🛡️ Cyber Security Intelligence Hub

Echtzeit-Bedrohungsdaten, CVE-Feeds und Honeypot-Daten

🔴 Kritische & Hohe CVEs cvefeed.io

CVE-2026-75937 - OS Command Injection in Digi Accelerated Linux (DAL OS)

CRITICAL CVE-2026-75937 📅 02.10.2026

CVE-2026-82039 - UTMStack < 11.2.16 SQL Injection via searchGroupsByFilter

HIGH CVE-2026-82039 📅 02.10.2026

CVE-2026-39718 - WordPress Wallstreet theme <= 2.8.6 - Cross Site Request Forger...

HIGH CVE-2026-39718 📅 02.10.2026

CVE-2026-104988 - Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authenticat...

HIGH CVE-2026-104988 📅 02.10.2026

CVE-2026-104019 - OS command injection in the Studio Space startup validation sc...

CRITICAL CVE-2026-104019 📅 02.10.2026

CVE-2026-82042 - UTMStack < 11.2.16 Authentication Bypass via InternalApiKeyFilt...

CRITICAL CVE-2026-82042 📅 02.10.2026

CVE-2026-82041 - UTMStack < 11.2.16 Missing Authorization via Command WebSocket

CRITICAL CVE-2026-82041 📅 02.10.2026

CVE-2026-96940 - Microsoft Exchange Server Elevation of Privilege Vulnerability

HIGH CVE-2026-96940 📅 02.10.2026

🆕 Neueste CVEs cvefeed.io

CVE-2026-75937 - OS Command Injection in Digi Accelerated Linux (DAL OS)

CRITICAL CVE-2026-75937 📅 02.10.2026

CVE-2026-82045 - UTMStack < 11.2.16 JPQL Injection via searchPropertyValues

MEDIUM CVE-2026-82045 📅 02.10.2026

CVE-2026-104874 - Multidict: Reference leak in CIMultiDict/MultiDict items-view ...

MEDIUM CVE-2026-104874 📅 02.10.2026

CVE-2026-82044 - UTMStack < 11.2.16 Server-Side Request Forgery via downloadPdf

HIGH CVE-2026-82044 📅 02.10.2026

CVE-2026-82043 - UTMStack < 11.2.16 Account Enumeration via Password Reset Endpo...

MEDIUM CVE-2026-82043 📅 02.10.2026

CVE-2026-82040 - UTMStack < 11.2.16 SSRF via IdentityProviderService

MEDIUM CVE-2026-82040 📅 02.10.2026

CVE-2026-82039 - UTMStack < 11.2.16 SQL Injection via searchGroupsByFilter

HIGH CVE-2026-82039 📅 02.10.2026

CVE-2026-39718 - WordPress Wallstreet theme <= 2.8.6 - Cross Site Request Forger...

HIGH CVE-2026-39718 📅 02.10.2026

⚡ CISA Aktiv Ausgenutzt cisa.gov

CVE-2026-102490

Zammad GmbH Zammad Improper Privilege Management Vulnerability

📅 2026-10-02 | 🏢 Zammad GmbH

CVE-2026-102489

Zammad GmbH Zammad Session Fixation Vulnerability

📅 2026-10-02 | 🏢 Zammad GmbH

CVE-2026-104286

Fortinet FortiMail Path Traversal Vulnerability

📅 2026-10-01 | 🏢 Fortinet

CVE-2026-76504

Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

📅 2026-09-30 | 🏢 Cisco

CVE-2026-86950

Apple Multiple Products Out-of-Bounds Write Vulnerability

📅 2026-09-29 | 🏢 Apple

CVE-2026-88772

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

📅 2026-09-27 | 🏢 Citrix

🔟 OWASP Top 10 owasp.org/2021

A01

Broken Access Control

Restrictions not enforced — users act outside permissions

A02

Cryptographic Failures

Weak or missing encryption exposes sensitive data

A03

Injection

SQL, NoSQL, OS, LDAP injection via untrusted data

A04

Insecure Design

Missing or ineffective security controls by design

A05

Security Misconfiguration

Default configs, unnecessary features, verbose errors

A06

Vulnerable Components

Using components with known vulnerabilities

A07

Auth Failures

Broken authentication allows account compromise

A08

Software Integrity Failures

Code and infra without integrity verification

A09

Logging Failures

Insufficient logging prevents breach detection

A10

SSRF

Server-Side Request Forgery fetches unvalidated URLs

View full OWASP Top 10 2021 →

📚 SANS Referenzposter

🛡️ Cyber Security Intelligence Hub

Rechtlicher Hinweis