Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 759 | 0,2 % |
| ≥50 % | 3.353 | 0,9 % |
| ≥10 % | 22.248 | 5,7 % |
| <10 % | 364.173 | 93,3 % |
CVE-2026-113687 | Apache Syncope up to 3.0.16/4.0.8/4.1.3 Groovy Sandbox sandbox (EUVD-2026-115154)
A vulnerability identified as problematic has been detected in Apache Syncope up to 3.0.16/4.0.8/4.1.3. This impacts an unknown function of the component Groovy Sandbox. This manipulation causes sandbox issue. This vulnerability appears as
CVE-2026-105475 | WebPros cPanel neutralization (EUVD-2026-115630)
A vulnerability has been found in WebPros cPanel and classified as problematic. The affected element is an unknown function. The manipulation leads to improper neutralization. This vulnerability is traded as CVE-2026-105475. It is possible
CVE-2026-76306 | Splunk SOAR up to 8.6.x REST API Query Filters information disclosure (EUVD-2026-107645)
A vulnerability was found in Splunk SOAR up to 8.6.x. It has been declared as problematic. The affected element is an unknown function of the component REST API Query Filters. The manipulation results in information disclosure. This vulnera
CVE-2026-105476 | WebPros cPanel Link Resolution path traversal (EUVD-2026-115631)
A vulnerability, which was classified as very critical, was found in WebPros cPanel. Impacted is an unknown function of the component Link Resolution. Executing a manipulation can lead to path traversal. This vulnerability appears as CVE-20
CVE-2026-76528 | Splunk SOAR up to 8.6.x protection mechanism (EUVD-2026-107637)
A vulnerability, which was classified as critical, has been found in Splunk SOAR up to 8.6.x. Affected by this issue is some unknown functionality. This manipulation causes protection mechanism failure. This vulnerability is handled as CVE-
CVE-2026-59107 | WolfVision Cynap Pro/Cynap Core Pro/Cynap/Cynap Core File Sharing improper authentication (EUVD-2026-109828)
A vulnerability marked as very critical has been reported in WolfVision Cynap Pro, Cynap Core Pro, Cynap and Cynap Core. This vulnerability affects unknown code of the component File Sharing. This manipulation causes improper authentication
CVE-2026-76407 | Splunk SOAR up to 8.6.x access control (EUVD-2026-107641)
A vulnerability classified as very critical was found in Splunk SOAR up to 8.6.x. Affected by this vulnerability is an unknown functionality. The manipulation results in improper access controls. This vulnerability is known as CVE-2026-7640
CVE-2026-115700 | benoitc hackney up to 4.8.99 URL Normalization hackney_url.normalize server-side request forgery (EUVD-2026-109834)
A vulnerability identified as critical has been detected in benoitc hackney up to 4.8.99. This impacts the function hackney_url.normalize of the component URL Normalization. Performing a manipulation results in server-side request forgery.
