CVE-2026-124021 and CVE-2026-124020: Critical Vulnerabilities in Control Web Panel
Two critical vulnerabilities affect Control Web Panel versions prior to 1.30.6. The article categorizes attack vectors and measures.
Read ArticleIT Security Blog
Current security alerts, regulatory guidance and practical knowledge for well-founded cyber risk decisions.
Featured Post
Latest Posts
CVE-2026-119077 and CVE-2026-125055: Critical vulnerabilities in two WordPress plugins
Two WordPress plugins are affected by critical vulnerabilities with a CVSS of 9.8. The review of publicly accessible instances is a high priority.
Read Article Citrix NetScaler: multiple critical security vulnerabilities (including CVE-2026-107412, CVE-2026-107415)
Citrix has released seven critical vulnerabilities in NetScaler ADC and Gateway, including CVE-2026-107415, CVE-2026-111334, and CVE-2026-120864 (CVSS 9.3).
Read Article CVE-2026-120869: Authentication Bypass in Citrix NetScaler Console
CVE-2026-120869 affects Citrix NetScaler Console prior to version 14.1-74.34. Citrix provides a fix starting from version 14.1-74.34.
Read Article Adobe Experience Manager: Four Critical CVEs in APSB26-189
Adobe APSB26-189 addresses 14 vulnerabilities in Adobe Experience Manager. Four documented critical CVEs affect AEM 6.5 and AEM as a Cloud Service.
Read Article CVE-2026-115252: PHP Code Execution in Plugin Confection WordPress Cable
CVE-2026-115252 affects Confection WordPress Cable in versions 0.4.0 to 0.4.7 and allows unauthenticated PHP code execution…
Read Article CVE-2026-122041: Unauthorized deletion of attachments in WooCommerce plugin
CVE-2026-122041 affects Checkout Field Editor for WooCommerce (Pro) up to version 3.8.0. Version 3.8.1 fixes the vulnerability.
Read Article CVE-2026-19803: File Upload Risk in Printcart Plugin
CVE-2026-19803 affects Printcart up to and including 2.13.2 and can allow for code execution when the Advanced Upload Popup is active.
Read Article CVE-2026-114630: File Deletion in ELEX WordPress HelpDesk
CVE-2026-114630: The ELEX WordPress HelpDesk up to version 3.3.8 allows unauthenticated deletion of arbitrary files. Version 3.3.9 addresses the vulnerability.
Read Article CVE-2026-100109: Privileged Accounts via Security For WooCommerce
CVE-2026-100109 affects Security For WooCommerce in versions 1.0.10 to 1.0.16 and may allow the creation of privileged WordPress accounts.
Read Article CVE-2026-116606: Authentication Bypass in Barracuda Email Security Gateway
CVE-2026-116606 affects Barracuda Email Security Gateway versions prior to 9.4.0.030. An update to version 9.4.0.030 or higher fixes the vulnerability.
Read Article CVE-2026-109220: PHP Object Injection in the WooCommerce plugin pdf-for-woocommerce
CVE-2026-109220 affects pdf-for-woocommerce up to version 7.1.1. An update to version 7.2.0 is available.
Read Article CVE-2026-61992: PHP Object Injection in GEO my WP
CVE-2026-61992 affects GEO my WP up to and including version 4.5.5.3. A patched version is available.
Read Article
English 
Deutsch 
Français