Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | 2026-08-29 | 2026-09-15 |
|---|---|---|
| ≥90 % | 4 | 0 |
| ≥50 % | 4 | 0 |
| ≥10 % | 3 | 0 |
| <10 % | 304 | 300 |
Cisco-FMC-Sicherheitslücke ermöglicht Root-Zugriff ohne Anmeldung
Eine aktiv ausgenutzte Schwachstelle in Cisco Secure Firewall Management Center ermöglicht Angreifern die Umgehung der Anmeldung und Root-Zugriff. Cisco hat Hot Fixes veröffentlicht, die eine bestehende Kompromittierung jedoch nicht beseit
Google Chrome 153 Update Fixes 42 Security Flaws, Including 3 Critical Ones
Google has released an important Chrome 153 security update that fixes 42 vulnerabilities across the browser, including three bugs rated Critical. The Stable channel is moving to 153.0.8010.47/.48 for Windows and macOS and 153.0.8010.47 for
Finding the Workflow Orchestrators: ZoomEye Exposure Data for Kestra After CVE-2026-49869
Finding the Workflow Orchestrators: ZoomEye Exposure Data for Kestra After CVE-2026-49869 CVE-2026-49869 is an authentication bypass in Kestra OSS that escalates to unauthenticated remote code execution, rated Critical at CVSS 3.1 10.0 and
CVE-2026-28572 | Google Android 16-qpr2 Tapjacking InstallLaunch.kt OnCreate privileges management
A vulnerability was found in Google Android 16-qpr2. It has been rated as problematic. This impacts the function OnCreate of the file InstallLaunch.kt of the component Tapjacking. The manipulation leads to improper privilege management. Thi
CVE-2026-0084 | Google Android 16/16-qpr2 HostEmulationManager HostEmulationManager.java privileges management
A vulnerability was found in Google Android 16/16-qpr2. It has been declared as very critical. This affects an unknown function of the file HostEmulationManager.java of the component HostEmulationManager. Executing a manipulation can lead t
CVE-2026-0065 | Google Android 14/15/16/16-qpr2 Background Launch Process Controller BackgroundLaunchProcessController.java areBackgroundActivityStartsAllowed privileges management
A vulnerability has been found in Google Android 14/15/16/16-qpr2 and classified as very critical. Impacted is the function areBackgroundActivityStartsAllowed of the file BackgroundLaunchProcessController.java of the component Background La
CVE-2026-0054 | Google Android 14/15/16/16-qpr2 WalletContextualLocationsService.kt isCallerAllowed permission
A vulnerability, which was classified as problematic, was found in Google Android 14/15/16/16-qpr2. This issue affects the function isCallerAllowed of the file WalletContextualLocationsService.kt. The manipulation results in permission issu
CVE-2026-75015 | Apache Syncope missing encryption (CNNVD-2026-93574773)
A vulnerability was found in Apache Syncope. It has been declared as problematic. The affected element is an unknown function. Executing a manipulation can lead to missing encryption of sensitive data. This vulnerability is handled as CVE-2
CVE-2022-44031 | Redmine up to 4.2.8/5.0.3 Textile Formatter cross site scripting (EUVD-2022-46993 / Nessus ID 257919)
A vulnerability identified as problematic has been detected in Redmine up to 4.2.8/5.0.3. The affected element is an unknown function of the component Textile Formatter. This manipulation causes cross site scripting. This vulnerability is t
CVE-2022-44030 | Redmine up to 5.0.3 permission (EUVD-2022-46992)
A vulnerability was found in Redmine up to 5.0.3. It has been rated as critical. This affects an unknown function. This manipulation causes permission issues. This vulnerability is tracked as CVE-2022-44030. The attack is only possible with
CVE-2022-44029 | NetScout nGeniusONE up to 6.3.2 P9 cross site scripting (EUVD-2022-46991)
A vulnerability identified as problematic has been detected in NetScout nGeniusONE up to 6.3.2 P9. This issue affects some unknown processing. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2022-4402
CVE-2022-44028 | NetScout nGeniusONE up to 6.3.2 P9 cross site scripting (EUVD-2022-46990)
A vulnerability was found in NetScout nGeniusONE up to 6.3.2 P9. It has been rated as problematic. This affects an unknown part. Performing a manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2022-44028. I
