This impacts the function <code>mace_decode_frame</code> of the component <em>MACE6 Audio Decoder</em>. Such manipulation of the argument <em>bytes_per_packet</em> leads to integer overflow.

This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-66039">CVE-2026-66039</a>. The attack may be performed from remote. There is no available exploit.

A patch should be applied to remediate this issue.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-66374 | nic Knot Resolver up to 6.4.0 DNS-over-QUIC buffer overflow (Nessus ID 329728)]]></title>
<description><![CDATA[A vulnerability was found in nic Knot Resolver up to 6.4.0. It has been declared as critical. Affected by this issue is some unknown functionality of the component DNS-over-QUIC. Executing a manipulation can lead to buffer overflow.

This vulnerability is tracked as CVE-2026-66374. The attack can...]]></description>
<link>https://tsecurity.de/de/3695104/sicherheitsluecken/cve-2026-66374-nic-knot-resolver-up-to-640-dns-over-quic-buffer-overflow-nessus-id-329728/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695104/sicherheitsluecken/cve-2026-66374-nic-knot-resolver-up-to-640-dns-over-quic-buffer-overflow-nessus-id-329728/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:20 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/nic:knot_resolver">nic Knot Resolver up to 6.4.0</a>. It has been declared as <a href="https://vuldb.com/kb/risk">critical</a>. Affected by this issue is some unknown functionality of the component <em>DNS-over-QUIC</em>. Executing a manipulation can lead to buffer overflow.

This vulnerability is tracked as <a href="https://vuldb.com/cve/CVE-2026-66374">CVE-2026-66374</a>. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-15037 | Qt XML up to 6.11.x QDom xml injection (Nessus ID 329733)]]></title>
<description><![CDATA[A vulnerability categorized as critical has been discovered in Qt XML up to 6.11.x. This vulnerability affects unknown code of the component QDom. The manipulation results in xml injection.

This vulnerability is reported as CVE-2026-15037. The attack can be launched remotely. No exploit exists.
...]]></description>
<link>https://tsecurity.de/de/3695105/sicherheitsluecken/cve-2026-15037-qt-xml-up-to-611x-qdom-xml-injection-nessus-id-329733/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695105/sicherheitsluecken/cve-2026-15037-qt-xml-up-to-611x-qdom-xml-injection-nessus-id-329733/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:20 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability categorized as <a href="https://vuldb.com/kb/risk">critical</a> has been discovered in <a href="https://vuldb.com/product/qt:xml">Qt XML up to 6.11.x</a>. This vulnerability affects unknown code of the component <em>QDom</em>. The manipulation results in xml injection.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-15037">CVE-2026-15037</a>. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-5212 | D-Link DNS-1550-04 up to 20260205 /cgi-bin/webdav_mgr.cgi Webdav_Upload_File f_file stack-based overflow]]></title>
<description><![CDATA[A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. It has been rated as critical. This issue ...]]></description>
<link>https://tsecurity.de/de/3695098/sicherheitsluecken/cve-2026-5212-d-link-dns-1550-04-up-to-20260205-cgi-binwebdavmgrcgi-webdavuploadfile-ffile-stack-based-overflow/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695098/sicherheitsluecken/cve-2026-5212-d-link-dns-1550-04-up-to-20260205-cgi-binwebdavmgrcgi-webdavuploadfile-ffile-stack-based-overflow/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:19 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/d-link:dns-120">D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205</a>. It has been rated as <a href="https://vuldb.com/kb/risk">critical</a>. This issue affects the function <code>Webdav_Upload_File</code> of the file <em>/cgi-bin/webdav_mgr.cgi</em>. The manipulation of the argument <em>f_file</em> leads to stack-based buffer overflow.

This vulnerability is uniquely identified as <a href="https://vuldb.com/cve/CVE-2026-5212">CVE-2026-5212</a>. The attack is possible to be carried out remotely. Moreover, an exploit is present.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-5213 | D-Link DNS-1550-04 up to 20260205 /cgi-bin/account_mgr.cgi cgi_adduser_to_session read_list stack-based overflow]]></title>
<description><![CDATA[A vulnerability identified as critical has been detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affecte...]]></description>
<link>https://tsecurity.de/de/3695099/sicherheitsluecken/cve-2026-5213-d-link-dns-1550-04-up-to-20260205-cgi-binaccountmgrcgi-cgiaddusertosession-readlist-stack-based-overflow/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695099/sicherheitsluecken/cve-2026-5213-d-link-dns-1550-04-up-to-20260205-cgi-binaccountmgrcgi-cgiaddusertosession-readlist-stack-based-overflow/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:19 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">critical</a> has been detected in <a href="https://vuldb.com/product/d-link:dns-120">D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205</a>. The affected element is the function <code>cgi_adduser_to_session</code> of the file <em>/cgi-bin/account_mgr.cgi</em>. This manipulation of the argument <em>read_list</em> causes stack-based buffer overflow.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2026-5213">CVE-2026-5213</a>. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-66036 | FFmpeg up to 8.1.2 vf_hqdn3d filter vf_hqdn3d.config_input/denoise_spatial heap-based overflow (Nessus ID 329726)]]></title>
<description><![CDATA[A vulnerability classified as critical was found in FFmpeg up to 8.1.2. This vulnerability affects the function vf_hqdn3d.config_input/denoise_spatial of the component vf_hqdn3d filter. Such manipulation leads to heap-based buffer overflow.

This vulnerability is uniquely identified as CVE-2026-6...]]></description>
<link>https://tsecurity.de/de/3695100/sicherheitsluecken/cve-2026-66036-ffmpeg-up-to-812-vfhqdn3d-filter-vfhqdn3dconfiginputdenoisespatial-heap-based-overflow-nessus-id-329726/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695100/sicherheitsluecken/cve-2026-66036-ffmpeg-up-to-812-vfhqdn3d-filter-vfhqdn3dconfiginputdenoisespatial-heap-based-overflow-nessus-id-329726/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:19 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">critical</a> was found in <a href="https://vuldb.com/product/ffmpeg">FFmpeg up to 8.1.2</a>. This vulnerability affects the function <code>vf_hqdn3d.config_input/denoise_spatial</code> of the component <em>vf_hqdn3d filter</em>. Such manipulation leads to heap-based buffer overflow.

This vulnerability is uniquely identified as <a href="https://vuldb.com/cve/CVE-2026-66036">CVE-2026-66036</a>. The attack can be launched remotely. No exploit exists.

It is advisable to implement a patch to correct this issue.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-66040 | FFmpeg up to 8.1.2 PNG/APNG encoders png_write_chunk out-of-bounds write (b506faf / Nessus ID 329727)]]></title>
<description><![CDATA[A vulnerability was found in FFmpeg up to 8.1.2 and classified as critical. The impacted element is the function png_write_chunk of the component PNG/APNG encoders. The manipulation results in out-of-bounds write.

This vulnerability is identified as CVE-2026-66040. The attack can be executed rem...]]></description>
<link>https://tsecurity.de/de/3695101/sicherheitsluecken/cve-2026-66040-ffmpeg-up-to-812-pngapng-encoders-pngwritechunk-out-of-bounds-write-b506faf-nessus-id-329727/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695101/sicherheitsluecken/cve-2026-66040-ffmpeg-up-to-812-pngapng-encoders-pngwritechunk-out-of-bounds-write-b506faf-nessus-id-329727/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:19 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/ffmpeg">FFmpeg up to 8.1.2</a> and classified as <a href="https://vuldb.com/kb/risk">critical</a>. The impacted element is the function <code>png_write_chunk</code> of the component <em>PNG/APNG encoders</em>. The manipulation results in out-of-bounds write.

This vulnerability is identified as <a href="https://vuldb.com/cve/CVE-2026-66040">CVE-2026-66040</a>. The attack can be executed remotely. There is not any exploit available.

Applying a patch is advised to resolve this issue.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-66037 | FFmpeg up to 8.1.1 IAMF demuxer libavformat/iamf_parse.c mix_presentation_obu count_label resource consumption (5d7112c / Nessus ID 329730)]]></title>
<description><![CDATA[A vulnerability classified as problematic has been found in FFmpeg up to 8.1.1. This affects the function mix_presentation_obu of the file libavformat/iamf_parse.c of the component IAMF demuxer. This manipulation of the argument count_label causes resource consumption.

This vulnerability is hand...]]></description>
<link>https://tsecurity.de/de/3695102/sicherheitsluecken/cve-2026-66037-ffmpeg-up-to-811-iamf-demuxer-libavformatiamfparsec-mixpresentationobu-countlabel-resource-consumption-5d7112c-nessus-id-329730/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695102/sicherheitsluecken/cve-2026-66037-ffmpeg-up-to-811-iamf-demuxer-libavformatiamfparsec-mixpresentationobu-countlabel-resource-consumption-5d7112c-nessus-id-329730/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:19 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">problematic</a> has been found in <a href="https://vuldb.com/product/ffmpeg">FFmpeg up to 8.1.1</a>. This affects the function <code>mix_presentation_obu</code> of the file <em>libavformat/iamf_parse.c</em> of the component <em>IAMF demuxer</em>. This manipulation of the argument <em>count_label</em> causes resource consumption.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-66037">CVE-2026-66037</a>. The attack can be initiated remotely. There is not any exploit available.

To fix this issue, it is recommended to deploy a patch.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34738 | WWBN AVideo up to 26.0 setStatus improper authorization (GHSA-m577-w9j8-ch7j)]]></title>
<description><![CDATA[A vulnerability identified as critical has been detected in WWBN AVideo up to 26.0. The impacted element is the function setStatus. This manipulation causes improper authorization.

The identification of this vulnerability is CVE-2026-34738. It is possible to initiate the attack remotely. There i...]]></description>
<link>https://tsecurity.de/de/3695095/sicherheitsluecken/cve-2026-34738-wwbn-avideo-up-to-260-setstatus-improper-authorization-ghsa-m577-w9j8-ch7j/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695095/sicherheitsluecken/cve-2026-34738-wwbn-avideo-up-to-260-setstatus-improper-authorization-ghsa-m577-w9j8-ch7j/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:18 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">critical</a> has been detected in <a href="https://vuldb.com/product/wwbn:avideo">WWBN AVideo up to 26.0</a>. The impacted element is the function <code>setStatus</code>. This manipulation causes improper authorization.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2026-34738">CVE-2026-34738</a>. It is possible to initiate the attack remotely. There is no exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34400 | Alerta up to 9.0.x Query String Search API sql injection (GHSA-8prr-286p-4w7j)]]></title>
<description><![CDATA[A vulnerability labeled as critical has been found in Alerta up to 9.0.x. Affected by this vulnerability is an unknown functionality of the component Query String Search API. Executing a manipulation can lead to sql injection.

The identification of this vulnerability is CVE-2026-34400. The attac...]]></description>
<link>https://tsecurity.de/de/3695096/sicherheitsluecken/cve-2026-34400-alerta-up-to-90x-query-string-search-api-sql-injection-ghsa-8prr-286p-4w7j/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695096/sicherheitsluecken/cve-2026-34400-alerta-up-to-90x-query-string-search-api-sql-injection-ghsa-8prr-286p-4w7j/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:18 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability labeled as <a href="https://vuldb.com/kb/risk">critical</a> has been found in <a href="https://vuldb.com/product/alerta">Alerta up to 9.0.x</a>. Affected by this vulnerability is an unknown functionality of the component <em>Query String Search API</em>. Executing a manipulation can lead to sql injection.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2026-34400">CVE-2026-34400</a>. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34401 | Microsoft XmlNotepad prior 2.9.0.21 HTTP/SMB xml external entity reference (GHSA-5j32-486h-42ch)]]></title>
<description><![CDATA[A vulnerability was found in Microsoft XmlNotepad. It has been declared as problematic. Affected is an unknown function of the component HTTP/SMB. Such manipulation leads to xml external entity reference.

This vulnerability is traded as CVE-2026-34401. The attack may be launched remotely. There ...]]></description>
<link>https://tsecurity.de/de/3695097/sicherheitsluecken/cve-2026-34401-microsoft-xmlnotepad-prior-29021-httpsmb-xml-external-entity-reference-ghsa-5j32-486h-42ch/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695097/sicherheitsluecken/cve-2026-34401-microsoft-xmlnotepad-prior-29021-httpsmb-xml-external-entity-reference-ghsa-5j32-486h-42ch/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:18 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/microsoft:xmlnotepad">Microsoft XmlNotepad</a>. It has been declared as <a href="https://vuldb.com/kb/risk">problematic</a>. Affected is an unknown function of the component <em>HTTP/SMB</em>. Such manipulation leads to xml external entity reference.

This vulnerability is traded as <a href="https://vuldb.com/cve/CVE-2026-34401">CVE-2026-34401</a>. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-3468 | SonicWall Email Security cross site scripting (WLID-2026-0002)]]></title>
<description><![CDATA[A vulnerability classified as problematic was found in SonicWall Email Security. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to cross site scripting.

This vulnerability appears as CVE-2026-3468. The attack may be performed from remote. There is n...]]></description>
<link>https://tsecurity.de/de/3695090/sicherheitsluecken/cve-2026-3468-sonicwall-email-security-cross-site-scripting-wlid-2026-0002/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695090/sicherheitsluecken/cve-2026-3468-sonicwall-email-security-cross-site-scripting-wlid-2026-0002/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:17 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">problematic</a> was found in <a href="https://vuldb.com/product/sonicwall:email_security">SonicWall Email Security</a>. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to cross site scripting.

This vulnerability appears as <a href="https://vuldb.com/cve/CVE-2026-3468">CVE-2026-3468</a>. The attack may be performed from remote. There is no available exploit.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-3470 | SonicWall Email Security improper authentication (SNWLID-2026-0002)]]></title>
<description><![CDATA[A vulnerability identified as critical has been detected in SonicWall Email Security. The affected element is an unknown function. The manipulation leads to improper authentication.

This vulnerability is listed as CVE-2026-3470. The attack may be initiated remotely. There is no available exploit.]]></description>
<link>https://tsecurity.de/de/3695091/sicherheitsluecken/cve-2026-3470-sonicwall-email-security-improper-authentication-snwlid-2026-0002/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695091/sicherheitsluecken/cve-2026-3470-sonicwall-email-security-improper-authentication-snwlid-2026-0002/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:17 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">critical</a> has been detected in <a href="https://vuldb.com/product/sonicwall:email_security">SonicWall Email Security</a>. The affected element is an unknown function. The manipulation leads to improper authentication.

