Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 743 | 0,2 % |
| ≥50 % | 3.224 | 0,8 % |
| ≥10 % | 22.068 | 5,8 % |
| <10 % | 354.694 | 93,2 % |
CVE-2025-40137 | Linux Kernel up to 6.6.111/6.12.52/6.17.2 fs/inode.c f2fs_truncate infinite loop (Nessus ID 298897 / WID-SEC-2025-2579)
A vulnerability classified as critical has been found in Linux Kernel up to 6.6.111/6.12.52/6.17.2. The impacted element is the function f2fs_truncate of the file fs/inode.c. Performing a manipulation results in infinite loop. This vulnerab
CVE-2025-40135 | Linux Kernel up to 6.17.2 ipv6 ip6_xmit use after free (Nessus ID 279677 / WID-SEC-2025-2579)
A vulnerability was found in Linux Kernel up to 6.17.2 and classified as critical. This issue affects the function ip6_xmit of the component ipv6. Executing a manipulation can lead to use after free. This vulnerability is tracked as CVE-202
CVE-2025-40077 | Linux Kernel up to 6.17.2 f2fs pgoff_t buffer overflow (Nessus ID 271880 / WID-SEC-2025-2431)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.17.2. This issue affects the function pgoff_t of the component f2fs. The manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-20
CVE-2025-40071 | Linux Kernel up to 6.6.111/6.12.52/6.17.2 gsm_queue privilege escalation (Nessus ID 271865 / WID-SEC-2025-2431)
A vulnerability was found in Linux Kernel up to 6.6.111/6.12.52/6.17.2. It has been rated as critical. Affected by this vulnerability is the function gsm_queue. This manipulation causes privilege escalation. This vulnerability appears as CV
CVE-2025-40067 | Linux Kernel up to 6.6.111/6.12.52/6.17.2 ntfs3 rename BITMAP allocation of resources (Nessus ID 271904 / WID-SEC-2025-2431)
A vulnerability was found in Linux Kernel up to 6.6.111/6.12.52/6.17.2. It has been declared as critical. Affected is the function rename of the component ntfs3. The manipulation of the argument BITMAP results in allocation of resources. Th
CVE-2025-39952 | Linux Kernel up to 6.6.107/6.12.48/6.16.8 wifi wlan_cfg.c wilc_wlan_parse_response_frame len buffer overflow (Nessus ID 302764 / WID-SEC-2025-2194)
A vulnerability classified as critical was found in Linux Kernel up to 6.6.107/6.12.48/6.16.8. Affected is the function wilc_wlan_parse_response_frame of the file drivers/net/wireless/microchip/wilc1000/wlan_cfg.c of the component wifi. Exe
CVE-2025-39886 | Linux Kernel up to 6.6.106/6.12.47/6.16.7/6.17-rc5 BPF Call bpf_timer_init stack-based overflow (Nessus ID 265877 / WID-SEC-2025-2107)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.106/6.12.47/6.16.7/6.17-rc5. The impacted element is the function bpf_timer_init of the component BPF Call Handler. The manipulation leads to stack-based buf
CVE-2025-39797 | Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1 xfrm_alloc_spi iteration (Nessus ID 264708 / WID-SEC-2025-2051)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1. This issue affects the function xfrm_alloc_spi. The manipulation leads to excessive iteration. This vulnerability is traded as CVE-20
CVE-2023-53447 | Linux Kernel up to 6.4.4 f2fs f2fs_remount race condition (Nessus ID 265503 / WID-SEC-2025-2092)
A vulnerability was found in Linux Kernel up to 6.4.4 and classified as critical. This issue affects the function f2fs_remount of the component f2fs. Such manipulation leads to race condition. This vulnerability is traded as CVE-2023-53447.
