Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 786 | 0,2 % |
| ≥50 % | 3.572 | 0,9 % |
| ≥10 % | 23.059 | 5,7 % |
| <10 % | 380.694 | 93,3 % |
CVE-2026-109518 – APT package manager that affects Ubuntu and Debian operating systems
Bulletin ID: 2026-172-AWS Publication Date: 11/05/2026 20:00 PM PST Description: An issue in the APT package manager (CVE-2026-109518) affects Ubuntu and Debian operating systems. Under specific conditions, when APT is configured to use HTT
CVE-2026-83844: Microsoft Paint mit möglicher 0-Click-RCE für Windows
LONDON (IT BOLTWISE) – Für Windows-Administratoren wird es mit CVE-2026-83844 konkret: Eine Paint-Schwachstelle könnte laut Advisory Code über das Netzwerk ausführen, ohne dass Nutzer eingreifen müssen. Die Meldung ordnet den Fehler als „Hi
Node.js Security Releases: Patching Node2Shell (CVE-2026-111497) & High Risks
HOC Shorts | Node.js security issuing updates across active release channels (v22.x, v24.x, and v26.x), patching multiple vulnerabilities… This article has been indexed from Hackers Online Club Read the original article: Node.js Security Re
SonicWall Won’t Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
SonicWall has warned of two vulnerabilities impacting end-of-life Global Management System (GMS) systems that it said will not be patched. Details of the security flaws, which affect SonicWall GMS 9.5.2 and earlier versions, are below – CVE
CVE-2026-92543 | Docker/Moby Docker Engine Registry Hostname Validation loadInsecureRegistries certificate validation (WID-SEC-2026-3808)
A vulnerability marked as problematic has been reported in Docker/Moby Docker Engine. This issue affects the function loadInsecureRegistries of the component Registry Hostname Validation. This manipulation causes improper certificate valida
CVE-2026-97032 | Go http2 HPACK encoder race condition (ID 847188 / EUVD-2026-95429)
A vulnerability, which was classified as problematic, was found in Go http2. This vulnerability affects unknown code of the component HPACK encoder. The manipulation results in race condition. This vulnerability is cataloged as CVE-2026-970
CVE-2026-97030 | Go html/template up to 1.26.8/1.27.1 Template cross site scripting (EUVD-2026-95416 / WID-SEC-2026-3841)
A vulnerability marked as problematic has been reported in Go html and template up to 1.26.8/1.27.1. This impacts an unknown function of the component Template. This manipulation causes cross site scripting. The identification of this vulne
CVE-2026-94448 | Google html/template up to 1.26.8/1.27.1 Template Literal Expression cross site scripting (EUVD-2026-95415 / WID-SEC-2026-3841)
A vulnerability labeled as problematic has been found in Google html and template up to 1.26.8/1.27.1. This affects an unknown function of the component Template Literal Expression. The manipulation results in cross site scripting. This vul
CVE-2026-94447 | Google cmd/go up to 1.26.8/1.27.1 GOMODPROXY go.sum integrity check (EUVD-2026-95418 / WID-SEC-2026-3841)
A vulnerability was found in Google cmd and go up to 1.26.8/1.27.1. It has been classified as critical. This vulnerability affects unknown code of the file go.sum of the component GOMODPROXY Handler. This manipulation causes improper valida
CVE-2026-94444 | cmd go up to 1.26.8/1.27.1 GOMODPROXY integrity check (EUVD-2026-95417 / WID-SEC-2026-3841)
A vulnerability was found in cmd go up to 1.26.8/1.27.1. It has been declared as critical. This issue affects some unknown processing of the component GOMODPROXY Handler. Such manipulation leads to improper validation of integrity check val
CVE-2026-94439 | Google nethttp up to 1.26.8/1.27.1 HTTP Server request smuggling (EUVD-2026-95428 / WID-SEC-2026-3841)