This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-3470">CVE-2026-3470</a>. The attack may be initiated remotely. There is no available exploit.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34739 | WWBN AVideo up to 26.0 testIP.php htmlspecialchars cross site scripting (GHSA-jqrj-chh6-8h78)]]></title>
<description><![CDATA[A vulnerability classified as problematic was found in WWBN AVideo up to 26.0. This impacts the function htmlspecialchars of the file testIP.php. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2026-34739. It is possible to launch the attack rem...]]></description>
<link>https://tsecurity.de/de/3695092/sicherheitsluecken/cve-2026-34739-wwbn-avideo-up-to-260-testipphp-htmlspecialchars-cross-site-scripting-ghsa-jqrj-chh6-8h78/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695092/sicherheitsluecken/cve-2026-34739-wwbn-avideo-up-to-260-testipphp-htmlspecialchars-cross-site-scripting-ghsa-jqrj-chh6-8h78/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:17 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">problematic</a> was found in <a href="https://vuldb.com/product/wwbn:avideo">WWBN AVideo up to 26.0</a>. This impacts the function <code>htmlspecialchars</code> of the file <em>testIP.php</em>. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as <a href="https://vuldb.com/cve/CVE-2026-34739">CVE-2026-34739</a>. It is possible to launch the attack remotely. No exploit is available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34737 | WWBN AVideo up to 26.0 Endpoint test.php retrieveSubscriptions authorization (GHSA-38rh-4v39-vfxv)]]></title>
<description><![CDATA[A vulnerability was found in WWBN AVideo up to 26.0. It has been declared as problematic. Affected by this issue is the function retrieveSubscriptions of the file test.php of the component Endpoint. Such manipulation leads to missing authorization.

This vulnerability is uniquely identified as CV...]]></description>
<link>https://tsecurity.de/de/3695093/sicherheitsluecken/cve-2026-34737-wwbn-avideo-up-to-260-endpoint-testphp-retrievesubscriptions-authorization-ghsa-38rh-4v39-vfxv/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695093/sicherheitsluecken/cve-2026-34737-wwbn-avideo-up-to-260-endpoint-testphp-retrievesubscriptions-authorization-ghsa-38rh-4v39-vfxv/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:17 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/wwbn:avideo">WWBN AVideo up to 26.0</a>. It has been declared as <a href="https://vuldb.com/kb/risk">problematic</a>. Affected by this issue is the function <code>retrieveSubscriptions</code> of the file <em>test.php</em> of the component <em>Endpoint</em>. Such manipulation leads to missing authorization.

This vulnerability is uniquely identified as <a href="https://vuldb.com/cve/CVE-2026-34737">CVE-2026-34737</a>. The attack can be launched remotely. No exploit exists.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34740 | WWBN AVideo up to 26.0 EPG Page isSSRFSafeURL server-side request forgery (GHSA-x5vx-vrpf-r45f)]]></title>
<description><![CDATA[A vulnerability, which was classified as critical, has been found in WWBN AVideo up to 26.0. Affected is the function isSSRFSafeURL of the component EPG Page. The manipulation leads to server-side request forgery.

This vulnerability is documented as CVE-2026-34740. The attack can be initiated re...]]></description>
<link>https://tsecurity.de/de/3695094/sicherheitsluecken/cve-2026-34740-wwbn-avideo-up-to-260-epg-page-isssrfsafeurl-server-side-request-forgery-ghsa-x5vx-vrpf-r45f/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695094/sicherheitsluecken/cve-2026-34740-wwbn-avideo-up-to-260-epg-page-isssrfsafeurl-server-side-request-forgery-ghsa-x5vx-vrpf-r45f/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:17 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">critical</a>, has been found in <a href="https://vuldb.com/product/wwbn:avideo">WWBN AVideo up to 26.0</a>. Affected is the function <code>isSSRFSafeURL</code> of the component <em>EPG Page</em>. The manipulation leads to server-side request forgery.

This vulnerability is documented as <a href="https://vuldb.com/cve/CVE-2026-34740">CVE-2026-34740</a>. The attack can be initiated remotely. There is not any exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64507 | Linux Kernel up to 7.2-rc1 BPF JIT bugs.c allocation of resources (EUVD-2026-48851)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 6.6.144/6.12.96/6.18.38/7.1.3/7.2-rc1. It has been rated as problematic. This issue affects some unknown processing of the file bugs.c of the component BPF JIT. This manipulation causes allocation of resources.

The identification of this vulnerabil...]]></description>
<link>https://tsecurity.de/de/3695085/sicherheitsluecken/cve-2026-64507-linux-kernel-up-to-72-rc1-bpf-jit-bugsc-allocation-of-resources-euvd-2026-48851/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695085/sicherheitsluecken/cve-2026-64507-linux-kernel-up-to-72-rc1-bpf-jit-bugsc-allocation-of-resources-euvd-2026-48851/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:16 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.6.144/6.12.96/6.18.38/7.1.3/7.2-rc1</a>. It has been rated as <a href="https://vuldb.com/kb/risk">problematic</a>. This issue affects some unknown processing of the file <em>bugs.c</em> of the component <em>BPF JIT</em>. This manipulation causes allocation of resources.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2026-64507">CVE-2026-64507</a>. The attack can only be executed locally. There is no exploit available.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64508 | Linux Kernel up to 7.2-rc1 BPF bpf_arch_pred_flush allocation of resources (EUVD-2026-48852)]]></title>
<description><![CDATA[A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.6.144/6.12.96/6.18.38/7.1.3/7.2-rc1. Impacted is the function bpf_arch_pred_flush of the component BPF. Such manipulation leads to allocation of resources.

This vulnerability is referenced as CVE-2026-64508....]]></description>
<link>https://tsecurity.de/de/3695086/sicherheitsluecken/cve-2026-64508-linux-kernel-up-to-72-rc1-bpf-bpfarchpredflush-allocation-of-resources-euvd-2026-48852/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695086/sicherheitsluecken/cve-2026-64508-linux-kernel-up-to-72-rc1-bpf-bpfarchpredflush-allocation-of-resources-euvd-2026-48852/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:16 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability categorized as <a href="https://vuldb.com/kb/risk">very critical</a> has been discovered in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.6.144/6.12.96/6.18.38/7.1.3/7.2-rc1</a>. Impacted is the function <code>bpf_arch_pred_flush</code> of the component <em>BPF</em>. Such manipulation leads to allocation of resources.

This vulnerability is referenced as <a href="https://vuldb.com/cve/CVE-2026-64508">CVE-2026-64508</a>. It is possible to launch the attack remotely. No exploit is available.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64506 | Linux Kernel up to 7.1.3 rtw89 state issue (EUVD-2026-48850)]]></title>
<description><![CDATA[A vulnerability, which was classified as critical, was found in Linux Kernel up to 7.1.3. Affected is an unknown function of the component rtw89. Such manipulation leads to state issue.

This vulnerability is traded as CVE-2026-64506. The attack may be launched remotely. There is no exploit avail...]]></description>
<link>https://tsecurity.de/de/3695087/sicherheitsluecken/cve-2026-64506-linux-kernel-up-to-713-rtw89-state-issue-euvd-2026-48850/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695087/sicherheitsluecken/cve-2026-64506-linux-kernel-up-to-713-rtw89-state-issue-euvd-2026-48850/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:16 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">critical</a>, was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. Affected is an unknown function of the component <em>rtw89</em>. Such manipulation leads to state issue.

This vulnerability is traded as <a href="https://vuldb.com/cve/CVE-2026-64506">CVE-2026-64506</a>. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64509 | Linux Kernel up to 6.12.96/6.18.38/7.1.3 block GenDiskBuilder::build memory leak (EUVD-2026-48853)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 6.12.96/6.18.38/7.1.3 and classified as very critical. This issue affects the function GenDiskBuilder::build of the component block. The manipulation results in memory leak.

This vulnerability is known as CVE-2026-64509. It is possible to launch th...]]></description>
<link>https://tsecurity.de/de/3695088/sicherheitsluecken/cve-2026-64509-linux-kernel-up-to-6129661838713-block-gendiskbuilderbuild-memory-leak-euvd-2026-48853/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695088/sicherheitsluecken/cve-2026-64509-linux-kernel-up-to-6129661838713-block-gendiskbuilderbuild-memory-leak-euvd-2026-48853/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:16 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.12.96/6.18.38/7.1.3</a> and classified as <a href="https://vuldb.com/kb/risk">very critical</a>. This issue affects the function <code>GenDiskBuilder::build</code> of the component <em>block</em>. The manipulation results in memory leak.

This vulnerability is known as <a href="https://vuldb.com/cve/CVE-2026-64509">CVE-2026-64509</a>. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-3469 | SonicWall Email Security denial of service (SNWLID-2026-0002)]]></title>
<description><![CDATA[A vulnerability categorized as problematic has been discovered in SonicWall Email Security. Impacted is an unknown function. Executing a manipulation can lead to denial of service.

This vulnerability is tracked as CVE-2026-3469. The attack can be launched remotely. No exploit exists.]]></description>
<link>https://tsecurity.de/de/3695089/sicherheitsluecken/cve-2026-3469-sonicwall-email-security-denial-of-service-snwlid-2026-0002/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695089/sicherheitsluecken/cve-2026-3469-sonicwall-email-security-denial-of-service-snwlid-2026-0002/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:16 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability categorized as <a href="https://vuldb.com/kb/risk">problematic</a> has been discovered in <a href="https://vuldb.com/product/sonicwall:email_security">SonicWall Email Security</a>. Impacted is an unknown function. Executing a manipulation can lead to denial of service.

This vulnerability is tracked as <a href="https://vuldb.com/cve/CVE-2026-3469">CVE-2026-3469</a>. The attack can be launched remotely. No exploit exists.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64502 | Linux Kernel up to 6.18.38/7.1.3 Iio Adc Ad Sigma Delta ad_sigma_delta_clear_pending_event heap-based overflow (EUVD-2026-48846)]]></title>
<description><![CDATA[A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.18.38/7.1.3. Affected by this issue is the function ad_sigma_delta_clear_pending_event of the component Iio Adc Ad Sigma Delta. Performing a manipulation results in heap-based buffer overflow.

This vul...]]></description>
<link>https://tsecurity.de/de/3695080/sicherheitsluecken/cve-2026-64502-linux-kernel-up-to-61838713-iio-adc-ad-sigma-delta-adsigmadeltaclearpendingevent-heap-based-overflow-euvd-2026-48846/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695080/sicherheitsluecken/cve-2026-64502-linux-kernel-up-to-61838713-iio-adc-ad-sigma-delta-adsigmadeltaclearpendingevent-heap-based-overflow-euvd-2026-48846/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:15 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">very critical</a>, has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.18.38/7.1.3</a>. Affected by this issue is the function <code>ad_sigma_delta_clear_pending_event</code> of the component <em>Iio Adc Ad Sigma Delta</em>. Performing a manipulation results in heap-based buffer overflow.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-64502">CVE-2026-64502</a>. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64501 | Linux Kernel up to 6.18.38/7.1.3 iio adc ad_sigma_delta state issue (EUVD-2026-48845)]]></title>
<description><![CDATA[A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.38/7.1.3. Affected by this vulnerability is the function ad_sigma_delta_single_conversion/ad_sd_buffer_postenable of the component iio adc ad_sigma_delta. This manipulation causes state issue.

This vulnerability...]]></description>
<link>https://tsecurity.de/de/3695081/sicherheitsluecken/cve-2026-64501-linux-kernel-up-to-61838713-iio-adc-adsigmadelta-state-issue-euvd-2026-48845/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695081/sicherheitsluecken/cve-2026-64501-linux-kernel-up-to-61838713-iio-adc-adsigmadelta-state-issue-euvd-2026-48845/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:15 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">very critical</a> has been reported in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.18.38/7.1.3</a>. Affected by this vulnerability is the function <code>ad_sigma_delta_single_conversion/ad_sd_buffer_postenable</code> of the component <em>iio adc ad_sigma_delta</em>. This manipulation causes state issue.

This vulnerability is tracked as <a href="https://vuldb.com/cve/CVE-2026-64501">CVE-2026-64501</a>. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64504 | Linux Kernel up to 7.2-rc2 BMC150 Accelerometer Driver __bmc150_accel_fifo_flush stack-based overflow (EUVD-2026-48848)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.2-rc2. It has been declared as very critical. This vulnerability affects the function __bmc150_accel_fifo_flush of the component BMC150 Accelerometer Driver. The manipulation results in stack-based buffer overflow.

This vulnerability was named CV...]]></description>
<link>https://tsecurity.de/de/3695082/sicherheitsluecken/cve-2026-64504-linux-kernel-up-to-72-rc2-bmc150-accelerometer-driver-bmc150accelfifoflush-stack-based-overflow-euvd-2026-48848/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695082/sicherheitsluecken/cve-2026-64504-linux-kernel-up-to-72-rc2-bmc150-accelerometer-driver-bmc150accelfifoflush-stack-based-overflow-euvd-2026-48848/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:15 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc2</a>. It has been declared as <a href="https://vuldb.com/kb/risk">very critical</a>. This vulnerability affects the function <code>__bmc150_accel_fifo_flush</code> of the component <em>BMC150 Accelerometer Driver</em>. The manipulation results in stack-based buffer overflow.

This vulnerability was named <a href="https://vuldb.com/cve/CVE-2026-64504">CVE-2026-64504</a>. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64503 | Linux Kernel up to 7.2-rc2 kxsd9 kxsd9_write_raw release of resource (EUVD-2026-48847)]]></title>
<description><![CDATA[A vulnerability, which was classified as problematic, was found in Linux Kernel up to 7.2-rc2. This affects the function kxsd9_write_raw of the component kxsd9. Executing a manipulation can lead to missing release of resource.

This vulnerability appears as CVE-2026-64503. The attack may be perfo...]]></description>
<link>https://tsecurity.de/de/3695083/sicherheitsluecken/cve-2026-64503-linux-kernel-up-to-72-rc2-kxsd9-kxsd9writeraw-release-of-resource-euvd-2026-48847/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695083/sicherheitsluecken/cve-2026-64503-linux-kernel-up-to-72-rc2-kxsd9-kxsd9writeraw-release-of-resource-euvd-2026-48847/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:15 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">problematic</a>, was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc2</a>. This affects the function <code>kxsd9_write_raw</code> of the component <em>kxsd9</em>. Executing a manipulation can lead to missing release of resource.

This vulnerability appears as <a href="https://vuldb.com/cve/CVE-2026-64503">CVE-2026-64503</a>. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64505 | Linux Kernel up to 7.2-rc2 Rndis rndis_rm_hdr out-of-bounds (EUVD-2026-48849)]]></title>
<description><![CDATA[A vulnerability has been found in Linux Kernel up to 7.2-rc2 and classified as very critical. This vulnerability affects the function rndis_rm_hdr of the component Rndis. The manipulation leads to out-of-bounds read.

