Aktuelle Sicherheitswarnungen, regulatorische Einordnungen und Praxiswissen für fundierte Cyberrisiko-Entscheidungen.
Critical vulnerabilities in Plesk (CVE-2026-48614, CVE-2026-56843, CVSS 9.9) allow for privilege escalation and password disclosure. A patch is available for CVE-2026-56843.
Artikel lesen
Analysis of critical vulnerabilities in Adobe ColdFusion (CVSS 10.0), including CVE-2026-48316 and CVE-2026-48282. CISA warns of active exploitation. Patches are available.
Artikel lesen
Three critical Gitea vulnerabilities: CVE-2026-58426 (data access), CVE-2026-20896 (account takeover), CVE-2026-22874 (SSRF). Updating to version 1.26.4 is recommended.
Artikel lesen
CVE-2026-9725 (CVSS 9.1) in the WordPress plugin Printcart allows unauthenticated deletion of arbitrary files. Update to version 2.5.3.
Artikel lesen
CVE-2026-57677 (CVSS 9.8) in the Novalnet plugin for WooCommerce allows unauthenticated store takeover. Update to version 12.10.4.
Artikel lesen
CVE-2026-37106 (DokuWiki): keine RCE, sondern umstrittene Konto-Anlage — nur bei aktivierter Selbstregistrierung (Standard: aus). Einordnung & Schutz.
Artikel lesen
The Federal Ministry of the Interior is promoting Cyberdome Deutschland as the national response to the NIS2 requirements. An analysis of its objectives and implications.
Artikel lesen
INTERPOL reports a rise in cybercrime. At the same time, a Chrome zero-day vulnerability (CVE-2026-11645, CVSS 8.8) that is actively being exploited has come to light. Analysis and protective measures.
Artikel lesen
The statutory deadline for NIS2 registration with the BSI expired on March 6, 2026. The BSI has granted an extension until July 31, 2026. Take action now.
Artikel lesen
Analysis of the critical remote code execution vulnerability CVE-2026-25470 (CVSS 10.0) in the WordPress plugin ACPT. Versions up to 2.0.47 are affected. Immediate action is required.
Artikel lesen
A critical vulnerability, CVE-2026-49109 (CVSS 9.8), in the WordPress plugin cf7-salesforce allows PHP object injection. All versions <= 1.4.3 are affected.
Artikel lesen
LocateRisk VRM now allows for a preliminary scan without supplier consent—enabling a quick initial assessment of the external IT security landscape.
Artikel lesen
Analysis of the critical vulnerability CVE-2026-29116 (CVSS 8.7) in Dahua products. An unauthenticated attack could result in a denial of service. Recommended actions.
Artikel lesen
English 
Deutsch 
Français