Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 749 | 0,2 % |
| ≥50 % | 3.265 | 0,9 % |
| ≥10 % | 22.083 | 5,7 % |
| <10 % | 357.966 | 93,2 % |
CVE-2026-63929 | Linux Kernel up to 6.12.92/6.18.34/7.0.11 Buffer iio_buffer_enqueue_dmabuf allocation of resources
A vulnerability was found in Linux Kernel up to 6.12.92/6.18.34/7.0.11. It has been declared as critical. Affected by this issue is the function iio_buffer_enqueue_dmabuf of the component Buffer. Such manipulation leads to allocation of res
CVE-2026-63918 | Linux Kernel up to 6.12.92/6.18.34/7.0.11 L2TP l2tp_session_get_by_ifname use after free
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.12.92/6.18.34/7.0.11. This affects the function l2tp_session_get_by_ifname of the component L2TP. The manipulation results in use after free. This vuln
CVE-2026-63916 | Linux Kernel up to 7.0.11 HID wacom_hid_set_device_mode out-of-bounds write
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 7.0.11. Impacted is the function wacom_hid_set_device_mode of the component HID. Executing a manipulation can lead to out-of-bounds write. The identifica
CVE-2026-63915 | Linux Kernel up to 7.0.11 NFC HCI HCP Header Parsing nfc_hci_recv_from_llc/nci_hci_data_received_cb out-of-bounds
A vulnerability was found in Linux Kernel up to 7.0.11. It has been declared as very critical. This vulnerability affects the function nfc_hci_recv_from_llc/nci_hci_data_received_cb of the component NFC HCI HCP Header Parsing. Such manipula
CVE-2026-63914 | Linux Kernel up to 7.0.11 Xfrm Migration net/xfrm/xfrm_user.c xfrm_send_migrate information disclosure
A vulnerability was found in Linux Kernel up to 7.0.11. It has been rated as problematic. This issue affects the function xfrm_send_migrate of the file net/xfrm/xfrm_user.c of the component Xfrm Migration. Performing a manipulation results
CVE-2026-63913 | Linux Kernel up to 7.0.11 Netfilter Conntrack input validation (Nessus ID 340744)
A vulnerability was found in Linux Kernel up to 7.0.11. It has been declared as critical. Impacted is an unknown function of the component Netfilter Conntrack. Such manipulation leads to improper input validation. This vulnerability is refe
CVE-2026-63912 | Linux Kernel up to 7.0.11 Xfrm esp_output_head allocation of resources
A vulnerability was found in Linux Kernel up to 7.0.11. It has been classified as very critical. This affects the function esp_output_head of the component Xfrm. This manipulation causes allocation of resources. This vulnerability is handle
CVE-2026-63911 | Linux Kernel up to 6.18.34/7.0.11 IPTFS iptfs_clone_state use after free
A vulnerability was found in Linux Kernel up to 6.18.34/7.0.11 and classified as very critical. Affected by this issue is the function iptfs_clone_state of the component IPTFS. The manipulation results in use after free. This vulnerability
CVE-2026-63910 | Linux Kernel up to 7.0.11 Dma-buf dma_buf_fd use after free
A vulnerability was found in Linux Kernel up to 7.0.11. It has been classified as very critical. This issue affects the function dma_buf_fd of the component Dma-buf. This manipulation causes use after free. The identification of this vulner
CVE-2026-63909 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Ksmbd smb_check_perm_dacl out-of-bounds
A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11. This affects the function smb_check_perm_dacl of the component Ksmbd. This manipulation causes out-of-bounds read. This vulnerabi
CVE-2026-62965 | SABnzbd up to 5.0.x Orphan Job Management sabnzbd/api.py _api_delete_orphan value path traversal (Nessus ID 374561)
A vulnerability labeled as problematic has been found in SABnzbd up to 5.0.x. This affects the function _api_delete_orphan of the file sabnzbd/api.py of the component Orphan Job Management. Such manipulation of the argument Value leads to p
CVE-2026-114509 | Laravel up to 12.67.x/13.28.x TokenGuard improper authentication (Nessus ID 374562)
A vulnerability, which was classified as critical, has been found in Laravel up to 12.67.x/13.28.x. The affected element is the function TokenGuard. Performing a manipulation results in improper authentication. This vulnerability was named
CVE-2026-48713 | i18next i18next-fs-backend up to 2.6.5 lib/utils.js Backend.writeFile prototype pollution (GHSA-2933-q333-qg83 / Nessus ID 374563)
A vulnerability classified as critical was found in i18next i18next-fs-backend up to 2.6.5. Affected by this vulnerability is the function Backend.writeFile of the file lib/utils.js. The manipulation results in improperly controlled modific
CVE-2026-63402 | i18next up to 26.3.3 Deep Merge src/utils.js deepExtend deep/overwrite dynamically-managed code resources (Nessus ID 374563)
A vulnerability described as problematic has been identified in i18next up to 26.3.3. This affects the function deepExtend of the file src/utils.js of the component Deep Merge. Executing a manipulation of the argument deep/overwrite can lea
