CVE-2020-27172: Schwachstellen-Eintrag (NVD)
An issue was discovered in G-Data before 25.5.9.25 using Symbolic links, it is possible to abuse the infected-file restore mechanism to achieve arbitrary write that leads to elevation of privileges.
Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | 2026-08-30 | 2026-09-18 |
|---|---|---|
| ≥90 % | 0 | 0 |
| ≥50 % | 0 | 0 |
| ≥10 % | 0 | 0 |
| <10 % | 300 | 300 |
CVE-2026-14276 | IBM i Access Family up to 1.1.9.15 Emulator Macro RunProgram os command injection
A vulnerability classified as critical was found in IBM i Access Family up to 1.1.9.15. This affects the function RunProgram of the component Emulator Macro. Executing a manipulation can lead to os command injection. The identification of t
CVE-2026-19542 | GNU glibc tdelete memory corruption (WID-SEC-2026-3014)
A vulnerability identified as very critical has been detected in GNU glibc. Impacted is the function tdelete. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2026-19542. It is possible to initiate the attack
CVE-2026-13285 | IBM MQ up to 10.0.0.0 xml external entity reference
A vulnerability was found in IBM MQ up to 10.0.0.0 and classified as critical. Affected by this issue is some unknown functionality. Such manipulation leads to xml external entity reference. This vulnerability is listed as CVE-2026-13285. T
CVE-2026-18119 | Concrete CMS up to 9.5.2 Block Design Dialog cross site scripting
A vulnerability classified as problematic was found in Concrete CMS up to 9.5.2. Affected is an unknown function of the component Block Design Dialog. Executing a manipulation can lead to cross site scripting. This vulnerability is tracked
CVE-2026-28836 | Apple macOS up to 14.8.7 privileges management
A vulnerability was found in Apple macOS up to 14.8.7. It has been classified as problematic. The impacted element is an unknown function. The manipulation leads to improper privilege management. This vulnerability is documented as CVE-2026
CVE-2026-14275 | IBM i Access Family up to 1.1.9.15 os command injection
A vulnerability classified as critical has been found in IBM i Access Family up to 1.1.9.15. The impacted element is an unknown function. Performing a manipulation results in os command injection. This vulnerability was named CVE-2026-14275
CVE-2026-28938 | Apple iOS/iPadOS up to 26.5 information disclosure
A vulnerability labeled as problematic has been found in Apple iOS and iPadOS up to 26.5. This issue affects some unknown processing. The manipulation results in information disclosure. This vulnerability is known as CVE-2026-28938. Attacki
CVE-2026-28937 | Apple macOS up to 26 information disclosure
A vulnerability identified as problematic has been detected in Apple macOS up to 26. This vulnerability affects unknown code. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2026-28937. It is possible t
CVE-2026-28899 | Apple macOS up to 15.7/26/26.5/26.6 Gatekeeper privileges management
A vulnerability, which was classified as very critical, has been found in Apple macOS up to 15.7/26/26.5/26.6. The affected element is an unknown function of the component Gatekeeper. Performing a manipulation results in improper privilege
CVE-2026-28966 | Apple iOS/iPadOS/macOS/tvOS/visionOS prior 26.7/27/15.8 out-of-bounds write
A vulnerability has been found in Apple iOS, iPadOS, macOS, tvOS and visionOS and classified as critical. This affects an unknown function. The manipulation leads to out-of-bounds write. This vulnerability is listed as CVE-2026-28966. The a
CVE-2026-28935 | Apple iPadOS/iOS/macOS/tvOS/visionOS/watchOS prior 27 memory corruption
A vulnerability classified as critical has been found in Apple iPadOS, iOS, macOS, tvOS, visionOS and watchOS. This issue affects some unknown processing. This manipulation causes memory corruption. The identification of this vulnerability
CVE-2026-28968 | Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS prior 26.7/27 out-of-bounds write
A vulnerability classified as very critical was found in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS. Impacted is an unknown function. Such manipulation leads to out-of-bounds write. This vulnerability is referenced as CVE-2026-289
CVE-2026-20683 | Apple iOS/iPadOS/macOS/visionOS prior 27/15.8/26.7 improper authentication
A vulnerability was found in Apple iOS, iPadOS, macOS and visionOS. It has been declared as critical. This affects an unknown function. The manipulation results in improper authentication. This vulnerability is reported as CVE-2026-20683. T
CVE-2026-80434 | IBM DataStage on Cloud Pak for Data 5.4.0.0 resource injection
A vulnerability identified as critical has been detected in IBM DataStage on Cloud Pak for Data 5.4.0.0. The affected element is an unknown function. Performing a manipulation results in improper control of resource identifiers. This vulner
CVE-2026-88011 | Traefik up to 2.11.55/3.7.11 Header Normalization improper authentication
