CVE-2026-0054: Schwachstellen-Eintrag (NVD)
In isCallerAllowed of WalletContextualLocationsService.kt, there is a possible way to get wallet information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | 2026-08-29 | 2026-09-16 |
|---|---|---|
| ≥90 % | 4 | 0 |
| ≥50 % | 4 | 0 |
| ≥10 % | 3 | 0 |
| <10 % | 304 | 300 |
CVE-2026-91998 | Casdoor up to 4.4.0 /api/mcp authorization (CNNVD-2026-98861437)
A vulnerability identified as critical has been detected in Casdoor up to 4.4.0. The impacted element is an unknown function of the file /api/mcp. The manipulation leads to authorization bypass. This vulnerability is uniquely identified as
CVE-2026-91972 | go-vikunja Vikunja up to 2.5.x Rate Limiting excessive authentication (CNNVD-2026-99323983)
A vulnerability marked as problematic has been reported in go-vikunja Vikunja up to 2.5.x. The affected element is an unknown function of the component Rate Limiting. Performing a manipulation results in improper restriction of excessive au
CVE-2026-86465 | Apache Airflow Akeyless Provider privileges management (WID-SEC-2026-3385)
A vulnerability identified as critical has been detected in Apache Airflow. Affected by this vulnerability is an unknown functionality of the component Akeyless Provider. Performing a manipulation results in improper privilege management. T
CVE-2026-86462 | Apache Airflow FAB provider session fixiation (WID-SEC-2026-3385)
A vulnerability was found in Apache Airflow. It has been classified as critical. This issue affects some unknown processing of the component FAB provider. Performing a manipulation results in session fixiation. This vulnerability is identif
CVE-2026-86466 | Apache Airflow FAB Authentik provider data authenticity (WID-SEC-2026-3385)
A vulnerability classified as critical was found in Apache Airflow. Affected by this issue is some unknown functionality of the component FAB Authentik provider. Executing a manipulation can lead to insufficient verification of data authent
CVE-2026-82311 | Apache Airflow FAB Provider _user_id type confusion (WID-SEC-2026-3385)
A vulnerability categorized as critical has been discovered in Apache Airflow FAB Provider. Affected is an unknown function of the component FAB Provider. Such manipulation of the argument _user_id leads to type confusion. This vulnerabilit
CVE-2026-82310 | Apache Airflow FAB Auth Manager improper authentication (WID-SEC-2026-3385)
A vulnerability was found in Apache Airflow. It has been rated as critical. This impacts an unknown function of the component FAB Auth Manager. This manipulation causes improper authentication. This vulnerability is tracked as CVE-2026-8231
CVE-2026-86792 | Apache Airflow Connection Editor code injection (WID-SEC-2026-3385)
A vulnerability classified as critical has been found in Apache Airflow. Affected by this vulnerability is an unknown functionality of the component Connection Editor. Performing a manipulation results in code injection. This vulnerability
CVE-2026-76187 | Apache Airflow Keycloak Provider improper authentication (WID-SEC-2026-3385)
A vulnerability has been found in Apache Airflow and classified as critical. This affects an unknown part of the component Keycloak Provider. This manipulation causes improper authentication. The identification of this vulnerability is CVE-
CVE-2026-82720 | NLnet Labs Unbound up to 1.26.0 use after free (WID-SEC-2026-3392)
A vulnerability, which was classified as critical, was found in NLnet Labs Unbound up to 1.26.0. Affected by this issue is some unknown functionality. The manipulation results in use after free. This vulnerability is reported as CVE-2026-82
CVE-2026-76186 | Apache Airflow Keycloak Provider session fixiation (WID-SEC-2026-3385)
A vulnerability was found in Apache Airflow. It has been declared as critical. Impacted is an unknown function of the component Keycloak Provider. Executing a manipulation can lead to session fixiation. This vulnerability is tracked as CVE-
CVE-2026-85501 | NLnet Labs Unbound up to 1.26.0 DNSSEC Validation resource consumption (WID-SEC-2026-3392)
A vulnerability described as critical has been identified in NLnet Labs Unbound up to 1.26.0. This affects an unknown function of the component DNSSEC Validation. Such manipulation leads to resource consumption. This vulnerability is listed
CVE-2026-81642 | NLnet Labs Unbound up to 1.26.0 DNSSEC Validator buffer overflow (WID-SEC-2026-3392)
A vulnerability classified as very critical has been found in NLnet Labs Unbound up to 1.26.0. This impacts an unknown function of the component DNSSEC Validator. Performing a manipulation results in buffer overflow. This vulnerability is c
CVE-2026-82717 | NLnet Labs Unbound up to 1.26.0 heap-based overflow (WID-SEC-2026-3392)
A vulnerability marked as very critical has been reported in NLnet Labs Unbound up to 1.26.0. The impacted element is an unknown function. This manipulation causes heap-based buffer overflow. This vulnerability is tracked as CVE-2026-82717.
