Posted by disclosure via Fulldisclosure on Oct 150day Rubbish Research Team is publicly disclosing a vulnerability in Auerswald COMmander 6000 and COMmander 6000R, firmware 8.6D build 128154, the closed-source enterprise IP-PBX and unified-communications appliances from Auerswald (Germany). Two unauthenticated HTTP requests, carrying no cookie and... Weiterlesen: [0day-rubbish] Auerswald COMmander 6000 / 6000R 8.6D unauthenticated …
Intelligence View
⚡ tsecurity.de Intelligence
[0day-rubbish] Auerswald COMmander 6000 / 6000R 8.6D unauthenticated provisioning import zip-slip to root binary hijack and root code execution (9.8)
Posted by disclosure via Fulldisclosure on Oct 150day Rubbish Research Team is publicly disclosing a vulnerability in Auerswald COMmander 6000 and COMmander…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
36 Quellen
CVE-2026-72072 | Linux Kernel up to 7.2-rc1 macsec net/mlx5e macsec_del_rxsc_ctx use after free (Nessus ID 369276)
35 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2026-72123 | Linux Kernel up to 7.2-rc3 bcm bcm_delete_rx_op sk use after free (Nessus ID 369276) VVulDB Updatesvor 3 Std.CVE-2026-72251 | Linux Kernel up to 7.2-rc2 nf_nat_sip.c nf_nat_sip buffer overflow (Nessus ID 369276) VVulDB Updatesvor 3 Std.CVE-2026-72135 | Linux Kernel up to 7.2-rc2 TPM Character Device tpm_common_read off out-of-bounds (Nessus ID 369276) VVulDB Updatesvor 3 Std.CVE-2026-72288 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc3 vgic vgic_prune_ap_list use after free (Nessus ID 369276) VVulDB Updatesvor 3 Std.CVE-2026-74345 | Linux Kernel up to 6.12.96/6.18.39/7.1.4 siw siw_cm.c siw_cm_work_handler use after free (Nessus ID 369276) VVulDB Updatesvor 3 Std.CVE-2026-74377 | Linux Kernel up to 7.1.4 rxe rxe_resp_check_length out-of-bounds (Nessus ID 369276)
+29
11 Quellen
CVE-2020-25720 | Samba LDAP improper authorization (EUVD-2020-18374)
10 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2026-114361 | HarnessRouter up to 0.31.10 Identity Mode gateway/app.py X-Harness-Org/X-Harness-Member improper authorization (GHSA-qrr8-m92f-7vfp / EUVD-2026-107496) VVulDB Updatesvor 4 Std.CVE-2026-114135 | Jupyter Server up to 2.5.x GatewayClient GatewayClient.url is_authorized authorization (EUVD-2026-107544) VVulDB Updatesvor 3 Std.CVE-2026-111699 | Niefy wx-api up to 0.8.2 Fan Controller /wxUser/getUserInfo openid improper authentication (EUVD-2026-102990) VVulDB Updatesvor 3 Std.CVE-2026-111689 | Exrick XBoot up to 3.3.4 getByDepartmentId departmentId authorization (EUVD-2026-102980) VVulDB Updatesvor 3 Std.CVE-2026-101640 | Oracle Marketing up to 12.2.15 Audience improper authorization (EUVD-2026-106048) VVulDB Updatesvor 3 Std.CVE-2026-101660 | Oracle Mobile Field Service up to 12.2.15 Admin UI improper authorization (EUVD-2026-106065)
+4
9 Quellen
GitHub Release: openai/codex vrust-v0.164.0-alpha.10 (22.10.2026)
8 weitere Quellen
GGitHubvor 3 Std.GitHub Release: anthropics/claude-code v2.1.307 (22.10.2026) GGitHubvor 1 Std.GitHub Release: ollama/ollama v0.40.9-rc1 (22.10.2026) GGitHubvor 4 Std.GitHub Release: openclaw/openclaw vrelease-publish/59518bfd2a15-1792626457 (21.10.2026) GGitHubvor 4 Std.GitHub Release: openai/codex vrust-v0.163.0-alpha.11.1 (21.10.2026) GGitHubvor 5 Std.GitHub Release: ollama/ollama v0.40.9-rc0 (21.10.2026) GGitHubvor 4 Std.GitHub Release: telegramdesktop/tdesktop v7.3.3 (21.10.2026)
+2
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4272992/sicherheitsluecken-cve/0day-rubbish-auerswald-commander-6000-6000r-86d-unauthenticated-provisioning-import-zip-slip-to-root-binary-hijack-and-root-code-execution-98/