A vulnerability was found in Google nethttp up to 1.26.8/1.27.1 and classified as problematic. This affects an unknown part of the component HTTP Server Handler. The manipulation results in http request smuggling. This vulnerability is repo
CVE-2026-78660 | Google Go net-http-internal-http2-x-net-http2 request smuggling (EUVD-2026-95425 / WID-SEC-2026-3841)
A vulnerability identified as problematic has been detected in Google Go. The impacted element is an unknown function of the component net-http-internal-http2-x-net-http2. The manipulation leads to http request smuggling. This vulnerability
CVE-2025-39724 | Linux Kernel up to 6.16.3 serial8250_do_startup buffer overflow (EUVD-2025-31503 / Nessus ID 261631)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.16.3. Affected is the function serial8250_do_startup. Executing a manipulation can lead to buffer overflow. This vulnerability appears as CVE-2025-39724. The attacke
CVE-2025-39721 | Linux Kernel up to 6.6.102/6.12.43/6.16.3 qat_4xxx use after free (Nessus ID 261633 / WID-SEC-2025-1988)
A vulnerability has been found in Linux Kernel up to 6.6.102/6.12.43/6.16.3 and classified as critical. The affected element is the function qat_4xxx. The manipulation leads to use after free. This vulnerability is referenced as CVE-2025-39
CVE-2025-39713 | Linux Kernel up to 6.16.3 media rain_interrupt race condition (EUVD-2025-31514 / Nessus ID 261613)
A vulnerability has been found in Linux Kernel up to 6.16.3 and classified as critical. Affected by this vulnerability is the function rain_interrupt of the component media. This manipulation causes race condition. This vulnerability is tra
CVE-2025-39701 | Linux Kernel up to 6.17-rc2 ACPI pfr_update privilege escalation (Nessus ID 261617 / WID-SEC-2025-1988)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.1.148/6.6.102/6.12.43/6.16.3/6.17-rc2. Affected is the function pfr_update of the component ACPI. Such manipulation leads to privilege escalation. This vuln
CVE-2016-2141 | JGroups up to 3.x Node Join access control (RHSA-2016:1328 / EUVD-2022-5146)
A vulnerability, which was classified as critical, was found in JGroups up to 3.x. The impacted element is an unknown function of the component Node Join Handler. The manipulation results in improper access controls. This vulnerability is c
CVE-2022-4096 | appsmith up to 1.8.1 server-side request forgery (EUVD-2022-51466)
A vulnerability classified as critical was found in appsmith up to 1.8.1. The affected element is an unknown function. Such manipulation leads to server-side request forgery. This vulnerability is listed as CVE-2022-4096. The attack may be
CVE-2022-4095 | Linux Kernel up to 5.19.1 rtl8712_cmd.c cmd_hdl_filter use after free (EUVD-2022-51465 / Nessus ID 236642)
A vulnerability was found in Linux Kernel up to 5.19.1 and classified as problematic. This impacts the function cmd_hdl_filter of the file drivers/staging/rtl8712/rtl8712_cmd.c. The manipulation results in use after free. This vulnerability
Linux Fragnesia (CVE-2026-46300) is in CISA KEV and being chained to root after web footholds: patch the kernel and reboot
Fragnesia is a local privilege-escalation bug in the Linux kernel's shared-frag handling on the ESP path (CVE-2026-46300). CISA added it to KEV on Oct 28. It is not a remote one-shot by itself, but Singapore's CSA and Palo Alto�
CVE-2025-39681 | Linux Kernel up to 6.17-rc2 resctrl_cpu_detect divide by zero (Nessus ID 261651 / WID-SEC-2025-1988)
A vulnerability was found in Linux Kernel up to 6.17-rc2. It has been classified as critical. Affected by this issue is the function resctrl_cpu_detect. This manipulation causes divide by zero. This vulnerability appears as CVE-2025-39681.