CVE-2026-81634 | NLnet Labs Unbound up to 1.26.0 RRSet Canonicalisation heap-based overflow (WID-SEC-2026-3392)
A vulnerability, which was classified as critical, has been found in NLnet Labs Unbound up to 1.26.0. Affected by this vulnerability is an unknown functionality of the component RRSet Canonicalisation. The manipulation leads to heap-based b
CVE-2026-80225 | NLnet Labs Unbound up to 1.26.0 TCP/DoT Reading Procedure resource consumption (WID-SEC-2026-3392)
A vulnerability classified as critical was found in NLnet Labs Unbound up to 1.26.0. Affected is an unknown function of the component TCP/DoT Reading Procedure. Executing a manipulation can lead to resource consumption. This vulnerability i
USN-8776-1: python-cryptography vulnerabilities
It was discovered that python-cryptography incorrectly accepted objects with immutable buffers when performing certain cipher operations. This would result in corrupted output, contrary to expectations. This issue only affected Ubuntu 18.04
CVE-2026-76104 | Dell ObjectScale 3.8.1.7/4.1.0.3/4.2.0.0/4.3.0.1 permission (EUVD-2026-80834)
A vulnerability categorized as problematic has been discovered in Dell ObjectScale 3.8.1.7/4.1.0.3/4.2.0.0/4.3.0.1. The affected element is an unknown function. Executing a manipulation can lead to permission issues. The identification of t
CVE-2026-18212 | Keycloak Saml Redirect Helper state issue (EUVD-2026-80828)
A vulnerability was found in Keycloak and classified as problematic. Affected by this issue is some unknown functionality of the component Saml Redirect Helper. Executing a manipulation can lead to state issue. The identification of this vu
CVE-2026-77411 | RabbitMQ amqp091-go up to 1.12.x AMQP Parser read.go readLongstr input validation (EUVD-2026-80821)
A vulnerability classified as problematic has been found in RabbitMQ amqp091-go up to 1.12.x. This affects the function readLongstr of the file read.go of the component AMQP Parser. This manipulation causes improper input validation. This v
CVE-2026-77406 | RabbitMQ amqp091-go up to 1.12.x QoS channel.go Channel.Qos prefetchCount/prefetchSize integer overflow (EUVD-2026-80808)
A vulnerability identified as problematic has been detected in RabbitMQ amqp091-go up to 1.12.x. Affected by this issue is the function Channel.Qos of the file channel.go of the component QoS. This manipulation of the argument prefetchCount
CVE-2026-92139 | Jenkins Project Bitbucket Push and Pull Request Plugin up to 4.0.1 Webhook input validation (EUVD-2026-80763)
A vulnerability classified as problematic was found in Jenkins Project Bitbucket Push and Pull Request Plugin up to 4.0.1. Affected by this vulnerability is an unknown functionality of the component Webhook Handler. Such manipulation leads
CVE-2026-18690 | MongoDB Server up to 7.0.39/8.0.28/8.3.7 improper authorization
A vulnerability, which was classified as critical, was found in MongoDB Server up to 7.0.39/8.0.28/8.3.7. This vulnerability affects unknown code. The manipulation results in improper authorization. This vulnerability is identified as CVE-2
CVE-2026-18688 | MongoDB up to 7.0.39/8.0.28/8.3.7 Aggregation Pipeline out-of-bounds
A vulnerability, which was classified as critical, has been found in MongoDB up to 7.0.39/8.0.28/8.3.7. This affects an unknown part of the component Aggregation Pipeline. The manipulation leads to out-of-bounds read. This vulnerability is
CVE-2026-18687 | MongoDB Server up to 8.0.28/8.3.7 Queryable Encryption integer underflow
