Comparing 22 May 2026 with the previous day 15 May 2026.
The vulnerability reveals that a previous SSH authentication fix was incomplete and remains exploitable by bypassing callback-type validation,a pattern indicating flawed security abstractions.
A privilege-escalation vulnerability in UniFi OS enables remote command execution for attackers with network access, directly compromising the central network-management infrastructure.
An access control vulnerability in UniFi OS allows network-adjacent attackers to make unauthorized system changes without requiring authentication.
Network access alone is sufficient to exploit a path-traversal vulnerability in UniFi devices for file manipulation and account compromise, without requiring authentication.
The vulnerability enables direct command execution on UniFi devices through network access by exploiting improper input validation, requiring immediate patch prioritization in Joel Traber AG's infrastructure.
The vulnerability requires existing network access and low privileges, limiting risk to internal threats or post-compromise scenarios.
Nation-state actors are operationalizing ROADtools to manipulate Entra ID tokens in targeted attacks; Microsoft has documented active APT use since 2021 against delegated administrative privileges.
Chinese nation-state APT exploits unconventional C2 channels (Discord, Microsoft Graph APIs) to infiltrate European governmental organizations, signaling elevated risk to critical infrastructure and potential supply-chain targets across the EU.
Screening Serpens deploys an evolved version of MiniJunk malware to infiltrate European targets; the threat actor employs sideloading techniques and .NET-specific code-execution methods for defense evasion.
A compromised TanStack token enabled attackers unrestricted access to Grafana's GitHub repositories because the token was not rotated , a classic sign of insufficient token hygiene in the supply chain.
Cloud Atlas employs new tools (PowerCloud, ReverseSocks) and combines legacy exploits (CVE-2018-0802) with modern evasion techniques (PowerShell archives, multi-channel C2 via Tor/SSH) to establish persistent control.
The vulnerability affects the TeamViewer DEX Platform (On-Premises) and allows low-privileged users to gain access to administrative functions,a significant risk for on-premises deployments in manufacturing environments.
Two critical Chrome vulnerabilities enable remote code execution through visiting a malicious website and require immediate update to version 148.0.7778.178/179.
BSI warns of multiple production-in-use vulnerabilities in UniFi OS Server with direct RCE potential; absence of CVE numbers suggests possible zero-days or coordinated disclosure.
BSI warning of multiple privilege escalation vulnerabilities in Microsoft Entra ID and Azure Resource Manager; these vulnerabilities enable unauthorized access to critical identity and resource management functions in hybrid cloud environments.
Kali365 is a Telegram-based phishing-as-a-service that steals OAuth tokens from Microsoft 365 environments, enabling widespread access rights; the FBI warns of active attacks in April.
BSI warns of active exploitation of a critical SharePoint vulnerability; organizations should immediately check for patches and monitor systems.
Kali365 abuses legitimate Microsoft authentication pages for persistent backdoor access; FBI warning signals active exploitation in the wild.
The BSI warns of multiple unspecified vulnerabilities in widely-used browsers without specific CVE references or documented active exploitation, suggesting a generalized patch advisory.
BSI warns of critical RCE vulnerability in SharePoint Server 2016/2019 that authenticated attackers can exploit to execute arbitrary code.
BSI warns of an authenticated privilege-escalation vulnerability in TeamViewer that allows local attackers or those with valid credentials to elevate to higher privileges.
The advisory lacks specificity regarding affected kernel versions and CVE identifiers; further details are required to assess exploitation status and patching priority for Ubuntu 24.04 LTS.
BSI warns of multiple systemd vulnerabilities with potential for denial-of-service and code execution with administrative privileges on Linux systems.
BSI advisory on multiple Linux kernel vulnerabilities without specific CVE disclosure or PoC status; concrete patch status and affected versions must be obtained from the full BSI report.
The vulnerability allows a local attacker to execute arbitrary code with elevated privileges, potentially resulting in complete system compromise and requiring immediate attention for patch management.
BSI warns of multiple Chrome vulnerabilities without detailed disclosure; patch status and exploitability still unclear.
BSI alerts to multiple unspecified vulnerabilities in Firefox/Thunderbird without CVE details; this is typically a precautionary announcement ahead of detailed security updates.
The BSI warns of multiple vulnerabilities in Synology DSM enabling various attack scenarios,from security measure bypass to data manipulation and DoS attacks.
BSI warns of multiple local vulnerabilities in Adobe Creative Cloud without specific CVE numbers; exploitation requires user interaction (malicious file) but poses risk to design and marketing teams.
Prototype pollution vulnerabilities in Adobe Acrobat and Reader enable remote code execution; BSI warns of active exploitation.
BSI warns of multiple vulnerabilities in Ubiquiti UniFi Play PowerAmp/Audio Port without specific CVE numbers or PoC details; exploitation status and affected version information are missing from the announcement.
The vulnerability requires user interaction (click on malicious URL), making the risk mitigable through security awareness and link validation, though typically not as critical as zero-click exploits.
BSI warns of multiple exploitable vulnerabilities in Firefox and Thunderbird that can be triggered by opening a malicious email or website , immediate patching required for enterprise clients.
