CRITICAL

[NEU] [kritisch] WordPress: Mehrere Schwachstellen ermöglichen Codeausführung

BSI Germany • Jul 20, 2026

HIGH

WordPress Multiple Vulnerabilities

HKCERT • Jul 20, 2026

LOW

[NEU] [niedrig] Pega Platform: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

BSI Germany • Jul 16, 2026

HIGH

[NEU] [hoch] Adobe Experience Manager: Mehrere Schwachstellen

BSI Germany • Jul 15, 2026

MEDIUM

Cross-Site Scripting in Domain parameter

Fortinet PSIRT • Jul 14, 2026

HIGH

Multiples vulnérabilités dans GitLab (09 juillet 2026)

CERT-FR (ANSSI) • Jul 09, 2026

MEDIUM

[NEU] [mittel] Microsoft GitHub Enterprise Server: Mehrere Schwachstellen

BSI Germany • Jul 01, 2026

HIGH

[NEU] [hoch] MediaWiki: Schwachstelle ermöglicht Manipulation von Daten

BSI Germany • Jul 01, 2026

MEDIUM

CargoWise WebTracker - The keys were in the cargo

Reddit r/netsec • Jun 25, 2026

HIGH

Drupal Multiple Vulnerabilities

HKCERT • Jun 23, 2026

MEDIUM

[NEU] [mittel] Cacti: Mehrere Schwachstellen

BSI Germany • Jun 16, 2026

MEDIUM

[NEU] [mittel] Drupal: Mehrere Schwachstellen

BSI Germany • Jun 11, 2026

MEDIUM

Cisco Webex Meetings Cross-Site Scripting Vulnerability

Cisco Security • Jun 03, 2026

MEDIUM

Cisco Finesse Remote File Inclusion Vulnerability

Cisco Security • Jun 03, 2026

MEDIUM

Blind POST SSRF in phpBB 4.0.0-alhpa1 Web Push (CVD with phpBB)

Reddit r/netsec • Jun 01, 2026

HIGH

[NEU] [mittel] Mautic: Schwachstelle ermöglicht SQL-Injection

BSI Germany • May 29, 2026

HIGH

[webapps] Langflow 1.3.0 - Remote Code Execution

Exploit-DB • May 29, 2026

MEDIUM

[webapps] CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated)

Exploit-DB • May 29, 2026

HIGH

Zimbra Multiple Vulnerabilities

HKCERT • May 29, 2026

HIGH

CP Plus 8 Ch. Network Video Recorder

CISA All Advisories • May 28, 2026

HIGH

[NEU] [mittel] Mattermost Server: Schwachstelle ermöglicht nicht spezifizierten Angriff

BSI Germany • May 19, 2026

CRITICAL

Microsoft Exchange Zero-Day Under Attack, No Patch Available

Dark Reading • May 18, 2026

HIGH

[NEU] [hoch] GitLab: Mehrere Schwachstellen

BSI Germany • May 15, 2026

MEDIUM

[NEU] [mittel] MISP: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • May 08, 2026

HIGH

[webapps] FUXA 1.2.8 - Authentication Bypass + RCE Exploit

Exploit-DB • Apr 30, 2026

HIGH

[webapps] HUSTOJ Zip-Slip v26.01.24 - RCE

Exploit-DB • Apr 30, 2026

MEDIUM

[webapps] Camaleon CMS v2.9.0 - Path Traversal

Exploit-DB • Apr 30, 2026

HIGH

USN-8223-1: Roundcube Webmail vulnerabilities

Ubuntu Security • Apr 29, 2026

MEDIUM

[webapps] HAX CMS 24.x - Stored Cross-Site Scripting (XSS)