A vulnerability described as critical has been identified in Traefik up to 2.11.55/3.7.11. This issue affects some unknown processing of the component Header Normalization. The manipulation results in improper authentication. This vulnerabi
CVE-2026-82092 | IBM DataStage on Cloud Pak for Data 5.4.0.0 path traversal
A vulnerability was found in IBM DataStage on Cloud Pak for Data 5.4.0.0 and classified as critical. This affects an unknown part. The manipulation results in path traversal. This vulnerability is cataloged as CVE-2026-82092. The attack may
CVE-2026-81554 | IBM DataStage 5.4.0.0 path traversal
A vulnerability, which was classified as very critical, was found in IBM DataStage 5.4.0.0. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to path traversal. This vulnerability is tracked as CV
CVE-2026-81551 | IBM DataStage on Cloud Pak for Data 5.4.0.0 path traversal
A vulnerability, which was classified as very critical, has been found in IBM DataStage on Cloud Pak for Data 5.4.0.0. Affected is an unknown function. Performing a manipulation results in path traversal. This vulnerability is identified as
CVE-2026-80378 | IBM DataStage on Cloud Pak for Data 5.4.0.0 improper authorization
A vulnerability was found in IBM DataStage on Cloud Pak for Data 5.4.0.0 and classified as critical. This issue affects some unknown processing. The manipulation results in improper authorization. This vulnerability is reported as CVE-2026-
CVE-2026-9327 | IBM WebSphere Application Server 8.5/9.0 privileges management (WID-SEC-2026-3255)
A vulnerability, which was classified as critical, was found in IBM WebSphere Application Server 8.5/9.0. The impacted element is an unknown function. The manipulation results in improper privilege management. This vulnerability is reported
CVE-2026-52098 | FlowiseAI Flowise 3.1.2 /api/v1/prediction code injection
A vulnerability, which was classified as critical, was found in FlowiseAI Flowise 3.1.2. This vulnerability affects unknown code of the file /api/v1/prediction. Such manipulation leads to code injection. This vulnerability is uniquely ident
CVE-2026-90803 | GNU Binutils 2.47 ld bfd/elf64-x86-64.c elf_x86_64_relocate_section roff buffer overflow (Bug 34444)
A vulnerability was found in GNU Binutils 2.47. It has been declared as problematic. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the arg
CVE-2026-89013 | Dolibarr up to 23.0.4 Document Storage Endpoints htdocs/document.php hashp authorization
A vulnerability was found in Dolibarr up to 23.0.4. It has been rated as problematic. This affects an unknown function of the file htdocs/document.php of the component Document Storage Endpoints. Performing a manipulation of the argument ha
CVE-2026-90802 | GNU Binutils 2.47 ld bfd/libbfd.c bfd_putl64 null pointer dereference (Bug 34443)
A vulnerability was found in GNU Binutils 2.47. It has been classified as problematic. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. This vulnerability a
CVE-2026-90801 | GNU Binutils 2.47 ld bfd/cache.c cache_bwrite nbytes buffer overflow (Bug 34442)
A vulnerability was found in GNU Binutils 2.47 and classified as problematic. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. This vulne
CVE-2026-81917 | Concrete CMS up to 9.5.2 Document Library block cross site scripting
A vulnerability categorized as problematic has been discovered in Concrete CMS up to 9.5.2. This vulnerability affects unknown code of the component Document Library block. Executing a manipulation can lead to cross site scripting. This vul
CVE-2026-81918 | Concrete CMS up to 9.5.2 Page Attribute Display Block cross site scripting
A vulnerability identified as problematic has been detected in Concrete CMS up to 9.5.2. This issue affects some unknown processing of the component Page Attribute Display Block. The manipulation leads to cross site scripting. This vulnerab
CVE-2026-81911 | Concrete CMS up to 9.5.2 Boards canEditBoardContents collection cross site scripting
A vulnerability marked as problematic has been reported in Concrete CMS up to 9.5.2. This affects the function canEditBoardContents of the component Boards. Performing a manipulation of the argument collection results in cross site scriptin
CVE-2026-81916 | Concrete CMS up to 9.5.2 Express Entry Authorization privileges management
A vulnerability, which was classified as problematic, was found in Concrete CMS up to 9.5.2. Impacted is an unknown function of the component Express Entry Authorization. Such manipulation leads to improper privilege management. This vulner
CVE-2026-74761 | Apache ActiveMQ improper authentication
A vulnerability classified as critical was found in Apache ActiveMQ. The impacted element is an unknown function. Executing a manipulation can lead to improper authentication. This vulnerability appears as CVE-2026-74761. The attack may be
