CVE ID :CVE-2026-110956 Published : Oct. 24, 2026, 6:16 a.m. | 10 hours, 2 minutes ago Description :The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor before authenticating a user, treating an empty stored value as a match, so an...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-110956 - asVereinbase < 1.1.8 - Unauthenticated Authentication Bypass via 2FA Validation

VERWANDTEARTIKEL

U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog

CVE-2026-115557 - Distrust compromised intermediate certificates in ssl module

CVE-2026-115933 - Forged signed tokens let any registered user take over other users and organizations

BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

CVE-2026-115932 - Path traversal in post media lets any registered user read server files

CVE-2026-116011 - Crow before 1.3.4 Denial of Service via Deeply Nested JSON in crow::json::load()