CVE ID :CVE-2025-71456 Published : Nov. 4, 2026, 8:36 p.m. | 29 minutes ago Description :vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject SQL by supplying a crafted fieldname parameter to modules/Fax/EditView.php....

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2025-71456 - vtenext before 25.02.2 SQL Injection via fieldname in Fax EditView

VERWANDTEARTIKEL

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

CVE-2026-122224 - WebVirtCloud through commit bb920b0 Missing Authorization in REST API Migrate and Create Endpoints

CVE-2026-122134 - Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers

CVE-2026-122135 - Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program

CVE-2026-122133 - Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe

CVE-2026-122130 - CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output Plugin