Multiple Command Injection vulnerabilities in openhands <0.62.0 allow an attacker to run arbitrary system commands. Weiterlesen: openhands-disclosure
Intelligence View
⚡ tsecurity.de Intelligence
openhands-disclosure
Multiple Command Injection vulnerabilities in openhands
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
36 Quellen
CVE-2026-72072 | Linux Kernel up to 7.2-rc1 macsec net/mlx5e macsec_del_rxsc_ctx use after free (Nessus ID 369276)
35 weitere Quellen
VVulDB Updates3 uur geledenCVE-2026-72123 | Linux Kernel up to 7.2-rc3 bcm bcm_delete_rx_op sk use after free (Nessus ID 369276) VVulDB Updates3 uur geledenCVE-2026-72251 | Linux Kernel up to 7.2-rc2 nf_nat_sip.c nf_nat_sip buffer overflow (Nessus ID 369276) VVulDB Updates3 uur geledenCVE-2026-72135 | Linux Kernel up to 7.2-rc2 TPM Character Device tpm_common_read off out-of-bounds (Nessus ID 369276) VVulDB Updates3 uur geledenCVE-2026-72288 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc3 vgic vgic_prune_ap_list use after free (Nessus ID 369276) VVulDB Updates3 uur geledenCVE-2026-74345 | Linux Kernel up to 6.12.96/6.18.39/7.1.4 siw siw_cm.c siw_cm_work_handler use after free (Nessus ID 369276) VVulDB Updates2 uur geledenCVE-2026-74377 | Linux Kernel up to 7.1.4 rxe rxe_resp_check_length out-of-bounds (Nessus ID 369276)
+29
11 Quellen
CVE-2020-25720 | Samba LDAP improper authorization (EUVD-2020-18374)
10 weitere Quellen
VVulDB Updates5 uur geledenCVE-2026-114361 | HarnessRouter up to 0.31.10 Identity Mode gateway/app.py X-Harness-Org/X-Harness-Member improper authorization (GHSA-qrr8-m92f-7vfp / EUVD-2026-107496) VVulDB Updates4 uur geledenCVE-2026-114135 | Jupyter Server up to 2.5.x GatewayClient GatewayClient.url is_authorized authorization (EUVD-2026-107544) VVulDB Updates3 uur geledenCVE-2026-111699 | Niefy wx-api up to 0.8.2 Fan Controller /wxUser/getUserInfo openid improper authentication (EUVD-2026-102990) VVulDB Updates3 uur geledenCVE-2026-111689 | Exrick XBoot up to 3.3.4 getByDepartmentId departmentId authorization (EUVD-2026-102980) VVulDB Updates3 uur geledenCVE-2026-101640 | Oracle Marketing up to 12.2.15 Audience improper authorization (EUVD-2026-106048) VVulDB Updates3 uur geledenCVE-2026-101660 | Oracle Mobile Field Service up to 12.2.15 Admin UI improper authorization (EUVD-2026-106065)
+4
9 Quellen
GitHub Release: openai/codex vrust-v0.164.0-alpha.10 (22.10.2026)
8 weitere Quellen
GGitHub3 uur geledenGitHub Release: anthropics/claude-code v2.1.307 (22.10.2026) GGitHub1 uur geledenGitHub Release: ollama/ollama v0.40.9-rc1 (22.10.2026) GGitHub4 uur geledenGitHub Release: openclaw/openclaw vrelease-publish/59518bfd2a15-1792626457 (21.10.2026) GGitHub4 uur geledenGitHub Release: openai/codex vrust-v0.163.0-alpha.11.1 (21.10.2026) GGitHub5 uur geledenGitHub Release: ollama/ollama v0.40.9-rc0 (21.10.2026) GGitHub3 uur geledenGitHub Release: telegramdesktop/tdesktop v7.3.3 (21.10.2026)
+2
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4288627/it-security-tools/openhands-disclosure/