Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 741 | 0,2 % |
| ≥50 % | 3.215 | 0,8 % |
| ≥10 % | 22.048 | 5,8 % |
| <10 % | 354.725 | 93,2 % |
Lumen Uncovers Secret Chinese Hacking Network Behind Years of Zero-Day Attacks on U.S. Infrastructure
Black Lotus Labs has uncovered Silent Train, a covert hacking network used by Chinese state-sponsored threat group Volt Typhoon to attack strategically important U.S. organizations. Researchers tracked the operation for three years, issuing
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws
The critical Oracle PeopleSoft bug that ShinyHunters has exploited since May is not one flaw but three chained together, the researchers who reported it said this week. Oracle patched all three under a single identifier, CVE-2026-35273, in
CISA Warns of Actively Exploited VMware ESXi Flaw That Lets Admins Hide Malicious Activity
The Cybersecurity and Infrastructure Security Agency has warned that attackers are actively exploiting a VMware ESXi logging vulnerability that lets administrators perform certain operations without generating logs. CISA added CVE-2026-4170
PHP2Shell: Aktive Ausnutzung von CVE-2026-109618/109619 trifft öffentlich erreichbare PAN-OS-Management-Interfaces
LONDON (IT BOLTWISE) – Angreifer nutzen laut Anbieterhinweis die kürzlich gepatchten PHP2Shell-Schwachstellen CVE-2026-109618 und CVE-2026-109619 aktiv gegen ins Internet gestellte Management-Interfaces. Die Lücken ermöglichen eine nicht au
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized b
CISA Warns of Active Attacks Exploiting Critical Node2Shell RCE Vulnerability in Node.js
CISA has added CVE-2026-111497, a critical vulnerability in Google Brotli that affects Node.js, to its Known Exploited Vulnerabilities catalog following confirmed evidence of exploitation. Added on October 27, 2026, this flaw allows unauthe
Security Researchers Demonstrate Chrome Sandbox Escapes, Telegram Zero-Click Attacks and iOS Zero-Day Research
Security researchers at OffensiveCon Japan 2026 explored topics including Chrome sandbox escapes, zero-click attack surfaces in Telegram, and newly discovered iOS zero-day vulnerabilities. This two-day program took place on October 27–28. T
CVE-2026-97324 | YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08 Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization
A vulnerability classified as critical has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected is the function updateDemoOrderPaid of the file yudao-module-pay/src/main/java/cn/iocoder/yudao/module/pay/controller/admin/
CVE-2026-2701 | Progress ShareFile Storage Zones Controller up to 5.12.3 unrestricted upload
A vulnerability was found in Progress ShareFile Storage Zones Controller up to 5.12.3. It has been declared as critical. The impacted element is an unknown function of the component File Handler. Such manipulation leads to unrestricted uplo
CVE-2026-2699 | Progress ShareFile Storage Zones Controller up to 5.12.3 redirect
A vulnerability was found in Progress ShareFile Storage Zones Controller up to 5.12.3. It has been declared as very critical. This issue affects some unknown processing. The manipulation results in execution after redirect. This vulnerabili
CVE-2023-7339 | Softing pnGate stack-based overflow
A vulnerability classified as critical has been found in Softing pnGate, epGate, mbGate, smartLink HW-DP and smartLink HW-PN. This issue affects some unknown processing. This manipulation causes stack-based buffer overflow. This vulnerabili
CVE-2026-14288 | GitLab 17.4/19.3.5/19.4.2/19.5.0 Approval Rule Synchronization access control (WID-SEC-2026-4115)
A vulnerability was found in GitLab 17.4/19.3.5/19.4.2/19.5.0. It has been declared as problematic. This impacts an unknown function of the component Approval Rule Synchronization. Such manipulation leads to improper access controls. This v
CVE-2026-13319 | GitLab up to 19.3.5/19.4.2/19.5.0 Group Milestones API improper authorization (WID-SEC-2026-4115)
A vulnerability was found in GitLab up to 19.3.5/19.4.2/19.5.0. It has been classified as problematic. This affects an unknown function of the component Group Milestones API. This manipulation causes improper authorization. The identificati