This vulnerability is traded as CVE-2026-64505. An attack has to be approached ...]]></description>
<link>https://tsecurity.de/de/3695084/sicherheitsluecken/cve-2026-64505-linux-kernel-up-to-72-rc2-rndis-rndisrmhdr-out-of-bounds-euvd-2026-48849/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695084/sicherheitsluecken/cve-2026-64505-linux-kernel-up-to-72-rc2-rndis-rndisrmhdr-out-of-bounds-euvd-2026-48849/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:15 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc2</a> and classified as <a href="https://vuldb.com/kb/risk">very critical</a>. This vulnerability affects the function <code>rndis_rm_hdr</code> of the component <em>Rndis</em>. The manipulation leads to out-of-bounds read.

This vulnerability is traded as <a href="https://vuldb.com/cve/CVE-2026-64505">CVE-2026-64505</a>. An attack has to be approached locally. There is no exploit available.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64496 | Linux Kernel up to 7.2-rc2 IIO Event iio_event_getfd out-of-bounds (EUVD-2026-48840)]]></title>
<description><![CDATA[A vulnerability classified as critical has been found in Linux Kernel up to 7.2-rc2. The impacted element is the function iio_event_getfd of the component IIO Event. The manipulation leads to out-of-bounds read.

This vulnerability is documented as CVE-2026-64496. The attack can be initiated remo...]]></description>
<link>https://tsecurity.de/de/3695075/sicherheitsluecken/cve-2026-64496-linux-kernel-up-to-72-rc2-iio-event-iioeventgetfd-out-of-bounds-euvd-2026-48840/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695075/sicherheitsluecken/cve-2026-64496-linux-kernel-up-to-72-rc2-iio-event-iioeventgetfd-out-of-bounds-euvd-2026-48840/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:14 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">critical</a> has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc2</a>. The impacted element is the function <code>iio_event_getfd</code> of the component <em>IIO Event</em>. The manipulation leads to out-of-bounds read.

This vulnerability is documented as <a href="https://vuldb.com/cve/CVE-2026-64496">CVE-2026-64496</a>. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64497 | Linux Kernel up to 7.1.3 scd30 linux/bitfield.h FIELD_GET integer overflow (EUVD-2026-48841)]]></title>
<description><![CDATA[A vulnerability classified as very critical was found in Linux Kernel up to 7.1.3. This affects the function FIELD_GET of the file linux/bitfield.h of the component scd30. The manipulation results in integer overflow.

This vulnerability is reported as CVE-2026-64497. The attack can be launched r...]]></description>
<link>https://tsecurity.de/de/3695076/sicherheitsluecken/cve-2026-64497-linux-kernel-up-to-713-scd30-linuxbitfieldh-fieldget-integer-overflow-euvd-2026-48841/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695076/sicherheitsluecken/cve-2026-64497-linux-kernel-up-to-713-scd30-linuxbitfieldh-fieldget-integer-overflow-euvd-2026-48841/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:14 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">very critical</a> was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. This affects the function <code>FIELD_GET</code> of the file <em>linux/bitfield.h</em> of the component <em>scd30</em>. The manipulation results in integer overflow.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-64497">CVE-2026-64497</a>. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64498 | Linux Kernel up to 7.1.3 hw-consumer iio_hw_buf_release use after free (EUVD-2026-48842)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.1.3 and classified as very critical. Affected by this issue is the function iio_hw_buf_release of the component hw-consumer. Executing a manipulation can lead to use after free.

This vulnerability is handled as CVE-2026-64498. The attack can be e...]]></description>
<link>https://tsecurity.de/de/3695077/sicherheitsluecken/cve-2026-64498-linux-kernel-up-to-713-hw-consumer-iiohwbufrelease-use-after-free-euvd-2026-48842/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695077/sicherheitsluecken/cve-2026-64498-linux-kernel-up-to-713-hw-consumer-iiohwbufrelease-use-after-free-euvd-2026-48842/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:14 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a> and classified as <a href="https://vuldb.com/kb/risk">very critical</a>. Affected by this issue is the function <code>iio_hw_buf_release</code> of the component <em>hw-consumer</em>. Executing a manipulation can lead to use after free.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-64498">CVE-2026-64498</a>. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64500 | Linux Kernel up to 7.2-rc2 Lpc32xx Adc lpc32xx_adc.c lpc32xx_adc_probe uninitialized pointer (EUVD-2026-48844)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.2-rc2. It has been classified as critical. This affects the function lpc32xx_adc_probe of the file drivers/iio/adc/lpc32xx_adc.c of the component Lpc32xx Adc. The manipulation leads to uninitialized pointer.

This vulnerability is uniquely identif...]]></description>
<link>https://tsecurity.de/de/3695078/sicherheitsluecken/cve-2026-64500-linux-kernel-up-to-72-rc2-lpc32xx-adc-lpc32xxadcc-lpc32xxadcprobe-uninitialized-pointer-euvd-2026-48844/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695078/sicherheitsluecken/cve-2026-64500-linux-kernel-up-to-72-rc2-lpc32xx-adc-lpc32xxadcc-lpc32xxadcprobe-uninitialized-pointer-euvd-2026-48844/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:14 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc2</a>. It has been classified as <a href="https://vuldb.com/kb/risk">critical</a>. This affects the function <code>lpc32xx_adc_probe</code> of the file <em>drivers/iio/adc/lpc32xx_adc.c</em> of the component <em>Lpc32xx Adc</em>. The manipulation leads to uninitialized pointer.

This vulnerability is uniquely identified as <a href="https://vuldb.com/cve/CVE-2026-64500">CVE-2026-64500</a>. Local access is required to approach this attack. No exploit exists.

Upgrading the affected component is recommended.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64499 | Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc2 ADC ads1119_triggered_buffer_preenable release of resource (EUVD-2026-48843)]]></title>
<description><![CDATA[A vulnerability classified as problematic was found in Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc2. Affected by this vulnerability is the function ads1119_triggered_buffer_preenable of the component ADC. Such manipulation leads to missing release of resource.

This vulnerability is documente...]]></description>
<link>https://tsecurity.de/de/3695079/sicherheitsluecken/cve-2026-64499-linux-kernel-up-to-612956183871372-rc2-adc-ads1119triggeredbufferpreenable-release-of-resource-euvd-2026-48843/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695079/sicherheitsluecken/cve-2026-64499-linux-kernel-up-to-612956183871372-rc2-adc-ads1119triggeredbufferpreenable-release-of-resource-euvd-2026-48843/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:14 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">problematic</a> was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.12.95/6.18.38/7.1.3/7.2-rc2</a>. Affected by this vulnerability is the function <code>ads1119_triggered_buffer_preenable</code> of the component <em>ADC</em>. Such manipulation leads to missing release of resource.

This vulnerability is documented as <a href="https://vuldb.com/cve/CVE-2026-64499">CVE-2026-64499</a>. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34404 | nuxt-modules og-image up to 6.2.4 /_og/d/ width/height resource consumption (GHSA-c7xp-q6q8-hg76)]]></title>
<description><![CDATA[A vulnerability, which was classified as problematic, has been found in nuxt-modules og-image up to 6.2.4. Impacted is an unknown function of the file /_og/d/. Performing a manipulation of the argument width/height results in resource consumption.

This vulnerability is cataloged as CVE-2026-3440...]]></description>
<link>https://tsecurity.de/de/3695071/sicherheitsluecken/cve-2026-34404-nuxt-modules-og-image-up-to-624-ogd-widthheight-resource-consumption-ghsa-c7xp-q6q8-hg76/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695071/sicherheitsluecken/cve-2026-34404-nuxt-modules-og-image-up-to-624-ogd-widthheight-resource-consumption-ghsa-c7xp-q6q8-hg76/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:13 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">problematic</a>, has been found in <a href="https://vuldb.com/product/nuxt-modules:og-image">nuxt-modules og-image up to 6.2.4</a>. Impacted is an unknown function of the file <em>/_og/d/</em>. Performing a manipulation of the argument <em>width/height</em> results in resource consumption.

This vulnerability is cataloged as <a href="https://vuldb.com/cve/CVE-2026-34404">CVE-2026-34404</a>. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34451 | Anthropic anthropic-sdk-typescript up to 0.80.x Claude API path traversal (GHSA-5474-4w2j-mq4c)]]></title>
<description><![CDATA[A vulnerability has been found in Anthropic anthropic-sdk-typescript up to 0.80.x and classified as critical. The impacted element is an unknown function of the component Claude API. The manipulation leads to path traversal.

This vulnerability is documented as CVE-2026-34451. The attack can be i...]]></description>
<link>https://tsecurity.de/de/3695072/sicherheitsluecken/cve-2026-34451-anthropic-anthropic-sdk-typescript-up-to-080x-claude-api-path-traversal-ghsa-5474-4w2j-mq4c/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695072/sicherheitsluecken/cve-2026-34451-anthropic-anthropic-sdk-typescript-up-to-080x-claude-api-path-traversal-ghsa-5474-4w2j-mq4c/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:13 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability has been found in <a href="https://vuldb.com/product/anthropic:anthropic-sdk-typescript">Anthropic anthropic-sdk-typescript up to 0.80.x</a> and classified as <a href="https://vuldb.com/kb/risk">critical</a>. The impacted element is an unknown function of the component <em>Claude API</em>. The manipulation leads to path traversal.

This vulnerability is documented as <a href="https://vuldb.com/cve/CVE-2026-34451">CVE-2026-34451</a>. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34448 | SiYuan up to 3.6.1 mAsse cross site scripting (ID 17246)]]></title>
<description><![CDATA[A vulnerability was found in SiYuan up to 3.6.1 and classified as problematic. This affects an unknown function. The manipulation of the argument mAsse results in cross site scripting.

This vulnerability is reported as CVE-2026-34448. The attack can be launched remotely. No exploit exists.

It i...]]></description>
<link>https://tsecurity.de/de/3695073/sicherheitsluecken/cve-2026-34448-siyuan-up-to-361-masse-cross-site-scripting-id-17246/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695073/sicherheitsluecken/cve-2026-34448-siyuan-up-to-361-masse-cross-site-scripting-id-17246/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:13 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/siyuan">SiYuan up to 3.6.1</a> and classified as <a href="https://vuldb.com/kb/risk">problematic</a>. This affects an unknown function. The manipulation of the argument <em>mAsse</em> results in cross site scripting.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-34448">CVE-2026-34448</a>. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34442 | freescout-help-desk freescout up to 1.8.210 Host Header redirect (GHSA-822g-7rw5-53xj)]]></title>
<description><![CDATA[A vulnerability labeled as problematic has been found in freescout-help-desk freescout up to 1.8.210. Impacted is an unknown function of the component Host Header Handler. The manipulation results in open redirect.

This vulnerability is identified as CVE-2026-34442. The attack can be executed re...]]></description>
<link>https://tsecurity.de/de/3695074/sicherheitsluecken/cve-2026-34442-freescout-help-desk-freescout-up-to-18210-host-header-redirect-ghsa-822g-7rw5-53xj/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695074/sicherheitsluecken/cve-2026-34442-freescout-help-desk-freescout-up-to-18210-host-header-redirect-ghsa-822g-7rw5-53xj/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:13 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability labeled as <a href="https://vuldb.com/kb/risk">problematic</a> has been found in <a href="https://vuldb.com/product/freescout-help-desk:freescout">freescout-help-desk freescout up to 1.8.210</a>. Impacted is an unknown function of the component <em>Host Header Handler</em>. The manipulation results in open redirect.

This vulnerability is identified as <a href="https://vuldb.com/cve/CVE-2026-34442">CVE-2026-34442</a>. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34452 | Anthropic anthropic-sdk-python up to 0.86.x Claude API link following (GHSA-w828-4qhx-vxx3)]]></title>
<description><![CDATA[A vulnerability, which was classified as critical, was found in Anthropic anthropic-sdk-python up to 0.86.x. Affected by this vulnerability is an unknown functionality of the component Claude API. The manipulation results in link following.

This vulnerability is reported as CVE-2026-34452. The a...]]></description>
<link>https://tsecurity.de/de/3695067/sicherheitsluecken/cve-2026-34452-anthropic-anthropic-sdk-python-up-to-086x-claude-api-link-following-ghsa-w828-4qhx-vxx3/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695067/sicherheitsluecken/cve-2026-34452-anthropic-anthropic-sdk-python-up-to-086x-claude-api-link-following-ghsa-w828-4qhx-vxx3/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:12 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">critical</a>, was found in <a href="https://vuldb.com/product/anthropic:anthropic-sdk-python">Anthropic anthropic-sdk-python up to 0.86.x</a>. Affected by this vulnerability is an unknown functionality of the component <em>Claude API</em>. The manipulation results in link following.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-34452">CVE-2026-34452</a>. The attack requires a local approach. No exploit exists.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34453 | SiYuan up to 3.6.1 Publish Service authorization (ID 17246)]]></title>
<description><![CDATA[A vulnerability was found in SiYuan up to 3.6.1. It has been rated as problematic. This affects an unknown function of the component Publish Service. This manipulation causes incorrect authorization.

This vulnerability is handled as CVE-2026-34453. The attack can be initiated remotely. There is ...]]></description>
<link>https://tsecurity.de/de/3695068/sicherheitsluecken/cve-2026-34453-siyuan-up-to-361-publish-service-authorization-id-17246/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695068/sicherheitsluecken/cve-2026-34453-siyuan-up-to-361-publish-service-authorization-id-17246/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:12 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/siyuan">SiYuan up to 3.6.1</a>. It has been rated as <a href="https://vuldb.com/kb/risk">problematic</a>. This affects an unknown function of the component <em>Publish Service</em>. This manipulation causes incorrect authorization.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-34453">CVE-2026-34453</a>. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34450 | Anthropic anthropic-sdk-python up to 0.86.x Claude API default permission (GHSA-q5f5-3gjm-7mfm)]]></title>
<description><![CDATA[A vulnerability was found in Anthropic anthropic-sdk-python up to 0.86.x. It has been declared as critical. This issue affects some unknown processing of the component Claude API. Executing a manipulation can lead to incorrect default permissions.