A vulnerability labeled as problematic has been found in MongoDB Server up to 8.0.28/8.3.7. Impacted is an unknown function of the component Queryable Encryption. Executing a manipulation can lead to integer underflow. This vulnerability is
CVE-2025-67366 | sylphxltd filesystem-mcp 0.5.8 read_content resolvePath path traversal (Issue 134)
A vulnerability was found in sylphxltd filesystem-mcp 0.5.8. It has been rated as critical. This affects the function resolvePath of the component read_content. This manipulation causes path traversal. This vulnerability appears as CVE-2025
CVE-2026-78227 | NLnet Labs Unbound up to 1.26.1 DNS-over-QUIC use after free (WID-SEC-2026-3392)
A vulnerability was found in NLnet Labs Unbound up to 1.26.1. It has been classified as critical. This issue affects some unknown processing of the component DNS-over-QUIC. Performing a manipulation results in use after free. This vulnerabi
CVE-2026-77955 | NLnet Labs Unbound up to 1.26.0 ZONEMD Integrity Check toctou (WID-SEC-2026-3392)
A vulnerability was found in NLnet Labs Unbound up to 1.26.0 and classified as problematic. This vulnerability affects unknown code of the component ZONEMD Integrity Check. Such manipulation leads to time-of-check time-of-use. This vulnerab
CVE-2026-77860 | NLnet Labs Unbound up to 1.26.0 serve-expired resource consumption (WID-SEC-2026-3392)
A vulnerability was found in NLnet Labs Unbound up to 1.26.0. It has been declared as critical. This affects an unknown part of the component serve-expired. Such manipulation leads to resource consumption. This vulnerability is uniquely ide
CVE-2026-91819 | CIRCL MISP up to 2.5.45 Security _validatePost/_validateCsrf _method cross-site request forgery (CNNVD-2026-99528959)
A vulnerability, which was classified as problematic, has been found in CIRCL MISP up to 2.5.45. The affected element is the function _validatePost/_validateCsrf of the component Security Component. The manipulation of the argument _method
CVE-2026-73458 | Arista EOS up to 4.33.8M/4.34.7M/4.35.5M/4.36.1F Bidirectional Forwarding Detection resource consumption (CNNVD-2026-99454354)
A vulnerability, which was classified as critical, has been found in Arista EOS up to 4.33.8M/4.34.7M/4.35.5M/4.36.1F. Affected by this vulnerability is an unknown functionality of the component Bidirectional Forwarding Detection. The manip
CVE-2026-56942 | Google Android VP9 Hardware Decoder vp9hwd_headers.cc ReadTileInfo out-of-bounds write (CNNVD-2026-99553478)
A vulnerability classified as very critical has been found in Google Android. The affected element is the function ReadTileInfo of the file vp9hwd_headers.cc of the component VP9 Hardware Decoder. Performing a manipulation results in out-of
CVE-2022-44180 | Tenda AC18 15.03.05.19 addWifiMacFilter buffer overflow (EUVD-2022-47130)
A vulnerability marked as critical has been reported in Tenda AC18 15.03.05.19. This impacts the function addWifiMacFilter. Performing a manipulation results in buffer overflow. This vulnerability was named CVE-2022-44180. The attack needs
CVE-2022-44178 | Tenda AC18 15.03.05.19 formWifiWpsOOB buffer overflow (EUVD-2022-47128)
A vulnerability labeled as critical has been found in Tenda AC18 15.03.05.19. This affects the function formWifiWpsOOB. Such manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2022-44178. The attack can
CVE-2022-44177 | Tenda AC18 15.03.05.19 formWifiWpsStart buffer overflow (EUVD-2022-47127)
A vulnerability was found in Tenda AC18 15.03.05.19 and classified as critical. This affects the function formWifiWpsStart. Such manipulation leads to buffer overflow. This vulnerability is documented as CVE-2022-44177. The attack requires
