CVE ID :CVE-2026-55445 Published : July 15, 2026, 10:17 p.m. | 17 minutes ago Description :Qinglong is a timed task management platform supporting Python3, JavaScript, Shell, and Typescript. Prior to 2.20.1, the init guard middleware in back/loaders/express.ts checks /api/user/init but not...

#Sicherheitslücke #Malware #Update

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-55445 - Qinglong: Incomplete fix for CVE-2026-3965: Improper Authentication

VERWANDTEARTIKEL

CVE-2026-55576 - MaaAssistantArknights: PR-title expression injection in release-preparation.yml

CVE-2026-55652 - Wekan: Header-login IP allowlist bypass via X-Forwarded-For spoofing in Wekan allows unauthenticated full account takeover (incl. admin)

CVE-2026-55234 - Wekan: Broken access control: any authenticated user can move their Cards/Lists/Swimlanes into a private board they are not a member of (cross-board write via collection allow rule)

CVE-2026-54458 - AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket Plugin

CVE-2026-52891 - Wekan: Shell Injection via Avatar Upload

CVE-2026-52893 - Wekan: OIDC Account Takeover via Unconditional Email-Based Account Merge in onCreateUser hook