EILMELDUNGEN LIVE News-Tinder DECK
GLOBAL9.3CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.4CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.8CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.8CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.0CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.(07.11.2026 um 04:34 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-121190 | Google Chrome up to 156.0.8078.79 Extensions cross site scripting (EUVD-2026-116322)(09.11.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-122056 | Red Hat Enterprise Linux SDS Compose buffer overflow (EUVD-2026-120416)(09.11.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-121033 | Google Chrome up to 156.0.8078.79 GPU uninitialized pointer (EUVD-2026-116480)(09.11.2026 um 22:17 Uhr)
•
Apple iOS & macOSApple Security Updates Patch Bluetooth and Messages Vulnerabilities(10.11.2026 um 00:05 Uhr)
•
IT NachrichtenPhishing-Mails von geknackten M365-Konten (OAuth 2.0-Angriffe)(10.11.2026 um 00:03 Uhr)
•
IT NachrichtenPhishing im Namen von Dienstrad-Leasing (Nov. 2026)(10.11.2026 um 00:01 Uhr)
•
IT NachrichtenN-Able wohl Opfer von Able2Shell-Schwachstellen (Nov. 2026)(10.11.2026 um 00:00 Uhr)
•
AI & KI NachrichtenEverything we know so far about the Nvidia spy scandal targeting CEO Jensen Huang(10.11.2026 um 00:07 Uhr)
•
Apple iOS & macOSMeta's Muse AI now has an Apple Watch app, which you shouldn't install(10.11.2026 um 00:03 Uhr)
•
AI & KI NachrichtenHotel giant Wyndham exposed customer data after app security lapse(10.11.2026 um 00:03 Uhr)
•
GLOBAL9.3CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.4CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.8CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.8CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.0CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.(07.11.2026 um 04:34 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-121190 | Google Chrome up to 156.0.8078.79 Extensions cross site scripting (EUVD-2026-116322)(09.11.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-122056 | Red Hat Enterprise Linux SDS Compose buffer overflow (EUVD-2026-120416)(09.11.2026 um 22:17 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-121033 | Google Chrome up to 156.0.8078.79 GPU uninitialized pointer (EUVD-2026-116480)(09.11.2026 um 22:17 Uhr)
•
Apple iOS & macOSApple Security Updates Patch Bluetooth and Messages Vulnerabilities(10.11.2026 um 00:05 Uhr)
•
IT NachrichtenPhishing-Mails von geknackten M365-Konten (OAuth 2.0-Angriffe)(10.11.2026 um 00:03 Uhr)
•
IT NachrichtenPhishing im Namen von Dienstrad-Leasing (Nov. 2026)(10.11.2026 um 00:01 Uhr)
•
IT NachrichtenN-Able wohl Opfer von Able2Shell-Schwachstellen (Nov. 2026)(10.11.2026 um 00:00 Uhr)
•
AI & KI NachrichtenEverything we know so far about the Nvidia spy scandal targeting CEO Jensen Huang(10.11.2026 um 00:07 Uhr)
•
Apple iOS & macOSMeta's Muse AI now has an Apple Watch app, which you shouldn't install(10.11.2026 um 00:03 Uhr)
•
AI & KI NachrichtenHotel giant Wyndham exposed customer data after app security lapse(10.11.2026 um 00:03 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

GitHub Release: can1357/oh-my-pi v18.18.6 (10.11.2026)

Release v18.18.6 von can1357/oh-my-pi auf GitHub: Treat a credential-scoped provider with no cache row after an offline pass as idle, not unavailable, so a…

Admin & Dev Tools GitHub · can1357/oh-my-pi 1 Min. Lesezeit
Beitrag
0
Seite
0
↗ Quelle (GitHub · can1357/oh-my-pi)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
can1357/oh-my-piv18.18.610.11.2026@H4vC

Treat a credential-scoped provider with no cache row after an offline pass as idle, not unavailable, so a cold LiteLLM cache no longer warns about unknown fallback-chain models (regression from #18602).

Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
No reader ratings yet
Was this page helpful?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Related story clusters & sources (vector AI)

Mehr aus dieser Kategorie

GitHub Release: can1357/oh-my-pi v18.18.5 (09.11.2026)
09.11.2026
Firefox Extensions That Work Offline: Grammar, Voice, Habits, and Math Without a Backend
09.11.2026
My Firefox Morning Routine: Weather, Stocks, News, and Tasks Without Opening Any Apps
09.11.2026
Why I Replaced My Weather App Tab with a New Tab Extension (Weather & Clock Dashboard)
09.11.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Pull to refresh
TTS Reader • tsecurity.de Voice
Nächster Beitrag