DokuWiki: Controversial Account Vulnerability (CVE-2026-37106)
CVE-2026-37106 (DokuWiki): Not RCE, but a controversial account creation feature—only when self-registration is enabled (default: disabled). Assessment & Protection.
Artikel lesen
IT-Sicherheitsblog
Vulnerabilities & Advisories
Current CVEs, vendor advisories, and specific recommendations for addressing critical security vulnerabilities.
Aktuelle Beiträge
CVE-2026-11645: Chrome Zero-Day and the Growing Threat of Phishing
INTERPOL reports a rise in cybercrime. At the same time, a Chrome zero-day vulnerability (CVE-2026-11645, CVSS 8.8) that is actively being exploited has come to light. Analysis and protective measures.
Artikel lesen
CVE-2026-25470: Critical Vulnerability in the WordPress Plugin ACPT (CVSS 10.0)
Analysis of the critical remote code execution vulnerability CVE-2026-25470 (CVSS 10.0) in the WordPress plugin ACPT. Versions up to 2.0.47 are affected. Immediate action is required.
Artikel lesen
CVE-2026-49109: Critical vulnerability in WordPress plugin for Salesforce
A critical vulnerability, CVE-2026-49109 (CVSS 9.8), in the WordPress plugin cf7-salesforce allows PHP object injection. All versions <= 1.4.3 are affected.
Artikel lesen
CVE-2026-29116: Denial-of-service vulnerability in Dahua products (CVSS 8.7)
Analysis of the critical vulnerability CVE-2026-29116 (CVSS 8.7) in Dahua products. An unauthenticated attack could result in a denial of service. Recommended actions.
Artikel lesen
CVE-2025-12686: Critical vulnerability in Synology BeeStation (CVSS 9.8)
Analysis of the critical vulnerability CVE-2025-12686 (CVSS 9.8) in Synology BeeStation, which allows unauthenticated remote code execution. Details and measures.
Artikel lesen
Preemptive intelligence - closing vulnerabilities faster
How to Use Preemptive Intelligence to Secure Critical Software Immediately After a Vulnerability Is Disclosed and Shorten the "Time to Action"
Artikel lesen
Log4j Vulnerability - Find out Which of Your Servers Are Affected
Security vulnerability in Log4j - attacks are already underway. Do not waste time and check the security of your systems.
Artikel lesen
English 
Deutsch 
Français