CVE-2022-44176 | Tenda AC18 15.03.05.19 fromSetRouteStatic buffer overflow (EUVD-2022-47126)
A vulnerability has been found in Tenda AC18 15.03.05.19 and classified as critical. Affected by this issue is the function fromSetRouteStatic. This manipulation causes buffer overflow. This vulnerability is registered as CVE-2022-44176. Th
CVE-2022-44175 | Tenda AC18 15.03.05.19 formSetMacFilterCfg buffer overflow (EUVD-2022-47125)
A vulnerability, which was classified as critical, was found in Tenda AC18 15.03.05.19. Affected by this vulnerability is the function formSetMacFilterCfg. The manipulation results in buffer overflow. This vulnerability is cataloged as CVE-
CVE-2022-44174 | Tenda AC18 15.03.05.05 formSetDeviceName buffer overflow (EUVD-2022-47124)
A vulnerability, which was classified as critical, has been found in Tenda AC18 15.03.05.05. Affected is the function formSetDeviceName. The manipulation leads to buffer overflow. This vulnerability is listed as CVE-2022-44174. The attack m
CVE-2022-44172 | Tenda AC18 15.03.05.19 R7WebsSecurityHandler buffer overflow (EUVD-2022-47122)
A vulnerability classified as critical was found in Tenda AC18 15.03.05.19. This impacts the function R7WebsSecurityHandler. Executing a manipulation can lead to buffer overflow. This vulnerability is tracked as CVE-2022-44172. The attack i
CVE-2022-44171 | Tenda AC18 15.03.05.19 form_fast_setting_wifi_set buffer overflow (EUVD-2022-47121)
A vulnerability classified as critical has been found in Tenda AC18 15.03.05.19. This affects the function form_fast_setting_wifi_set. Performing a manipulation results in buffer overflow. This vulnerability is identified as CVE-2022-44171.
CVE-2022-44169 | Tenda AC15 15.03.05.18 formSetVirtualSer buffer overflow (EUVD-2022-47119)
A vulnerability classified as critical has been found in Tenda AC15 15.03.05.18. Impacted is the function formSetVirtualSer. This manipulation causes buffer overflow. This vulnerability is tracked as CVE-2022-44169. The attack is only possi
CVE-2026-85013 | environment-modules Bash completion module names os command injection (Nessus ID 346025)
A vulnerability labeled as problematic has been found in environment-modules. The impacted element is an unknown function of the component Bash completion. Such manipulation of the argument module names leads to os command injection. This v
CVE-2026-59251 | Erlang OTP Certificate Path Validation pubkey_policy_tree.erl allocation of resources (Nessus ID 346027)
A vulnerability identified as problematic has been detected in Erlang OTP. Affected by this issue is the function pubkey_policy_tree:add_leaves/2/pubkey_policy_tree:add_leaf_siblings/2 of the file lib/public_key/src/pubkey_policy_tree.erl o
CVE-2026-73584 | SBLIM sblim-sfcb File temp file (Nessus ID 346028)
A vulnerability classified as very critical has been found in SBLIM sblim-sfcb. This impacts an unknown function of the component File Handler. Performing a manipulation results in insecure temporary file. This vulnerability is cataloged as
CVE-2026-58227 | Erlang OTP prior 27.3.4.15/28.5.0.4/29.0.4 Certificate ssl_certificate:handle_incomplete_chain/5 resource consumption (Nessus ID 346027)
A vulnerability was found in Erlang OTP. It has been classified as problematic. This vulnerability affects the function ssl_certificate:handle_incomplete_chain/5 of the component Certificate. The manipulation leads to resource consumption.
