EILMELDUNGEN LIVE News-Tinder DECK
GLOBAL9.3CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.4CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.8CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.8CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.0CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.(07.11.2026 um 04:34 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-124557 | OtterMind Chat2DB up to 5.3.8 Class Generator DbMybatisGenerateServiceImpl.java DbMybatisGenerateServiceImpl.generateClass tableName path traversal (EUVD-2026-119779)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-124556 | kekingcn kkFileView up to 5.0.3 BaseUrlFilter.java BaseUrlFilter.getBaseUrl X-Base-Url redirect (GHSA-wrm9-r4fj-f8q5 / EUVD-2026-119778)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-124555 | JeecgBoot 3.9.5 Table Dictionary API getTableDictList JimuFormApiService.getTableDictList searchSql sql injection (EUVD-2026-119777)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-124554 | JeecgBoot 3.9.5 JimuBI getAllChartData params sql injection (EUVD-2026-119776)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-110273 | IBM TRIRIGA Application Platform up to 5.0.9 os command injection (EUVD-2026-119691)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-124509 | floci-io Floci up to 2.1.0 S3 Destination Configuration DeliveryStreamDescription.java S3Destination.bucketName BucketARN path traversal (Issue 4281 / EUVD-2026-119770)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116499 | IBM Qiskit SDK up to 2.6.2 deserialization (EUVD-2026-119685)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116501 | IBM Qiskit SDK up to 2.6.1 out-of-bounds write (EUVD-2026-119683)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-124508 | floci-io Floci up to 2.4.0 Artifact CodeBuildJsonHandler.java BuildspecParser.parseArtifacts buildspecOverride.artifacts.base-directory path traversal (GHSA-4hjc-ww34-35c4 / EUVD-2026-119769)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-124507 | conductor-oss conductor up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0-alpha.1 PLANNER_CONTEXT_FETCH Task PlannerContextFetchTask.java WorkflowSystemTask.start url server-side request forgery (GHSA-cx7c-4mp7-rhcj / EUVD-2026-119768)(09.11.2026 um 04:42 Uhr)
•
GLOBAL9.3CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.4CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.8CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.8CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.(07.11.2026 um 04:34 Uhr)
•
GLOBAL8.5CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.0CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.(07.11.2026 um 04:34 Uhr)
•
GLOBAL9.9CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.(07.11.2026 um 04:34 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-124557 | OtterMind Chat2DB up to 5.3.8 Class Generator DbMybatisGenerateServiceImpl.java DbMybatisGenerateServiceImpl.generateClass tableName path traversal (EUVD-2026-119779)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-124556 | kekingcn kkFileView up to 5.0.3 BaseUrlFilter.java BaseUrlFilter.getBaseUrl X-Base-Url redirect (GHSA-wrm9-r4fj-f8q5 / EUVD-2026-119778)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-124555 | JeecgBoot 3.9.5 Table Dictionary API getTableDictList JimuFormApiService.getTableDictList searchSql sql injection (EUVD-2026-119777)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-124554 | JeecgBoot 3.9.5 JimuBI getAllChartData params sql injection (EUVD-2026-119776)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-110273 | IBM TRIRIGA Application Platform up to 5.0.9 os command injection (EUVD-2026-119691)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-124509 | floci-io Floci up to 2.1.0 S3 Destination Configuration DeliveryStreamDescription.java S3Destination.bucketName BucketARN path traversal (Issue 4281 / EUVD-2026-119770)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116499 | IBM Qiskit SDK up to 2.6.2 deserialization (EUVD-2026-119685)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-116501 | IBM Qiskit SDK up to 2.6.1 out-of-bounds write (EUVD-2026-119683)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-124508 | floci-io Floci up to 2.4.0 Artifact CodeBuildJsonHandler.java BuildspecParser.parseArtifacts buildspecOverride.artifacts.base-directory path traversal (GHSA-4hjc-ww34-35c4 / EUVD-2026-119769)(09.11.2026 um 04:42 Uhr)
•
Sicherheitslücken (CVE)CVE-2026-124507 | conductor-oss conductor up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0-alpha.1 PLANNER_CONTEXT_FETCH Task PlannerContextFetchTask.java WorkflowSystemTask.start url server-side request forgery (GHSA-cx7c-4mp7-rhcj / EUVD-2026-119768)(09.11.2026 um 04:42 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Linus Torvalds is using AI to develop Linux kernel code now