This vulnerability is handled as CVE-2026-34450....]]></description>
<link>https://tsecurity.de/de/3695069/sicherheitsluecken/cve-2026-34450-anthropic-anthropic-sdk-python-up-to-086x-claude-api-default-permission-ghsa-q5f5-3gjm-7mfm/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695069/sicherheitsluecken/cve-2026-34450-anthropic-anthropic-sdk-python-up-to-086x-claude-api-default-permission-ghsa-q5f5-3gjm-7mfm/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:12 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/anthropic:anthropic-sdk-python">Anthropic anthropic-sdk-python up to 0.86.x</a>. It has been declared as <a href="https://vuldb.com/kb/risk">critical</a>. This issue affects some unknown processing of the component <em>Claude API</em>. Executing a manipulation can lead to incorrect default permissions.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-34450">CVE-2026-34450</a>. It is possible to launch the attack on the local host. There is not any exploit available.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34405 | nuxt-modules og-image up to 6.2.4 /_og/d/ cross site scripting (GHSA-mg36-wvcr-m75h)]]></title>
<description><![CDATA[A vulnerability marked as problematic has been reported in nuxt-modules og-image up to 6.2.4. Affected by this issue is some unknown functionality of the file /_og/d/. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-34405. Remote exploitation of the a...]]></description>
<link>https://tsecurity.de/de/3695070/sicherheitsluecken/cve-2026-34405-nuxt-modules-og-image-up-to-624-ogd-cross-site-scripting-ghsa-mg36-wvcr-m75h/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695070/sicherheitsluecken/cve-2026-34405-nuxt-modules-og-image-up-to-624-ogd-cross-site-scripting-ghsa-mg36-wvcr-m75h/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:12 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">problematic</a> has been reported in <a href="https://vuldb.com/product/nuxt-modules:og-image">nuxt-modules og-image up to 6.2.4</a>. Affected by this issue is some unknown functionality of the file <em>/_og/d/</em>. The manipulation leads to cross site scripting.

This vulnerability is referenced as <a href="https://vuldb.com/cve/CVE-2026-34405">CVE-2026-34405</a>. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34801 | Endian Firewall 3.3.25 Parameter fixed_leases remark cross site scripting]]></title>
<description><![CDATA[A vulnerability was found in Endian Firewall 3.3.25 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /manage/dhcp/fixed_leases/ of the component Parameter Handler. Executing a manipulation of the argument remark can lead to cross site scripting...]]></description>
<link>https://tsecurity.de/de/3695062/sicherheitsluecken/cve-2026-34801-endian-firewall-3325-parameter-fixedleases-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695062/sicherheitsluecken/cve-2026-34801-endian-firewall-3325-parameter-fixedleases-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:11 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a> and classified as <a href="https://vuldb.com/kb/risk">problematic</a>. Affected by this vulnerability is an unknown functionality of the file <em>/manage/dhcp/fixed_leases/</em> of the component <em>Parameter Handler</em>. Executing a manipulation of the argument <em>remark</em> can lead to cross site scripting.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2026-34801">CVE-2026-34801</a>. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34792 | Endian Firewall 3.3.25 Regular Expression /cgi-bin/logs_clamav.cgi open Date os command injection]]></title>
<description><![CDATA[A vulnerability was found in Endian Firewall 3.3.25. It has been classified as critical. This impacts the function Open of the file /cgi-bin/logs_clamav.cgi of the component Regular Expression Handler. Performing a manipulation of the argument Date results in os command injection.

This vulnerabi...]]></description>
<link>https://tsecurity.de/de/3695063/sicherheitsluecken/cve-2026-34792-endian-firewall-3325-regular-expression-cgi-binlogsclamavcgi-open-date-os-command-injection/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695063/sicherheitsluecken/cve-2026-34792-endian-firewall-3325-regular-expression-cgi-binlogsclamavcgi-open-date-os-command-injection/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:11 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. It has been classified as <a href="https://vuldb.com/kb/risk">critical</a>. This impacts the function <code>Open</code> of the file <em>/cgi-bin/logs_clamav.cgi</em> of the component <em>Regular Expression Handler</em>. Performing a manipulation of the argument <em>Date</em> results in os command injection.

This vulnerability is identified as <a href="https://vuldb.com/cve/CVE-2026-34792">CVE-2026-34792</a>. The attack can be initiated remotely. There is not any exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34443 | freescout-help-desk freescout up to 1.8.210 app/Misc/Helper.php checkIpByMask server-side request forgery (GHSA-c9v3-4c59-x5q2)]]></title>
<description><![CDATA[A vulnerability categorized as critical has been discovered in freescout-help-desk freescout up to 1.8.210. This vulnerability affects the function checkIpByMask of the file app/Misc/Helper.php. Executing a manipulation can lead to server-side request forgery.

The identification of this vulnerab...]]></description>
<link>https://tsecurity.de/de/3695064/sicherheitsluecken/cve-2026-34443-freescout-help-desk-freescout-up-to-18210-appmischelperphp-checkipbymask-server-side-request-forgery-ghsa-c9v3-4c59-x5q2/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695064/sicherheitsluecken/cve-2026-34443-freescout-help-desk-freescout-up-to-18210-appmischelperphp-checkipbymask-server-side-request-forgery-ghsa-c9v3-4c59-x5q2/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:11 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability categorized as <a href="https://vuldb.com/kb/risk">critical</a> has been discovered in <a href="https://vuldb.com/product/freescout-help-desk:freescout">freescout-help-desk freescout up to 1.8.210</a>. This vulnerability affects the function <code>checkIpByMask</code> of the file <em>app/Misc/Helper.php</em>. Executing a manipulation can lead to server-side request forgery.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2026-34443">CVE-2026-34443</a>. The attack may be launched remotely. There is no exploit available.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34406 | APTRS up to 2.0.0 /api/auth/edituser/ edit_user dynamically-determined object attributes (GHSA-gv25-wp4h-9c35)]]></title>
<description><![CDATA[A vulnerability identified as critical has been detected in APTRS up to 2.0.0. This issue affects the function edit_user of the file /api/auth/edituser/. The manipulation leads to dynamically-determined object attributes.

This vulnerability is referenced as CVE-2026-34406. Remote exploitation of...]]></description>
<link>https://tsecurity.de/de/3695065/sicherheitsluecken/cve-2026-34406-aptrs-up-to-200-apiauthedituser-edituser-dynamically-determined-object-attributes-ghsa-gv25-wp4h-9c35/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695065/sicherheitsluecken/cve-2026-34406-aptrs-up-to-200-apiauthedituser-edituser-dynamically-determined-object-attributes-ghsa-gv25-wp4h-9c35/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:11 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">critical</a> has been detected in <a href="https://vuldb.com/product/aptrs">APTRS up to 2.0.0</a>. This issue affects the function <code>edit_user</code> of the file <em>/api/auth/edituser/</em>. The manipulation leads to dynamically-determined object attributes.

This vulnerability is referenced as <a href="https://vuldb.com/cve/CVE-2026-34406">CVE-2026-34406</a>. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34449 | SiYuan up to 3.6.1 cross-domain policy (ID 17246)]]></title>
<description><![CDATA[A vulnerability has been found in SiYuan up to 3.6.1 and classified as critical. Affected by this issue is some unknown functionality. This manipulation causes permissive cross-domain policy with untrusted domains.

This vulnerability appears as CVE-2026-34449. The attack may be initiated remotel...]]></description>
<link>https://tsecurity.de/de/3695066/sicherheitsluecken/cve-2026-34449-siyuan-up-to-361-cross-domain-policy-id-17246/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695066/sicherheitsluecken/cve-2026-34449-siyuan-up-to-361-cross-domain-policy-id-17246/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:11 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability has been found in <a href="https://vuldb.com/product/siyuan">SiYuan up to 3.6.1</a> and classified as <a href="https://vuldb.com/kb/risk">critical</a>. Affected by this issue is some unknown functionality. This manipulation causes permissive cross-domain policy with untrusted domains.

This vulnerability appears as <a href="https://vuldb.com/cve/CVE-2026-34449">CVE-2026-34449</a>. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34795 | Endian Firewall 3.3.25 Regular Expression /cgi-bin/logs_log.cgi open Date os command injection]]></title>
<description><![CDATA[A vulnerability, which was classified as critical, has been found in Endian Firewall 3.3.25. This affects the function Open of the file /cgi-bin/logs_log.cgi of the component Regular Expression Handler. This manipulation of the argument Date causes os command injection.

This vulnerability is han...]]></description>
<link>https://tsecurity.de/de/3695058/sicherheitsluecken/cve-2026-34795-endian-firewall-3325-regular-expression-cgi-binlogslogcgi-open-date-os-command-injection/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695058/sicherheitsluecken/cve-2026-34795-endian-firewall-3325-regular-expression-cgi-binlogslogcgi-open-date-os-command-injection/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:10 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">critical</a>, has been found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. This affects the function <code>Open</code> of the file <em>/cgi-bin/logs_log.cgi</em> of the component <em>Regular Expression Handler</em>. This manipulation of the argument <em>Date</em> causes os command injection.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-34795">CVE-2026-34795</a>. The attack can be initiated remotely. There is not any exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34793 | Endian Firewall 3.3.25 Regular Expression logs_firewall.cgi open Date os command injection]]></title>
<description><![CDATA[A vulnerability, which was classified as critical, was found in Endian Firewall 3.3.25. This impacts the function Open of the file /cgi-bin/logs_firewall.cgi of the component Regular Expression Handler. Such manipulation of the argument Date leads to os command injection.

This vulnerability is u...]]></description>
<link>https://tsecurity.de/de/3695059/sicherheitsluecken/cve-2026-34793-endian-firewall-3325-regular-expression-logsfirewallcgi-open-date-os-command-injection/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695059/sicherheitsluecken/cve-2026-34793-endian-firewall-3325-regular-expression-logsfirewallcgi-open-date-os-command-injection/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:10 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">critical</a>, was found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. This impacts the function <code>Open</code> of the file <em>/cgi-bin/logs_firewall.cgi</em> of the component <em>Regular Expression Handler</em>. Such manipulation of the argument <em>Date</em> leads to os command injection.

This vulnerability is uniquely identified as <a href="https://vuldb.com/cve/CVE-2026-34793">CVE-2026-34793</a>. The attack can be launched remotely. No exploit exists.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34797 | Endian Firewall 3.3.25 Regular Expression /cgi-bin/logs_smtp.cgi open Date os command injection]]></title>
<description><![CDATA[A vulnerability has been found in Endian Firewall 3.3.25 and classified as critical. Affected is the function Open of the file /cgi-bin/logs_smtp.cgi of the component Regular Expression Handler. Performing a manipulation of the argument Date results in os command injection.

This vulnerability wa...]]></description>
<link>https://tsecurity.de/de/3695060/sicherheitsluecken/cve-2026-34797-endian-firewall-3325-regular-expression-cgi-binlogssmtpcgi-open-date-os-command-injection/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695060/sicherheitsluecken/cve-2026-34797-endian-firewall-3325-regular-expression-cgi-binlogssmtpcgi-open-date-os-command-injection/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:10 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability has been found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a> and classified as <a href="https://vuldb.com/kb/risk">critical</a>. Affected is the function <code>Open</code> of the file <em>/cgi-bin/logs_smtp.cgi</em> of the component <em>Regular Expression Handler</em>. Performing a manipulation of the argument <em>Date</em> results in os command injection.

This vulnerability was named <a href="https://vuldb.com/cve/CVE-2026-34797">CVE-2026-34797</a>. The attack may be initiated remotely. There is no available exploit.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34797 | Endian Firewall 3.3.25 Regular Expression /cgi-bin/logs_smtp.cgi open Date os command injection]]></title>
<description><![CDATA[A vulnerability has been found in Endian Firewall 3.3.25 and classified as critical. Affected is the function Open of the file /cgi-bin/logs_smtp.cgi of the component Regular Expression Handler. Performing a manipulation of the argument Date results in os command injection.

This vulnerability wa...]]></description>
<link>https://tsecurity.de/de/3695061/sicherheitsluecken/cve-2026-34797-endian-firewall-3325-regular-expression-cgi-binlogssmtpcgi-open-date-os-command-injection/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695061/sicherheitsluecken/cve-2026-34797-endian-firewall-3325-regular-expression-cgi-binlogssmtpcgi-open-date-os-command-injection/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:10 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability has been found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a> and classified as <a href="https://vuldb.com/kb/risk">critical</a>. Affected is the function <code>Open</code> of the file <em>/cgi-bin/logs_smtp.cgi</em> of the component <em>Regular Expression Handler</em>. Performing a manipulation of the argument <em>Date</em> results in os command injection.

This vulnerability was named <a href="https://vuldb.com/cve/CVE-2026-34797">CVE-2026-34797</a>. The attack may be initiated remotely. There is no available exploit.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-15962 | techjewel Fluent Forms Pro Add On Pack Plugin up to 6.2.6 on WordPress deserialization (EUVD-2026-49047)]]></title>
<description><![CDATA[A vulnerability, which was classified as critical, has been found in techjewel Fluent Forms Pro Add On Pack Plugin up to 6.2.6 on WordPress. This issue affects some unknown processing. The manipulation leads to deserialization.

This vulnerability is documented as CVE-2026-15962. The attack can b...]]></description>
<link>https://tsecurity.de/de/3695052/sicherheitsluecken/cve-2026-15962-techjewel-fluent-forms-pro-add-on-pack-plugin-up-to-626-on-wordpress-deserialization-euvd-2026-49047/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695052/sicherheitsluecken/cve-2026-15962-techjewel-fluent-forms-pro-add-on-pack-plugin-up-to-626-on-wordpress-deserialization-euvd-2026-49047/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:09 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">critical</a>, has been found in <a href="https://vuldb.com/product/techjewel:fluent_forms_pro_add_on_pack_plugin">techjewel Fluent Forms Pro Add On Pack Plugin up to 6.2.6</a> on WordPress. This issue affects some unknown processing. The manipulation leads to deserialization.

This vulnerability is documented as <a href="https://vuldb.com/cve/CVE-2026-15962">CVE-2026-15962</a>. The attack can be initiated remotely. There is not any exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34796 | Endian Firewall 3.3.25 Regular Expression logs_openvpn.cgi open Date os command injection]]></title>
<description><![CDATA[A vulnerability identified as critical has been detected in Endian Firewall 3.3.25. This affects the function Open of the file /cgi-bin/logs_openvpn.cgi of the component Regular Expression Handler. This manipulation of the argument Date causes os command injection.

This vulnerability is register...]]></description>
<link>https://tsecurity.de/de/3695053/sicherheitsluecken/cve-2026-34796-endian-firewall-3325-regular-expression-logsopenvpncgi-open-date-os-command-injection/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695053/sicherheitsluecken/cve-2026-34796-endian-firewall-3325-regular-expression-logsopenvpncgi-open-date-os-command-injection/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:09 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">critical</a> has been detected in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. This affects the function <code>Open</code> of the file <em>/cgi-bin/logs_openvpn.cgi</em> of the component <em>Regular Expression Handler</em>. This manipulation of the argument <em>Date</em> causes os command injection.

