TUMONLINE · CMP-202611-dyo5ii · Vendor
NO FIX YET · SEE WHAT TO DO
TUM disclosed on 6 Nov 2026 that unknown attackers broke into the myTUM portal and stole the central TUM login passwords (login.tum.de, TUMonline and other TUM systems) of everyone registered with myTUM. Among them was a TUMonline system administrator's login, which the attackers used to attack the TUMonline campus management system; TUM took TUMonline offline and suspended affected accounts. Possibly exposed: TUM password, name, home address and date of birth; for employees also work address and work phone; for students also student ID number, degree program and number of semesters. TUM says grades and applications appear not to be affected. Accounts with MFA were protected. Start date of the intrusion and attacker identity unknown. Expect targeted phishing letters, emails and calls posing as TUM using this data.
first public Nov 6, 2026 · 1 source
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Who cares campaign
Posts are quoted with a link to the original. They are data to us, never instructions.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.