CVE-2026-113440 | benoitc hackney up to 4.8.x src/hackney.erl hackney.follow_redirect missing encryption (EUVD-2026-109835)
A vulnerability categorized as problematic has been discovered in benoitc hackney up to 4.8.x. Impacted is the function hackney.follow_redirect of the file src/hackney.erl. The manipulation results in missing encryption of sensitive data. T
CVE-2026-85297 | Google Cloud Run MCP up to 1.10.x information disclosure (EUVD-2026-109906)
A vulnerability has been found in Google Cloud Run MCP up to 1.10.x and classified as problematic. The impacted element is an unknown function. This manipulation causes information disclosure. The identification of this vulnerability is CVE
CVE-2026-58873 | Google Android XR 14 WindowManagerService WindowManagerService.java addDragDropListener permission (EUVD-2026-115628)
A vulnerability classified as very critical was found in Google Android XR 14. This vulnerability affects the function addDragDropListener of the file WindowManagerService.java of the component WindowManagerService. Such manipulation leads
CVE-2026-98432: A Remote Use-After-Free in the Linux Kernel’s TCP Stack
Learn about CVE-2026-98432, a critical remote use-after-free flaw in the Linux kernel TCP stack, its root exploit risks, affected versions, and mitigation steps. This article has been indexed from Blog Read the original article: CVE-2026-98
CVE-2026-105811 – Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
Read this article Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin. This article has been indexed from Latest Bulletins Read the original article: CVE-2026-105811 – Aut
CVE-2026-116635 – Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
Bulletin ID: 2026-164-AWS Publication Date: 11/02/2026 13:30 PM PST Description: We identified CVE-2026-116635. Under certain conditions, improper limitation of a pathname to a restricted directory in the deployment status component of the
CVE-2026-65059 | Furl up to 3.15 Decompression lib/Furl/ZlibStream.pm memory allocation (EUVD-2026-115332)
A vulnerability labeled as problematic has been found in Furl up to 3.15. Affected by this issue is some unknown functionality of the file lib/Furl/ZlibStream.pm of the component Decompression. The manipulation results in uncontrolled memor
CVE-2026-116769 | Absolute Security Secure Access up to 14.60 improper authentication (EUVD-2026-115456)
A vulnerability was found in Absolute Security Secure Access up to 14.60 and classified as very critical. This affects an unknown function. Executing a manipulation can lead to improper authentication. This vulnerability is tracked as CVE-2
CVE-2026-86365 | Dell Alienware Command Center up to 6.14.20.0 input validation (EUVD-2026-115457)
A vulnerability was found in Dell Alienware Command Center up to 6.14.20.0. It has been declared as problematic. Impacted is an unknown function. Executing a manipulation can lead to improper input validation. This vulnerability is tracked
CVE-2026-118276 | a2ui-project a2ui up to 0.10.6 Parser expression_parser.ts formatString resource consumption (Issue 2389 / EUVD-2026-111578)
A vulnerability classified as problematic has been found in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the file renderers/web_core/src/v0_9/basic_catalog/expressions/expression_parser.ts of the c
CVE-2026-90723 | Dell PowerProtect Data Domain Management Center up to 8.6.1.20 sql injection (EUVD-2026-111822)
A vulnerability described as problematic has been identified in Dell PowerProtect Data Domain Management Center up to 7.7.1.0/8.8/7.13.1.80/8.3.1.40/8.6.1.20. This vulnerability affects unknown code. The manipulation results in sql injectio
CVE-2026-118378 | TabularisDB Tabularis up to 0.27.x SQLite Driver table_name sql injection (EUVD-2026-111554)
A vulnerability identified as critical has been detected in TabularisDB Tabularis up to 0.27.x. This impacts an unknown function of the component SQLite Driver. The manipulation of the argument table_name leads to sql injection. This vulner
CVE-2026-91896 | Dell Alienware Command Center up to 6.14.20.0 improper authentication (EUVD-2026-115458)
A vulnerability, which was classified as problematic, was found in Dell Alienware Command Center up to 6.14.20.0. Affected by this issue is some unknown functionality. The manipulation results in improper authentication. This vulnerability