CVE-2026-84381 | Pydantic HTTPX2/httpcore2 up to 2.9.1 SOCKS Proxy socks_proxy.py Client.websocket/AsyncClient.websocket certificate validation (Nessus ID 374564)
A vulnerability was found in Pydantic HTTPX2 and httpcore2 up to 2.9.1. It has been rated as problematic. This affects the function Client.websocket/AsyncClient.websocket of the file src/httpcore2/httpcore2/_sync/socks_proxy.py of the compo
CVE-2026-107279 | AsyncHttpClient up to 3.0.12 Authentication Verification AuthenticatorUtils.computeExpectedRspAuth improper authentication (EUVD-2026-94638 / Nessus ID 374565)
A vulnerability labeled as critical has been found in AsyncHttpClient up to 3.0.12. The impacted element is the function AuthenticatorUtils.computeExpectedRspAuth of the component Authentication Verification. Executing a manipulation can le
CVE-2026-97828 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100429)
A vulnerability marked as problematic has been reported in Microsoft Windows. The impacted element is an unknown function of the component DNS Server. Performing a manipulation results in information disclosure. This vulnerability is known
CVE-2026-97830 | Microsoft Windows up to Server 2025 Internet Information Services double free (EUVD-2026-100431)
A vulnerability classified as critical was found in Microsoft Windows up to Server 2025. This affects an unknown part of the component Internet Information Services. Such manipulation leads to double free. This vulnerability is uniquely ide
CVE-2026-97829 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100430)
A vulnerability described as problematic has been identified in Microsoft Windows. This affects an unknown function of the component DNS Server. Executing a manipulation can lead to information disclosure. This vulnerability is handled as C
CVE-2026-97832 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100433)
A vulnerability classified as problematic was found in Microsoft Windows. Affected is an unknown function of the component DNS Server. The manipulation results in information disclosure. This vulnerability was named CVE-2026-97832. The atta
CVE-2026-97831 | Microsoft Windows up to Server 2025 information disclosure (EUVD-2026-100432)
A vulnerability classified as problematic has been found in Microsoft Windows. This impacts an unknown function. The manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2026-97831. The attack is po
CVE-2026-97833 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100434)
A vulnerability, which was classified as problematic, has been found in Microsoft Windows. Affected by this vulnerability is an unknown functionality of the component DNS Server. This manipulation causes information disclosure. The identifi
CVE-2026-96192 | Microsoft Edge up to 154.0.4258.62 use after free (EUVD-2026-113160)
A vulnerability described as critical has been identified in Microsoft Edge. This impacts an unknown function. The manipulation results in use after free. This vulnerability is known as CVE-2026-96192. It is possible to launch the attack re
CVE-2026-96203 | Microsoft Edge up to 154.0.4258.62 use after free (EUVD-2026-113161)
A vulnerability classified as critical was found in Microsoft Edge. Affected by this vulnerability is an unknown functionality. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2026-96203. The atta
CVE-2026-20942 | Microsoft Edge input validation (EUVD-2026-113162)
A vulnerability was found in Microsoft Edge. It has been declared as critical. Affected by this issue is some unknown functionality. The manipulation results in improper input validation. This vulnerability is reported as CVE-2026-20942. Th
CVE-2026-118147 | Microsoft Visual Studio input validation (EUVD-2026-114732)
A vulnerability classified as critical has been found in Microsoft Visual Studio. Affected by this issue is some unknown functionality. This manipulation causes improper input validation. This vulnerability appears as CVE-2026-118147. The a
CVE-2026-106181 | Google Chrome up to 154.0.8037.97 DevTools information disclosure (WID-SEC-2026-3761)
A vulnerability identified as problematic has been detected in Google Chrome. The affected element is an unknown function of the component DevTools. This manipulation causes information disclosure. The identification of this vulnerability i
CVE-2026-106180 | Google Chrome up to 154.0.8037.97 Animation cross-domain policy (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as problematic. This affects an unknown part of the component Animation. Performing a manipulation results in permissive cross-domain policy with untrusted domains. This vul
CVE-2026-106179 | Google Chrome up to 154.0.8037.97 WebAppInstalls (WID-SEC-2026-3761)
A vulnerability categorized as problematic has been discovered in Google Chrome. Impacted is an unknown function of the component WebAppInstalls. The manipulation results in an unknown weakness. This vulnerability was named CVE-2026-106179.
