Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 725 | 0,2 % |
| ≥50 % | 3.222 | 0,9 % |
| ≥10 % | 22.088 | 5,9 % |
| <10 % | 347.188 | 93,0 % |
Internet-Security - PHP-Sicherheitslücke: Landesseiten „down“ | krone.at
Internet-Security. PHP-Sicherheitslücke: Landesseiten „down“. Vorarlberg ... Und laut dem auf IT-Sicherheit spezialisierten US-Unternehmen ... Weiterlesen
CVE-2026-96655 on a small business network
CVE-2026-96655 on a small business network Small organisations run media servers more often than their IT documentation admits. A Plex Media Server on the office network that streams training material or plays music in a lobby is a normal d
CVE-2026-63887 | Linux Kernel up to 7.0.11 SCSI Target iSCSI iscsi_encode_text_output heap-based overflow (Nessus ID 334954)
A vulnerability classified as very critical has been found in Linux Kernel up to 7.0.11. This vulnerability affects the function iscsi_encode_text_output of the component SCSI Target iSCSI. Performing a manipulation results in heap-based bu
CVE-2026-63886 | Linux Kernel up to 7.0.11 Iscsi chap_server_compute_hash chap_r allocation of resources (Nessus ID 340744)
A vulnerability described as very critical has been identified in Linux Kernel up to 6.1.175/6.6.142/6.12.92/6.18.34/7.0.11. This affects the function chap_server_compute_hash of the component Iscsi. The manipulation of the argument chap_r
CVE-2026-63860 | Linux Kernel up to 7.0.9 RDMA Core nla_strcmp null termination
A vulnerability was found in Linux Kernel up to 7.0.9. It has been classified as very critical. Affected by this vulnerability is the function nla_strcmp of the component RDMA Core. This manipulation causes improper null termination. This v
CVE-2026-63850 | Linux Kernel up to 6.12.90/6.18.32/7.0.9 Vcn Encoder drm/amdgpu/vcn
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.90/6.18.32/7.0.9. The affected element is an unknown function of the file drm/amdgpu/vcn of the component Vcn Encoder. The manipulation results in an unknown w
CVE-2026-63849 | Linux Kernel up to 6.18.32/7.0.9 Vcn Encoder drm/amdgpu/vcn set_no_user_fence
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.18.32/7.0.9. Impacted is the function set_no_user_fence of the file drm/amdgpu/vcn of the component Vcn Encoder. The manipulation of the argument user_fence
CVE-2026-63848 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Drm Amdgpu Jpeg drm/amdgpu/jpeg Local Privilege Escalation
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9. This issue affects some unknown processing of the file drm/amdgpu/jpeg of the component Drm Amdgpu Jpeg. Executing a manip
CVE-2026-63846 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Drm Amdgpu Jpeg drm/amdgpu/jpeg
A vulnerability was found in Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9. It has been rated as problematic. This vulnerability affects unknown code of the file drm/amdgpu/jpeg of the component Drm Amdgpu Jpeg. Performing a manipulation
CVE-2026-63845 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 amdgpu/jpeg drm/amdgpu/jpeg
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9. This affects an unknown function of the file drm/amdgpu/jpeg of the component amdgpu/jpeg. Performing a manipulation r
CVE-2026-63844 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Amdgpu Jpeg drm/amdgpu/jpeg unusual condition
A vulnerability classified as very critical was found in Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9. The impacted element is an unknown function of the file drm/amdgpu/jpeg of the component Amdgpu Jpeg. Such manipulation leads to impr
CVE-2026-24401 | Avahi up to 0.9rc2 mDNS/DNS-SD lookup_handle_cname recursion (ID 501 / EUVD-2026-4603)
A vulnerability marked as problematic has been reported in Avahi up to 0.9rc2. Impacted is the function lookup_handle_cname of the component mDNS/DNS-SD. This manipulation causes uncontrolled recursion. This vulnerability is tracked as CVE-
CVE-2022-47717 | Last Yard 22.09.8-1 cross-domain policy (EUVD-2022-50476)
A vulnerability labeled as problematic has been found in Last Yard 22.09.8-1. Impacted is an unknown function. Such manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability is referenced as CVE-2022-47
CVE-2022-47715 | Last Yard 22.09.8-1 Cookie cleartext transmission (EUVD-2022-50474)
A vulnerability described as problematic has been identified in Last Yard 22.09.8-1. The impacted element is an unknown function of the component Cookie Handler. Executing a manipulation can lead to cleartext transmission of sensitive infor