CVE-2026-12664 | GitLab up to 19.3.5/19.4.2/19.5.0 GraphQL Field privileges management (WID-SEC-2026-4115)
A vulnerability, which was classified as critical, has been found in GitLab up to 19.3.5/19.4.2/19.5.0. This issue affects some unknown processing of the component GraphQL Field. Performing a manipulation results in improper privilege manag
CVE-2026-112378 | GitLab up to 19.3.5/19.4.2/19.5.0 Billing Eligibility Checks privileges management (WID-SEC-2026-4115)
A vulnerability was found in GitLab up to 19.3.5/19.4.2/19.5.0. It has been rated as problematic. Affected is an unknown function of the component Billing Eligibility Checks. Performing a manipulation results in improper privilege managemen
CVE-2026-112326 | GitLab up to 19.3.5/19.4.2/19.5.0 Vulnerability Record Cleanup privileges management (WID-SEC-2026-4115)
A vulnerability was found in GitLab up to 19.3.5/19.4.2/19.5.0 and classified as problematic. The impacted element is an unknown function of the component Vulnerability Record Cleanup. The manipulation results in improper privilege manageme
CVE-2026-112212 | GitLab up to 19.3.5/19.4.2/19.5.0 OAuth/OIDC Discovery redirect (WID-SEC-2026-4115)
A vulnerability classified as problematic was found in GitLab up to 19.3.5/19.4.2/19.5.0. This vulnerability affects unknown code of the component OAuth/OIDC Discovery. Such manipulation leads to open redirect. This vulnerability is traded
CVE-2026-110610 | YunaiV ruoyi-vue-pro up to 2026.09 Image Service HttpUtil.downloadBytes referImageUrl server-side request forgery (Issue 1178)
A vulnerability labeled as critical has been found in YunaiV ruoyi-vue-pro up to 2026.09. The affected element is the function HttpUtil.downloadBytes of the component Image Service. Executing a manipulation of the argument referImageUrl can
CVE-2026-97320 | YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08 AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl url server-side request forgery (Issue 1176)
A vulnerability identified as critical has been detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowledgeDocumentServiceImpl.readUrl of the file AiKnowledgeDocumentServiceImpl.java of the
China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized b
Cisco Secure Firewall 0-Day Vulnerability Exploited in the Wild to Crash SSL VPN Devices
Cisco released security updates for actively exploited CVE-2026-76418, a flaw in Secure Firewall ASA and FTD software that lets unauthenticated remote attackers force device restarts, causing denial of service and disrupting remote access.
Security Researchers Demonstrate Chrome Sandbox Escapes, Telegram Zero-Click Attacks and iOS Zero-Day Research
Security researchers at OffensiveCon Japan 2026 explored topics including Chrome sandbox escapes, zero-click attack surfaces in Telegram, and newly discovered iOS zero-day vulnerabilities. This two-day program took place on October 27–28. T
Fehler in OpenStack Manila lässt Fremde öffentliche Freigaben steuern
Angemeldete Nutzer eines beliebigen Projekts können in OpenStack Manila öffentliche Freigaben fremder Projekte manipulieren und etwa Zugriffsregeln ändern. Korrigiert sind die Versionen 20.0.3, 21.0.3, 22.0.2 und 23.0.1. (Bild: kentoh - s
CVE-2026-114173 | Canva Ortto Plugin up to 1.0.24 information disclosure (EUVD-2026-112570)
A vulnerability was found in Canva Ortto Plugin up to 1.0.24. It has been declared as problematic. This vulnerability affects unknown code. Executing a manipulation can lead to information disclosure. This vulnerability is handled as CVE-20
CVE-2026-66088 | Apereo openEQUELLA up to 2026.0 Scripting Engine system.execute os command injection (EUVD-2026-112564)
A vulnerability classified as critical has been found in Apereo openEQUELLA up to 2026.0. Affected is the function system.execute of the component Scripting Engine. The manipulation leads to os command injection. This vulnerability is liste
CVE-2026-16889 | Apereo openEQUELLA up to 2026.0 Image Upload Endpoint image name cross site scripting (EUVD-2026-112563)