CVE-2026-92298 | EspoCRM up to 10.0.8 rand random values (EUVD-2026-80078)
A vulnerability classified as problematic has been found in EspoCRM up to 10.0.8. This affects the function rand. Performing a manipulation results in insufficiently random values. This vulnerability is cataloged as CVE-2026-92298. It is po
CVE-2026-92216 | a2ui-project a2ui up to 0.10.7 Binder generic-binder.ts openUrl redirect (Issue 2296 / EUVD-2026-80077)
A vulnerability classified as problematic was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file renderers/web_core/src/v0_9/rendering/generic-binder.ts of the component Binder. The manipulat
CVE-2026-92299 | Jitsi Electron SDK up to 10.0.4 Screen Sharing IPC Route getDesktopSources permission (EUVD-2026-80079)
A vulnerability classified as problematic was found in Jitsi Electron SDK up to 10.0.4. This impacts the function getDesktopSources of the component Screen Sharing IPC Route. Executing a manipulation can lead to permission issues. This vuln
CVE-2026-92220 | vllm-project vLLM 0.26.0/0.27.0 MoRIIO Acknowledgement moriio_connector.py request_id/kv_transfer_params resource consumption (ID 50674 / EUVD-2026-80081)
A vulnerability identified as problematic has been detected in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_finished/MoRIIOConnectorWorker.get_finished/MoRIIOWrapper._handle_release_message of t
CVE-2026-92217 | a2ui-project a2ui up to 0.10.6 Message Parsing message-processor.ts processMessages dynamically-determined object attributes (Issue 2297 / EUVD-2026-80080)
A vulnerability, which was classified as critical, has been found in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file renderers/web_core/src/v0_9/processing/message-processor.ts of the component Message
CVE-2026-92221 | gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8 app_global_admin_model.php generate_index_pasien cari sql injection (EUVD-2026-80082)
A vulnerability labeled as problematic has been found in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affected by this vulnerability is the function generate_index_pasien of the file application/models/app_
CVE-2026-73450 | Arista EOS up to 4.36.1F state issue (EUVD-2026-80083)
A vulnerability was found in Arista EOS up to 4.32.x/4.33.9M/4.34.7.1M/4.35.5M/4.36.1F and classified as critical. Impacted is an unknown function. Executing a manipulation can lead to state issue. This vulnerability appears as CVE-2026-734
CVE-2026-84961 | undici up to 7.29.0/8.10.1 BalancedPool BalancedPool constructor connect/tls certificate validation
A vulnerability marked as problematic has been reported in undici up to 7.29.0/8.10.1. Affected by this issue is the function BalancedPool constructor of the component BalancedPool. Performing a manipulation of the argument connect/tls resu
CVE-2026-85014 | undici up to 7.29.0/8.10.1 Socket Close denial of service
A vulnerability labeled as problematic has been found in undici up to 7.29.0/8.10.1. Affected by this vulnerability is an unknown functionality of the component Socket Close Handler. Such manipulation leads to denial of service. This vulner
CVE-2026-84947 | Node.js Undici up to 7.29.0/8.10.1 Dump Interceptor input validation (EUVD-2026-71517)
A vulnerability categorized as problematic has been discovered in Node.js Undici up to 7.29.0/8.10.1. The affected element is an unknown function of the component Dump Interceptor. Executing a manipulation can lead to improper input validat
CVE-2026-79418 | EMX Tecnologia Gestao X up to 8.4 Help Chat cross site scripting
A vulnerability was found in EMX Tecnologia Gestao X up to 8.4. It has been declared as problematic. This impacts an unknown function of the component Help Chat. The manipulation results in cross site scripting. This vulnerability is known
CVE-2026-84657 | Jenkins up to 2.567.x CLI permission
A vulnerability has been found in Jenkins up to 2.567.x and classified as problematic. Impacted is an unknown function of the component CLI. Performing a manipulation results in permission issues. This vulnerability is known as CVE-2026-846
