[{"data":1,"prerenderedAt":35},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-126380":3},{"l":4,"details":22,"weitere":25,"indexierbar":10,"updated":34},{"cve":5,"status":6,"vendor":7,"product":8,"name":7,"added":9,"due":7,"ransomware":10,"published":9,"cwes":11,"cvss":13,"slug":18,"bereich":19,"schweregrad":20,"art":21,"produktLabel":8},"CVE-2026-126380","gemeldet","","Vvveb","2026-11-13",false,[12],"CWE-434",{"version":14,"score":15,"severity":16,"vector":17},"4.0",9.4,"CRITICAL","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:H\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X","cve-2026-126380","sonstige","kritisch","Hochladen gefährlicher Dateien",{"description":23,"refs":24},"Vvveb before 1.0.9.0 contains a denylist bypass in system\u002Ftraits\u002Fmedia.php where '.phar' is misconfigured with a leading dot, allowing authenticated administrators to upload .phar PHP files. Attackers can upload a GIF magic-byte polyglot webshell bypassing binary inspection and execute arbitrary OS commands as the web-server user.",[],[26,28,32],{"cve":27,"status":6,"produktLabel":8,"vendor":7,"product":8,"art":21,"bereich":19,"schweregrad":20,"score":15,"epss":-1,"added":9,"ransomware":10},"CVE-2026-126378",{"cve":29,"status":6,"produktLabel":30,"vendor":7,"product":30,"art":31,"bereich":19,"schweregrad":20,"score":15,"epss":-1,"added":9,"ransomware":10},"CVE-2026-127073","OpsTree BuildPiper","Fehlerhafte Verwaltung von Rechten",{"cve":33,"status":6,"produktLabel":30,"vendor":7,"product":30,"art":31,"bereich":19,"schweregrad":20,"score":15,"epss":-1,"added":9,"ransomware":10},"CVE-2026-127080","2026-11-13T12:30:14.259Z",1794573100167]