CVE-2023-53394 | Linux Kernel up to 6.4.9 mlx5e flush denial of service (Nessus ID 265572 / WID-SEC-2025-2092)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.4.9. Affected by this vulnerability is the function flush of the component mlx5e. Performing a manipulation results in denial of service. This vulnera
CVE-2023-53261 | Linux Kernel up to 6.5.2 coresight acpi_get_dsd_graph memory leak (Nessus ID 270738 / WID-SEC-2025-2053)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.5.2. The impacted element is the function acpi_get_dsd_graph of the component coresight. The manipulation results in memory leak. This vulnerability is cat
CVE-2025-39767 | Linux Kernel up to 6.6.102/6.12.43/6.16.3/6.17-rc2 module_frob_arch_sections deadlock (Nessus ID 264756 / WID-SEC-2025-2040)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.102/6.12.43/6.16.3/6.17-rc2. The impacted element is the function module_frob_arch_sections. The manipulation results in deadlock. This vulnerability is
CVE-2025-39726 | Linux Kernel up to 6.6.100/6.12.40/6.15.8 ism_cmd state issue (Nessus ID 261634 / WID-SEC-2025-1988)
A vulnerability classified as critical has been found in Linux Kernel up to 6.6.100/6.12.40/6.15.8. This affects the function ism_cmd. This manipulation causes state issue. This vulnerability is handled as CVE-2025-39726. The attack can onl
CVE-2025-39720 | Linux Kernel up to 6.6.102/6.12.43/6.16.3/6.17-rc2 ksmbd ksmbd_conn_releasing reference count (Nessus ID 261598 / WID-SEC-2025-1988)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.102/6.12.43/6.16.3/6.17-rc2. Impacted is the function ksmbd_conn_releasing of the component ksmbd. Executing a manipulation can lead to improper update o
CVE-2025-38734 | Linux Kernel up to 6.6.102/6.12.43/6.16.3/6.17-rc2 net smc_listen_out null pointer dereference (Nessus ID 261597 / WID-SEC-2025-1988)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.102/6.12.43/6.16.3/6.17-rc2. This affects the function smc_listen_out of the component net. Performing a manipulation results in null pointer derefe
CVE-2025-38675 | Linux Kernel prior 6.12.41/6.15.9 xfrm state_ptrs initialization (EUVD-2025-27937 / Nessus ID 260272)
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.12.40/6.15.8/dd4c2a174994238d55ab54da2545543d36f4e0d0. This vulnerability affects the function state_ptrs of the component xfrm. The manipulation leads to i
CVE-2023-53111 | Linux Kernel up to 5.15.103/6.1.20/6.2.7 loop do_req_filebacked use after free (Nessus ID 246856 / WID-SEC-2025-0932)
A vulnerability was found in Linux Kernel up to 5.15.103/6.1.20/6.2.7. It has been classified as critical. This vulnerability affects the function do_req_filebacked of the component loop. The manipulation leads to use after free. This vulne
CVE-2022-50167 | Linux Kernel up to 5.18.17/5.19.1 bpf elem_size integer overflow (Nessus ID 270035 / WID-SEC-2025-1350)
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 5.18.17/5.19.1. The affected element is the function elem_size of the component bpf. Such manipulation leads to integer overflow. This vulnerability is tr
CVE-2024-58096 | Linux Kernel up to 6.14.1 wifi ath11k_dp_rx_mon_dest_process initialization (EUVD-2025-11277 / Nessus ID 240657)
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.14.1. This issue affects the function ath11k_dp_rx_mon_dest_process of the component wifi. This manipulation causes improper initialization. The id
CVE-2022-49622 | Linux Kernel up to 5.18.12 NF_STOLEN use after free (Nessus ID 238183)
A vulnerability identified as critical has been detected in Linux Kernel up to 5.18.12. Affected by this issue is some unknown functionality. Performing a manipulation of the argument NF_STOLEN results in use after free. This vulnerability
CVE-2022-49106 | Linux Kernel up to 5.15.33/5.16.19/5.17.2 vchiq_get_state null pointer dereference
A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.15.33/5.16.19/5.17.2. This affects the function vchiq_get_state. Such manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2
CVE-2013-2056 | Red Hat Network Satellite 5.5 improper authentication (RHSA-2013:0848 / Nessus ID 66537)
A vulnerability was found in Red Hat Network Satellite 5.5. It has been classified as problematic. The affected element is an unknown function. Performing a manipulation results in improper authentication. This vulnerability is reported as
CVE-2006-4339 | VMware Server 1.x Pipe Object cryptographic issue (VU#845620 / Nessus ID 20055)
