[{"data":1,"prerenderedAt":42},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-128014":3},{"l":4,"details":22,"weitere":25,"indexierbar":40,"updated":41},{"cve":5,"status":6,"vendor":7,"product":8,"name":7,"added":9,"due":7,"ransomware":10,"published":9,"cwes":11,"cvss":13,"slug":18,"bereich":19,"schweregrad":20,"art":21,"produktLabel":8},"CVE-2026-128014","gemeldet","","FrankenPHP standalone static binaries","2026-11-13",false,[12],"CWE-787",{"version":14,"score":15,"severity":16,"vector":17},"4.0",9.2,"CRITICAL","CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X","cve-2026-128014","web","kritisch","Speicherfehler (Schreiben außerhalb des erlaubten Bereichs)",{"description":23,"refs":24},"FrankenPHP standalone static binaries 1.8.0 before 1.13.2 bundle the PHP brotli extension statically linked with Brotli 1.2.0, whose decoder contains an out-of-bounds write (CVE-2026-111497). Unauthenticated remote attackers can send crafted data to applications that pass it to brotli_uncompress_add() to crash the entire FrankenPHP process, and possibly cause memory disclosure or code execution.",[],[26,31,35],{"cve":27,"status":6,"produktLabel":28,"vendor":7,"product":28,"art":29,"bereich":19,"schweregrad":20,"score":30,"epss":-1,"added":9,"ransomware":10},"CVE-2026-119077","ELEX WordPress HelpDesk & Customer Ticketing Syste (WordPress-Plugin)","Unsicheres Einlesen von Daten (Deserialisierung)",9.8,{"cve":32,"status":6,"produktLabel":33,"vendor":7,"product":33,"art":34,"bereich":19,"schweregrad":20,"score":30,"epss":-1,"added":9,"ransomware":10},"CVE-2026-125055","Chatterbug Forms (WordPress-Plugin)","Hochladen gefährlicher Dateien",{"cve":36,"status":6,"produktLabel":37,"vendor":7,"product":37,"art":38,"bereich":19,"schweregrad":20,"score":39,"epss":-1,"added":9,"ransomware":10},"CVE-2026-128049","OpenMage Magento LTS","Untergeschobene Anfragen (Cross-Site Request Forgery)",9.4,true,"2026-11-13T12:30:14.259Z",1794573100317]