This vulnerability is registered as <a href="https://vuldb.com/cve/CVE-2026-34796">CVE-2026-34796</a>. Remote exploitation of the attack is possible. No exploit is available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34798 | Endian Firewall 3.3.25 Parameter /cgi-bin/routing.cgi remark cross site scripting]]></title>
<description><![CDATA[A vulnerability marked as problematic has been reported in Endian Firewall 3.3.25. This issue affects some unknown processing of the file /cgi-bin/routing.cgi of the component Parameter Handler. Performing a manipulation of the argument remark results in cross site scripting.

This vulnerability ...]]></description>
<link>https://tsecurity.de/de/3695054/sicherheitsluecken/cve-2026-34798-endian-firewall-3325-parameter-cgi-binroutingcgi-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695054/sicherheitsluecken/cve-2026-34798-endian-firewall-3325-parameter-cgi-binroutingcgi-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:09 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">problematic</a> has been reported in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. This issue affects some unknown processing of the file <em>/cgi-bin/routing.cgi</em> of the component <em>Parameter Handler</em>. Performing a manipulation of the argument <em>remark</em> results in cross site scripting.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-34798">CVE-2026-34798</a>. The attack is possible to be carried out remotely. No exploit exists.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34799 | Endian Firewall 3.3.25 Parameter /manage/dnsmasq/hosts/ remark cross site scripting]]></title>
<description><![CDATA[A vulnerability described as problematic has been identified in Endian Firewall 3.3.25. Impacted is an unknown function of the file /manage/dnsmasq/hosts/ of the component Parameter Handler. Executing a manipulation of the argument remark can lead to cross site scripting.

This vulnerability appe...]]></description>
<link>https://tsecurity.de/de/3695055/sicherheitsluecken/cve-2026-34799-endian-firewall-3325-parameter-managednsmasqhosts-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695055/sicherheitsluecken/cve-2026-34799-endian-firewall-3325-parameter-managednsmasqhosts-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:09 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability described as <a href="https://vuldb.com/kb/risk">problematic</a> has been identified in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. Impacted is an unknown function of the file <em>/manage/dnsmasq/hosts/</em> of the component <em>Parameter Handler</em>. Executing a manipulation of the argument <em>remark</em> can lead to cross site scripting.

This vulnerability appears as <a href="https://vuldb.com/cve/CVE-2026-34799">CVE-2026-34799</a>. The attack may be performed from remote. There is no available exploit.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34800 | Endian Firewall 3.3.25 Parameter uplinkeditor.cgi Name cross site scripting]]></title>
<description><![CDATA[A vulnerability classified as problematic has been found in Endian Firewall 3.3.25. The affected element is an unknown function of the file /cgi-bin/uplinkeditor.cgi of the component Parameter Handler. The manipulation of the argument Name leads to cross site scripting.

This vulnerability is tra...]]></description>
<link>https://tsecurity.de/de/3695056/sicherheitsluecken/cve-2026-34800-endian-firewall-3325-parameter-uplinkeditorcgi-name-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695056/sicherheitsluecken/cve-2026-34800-endian-firewall-3325-parameter-uplinkeditorcgi-name-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:09 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">problematic</a> has been found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. The affected element is an unknown function of the file <em>/cgi-bin/uplinkeditor.cgi</em> of the component <em>Parameter Handler</em>. The manipulation of the argument <em>Name</em> leads to cross site scripting.

This vulnerability is traded as <a href="https://vuldb.com/cve/CVE-2026-34800">CVE-2026-34800</a>. It is possible to initiate the attack remotely. There is no exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34794 | Endian Firewall 3.3.25 Regular Expression /cgi-bin/logs_ids.cgi open Date os command injection]]></title>
<description><![CDATA[A vulnerability classified as critical was found in Endian Firewall 3.3.25. The impacted element is the function Open of the file /cgi-bin/logs_ids.cgi of the component Regular Expression Handler. The manipulation of the argument Date results in os command injection.

This vulnerability is known ...]]></description>
<link>https://tsecurity.de/de/3695057/sicherheitsluecken/cve-2026-34794-endian-firewall-3325-regular-expression-cgi-binlogsidscgi-open-date-os-command-injection/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695057/sicherheitsluecken/cve-2026-34794-endian-firewall-3325-regular-expression-cgi-binlogsidscgi-open-date-os-command-injection/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:09 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">critical</a> was found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. The impacted element is the function <code>Open</code> of the file <em>/cgi-bin/logs_ids.cgi</em> of the component <em>Regular Expression Handler</em>. The manipulation of the argument <em>Date</em> results in os command injection.

This vulnerability is known as <a href="https://vuldb.com/cve/CVE-2026-34794">CVE-2026-34794</a>. It is possible to launch the attack remotely. No exploit is available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64493 | Linux Kernel up to 7.2-rc2 Mpl115 mpl115_read_raw denial of service (EUVD-2026-48837)]]></title>
<description><![CDATA[A vulnerability marked as problematic has been reported in Linux Kernel up to 6.6.144/6.12.96/6.18.38/7.1.3/7.2-rc2. Impacted is the function mpl115_read_raw of the component Mpl115. Performing a manipulation results in denial of service.

This vulnerability is cataloged as CVE-2026-64493. The at...]]></description>
<link>https://tsecurity.de/de/3695048/sicherheitsluecken/cve-2026-64493-linux-kernel-up-to-72-rc2-mpl115-mpl115readraw-denial-of-service-euvd-2026-48837/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695048/sicherheitsluecken/cve-2026-64493-linux-kernel-up-to-72-rc2-mpl115-mpl115readraw-denial-of-service-euvd-2026-48837/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:08 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">problematic</a> has been reported in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.6.144/6.12.96/6.18.38/7.1.3/7.2-rc2</a>. Impacted is the function <code>mpl115_read_raw</code> of the component <em>Mpl115</em>. Performing a manipulation results in denial of service.

This vulnerability is cataloged as <a href="https://vuldb.com/cve/CVE-2026-64493">CVE-2026-64493</a>. The attack must be initiated from a local position. There is no exploit available.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64494 | Linux Kernel up to 7.2-rc2 iio light gp2ap002 gp2ap002_read_raw release of resource (EUVD-2026-48838)]]></title>
<description><![CDATA[A vulnerability labeled as critical has been found in Linux Kernel up to 7.2-rc2. This issue affects the function gp2ap002_read_raw of the component iio light gp2ap002. Such manipulation leads to missing release of resource.

This vulnerability is listed as CVE-2026-64494. The attack may be perfo...]]></description>
<link>https://tsecurity.de/de/3695049/sicherheitsluecken/cve-2026-64494-linux-kernel-up-to-72-rc2-iio-light-gp2ap002-gp2ap002readraw-release-of-resource-euvd-2026-48838/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695049/sicherheitsluecken/cve-2026-64494-linux-kernel-up-to-72-rc2-iio-light-gp2ap002-gp2ap002readraw-release-of-resource-euvd-2026-48838/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:08 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability labeled as <a href="https://vuldb.com/kb/risk">critical</a> has been found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.2-rc2</a>. This issue affects the function <code>gp2ap002_read_raw</code> of the component <em>iio light gp2ap002</em>. Such manipulation leads to missing release of resource.

This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-64494">CVE-2026-64494</a>. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64495 | Linux Kernel up to 7.1.3 Bmg160 bmg160_core.c bmg160_get_filter/bmg160_set_filter bw_bits out-of-bounds (EUVD-2026-48839)]]></title>
<description><![CDATA[A vulnerability described as critical has been identified in Linux Kernel up to 7.1.3. The affected element is the function bmg160_get_filter/bmg160_set_filter of the file drivers/iio/gyro/bmg160_core.c of the component Bmg160. Executing a manipulation of the argument bw_bits can lead to out-of-b...]]></description>
<link>https://tsecurity.de/de/3695050/sicherheitsluecken/cve-2026-64495-linux-kernel-up-to-713-bmg160-bmg160corec-bmg160getfilterbmg160setfilter-bwbits-out-of-bounds-euvd-2026-48839/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695050/sicherheitsluecken/cve-2026-64495-linux-kernel-up-to-713-bmg160-bmg160corec-bmg160getfilterbmg160setfilter-bwbits-out-of-bounds-euvd-2026-48839/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:08 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability described as <a href="https://vuldb.com/kb/risk">critical</a> has been identified in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. The affected element is the function <code>bmg160_get_filter/bmg160_set_filter</code> of the file <em>drivers/iio/gyro/bmg160_core.c</em> of the component <em>Bmg160</em>. Executing a manipulation of the argument <em>bw_bits</em> can lead to out-of-bounds read.

This vulnerability is registered as <a href="https://vuldb.com/cve/CVE-2026-64495">CVE-2026-64495</a>. The attack needs to be launched locally. No exploit is available.

Upgrading the affected component is recommended.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-17432 | NousResearch hermes-agent 2026.6.5 SimpleX Gateway Authorization adapter.py contactId access control (44729/44730 / EUVD-2026-49046)]]></title>
<description><![CDATA[A vulnerability labeled as critical has been found in NousResearch hermes-agent 2026.6.5. Affected by this vulnerability is an unknown functionality of the file hermes-agent/plugins/platforms/simplex/adapter.py of the component SimpleX Gateway Authorization. The manipulation of the argument conta...]]></description>
<link>https://tsecurity.de/de/3695051/sicherheitsluecken/cve-2026-17432-nousresearch-hermes-agent-202665-simplex-gateway-authorization-adapterpy-contactid-access-control-4472944730-euvd-2026-49046/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695051/sicherheitsluecken/cve-2026-17432-nousresearch-hermes-agent-202665-simplex-gateway-authorization-adapterpy-contactid-access-control-4472944730-euvd-2026-49046/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:08 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability labeled as <a href="https://vuldb.com/kb/risk">critical</a> has been found in <a href="https://vuldb.com/product/nousresearch:hermes-agent">NousResearch hermes-agent 2026.6.5</a>. Affected by this vulnerability is an unknown functionality of the file <em>hermes-agent/plugins/platforms/simplex/adapter.py</em> of the component <em>SimpleX Gateway Authorization</em>. The manipulation of the argument <em>contactId</em> results in improper access controls.

This vulnerability is cataloged as <a href="https://vuldb.com/cve/CVE-2026-17432">CVE-2026-17432</a>. The attack may be launched remotely. Furthermore, there is an exploit available.

Applying a patch is advised to resolve this issue.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64488 | Linux Kernel up to 7.1.3 ALSA layout.c snd_ctl_new1 null pointer dereference (EUVD-2026-48832)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.1.3. It has been declared as very critical. Affected by this vulnerability is the function snd_ctl_new1 of the file layout.c of the component ALSA. Executing a manipulation can lead to null pointer dereference.

The identification of this vulnerab...]]></description>
<link>https://tsecurity.de/de/3695044/sicherheitsluecken/cve-2026-64488-linux-kernel-up-to-713-alsa-layoutc-sndctlnew1-null-pointer-dereference-euvd-2026-48832/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695044/sicherheitsluecken/cve-2026-64488-linux-kernel-up-to-713-alsa-layoutc-sndctlnew1-null-pointer-dereference-euvd-2026-48832/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:07 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. It has been declared as <a href="https://vuldb.com/kb/risk">very critical</a>. Affected by this vulnerability is the function <code>snd_ctl_new1</code> of the file <em>layout.c</em> of the component <em>ALSA</em>. Executing a manipulation can lead to null pointer dereference.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2026-64488">CVE-2026-64488</a>. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64489 | Linux Kernel up to 7.1.3 ALSA snd_ctl_new1 null pointer dereference (EUVD-2026-48833)]]></title>
<description><![CDATA[A vulnerability identified as critical has been detected in Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3. This vulnerability affects the function snd_ctl_new1 of the component ALSA. This manipulation causes null pointer dereference.

This vulnerability is tracked as CVE-2026-64489. Th...]]></description>
<link>https://tsecurity.de/de/3695045/sicherheitsluecken/cve-2026-64489-linux-kernel-up-to-713-alsa-sndctlnew1-null-pointer-dereference-euvd-2026-48833/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695045/sicherheitsluecken/cve-2026-64489-linux-kernel-up-to-713-alsa-sndctlnew1-null-pointer-dereference-euvd-2026-48833/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:07 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">critical</a> has been detected in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3</a>. This vulnerability affects the function <code>snd_ctl_new1</code> of the component <em>ALSA</em>. This manipulation causes null pointer dereference.

This vulnerability is tracked as <a href="https://vuldb.com/cve/CVE-2026-64489">CVE-2026-64489</a>. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64491 | Linux Kernel up to 6.18.38/7.1.3/7.2-rc1 ALSA usx2y tascam_disconnect use after free (EUVD-2026-48835)]]></title>
<description><![CDATA[A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.18.38/7.1.3/7.2-rc1. The impacted element is the function tascam_disconnect of the component ALSA usx2y. The manipulation results in use after free.

This vulnerability is known as CVE-2026-64491. Attacking local...]]></description>
<link>https://tsecurity.de/de/3695046/sicherheitsluecken/cve-2026-64491-linux-kernel-up-to-6183871372-rc1-alsa-usx2y-tascamdisconnect-use-after-free-euvd-2026-48835/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695046/sicherheitsluecken/cve-2026-64491-linux-kernel-up-to-6183871372-rc1-alsa-usx2y-tascamdisconnect-use-after-free-euvd-2026-48835/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:07 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">critical</a>, was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.18.38/7.1.3/7.2-rc1</a>. The impacted element is the function <code>tascam_disconnect</code> of the component <em>ALSA usx2y</em>. The manipulation results in use after free.

This vulnerability is known as <a href="https://vuldb.com/cve/CVE-2026-64491">CVE-2026-64491</a>. Attacking locally is a requirement. No exploit is available.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64492 | Linux Kernel up to 6.18.38/7.1.3 iio temperature driver tmp006_probe use after free (EUVD-2026-48836)]]></title>
<description><![CDATA[A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.18.38/7.1.3. This affects the function tmp006_probe of the component iio temperature driver. The manipulation results in use after free.

This vulnerability is identified as CVE-2026-64492. The attack is only poss...]]></description>
<link>https://tsecurity.de/de/3695047/sicherheitsluecken/cve-2026-64492-linux-kernel-up-to-61838713-iio-temperature-driver-tmp006probe-use-after-free-euvd-2026-48836/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695047/sicherheitsluecken/cve-2026-64492-linux-kernel-up-to-61838713-iio-temperature-driver-tmp006probe-use-after-free-euvd-2026-48836/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:07 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability categorized as <a href="https://vuldb.com/kb/risk">critical</a> has been discovered in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.18.38/7.1.3</a>. This affects the function <code>tmp006_probe</code> of the component <em>iio temperature driver</em>. The manipulation results in use after free.

This vulnerability is identified as <a href="https://vuldb.com/cve/CVE-2026-64492">CVE-2026-64492</a>. The attack is only possible with local access. There is not any exploit available.