CVE-2025-39678 | Linux Kernel up to 6.16.3/6.17-rc2 metric_tbl_addr null pointer dereference (Nessus ID 261608 / WID-SEC-2025-1988)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.16.3/6.17-rc2. The impacted element is the function metric_tbl_addr. The manipulation results in null pointer dereference. This vulnerability is known as CV
CVE-2025-39676 | Linux Kernel up to 6.17-rc2 qla4xxx_get_ep_fwdb null pointer dereference (Nessus ID 261626 / WID-SEC-2025-1988)
A vulnerability was found in Linux Kernel up to 6.17-rc2. It has been rated as critical. The affected element is the function qla4xxx_get_ep_fwdb. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2025-
CVE-2025-38732 | Linux Kernel up to 6.17-rc2 netfilter include/linux/skbuff.h reference count (EUVD-2025-31557 / Nessus ID 261640)
A vulnerability was found in Linux Kernel up to 6.17-rc2. It has been rated as critical. This vulnerability affects unknown code in the library include/linux/skbuff.h of the component netfilter. Performing a manipulation results in improper
CVE-2025-38701 | Linux Kernel up to 6.16.1 ext4_update_inline_data assertion (Nessus ID 261549 / WID-SEC-2025-1976)
A vulnerability was found in Linux Kernel up to 6.16.1. It has been declared as critical. This affects the function ext4_update_inline_data. The manipulation results in reachable assertion. This vulnerability is identified as CVE-2025-38701
CVE-2025-38693 | Linux Kernel up to 6.16.1 media az6027_i2c_xfer null pointer dereference (EUVD-2025-26776 / Nessus ID 261570)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.16.1. Affected by this issue is the function az6027_i2c_xfer of the component media. This manipulation causes null pointer dereference. This vulnerability appears
CVE-2026-73585 | sblim-cmpi-base Provider Registration Scripts temp file (EUVD-2026-57827)
A vulnerability classified as very critical was found in sblim-cmpi-base. Affected is an unknown function of the component Provider Registration Scripts. Executing a manipulation can lead to insecure temporary file. This vulnerability is re
CVE-2026-85068 | Network UPS Tools nut prior 2.8.6 ippon_subdriver drivers/blazer_usb.c ippon_command uninitialized pointer (EUVD-2026-117878)
A vulnerability, which was classified as problematic, has been found in Network UPS Tools nut. Affected is the function ippon_command of the file drivers/blazer_usb.c of the component ippon_subdriver. The manipulation leads to uninitialized
CVE-2026-48752 | LXC Incus up to 7.1.x path traversal (EUVD-2026-63979)
A vulnerability was found in LXC Incus up to 7.1.x. It has been declared as very critical. Affected by this issue is some unknown functionality. Executing a manipulation can lead to path traversal. This vulnerability is registered as CVE-20
CVE-2026-48749 | LXC Incus up to 7.1.x access control (EUVD-2026-63976)
A vulnerability has been found in LXC Incus up to 7.1.x and classified as very critical. This impacts an unknown function. This manipulation causes improper access controls. This vulnerability is tracked as CVE-2026-48749. The attack is pos
CVE-2026-123268 | libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc Extent Data File libvmdk_extent_table.c libvmdk_extent_table_get_extent_data_file_path memory corruption (Issue 39 / EUVD-2026-117879)
A vulnerability identified as problematic has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. Affected is the function libvmdk_extent_table_get_extent_data_file_path of the file libvmdk/libvmdk_extent_table.c
CVE-2025-38691 | Linux Kernel up to 6.16.1 ext_tree_prepare_commit uninitialized pointer (EUVD-2025-26778 / Nessus ID 261584)
A vulnerability has been found in Linux Kernel up to 6.16.1 and classified as critical. The impacted element is the function ext_tree_prepare_commit. This manipulation causes uninitialized pointer. The identification of this vulnerability i
CVE-2025-37792 | Linux Kernel up to 6.15-rc2 Bluetooth btrtl.c btrtl_initialize null pointer dereference (Nessus ID 237255 / WID-SEC-2025-0922)
A vulnerability was found in Linux Kernel up to 6.1.134/6.6.87/6.12.24/6.14.3/6.15-rc2. It has been rated as critical. The affected element is the function btrtl_initialize of the file drivers/bluetooth/btrtl.c of the component Bluetooth. P
CVE-2025-23138 | Linux Kernel up to 6.14.1 watch_queue_set_size buffer overflow (Nessus ID 234884 / WID-SEC-2025-0844)
A vulnerability was found in Linux Kernel up to 6.14.1 and classified as critical. The affected element is the function watch_queue_set_size. The manipulation results in buffer overflow. This vulnerability is known as CVE-2025-23138. Access
CVE-2025-22128 | Linux Kernel up to 6.14.1 kernel/irq/manage.c ath12k_pci_free_irq allocation of resources (Nessus ID 240657 / WID-SEC-2025-0844)
