CVE ID :CVE-2026-104059 Published : Oct. 1, 2026, 6:17 p.m. | 1 hour, 1 minute ago Description :Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by sending...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-104059 - Lektor 3.3.14 CSRF via Admin API Endpoints

VERWANDTEARTIKEL

CVE-2026-55230 - Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter bypass using a quoted greater-than character

CVE-2026-97662 - Argument injection in the diff scan operation in AWS security-agent-mcp-server allows arbitrary host file creation, overwrite, and truncation outside the intended workspace

CVE-2026-104018 - VxWorks 7 improper privilege management

CVE-2026-102294 - Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration

CVE-2026-102369 - Unauthenticated Remote Code Execution via MacTool Command Injection in TP-Link Tapo C120 & C200

CVE-2026-103922 - Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path