CVE-2026-84725 | Red Hat JBoss Enterprise Application Platform JDKBridge deserialization (EUVD-2026-112282)
A vulnerability labeled as critical has been found in Red Hat JBoss Enterprise Application Platform. The impacted element is an unknown function of the component JDKBridge. Executing a manipulation can lead to deserialization. This vulnerab
CVE-2026-91901 | Dell Alienware Command Center up to 6.14.20.0 improper authorization (EUVD-2026-115459)
A vulnerability was found in Dell Alienware Command Center up to 6.14.20.0. It has been declared as problematic. Affected is an unknown function. The manipulation results in improper authorization. This vulnerability is cataloged as CVE-202
CVE-2026-90719 | Dell PowerProtect Data Domain Management Center up to 8.8 sql injection (EUVD-2026-111825)
A vulnerability classified as problematic was found in Dell PowerProtect Data Domain Management Center up to 8.8. Impacted is an unknown function. Such manipulation leads to sql injection. This vulnerability is traded as CVE-2026-90719. The
CVE-2026-28588 | Google Android up to 17 External Storage Provider ExternalStorageProvider.java shouldBlockDirectoryFromTree privileges management (EUVD-2026-115551)
A vulnerability, which was classified as very critical, has been found in Google Android 14/15/16/16-qpr2/17. The impacted element is the function shouldBlockDirectoryFromTree of the file ExternalStorageProvider.java of the component Extern
CVE-2026-118370 | Libexpat up to 2.9.0 Lib/xmlparse.c StoreAtts integer overflow (WID-SEC-2026-4214)
A vulnerability has been found in Libexpat up to 2.9.0 and classified as problematic. The affected element is the function StoreAtts of the file Lib/xmlparse.c. This manipulation causes integer overflow. This vulnerability is registered as
CVE-2026-117610 | libexpat up to 2.9.0 lib/xmlparse.c externalEntityInitProcessor2 null pointer dereference (WID-SEC-2026-4214)
A vulnerability was found in libexpat up to 2.9.0. It has been classified as problematic. Impacted is the function externalEntityInitProcessor2 of the file lib/xmlparse.c. This manipulation causes null pointer dereference. This vulnerabilit
CVE-2026-119977 | WordPress up to 7.1.3 on WordPress Upgrade code injection (WID-SEC-2026-4283)
A vulnerability was found in WordPress on WordPress. It has been classified as critical. Affected is an unknown function of the component Upgrade. Performing a manipulation results in code injection. This vulnerability was named CVE-2026-11
CVE-2026-119729 | GStreamer AV1 LEB128 Parser integer overflow (WID-SEC-2026-4284)
A vulnerability was found in GStreamer. It has been declared as problematic. Impacted is an unknown function of the component AV1 LEB128 Parser. Such manipulation leads to integer overflow. This vulnerability is uniquely identified as CVE-2
CVE-2026-112398 | Python Pillow up to 12.x FlashPix JPEG-tile decoder ImagingJpegDecode buffer overflow (WID-SEC-2026-4285)
A vulnerability marked as critical has been reported in Python Pillow Pillow up to 12.x. Impacted is the function ImagingJpegDecode of the component FlashPix JPEG-tile decoder. Performing a manipulation results in buffer overflow. This vuln
StyleSmuggler Exploitation Deploys PSK Agent RAT Against Magento Stores
TL;DR: Between September 9 and September 13, 2026, we detected a coordinated campaign exploiting Magento and Adobe Commerce stores across Western Europe, North America, and the Asia-Pacific region. The activity used /paypal/transparent/resp
CVE-2026-59044 | Google Android use after free
A vulnerability identified as very critical has been detected in Google Android. This vulnerability affects unknown code. The manipulation leads to use after free. This vulnerability is listed as CVE-2026-59044. The attack must be carried o
CVE-2026-120497 – Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows
Bulletin ID: 2026-163-AWS Publication Date: 11/02/2026 11:00 AM PST Description: aidlc-traceability is an open source command-line tool, formerly published in the awslabs/aidlc-workflows repository, that generates traceability-matrix report
CVE-2021-4217 | unzip Unicode String null pointer dereference (EUVD-2021-34075 / Nessus ID 234300)
A vulnerability has been found in unzip and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Unicode String Handler. The manipulation leads to null pointer dereference. This vulnerabilit
