EILMELDUNGEN LIVE
YouTube Security VideosGoogle Cloud Tech: I built an AI Agent to run my channel(02.11.2026 um 23:12 Uhr)
•
YouTube Security VideosGitHub Universe '26 was built different(02.11.2026 um 23:17 Uhr)
•
YouTube Security VideosGitHub Universe 2026 was built different(03.11.2026 um 00:06 Uhr)
•
Windows Tipps & SecurityMicrosoft once tried to buy Nintendo and got laughed out of the room, now Xbox has to insist it’s not for sale(02.11.2026 um 23:15 Uhr)
•
Unix & Linux ServerDistribution Release: aerynOS 2026.11(03.11.2026 um 00:02 Uhr)
•
Unix & Linux ServerSecurity: Zwei Probleme in qt5-qtbase (Red Hat)(02.11.2026 um 23:30 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-850: Microsoft Qlib MLflowRecorder Deserialization of Untrusted Data Remote Code Execution Vulnerability(02.11.2026 um 07:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-849: Microsoft Qlib RestrictedUnpickler Deserialization of Untrusted Data Remote Code Execution Vulnerability(02.11.2026 um 07:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-848: Microsoft Qlib StaticDataLoader Deserialization of Untrusted Data Remote Code Execution Vulnerability(02.11.2026 um 07:00 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-58873 | Google Android XR 14 WindowManagerService WindowManagerService.java addDragDropListener permission (EUVD-2026-115628)(02.11.2026 um 23:57 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: I built an AI Agent to run my channel(02.11.2026 um 23:12 Uhr)
•
YouTube Security VideosGitHub Universe '26 was built different(02.11.2026 um 23:17 Uhr)
•
YouTube Security VideosGitHub Universe 2026 was built different(03.11.2026 um 00:06 Uhr)
•
Windows Tipps & SecurityMicrosoft once tried to buy Nintendo and got laughed out of the room, now Xbox has to insist it’s not for sale(02.11.2026 um 23:15 Uhr)
•
Unix & Linux ServerDistribution Release: aerynOS 2026.11(03.11.2026 um 00:02 Uhr)
•
Unix & Linux ServerSecurity: Zwei Probleme in qt5-qtbase (Red Hat)(02.11.2026 um 23:30 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-850: Microsoft Qlib MLflowRecorder Deserialization of Untrusted Data Remote Code Execution Vulnerability(02.11.2026 um 07:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-849: Microsoft Qlib RestrictedUnpickler Deserialization of Untrusted Data Remote Code Execution Vulnerability(02.11.2026 um 07:00 Uhr)
•
Sicherheitslücken (CVE)ZDI-26-848: Microsoft Qlib StaticDataLoader Deserialization of Untrusted Data Remote Code Execution Vulnerability(02.11.2026 um 07:00 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-58873 | Google Android XR 14 WindowManagerService WindowManagerService.java addDragDropListener permission (EUVD-2026-115628)(02.11.2026 um 23:57 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

ZDI-26-850: Microsoft Qlib MLflowRecorder Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Qlib. User interaction is required to exploit this…

Sicherheitslücken (CVE) ZDI: Published Advisories 1 Min. Lesezeit TA0001 · T1190
Beitrag
0
Seite
0
↗ Quelle (ZDI: Published Advisories)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Qlib. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. Weiterlesen: ZDI-26-850: Microsoft Qlib MLflowRecorder Deserialization of Untruste…

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 86%
Scan openbaar toegankelijke diensten met OpenVAS, scherp WAF regels, verkort patch windows.
OpenVAS (GVM)ModSecurityNuclei
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
5 Knoten · 4 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Nog geen recensies van lezers
Was deze pagina nuttig?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Verwant Story Cluster & Sources (vector AI)

Mehr aus dieser Kategorie

ZDI-26-849: Microsoft Qlib RestrictedUnpickler Deserialization of Untrusted Data Remote Code Execution Vulnerability
02.11.2026
ZDI-26-848: Microsoft Qlib StaticDataLoader Deserialization of Untrusted Data Remote Code Execution Vulnerability
02.11.2026
CVE-2026-58873 | Google Android XR 14 WindowManagerService WindowManagerService.java addDragDropListener permission (EUVD-2026-115628)
02.11.2026
CVE-2026-85297 | Google Cloud Run MCP up to 1.10.x information disclosure (EUVD-2026-109906)
02.11.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Trek om te vernieuwen
TTS Reader • tsecurity.de Voice
Nächster Beitrag