The move is a turning point in the developer’s relationship with AI and Linux

Linux Tipps & Hardening ZDNET 1 Min. Lesezeit
Beitrag
0
Seite
0
↗ Quelle (ZDNET)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

The move is a turning point in the developer’s relationship with AI and Linux. Weiterlesen: Linus Torvalds is using AI to develop Linux kernel code now

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
2 Knoten · 1 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Hiçbir okuyucu henüz yorum yok
Bu sayfa yararlı mıydı?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

İlgili Story Cluster & Kaynaklar (vector AI)

54 Kaynaklar
CVE-2026-116499 | IBM Qiskit SDK up to 2.6.2 deserialization (EUVD-2026-119685)
53 diğer kaynaklar
VulDB Updatesvor 1 Std.CVE-2026-116501 | IBM Qiskit SDK up to 2.6.1 out-of-bounds write (EUVD-2026-119683) VulDB Updatesvor 1 Std.CVE-2026-124507 | conductor-oss conductor up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0-alpha.1 PLANNER_CONTEXT_FETCH Task PlannerContextFetchTask.java WorkflowSystemTask.start url server-side request forgery (GHSA-cx7c-4mp7-rhcj / EUVD-2026-119768) VulDB Updatesvor 4 Std.CVE-2026-124500 | Fengoffice Feng Office up to 3.11.13.11/4.2.1.2 File FilesController.class.php upload_document_image url server-side request forgery (EUVD-2026-119755) VulDB Updatesvor 4 Std.CVE-2026-124499 | Fengoffice Feng Office up to 3.11.13.11/4.2.1.2 Translation Tool ToolController.class.php write_translations lang code injection (EUVD-2026-119756) VulDB Updatesvor 4 Std.CVE-2026-101478 | Oracle Autonomous Health Framework up to 26.8 Trace File Analyzer privileges management (EUVD-2026-105894) VulDB Updatesvor 4 Std.CVE-2026-101477 | Oracle Autonomous Health Framework up to 26.8 Trace File Analyzer privileges management (EUVD-2026-105893)
+47
16 Kaynaklar
CVE-2026-99276 | Linux Kernel up to 7.3.1 ksmbd destroy_previous_session locking (Nessus ID 377530)
15 diğer kaynaklar
VulDB Updatesvor 4 Std.CVE-2026-99278 | Linux Kernel up to 7.3.1 ksmbd allocation of resources (Nessus ID 377529) VulDB Updatesvor 4 Std.CVE-2026-99277 | Linux Kernel up to 7.3.1 ksmbd ksmbd_session_unregister use after free (Nessus ID 377526) VulDB Updatesvor 3 Std.CVE-2026-80571 | Linux Kernel up to 6.18.45/7.1.9 papr-phy-attest papr_phy_attest_create_handle cmd.length buffer overflow (Nessus ID 377513) VulDB Updatesvor 3 Std.CVE-2026-80584 | Linux Kernel up to 7.1.9 s390 qeth qeth_snmp_command udata_len buffer overflow (Nessus ID 377513) VulDB Updatesvor 3 Std.CVE-2026-80864 | Linux Kernel up to 6.12.107/6.18.48/7.1.12/7.2.2 RDMA/rxe rxe_resp.c rxe_qp_from_attr/rxe_receiver use after free (Nessus ID 377506) VulDB Updatesvor 3 Std.CVE-2026-80863 | Linux Kernel up to 7.2.2 RDMA/rxe rxe_qp.c free_rd_atomic_resources out-of-bounds (Nessus ID 377506)
+9

Mehr aus dieser Kategorie

Distribution Releases: Slax 2026.11
09.11.2026
Intresting idea! Kmorph Aims To Provide Rebootless Linux Kernel Crash Recovery
08.11.2026
TisVlay - TV Display control for Linux
08.11.2026
Canoeboot – Canoeboot 26.11 “Carnivorous Olive” released! With full UEFI support.
08.11.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Update to Update
TTS Reader • tsecurity.de Voice
Nächster Beitrag