A vulnerability described as problematic has been identified in VMware Server 1.x. Affected by this vulnerability is an unknown functionality of the component Pipe Object Handler. Executing a manipulation can lead to cryptographic issues. T
CVE-2026-119117 – Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java
Bulletin ID: 2026-159-AWS Publication Date: 10/30/2026 11:00 AM PDT Description: We published CVE-2026-119117. Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, when the library
CVE-2026-119568 | vsftpd up to 3.0.5 SSL Data ssl_data_accept improper authentication (EUVD-2026-113833)
A vulnerability categorized as critical has been discovered in vsftpd up to 3.0.5. Impacted is the function ssl_data_accept of the component SSL Data Handler. Such manipulation leads to improper authentication. This vulnerability is listed
CVE-2026-119564 | Plausible Analytics up to 3.2.1 Settings People Page settings_people.html.heex information disclosure (EUVD-2026-113829)
A vulnerability, which was classified as problematic, has been found in Plausible Analytics up to 3.2.1. Affected by this issue is some unknown functionality of the file lib/plausible_web/templates/site/settings_people.html.heex of the comp
CVE-2026-119560 | OPNsense core up to 26.7.8 NTP Daemon ntpd.inc fudge/refid code injection (EUVD-2026-113825)
A vulnerability was found in OPNsense core up to 26.7.8. It has been classified as problematic. This issue affects some unknown processing of the file ntpd.inc of the component NTP Daemon. The manipulation of the argument fudge/refid leads
CVE-2026-119556 | Moodle Project up to 5.3.0 Gradebook get_gradeitems.php core_grades_get_gradeitems improper authorization (EUVD-2026-113821)
A vulnerability labeled as problematic has been found in Moodle Project Moodle up to 4.5.15/5.0.11/5.1.8/5.2.4/5.3.0. This impacts the function core_grades_get_gradeitems of the file get_gradeitems.php of the component Gradebook. Executing
CVE-2026-119552 | louislam Uptime Kuma up to 2.5.8 Socket.IO first-run setup handler server.js race condition (EUVD-2026-113817)
A vulnerability classified as problematic was found in louislam Uptime Kuma up to 2.5.8. This affects an unknown function of the file server.js of the component Socket.IO first-run setup handler. The manipulation results in race condition.
CVE-2026-119548 | Getlago Lago up to 1.55.0 Stripe Service stripe_service.rb authorization (EUVD-2026-113813)
A vulnerability classified as problematic has been found in Getlago Lago up to 1.55.0. The impacted element is an unknown function of the file app/services/invoices/payments/stripe_service.rb of the component Stripe Service. The manipulatio
CVE-2026-119429 | phpMyAdmin up to 5.2.3 Two-Factor Authentication /config/set SetConfigController key access control (EUVD-2026-113809)
A vulnerability classified as problematic has been found in phpMyAdmin up to 5.2.3. This impacts the function SetConfigController of the file /config/set of the component Two-Factor Authentication. The manipulation of the argument key leads
Android 'SMS of Death' Flaw Can Drop Emergency Calls, Trigger Reboot Loops
Android flaw CVE-2026-58882 allows invisible SMS messages to crash telephony services, potentially disrupting emergency calls. Here's what users should know. Weiterlesen
CVE-2025-21658 | Linux Kernel up to 6.6.71/6.12.9 btrfs null pointer dereference (Nessus ID 233479 / WID-SEC-2025-0155)
A vulnerability has been found in Linux Kernel up to 6.6.71/6.12.9 and classified as problematic. This issue affects some unknown processing of the component btrfs. Performing a manipulation results in null pointer dereference. This vulnera
CVE-2024-57888 | Linux Kernel up to 6.12.8 cancel_delayed_work_sync privilege escalation (Nessus ID 214781 / WID-SEC-2025-0105)
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.12.8. The affected element is the function cancel_delayed_work_sync. Performing a manipulation results in privilege escalation. This vulnerability
CVE-2024-56729 | Linux Kernel up to 6.6.63/6.11.10/6.12.1 smb cached_dir_lease_break initialization (Nessus ID 214901 / WID-SEC-2024-3762)
A vulnerability was found in Linux Kernel up to 6.6.63/6.11.10/6.12.1 and classified as problematic. This affects the function cached_dir_lease_break of the component smb. Such manipulation leads to improper initialization. This vulnerabili
CVE-2024-56692 | Linux Kernel up to 6.6.63/6.11.10/6.12.1 fs/f2fs/segment.c truncate_node unusual condition (EUVD-2024-53340 / Nessus ID 216493)
