HIGH

New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root

The Hacker News • Sep 09, 2026

CRITICAL

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

The Hacker News • Sep 09, 2026

HIGH

Multiples vulnérabilités dans SPIP (03 septembre 2026)

CERT-FR (ANSSI) • Sep 03, 2026

CRITICAL

[NEU] [kritisch] Vercel Next.js: Mehrere Schwachstellen ermöglichen Codeausführung

BSI Germany • Aug 26, 2026

MEDIUM

AliExpress accused of fingerprinting shoppers with silent audio trick that also muted a dev's headphones

The Register Security • Aug 24, 2026

LOW

ShieldFont fights AI scraping by handing crawlers the wrong words

Help Net Security • Aug 07, 2026

INFO

From ranking to recommended: get your site ready to thrive in the age of AI agents

Cloudflare Blog • Aug 06, 2026

MEDIUM

Horizon3.ai expands NodeZero with automated web application attack path testing

Help Net Security • Jul 31, 2026

MEDIUM

Agentic Browsers Rewind Web Security by 20 years

Dark Reading • Jul 27, 2026

HIGH

[NEU] [hoch] Synacor Zimbra Classic Web Client: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Jul 07, 2026

CRITICAL

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

The Hacker News • Jun 29, 2026

CRITICAL

[NEU] [hoch] Microsoft Dynamics 365: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Jun 22, 2026

MEDIUM

[NEU] [UNGEPATCHT] [mittel] ILIAS: Schwachstelle ermöglicht SQL-Injection

BSI Germany • Jun 22, 2026

CRITICAL

Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites

The Hacker News • Jun 15, 2026

MEDIUM

Multiples vulnérabilités dans Typo3 (10 juin 2026)

CERT-FR (ANSSI) • Jun 10, 2026

LOW

[NEU] [niedrig] PHP: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

BSI Germany • Jun 05, 2026

MEDIUM

CVE-2026-44899 Mistune Image Directive CSS Injection Vulnerability

Microsoft Security Response Center • May 28, 2026

MEDIUM

CVE-2026-44898 Mistune TOC Anchor Injection XSS

Microsoft Security Response Center • May 28, 2026

MEDIUM

[NEU] [mittel] Webmin: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • May 22, 2026

MEDIUM

CVE-2026-39823 Bypass of meta content URL escaping causes XSS in html/template

Microsoft Security Response Center • May 10, 2026

INFO

Introducing the Agent Readiness score. Is your site agent-ready?

Cloudflare Blog • Apr 17, 2026

INFO

Shared Dictionaries: compression that keeps up with the agentic web

Cloudflare Blog • Apr 17, 2026

INFO

Google to penalize sites that hijack the back button

Help Net Security • Apr 14, 2026

MEDIUM

Cisco IOx Application Hosting Environment Carriage Return Line Feed Injection Vulnerability

Cisco Security • Mar 25, 2026

MEDIUM

Cisco IOx Application Hosting Environment Stored Cross-Site Scripting Vulnerability

Cisco Security • Mar 25, 2026

MEDIUM

Cisco Catalyst SD-WAN Manager Cross-Site Scripting Vulnerability

Cisco Security • Mar 25, 2026

MEDIUM

[NEU] [mittel] Znuny: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Mar 24, 2026

HIGH

[NEU] [hoch] Apache Airflow: Mehrere Schwachstellen

BSI Germany • Mar 17, 2026

MEDIUM

[NEU] [mittel] Varnish HTTP Cache: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

BSI Germany • Mar 17, 2026

MEDIUM

[NEU] [mittel] Cisco Finesse, Unified Intelligence Center, Unified CCX: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

BSI Germany • Mar 12, 2026