[{"data":1,"prerenderedAt":46},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-124020":3},{"l":4,"details":22,"weitere":25,"indexierbar":44,"updated":45},{"cve":5,"status":6,"vendor":7,"product":8,"name":7,"added":9,"due":7,"ransomware":10,"published":9,"cwes":11,"cvss":13,"slug":18,"bereich":19,"schweregrad":20,"art":21,"produktLabel":8},"CVE-2026-124020","gemeldet","","Control Web Panel","2026-11-13",false,[12],"CWE-640",{"version":14,"score":15,"severity":16,"vector":17},"4.0",9.2,"CRITICAL","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X","cve-2026-124020","web","kritisch","Schwachstelle",{"description":23,"refs":24},"Control Web Panel (CWP) before webpanel_version 1.30.6 contains a host header injection vulnerability that allows unauthenticated attackers to manipulate the password-recovery reset URL by injecting the HTTP Host header into the \u002Fv1\u002Flostpass\u002F route's token generation process. Attackers can lure an automated mail-security scanner into visiting the poisoned reset link to exfiltrate the live recovery token, replay it at \u002Flogin\u002Findex.php?acc=newpass to set a new password, and subsequently abuse the File Manager and Crontab modules to achieve command execution as the targeted hosting account.",[],[26,32,38],{"cve":27,"status":6,"produktLabel":28,"vendor":7,"product":28,"art":29,"bereich":19,"schweregrad":20,"score":30,"epss":-1,"added":31,"ransomware":10},"CVE-2026-126173","AutomatorWP Pro (WordPress-Plugin)","Fehlende Berechtigungsprüfung",9.8,"2026-11-14",{"cve":33,"status":6,"produktLabel":34,"vendor":7,"product":34,"art":35,"bereich":19,"schweregrad":36,"score":37,"epss":-1,"added":31,"ransomware":10},"CVE-2026-124969","Optimole (WordPress-Plugin)","Unsicheres Einlesen von Daten (Deserialisierung)","hoch",7.1,{"cve":39,"status":6,"produktLabel":40,"vendor":7,"product":40,"art":41,"bereich":19,"schweregrad":20,"score":42,"epss":43,"added":9,"ransomware":10},"CVE-2026-128049","OpenMage Magento LTS","Untergeschobene Anfragen (Cross-Site Request Forgery)",9.4,0.00226,true,"2026-11-14T11:41:59.691Z",1794656591477]