A vulnerability was found in Linux Kernel up to 6.6.63/6.11.10/6.12.1 and classified as problematic. This issue affects the function truncate_node of the file fs/f2fs/segment.c. Executing a manipulation can lead to improper check for unusua
CVE-2024-56641 | Linux Kernel up to 6.6.65/6.12.4 close_work initialization (Nessus ID 214901 / WID-SEC-2024-3762)
A vulnerability categorized as problematic has been discovered in Linux Kernel up to 6.6.65/6.12.4. This vulnerability affects the function close_work. Such manipulation leads to improper initialization. This vulnerability is documented as
CVE-2024-56611 | Linux Kernel up to 6.6.65/6.12.4 mempolicy migrate_to_node null pointer dereference (Nessus ID 214901 / WID-SEC-2024-3762)
A vulnerability was found in Linux Kernel up to 6.6.65/6.12.4. It has been declared as critical. The impacted element is the function migrate_to_node of the component mempolicy. Executing a manipulation can lead to null pointer dereference.
CVE-2024-56592 | Linux Kernel up to 6.6.65/6.12.4 bpf free_htab_elem stack-based overflow (Nessus ID 216395 / WID-SEC-2024-3762)
A vulnerability classified as critical has been found in Linux Kernel up to 6.6.65/6.12.4. This vulnerability affects the function free_htab_elem of the component bpf. The manipulation leads to stack-based buffer overflow. This vulnerabilit
CVE-2024-54683 | Linux Kernel up to 6.6.66/6.12.5 Netfilter deadlock (Nessus ID 230726 / WID-SEC-2025-1439)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.66/6.12.5. This affects an unknown part of the component Netfilter. Executing a manipulation can lead to deadlock. This vulnerability appears as CVE-2024-54683. Th
CVE-2024-49569 | Linux Kernel up to 6.12.4 blk_mq_freeze_queue_wait denial of service (Nessus ID 233479 / WID-SEC-2025-0047)
A vulnerability classified as critical was found in Linux Kernel up to 6.12.4. This impacts the function blk_mq_freeze_queue_wait. Executing a manipulation can lead to denial of service. This vulnerability is handled as CVE-2024-49569. The
CVE-2024-47141 | Linux Kernel up to 6.6.65/6.12.4 pinmux pinctrl_select_state null pointer dereference (Nessus ID 214781 / WID-SEC-2025-0047)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.65/6.12.4. Impacted is the function pinctrl_select_state of the component pinmux. The manipulation results in null pointer dereference. This vulnerability is repor
CVE-2026-62911: Exchange-Logs in 12 Schritten prüfen - shattered.io
Ein Hinweis zum Zeitpunkt: Microsoft hat am 16. Oktober gewarnt, dass bestimmte Oktober-Updates für Windows Server (2016, 2019, 2022 und 2025) ... Weiterlesen
Keycloak Incident Response nach CVE-2026-18963 [2026] - shattered.io
Weitere Anleitungen dieser Art finden Sie im Bereich Cybersicherheit. Häufige Fragen zu Keycloak und CVE-2026-18963. Ab welcher Version ist CVE ... Weiterlesen
CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in
CVE-2026-116839 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the
CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in mis
CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PAS
CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .
CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash
CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place
CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.
llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor siz
CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF fil
CVE-2026-116816 | llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model loading, causing crashes or potential code execution.
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like whose nega
CVE-2025-71439 | llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-server to read past id_to_token and crash.
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short
CVE-2024-58400 | llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with IDs outside 0 to n_vocab to read embedding memory out of bounds or crash the process.
llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send intege
CVE-2024-58399 | llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF model file with arbitrary 64-bit tensor offsets to crash the process or load adjacent process memory as model weights.
llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF m
CVE-2026-116836 | A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.
A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.