CVE ID :CVE-2026-113358 Published : Oct. 20, 2026, 11:17 a.m. | 48 minutes ago Description :LavaLite CMS through 10.1.2 contains a missing authentication vulnerability in the Filer module that allows unauthenticated attackers to download stored files through the filer/download and...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-113358 - LavaLite CMS through 10.1.2 Missing Authentication via Filer Download Routes

VERWANDTEARTIKEL

CVE-2026-113620 - Eclipse ioFog operator WebSocket accepts an unverified JWT

CVE-2026-113390 - DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection

CVE-2026-113391 - DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection

CVE-2026-105941 - Kroxylicious-kms-provider-azure-key-vault-kms: streams for apache kafka kroxylicious: azure key vault ssrf exfiltrates bearer token via untrusted edek vaultname

CVE-2026-105949 - Cruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpoints

CVE-2026-105312 - Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation