LR pixel

Versa Concerto SD-WAN Authentication Bypass

von | 30. Jan. 2026 | Unkategorisiert

What is the Vulnerability? A critical security vulnerability (CVE-2025-34026) has been identified in the Versa Concerto SD-WAN orchestration platform, impacting versions 12.1.2 through 12.2.0. The issue allows unauthorized actors to bypass standard authentication...

Zimbra Collaboration Local File Inclusion

von | 29. Jan. 2026 | Unkategorisiert

What is the Vulnerability? A Local File Inclusion (LFI) vulnerability (CVE-2025-68645) exists in the Zimbra Collaboration Suite (ZCS) Webmail Classic UI due to improper handling of user-supplied request parameters in the RestFilter servlet. An unauthenticated remote...

SmarterTools SmarterMail RCE

von | 28. Jan. 2026 | Unkategorisiert

What is the Vulnerability? An actively targeted vulnerability has been identified in SmarterTools SmarterMail, tracked as CVE-2025-52691, with a CVSS score of 10.0 (Critical). The flaw allows unauthenticated attackers to upload arbitrary files to any location on the...

UAT-8837 Critical Infrastructure Attack

von | 17. Jan. 2026 | Unkategorisiert

What is the Attack? An active campaign has been linked, with medium confidence, to a threat actor designated UAT-8837, which Cisco Talos assesses as a China-nexus group targeting critical infrastructure organizations in North America. Observed activity includes...

n8n Unauthenticated Remote Code Execution

von | 8. Jan. 2026 | Unkategorisiert

What is the Vulnerability? CVE-2026-21858 arises from a Content-Type confusion flaw in n8n’s webhook and form handling logic. Specifically, certain form-based workflows do not adequately validate or enforce multipart form content types, allowing attackers to override...