LR pixel

NGINX Heap-Based Buffer Overflow

von | 24. Aug. 2026 | Unkategorisiert

What is the Vulnerability? FortiGuard Labs is tracking an exploitation risk associated with CVE-2026-42533, a heap-based buffer overflow vulnerability affecting NGINX Open Source and NGINX Plus. The flaw occurs when the map directive uses regex matching and capture...

WordPress Core Unauthenticated RCE (WP2Shell)

von | 30. Juli 2026 | Unkategorisiert

What is the Attack? FortiGuard Labs is observing increasing exploitation activity targeting WP2Shell, a critical unauthenticated remote code execution (RCE) attack chain affecting WordPress Core. Unlike most WordPress attacks that rely on vulnerable plugins or themes,...

PTC Windchill & FlexPLM RCE

von | 28. Juli 2026 | Unkategorisiert

What is the Attack? A critical unauthenticated remote code execution (RCE) vulnerability affecting PTC Windchill PDMlink and PTC FlexPLM is being actively exploited by Cl0p ransomware affiliates. The attackers are targeting vulnerable Internet-facing Product Lifecycle...

Joomla SP Page Builder RCE

von | 17. Juli 2026 | Unkategorisiert

What is the Vulnerability? FortiGuard telemetry shows continued exploitation attempts targeting vulnerable Joomla SP Page Builder installations. CVE-2026-48908 is a critical unauthenticated remote code execution (RCE) vulnerability affecting the SP Page Builder...