/* Route-Critical (index, V6 §3.6.3 — erzeugt von tools/generate_critical_css.mjs) */ .collapse:not(.show){display:none}.navbar{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between}.navbar>.container-fluid{display:flex;flex-wrap:inherit;align-items:center;justify-content:space-between}.mydraft-svg-icon{display:inline-block;vertical-align:middle;color:currentcolor;flex-shrink:0;transition:color var(--duration-fast, 150ms) ease,stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}.mydraft-svg-icon circle,.mydraft-svg-icon line,.mydraft-svg-icon path,.mydraft-svg-icon polygon,.mydraft-svg-icon polyline,.mydraft-svg-icon rect{transition:stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}@layer components{.live-pulse-dot{width:8px;height:8px}}.min-w-0{min-width:0}@layer overrides{.live-radar-header-badge{background:rgba(239,68,68,.12);border:1px solid rgba(239,68,68,.35);color:#fca5a5;font-size:.75rem;font-weight:700;transition:.25s;cursor:pointer}}@layer overrides{.live-pulse-dot{width:8px;height:8px;background-color:var(--threat-critical,#ef4444);border-radius:50%;display:inline-block;box-shadow:rgba(239,68,68,.7) 0 0 0 0}}@layer overrides{body.light .live-radar-header-badge,html[data-bs-theme=light] .live-radar-header-badge{background:#fbd9dd;border-color:#eeb2b8;color:#8a1723!important}}.isharestuff-live-ticker{color:var(--color-text-body,#f8fafc);backdrop-filter:none;flex-wrap:wrap;row-gap:.3rem;background:var(--color-surface,rgba(15,23,42,.85))!important;border:1px solid var(--color-border,rgba(255,255,255,.12))!important;padding:.45rem .5rem!important;margin-bottom:.75rem!important}.ticker-content{mask-image:linear-gradient(to right,transparent 0px,rgb(0,0,0) 14px,rgb(0,0,0) calc(100% - 14px),transparent 100%);touch-action:pan-y;cursor:grab;user-select:none;-webkit-tap-highlight-color:transparent;order:1;width:100%;max-width:100%;flex:0 0 100%!important}.isharestuff-live-ticker .ticker-lead-group{order:2;width:100%;justify-content:space-between;margin-right:0!important}.ticker-track{display:flex;align-items:center;white-space:nowrap;will-change:transform;transform:translate3d(0,0,0);--ticker-speed:1;animation-name:isharestuffTicker;animation-timing-function:linear;animation-iteration-count:infinite;animation-duration:calc(26s / var(--ticker-speed, 1))}.ticker-link{max-width:min(78vw,340px);font-size:.82rem;display:inline-block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;vertical-align:baseline;transition:color .2s;color:var(--color-text-heading,#f8fafc)!important}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:44px;height:44px;font-size:.78rem;-webkit-tap-highlight-color:transparent}.ticker-controls-bar{gap:.4rem}.ticker-counter{font-family:var(--bs-font-monospace, ui-monospace, monospace);font-size:.72rem;line-height:1;color:var(--color-text-secondary,#94a3b8);min-width:3.4em;text-align:center;user-select:none;white-space:nowrap;margin-left:auto}.ticker-item{font-size:.82rem}.ticker-item .ticker-date{font-size:.72rem;vertical-align:baseline}.ticker-text-group{display:inline-flex;align-items:baseline}.ticker-badge-live-btn{border:0;cursor:pointer;text-decoration:none!important}.ticker-badge{font-size:.78rem!important;min-height:44px!important;min-width:44px!important;padding:6px 12px!important;display:inline-flex!important;align-items:center!important;justify-content:center!important}@media (min-width:992px){.navbar-expand-lg{flex-wrap:nowrap;justify-content:flex-start}.navbar-expand-lg .navbar-toggler{display:none}}@media (prefers-reduced-motion:reduce){@layer overrides{#news-popup,#news-toast-banner,.animate-pulse,.live-pulse-dot,.live-pulsing-dot,.news-item-card{animation:none;transition:none}}.ticker-track{animation:none!important}.ticker-content{cursor:default}}@media (min-width:768px){.isharestuff-live-ticker{flex-wrap:nowrap;row-gap:0;backdrop-filter:blur(12px);padding:.5rem!important;margin-bottom:1rem!important}.isharestuff-live-ticker .ticker-content{order:0;width:auto;max-width:none;flex:1 1 auto!important}.isharestuff-live-ticker .ticker-lead-group{order:0;width:auto;justify-content:flex-start;margin-right:1rem!important}.ticker-controls-bar{gap:.3rem}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:30px;height:auto;font-size:inherit}.ticker-counter{font-size:.66rem;margin-left:0}.ticker-track{animation-duration:calc(40s / var(--ticker-speed, 1))}.ticker-link{max-width:340px;font-size:.85rem}.ticker-item{font-size:.85rem}.ticker-badge{font-size:inherit!important;min-height:0!important;min-width:0!important;padding:.5rem 1rem!important}}@media (max-width:359.98px){.ticker-counter{display:none}.ticker-controls-bar{gap:.3rem}.ticker-badge{padding:6px 9px!important}} 🔒 Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication | IT Security Nachrichten – TSECURITY.DE
EILMELDUNGEN LIVE
Windows ServerSicherheitsvorfall bei Loxone - BornCity(19.10.2026 um 01:13 Uhr)
•
Linux Tipps & HardeningDistroWatch Weekly, Issue 1195(19.10.2026 um 02:21 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-92392 | curl up to 8.22.0 use after free (EUVD-2026-100915)(19.10.2026 um 00:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-97859 | Gitea prior 1.27.3/28.0.0 API Routes /api/v1/users username privileges management (EUVD-2026-103993)(19.10.2026 um 00:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-97204 | Gitea up to 28.1.0 Labels authorization (EUVD-2026-103992)(19.10.2026 um 00:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-110494 | Gitea up to 28.1.0 Attachment Linking information disclosure (EUVD-2026-103991)(19.10.2026 um 00:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-110324 | Gitea up to 28.0.0 User Profiles privileges management (EUVD-2026-103990)(19.10.2026 um 00:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-110311 | Gitea up to 28.1.0 Draft Release API information disclosure (EUVD-2026-103989)(19.10.2026 um 00:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-107686 | Gitea up to 28.1.0 Web Handlers privileges management (EUVD-2026-103987)(19.10.2026 um 00:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-109844 | Gitea prior 1.27.0/28.0.0 Subscription Access Check subscriptions permission (EUVD-2026-103988)(19.10.2026 um 00:10 Uhr)
•
Windows ServerSicherheitsvorfall bei Loxone - BornCity(19.10.2026 um 01:13 Uhr)
•
Linux Tipps & HardeningDistroWatch Weekly, Issue 1195(19.10.2026 um 02:21 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-92392 | curl up to 8.22.0 use after free (EUVD-2026-100915)(19.10.2026 um 00:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-97859 | Gitea prior 1.27.3/28.0.0 API Routes /api/v1/users username privileges management (EUVD-2026-103993)(19.10.2026 um 00:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-97204 | Gitea up to 28.1.0 Labels authorization (EUVD-2026-103992)(19.10.2026 um 00:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-110494 | Gitea up to 28.1.0 Attachment Linking information disclosure (EUVD-2026-103991)(19.10.2026 um 00:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-110324 | Gitea up to 28.0.0 User Profiles privileges management (EUVD-2026-103990)(19.10.2026 um 00:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-110311 | Gitea up to 28.1.0 Draft Release API information disclosure (EUVD-2026-103989)(19.10.2026 um 00:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-107686 | Gitea up to 28.1.0 Web Handlers privileges management (EUVD-2026-103987)(19.10.2026 um 00:10 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-109844 | Gitea prior 1.27.0/28.0.0 Subscription Access Check subscriptions permission (EUVD-2026-103988)(19.10.2026 um 00:10 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh.…

