Aktuelle CVEs, Herstellerwarnungen und konkrete Handlungsempfehlungen für kritische Sicherheitslücken.
CVE-2026-32475 (Elementor Pro ≤4.2.1) und CVE-2026-66592 (rtMedia ≤4.7.11): unauthentifizierter PHP-Upload und SQL Injection. Patches verfügbar.
Artikel lesen
CVE-2026-19478 (CVSS 9.4) betrifft GitLab CE/EE (self-managed) und kann unter bestimmten Bedingungen unauthentifizierte Änderungen oder Löschungen. Aktive Ausnutzung bestätigt.
Artikel lesen Analysis of the critical vulnerability CVE-2026-18691 (CVSS 9.0) in MongoDB Server. Details on the risk of compromise to replica sets and recommended actions.
Artikel lesen Analyse der kritischen RCE-Schwachstelle CVE-2026-58231 (CVSS 10.0) in SAP Commerce Cloud. Betroffene Versionen, verfügbare Patches und empfohlene Maßnahmen für Unternehmen.
Artikel lesen Critical vulnerabilities (CVE-2026-28005, CVE-2026-6235, CVSS 9.8) in the WordPress plugins Kadence WooCommerce Email Designer and Sendmachine allow unauthenticated privilege escalation.
Artikel lesen Analysis of the critical vulnerability CVE-2026-66447 (CVSS 9.3) in the WordPress File Upload plugin. Versions <= 5.1.7 are affected. Details and mitigation steps.
Artikel lesen A critical vulnerability (CVE-2026-41452) in Krayin CRM 2.2.4 allows unauthenticated attackers to completely take over the admin account.
Artikel lesen A critical vulnerability (CVE-2026-58066) in Rocket.Chat with a CVSS score of 9.8 allows attackers to take over any account via SAML SSO. Patches are available.
Artikel lesen An advisory for Apache Traffic Server describes seven critical vulnerabilities, including CVE-2026-58150 and CVE-2026-58162 with a CVSS score of 10.0, as well as CVE-2026-58154/58155, with a CVSS score of 9.2. Patches are available.
Artikel lesen Analysis of the critical vulnerability CVE-2026-63227 (CVSS 9.9) in Koollab LMS. An insecure file upload allows remote code execution. A patch is available.
Artikel lesen Critical vulnerabilities (CVE-2026-15014, CVE-2026-8457, CVE-2025-10656, CVSS 9.8; CVE-2026-3141, CVSS 9.1) in WordPress plugins for WooCommerce allow attackers to take over accounts, gain unauthorized access, and delete files.
Artikel lesen Analysis of the critical SQL injection vulnerability CVE-2026-59549 (CVSS 9.3) in the WordPress plugin rtMedia. Versions up to 4.7.10 are affected. Action required for administrators.
Artikel lesen
On July 21, 2026, 15 critical vulnerabilities in SolarWinds Serv-U (CVE-2026-28302) were disclosed. In addition, CVE-2026-16232, CVE-2026-62144, and CVE-2026-62145 (CVSS 9.3) were disclosed. Updates are available.
Artikel lesen
English 
Deutsch 
Français