Intelligence View

⚡ tsecurity.de Intelligence

CVE-2026-123012 | Gogs 0.14.3 Git Smart HTTP Authorization Layer http.go improper authorization (EUVD-2026-117331)

A vulnerability categorized as problematic has been discovered in Gogs 0.14.3. This affects an unknown function of the file internal/route/repo/http.go of the…

Sicherheitslücken (CVE) VulDB Updates 05.11.2026, 07:47 Uhr 1 Min. Lesezeit

BeitragSeite↗ Quelle (VulDB Updates)

A vulnerability categorized as problematic has been discovered in Gogs 0.14.3. This affects an unknown function of the file internal/route/repo/http.go of the component Git Smart HTTP Authorization Layer. Executing a manipulation can lead to improper authorization. This vulnerability is tracked as CVE-2026-123012. The attack can be launched... Weiterlesen: CVE-2026-123012 | Gogs 0.14.3 Git Smart HTTP Authorization Layer http…

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege

IoC Intelligence

1 Indikatoren · Defanged · STIX 2.1

CVE-2026-123012

Exploit & Remediation Lifecycle

PoC · Ausnutzung · Patch-Stufen

CVE-2026-123012

Entdeckung & Meldung

Schwachstelle identifiziert & registriert

Sicherheits-Advisory

Offizielle Warnung & CVE-Zuweisung

Exploit / PoC

Bislang kein öffentlicher Exploit

In-the-Wild Ausnutzung

Keine Massenausnutzung gemeldet

Patch & Schutzmaßnahmen

Noch kein offizieller Patch dokumentiert

Exploit Weaponization & PoC Radar

Nur belegte Faktoren · kein Score-Theater

LOW · Index 0/100

Exploit-DB

Kein EDB-Eintrag

Interaktion

Interaktion nötig

Authentifizierung

Erforderlich

Compliance, SLA & Vendor Adherence

Advisory-Prüfung · Score-Einordnung · Fristen

Advisory Radar

Hersteller-Sicherheitsmeldungen & Patch-Status

In herstellerseitiger Prüfung

Handlungsempfehlung für Administratoren

Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.

Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):

Keine herstellerspezifischen Bulletins in der Primärquelle hinterlegt.

🚀 Auf tsecurity.de entdecken

Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir

Community Rating & Social Proof

⭐ Leser-Wertung

–

Ø / 5.0

Hiçbir okuyucu henüz yorum yok

Bu sayfa yararlı mıydı?

🚀 Auf tsecurity.de entdecken

İlgili Story Cluster & Kaynaklar (vector AI)

10 Kaynaklar

CVE-2026-119179 | MongoDB Node.js Driver up to 6.21.x/7.7.x Connection Management information disclosure (WID-SEC-2026-4328)

9 diğer kaynaklar

VulDB Updatesvor 2 Std.CVE-2026-119672 | MongoDB Database Tools up to 100.20.0 mongofiles privileges management (WID-SEC-2026-4328) VulDB Updatesvor 1 Std.CVE-2026-120678 | MongoDB C Driver up to 1.30.14/2.5.7 memory leak (WID-SEC-2026-4328) VulDB Updatesvor 1 Std.CVE-2026-120673 | MongoDB Rust Driver up to 3.9.0 Diagnostic Tracing information disclosure (WID-SEC-2026-4328) VulDB Updatesvor 1 Std.CVE-2026-120684 | MongoDB C Driver up to 1.30.14/2.5.7 GridFS uninitialized pointer (Nessus ID 376173 / WID-SEC-2026-4328) VulDB Updatesvor 1 Std.CVE-2026-120952 | MongoDB Atlas SQL ODBC Driver up to 3.0.0 out-of-bounds write (WID-SEC-2026-4328) VulDB Updatesvor 1 Std.CVE-2026-120953 | MongoDB Atlas SQL JDBC Driver up to 4.0.0 Authentication redirect (WID-SEC-2026-4328)

Analiz açın

6 Kaynaklar

CVE-2026-120757 | HDF Group HDF5 up to 2.2.x External Link Traversal src/H5Lexternal.c H5L__extern_traverse heap-based overflow (Nessus ID 376178)

5 diğer kaynaklar

VulDB Updatesvor 3 Std.CVE-2026-120755 | HDF Group HDF5 up to 2.2.x Szip Filter src/H5Zszip.c H5Z__filter_szip out-of-bounds (Nessus ID 376175) VulDB Updatesvor 1 Std.CVE-2026-120758 | HDF Group HDF5 up to 2.2.x Local Heap src/H5HL.c H5HL_unprotect null pointer dereference (Nessus ID 376172) VulDB Updatesvor 5 Std.CVE-2026-120754 | HDF Group HDF5 up to 2.2.0 Scale-Offset Filter src/H5Zscaleoffset.c H5Z__filter_scaleoffset uninitialized pointer (Nessus ID 376187) VulDB Updatesvor 5 Std.CVE-2026-19029 | HDF Group HDF5 up to 2.2.0 Scale-Offset Filter src/H5Zscaleoffset.c H5Z__filter_scaleoffset heap-based overflow (EUVD-2026-93981 / Nessus ID 376187) VulDB Updatesvor 3 Std.CVE-2026-120756 | HDF Group HDF5 up to 2.2.x Object Header Decoding src/H5Ocache.c H5O__chunk_deserialize heap-based overflow (Nessus ID 376181)

Analiz açın

6 Kaynaklar

DreamHost Confirms Data Breach After Hackers Steal FTP/SFTP Credentials and Access Customer Emails

5 diğer kaynaklar

Cyber Security Newsvor 2 Std.DreamHost Confirms Cyberattack Exposing Customer FTP, SFTP and Email Passwords IT Security Newsvor 2 Std.DigiCert Confirms Data Breach Exposing Customer Details and Sensitive Identity Documents Cyber Security Newsvor 4 Std.Hackers Breach French Bank Crédit Mutuel Arkéa Through Third-Party Provider to Steal Funds IT Security Newsvor 4 Std.DreamHost Confirms Data Breach – Hackers Stole Customer Credentials and Accessed Emails Latest from TechRadarvor 6 Std.Harvard University reveals data breach exposed 851,000 accounts

Analiz açın

◀ VORHERIGER BEITRAG 1 Min

CVE-2026-123014 | iTerm2 up to 3.7.7beta1 URL argument injection (EUVD-2026-117332)

Sicherheitslücken (CVE)

NÄCHSTER BEITRAG 1 Min

CVE-2026-121621 | Red Hat OpenShift GitOps Argo CD Image Updater command injection (EUVD-2026-116381)

Sicherheitslücken (CVE)Weiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

🕒 tsecurity.de Such-Trends & Chronologie

CVE-2026-123012 | Gogs 0.14.3 Git Smart HTTP Authorization Layer http.go improper authorization (EUVD-2026-117331)

Cyber Threat Intelligence & Forensik

Compliance, SLA & Vendor Adherence

Hersteller-Sicherheitsmeldungen & Patch-Status

Jetzt Bewertung abgeben

İlgili Story Cluster & Kaynaklar (vector AI)

CVE-2026-123012 | Gogs 0.14.3 Git Smart HTTP Authorization Layer http.go improper authorization (EUVD-2026-117331)

Cyber Threat Intelligence & Forensik

Compliance, SLA & Vendor Adherence

Hersteller-Sicherheitsmeldungen & Patch-Status

Jetzt Bewertung abgeben

İlgili Story Cluster & Kaynaklar (vector AI)

Mehr aus dieser Kategorie