Timeframe: Montag 12-10-2026 18:00 – Dienstag 13-10-2026 18:00
Handler: Guenes Holler
Co-Handler: Michael Schlagenhaufer
News
Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
Two of 31 newly disclosed flaws in Progress Softwares MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five of them critical. Fixes have been available since September 10, in MarkLogic 11.3.7 and MarkLogic 12.1.0.
https://thehackernews.com/2026/10/two-critical-marklogic-flaws-could-give.html
Docker Hub flaw let attackers impersonate users, tamper with images
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another users container repositories using a personal access token (PAT). [..] On September 30, 2026, Docker received a vulnerability report describing the issue, confirmed it, and deployed a fix to production less than four hours later. Docker says it found no evidence of exploitation after examining 304,000 pushes made with transferred tokens and analyzing high-risk public images.
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Three vulnerabilities in LGs webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12.
https://thehackernews.com/2026/10/lg-smart-tvs-vulnerable-to-pre-auth.html
A quick note on incident classification
Right now, there is ongoing work on EU level to harmonize how we classify incidents. This stems from multiple legal backgrounds, including the NIS2 directive and it-s reporting requirements and the Blueprint for cyber crisis management. I-ve tried to give input to most of these initiatives, and in most of these cases, we-ve been moving in the right direction. Not everything is perfect, thus I-d like to write a couple of lines on how I think the whole topic should be.
https://www.cert.at/en/blog/2026/10/a-quick-note-on-incident-classification
In Frankreich wurden Kühlanlagen manipuliert – geht das auch bei uns?
In der Nacht von Sonntag auf Montag (11./12. Oktober) wurden in Frankreich die Kühlanlagen diverser Einzelhandelsketten so manipuliert, dass das Gefriergut aufgeheizt und damit unbrauchbar gemacht wurde. Meine erste Reaktion drauf war, dass da wohl jemand in die Netze eingestiegen war, und von innen heraus die ICS-Komponenten umkonfiguriert hat. Weil so unvorsichtig, diese Systeme offen ins Internet zu hängen, sollten diese Firmen ja doch nicht gewesen sein. Ich habe schon oft gescherzt, dass -sollte- das gefährlichste Wort in der Cybersecurity ist.
Sicherheitslücke in Flugbuchungssystem: Passagierdaten im Klartext einsehbar
Ein Datenleck bei Amadeus legte Passagierdaten offen. Über einen ungeschützten Heap-Dump waren Zugangsdaten im Klartext einsehbar.
Jetzt patchen! SonicWall SMA1000 im Fokus von Angreifern
Derzeit nutzen Angreifer eine kritische Lücke in der Fernzugriffslösung SonicWall SMA1000 aus. Sicherheitsupdates sind verfügbar.
Vulnerabilities
Ivanti: October 2026 Security Update
Ivanti Connect Secure (CVE-2026-104935): Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. Ivanti Neurons Patch for Intune October 2026 (CVE-2026-109412): An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information. Ivanti Xtraction (Multiple CVEs): A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site.
https://www.ivanti.com/blog/october-2026-security-update
SAP warns of maximum severity OAuth2 SSRF security flaw
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python. [..] Tracked as CVE-2026-89111, the maximum-severity vulnerability patched this month can be exploited by remote attackers without privileges to steal credentials.
Xen Advisories 13.10.2026
Xen.org has released 8 new security advisories.
Mozilla Foundation Security Advisories October 13, 2026
[…]
Content was trimmed to protect the source. Please visit the original article for the full text.
Lesen Sie den originalen Artikel: