[{"data":1,"prerenderedAt":45},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-124445":3},{"l":4,"details":25,"weitere":28,"indexierbar":43,"updated":44},{"cve":5,"status":6,"vendor":7,"product":8,"name":7,"added":9,"due":7,"ransomware":10,"published":9,"cwes":11,"cvss":13,"epss":18,"slug":21,"bereich":22,"schweregrad":23,"art":24,"produktLabel":8},"CVE-2026-124445","gemeldet","","OpenEMR","2026-11-08",false,[12],"CWE-307",{"version":14,"score":15,"severity":16,"vector":17},"4.0",9.3,"CRITICAL","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"score":19,"percentile":20},0.00351,0.28997,"cve-2026-124445","web","kritisch","Unbegrenzte Anmeldeversuche",{"description":26,"refs":27},"OpenEMR from 7.0.1 before 8.4.0 contains a flaw in src\u002FCommon\u002FAuth\u002FOneTimeAuth.php that ignores the enforce_onetime_use and max_access_count flags, never revokes consumed service_auth tokens, and checks login_pin without rate limiting or strict comparison. Attackers holding a captured token can replay it or brute-force the PIN to open patient-portal sessions exposing PHI.",[],[29,36,40],{"cve":30,"status":6,"produktLabel":31,"vendor":7,"product":31,"art":32,"bereich":22,"schweregrad":33,"score":34,"epss":-1,"added":35,"ransomware":10},"CVE-2026-13764","Masterstudy (WordPress-Plugin)","Fehlende Berechtigungsprüfung","hoch",8.8,"2026-11-12",{"cve":37,"status":6,"produktLabel":38,"vendor":7,"product":38,"art":39,"bereich":22,"schweregrad":33,"score":34,"epss":-1,"added":35,"ransomware":10},"CVE-2026-15309","CourseCure Courses (WordPress-Plugin)","Fehlerhafte Verwaltung von Rechten",{"cve":41,"status":6,"produktLabel":42,"vendor":7,"product":42,"art":39,"bereich":22,"schweregrad":33,"score":34,"epss":-1,"added":35,"ransomware":10},"CVE-2026-16135","VibeBP (WordPress-Plugin)",true,"2026-11-12T13:05:11.283Z",1794488742198]