CVE-2022-47714 | Last Yard 22.09.8-1 cleartext transmission (EUVD-2022-50473)
A vulnerability identified as problematic has been detected in Last Yard 22.09.8-1. This issue affects some unknown processing. This manipulation causes cleartext transmission of sensitive information. The identification of this vulnerabili
CVE-2022-47703 | TIANJIE CPE906-3 information disclosure (EUVD-2022-50462)
A vulnerability was found in TIANJIE CPE906-3. It has been classified as problematic. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in information disclosure. This vulnerability is identified
CVE-2026-18963 | Red Hat Build of Keycloak keycloak-services password recovery (EUVD-2026-61063 / EDB-52699)
A vulnerability labeled as critical has been found in Red Hat Build of Keycloak. Affected by this vulnerability is an unknown functionality of the component keycloak-services. The manipulation results in weak password recovery. This vulnera
CVE-2026-111384 | nezhahq Nezha up to 2.3.14 File Manager /api/v1/ws/file/:id SetReadLimit memory allocation (EUVD-2026-102565)
A vulnerability was found in nezhahq Nezha up to 2.3.14. It has been rated as problematic. This issue affects the function SetReadLimit of the file /api/v1/ws/file/:id of the component File Manager. Performing a manipulation of the argument
CVE-2026-111352 | ThinkCMF up to 8.0.1 RestAdminBaseController Auth::check improper authorization (EUVD-2026-102496)
A vulnerability was found in ThinkCMF up to 8.0.1 and classified as problematic. This vulnerability affects the function Auth::check of the component RestAdminBaseController. The manipulation results in improper authorization. This vulnerab
CVE-2026-111332 | AtalayaLabs OxiCloud up to 0.9.3 /api/files/{id} improper authorization (EUVD-2026-102486)
A vulnerability was found in AtalayaLabs OxiCloud up to 0.9.3. It has been declared as problematic. This affects an unknown part of the file /api/files/{id}. The manipulation results in improper authorization. This vulnerability is reported
CVE-2026-91399 | Oracle Primavera P6 Enterprise Project Portfolio Management Web Access improper authorization (EUVD-2026-106653)
A vulnerability was found in Oracle Primavera P6 Enterprise Project Portfolio Management. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Access. Such manipulation leads t
Popcorn Time updater flaw exposed millions of devices to hijacking
Eye Research delivered more than two million update downloads in an operation to disable an abandoned Popcorn Time updater that could have allowed attackers to hijack Windows and macOS systems with full privileges. The vulnerability, tracke
CVE-2022-47701 | Comfast CF-WR623N 2.3.0.1 cross site scripting (EUVD-2022-50460)
A vulnerability identified as problematic has been detected in Comfast CF-WR623N 2.3.0.1. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in cross site scripting. This vulnerability is cataloged
CVE-2022-47700 | Comfast CF-WR623N up to 2.3.0.1 improper authentication (EUVD-2022-50459)
A vulnerability, which was classified as critical, was found in Comfast CF-WR623N up to 2.3.0.1. This issue affects some unknown processing. Such manipulation leads to improper authentication. This vulnerability is uniquely identified as CV
CVE-2022-47699 | Comfast CF-WR623N 2.3.0.1 access control (EUVD-2022-50458)
A vulnerability was found in Comfast CF-WR623N 2.3.0.1. It has been declared as critical. This affects an unknown function. The manipulation results in improper access controls. This vulnerability is identified as CVE-2022-47699. The attack
CVE-2022-47698 | Comfast CF-WR623N 2.3.0.1 URL Filtering cross site scripting (EUVD-2022-50457)
A vulnerability was found in Comfast CF-WR623N 2.3.0.1. It has been classified as problematic. The impacted element is an unknown function of the component URL Filtering. The manipulation leads to cross site scripting. This vulnerability is
PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches
PHP warns of a new, unlikely code execution flaw, CVE-2026-115560, and advises disabling session upload progress until a fix is released. PHP has warned of a new code execution vulnerability, tracked as CVE-2026-115560, just two days after
IT-Experten warnen vor zukünftigen Angriffen nach Sicherheitslücke bei PHP - Tagesschau
... 23.10.2026 • 20:00 Uhr. schnell informiert · IT · Cyberkriminalität · Sicherheit · Facebook · WhatsApp; Teilen; Mail; Drucken. Zur Startseite. Service. Weiterlesen
Critical HPE Aruba AOS-8 Flaw Allows Hackers to Bypass SSH Authentication and Take Over Systems
