Currently trending CVE - Hype Score: 10 - Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the element search endpoint because the attribute parameter is concatenated into the query unsanitized and emulated PDO prepares allow stacked...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-123488

VERWANDTEARTIKEL

CVE-2026-120984 - Keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline javascript policy import

CVE-2026-123966 - Tenda AC19 saveParentControlInfo heap-based overflow

SonicWall Warns of Potential In-the-Wild Exploitation of SSLVPN Flaw That Bypasses MFA

CVE-2026-120839 - WordPress WpTravelly plugin <= 2.3.8 - Local File Inclusion vulnerability

CVE-2026-122041 - Checkout Field Editor for WooCommerce (Pro) <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attachment_id' Parameter via thwcfe_remove_uploaded AJAX Action

CVE-2026-119075 - Registration Form for WooCommerce <= 1.1.4 - Unauthenticated Privilege Escalation to 'user_roles' Parameter at Checkout