IT Security Nachrichten IT Security News 1 Min. Lesezeit TA0001 · T1190 Cloud & IT-Enterprise
Beitrag
0
Seite
0
↗ Quelle (IT Security News)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to analysis by Seqrite researcher Amruta Wagh. Dubbed WP2Shell, the exploit chain reportedly emerged in July 2026 and combines REST API route confusion with SQL injection, allowing attackers to progress from public endpoints to server... Weiterlesen: Critical WordPress Flaws Allow Attackers to Execute Remote Code Witho…

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
OpenVAS (GVM)ModSecurityNuclei
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
5 Knoten · 4 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Verwandte Story-Cluster & Quellen (Vektor-KI)

11 Quellen
CVE-2026-92392 | curl up to 8.22.0 use after free (EUVD-2026-100915)
10 weitere Quellen
VulDB Updates3 uur geledenCVE-2026-97859 | Gitea prior 1.27.3/28.0.0 API Routes /api/v1/users username privileges management (EUVD-2026-103993) VulDB Updates3 uur geledenCVE-2026-97204 | Gitea up to 28.1.0 Labels authorization (EUVD-2026-103992) VulDB Updates3 uur geledenCVE-2026-110494 | Gitea up to 28.1.0 Attachment Linking information disclosure (EUVD-2026-103991) VulDB Updates3 uur geledenCVE-2026-110324 | Gitea up to 28.0.0 User Profiles privileges management (EUVD-2026-103990) VulDB Updates3 uur geledenCVE-2026-110311 | Gitea up to 28.1.0 Draft Release API information disclosure (EUVD-2026-103989) VulDB Updates3 uur geledenCVE-2026-107686 | Gitea up to 28.1.0 Web Handlers privileges management (EUVD-2026-103987)
+4

Mehr aus dieser Kategorie

JENKE. CRIME. Rituale und Cybercrime - Die Ohnmacht von Law und Order 5 - Pilot WP
19.10.2026
Passwort «1234» ist unsicher: So erstellst du eine sichere Passphrase - 20 Minuten
18.10.2026
IT Security News Weekly Summary 42
18.10.2026
IT Security News Roundup: 2026-10-18 Evening
19.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Trek om te vernieuwen
TTS Reader • tsecurity.de Voice
Nächster Beitrag