Hewlett Packard Enterprise (HPE) has addressed a critical authentication-bypass vulnerability in the SSH daemon of its AOS-8 wireless operating system. This vulnerability, tracked as CVE-2026-79855, could let a remote, unauthenticated attac
CVE-2026-87911
Read this article This article has been indexed from Latest Bulletins Read the original article: CVE-2026-87911 The post CVE-2026-87911 appeared first on IT Security News. Weiterlesen
PHP2Shell: Exposure and Response with the CrowdStrike Falcon Platform
YouTube VideoPHP2Shell (CVE-2026-109618 and CVE-2026-109619) introduces two critical remote code execution vulnerabilities affecting PHP, making it important for security teams to identify affected systems, understand their exposure, and in
CVE-2026-79881 | HPE AOS-8 up to 8.10.0.23/8.13.3.0 improper authentication (WID-SEC-2026-4125)
A vulnerability has been found in HPE AOS-8 up to 8.10.0.23/8.13.3.0 and classified as critical. Affected by this issue is some unknown functionality. Performing a manipulation results in improper authentication. This vulnerability is repor
PHP-Sicherheitslücke: Nürnberger Schulen wieder am Netz - Bayerischer Rundfunk
Für manche Seitenbetreiber ist es ein Wettlauf mit der Zeit: Entweder sie nehmen ihre Seite vom Netz oder werden Opfer eines der zahlreichen Hacker- ... Weiterlesen
Did Ukraine's Drone Strikes Really Take Down Russian Bots? | Threat Wire
YouTube VideoDid Ukraine’s drone strikes on Russian data centers really knock bot traffic down by 90%—and what does that mean for online disinformation? This week on Hack5’s Threat Wire, Ali breaks down Cloudflare’s findings, revisits resea
CVE-2026-85788 – Issue with awslabs mysql-mcp-server
Read this article This article has been indexed from Latest Bulletins Read the original article: CVE-2026-85788 – Issue with awslabs mysql-mcp-server The post CVE-2026-85788 – Issue with awslabs mysql-mcp-server appeared first on IT Securit
CVE-2026-85787 – An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope
Read this article This article has been indexed from Latest Bulletins Read the original article: CVE-2026-85787 – An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data b
CVE-2026-87912 and CVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops and MCP Server
Read this article This article has been indexed from Latest Bulletins Read the original article: CVE-2026-87912 and CVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops and M
CVE-2026-65824 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.2.1, an attacker who captures a pending invite token can replay it to obtain a passkey-registration credential and register their own passkey on the invited account, taking control of that account. For a staff or tenant-admin invite this yields access to the tenant context tied to that account. This issue has been patched in version 2
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.2.1, an attacker who captures a pending invite token can replay it to obtain a passkey-registration credential an
CVE-2026-58202 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.0.0, the account-confirmation link in emails is built from the request Host header, with no allowlist. The unauthenticated POST /api/auth/resend-confirmation rotates a pending invitee's confirmation token and emails a link whose host comes from the request. An attacker who sends one resend-confirmation with Host: attacker.example and
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.0.0, the account-confirmation link in emails is built from the request Host header, with no allowlist. The unauth
CVE-2022-47697 | Comfast CF-WR623N up to 2.3.0.1 password recovery (EUVD-2022-50456)
A vulnerability, which was classified as critical, has been found in Comfast CF-WR623N up to 2.3.0.1. This vulnerability affects unknown code. This manipulation causes weak password recovery. This vulnerability is handled as CVE-2022-47697.
CVE-2022-47696 | GNU Binutils up to 2.39.2 compare_symbols denial of service (EUVD-2022-50455 / Nessus ID 234873)
A vulnerability was found in GNU Binutils up to 2.39.2. It has been declared as problematic. This impacts the function compare_symbols. Executing a manipulation can lead to denial of service. This vulnerability is handled as CVE-2022-47696.
CVE-2022-47695 | GNU Binutils up to 2.39.2 objdump match-o.c bfd_mach_o_get_synthetic_symtab privilege escalation (EUVD-2022-50454)
A vulnerability identified as critical has been detected in GNU Binutils up to 2.39.2. This affects the function bfd_mach_o_get_synthetic_symtab of the file match-o.c of the component objdump. The manipulation leads to privilege escalation.
