Security Advisories
Real-world vulnerabilities discovered and responsibly disclosed by turingpoint in widely used open-source and enterprise software.
Security Research
Published Advisories
turingpoint conducts active security research on widely used open-source and enterprise software. Many of these vulnerabilities surface directly during penetration tests for our clients. The following findings were identified by us, disclosed to the vendors through coordinated disclosure, and published as CVEs once a patch became available. Security research made in Germany.
Sort by:
Product
CVE
Vulnerability
CVSS
Advisory
- Argo CDCVE-2026-45738Stored XSS via the link.argocd.argoproj.io/* annotation7.3 · High
- ILIASCVE-2026-52351Blind SQL injection in the MyStaff lists via `_table_nav` (whitelist bypass)9.3 · Critical
- Chamilo LMSCVE-2026-45143Student-to-admin stored XSS in private messages via `v-html`9.0 · Critical
- Chamilo LMSCVE-2026-45144Pre-auth stored XSS on the public profile page `/user/{username}` via six unfiltered profile fields (`{% autoescape false %}`)8.9 · High
- TYPO3 CoreCVE-2026-47348Stored XSS in the Indexed Search core system extension via unescaped page titles (`f:format.raw`)5.1 · Medium