Exploit-DB • Apr 29, 2026

CRITICAL

[webapps] Craft CMS 5.6.16 - RCE

Exploit-DB • Apr 29, 2026

MEDIUM

[webapps] phpMyFAQ 4.0.16 - Improper Authorization

Exploit-DB • Apr 29, 2026

HIGH

[webapps] OpenKM 6.3.12 - Multiple

Exploit-DB • Apr 29, 2026

HIGH

[webapps] GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)

Exploit-DB • Apr 29, 2026

HIGH

[webapps] JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution

Exploit-DB • Apr 29, 2026

MEDIUM

[webapps] FacturaScripts 2025.43 - XSS

Exploit-DB • Apr 29, 2026

MEDIUM

[NEU] [mittel] Drupal (Obfuscate): Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Apr 23, 2026

HIGH

[NEU] [hoch] GitLab: Mehrere Schwachstellen

BSI Germany • Apr 23, 2026

HIGH

[NEU] [hoch] Apache Airflow und Apache Airflow Keycloak Provider: Mehrere Schwachstellen

BSI Germany • Apr 20, 2026

MEDIUM

[NEU] [mittel] Pega Platform: Mehrere Schwachstellen

BSI Germany • Apr 16, 2026

MEDIUM

[NEU] [mittel] Snipe-IT: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Apr 14, 2026

HIGH

[NEU] [hoch] MediaWiki Erweiterungen: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

BSI Germany • Apr 10, 2026

HIGH

[webapps] Jumbo Website Manager - Remote Code Execution

Exploit-DB • Apr 09, 2026

MEDIUM

[NEU] [mittel] Drupal (Orejime): Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Apr 09, 2026

HIGH

[webapps] FortiWeb 8.0.2 - Remote Code Execution

Exploit-DB • Apr 08, 2026

HIGH

[webapps] xibocms 3.3.4 - RCE

Exploit-DB • Apr 08, 2026

CRITICAL

[webapps] Horilla v1.3 - RCE

Exploit-DB • Apr 08, 2026

MEDIUM

[NEU] [mittel] Snipe-IT: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen und potenziell Cross-Site Scripting

BSI Germany • Apr 08, 2026

HIGH

Multiples vulnérabilités dans GLPI (07 avril 2026)

CERT-FR (ANSSI) • Apr 07, 2026

HIGH

[webapps] Fortinet FortiWeb v8.0.1 - Auth Bypass

Exploit-DB • Apr 06, 2026

HIGH

[NEU] [mittel] Drupal (SAML SSO): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

BSI Germany • Apr 02, 2026

CRITICAL

[NEU] [hoch] Checkmk: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

BSI Germany • Mar 31, 2026

MEDIUM

Chaining file upload bypass and stored XSS to create admin accounts: walkthrough with Docker PoC lab

Reddit r/netsec • Mar 28, 2026

HIGH

PolyShell attacks target 56% of all vulnerable Magento stores

BleepingComputer • Mar 25, 2026

CRITICAL

Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account Takeover

The Hacker News • Mar 20, 2026

HIGH

[NEU] [hoch] Angular: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Mar 16, 2026

HIGH

NCSC-2026-0087 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Commerce

NCSC Netherlands • Mar 12, 2026

MEDIUM

[NEU] [niedrig] Fortinet FortiSIEM: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Mar 11, 2026

HIGH

[NEU] [hoch] xwiki Blog Application: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Mar 05, 2026

HIGH

[NEU] [hoch] Zammad: Mehrere Schwachstellen

BSI Germany • Mar 04, 2026

MEDIUM

USN-8067-1: Mailman vulnerability

Ubuntu Security • Mar 02, 2026

CRITICAL

[NEU] [hoch] Checkmk: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Feb 27, 2026

MEDIUM

Malicious URLs

Reddit r/netsec • Feb 20, 2026

MEDIUM

Fraudster hacked hotel system, paid 1 cent for luxury rooms, Spanish cops say

The Register Security • Feb 18, 2026

HIGH

Agentic AI Site 'Moltbook' Is Riddled With Security Risks

Dark Reading • Feb 05, 2026