CVE-2022-47673 | GNU Binutils up to 2.39.2 addr2line parse_module out-of-bounds (EUVD-2022-50432 / Nessus ID 234877)
A vulnerability categorized as problematic has been discovered in GNU Binutils up to 2.39.2. Affected by this issue is the function parse_module of the component addr2line. Executing a manipulation can lead to out-of-bounds read. This vulne
CVE-2022-47665 | Libde265 1.0.9 set_SliceAddrRS heap-based overflow (Issue 369 / EUVD-2022-50424)
A vulnerability was found in Libde265 1.0.9. It has been classified as critical. The affected element is the function de265_image::set_SliceAddrRS. This manipulation causes heap-based buffer overflow. This vulnerability appears as CVE-2022-
CVE-2026-83813 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but does not verify that the response came from the queried host and port. An attacker able to deliver a packet to the resolver's listening port with the correct transaction ID can inject a forged answer. The standard twisted.names
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but does
CVE-2026-79982 | The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/class/bt_hci.c, copies every controller-to-host HCI packet into a USB transfer buffer before enqueuing it on an endpoint. bt_hci_tx_sync_in() allocated that buffer from bt_hci_ep_pool, a fixed pool whose slots are only USBD_MAX_BULK_MPS bytes (64 on full-speed-only builds), and then performed net_buf_add_mem(buf, bt_buf->data, bt_buf->len) with no length check. HCI event
The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/class/bt_hci.c, copies every controller-to-host HCI packet into a USB transfer buffer before enqueuing it on an endpoint. bt_hci_tx_sync_in() allocate
CVE-2026-79981 | The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured server when the resolver context is initialised (dns_resolve_init_locked() -> register_dispatcher() -> dns_dispatcher_register()), with the local port left at 0 so the stack picks an ephemeral port exactly once. dns_write() then sends every subsequent query from that same socket without re-binding, so the source port is constant for the lifetime of the resolver context w
The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured server when the resolver context is initialised (dns_resolve_init_locked() -> register_dispatcher() -> dns_dispatcher_register()), with the local port
CVE-2026-79980 | The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier (iface->config.dhcpv4.xid) as a counter rather than as a per-transaction random value. It was seeded once with sys_rand32_get() in dhcpv4_start_internal(), incremented by one in dhcpv4_send_discover() and dhcpv4_send_decline(), and never changed by dhcpv4_send_request() — so every RENEWING and REBINDING exchange reused, unchanged, the identifier that had already appeared
The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier (iface->config.dhcpv4.xid) as a counter rather than as a per-transaction random value. It was seeded once with sys_rand32_get() in dhcpv4_start_intern
CVE-2026-79979 | The arm64 MMU backend invalidates a single virtual address from the TLB with invalidate_tlb_page() in arch/arm64/core/mmu.c, which issued TLBI VAE1{IS} with an operand of virt >> 12. That operand encodes the ASID in bits [63:48], so the invalidation only ever matched ASID 0 (the kernel page tables) and global entries. Memory domains, however, are allocated ASIDs starting at 1 in arch_mem_domain_init(), and every domain-private leaf created by private_map() is
The arm64 MMU backend invalidates a single virtual address from the TLB with invalidate_tlb_page() in arch/arm64/core/mmu.c, which issued TLBI VAE1{IS} with an operand of virt >> 12. That operand encodes the ASID in bits [63:48], so the inv
CVE-2026-79978 | The RTIO streaming completion callback adxl345_process_fifo_samples_cb() in drivers/sensor/adi/adxl345/adxl345_stream.c clamps the amount of FIFO data it will report (read_len = MIN(fifo_bytes, buf_avail)) to the space actually returned by rtio_sqe_rx_buf(), but then queues one 6-byte bus read per hardware FIFO entry at consecutive offsets from read_buf, bounded by the device-reported entry count rather than by the clamp. When the allocated buffer is smaller