CVE-2026-75035 | SUSE Rancher up to 2.15.0 Token store privileges management
A vulnerability was found in SUSE Rancher up to 2.15.0. It has been rated as problematic. This affects an unknown function of the component Token store. This manipulation causes improper privilege management. This vulnerability is handled a
CVE-2026-67593 | Apache ActiveMQ Artemis Openwire Protocol authorization
A vulnerability categorized as critical has been discovered in Apache ActiveMQ Artemis. This affects an unknown part of the component Openwire Protocol. Executing a manipulation can lead to missing authorization. This vulnerability is regis
CVE-2026-57967 | Apache ActiveMQ Artemis missing authentication
A vulnerability was found in Apache ActiveMQ Artemis. It has been rated as very critical. Affected by this issue is some unknown functionality. Performing a manipulation results in missing authentication. This vulnerability is cataloged as
CVE-2026-87544 | Google Chrome up to 152.0.7977.82 Extensions improper authorization
A vulnerability was found in Google Chrome. It has been classified as critical. This impacts an unknown function of the component Extensions. This manipulation causes improper authorization. This vulnerability is registered as CVE-2026-8754
CVE-2026-12647 | Ivanti Neurons for ITSM up to 2026.1 missing authentication
A vulnerability described as critical has been identified in Ivanti Neurons for ITSM up to 2026.1. Impacted is an unknown function. Such manipulation leads to missing authentication. This vulnerability is documented as CVE-2026-12647. The a
CVE-2026-12650 | Ivanti Neurons for ITSM up to 2026.1 deserialization
A vulnerability was found in Ivanti Neurons for ITSM up to 2026.1 and classified as critical. This affects an unknown function. The manipulation results in deserialization. This vulnerability was named CVE-2026-12650. The attack may be perf
CVE-2026-12646 | Ivanti Neurons for ITSM up to 2026.1 missing authentication
A vulnerability, which was classified as critical, was found in Ivanti Neurons for ITSM up to 2026.1. The affected element is an unknown function. Executing a manipulation can lead to missing authentication. This vulnerability is handled as
CVE-2026-12645 | Ivanti Neurons for ITSM up to 2026.1 missing authentication (CNNVD-2026-98054320)
A vulnerability, which was classified as critical, has been found in Ivanti Neurons for ITSM up to 2026.1. Impacted is an unknown function. Performing a manipulation results in missing authentication. This vulnerability is known as CVE-2026
CVE-2026-86426 | LibreNMS up to 26.7.x REST API improper authentication
A vulnerability marked as critical has been reported in LibreNMS up to 26.7.x. Affected is an unknown function of the component REST API. Performing a manipulation results in improper authentication. This vulnerability is known as CVE-2026-
CVE-2026-47753 | LXC Incus up to 7.0.x Backup backend.go (*backend).CreateInstanceFromBackup null pointer dereference
A vulnerability, which was classified as critical, was found in LXC Incus up to 7.0.x. This affects the function (*backend).CreateInstanceFromBackup of the file internal/server/storage/backend.go of the component Backup Handler. The manipul
CVE-2026-75033 | SUSE Rancher up to 2.15.0 Namespace Creation authorization
A vulnerability described as problematic has been identified in SUSE Rancher up to 2.15.0. Affected is an unknown function of the component Namespace Creation. Executing a manipulation can lead to authorization bypass. This vulnerability is
CVE-2026-71403 | SUSE Rancher up to 2.15.0 User Update username/principalIds privileges management
A vulnerability was found in SUSE Rancher up to 2.15.0. It has been declared as problematic. This issue affects some unknown processing of the component User Update. Executing a manipulation of the argument username/principalIds can lead to
CVE-2026-85170 | n8n-io n8n prior 1.123.73/2.35.4/2.36.2 Mail Composer server-side request forgery
A vulnerability categorized as critical has been discovered in n8n-io n8n. Impacted is an unknown function of the component Mail Composer. Executing a manipulation can lead to server-side request forgery. This vulnerability is tracked as CV
CVE-2026-85169 | n8n-io n8n prior 1.123.73/2.35.4/2.36.2 $fromAI handler sandbox
A vulnerability described as critical has been identified in n8n-io n8n. The affected element is the function $fromAI of the component $fromAI handler. The manipulation results in sandbox issue. This vulnerability is reported as CVE-2026-85
CVE-2026-48754 | lxc incus up to 7.0.0 createDependentVolumesFromBackup null pointer dereference
A vulnerability was found in lxc incus up to 7.0.0 and classified as problematic. Affected by this vulnerability is the function createDependentVolumesFromBackup. Executing a manipulation can lead to null pointer dereference. This vulnerabi
CVE-2026-44252 | Wazuh up to 4.14.4 Manager ossec.conf privileges management