A vulnerability marked as problematic has been reported in Apereo openEQUELLA up to 2026.0. This affects an unknown function of the file /api/preloginnotice/image of the component Image Upload Endpoint. Performing a manipulation of the argu
CVE-2026-113409 | Canva Ortto Plugin up to 1.0.24 cross site scripting (EUVD-2026-112571)
A vulnerability labeled as problematic has been found in Canva Ortto Plugin up to 1.0.24. The impacted element is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2026-113409. It
CVE-2026-66090 | Apereo openEQUELLA up to 2026.0 XML parser /api/item server-side request forgery (EUVD-2026-112566)
A vulnerability was found in Apereo openEQUELLA up to 2026.0. It has been rated as critical. This issue affects some unknown processing of the file /api/item of the component XML parser. The manipulation leads to server-side request forgery
CVE-2026-66089 | Apereo openEQUELLA up to 2026.0 SOAP API server-side request forgery (EUVD-2026-112565)
A vulnerability identified as critical has been detected in Apereo openEQUELLA up to 2026.0. The affected element is an unknown function of the component SOAP API. This manipulation causes server-side request forgery. The identification of
CVE-2026-66091 | Apereo openEQUELLA up to 2026.0 userinfobackup uniqueId authorization (EUVD-2026-112567)
A vulnerability described as problematic has been identified in Apereo openEQUELLA up to 2026.0. This impacts an unknown function of the file /api/userquery/userinfobackup. Executing a manipulation of the argument uniqueId can lead to missi
CVE-2026-66092 | Apereo openEQUELLA up to 2026.1 Pre-Login Notice /api/preloginnotice cross site scripting (EUVD-2026-112568)
A vulnerability classified as problematic was found in Apereo openEQUELLA up to 2026.1. Affected by this vulnerability is an unknown functionality of the file /api/preloginnotice of the component Pre-Login Notice. The manipulation results i
CVE-2026-96741 | mlfactory DSGVO All in one for WP Plugin up to 5.0 on WordPress Comment Content cross site scripting (EUVD-2026-112585)
A vulnerability identified as problematic has been detected in mlfactory DSGVO All in one for WP Plugin up to 5.0 on WordPress. This impacts an unknown function of the component Comment Content. Performing a manipulation results in cross si
CVE-2026-96669 | wpscripts Food Store Plugin up to 1.5.5 on WordPress Cookie service_type/type cross site scripting (EUVD-2026-112586)
A vulnerability marked as problematic has been reported in wpscripts Food Store Plugin up to 1.5.5 on WordPress. Affected by this vulnerability is an unknown functionality of the component Cookie Handler. The manipulation of the argument se
CVE-2026-109516 | guruteam Bot for Telegram Plugin up to 1.3.0 on WordPress REST Endpoint main bftow_get_user_system_id tgId improper authentication (EUVD-2026-112584)
A vulnerability was found in guruteam Bot for Telegram Plugin up to 1.3.0 on WordPress. It has been rated as critical. The impacted element is the function bftow_get_user_system_id of the file /wp-json/woo-telegram/v1/main of the component
CVE-2026-93904 | dejanmarkovic Social Web Suite Plugin up to 4.1.12 on WordPress exclude_posts sql injection (EUVD-2026-112588)
A vulnerability labeled as critical has been found in dejanmarkovic Social Web Suite Plugin up to 4.1.12 on WordPress. Affected is an unknown function. Executing a manipulation of the argument exclude_posts can lead to sql injection. The id
CVE-2026-93855 | brewlabs SendPress Newsletters Plugin up to 1.26.1.20 on WordPress Shortcode subscriberid sql injection (EUVD-2026-112587)
A vulnerability categorized as critical has been discovered in brewlabs SendPress Newsletters Plugin up to 1.26.1.20 on WordPress. This affects an unknown function of the component Shortcode Handler. Such manipulation of the argument subscr
CVE-2026-96666 | Schema App Structured Data Plugin up to 2.3.2 on WordPress Remove Microdata Output Filter cross site scripting (EUVD-2026-112589)
A vulnerability described as problematic has been identified in Schema App Structured Data Plugin up to 2.3.2 on WordPress. Affected by this issue is some unknown functionality of the component Remove Microdata Output Filter. The manipulati