CVE-2026-3416 | WSO2 API Manager/API Control Plane API Publisher random values
A vulnerability was found in WSO2 API Manager and API Control Plane. It has been rated as problematic. The impacted element is an unknown function of the component API Publisher. The manipulation leads to insufficiently random values. This
CVE-2026-84655 | Jenkins Project up to 2.567.x REST API injection
A vulnerability classified as very critical was found in Jenkins Project Jenkins up to 2.567.x. Affected is an unknown function of the component REST API. Executing a manipulation can lead to injection. This vulnerability appears as CVE-202
CVE-2026-84656 | Jenkins Project Jenkins Plugin up to 2.567.x permission
A vulnerability, which was classified as problematic, was found in Jenkins Project Jenkins Plugin up to 2.567.x. This issue affects some unknown processing. Such manipulation leads to permission issues. This vulnerability is traded as CVE-2
CVE-2024-44971 | Linux Kernel up to 6.10.4 bcm_sf2_mdio_register memory leak (Nessus ID 208425 / WID-SEC-2024-2057)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 5.10.223/5.15.164/6.1.104/6.6.45/6.10.4. The impacted element is the function bcm_sf2_mdio_register. Such manipulation leads to memory leak. This vulnerabilit
CVE-2024-44970 | Linux Kernel up to 6.1.104/6.6.45/6.10.4 mlx5_wq_ll_pop privilege escalation (Nessus ID 208425 / WID-SEC-2024-2057)
A vulnerability was found in Linux Kernel up to 6.1.104/6.6.45/6.10.4. It has been declared as problematic. This affects the function mlx5_wq_ll_pop. Such manipulation leads to privilege escalation. This vulnerability is listed as CVE-2024-
CVE-2024-44969 | Linux Kernel up to 6.10.4 buffer overflow (Nessus ID 208672 / WID-SEC-2024-2057)
A vulnerability was found in Linux Kernel up to 6.10.4. It has been rated as critical. The affected element is an unknown function. This manipulation causes buffer overflow. This vulnerability is registered as CVE-2024-44969. The attack req
CVE-2024-44967 | Linux Kernel up to 6.1.104/6.6.45/6.10.4 mgag200 devm_add_action_or_reset privilege escalation (Nessus ID 212724 / WID-SEC-2024-2057)
A vulnerability classified as problematic was found in Linux Kernel up to 6.1.104/6.6.45/6.10.4. This affects the function devm_add_action_or_reset of the component mgag200. Such manipulation leads to privilege escalation. This vulnerabilit
CVE-2024-44968 | Linux Kernel up to 6.1.104/6.6.45/6.10.4/6.11-rc1 smp_processor_id privilege escalation (Nessus ID 208953 / WID-SEC-2024-2057)
A vulnerability was found in Linux Kernel up to 6.1.104/6.6.45/6.10.4/6.11-rc1. It has been classified as problematic. The impacted element is the function smp_processor_id. This manipulation causes privilege escalation. This vulnerability
CVE-2024-44966 | Linux Kernel up to 5.15.164/6.1.105/6.6.46/6.10.5 binfmt_flat initialization (Nessus ID 209056 / WID-SEC-2024-2057)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.15.164/6.1.105/6.6.46/6.10.5. This issue affects some unknown processing of the component binfmt_flat. Executing a manipulation can lead to improper initia
CVE-2024-44965 | Linux Kernel up to 6.10.4 pti_clone_pgtable stack-based overflow (Nessus ID 208953 / WID-SEC-2024-2057)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.10.4. Affected by this issue is the function pti_clone_pgtable. The manipulation results in stack-based buffer overflow. This vulnerability is reported as CVE-2024-4
CVE-2026-18798 | OpenSSL up to 3.5.7/3.6.3/4.0.1 QUIC port_default_packet_handler double free (Nessus ID 345934 / WID-SEC-2026-3034)
A vulnerability was found in OpenSSL up to 3.5.7/3.6.3/4.0.1. It has been declared as critical. Affected by this issue is the function port_default_packet_handler of the component QUIC. Executing a manipulation can lead to double free. The
CVE-2026-82232 | Apache Syncope Task Search sort sql injection (CNNVD-2026-94660639)