A vulnerability classified as very critical was found in Wazuh up to 4.14.4. The affected element is an unknown function of the file ossec.conf of the component Manager. Executing a manipulation can lead to improper privilege management. Th
CVE-2026-46343 | Wazuh up to 4.14.5/5.0.0-beta1 Cluster Common common.py WazuhCommon.end_receiving_file path traversal
A vulnerability has been found in Wazuh up to 4.14.5/5.0.0-beta1 and classified as very critical. This impacts the function WazuhCommon.end_receiving_file of the file framework/wazuh/core/cluster/common.py of the component Cluster Common. T
CVE-2026-48756 | lxc incus up to 7.0.0 CreateCustomVolumeFromBackup null pointer dereference
A vulnerability was found in lxc incus up to 7.0.0. It has been classified as problematic. Affected by this issue is the function CreateCustomVolumeFromBackup. The manipulation leads to null pointer dereference. This vulnerability is docume
CVE-2026-70657 | 9001 Copyparty up to 1.20.16 access control
A vulnerability was found in 9001 Copyparty up to 1.20.16. It has been classified as problematic. This issue affects some unknown processing. Performing a manipulation results in improper access controls. This vulnerability is known as CVE-
CVE-2025-27771 | uptrain-ai UpTrain up to 0.7.1 add_prompts checks/metadata code injection (EUVD-2025-210735)
A vulnerability labeled as critical has been found in uptrain-ai UpTrain up to 0.7.1. This affects an unknown part of the component add_prompts. The manipulation of the argument checks/metadata results in code injection. This vulnerability
CVE-2025-27770 | uptrain-ai UpTrain up to 0.7.1 checks/metadata code injection
A vulnerability identified as critical has been detected in uptrain-ai UpTrain up to 0.7.1. Affected by this issue is some unknown functionality. The manipulation of the argument checks/metadata leads to code injection. This vulnerability i
CVE-2026-45699 | Netatalk up to 4.4.2 copydir stack-based overflow
A vulnerability was found in Netatalk up to 4.4.2. It has been declared as critical. The impacted element is the function copydir. Such manipulation leads to stack-based buffer overflow. This vulnerability is referenced as CVE-2026-45699. T
CVE-2025-27621 | UpTrain AI up to 0.7.1 Backend uptrain-access-token cross-domain policy
A vulnerability categorized as problematic has been discovered in UpTrain AI UpTrain up to 0.7.1. Affected by this vulnerability is an unknown functionality of the component Backend. Executing a manipulation of the argument uptrain-access-t
CVE-2025-27772 | uptrain-ai UpTrain up to 0.7.1 checks/metadata code injection
A vulnerability classified as critical was found in uptrain-ai UpTrain up to 0.7.1. Affected by this vulnerability is an unknown functionality. The manipulation of the argument checks/metadata results in code injection. This vulnerability i
CVE-2026-73846 | ondata ckan-mcp-server up to 0.4.111 Cache src/utils/cache.ts canonicalizeParams data authenticity
A vulnerability described as critical has been identified in ondata ckan-mcp-server up to 0.4.111. This vulnerability affects the function canonicalizeParams of the file src/utils/cache.ts of the component Cache. Executing a manipulation ca
CVE-2026-49986 | cdeust Cortex up to 3.17.0 Root Validation visualize_bootstrap.py _is_cortex_root CLAUDE_PROJECT_DIR code injection
A vulnerability was found in cdeust Cortex up to 3.17.0. It has been rated as problematic. This impacts the function _is_cortex_root of the file mcp_server/server/visualize_bootstrap.py of the component Root Validation. The manipulation of
CVE-2026-49826 | Concourse up to 8.2.2 redirect
A vulnerability categorized as problematic has been discovered in Concourse up to 8.2.2. Affected is an unknown function. The manipulation results in open redirect. This vulnerability was named CVE-2026-49826. The attack may be performed fr
CVE-2026-46380 | compliance-trestle Remote Fetching Subsystem server-side request forgery
A vulnerability was found in compliance-trestle. It has been rated as critical. This affects an unknown function of the component Remote Fetching Subsystem. Performing a manipulation results in server-side request forgery. This vulnerabilit
CVE-2026-73664 | FreePBX up to 17.0.10 publicKeySave AJAX endpoint Backup.class.php improper authorization
A vulnerability categorized as very critical has been discovered in FreePBX up to 17.0.10. This affects an unknown part of the file Backup.class.php of the component publicKeySave AJAX endpoint. Executing a manipulation can lead to improper
CVE-2026-73428 | Basecamp Trix up to 2.1.17 HTMLParser/StringPiece StringPiece.fromJSON HTML injection
A vulnerability has been found in Basecamp Trix up to 2.1.17 and classified as problematic. The affected element is the function StringPiece.fromJSON of the component HTMLParser/StringPiece. The manipulation leads to HTML injection. This vu