This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Qlib. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. Weiterlesen: ZDI-26-848: Microsoft Qlib StaticDataLoader Deserialization of Untrus…
Intelligence View
⚡ tsecurity.de Intelligence
ZDI-26-848: Microsoft Qlib StaticDataLoader Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Qlib. User interaction is required to exploit this…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 86%
Öffentlich erreichbare Dienste mit OpenVAS scannen, WAF-Regeln schärfen, Patch-Fenster verkürzen.
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
9 Quellen
CVE-2026-109150 | WP PageNavi Style Plugin up to 1.4 on WordPress cross site scripting (EUVD-2026-117357)
8 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-107787 | CatFolders Plugin up to 2.5.6 on WordPress Folder Maintenance Action authorization (EUVD-2026-117356) VVulDB Updatesvor 2 Std.CVE-2026-107786 | CatFolders Plugin up to 2.5.6 on WordPress sql injection (EUVD-2026-117355) VVulDB Updatesvor 2 Std.CVE-2026-107775 | Dokan Plugin up to 5.3.2 on WordPress authorization (EUVD-2026-117354) VVulDB Updatesvor 2 Std.CVE-2026-107774 | Dokan Plugin up to 5.3.2 on WordPress Contact Form authentication spoofing (EUVD-2026-117353) VVulDB Updatesvor 4 Std.CVE-2026-73996 | Masteriyo Plugin up to 2.3.2 on WordPress unrestricted upload (EUVD-2026-60810) VVulDB Updatesvor 4 Std.CVE-2026-62041 | Ashok Dudhat Event Manager Plugin up to 3.4.1 on WordPress authorization (EUVD-2026-95728)
+2
7 Quellen
CVE-2022-4052 | Student Attendance Management System /Admin/createClass.php Id sql injection (EUVD-2022-51429)
6 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2022-4053 | Student Attendance Management System createClass.php className cross site scripting (EUVD-2022-51430) VVulDB Updatesvor 2 Std.CVE-2022-4088 | rickxy Stock Management System /pages/processlogin.php user/password sql injection (EUVD-2022-51459) VVulDB Updatesvor 2 Std.CVE-2022-4089 | rickxy Stock Management System /pages/processlogin.php user cross site scripting (EUVD-2022-51460) VVulDB Updatesvor 5 Std.CVE-2025-64070 | SourceCodester Student Grades Management System 1.0 Add New Subject Description cross site scripting VVulDB Updatesvor 5 Std.CVE-2025-65881 | SourceCodester Zoo Management System 1.0 /classes/Login.php cross site scripting VVulDB Updatesvor 5 Std.CVE-2025-65215 | SourceCodester Web-based Pharmacy Product Management System 1.0 add-supplier.php Name cross site scripting
5 Quellen
CVE-2023-53729 | Linux Kernel up to 6.5.3 soc qmi_encdec out-of-bounds (Nessus ID 376201 / WID-SEC-2025-2394)
4 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-86561 | Red Hat Enterprise Linux lib vhost memory corruption (Nessus ID 376199) VVulDB Updatesvor 2 Std.CVE-2026-86562 | Red Hat Enterprise Linux vhost toctou (Nessus ID 376199) BBSI Warn- und Informationsd…vor 2 Std.[NEU] [hoch] Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff VVulDB Updatesvor 5 Std.CVE-2026-80948 | Linux Kernel up to 6.18.49/7.2.3 iwlwifi iwl_op_mode_dvm_start nvm_data/eeprom_blob memory leak (WID-SEC-2026-3321)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4315426/sicherheitsluecken-cve/zdi-26-848-microsoft-qlib-staticdataloader-deserialization-of-untrusted-data-remote-code-execution-vulnerability/