CVE ID :CVE-2026-57853 Published : Nov. 4, 2026, 6:17 p.m. | 48 minutes ago Description :DataGerry before 3.3.0 contains a server-side template injection vulnerability that allows authenticated attackers with base.docapi.template.add permission to store arbitrary Jinja2 payloads in the...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-57853 - DataGerry < 3.3.0 SSTI via DocAPI Template Rendering

VERWANDTEARTIKEL

CVE-2026-82033 - DeepSeek Harness Unauthenticated RPC Command Execution

CVE-2026-122148 - Yealink MeetingBoard Pro Front-End Validation Bypass Vulnerability

CVE-2026-121971 - Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References

CVE-2026-122120 - Yealink Plug-in Software Unauthorized File Write Vulnerability

SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records

CVE-2026-119749 - GetPaid WordPress Plugin < 2.8.63 Negative Quantity Payment Bypass