CVE-2026-102322 | Google Chrome up to 154.0.8037.97 SiteIsolation improper authorization (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been rated as critical. This issue affects some unknown processing of the component SiteIsolation. The manipulation leads to improper authorization. This vulnerability is uniquely identifie
CVE-2026-102998 | py-pdf Pypdf up to 6.18.x Appearance Stream _appearance_stream.py infinite loop (WID-SEC-2026-4024)
A vulnerability labeled as problematic has been found in py-pdf Pypdf up to 6.18.x. Impacted is an unknown function of the file pypdf/generic/_appearance_stream.py of the component Appearance Stream. Executing a manipulation can lead to inf
CVE-2026-102994 | py-pdf pypdf up to 6.17.x PDF Reader pypdf/_reader.py read_until_whitespace resource consumption (WID-SEC-2026-4024)
A vulnerability marked as problematic has been reported in py-pdf pypdf up to 6.17.x. Affected is the function read_until_whitespace of the file pypdf/_reader.py of the component PDF Reader. The manipulation leads to resource consumption. T
CVE-2026-63908 | Linux Kernel up to 7.0.11 Atmel Mxt Ts mxt_prepare_cfg_mem infinite loop
A vulnerability was found in Linux Kernel up to 7.0.11 and classified as critical. This vulnerability affects the function mxt_prepare_cfg_mem of the component Atmel Mxt Ts. The manipulation results in infinite loop. This vulnerability was
CVE-2026-63907 | Linux Kernel up to 7.0.11 Uio Pci Generic Sva probe double free
A vulnerability has been found in Linux Kernel up to 7.0.11 and classified as critical. Affected by this vulnerability is the function probe of the component Uio Pci Generic Sva. The manipulation leads to double free. This vulnerability is
CVE-2026-63906 | Linux Kernel up to 7.0.11 Musb omap2430_probe np use after free
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.1.175/6.6.142/6.12.92/6.18.34/7.0.11. Affected is the function omap2430_probe of the component Musb. Executing a manipulation of the argument np can l
CVE-2026-63905 | Linux Kernel up to 7.0.11 Usbip Vudc vudc_remove use after free
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 7.0.11. This impacts the function vudc_remove of the component Usbip Vudc. Performing a manipulation results in use after free. This vulnerability is re
CVE-2026-63901 | Linux Kernel up to 7.0.11 USB Serial Digi Acceleport memory corruption
A vulnerability classified as very critical has been found in Linux Kernel up to 7.0.11. The impacted element is an unknown function of the component USB Serial Digi Acceleport. This manipulation causes memory corruption. This vulnerability
CVE-2026-63898 | Linux Kernel up to 7.0.11 Mct U232 mct_u232.c memory corruption
A vulnerability labeled as very critical has been found in Linux Kernel up to 7.0.11. This issue affects some unknown processing of the file drivers/usb/serial/mct_u232.c of the component Mct U232. Executing a manipulation can lead to memor
CVE-2026-120229 | WAVLINK WN553X1-B 260403_2.0.0 /bin/ioos sub_416B50 file_id os command injection
A vulnerability marked as very critical has been reported in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file /bin/ioos. The manipulation of the argument file_id leads to os command injection. This vuln
CVE-2026-120228 | WAVLINK WN553X1-B V260403_2.0.0 ioos Service /bin/ioos sub_416D88 group_id/group_name os command injection
A vulnerability labeled as very critical has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument gro
U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following Ivanti Connec
CVE-2026-85330 | Microsoft Edge up to 154.0.4258.62 improper authorization (EUVD-2026-112935)
