HIGH

[NEU] [mittel] Mattermost Server: Schwachstelle ermöglicht nicht spezifizierten Angriff

BSI Germany • May 19, 2026

CRITICAL

Microsoft Exchange Zero-Day Under Attack, No Patch Available

Dark Reading • May 18, 2026

HIGH

[NEU] [hoch] GitLab: Mehrere Schwachstellen

BSI Germany • May 15, 2026

MEDIUM

[NEU] [mittel] MISP: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • May 08, 2026

HIGH

[webapps] FUXA 1.2.8 - Authentication Bypass + RCE Exploit

Exploit-DB • Apr 30, 2026

HIGH

[webapps] HUSTOJ Zip-Slip v26.01.24 - RCE

Exploit-DB • Apr 30, 2026

MEDIUM

[webapps] Camaleon CMS v2.9.0 - Path Traversal

Exploit-DB • Apr 30, 2026

HIGH

USN-8223-1: Roundcube Webmail vulnerabilities

Ubuntu Security • Apr 29, 2026

CRITICAL

[webapps] Craft CMS 5.6.16 - RCE

Exploit-DB • Apr 29, 2026

MEDIUM

[webapps] HAX CMS 24.x - Stored Cross-Site Scripting (XSS)

Exploit-DB • Apr 29, 2026

MEDIUM

[webapps] phpMyFAQ 4.0.16 - Improper Authorization

Exploit-DB • Apr 29, 2026

HIGH

[webapps] OpenKM 6.3.12 - Multiple

Exploit-DB • Apr 29, 2026

MEDIUM

[webapps] FacturaScripts 2025.43 - XSS

Exploit-DB • Apr 29, 2026

HIGH

[webapps] JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution

Exploit-DB • Apr 29, 2026

HIGH

[webapps] GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)

Exploit-DB • Apr 29, 2026

HIGH

[NEU] [hoch] GitLab: Mehrere Schwachstellen

BSI Germany • Apr 23, 2026

MEDIUM

[NEU] [mittel] Drupal (Obfuscate): Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Apr 23, 2026

HIGH

[NEU] [hoch] Apache Airflow und Apache Airflow Keycloak Provider: Mehrere Schwachstellen

BSI Germany • Apr 20, 2026

MEDIUM

[NEU] [mittel] Pega Platform: Mehrere Schwachstellen

BSI Germany • Apr 16, 2026

MEDIUM

[NEU] [mittel] Snipe-IT: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Apr 14, 2026

HIGH

[NEU] [hoch] MediaWiki Erweiterungen: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

BSI Germany • Apr 10, 2026

HIGH

[webapps] Jumbo Website Manager - Remote Code Execution

Exploit-DB • Apr 09, 2026

MEDIUM

[NEU] [mittel] Drupal (Orejime): Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Apr 09, 2026

HIGH

[webapps] xibocms 3.3.4 - RCE

Exploit-DB • Apr 08, 2026

HIGH

[webapps] FortiWeb 8.0.2 - Remote Code Execution

Exploit-DB • Apr 08, 2026

CRITICAL

[webapps] Horilla v1.3 - RCE

Exploit-DB • Apr 08, 2026

MEDIUM

[NEU] [mittel] Snipe-IT: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen und potenziell Cross-Site Scripting

BSI Germany • Apr 08, 2026

HIGH

Multiples vulnérabilités dans GLPI (07 avril 2026)

CERT-FR (ANSSI) • Apr 07, 2026

HIGH

[webapps] Fortinet FortiWeb v8.0.1 - Auth Bypass

Exploit-DB • Apr 06, 2026

HIGH

[NEU] [mittel] Drupal (SAML SSO): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

BSI Germany • Apr 02, 2026

CRITICAL

[NEU] [hoch] Checkmk: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

BSI Germany • Mar 31, 2026

MEDIUM

Chaining file upload bypass and stored XSS to create admin accounts: walkthrough with Docker PoC lab

Reddit r/netsec • Mar 28, 2026

HIGH

PolyShell attacks target 56% of all vulnerable Magento stores

BleepingComputer • Mar 25, 2026

CRITICAL

Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account Takeover

The Hacker News • Mar 20, 2026

HIGH

[NEU] [hoch] Angular: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Mar 16, 2026

HIGH

NCSC-2026-0087 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Commerce

NCSC Netherlands • Mar 12, 2026

MEDIUM

[NEU] [niedrig] Fortinet FortiSIEM: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Mar 11, 2026

HIGH

[NEU] [hoch] xwiki Blog Application: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Mar 05, 2026

HIGH

[NEU] [hoch] Zammad: Mehrere Schwachstellen

BSI Germany • Mar 04, 2026

MEDIUM

USN-8067-1: Mailman vulnerability

Ubuntu Security • Mar 02, 2026

CRITICAL

[NEU] [hoch] Checkmk: Schwachstelle ermöglicht Cross-Site Scripting

BSI Germany • Feb 27, 2026

MEDIUM

Malicious URLs

Reddit r/netsec • Feb 20, 2026

MEDIUM

Fraudster hacked hotel system, paid 1 cent for luxury rooms, Spanish cops say

The Register Security • Feb 18, 2026

HIGH

Agentic AI Site 'Moltbook' Is Riddled With Security Risks

Dark Reading • Feb 05, 2026