It is advisable to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34811 | Endian Firewall 3.3.25 Parameter /cgi-bin/xtaccess.cgi remark cross site scripting]]></title>
<description><![CDATA[A vulnerability, which was classified as problematic, was found in Endian Firewall 3.3.25. Affected by this issue is some unknown functionality of the file /cgi-bin/xtaccess.cgi of the component Parameter Handler. Executing a manipulation of the argument remark can lead to cross site scripting.

...]]></description>
<link>https://tsecurity.de/de/3695038/sicherheitsluecken/cve-2026-34811-endian-firewall-3325-parameter-cgi-binxtaccesscgi-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695038/sicherheitsluecken/cve-2026-34811-endian-firewall-3325-parameter-cgi-binxtaccesscgi-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:06 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">problematic</a>, was found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. Affected by this issue is some unknown functionality of the file <em>/cgi-bin/xtaccess.cgi</em> of the component <em>Parameter Handler</em>. Executing a manipulation of the argument <em>remark</em> can lead to cross site scripting.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-34811">CVE-2026-34811</a>. The attack can be executed remotely. There is not any exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34812 | Endian Firewall 3.3.25 Parameter /cgi-bin/proxypolicy.cgi mimetypes cross site scripting]]></title>
<description><![CDATA[A vulnerability has been found in Endian Firewall 3.3.25 and classified as problematic. This affects an unknown part of the file /cgi-bin/proxypolicy.cgi of the component Parameter Handler. The manipulation of the argument mimetypes leads to cross site scripting.

This vulnerability is uniquely i...]]></description>
<link>https://tsecurity.de/de/3695039/sicherheitsluecken/cve-2026-34812-endian-firewall-3325-parameter-cgi-binproxypolicycgi-mimetypes-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695039/sicherheitsluecken/cve-2026-34812-endian-firewall-3325-parameter-cgi-binproxypolicycgi-mimetypes-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:06 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability has been found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a> and classified as <a href="https://vuldb.com/kb/risk">problematic</a>. This affects an unknown part of the file <em>/cgi-bin/proxypolicy.cgi</em> of the component <em>Parameter Handler</em>. The manipulation of the argument <em>mimetypes</em> leads to cross site scripting.

This vulnerability is uniquely identified as <a href="https://vuldb.com/cve/CVE-2026-34812">CVE-2026-34812</a>. The attack is possible to be carried out remotely. No exploit exists.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34813 | Endian Firewall 3.3.25 Parameter /cgi-bin/proxyuser.cgi User cross site scripting]]></title>
<description><![CDATA[A vulnerability was found in Endian Firewall 3.3.25 and classified as problematic. This vulnerability affects unknown code of the file /cgi-bin/proxyuser.cgi of the component Parameter Handler. The manipulation of the argument User results in cross site scripting.

This vulnerability was named CV...]]></description>
<link>https://tsecurity.de/de/3695040/sicherheitsluecken/cve-2026-34813-endian-firewall-3325-parameter-cgi-binproxyusercgi-user-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695040/sicherheitsluecken/cve-2026-34813-endian-firewall-3325-parameter-cgi-binproxyusercgi-user-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:06 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a> and classified as <a href="https://vuldb.com/kb/risk">problematic</a>. This vulnerability affects unknown code of the file <em>/cgi-bin/proxyuser.cgi</em> of the component <em>Parameter Handler</em>. The manipulation of the argument <em>User</em> results in cross site scripting.

This vulnerability was named <a href="https://vuldb.com/cve/CVE-2026-34813">CVE-2026-34813</a>. The attack may be performed from remote. There is no available exploit.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64486 | Linux Kernel up to 7.1.3 cmipci snd_cmipci_spdif_controls null pointer dereference (EUVD-2026-48830)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3 and classified as problematic. This impacts the function snd_cmipci_spdif_controls of the component cmipci. Such manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as CVE-...]]></description>
<link>https://tsecurity.de/de/3695041/sicherheitsluecken/cve-2026-64486-linux-kernel-up-to-713-cmipci-sndcmipcispdifcontrols-null-pointer-dereference-euvd-2026-48830/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695041/sicherheitsluecken/cve-2026-64486-linux-kernel-up-to-713-cmipci-sndcmipcispdifcontrols-null-pointer-dereference-euvd-2026-48830/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:06 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3</a> and classified as <a href="https://vuldb.com/kb/risk">problematic</a>. This impacts the function <code>snd_cmipci_spdif_controls</code> of the component <em>cmipci</em>. Such manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as <a href="https://vuldb.com/cve/CVE-2026-64486">CVE-2026-64486</a>. Local access is required to approach this attack. No exploit exists.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64487 | Linux Kernel up to 7.1.3 ALSA snd_usb_caiaq_tks4_dispatch out-of-bounds (EUVD-2026-48831)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 7.1.3. It has been rated as problematic. Affected by this issue is the function snd_usb_caiaq_tks4_dispatch of the component ALSA. The manipulation leads to out-of-bounds read.

This vulnerability is referenced as CVE-2026-64487. The attack can only...]]></description>
<link>https://tsecurity.de/de/3695042/sicherheitsluecken/cve-2026-64487-linux-kernel-up-to-713-alsa-sndusbcaiaqtks4dispatch-out-of-bounds-euvd-2026-48831/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695042/sicherheitsluecken/cve-2026-64487-linux-kernel-up-to-713-alsa-sndusbcaiaqtks4dispatch-out-of-bounds-euvd-2026-48831/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:06 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 7.1.3</a>. It has been rated as <a href="https://vuldb.com/kb/risk">problematic</a>. Affected by this issue is the function <code>snd_usb_caiaq_tks4_dispatch</code> of the component <em>ALSA</em>. The manipulation leads to out-of-bounds read.

This vulnerability is referenced as <a href="https://vuldb.com/cve/CVE-2026-64487">CVE-2026-64487</a>. The attack can only be performed from a local environment. No exploit is available.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-64490 | Linux Kernel up to 6.12.95/6.18.38/7.1.3 ALSA virtsnd_kctl_parse_cfg out-of-bounds (EUVD-2026-48834)]]></title>
<description><![CDATA[A vulnerability was found in Linux Kernel up to 6.12.95/6.18.38/7.1.3. It has been classified as very critical. Affected is the function virtsnd_kctl_parse_cfg of the component ALSA. Performing a manipulation results in out-of-bounds read.

This vulnerability was named CVE-2026-64490. The attack ...]]></description>
<link>https://tsecurity.de/de/3695043/sicherheitsluecken/cve-2026-64490-linux-kernel-up-to-6129561838713-alsa-virtsndkctlparsecfg-out-of-bounds-euvd-2026-48834/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695043/sicherheitsluecken/cve-2026-64490-linux-kernel-up-to-6129561838713-alsa-virtsndkctlparsecfg-out-of-bounds-euvd-2026-48834/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:06 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/linux:kernel">Linux Kernel up to 6.12.95/6.18.38/7.1.3</a>. It has been classified as <a href="https://vuldb.com/kb/risk">very critical</a>. Affected is the function <code>virtsnd_kctl_parse_cfg</code> of the component <em>ALSA</em>. Performing a manipulation results in out-of-bounds read.

This vulnerability was named <a href="https://vuldb.com/cve/CVE-2026-64490">CVE-2026-64490</a>. The attack needs to be approached locally. There is no available exploit.

Upgrading the affected component is recommended.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34809 | Endian Firewall 3.3.25 Parameter /cgi-bin/zonefw.cgi remark cross site scripting]]></title>
<description><![CDATA[A vulnerability described as problematic has been identified in Endian Firewall 3.3.25. This affects an unknown function of the file /cgi-bin/zonefw.cgi of the component Parameter Handler. The manipulation of the argument remark results in cross site scripting.

This vulnerability is reported as ...]]></description>
<link>https://tsecurity.de/de/3695034/sicherheitsluecken/cve-2026-34809-endian-firewall-3325-parameter-cgi-binzonefwcgi-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695034/sicherheitsluecken/cve-2026-34809-endian-firewall-3325-parameter-cgi-binzonefwcgi-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:05 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability described as <a href="https://vuldb.com/kb/risk">problematic</a> has been identified in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. This affects an unknown function of the file <em>/cgi-bin/zonefw.cgi</em> of the component <em>Parameter Handler</em>. The manipulation of the argument <em>remark</em> results in cross site scripting.

This vulnerability is reported as <a href="https://vuldb.com/cve/CVE-2026-34809">CVE-2026-34809</a>. The attack can be launched remotely. No exploit exists.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34808 | Endian Firewall 3.3.25 Parameter /cgi-bin/outgoingfw.cgi remark cross site scripting]]></title>
<description><![CDATA[A vulnerability marked as problematic has been reported in Endian Firewall 3.3.25. The impacted element is an unknown function of the file /cgi-bin/outgoingfw.cgi of the component Parameter Handler. The manipulation of the argument remark leads to cross site scripting.

This vulnerability is docu...]]></description>
<link>https://tsecurity.de/de/3695035/sicherheitsluecken/cve-2026-34808-endian-firewall-3325-parameter-cgi-binoutgoingfwcgi-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695035/sicherheitsluecken/cve-2026-34808-endian-firewall-3325-parameter-cgi-binoutgoingfwcgi-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:05 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability marked as <a href="https://vuldb.com/kb/risk">problematic</a> has been reported in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. The impacted element is an unknown function of the file <em>/cgi-bin/outgoingfw.cgi</em> of the component <em>Parameter Handler</em>. The manipulation of the argument <em>remark</em> leads to cross site scripting.

This vulnerability is documented as <a href="https://vuldb.com/cve/CVE-2026-34808">CVE-2026-34808</a>. The attack can be initiated remotely. There is not any exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34810 | Endian Firewall 3.3.25 Parameter /cgi-bin/vpnfw.cgi remark cross site scripting]]></title>
<description><![CDATA[A vulnerability classified as problematic has been found in Endian Firewall 3.3.25. This impacts an unknown function of the file /cgi-bin/vpnfw.cgi of the component Parameter Handler. This manipulation of the argument remark causes cross site scripting.

This vulnerability appears as CVE-2026-348...]]></description>
<link>https://tsecurity.de/de/3695036/sicherheitsluecken/cve-2026-34810-endian-firewall-3325-parameter-cgi-binvpnfwcgi-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695036/sicherheitsluecken/cve-2026-34810-endian-firewall-3325-parameter-cgi-binvpnfwcgi-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:05 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">problematic</a> has been found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. This impacts an unknown function of the file <em>/cgi-bin/vpnfw.cgi</em> of the component <em>Parameter Handler</em>. This manipulation of the argument <em>remark</em> causes cross site scripting.

This vulnerability appears as <a href="https://vuldb.com/cve/CVE-2026-34810">CVE-2026-34810</a>. The attack may be initiated remotely. There is no available exploit.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34814 | Endian Firewall 3.3.25 Parameter /cgi-bin/proxygroup.cgi group cross site scripting]]></title>
<description><![CDATA[A vulnerability classified as problematic was found in Endian Firewall 3.3.25. Affected is an unknown function of the file /cgi-bin/proxygroup.cgi of the component Parameter Handler. Such manipulation of the argument group leads to cross site scripting.

This vulnerability is traded as CVE-2026-3...]]></description>
<link>https://tsecurity.de/de/3695037/sicherheitsluecken/cve-2026-34814-endian-firewall-3325-parameter-cgi-binproxygroupcgi-group-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695037/sicherheitsluecken/cve-2026-34814-endian-firewall-3325-parameter-cgi-binproxygroupcgi-group-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:05 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">problematic</a> was found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. Affected is an unknown function of the file <em>/cgi-bin/proxygroup.cgi</em> of the component <em>Parameter Handler</em>. Such manipulation of the argument <em>group</em> leads to cross site scripting.

This vulnerability is traded as <a href="https://vuldb.com/cve/CVE-2026-34814">CVE-2026-34814</a>. The attack may be launched remotely. There is no exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34805 | Endian Firewall 3.3.25 Parameter /cgi-bin/dnat.cgi remark cross site scripting]]></title>
<description><![CDATA[A vulnerability categorized as problematic has been discovered in Endian Firewall 3.3.25. This issue affects some unknown processing of the file /cgi-bin/dnat.cgi of the component Parameter Handler. Such manipulation of the argument remark leads to cross site scripting.

This vulnerability is lis...]]></description>
<link>https://tsecurity.de/de/3695030/sicherheitsluecken/cve-2026-34805-endian-firewall-3325-parameter-cgi-bindnatcgi-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695030/sicherheitsluecken/cve-2026-34805-endian-firewall-3325-parameter-cgi-bindnatcgi-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:04 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability categorized as <a href="https://vuldb.com/kb/risk">problematic</a> has been discovered in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. This issue affects some unknown processing of the file <em>/cgi-bin/dnat.cgi</em> of the component <em>Parameter Handler</em>. Such manipulation of the argument <em>remark</em> leads to cross site scripting.

This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-34805">CVE-2026-34805</a>. The attack may be performed from remote. There is no available exploit.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34804 | Endian Firewall 3.3.25 Parameter /manage/qos/rules/ dscp cross site scripting]]></title>
<description><![CDATA[A vulnerability was found in Endian Firewall 3.3.25. It has been rated as problematic. This vulnerability affects unknown code of the file /manage/qos/rules/ of the component Parameter Handler. This manipulation of the argument dscp causes cross site scripting.

This vulnerability is tracked as C...]]></description>
<link>https://tsecurity.de/de/3695031/sicherheitsluecken/cve-2026-34804-endian-firewall-3325-parameter-manageqosrules-dscp-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695031/sicherheitsluecken/cve-2026-34804-endian-firewall-3325-parameter-manageqosrules-dscp-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:04 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. It has been rated as <a href="https://vuldb.com/kb/risk">problematic</a>. This vulnerability affects unknown code of the file <em>/manage/qos/rules/</em> of the component <em>Parameter Handler</em>. This manipulation of the argument <em>dscp</em> causes cross site scripting.

This vulnerability is tracked as <a href="https://vuldb.com/cve/CVE-2026-34804">CVE-2026-34804</a>. The attack is possible to be carried out remotely. No exploit exists.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34807 | Endian Firewall 3.3.25 Parameter /cgi-bin/incoming.cgi remark cross site scripting]]></title>
<description><![CDATA[A vulnerability labeled as problematic has been found in Endian Firewall 3.3.25. The affected element is an unknown function of the file /cgi-bin/incoming.cgi of the component Parameter Handler. Executing a manipulation of the argument remark can lead to cross site scripting.

