[{"data":1,"prerenderedAt":38},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-126937":3},{"l":4,"details":22,"weitere":25,"indexierbar":10,"updated":37},{"cve":5,"status":6,"vendor":7,"product":8,"name":7,"added":9,"due":7,"ransomware":10,"published":9,"cwes":11,"cvss":13,"slug":18,"bereich":19,"schweregrad":20,"art":21,"produktLabel":8},"CVE-2026-126937","gemeldet","","Zipline","2026-11-13",false,[12],"CWE-367",{"version":14,"score":15,"severity":16,"vector":17},"4.0",9.2,"CRITICAL","CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X","cve-2026-126937","sonstige","kritisch","Zeitkritischer Ablauffehler zwischen Prüfung und Nutzung",{"description":23,"refs":24},"Zipline before 4.6.5 contains a TOCTOU race condition in the POST \u002Fapi\u002Fsetup endpoint that allows unauthenticated attackers to create multiple SUPERADMIN accounts by racing concurrent requests before the firstSetup flag is reset. Attackers can send simultaneous requests with spoofed X-Forwarded-For headers during the argon2 hashing window to gain full administrative control of the instance.",[],[26,31,33],{"cve":27,"status":6,"produktLabel":28,"vendor":7,"product":28,"art":29,"bereich":19,"schweregrad":20,"score":30,"epss":-1,"added":9,"ransomware":10},"CVE-2026-126378","Vvveb","Hochladen gefährlicher Dateien",9.4,{"cve":32,"status":6,"produktLabel":28,"vendor":7,"product":28,"art":29,"bereich":19,"schweregrad":20,"score":30,"epss":-1,"added":9,"ransomware":10},"CVE-2026-126380",{"cve":34,"status":6,"produktLabel":35,"vendor":7,"product":35,"art":36,"bereich":19,"schweregrad":20,"score":30,"epss":-1,"added":9,"ransomware":10},"CVE-2026-127073","OpsTree BuildPiper","Fehlerhafte Verwaltung von Rechten","2026-11-13T12:30:14.259Z",1794573100297]