CVE-2021-42322 | Microsoft Visual Studio Code privileges management (EUVD-2021-29297)
A vulnerability marked as problematic has been reported in Microsoft Visual Studio Code. This issue affects some unknown processing. This manipulation causes improper privilege management. This vulnerability is handled as CVE-2021-42322. Th
CVE-2026-70388 | RT-Labs AB SOEM up to 2.0.0 allocation of resources (EUVD-2026-109659)
A vulnerability was found in RT-Labs AB SOEM up to 2.0.0. It has been rated as critical. This affects an unknown function. The manipulation leads to allocation of resources. This vulnerability is referenced as CVE-2026-70388. Remote exploit
CVE-2021-43809 | Bundler up to 2.2.32 Gemfile argument injection (GHSA-fj7f-vq84-fh43 / EUVD-2021-2513)
A vulnerability has been found in Bundler up to 2.2.32 and classified as critical. This affects an unknown part of the component Gemfile Handler. Performing a manipulation results in argument injection. This vulnerability is reported as CVE
CVE-2021-43877 | Microsoft ASP.NET Core/Visual Studio privilege escalation (EUVD-2021-30739)
A vulnerability classified as critical has been found in Microsoft ASP.NET Core and Visual Studio. This vulnerability affects unknown code. This manipulation causes privilege escalation. This vulnerability is tracked as CVE-2021-43877. The
CVE-2024-7532 | Google Chrome up to 127.0.6533.88 ANGLE out-of-bounds (ID 350528 / Nessus ID 374924)
A vulnerability labeled as critical has been found in Google Chrome. This issue affects some unknown processing of the component ANGLE. Such manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-7532. The attack
CVE-2023-4860 | Google Chrome Skia Remote Code Execution (Nessus ID 374924)
A vulnerability described as critical has been identified in Google Chrome. This impacts an unknown function of the component Skia. Such manipulation leads to Remote Code Execution. This vulnerability is uniquely identified as CVE-2023-4860
CVE-2026-93787 | Linux Kernel up to 6.12.110/6.18.52 smb cifs_filldir out-of-bounds (Nessus ID 374938)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.110/6.18.52. Impacted is the function cifs_filldir of the component smb. Such manipulation leads to out-of-bounds read. This vulnerability is uniquely i
CVE-2026-74283 | Linux Kernel up to 7.1.4 tipc netlink_net_capable permission (Nessus ID 374938)
A vulnerability was found in Linux Kernel up to 7.1.4. It has been rated as problematic. Affected is the function netlink_net_capable of the component tipc. The manipulation leads to permission issues. This vulnerability is uniquely identif
CVE-2026-72083 | Linux Kernel up to 7.2-rc3 SCSI Target Core core_scsi3_emulate_pro_register_and_move use after free (Nessus ID 374938)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.2-rc3. This vulnerability affects the function core_scsi3_emulate_pro_register_and_move of the component SCSI Target Core. The manipulation leads
CVE-2026-53615 | util-linux up to 2.41.3 libblkid dos.c parse_dos_extended integer overflow (Nessus ID 374940)
A vulnerability identified as critical has been detected in util-linux up to 2.41.3. This affects the function parse_dos_extended of the file libblkid/src/partitions/dos.c of the component libblkid. The manipulation leads to integer overflo
CVE-2026-20551 | MediaTek MT2737/MT6813/MT6980D/MT6982/MT6986/MT6988/MT6990 gnss out-of-bounds write (ALPS11309305 / EUVD-2026-115016)
A vulnerability was found in MediaTek MT2737, MT6813, MT6980D, MT6982, MT6986, MT6988 and MT6990. It has been classified as problematic. Affected by this issue is some unknown functionality of the component gnss. The manipulation leads to o
CVE-2026-116122 | NocoDB up to 2026.07.0 Sign-in Endpoint AuthService.validateUser salt information disclosure (Issue 14687 / EUVD-2026-109615)
A vulnerability, which was classified as problematic, has been found in NocoDB up to 2026.07.0. Impacted is the function AuthService.validateUser of the component Sign-in Endpoint. Performing a manipulation of the argument salt results in i
CVE-2026-107030 | CraftXbox YubiClip XOR fork 1.0.1 OTP-clipboard permission (EUVD-2026-113182)
A vulnerability was found in CraftXbox YubiClip XOR fork 1.0.1. It has been classified as critical. Affected by this issue is some unknown functionality of the component OTP-clipboard. Performing a manipulation results in permission issues.