The RTIO streaming completion callback adxl345_process_fifo_samples_cb() in drivers/sensor/adi/adxl345/adxl345_stream.c clamps the amount of FIFO data it will report (read_len = MIN(fifo_bytes, buf_avail)) to the space actually returned by
CVE-2026-79977 | The WireGuard VPN service in subsys/net/lib/wireguard/wg.c updated the peer endpoint from a message it could not authenticate. In handle_transport_data(), when the 32-bit receiver index of an incoming transport-data message matched no session, the code both scheduled a new handshake and copied the datagram's source address into peer->endpoint with memcpy(&peer->endpoint, peer_addr, sizeof(peer->endpoint)). Because the receiver index is unknown, there is no ke
The WireGuard VPN service in subsys/net/lib/wireguard/wg.c updated the peer endpoint from a message it could not authenticate. In handle_transport_data(), when the 32-bit receiver index of an incoming transport-data message matched no sessi
Oracle patches 1295 security vulnerabilities in October, including six scoring 10.0
Oracle has patched 1295 security vulnerabilities with its October Critical Patch Update Advisory; six of them scored the highest vulnerability rating of 10.0 on the CVSS version 3.1 scale. The company’s flagship Oracle E-Business Suite was
CVE-2026-19741 | Zephyr's OpenThread integration defined CONFIG_OPENTHREAD_JOINER_PSKD with default "J01NME" in modules/openthread/Kconfig.thread (previously subsys/net/l2/openthread/Kconfig, then subsys/net/l2/openthread/Kconfig.thread). J01NME is the example Joining Device Credential used throughout the public OpenThread and Thread commissioning documentation, including Zephyr's own samples/net/sockets/echo_client/README.rst, so it is not a secret. A firmware image built wi
Zephyr's OpenThread integration defined CONFIG_OPENTHREAD_JOINER_PSKD with default "J01NME" in modules/openthread/Kconfig.thread (previously subsys/net/l2/openthread/Kconfig, then subsys/net/l2/openthread/Kconfig.thread). J01NME is the exam
CVE-2025-68729 | Linux Kernel up to 6.17.12/6.18.1 wifi ath12k_hal_desc_reo_parse_err buffer overflow (Nessus ID 279834 / WID-SEC-2025-2920)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.17.12/6.18.1. Affected by this issue is the function ath12k_hal_desc_reo_parse_err of the component wifi. This manipulation causes buffer overflow. This vulnerabil
CVE-2025-68374 | Linux Kernel up to 6.12.62/6.17.12/6.18.1 md_wakeup_thread use after free (Nessus ID 279706 / WID-SEC-2025-2920)
A vulnerability described as critical has been identified in Linux Kernel up to 6.12.62/6.17.12/6.18.1. Affected is the function md_wakeup_thread. The manipulation results in use after free. This vulnerability was named CVE-2025-68374. The
CVE-2025-68368 | Linux Kernel up to 6.18.1 md_run null pointer dereference (Nessus ID 279769 / WID-SEC-2025-2920)
A vulnerability was found in Linux Kernel up to 6.18.1. It has been classified as critical. Impacted is the function md_run. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2025-68368. Access to the l
CVE-2025-68360 | Linux Kernel up to 6.17.12/6.18.1 wed_hif2 state issue (Nessus ID 279699 / WID-SEC-2025-2920)
A vulnerability classified as critical was found in Linux Kernel up to 6.17.12/6.18.1. This impacts the function wed_hif2. The manipulation results in state issue. This vulnerability is identified as CVE-2025-68360. The attack can only be p
CVE-2025-68359 | Linux Kernel up to 6.17.12/6.18.1 btrfs kfree double free (Nessus ID 279727 / WID-SEC-2025-2920)
A vulnerability was found in Linux Kernel up to 6.17.12/6.18.1. It has been declared as critical. This issue affects the function kfree of the component btrfs. The manipulation results in double free. This vulnerability is reported as CVE-2
CVE-2025-68356 | Linux Kernel up to 6.12.62/6.17.12/6.18.1 new_inode allocation of resources (Nessus ID 279734 / WID-SEC-2025-2920)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.12.62/6.17.12/6.18.1. This vulnerability affects the function new_inode. The manipulation leads to allocation of resources. This vulnerability is referenced as
CVE-2025-68353 | Linux Kernel up to 6.18.1 net vxlan_xmit_one null pointer dereference (Nessus ID 279713 / WID-SEC-2025-2920)
A vulnerability has been found in Linux Kernel up to 6.18.1 and classified as critical. Affected by this issue is the function vxlan_xmit_one of the component net. This manipulation causes null pointer dereference. This vulnerability is han