The vulnerability requires social engineering (phishing for malicious links) for successful exploitation, which reduces attack risk for technically proficient organisations but still poses a threat to network infrastructure.
BSI warns of multiple privilege escalation vulnerabilities in Ubiquiti UniFi Network Application that enable account takeover and unauthorized privilege elevation.
The vulnerability allows attackers to abuse trusted Copilot summaries for phishing content, potentially tricking users into disclosing sensitive information.
The BSI alert on multiple RCE and privilege escalation vulnerabilities in Adobe Acrobat DC/Reader DC requires immediate patching action for all affected systems in the company.
Three critical vulnerabilities in UniFi OS are being actively exploited; Ubiquiti-based network access controls are at immediate risk.
Fox Tempest leverages compromised edge appliances (F5 firewalls) as durable enterprise footholds with limited visibility, combined with Confluence exploitation for lateral movement.
The vulnerability enables bypassing physical confirmation (User Presence) on FIDO/U2F security keys in SSH, allowing unattended authentication , critical for organizations using hardware keys to protect remote access.
OpenSSH-based remote access scenarios at Joel Traber AG may be affected by a vulnerability that bypasses key access restrictions and permits unrestricted use of forwarded keys on remote hosts.
BSI warns of multiple Linux kernel vulnerabilities causing DoS impact; specific CVE numbers and CVSS ratings are not provided in the advisory.
An authenticated remote exploitation in Synology DSM with information disclosure impact requires monitoring for available patches and access control enforcement.
BSI warns of multiple vulnerabilities in Chrome and Edge not yet publicly detailed; vendors are working on patches with details to follow.
Local code-execution vulnerability in Adobe Photoshop requiring user interaction (file opening); BSI warns of this flaw.
The BSI warns of multiple unspecified vulnerabilities in Microsoft Edge enabling information disclosure and manipulation; user interaction is required for exploitation.
No changes in this category.
No changes in this category.
Zero-Click-Anfälligkeit in Outlook ermöglicht Remote Code Execution allein durch E-Mail-Empfang ohne Benutzerinteraktion, besonders kritisch für Fertigungsunternehmen mit verteilter Belegschaft und Supply-Chain-Kommunikation.
Die Meldung bietet keine Informationen über aktive Angriffsgruppen, betroffene Sektoren oder spezifische Angriffsmuster , es ist ein Standard-Patch-Advisory ohne strategischen Mehrwert.
BSI-Warnung zu mehreren kritischen Schwachstellen in SAP mit RCE- und Privilege-Escalation-Potenzial erfordert sofortige Patch-Einspielen für Produktionsumgebungen.
Die Meldung beschreibt aktive Ausbeutung einer Exchange-Schwachstelle, ohne spezifische Opfersektoren oder TTPs zu nennen , Hersteller sollten prüfen, ob Exchange in der Umgebung läuft und Abwehrmaßnahmen verstärken.
Eine aktive Ausnutzung einer Zero-Day-Schwachstelle in Microsoft Exchange-Servern in freier Wildbahn erfordert sofortige Aufmerksamkeit und Mitigation, da die Ursache und betroffenen Organisationen noch nicht vollständig publiziert sind.
Heise-Meldung bestätigt aktive Ausnutzung einer Exchange-Zero-Day ohne Patch-Verfügbarkeit; relevant für DACH-Unternehmen da Exploit-Code in freier Wildbahn verfügbar ist und BSI/CISA koordinierte Warnung erwartet.
Die Meldung ist eine reine Patch-Erinnerung ohne Angabe zu aktiven Angriffsszenarien, Zero-Day-Exploits oder spezifischen Angriffsgruppen; regelmäßige Chrome-Updates sind Standard-Sicherheitspflege ohne strategische Bedrohungsimplikation.
TeamViewer DEX RCE erfordert bereits authentifizierten Zugriff; Priorität hängt von internen Zugriffskontrolle und Netzwerk-Segmentierung ab , sollte sofort mit TeamViewer-Updates gepatcht werden.
BSI-Warnung zu mehreren Windows-Schwachstellen unterstreicht Notwendigkeit zeitnaher Patch-Planung über WSUS für beide Server-Versionen und Client-Systeme.
BSI-Warnung zu Intel-Prozessor-Schwachstellen unterstreicht Notwendigkeit regelmäßiger Microcode-Updates auf allen Windows-Server und ESXi-Systemen in DACH-Umgebungen.
BSI warnt vor mehreren Schwachstellen in Chrome ohne spezifische CVE-Details , rasche Patch-Verfügbarkeit und Deployment erforderlich, da Browser flächendeckend in der Produktivumgebung eingesetzt wird.
BSI-Warnung zu Exchange XSS/Spoofing unterstreicht Risiko für deutsche Fertigungsunternehmen mit Microsoft-Infrastruktur; direkte Relevanz für Hybrid-Umgebungen mit lokalen Exchange-Servern oder veralteten Instanzen.
BSI-Warnung zu Microsoft Authenticator deutet auf eine Sicherheitslücke hin, die Informationsoffenlegung ermöglicht; Details zur Exploitierbarkeit und betroffenen Versionen sind notwendig für Patch-Prioritäten.