This vulnerability ...]]></description>
<link>https://tsecurity.de/de/3695032/sicherheitsluecken/cve-2026-34807-endian-firewall-3325-parameter-cgi-binincomingcgi-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695032/sicherheitsluecken/cve-2026-34807-endian-firewall-3325-parameter-cgi-binincomingcgi-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:04 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability labeled as <a href="https://vuldb.com/kb/risk">problematic</a> has been found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. The affected element is an unknown function of the file <em>/cgi-bin/incoming.cgi</em> of the component <em>Parameter Handler</em>. Executing a manipulation of the argument <em>remark</em> can lead to cross site scripting.

This vulnerability is registered as <a href="https://vuldb.com/cve/CVE-2026-34807">CVE-2026-34807</a>. It is possible to launch the attack remotely. No exploit is available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34806 | Endian Firewall 3.3.25 Parameter /cgi-bin/snat.cgi remark cross site scripting]]></title>
<description><![CDATA[A vulnerability identified as problematic has been detected in Endian Firewall 3.3.25. Impacted is an unknown function of the file /cgi-bin/snat.cgi of the component Parameter Handler. Performing a manipulation of the argument remark results in cross site scripting.

This vulnerability is catalog...]]></description>
<link>https://tsecurity.de/de/3695033/sicherheitsluecken/cve-2026-34806-endian-firewall-3325-parameter-cgi-binsnatcgi-remark-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695033/sicherheitsluecken/cve-2026-34806-endian-firewall-3325-parameter-cgi-binsnatcgi-remark-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:04 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">problematic</a> has been detected in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. Impacted is an unknown function of the file <em>/cgi-bin/snat.cgi</em> of the component <em>Parameter Handler</em>. Performing a manipulation of the argument <em>remark</em> results in cross site scripting.

This vulnerability is cataloged as <a href="https://vuldb.com/cve/CVE-2026-34806">CVE-2026-34806</a>. It is possible to initiate the attack remotely. There is no exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34803 | Endian Firewall 3.3.25 Parameter /manage/qos/classes/ Name cross site scripting]]></title>
<description><![CDATA[A vulnerability was found in Endian Firewall 3.3.25. It has been declared as problematic. This affects an unknown part of the file /manage/qos/classes/ of the component Parameter Handler. The manipulation of the argument Name results in cross site scripting.

This vulnerability is identified as C...]]></description>
<link>https://tsecurity.de/de/3695028/sicherheitsluecken/cve-2026-34803-endian-firewall-3325-parameter-manageqosclasses-name-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695028/sicherheitsluecken/cve-2026-34803-endian-firewall-3325-parameter-manageqosclasses-name-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:03 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. It has been declared as <a href="https://vuldb.com/kb/risk">problematic</a>. This affects an unknown part of the file <em>/manage/qos/classes/</em> of the component <em>Parameter Handler</em>. The manipulation of the argument <em>Name</em> results in cross site scripting.

This vulnerability is identified as <a href="https://vuldb.com/cve/CVE-2026-34803">CVE-2026-34803</a>. The attack can be executed remotely. There is not any exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-34802 | Endian Firewall 3.3.25 Parameter /cgi-bin/salearn.cgi spam cross site scripting]]></title>
<description><![CDATA[A vulnerability was found in Endian Firewall 3.3.25. It has been classified as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/salearn.cgi of the component Parameter Handler. The manipulation of the argument spam leads to cross site scripting.

This vulnerab...]]></description>
<link>https://tsecurity.de/de/3695029/sicherheitsluecken/cve-2026-34802-endian-firewall-3325-parameter-cgi-binsalearncgi-spam-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695029/sicherheitsluecken/cve-2026-34802-endian-firewall-3325-parameter-cgi-binsalearncgi-spam-cross-site-scripting/</guid>
<pubDate>Sun, 26 Jul 2026 06:36:03 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/endian:firewall">Endian Firewall 3.3.25</a>. It has been classified as <a href="https://vuldb.com/kb/risk">problematic</a>. Affected by this issue is some unknown functionality of the file <em>/cgi-bin/salearn.cgi</em> of the component <em>Parameter Handler</em>. The manipulation of the argument <em>spam</em> leads to cross site scripting.

This vulnerability is referenced as <a href="https://vuldb.com/cve/CVE-2026-34802">CVE-2026-34802</a>. Remote exploitation of the attack is possible. No exploit is available.]]></content:encoded>
</item>
<item>
<title><![CDATA[IT Security News Daily Summary 2026-07-25]]></title>
<description><![CDATA[72 posts were published in the last hour 20:31 : Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable 20:31 : Iran-Linked Actors Breach Are Targeting US Water and Energy Control Systems 20:31 : The hacker who…
Read more →
The post IT Security News Daily Summary 2026-0...]]></description>
<link>https://tsecurity.de/de/3695013/it-security-nachrichten/it-security-news-daily-summary-2026-07-25/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695013/it-security-nachrichten/it-security-news-daily-summary-2026-07-25/</guid>
<pubDate>Sun, 26 Jul 2026 06:34:12 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>72 posts were published in the last hour 20:31 : Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable 20:31 : Iran-Linked Actors Breach Are Targeting US Water and Energy Control Systems 20:31 : The hacker who…</p>
<p class="more-link-p"><a class="more-link" href="https://www.itsecuritynews.info/it-security-news-daily-summary-2026-07-25/">Read more →</a></p>
<p>The post <a href="https://www.itsecuritynews.info/it-security-news-daily-summary-2026-07-25/">IT Security News Daily Summary 2026-07-25</a> appeared first on <a href="https://www.itsecuritynews.info/">IT Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[IT Security News Hourly Summary 2026-07-26 03h : 1 posts]]></title>
<description><![CDATA[1 posts were published in the last hour 1:1 : Beyond the blind spots: Defeating frontier AI model threats in your application development process
Read more →
The post IT Security News Hourly Summary 2026-07-26 03h : 1 posts appeared first on IT Security News.]]></description>
<link>https://tsecurity.de/de/3695008/it-security-nachrichten/it-security-news-hourly-summary-2026-07-26-03h-1-posts/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695008/it-security-nachrichten/it-security-news-hourly-summary-2026-07-26-03h-1-posts/</guid>
<pubDate>Sun, 26 Jul 2026 06:34:11 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>1 posts were published in the last hour 1:1 : Beyond the blind spots: Defeating frontier AI model threats in your application development process</p>
<p class="more-link-p"><a class="more-link" href="https://www.itsecuritynews.info/it-security-news-hourly-summary-2026-07-26-03h-1-posts/">Read more →</a></p>
<p>The post <a href="https://www.itsecuritynews.info/it-security-news-hourly-summary-2026-07-26-03h-1-posts/">IT Security News Hourly Summary 2026-07-26 03h : 1 posts</a> appeared first on <a href="https://www.itsecuritynews.info/">IT Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[IT Security News Hourly Summary 2026-07-26 00h : 1 posts]]></title>
<description><![CDATA[1 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-07-25
Read more →
The post IT Security News Hourly Summary 2026-07-26 00h : 1 posts appeared first on IT Security News.]]></description>
<link>https://tsecurity.de/de/3695012/it-security-nachrichten/it-security-news-hourly-summary-2026-07-26-00h-1-posts/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695012/it-security-nachrichten/it-security-news-hourly-summary-2026-07-26-00h-1-posts/</guid>
<pubDate>Sun, 26 Jul 2026 06:34:11 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<p>1 posts were published in the last hour 21:55 : IT Security News Daily Summary 2026-07-25</p>
<p class="more-link-p"><a class="more-link" href="https://www.itsecuritynews.info/it-security-news-hourly-summary-2026-07-26-00h-1-posts/">Read more →</a></p>
<p>The post <a href="https://www.itsecuritynews.info/it-security-news-hourly-summary-2026-07-26-00h-1-posts/">IT Security News Hourly Summary 2026-07-26 00h : 1 posts</a> appeared first on <a href="https://www.itsecuritynews.info/">IT Security News</a>.</p>]]></content:encoded>
</item>
<item>
<title><![CDATA[So lesen Sie im Gesicht Ihres Chefs]]></title>
<description><![CDATA[Indem Sie die Gesichtsstruktur Ihres Chefs analysieren, erkennen Sie, was ihn antreibt und wie Sie Konflikte vermeiden können.PeopleImages.com – Yuri A – Shutterstock 2545291163



Für Laien mag das wie ein Märchen klingen, aber: Das Gesicht eines Menschen ist wie ein offenes Buch. Es erzählt von...]]></description>
<link>https://tsecurity.de/de/3695005/it-security-nachrichten/so-lesen-sie-im-gesicht-ihres-chefs/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3695005/it-security-nachrichten/so-lesen-sie-im-gesicht-ihres-chefs/</guid>
<pubDate>Sun, 26 Jul 2026 06:33:30 +0200</pubDate>
<category>📰 IT Security Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[<div>
		<div class="grid grid--cols-10@md grid--cols-8@lg article-column">
					  <div class="col-12 col-10@md col-6@lg col-start-3@lg">
						<div class="article-column__content">
<section class="wp-block-bigbite-multi-title"><div class="container"></div></section>


<div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large"><img loading="lazy" src="https://b2b-contenthub.com/wp-content/uploads/2025/06/Gesichtlesen-shutterstock_2545291163.jpg?quality=50&amp;strip=all&amp;w=1024" alt="Psychophysiognomie, im Gesicht lesen" class="wp-image-4014978" width="1024" height="576" sizes="auto, (max-width: 1024px) 100vw, 1024px"><figcaption class="wp-element-caption">Indem Sie die Gesichtsstruktur Ihres Chefs analysieren, erkennen Sie, was ihn antreibt und wie Sie Konflikte vermeiden können.</figcaption></figure><a href="https://enterprise.shutterstock.com/de/image-photo/men-hr-meeting-complaint-office-disciplinary-2545291163" target="_blank" class="imageCredit" rel="noopener">PeopleImages.com – Yuri A – Shutterstock 2545291163</a></div>



<p class="wp-block-paragraph">Für Laien mag das wie ein Märchen klingen, aber: Das Gesicht eines Menschen ist wie ein offenes Buch. Es erzählt von <a href="https://www.cio.de/article/3669323/das-zeichnet-einen-guten-chef-aus.html" data-type="link" data-id="https://www.cio.de/article/3669323/das-zeichnet-einen-guten-chef-aus.html">Charaktereigenschaften</a>, Denkmustern und natürlich auch vom Führungsstil. Die Wurzeln dieser Wissenschaft der <a href="https://de.wikipedia.org/wiki/Psycho-Physiognomik">Psychophysiognomie</a> reichen Jahrtausende zurück und werden heute in vielen Bereichen genutzt, von der Kriminalistik bis zur Persönlichkeitsentwicklung. </p>



<p class="wp-block-paragraph"> </p>



<h2 class="wp-block-heading">Das Bewegungsnaturell</h2>



<p class="wp-block-paragraph">Die Formensprache eines Gesichts gibt wertvolle Hinweise. Markante, eckige Formen wie ein breiter Kiefer und dominante Wangenknochen deuten auf das Bewegungsnaturell hin. Solche Chefs sind „Macher“, lieben Herausforderungen und handeln zielstrebig. Ihr <a href="https://www.computerwoche.de/article/3539125/partizipatives-employer-branding-was-fur-den-fuhrungsstil-spricht.html" data-type="link" data-id="https://www.computerwoche.de/article/3539125/partizipatives-employer-branding-was-fur-den-fuhrungsstil-spricht.html">Führungsstil</a> ist dynamisch und durchsetzungsstark. </p>



<p class="wp-block-paragraph">Doch es gibt eine Kehrseite: Diese Persönlichkeiten können dominant wirken und wenig Geduld aufbringen. Ihre direkte Art fordert klare Kommunikation und schnelle Ergebnisse. </p>



<p class="wp-block-paragraph"><strong>Umgangstipp</strong>: Begegnen Sie solchen Chefs mit gut strukturierten Vorschlägen, ohne lange Erklärungen. Struktur und Fakten statt <a href="https://www.cio.de/article/3674908/wie-chefs-ihre-emotionen-in-den-griff-bekommen-2.html" data-type="link" data-id="https://www.cio.de/article/3674908/wie-chefs-ihre-emotionen-in-den-griff-bekommen-2.html">Emotionen</a> sind hier der Schlüssel. Respektieren Sie seine Entscheidungsfreude, aber zeigen Sie, dass Sie selbst eine starke Position vertreten können. </p>



<p class="wp-block-paragraph"> </p>



<h2 class="wp-block-heading">Das Empfindungsnaturell</h2>



<p class="wp-block-paragraph"><a href="https://www.computerwoche.de/article/3968607/schwache-chefs-kehren-die-schwachen-ihrer-mitarbeiter-hervor.html" data-type="link" data-id="https://www.computerwoche.de/article/3968607/schwache-chefs-kehren-die-schwachen-ihrer-mitarbeiter-hervor.html">Chefs</a> mit feinen, zarten Gesichtszügen und großen Augen sind dem Empfindungsnaturell zuzuordnen. Diese Persönlichkeiten sind kreativ, emphatisch und feinfühlig. Sie legen Wert auf ein harmonisches Arbeitsumfeld, lieben den Dialog und entwickeln kreative Lösungen gemeinsam mit ihrem Umfeld. </p>



<p class="wp-block-paragraph">Aber aufgepasst: Ihre hohe Sensibilität macht sie empfänglich für Konflikte oder Spannungen. Kritik sollte stets diplomatisch formuliert werden, da sie schnell als persönliche Ablehnung wahrgenommen werden kann. </p>



<p class="wp-block-paragraph"><strong>Umgangstipp</strong>: Bauen Sie Vertrauen auf, zeigen Sie <a href="https://www.computerwoche.de/article/2826599/auf-augenhoehe-trennen.html" data-type="link" data-id="https://www.computerwoche.de/article/2826599/auf-augenhoehe-trennen.html">Wertschätzung</a> und Respekt und präsentieren Sie Ideen als Teil eines gemeinsamen Prozesses. </p>



<p class="wp-block-paragraph"> </p>



<h2 class="wp-block-heading">Das Ernährungsnaturell</h2>



<p class="wp-block-paragraph">Schließlich gibt es Chefs, deren Gesichtszüge durch runde Formen geprägt sind – typische Zeichen des Ernährungsnaturells. Sie schätzen Stabilität, Behaglichkeit und klare Strukturen. Ihr Führungsstil ist pragmatisch und auf langfristige Sicherheit ausgerichtet. Sie sind ausgezeichnete <a href="https://www.computerwoche.de/article/3607605/wie-chefs-das-netzwerken-der-mitarbeiter-fordern.html" data-type="link" data-id="https://www.computerwoche.de/article/3607605/wie-chefs-das-netzwerken-der-mitarbeiter-fordern.html">Netzwerker</a> und lieben es, Ressourcen zu planen und zu verteilen.  </p>