A vulnerability, which was classified as critical, has been found in Apache Syncope. This issue affects some unknown processing of the component Task Search. This manipulation of the argument sort causes sql injection. This vulnerability is
CVE-2026-55416 | Pimcore prior 11.5.19/12.3.10/2026.1.6 CustomReportsBundle Sql.php buildQueryString sql/from/where/groupby sql injection (CNNVD-2026-96012029)
A vulnerability has been found in Pimcore and classified as problematic. Affected by this vulnerability is the function Pimcore\Bundle\CustomReportsBundle\Tool\Adapter\Sql::buildQueryString of the file bundles/CustomReportsBundle/src/Tool/A
CVE-2026-92008 | Mozilla Firefox up to 115.40/140.15/153.2/155 CanvasWebGL privileges management (Nessus ID 345908)
A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 115.40/140.15/153.2/155. This affects an unknown part of the component CanvasWebGL. The manipulation leads to improper privilege management. This vul
CVE-2026-92007 | Mozilla Firefox up to 115.40/140.15/153.2/155 CanvasWebGL privileges management (Nessus ID 345908)
A vulnerability classified as critical was found in Mozilla Firefox up to 115.40/140.15/153.2/155. Affected by this issue is some unknown functionality of the component CanvasWebGL. Executing a manipulation can lead to improper privilege ma
CVE-2026-92006 | Mozilla Firefox up to 115.40/140.15/153.2/155 CanvasWebGL privileges management (Nessus ID 345908)
A vulnerability classified as critical has been found in Mozilla Firefox up to 115.40/140.15/153.2/155. Affected by this vulnerability is an unknown functionality of the component CanvasWebGL. Performing a manipulation results in improper p
CVE-2026-92005 | Mozilla Firefox up to 140.15/153.2/155 Web Codecs use after free (Nessus ID 345908)
A vulnerability described as critical has been identified in Mozilla Firefox up to 140.15/153.2/155. This affects an unknown part of the component Web Codecs. Executing a manipulation can lead to use after free. The identification of this v
CVE-2026-92073 | Mozilla Firefox up to 153.2/155 Enterprise Policies privileges management (Nessus ID 345908)
A vulnerability was found in Mozilla Firefox up to 153.2/155. It has been rated as critical. This impacts an unknown function of the component Enterprise Policies. This manipulation causes improper privilege management. This vulnerability i
CVE-2022-44027 | NetScout nGeniusONE up to 6.3.2 P9 cross site scripting (EUVD-2022-46989)
A vulnerability categorized as problematic has been discovered in NetScout nGeniusONE up to 6.3.2 P9. This vulnerability affects unknown code. Executing a manipulation can lead to cross site scripting. This vulnerability is registered as CV
CVE-2022-44026 | NetScout nGeniusONE up to 6.3.2 P9 cross site scripting (EUVD-2022-46988)
A vulnerability was found in NetScout nGeniusONE up to 6.3.2 P9. It has been declared as problematic. Affected by this issue is some unknown functionality. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE
CVE-2022-44025 | NetScout nGeniusONE up to 6.3.2 P9 cross site scripting (EUVD-2022-46987)
A vulnerability was found in NetScout nGeniusONE up to 6.3.2 P9. It has been classified as problematic. Affected by this vulnerability is an unknown functionality. This manipulation causes cross site scripting. This vulnerability is tracked
CVE-2022-44024 | NetScout nGeniusONE up to 6.3.2 P9 cross site scripting (EUVD-2022-46986)
A vulnerability was found in NetScout nGeniusONE up to 6.3.2 P9 and classified as problematic. Affected is an unknown function. The manipulation results in cross site scripting. This vulnerability is identified as CVE-2022-44024. The attack
CVE-2026-91726 | Google Chrome up to 153.0.8010.36 WebGL out-of-bounds (EUVD-2026-79954)
A vulnerability categorized as critical has been discovered in Google Chrome. The affected element is an unknown function of the component WebGL. Such manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CV
CVE-2026-91717 | Google Chrome up to 153.0.8010.36 missing authentication (EUVD-2026-79971)
A vulnerability classified as problematic has been found in Google Chrome. This affects an unknown part. This manipulation causes missing authentication. This vulnerability is registered as CVE-2026-91717. The attack needs to be launched lo
