Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers. [...]

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

Hackers exploit SiteGuard WAF flaw to run commands as SYSTEM, root

VERWANDTEARTIKEL

CVE-2026-112051 - Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registration

CVE-2026-112021 - snac2 before 2.93 Heap-Based Buffer Overflow via JSON Parser _xs_json_load_lexer()

CVE-2026-112001 - ProjectSend 2.0.0 before 2.7.0 Incorrect Authorization via Users API Token Abilities

CVE-2026-112005 - WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor

CVE-2026-112006 - OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 Improper Certificate Validation

CVE-2026-111999 - Vanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver