EILMELDUNGEN LIVE News-Tinder DECK
GLOBAL9.3CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.4CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.8CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.8CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.0CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.(07.11.2026 um 04:34 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-76235 | Red Hat Enterprise Linux/OpenShift Dev Spaces 7/8/9/10 cockpit-ws CockpitLang memory leak(10.11.2026 um 06:44 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-43267 | Linux Kernel up to 6.18.15/6.19.5 wifi divide by zero(10.11.2026 um 07:26 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-26083 | Fortinet FortiSandbox Cloud/FortiSandbox/FortiSandbox PaaS up to 4.4.8/5.0.1 HTTP Request authorization (FG-IR-26-136)(10.11.2026 um 07:26 Uhr)
•
Windows Tipps & SecurityDie besten Gaming-CPUs ab 90 Euro: Unsere Kauf-Tipps(10.11.2026 um 08:30 Uhr)
•
Windows Tipps & SecurityWindows-KI abschalten – So schützen Sie Ihre Privatsphäre(10.11.2026 um 08:00 Uhr)
•
Unix & Linux ServerSecurity: Ausführen beliebiger Kommandos in libheif (Ubuntu)(10.11.2026 um 07:04 Uhr)
•
Linux Tipps & HardeningSecurity: Mehrere Probleme in perl-Net-IDN-Encode (Fedora)(10.11.2026 um 07:04 Uhr)
•
Linux Tipps & HardeningSecurity: Mehrere Probleme in libmodulemd (Fedora)(10.11.2026 um 07:04 Uhr)
•
Unix & Linux ServerSecurity: Mehrere Probleme in krb5 (Slackware)(10.11.2026 um 07:04 Uhr)
•
Linux Tipps & HardeningSecurity: Mangelnde Rechteprüfung in dnf5 (Fedora)(10.11.2026 um 07:04 Uhr)
•
GLOBAL9.3CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.4CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.8CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.8CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.0CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.(07.11.2026 um 04:34 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-76235 | Red Hat Enterprise Linux/OpenShift Dev Spaces 7/8/9/10 cockpit-ws CockpitLang memory leak(10.11.2026 um 06:44 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-43267 | Linux Kernel up to 6.18.15/6.19.5 wifi divide by zero(10.11.2026 um 07:26 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-26083 | Fortinet FortiSandbox Cloud/FortiSandbox/FortiSandbox PaaS up to 4.4.8/5.0.1 HTTP Request authorization (FG-IR-26-136)(10.11.2026 um 07:26 Uhr)
•
Windows Tipps & SecurityDie besten Gaming-CPUs ab 90 Euro: Unsere Kauf-Tipps(10.11.2026 um 08:30 Uhr)
•
Windows Tipps & SecurityWindows-KI abschalten – So schützen Sie Ihre Privatsphäre(10.11.2026 um 08:00 Uhr)
•
Unix & Linux ServerSecurity: Ausführen beliebiger Kommandos in libheif (Ubuntu)(10.11.2026 um 07:04 Uhr)
•
Linux Tipps & HardeningSecurity: Mehrere Probleme in perl-Net-IDN-Encode (Fedora)(10.11.2026 um 07:04 Uhr)
•
Linux Tipps & HardeningSecurity: Mehrere Probleme in libmodulemd (Fedora)(10.11.2026 um 07:04 Uhr)
•
Unix & Linux ServerSecurity: Mehrere Probleme in krb5 (Slackware)(10.11.2026 um 07:04 Uhr)
•
Linux Tipps & HardeningSecurity: Mangelnde Rechteprüfung in dnf5 (Fedora)(10.11.2026 um 07:04 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Security: Mehrere Probleme in libmodulemd (Fedora)

Linux Tipps & Hardening Pro-Linux 1 Min. Lesezeit
Beitrag
0
Seite
0
↗ Quelle (Pro-Linux)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

Weiterlesen: Security: Mehrere Probleme in libmodulemd (Fedora)

Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Nog geen recensies van lezers
Was deze pagina nuttig?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Verwant Story Cluster & Sources (vector AI)

24 Bronnen
CVE-2026-43262 | Linux Kernel up to 6.19.5 gfs2_fiemap memory corruption
23 andere bronnen
VulDB Updates2 uur geledenCVE-2026-43259 | Linux Kernel up to 6.18.15/6.19.5 phy platform_set_drvdata privilege escalation VulDB Updates2 uur geledenCVE-2026-43257 | Linux Kernel up to 6.19.5 media snd_cx88_hw_params release of resource VulDB Updates1 uur geledenCVE-2026-76235 | Red Hat Enterprise Linux/OpenShift Dev Spaces 7/8/9/10 cockpit-ws CockpitLang memory leak VulDB Updates1 uur geledenCVE-2026-43267 | Linux Kernel up to 6.18.15/6.19.5 wifi divide by zero VulDB Updates1 uur geledenCVE-2026-43277 | Linux Kernel up to 6.19.5 ghes_new buffer overflow VulDB Updates6 uur geledenCVE-2026-64249 | Linux Kernel up to 7.1.2 FPGA Region child_regions_with_firmware use after free (Nessus ID 330014)
+17
18 Bronnen
CVE-2026-15780 | Veronalabs WP Statistics Plugin up to 14.16.8 on WordPress REST Endpoint /wp-statistics/v2/hit utm_campaign cross site scripting
17 andere bronnen
VulDB Updates1 uur geledenCVE-2026-75981 | Cozmos Labs TranslatePress Plugin up to 3.2.5 on WordPress class-translation-render.php translate_page cross site scripting VulDB Updates4 uur geledenCVE-2026-18031 | TabaPay Gateway Plugin up to 1.4.0 on WordPress improper authentication VulDB Updates4 uur geledenCVE-2026-18777 | TrueBooker Plugin up to 1.2.6 on WordPress authorization VulDB Updates4 uur geledenCVE-2026-18776 | TrueBooker Plugin up to 1.2.6 on WordPress privileges management VulDB Updates4 uur geledenCVE-2026-18231 | WP Directory Kit Plugin up to 1.5.6 on WordPress information disclosure VulDB Updates4 uur geledenCVE-2026-18051 | W3 Total Cache Plugin up to 2.10.4 on WordPress path traversal
+11

Mehr aus dieser Kategorie

13 Best Markdown Editors for Linux
10.11.2026
Security: Mehrere Probleme in perl-Net-IDN-Encode (Fedora)
10.11.2026
Security: Mangelnde Rechteprüfung in dnf5 (Fedora)
10.11.2026
Security: Mehrere Probleme in perl-Starlet (Fedora)
10.11.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Trek om te vernieuwen
TTS Reader • tsecurity.de Voice
Nächster Beitrag