[{"data":1,"prerenderedAt":40},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-126777":3},{"l":4,"details":22,"weitere":25,"indexierbar":10,"updated":39},{"cve":5,"status":6,"vendor":7,"product":8,"name":7,"added":9,"due":7,"ransomware":10,"published":9,"cwes":11,"cvss":13,"slug":18,"bereich":19,"schweregrad":20,"art":21,"produktLabel":8},"CVE-2026-126777","gemeldet","","Traccar","2026-11-11",false,[12],"CWE-287",{"version":14,"score":15,"severity":16,"vector":17},"4.0",9.1,"CRITICAL","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X","cve-2026-126777","sonstige","kritisch","Fehlerhafte Anmeldung (Authentifizierung)",{"description":23,"refs":24},"Traccar 3.15 before 6.17.0 contains an authentication bypass vulnerability in LdapProvider.login() that fails to reject empty passwords, causing LDAP binds to be performed as unauthenticated binds when LDAP authentication is enabled. Unauthenticated attackers who know a valid username can log in via POST \u002Fapi\u002Fsession or HTTP Basic authentication with an empty password against directories that permit unauthenticated binds, obtaining sessions for any account including administrators.",[],[26,32,35],{"cve":27,"status":6,"produktLabel":28,"vendor":7,"product":28,"art":29,"bereich":19,"schweregrad":20,"score":30,"epss":-1,"added":31,"ransomware":10},"CVE-2026-126785","rmalright TR-VISION HOME","Zu weit gefasste Standardberechtigungen",9.3,"2026-11-12",{"cve":33,"status":6,"produktLabel":34,"vendor":7,"product":34,"art":21,"bereich":19,"schweregrad":20,"score":30,"epss":-1,"added":9,"ransomware":10},"CVE-2026-126768","OpsTree REMS",{"cve":36,"status":6,"produktLabel":37,"vendor":7,"product":37,"art":38,"bereich":19,"schweregrad":20,"score":30,"epss":-1,"added":9,"ransomware":10},"CVE-2026-126797","NextScan","Fest eingebauter Schlüssel für die Verschlüsselung","2026-11-12T13:05:11.283Z",1794488740499]