CVE-2026-20554 | MediaTek MT8893 Modem memory corruption (MOLY01911177 / EUVD-2026-115019)
A vulnerability has been found in MediaTek MT2716, MT2735, MT2737, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767, MT6768, MT6769, MT6771, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT687
CVE-2026-120214 | Fastify http-proxy up to 11.6.2 path traversal (EUVD-2026-115115)
A vulnerability was found in Fastify http-proxy up to 11.6.2 and classified as problematic. This impacts an unknown function. Executing a manipulation can lead to path traversal. This vulnerability is registered as CVE-2026-120214. It is po
CVE-2026-106803 | Kamailio 6.1.3/6.1.4 ims_registrar_pcscf process_contact alias stack-based overflow (EUVD-2026-115344)
A vulnerability identified as critical has been detected in Kamailio 6.1.3/6.1.4. Affected by this vulnerability is the function process_contact of the component ims_registrar_pcscf. The manipulation of the argument alias leads to stack-bas
CVE-2026-20566 | MediaTek MT8791 prior MOLY01923663/ALPS11315955 out-of-bounds write (MOLY01923663/ALPS11315955 / EUVD-2026-115031)
A vulnerability was found in MediaTek MT2716, MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6881, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT
CVE-2026-20550 | MediaTek MT6990 gnss out-of-bounds write (ALPS11309816 / EUVD-2026-115015)
A vulnerability has been found in MediaTek MT2735, MT2737, MT6880, MT6890, MT6980D, MT6982, MT6986, MT6988 and MT6990 and classified as problematic. Affected is an unknown function of the component gnss. Performing a manipulation results in
CVE-2026-18800 | WSO2 API Manager Event Publisher Output Adapter information disclosure (EUVD-2026-115114)
A vulnerability, which was classified as problematic, has been found in WSO2 API Manager, API Control Plane, API Manager, Traffic Manager, Universal Gateway, Identity Server, Identity Server as Key Manager, Open Banking IAM, Open Banking AM
CVE-2026-105769 | chainguard-forks kaniko up to 1.25.19 Azure Container Registry Credential Helper incorrect regex (EUVD-2026-115331)
A vulnerability was found in chainguard-forks kaniko up to 1.25.19. It has been rated as critical. This impacts an unknown function of the component Azure Container Registry Credential Helper. Performing a manipulation results in incorrect
CVE-2026-20526 | MediaTek MT8893 out-of-bounds write (MOLY01898195 / EUVD-2026-92201)
A vulnerability was found in MediaTek MT2716, MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6881, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT
CVE-2026-116223 | icret EasyImage up to 2.8.7 app/del.php hash privileges management (Issue 283 / EUVD-2026-109623)
A vulnerability classified as critical was found in icret EasyImage up to 2.8.7. The impacted element is an unknown function of the file app/del.php. Executing a manipulation of the argument hash can lead to improper privilege management. T
CVE-2026-88811 | SUSE Rancher up to 2.15.2 Meta Proxy access control (EUVD-2026-115330)
A vulnerability categorized as critical has been discovered in SUSE Rancher up to 2.11.18/2.12.14/2.13.10/2.14.6/2.15.2. Affected is an unknown function of the component Meta Proxy. Executing a manipulation can lead to improper access contr
Zero-Day-Lücke absichern: 12 Schritte, 60 Min [2026] - shattered.io
Microsoft empfiehlt für Server meist Defender for Servers Plan 2. Starten Sie Server mit einer eigenen Auswahl und Audit. Keine Rückmeldung an die ... Weiterlesen
CVE-2026-99234 | Linux Kernel up to 7.3.0 tracing event_hist_trigger_parse use after free (EUVD-2026-115276)
A vulnerability was found in Linux Kernel up to 7.3.0. It has been classified as critical. This issue affects the function event_hist_trigger_parse of the component tracing. The manipulation leads to use after free. This vulnerability is un
CVE-2026-99233 | Linux Kernel up to 7.3.0 Histograms event_hist_trigger_parse/hist_unreg_all event_call/ref use after free (EUVD-2026-115275)
A vulnerability was found in Linux Kernel up to 7.3.0. It has been declared as very critical. Impacted is the function event_hist_trigger_parse/hist_unreg_all of the component Histograms. The manipulation of the argument event_call/ref resu