A vulnerability described as problematic has been identified in Linux Kernel up to 6.14.1. This affects the function ath12k_pci_free_irq of the file kernel/irq/manage.c. The manipulation results in allocation of resources. This vulnerabilit
CVE-2025-22125 | Linux Kernel up to 6.14.1 privilege escalation (Nessus ID 240657 / WID-SEC-2025-0844)
A vulnerability was found in Linux Kernel up to 6.14.1 and classified as problematic. This affects an unknown function. The manipulation results in privilege escalation. This vulnerability was named CVE-2025-22125. The attack needs to be ap
CVE-2025-22106 | Linux Kernel up to 6.14.1 net/core/xdp.c vmxnet3_reset_work privilege escalation (Nessus ID 240657 / WID-SEC-2025-0844)
A vulnerability was found in Linux Kernel up to 6.14.1. It has been declared as problematic. Impacted is the function vmxnet3_reset_work of the file net/core/xdp.c. The manipulation results in privilege escalation. This vulnerability was na
CVE-2026-93325 | Docker Filesystem protection mechanism (Nessus ID 376214)
A vulnerability identified as very critical has been detected in Docker. Affected by this vulnerability is an unknown functionality of the component Filesystem. This manipulation causes protection mechanism failure. This vulnerability appea
CVE-2026-121953 | FreeRDP up to 3.32.1 rdpgfx dynamic virtual channel rdpgfx_on_close use after free (Nessus ID 376213)
A vulnerability categorized as critical has been discovered in FreeRDP. Affected by this issue is the function rdpgfx_on_close of the component rdpgfx dynamic virtual channel. The manipulation results in use after free. This vulnerability i
CVE-2026-121954 | FreeRDP up to 3.32.1 Planar Codec freerdp_bitmap_planar_context_reset out-of-bounds write (Nessus ID 376215)
A vulnerability labeled as problematic has been found in FreeRDP up to 3.32.1. Affected by this vulnerability is the function freerdp_bitmap_planar_context_reset of the component Planar Codec. The manipulation results in out-of-bounds write
CVE-2026-121963 | FreeRDP up to 3.32.1 rdpsnd channel rdpsnd_virtual_channel_write use after free (Nessus ID 376216)
A vulnerability classified as problematic was found in FreeRDP up to 3.32.1. The impacted element is the function rdpsnd_virtual_channel_write of the component rdpsnd channel. The manipulation results in use after free. This vulnerability i
CVE-2025-21632 | Linux Kernel up to 6.6.71/6.12.9/6.13-rc6 fpu buffer overflow (Nessus ID 214901 / WID-SEC-2025-0119)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.71/6.12.9/6.13-rc6. This issue affects some unknown processing of the component fpu. The manipulation results in buffer overflow. This vulnerability is k
CVE-2024-56636 | Linux Kernel up to 6.12.4 include/linux/skbuff.h geneve_xmit_skb privilege escalation (Nessus ID 214901 / WID-SEC-2024-3762)
A vulnerability classified as problematic was found in Linux Kernel up to 5.10.230/5.15.173/6.1.119/6.6.65/6.12.4. Impacted is the function geneve_xmit_skb in the library include/linux/skbuff.h. Executing a manipulation can lead to privileg
CVE-2024-56594 | Linux Kernel up to 6.12.4 AMD GPU debug_dma_map_sg memory corruption (Nessus ID 216224 / WID-SEC-2024-3762)
A vulnerability has been found in Linux Kernel up to 6.12.4 and classified as critical. This issue affects the function debug_dma_map_sg of the component AMD GPU. This manipulation causes memory corruption. The identification of this vulner
CVE-2024-56372 | Linux Kernel up to 6.6.67/6.12.6 net/core/skbuff.c tun_napi_alloc_frags denial of service (Nessus ID 214901 / WID-SEC-2025-0047)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.67/6.12.6. The affected element is the function tun_napi_alloc_frags of the file net/core/skbuff.c. The manipulation leads to denial of service. This vulnera
CVE-2024-55881 | Linux Kernel up to 5.15.175/6.1.121/6.6.67/6.12.6 Hypercall Page arch/x86/kvm/x86.h complete_hypercall_exit state issue (Nessus ID 214901 / WID-SEC-2025-0047)
A vulnerability marked as problematic has been reported in Linux Kernel up to 5.15.175/6.1.121/6.6.67/6.12.6. This affects the function complete_hypercall_exit in the library arch/x86/kvm/x86.h of the component Hypercall Page Handler. This
CVE-2024-50251 | Linux Kernel up to 6.11.6 netfilter skb_checksum privilege escalation (Nessus ID 211777 / WID-SEC-2024-3397)
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.11.6. Impacted is the function skb_checksum of the component netfilter. Such manipulation leads to privilege escalation. This vulnerability is documented as CVE-2
CVE-2024-50146 | Linux Kernel up to 6.11.5 mlx5e_netdev_change_profile null pointer dereference (3955b77494c3/4dbc1d1a9f39 / Nessus ID 213014)
