🛡️ Cyber Security Intelligence Hub

Echtzeit-Bedrohungsdaten, CVE-Feeds und Honeypot-Daten

🔴 Kritische & Hohe CVEs cvefeed.io

CVE-2026-108335 - Password Reset Functionality Missing Brute-Force Protection

CRITICAL CVE-2026-108335 📅 14.10.2026

CVE-2026-71854 - OpenAEV has unauthenticated access and missing object-level aut...

HIGH CVE-2026-71854 📅 14.10.2026

CVE-2026-61843 - FileRise: Unauthenticated File Overwrite Through Upload-Enabled...

HIGH CVE-2026-61843 📅 14.10.2026

CVE-2026-57490 - FileRise: WebDAV authentication bypasses TOTP/MFA entirely

HIGH CVE-2026-57490 📅 14.10.2026

CVE-2026-57489 - FileRise: AUTH_BYPASS reverse-proxy header trust without source...

HIGH CVE-2026-57489 📅 14.10.2026

CVE-2026-104108 - FileRise OIDC login can bind an attacker identity to an existi...

HIGH CVE-2026-104108 📅 14.10.2026

CVE-2026-103977 - FileRise: Session-scoped TOTP rate limiting permits repeated v...

HIGH CVE-2026-103977 📅 14.10.2026

CVE-2026-55684 - WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_g...

CRITICAL CVE-2026-55684 📅 14.10.2026

🆕 Neueste CVEs cvefeed.io

CVE-2026-96540 - SonicWall Network Security Manager Improper Access Control Vuln...

LOW CVE-2026-96540 📅 14.10.2026

CVE-2026-77427 - FileRise: Insecure default cryptographic key fallback in manual...

MEDIUM CVE-2026-77427 📅 14.10.2026

CVE-2026-71854 - OpenAEV has unauthenticated access and missing object-level aut...

HIGH CVE-2026-71854 📅 14.10.2026

CVE-2026-69194 - FileRise: Unsanitized footerHtml in Public Site Config

MEDIUM CVE-2026-69194 📅 14.10.2026

CVE-2026-69193 - FileRise: Rate Limiting Bypass via Username Rotation Enables Un...

MEDIUM CVE-2026-69193 📅 14.10.2026

CVE-2026-69191 - FileRise: Login Method Restriction Bypass via Direct API Access

MEDIUM CVE-2026-69191 📅 14.10.2026

CVE-2026-64856 - FileRise: Missing Authentication Guard on File Snippet Preview ...

LOW CVE-2026-64856 📅 14.10.2026

CVE-2026-62664 - FileRise: Authenticated path traversal in createFolder allows a...

MEDIUM CVE-2026-62664 📅 14.10.2026

⚡ CISA Aktiv Ausgenutzt cisa.gov

CVE-2026-105134

Ahsay AhsayCBS Command Injection Vulnerability

📅 2026-10-14 | 🏢 Ahsay

CVE-2026-76519

Cisco Secure Email Gateway Relative Path Traversal Vulnerability

📅 2026-10-14 | 🏢 Cisco

CVE-2026-105133

Ahsay AhsayCBS Improper Authentication Vulnerability

📅 2026-10-14 | 🏢 Ahsay

CVE-2026-0322

Palo Alto Networks PAN-OS Code Injection Vulnerability

📅 2026-10-14 | 🏢 Palo Alto Networks

CVE-2026-104935

Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

📅 2026-10-13 | 🏢 Ivanti

CVE-2026-96951

Microsoft Windows Command Injection Vulnerability

📅 2026-10-13 | 🏢 Microsoft

🔟 OWASP Top 10 owasp.org/2021

A01

Broken Access Control

Restrictions not enforced — users act outside permissions

A02

Cryptographic Failures

Weak or missing encryption exposes sensitive data

A03

Injection

SQL, NoSQL, OS, LDAP injection via untrusted data

A04

Insecure Design

Missing or ineffective security controls by design

A05

Security Misconfiguration

Default configs, unnecessary features, verbose errors

A06

Vulnerable Components

Using components with known vulnerabilities

A07

Auth Failures

Broken authentication allows account compromise

A08

Software Integrity Failures

Code and infra without integrity verification

A09

Logging Failures

Insufficient logging prevents breach detection

A10

SSRF

Server-Side Request Forgery fetches unvalidated URLs

View full OWASP Top 10 2021 →

📚 SANS Referenzposter

🛡️ Cyber Security Intelligence Hub

Rechtlicher Hinweis