CVE-2026-96228 | sslplugins SSL Wireless SMS Notification Plugin up to 3.8.1 on WordPress Login final_login_ajax_action sslcare_login_phone/cap_data improper authentication (EUVD-2026-112590)
A vulnerability was found in sslplugins SSL Wireless SMS Notification Plugin up to 3.8.1 on WordPress. It has been declared as critical. The affected element is the function final_login_ajax_action of the component Login Handler. The manipu
CVE-2026-93757 | Wild Apricot Login Plugin up to 1.0.18 on WordPress SSO Authentication Module.php syncWaContact improper authentication (EUVD-2026-112591)
A vulnerability was found in Wild Apricot Login Plugin up to 1.0.18 on WordPress. It has been classified as critical. Impacted is the function UserSynchronizer::syncWaContact of the file Module.php of the component SSO Authentication. The m
Hackers Exploit PHP2Shell to Root 25 Servers – Including US Government Affiliates
HOC Shorts | The Breaking Discovery: Cybersecurity researchers uncovered a campaign in which attackers chained the PHP2Shell remote code execution flaw with a Linux kernel privilege escalation exploit (Fragnesia, `CVE-2026-46300`) to compl
CVE-2023-54227 | Linux Kernel up to 6.5.4 /mnt nr_hw_queues memory leak (Nessus ID 319348 / WID-SEC-2025-2941)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.5.4. This vulnerability affects the function nr_hw_queues of the file /mnt. This manipulation causes memory leak. This vulnerability is registered as CVE-2023-
CVE-2026-115417 | AWS aws-c-mqtt up to 0.16.1 MQTT 3.1.1 Compatibility Adapter denial of service (EUVD-2026-108508)
A vulnerability, which was classified as problematic, was found in AWS aws-c-mqtt up to 0.16.1. This issue affects some unknown processing of the component MQTT 3.1.1 Compatibility Adapter. Such manipulation leads to denial of service. This
CVE-2026-90732 | Dell PowerProtect Data Domain up to 8.6.1.20 stack-based overflow (EUVD-2026-110812)
A vulnerability identified as problematic has been detected in Dell PowerProtect Data Domain up to 7.7.1.0/LTS 2026/7.13.1.80/8.3.1.40/8.6.1.20. Affected by this vulnerability is an unknown functionality. The manipulation leads to stack-bas
CVE-2026-90731 | Dell PowerProtect Data Domain up to 8.7 stack-based overflow (EUVD-2026-110814)
A vulnerability was found in Dell PowerProtect Data Domain up to 8.7. It has been rated as problematic. This impacts an unknown function. Performing a manipulation results in stack-based buffer overflow. This vulnerability is identified as
CVE-2026-106484 | Google chrome-devtools-mcp up to 1.4.x Policy Enforcement privileges management (EUVD-2026-112366)
A vulnerability described as problematic has been identified in Google chrome-devtools-mcp up to 1.4.x. This issue affects some unknown processing of the component Policy Enforcement. Executing a manipulation can lead to improper privilege
CVE-2026-105777 | GitLab up to 19.3.5/19.4.2/19.5.0 information disclosure (WID-SEC-2026-4115)
A vulnerability identified as problematic has been detected in GitLab up to 19.3.5/19.4.2/19.5.0. Affected by this issue is some unknown functionality. The manipulation leads to information disclosure. This vulnerability is listed as CVE-20
CVE-2026-105711 | GitLab up to 19.3.5/19.4.2/19.5.0 Fragment Cache Key information disclosure (WID-SEC-2026-4115)
A vulnerability, which was classified as problematic, was found in GitLab up to 19.3.5/19.4.2/19.5.0. Impacted is an unknown function of the component Fragment Cache Key. Executing a manipulation can lead to information disclosure. This vul
CVE-2026-110354 | HAProxy up to 3.4.5 Parser resource consumption (WID-SEC-2026-4114)
A vulnerability has been found in HAProxy up to 3.4.5 and classified as critical. This affects an unknown function of the component Parser. Performing a manipulation results in resource consumption. This vulnerability is cataloged as CVE-20
CVE-2026-103515 | GitLab up to 19.3.5/19.4.2/19.5.0 Admin Lock Enforcement Controls permission (WID-SEC-2026-4115)