CVE-2026-91735 | Google Chrome up to 153.0.8010.36 WebUI sandbox (EUVD-2026-79972)
A vulnerability classified as critical was found in Google Chrome. Affected by this issue is some unknown functionality of the component WebUI. Such manipulation leads to sandbox issue. This vulnerability is listed as CVE-2026-91735. The at
CVE-2026-91708 | Google Chrome up to 153.0.8010.36 Network race condition (EUVD-2026-79973)
A vulnerability, which was classified as problematic, was found in Google Chrome. Impacted is an unknown function of the component Network. Executing a manipulation can lead to race condition. This vulnerability appears as CVE-2026-91708. T
CVE-2026-91740 | Google Chrome up to 153.0.8010.36 Skia uninitialized resource (EUVD-2026-79975)
A vulnerability was found in Google Chrome. It has been declared as problematic. Impacted is an unknown function of the component Skia. Such manipulation leads to uninitialized resource. This vulnerability is documented as CVE-2026-91740. T
CVE-2026-91736 | Google Chrome up to 153.0.8010.36 DOM use after free (EUVD-2026-79974)
A vulnerability, which was classified as critical, was found in Google Chrome. This vulnerability affects unknown code of the component DOM. Executing a manipulation can lead to use after free. This vulnerability is registered as CVE-2026-9
CVE-2026-91746 | Google Chrome up to 153.0.8010.36 Compositing integer overflow (EUVD-2026-79979)
A vulnerability, which was classified as problematic, was found in Google Chrome. Affected by this issue is some unknown functionality of the component Compositing. Executing a manipulation can lead to integer overflow. This vulnerability i
CVE-2026-14199 | Grafana Enterprise/OSS up to 13.2.0 Auth Proxy privileges management (Nessus ID 342727 / WID-SEC-2026-3190)
A vulnerability classified as critical has been found in Grafana Enterprise and OSS up to 13.2.0. The impacted element is an unknown function of the component Auth Proxy. Performing a manipulation results in improper privilege management. T
CVE-2026-63020 | F5 BIG-IP prior 17.1.3.4/17.5.1.8/21.0.0.3/21.1.0.1 Configuration Utility Page clickjacking
A vulnerability was found in F5 BIG-IP and classified as problematic. This vulnerability affects unknown code of the component Configuration Utility Page. Such manipulation leads to clickjacking. This vulnerability is uniquely identified as
CVE-2026-73750 | HPE AOS-CX up to 10.18.0001 Authentication access control
A vulnerability, which was classified as very critical, has been found in HPE AOS-CX up to 10.10.1180/10.13.1180/10.16.1051/10.17.1021/10.18.0001. Impacted is an unknown function of the component Authentication Module. The manipulation lead
CVE-2026-52023 | Kamailio up to 6.1.1 ims_registrar_pcscf sec_agree.c parse_sec_agree denial of service (Nessus ID 342476)
A vulnerability labeled as problematic has been found in Kamailio up to 6.1.1. The impacted element is the function parse_sec_agree of the file sec_agree.c of the component ims_registrar_pcscf. Such manipulation leads to denial of service.
CVE-2026-61783 | Wazuh up to 4.14.6 RBAC ossec.conf mask_sensitive_config raw permission
A vulnerability, which was classified as problematic, has been found in Wazuh up to 4.14.6. This affects the function mask_sensitive_config of the file ossec.conf of the component RBAC. Performing a manipulation of the argument raw results
CVE-2026-75050 | JetBrains YouTrack allocation of resources
A vulnerability was found in JetBrains YouTrack and classified as critical. The impacted element is an unknown function. The manipulation results in allocation of resources. This vulnerability is reported as CVE-2026-75050. The attack can b
CVE-2026-44901 | Wazuh DAPI Protocol deserialization
A vulnerability, which was classified as very critical, has been found in Wazuh. Impacted is an unknown function of the component DAPI Protocol. This manipulation causes deserialization. This vulnerability is handled as CVE-2026-44901. The