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.11.5. Affected by this issue is the function mlx5e_netdev_change_profile. Performing a manipulation results in null pointer dereference. This vulnerability
CVE-2024-50138 | Linux Kernel up to 6.1.114/6.11.5 bpf spinlock_rt.c in_atomic stack-based overflow (5eb34999d118/ca30e682e5d6/8b62645b09f8 / Nessus ID 213018)
A vulnerability classified as critical has been found in Linux Kernel up to 6.1.114/6.11.5. This affects the function in_atomic of the file kernel/locking/spinlock_rt.c of the component bpf. This manipulation causes stack-based buffer overf
CVE-2024-50134 | Linux Kernel up to 5.15.169/6.1.114/6.6.58/6.11.5 vboxvideo vbva_mouse_pointer_shape allocation of resources (Nessus ID 212830 / WID-SEC-2024-3339)
A vulnerability described as problematic has been identified in Linux Kernel up to 5.15.169/6.1.114/6.6.58/6.11.5. This issue affects the function vbva_mouse_pointer_shape of the component vboxvideo. Such manipulation leads to allocation of
CVE-2026-88980 | Kubeflow Pipelines up to 2.17.x Frontend /artifacts/get improper authorization (EUVD-2026-117828)
A vulnerability, which was classified as problematic, has been found in Kubeflow Pipelines up to 2.17.x. The impacted element is an unknown function of the file /artifacts/get of the component Frontend. Performing a manipulation results in
CVE-2026-59843 | Red Hat Enterprise Linux/Hardened Images libssh infinite loop (EUVD-2026-46177 / Nessus ID 330077)
A vulnerability categorized as problematic has been discovered in Red Hat Enterprise Linux and Hardened Images. Impacted is an unknown function of the component libssh. Executing a manipulation can lead to infinite loop. This vulnerability
CVE-2026-88982 | Kubeflow Pipelines up to 2.17.x Webhook information disclosure (EUVD-2026-117831)
A vulnerability classified as problematic was found in Kubeflow Pipelines up to 2.17.x. The affected element is an unknown function of the component Webhook. Such manipulation leads to information disclosure. This vulnerability is reference
CVE-2026-88981 | Kubeflow Pipelines up to 2.17.x Frontend Artifact Download improper authorization (EUVD-2026-117829)
A vulnerability has been found in Kubeflow Pipelines up to 2.17.x and classified as problematic. This impacts an unknown function of the component Frontend Artifact Download. The manipulation leads to improper authorization. This vulnerabil
CVE-2026-77596 | Kubeflow Pipelines up to 2.17.x HTTP Endpoint upload canUploadVersionedPipeline privileges management (EUVD-2026-117830)
A vulnerability was found in Kubeflow Pipelines up to 2.17.x. It has been rated as critical. This affects the function canUploadVersionedPipeline of the file /apis/v2beta1/pipelines/upload of the component HTTP Endpoint. Performing a manipu
CVE-2026-92695 | pavel-odintsov FastNetMon up to 1.2.9 Pcap Parser pcap_collector.cpp parse_packet caplen out-of-bounds (EUVD-2026-117833)
A vulnerability, which was classified as critical, was found in pavel-odintsov FastNetMon up to 1.2.9. This affects the function parse_packet of the file src/pcap_plugin/pcap_collector.cpp of the component Pcap Parser. Executing a manipulat
CVE-2026-92694 | pavel-odintsov FastNetMon up to 1.2.9 IPv6 Top-Talkers Screen-Draw Thread src/fastnetmon_logic.cpp draw_table_ipv6 race condition (EUVD-2026-117832)
A vulnerability was found in pavel-odintsov FastNetMon up to 1.2.9. It has been declared as critical. Affected by this issue is the function draw_table_ipv6 of the file src/fastnetmon_logic.cpp of the component IPv6 Top-Talkers Screen-Draw
CVE-2026-121956 | FreeRDP up to 3.32.1 WinPR Kerberos SSPI retrieveSomeTgt double free (Nessus ID 376217)
A vulnerability classified as problematic has been found in FreeRDP up to 3.32.1. This vulnerability affects the function retrieveSomeTgt of the component WinPR Kerberos SSPI. Performing a manipulation results in double free. This vulnerabi
CVE-2026-122032 | SPIP up to 4.4.28 Request Sanitization spip_sanitize_from_request where sql injection (Nessus ID 376218)
A vulnerability, which was classified as problematic, was found in SPIP up to 4.4.28. This vulnerability affects the function spip_sanitize_from_request of the component Request Sanitization. Executing a manipulation of the argument where c
CVE-2026-121960 | FreeRDP up to 3.32.1 Shadow Server input validation (Nessus ID 376219)
A vulnerability marked as critical has been reported in FreeRDP up to 3.32.1. Affected by this issue is some unknown functionality of the component Shadow Server. This manipulation causes improper input validation. This vulnerability appear