A vulnerability classified as problematic has been found in GitLab up to 19.3.5/19.4.2/19.5.0. This affects an unknown part of the component Admin Lock Enforcement Controls. This manipulation causes permission issues. This vulnerability app
CVE-2026-110353 | HAProxy up to 3.4.5 H2 Frame src/mux_h2.c h2c_handle_ping resource consumption (WID-SEC-2026-4114)
A vulnerability labeled as critical has been found in HAProxy up to 3.4.5. This issue affects the function h2c_handle_ping of the file src/mux_h2.c of the component H2 Frame Handler. Executing a manipulation can lead to resource consumption
CVE-2026-28330 | SolarWinds Observability Self-Hosted cross site scripting (WID-SEC-2026-4162)
A vulnerability identified as problematic has been detected in SolarWinds Observability Self-Hosted. This issue affects some unknown processing. The manipulation leads to cross site scripting. This vulnerability is documented as CVE-2026-28
CVE-2026-77207 | Libreswan Project up to 5.3.2/5.4.0 PKCS#7 SEC_PKCS7GetCertificateList null pointer dereference (WID-SEC-2026-4183)
A vulnerability categorized as critical has been discovered in Libreswan Project Libreswan up to 5.3.2/5.4.0. Affected by this vulnerability is the function SEC_PKCS7GetCertificateList of the component PKCS#7 Handler. The manipulation resul
CVE-2026-114148 | Microsoft ASP.NET Core privileges management (WID-SEC-2026-4162)
A vulnerability was found in Microsoft ASP.NET Core. It has been rated as critical. Affected by this vulnerability is an unknown functionality. This manipulation causes improper privilege management. The identification of this vulnerability
CVE-2026-77206 | Libreswan up to 5.3.2/5.4/5.4.0 EAP null pointer dereference (WID-SEC-2026-4183)
A vulnerability identified as critical has been detected in Libreswan up to 5.3.2/5.4/5.4.0. Affected by this issue is some unknown functionality of the component EAP Handler. This manipulation causes null pointer dereference. This vulnerab
CVE-2026-77205 | Libreswan Project up to 5.3.2 add_decoded_cert denial of service (WID-SEC-2026-4183)
A vulnerability was found in Libreswan Project Libreswan up to 5.3.2. It has been rated as critical. This affects the function add_decoded_cert. This manipulation causes denial of service. This vulnerability appears as CVE-2026-77205. The a
CVE-2026-12887 | Octopus Deploy Octopus Server up to 2026.1.673/2026.2.972/2026.3.5838 NuGet unrestricted upload (WID-SEC-2026-4164)
A vulnerability, which was classified as problematic, was found in Octopus Deploy Octopus Server up to 2026.1.673/2026.2.972/2026.3.5838. Impacted is an unknown function of the component NuGet Handler. The manipulation results in unrestrict
CVE-2026-118803 | Bricks Plugin up to 2.4.3 Query Result Endpoint urlParams weak password hash (EUVD-2026-112502)
A vulnerability described as problematic has been identified in Bricks Plugin up to 2.4.3. Affected by this vulnerability is an unknown functionality of the component Query Result Endpoint. Executing a manipulation of the argument urlParams
CVE-2026-118804 | Bricks Builder Plugin up to 2.4.3 REST Endpoint query_result originalQueryVars access control (EUVD-2026-112503)
A vulnerability was found in Bricks Builder Plugin up to 2.4.3. It has been classified as problematic. This issue affects some unknown processing of the file /wp-json/bricks/v1/query_result of the component REST Endpoint. Performing a manip
CVE-2026-93851 | Mattermost up to 11.7.10/11.8.5/11.9.1 Mention Reminder cross-site request forgery (EUVD-2026-112505)
A vulnerability categorized as problematic has been discovered in Mattermost up to 11.7.10/11.8.5/11.9.1. Affected is an unknown function of the component Mention Reminder Component. Such manipulation leads to cross-site request forgery. Th
CVE-2026-118578 | maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8 Request Forwarder information disclosure (Issue 444 / EUVD-2026-112552)
A vulnerability categorized as problematic has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.8. The affected element is an unknown function of the component Request Forwarder. The manipulation results in information disclosu