<p class="wp-block-paragraph">Achtung: Ihre Komfortzone kann manchmal eine gewisse Trägheit mit sich bringen und sie neigen dazu, Veränderungen nur sehr langsam zu akzeptieren. Sie schätzen bewährte Lösungen und haben eine Vorliebe für Traditionen. </p>



<p class="wp-block-paragraph"><strong>Umgangstipp:</strong> Argumentieren Sie pragmatisch und betonen Sie die Vorteile von Stabilität und Sicherheit. Geben Sie ihnen die Zeit, neue Ideen zu durchdenken und zeigen Sie vor allem klar auf, wie einfach und sinnhaft die Umstellung zum langfristigen Erfolg beiträgt. </p>



<p class="wp-block-paragraph"> </p>



<h2 class="wp-block-heading">Die Mischung macht’s: Kombinierte Naturelle und ihre Ansprechbarkeit</h2>



<p class="wp-block-paragraph">In der Realität sind die wenigsten Menschen einem einzigen Naturell klar zuzuordnen. Häufig vereinen Gesichter Merkmale von zwei – manchmal sogar drei – Naturellen. So treffen beispielsweise die Zielstrebigkeit des Bewegungsnaturells und die Empathie des Empfindungsnaturells aufeinander oder die Stabilität des Ernährungsnaturells wird durch kreative Aspekte des Empfindungsnaturells ergänzt. </p>



<p class="wp-block-paragraph">Viele <a href="https://www.computerwoche.de/article/2774719/nicht-jeder-stellvertreter-eignet-sich-zum-thronfolger.html" data-type="link" data-id="https://www.computerwoche.de/article/2774719/nicht-jeder-stellvertreter-eignet-sich-zum-thronfolger.html">Führungspersönlichkeiten</a> sind übrigens klare Bewegungs-Ernährungs-Naturelle, da der ihnen innewohnende Pragmatismus und die Zielorientiertheit durch die Dynamik des Bewegungsnaturells angeschoben wird. </p>



<p class="wp-block-paragraph"><strong>Tipp</strong>: Achten Sie darauf, welche Merkmale stärker ausgeprägt sind, und gestalten Sie Ihr Verhalten und Ihre Kommunikation entsprechend, das eröffnet ganz neue Möglichkeiten der <a href="https://www.computerwoche.de/article/2830181/so-geht-generationsuebergreifende-zusammenarbeit.html" data-type="link" data-id="https://www.computerwoche.de/article/2830181/so-geht-generationsuebergreifende-zusammenarbeit.html">Zusammenarbeit</a>. </p>



<p class="wp-block-paragraph"> </p>



<h2 class="wp-block-heading">„Du“-Denken oder „Ich“-Denken: Welcher Typ ist Ihr Chef? </h2>



<p class="wp-block-paragraph">Ein weiterer Aspekt der <a href="https://www.computerwoche.de/article/3807778/ki-erkennt-am-gesicht-wer-fur-einen-job-geeignet-ist.html" data-type="link" data-id="https://www.computerwoche.de/article/3807778/ki-erkennt-am-gesicht-wer-fur-einen-job-geeignet-ist.html">Gesichtsdeutung</a> ist, ob jemand im „Ich-“ oder „Du-Modus“ agiert. Eingefallene Wangen und eine große Nase deuten auf ein „Ich“-Denken hin – ergebnisorientiert und zielgerichtet, aber weniger mitarbeiterbezogen. Eine hohe Stirn, volle Wangen und offene Augen signalisieren dagegen den „Du-Modus“. Solche Chefs schätzen <a href="https://www.computerwoche.de/article/2743092/wenn-kollegen-gift-fuers-teamwork-sind.html" data-type="link" data-id="https://www.computerwoche.de/article/2743092/wenn-kollegen-gift-fuers-teamwork-sind.html">Teamgeist</a> und gemeinsame Lösungen. </p>



<p class="wp-block-paragraph"><strong>Tipp</strong>: Stimmen Sie Ihre Kommunikation darauf ab. „Ich“-Denker schätzen klare Ergebnisse, während „Du“-Denker einen wertschätzenden Dialog bevorzugen. </p>



<p class="wp-block-paragraph"> </p>



<h2 class="wp-block-heading">Nutzen statt Urteilen: Wie Gesichtslesen Ihre Arbeitsbeziehung verbessert</h2>



<p class="wp-block-paragraph">Die Psychophysiognomie ist keine Wahrsagerei, sondern eine klare Methode, um Menschen besser zu verstehen. Indem Sie die Gesichtsstruktur Ihres Chefs analysieren, erkennen Sie, was ihn antreibt und wie Sie Konflikte vermeiden können. Dieses Wissen hilft, Vertrauen aufzubauen und effektiver zu agieren. </p>



<p class="wp-block-paragraph">Fakt ist, das Gesichtslesen schärft den Blick für die Einzigartigkeit jedes Menschen, reduziert Missverständnisse und verbessert die Zusammenarbeit. In einer Welt, die stark von zwischenmenschlichen Verbindungen abhängt, ist dies ein unschätzbarer Vorteil. </p>
</div></div></div></div>]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-33073 | Discourse up to 2026.1.2/2026.2.1 information disclosure]]></title>
<description><![CDATA[A vulnerability was found in Discourse up to 2026.1.2/2026.2.1 and classified as problematic. This impacts an unknown function. Executing a manipulation can lead to information disclosure.

The identification of this vulnerability is CVE-2026-33073. The attack may be launched remotely. There is n...]]></description>
<link>https://tsecurity.de/de/3694946/sicherheitsluecken/cve-2026-33073-discourse-up-to-202612202621-information-disclosure/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3694946/sicherheitsluecken/cve-2026-33073-discourse-up-to-202612202621-information-disclosure/</guid>
<pubDate>Sat, 25 Jul 2026 22:49:13 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/discourse">Discourse up to 2026.1.2/2026.2.1</a> and classified as <a href="https://vuldb.com/kb/risk">problematic</a>. This impacts an unknown function. Executing a manipulation can lead to information disclosure.

The identification of this vulnerability is <a href="https://vuldb.com/cve/CVE-2026-33073">CVE-2026-33073</a>. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-30521 | SourceCodester Loan Management System 1.0 Frontend Interface interest_percentage logic error]]></title>
<description><![CDATA[A vulnerability was found in SourceCodester Loan Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component Frontend Interface. This manipulation of the argument interest_percentage causes business logic errors.

This vulnerability ...]]></description>
<link>https://tsecurity.de/de/3694945/sicherheitsluecken/cve-2026-30521-sourcecodester-loan-management-system-10-frontend-interface-interestpercentage-logic-error/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3694945/sicherheitsluecken/cve-2026-30521-sourcecodester-loan-management-system-10-frontend-interface-interestpercentage-logic-error/</guid>
<pubDate>Sat, 25 Jul 2026 22:49:12 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/sourcecodester:loan_management_system">SourceCodester Loan Management System 1.0</a>. It has been rated as <a href="https://vuldb.com/kb/risk">critical</a>. Affected by this issue is some unknown functionality of the component <em>Frontend Interface</em>. This manipulation of the argument <em>interest_percentage</em> causes business logic errors.

This vulnerability is tracked as <a href="https://vuldb.com/cve/CVE-2026-30521">CVE-2026-30521</a>. The attack is possible to be carried out remotely. No exploit exists.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-32726 | scitokens scitokens-cpp up to 1.4.0 authorization]]></title>
<description><![CDATA[A vulnerability described as critical has been identified in scitokens scitokens-cpp up to 1.4.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to incorrect authorization.

This vulnerability is traded as CVE-2026-32726. The attack may be launched remotely. T...]]></description>
<link>https://tsecurity.de/de/3694944/sicherheitsluecken/cve-2026-32726-scitokens-scitokens-cpp-up-to-140-authorization/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3694944/sicherheitsluecken/cve-2026-32726-scitokens-scitokens-cpp-up-to-140-authorization/</guid>
<pubDate>Sat, 25 Jul 2026 22:49:11 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability described as <a href="https://vuldb.com/kb/risk">critical</a> has been identified in <a href="https://vuldb.com/product/scitokens:scitokens-cpp">scitokens scitokens-cpp up to 1.4.0</a>. Affected by this vulnerability is an unknown functionality. Such manipulation leads to incorrect authorization.

This vulnerability is traded as <a href="https://vuldb.com/cve/CVE-2026-32726">CVE-2026-32726</a>. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-32725 | scitokens scitokens-cpp up to 1.4.0 path traversal]]></title>
<description><![CDATA[A vulnerability classified as critical was found in scitokens scitokens-cpp up to 1.4.0. This affects an unknown part. Executing a manipulation can lead to relative path traversal.

This vulnerability is handled as CVE-2026-32725. The attack can be executed remotely. There is not any exploit avai...]]></description>
<link>https://tsecurity.de/de/3694943/sicherheitsluecken/cve-2026-32725-scitokens-scitokens-cpp-up-to-140-path-traversal/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3694943/sicherheitsluecken/cve-2026-32725-scitokens-scitokens-cpp-up-to-140-path-traversal/</guid>
<pubDate>Sat, 25 Jul 2026 22:49:09 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability classified as <a href="https://vuldb.com/kb/risk">critical</a> was found in <a href="https://vuldb.com/product/scitokens:scitokens-cpp">scitokens scitokens-cpp up to 1.4.0</a>. This affects an unknown part. Executing a manipulation can lead to relative path traversal.

This vulnerability is handled as <a href="https://vuldb.com/cve/CVE-2026-32725">CVE-2026-32725</a>. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.]]></content:encoded>
</item>
<item>
<title><![CDATA[KI in der Selbstständigkeit: Wo sie hilft – und wo sie mehr schadet als nützt]]></title>
<description><![CDATA[KI-Tools bieten Solopreneur:innen viele Vorteile und unterstützen bei Rechnungen oder Social-Media-Posts. Gerade da, wo Kreativität und Menschlichkeit gefragt sind, kommen sie aber schnell an ihre Grenzen.
weiterlesen auf t3n.de]]></description>
<link>https://tsecurity.de/de/3694928/it-nachrichten/ki-in-der-selbststaendigkeit-wo-sie-hilft-und-wo-sie-mehr-schadet-als-nuetzt/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3694928/it-nachrichten/ki-in-der-selbststaendigkeit-wo-sie-hilft-und-wo-sie-mehr-schadet-als-nuetzt/</guid>
<pubDate>Sat, 25 Jul 2026 22:30:18 +0200</pubDate>
<category>📰 IT Nachrichten</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[KI-Tools bieten Solopreneur:innen viele Vorteile und unterstützen bei Rechnungen oder Social-Media-Posts. Gerade da, wo Kreativität und Menschlichkeit gefragt sind, kommen sie aber schnell an ihre Grenzen.
<a href="https://t3n.de/news/ki-in-der-selbststaendigkeit-wo-sie-hilft-und-wo-sie-mehr-schadet-als-nuetzt-1754835/?utm_source=rss&amp;utm_medium=newsFeed&amp;utm_campaign=newsFeed">weiterlesen auf t3n.de</a>]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-32113 | Discourse up to 2026.1.2/2026.2.1 sso_destination_url redirect]]></title>
<description><![CDATA[A vulnerability, which was classified as problematic, was found in Discourse up to 2026.1.2/2026.2.1. This issue affects some unknown processing. The manipulation of the argument sso_destination_url results in open redirect.

This vulnerability was named CVE-2026-32113. The attack may be performe...]]></description>
<link>https://tsecurity.de/de/3694912/sicherheitsluecken/cve-2026-32113-discourse-up-to-202612202621-ssodestinationurl-redirect/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3694912/sicherheitsluecken/cve-2026-32113-discourse-up-to-202612202621-ssodestinationurl-redirect/</guid>
<pubDate>Sat, 25 Jul 2026 22:22:08 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">problematic</a>, was found in <a href="https://vuldb.com/product/discourse">Discourse up to 2026.1.2/2026.2.1</a>. This issue affects some unknown processing. The manipulation of the argument <em>sso_destination_url</em> results in open redirect.

This vulnerability was named <a href="https://vuldb.com/cve/CVE-2026-32113">CVE-2026-32113</a>. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-30286 | Funambol Zefiro Cloud 32.0.2026011614 path traversal (ID 14)]]></title>
<description><![CDATA[A vulnerability identified as critical has been detected in Funambol Zefiro Cloud 32.0.2026011614. This vulnerability affects unknown code. Performing a manipulation results in path traversal.

This vulnerability is cataloged as CVE-2026-30286. It is possible to initiate the attack remotely. Ther...]]></description>
<link>https://tsecurity.de/de/3694913/sicherheitsluecken/cve-2026-30286-funambol-zefiro-cloud-3202026011614-path-traversal-id-14/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3694913/sicherheitsluecken/cve-2026-30286-funambol-zefiro-cloud-3202026011614-path-traversal-id-14/</guid>
<pubDate>Sat, 25 Jul 2026 22:22:08 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability identified as <a href="https://vuldb.com/kb/risk">critical</a> has been detected in <a href="https://vuldb.com/product/funambol:zefiro_cloud">Funambol Zefiro Cloud 32.0.2026011614</a>. This vulnerability affects unknown code. Performing a manipulation results in path traversal.

This vulnerability is cataloged as <a href="https://vuldb.com/cve/CVE-2026-30286">CVE-2026-30286</a>. It is possible to initiate the attack remotely. There is no exploit available.]]></content:encoded>
</item>
<item>
<title><![CDATA[CVE-2026-32243 | Discourse up to 2026.1.2/2026.2.1 cross site scripting]]></title>
<description><![CDATA[A vulnerability was found in Discourse up to 2026.1.2/2026.2.1 and classified as problematic. The affected element is an unknown function. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-32243. It is possible to launch the attack remotely. No exploit...]]></description>
<link>https://tsecurity.de/de/3694909/sicherheitsluecken/cve-2026-32243-discourse-up-to-202612202621-cross-site-scripting/</link>
<guid isPermaLink="true">https://tsecurity.de/de/3694909/sicherheitsluecken/cve-2026-32243-discourse-up-to-202612202621-cross-site-scripting/</guid>
<pubDate>Sat, 25 Jul 2026 22:22:07 +0200</pubDate>
<category>🕵️ Sicherheitslücken</category>
<source url="https://tsecurity.de">tsecurity.de</source>
<content:encoded><![CDATA[A vulnerability was found in <a href="https://vuldb.com/product/discourse">Discourse up to 2026.1.2/2026.2.1</a> and classified as <a href="https://vuldb.com/kb/risk">problematic</a>. The affected element is an unknown function. Such manipulation leads to cross site scripting.

This vulnerability is referenced as <a href="https://vuldb.com/cve/CVE-2026-32243">CVE-2026-32243</a>. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.]]></content:encoded>
</item>
</channel>
</rss>
<!-- Generated in 3,69ms -->