CVE-2026-73583 | sblim-sfcb IPC deserialization (Nessus ID 346028)
A vulnerability described as very critical has been identified in sblim-sfcb. This affects an unknown function of the component IPC. Such manipulation leads to deserialization. This vulnerability is listed as CVE-2026-73583. The attack may
Acronis Discloses Actively Exploited Privilege Escalation Bug in Its cPanel Backup Plugin
Acronis has confirmed that attackers are actively exploiting a high-severity security flaw in its backup plugin for cPanel and WebHost Manager (WHM), urging system administrators to install available patches without delay. The vulnerabili
CVE-2026-0141 | Google Android RtcpAppPacket.cpp decodeAppPacket out-of-bounds
A vulnerability, which was classified as critical, has been found in Google Android. This vulnerability affects the function decodeAppPacket of the file RtcpAppPacket.cpp. This manipulation causes out-of-bounds read. This vulnerability is t
CVE-2026-0144 | Google Android AocAudioCodec.cpp denial of service
A vulnerability, which was classified as critical, was found in Google Android. The impacted element is an unknown function of the file AocAudioCodec.cpp. Executing a manipulation can lead to denial of service. This vulnerability is tracked
CVE-2026-0130 | Google Android decodeRtcpChunk heap-based overflow
A vulnerability identified as critical has been detected in Google Android. Impacted is the function RtcpChunk::decodeRtcpChunk. The manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identified as CVE-2026-013
CVE-2026-0134 | Google Android kernel Factory Reset recovery_ui.cpp information disclosure
A vulnerability has been found in Google Android kernel and classified as critical. This affects an unknown part of the file recovery_ui.cpp of the component Factory Reset Handler. This manipulation causes information disclosure. This vulne
CVE-2026-0158 | Google Android Camera permission
A vulnerability was found in Google Android. It has been classified as critical. This affects an unknown part of the component Camera. Performing a manipulation results in permission issues. This vulnerability is cataloged as CVE-2026-0158.
CVE-2026-0145 | Google Android keymint permission
A vulnerability has been found in Google Android and classified as critical. Affected by this vulnerability is an unknown functionality of the component keymint. This manipulation causes permission issues. This vulnerability is tracked as C
CVE-2026-0142 | Google Android avb_rsa.c iavb_parse_key_data out-of-bounds
A vulnerability, which was classified as critical, has been found in Google Android. This impacts the function iavb_parse_key_data of the file avb_rsa.c. The manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-
CVE-2026-0129 | Google Android decodeByePacket information disclosure
A vulnerability categorized as critical has been discovered in Google Android. This issue affects the function RtcpByePacket::decodeByePacket. Executing a manipulation can lead to information disclosure. This vulnerability is handled as CVE
CVE-2026-25550 | Seagull BarTender 2010/BarTender 2016/BarTender 2019 NET Remoting Service BtSystem.Service.exe WebClient missing authentication
A vulnerability, which was classified as critical, was found in Seagull BarTender 2010, BarTender 2016 and BarTender 2019. This affects the function WebClient of the file BtSystem.Service.exe of the component NET Remoting Service. The manip
CVE-2026-0136 | Google Android out-of-bounds
A vulnerability, which was classified as critical, has been found in Google Android. The affected element is an unknown function. Performing a manipulation results in out-of-bounds read. This vulnerability is identified as CVE-2026-0136. Th
CVE-2026-0157 | Google Android decodeRtcpHeader out-of-bounds
A vulnerability identified as critical has been detected in Google Android. Affected by this vulnerability is the function RtcpHeader::decodeRtcpHeader. Performing a manipulation results in out-of-bounds read. This vulnerability is known as
CVE-2026-0155 | Google Android ReadByteBuffer out-of-bounds
A vulnerability categorized as critical has been discovered in Google Android. Affected is the function ImsMediaBitReader::ReadByteBuffer. Such manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2026-0155. The att
CVE-2026-0140 | Google Android RtpPacket::decodePacket integer overflow
A vulnerability classified as critical was found in Google Android. This affects the function RtpPacket::decodePacket. The manipulation results in integer overflow. This vulnerability is identified as CVE-2026-0140. The attack can be execut