A vulnerability was found in Microsoft Edge. It has been rated as problematic. The affected element is an unknown function. This manipulation causes improper authorization. This vulnerability appears as CVE-2026-85330. The attack may be ini
CVE-2026-96187 | Microsoft Edge up to 154.0.4258.62 type confusion (EUVD-2026-112937)
A vulnerability was found in Microsoft Edge. It has been declared as problematic. This vulnerability affects unknown code. The manipulation results in type confusion. This vulnerability is cataloged as CVE-2026-96187. The attack may be laun
CVE-2026-88090 | Microsoft Edge up to 153.0.4234.46 type confusion (EUVD-2026-113164)
A vulnerability, which was classified as critical, has been found in Microsoft Edge. Affected by this vulnerability is an unknown functionality. This manipulation causes type confusion. This vulnerability is tracked as CVE-2026-88090. The a
CVE-2026-85899 | Microsoft Edge up to 154.0.4258.37 use after free (EUVD-2026-112936)
A vulnerability, which was classified as problematic, was found in Microsoft Edge. Affected by this issue is some unknown functionality. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-85899. The attack m
CVE-2026-96196 | Microsoft Edge Chromium access control (EUVD-2026-112938)
A vulnerability categorized as critical has been discovered in Microsoft Edge. This vulnerability affects unknown code of the component Chromium. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2026-
CVE-2026-88078 | Microsoft Edge input validation (EUVD-2026-112940)
A vulnerability was found in Microsoft Edge. It has been rated as critical. This affects an unknown part. This manipulation causes improper input validation. This vulnerability appears as CVE-2026-88078. The attack may be initiated remotely
CVE-2026-62765 | Microsoft Edge up to 148.0.3967.70 type confusion (EUVD-2026-111398)
A vulnerability has been found in Microsoft Edge and classified as critical. The impacted element is an unknown function. The manipulation leads to type confusion. This vulnerability is uniquely identified as CVE-2026-62765. The attack is p
CVE-2026-88077 | Microsoft Edge up to 154.0.4258.37 integer overflow (EUVD-2026-112939)
A vulnerability has been found in Microsoft Edge and classified as critical. This affects an unknown part. Performing a manipulation results in integer overflow. This vulnerability is cataloged as CVE-2026-88077. It is possible to initiate
CVE-2026-83943 | Microsoft Azure API Center information disclosure (EUVD-2026-95395 / WID-SEC-2026-3834)
A vulnerability was found in Microsoft Azure API Center. It has been declared as problematic. The impacted element is an unknown function. Executing a manipulation can lead to information disclosure. This vulnerability appears as CVE-2026-8
CVE-2026-120199 | LearnHouse up to 1.1.0 Assignment API user_id improper authorization (EUVD-2026-114720)
A vulnerability, which was classified as problematic, has been found in LearnHouse up to 1.1.0. Impacted is an unknown function of the component Assignment API. This manipulation of the argument user_id causes improper authorization. This v
CVE-2026-102212 | Opengear ACM7000/CM7100/IM7200 up to 5.5.2 Content-Disposition index.cgi name buffer overflow (EUVD-2026-114719)
A vulnerability was found in Opengear ACM7000, CM7100 and IM7200 up to 5.5.2 and classified as very critical. Impacted is an unknown function of the file index.cgi of the component Content-Disposition. Such manipulation of the argument Name
CVE-2026-120202 | Highflame AI ramparts up to 0.8.10 Bundle Scanner collect_bundle_siblings/walk_bundle_subdir input validation (EUVD-2026-114723)
A vulnerability identified as problematic has been detected in Highflame AI ramparts up to 0.8.10. Affected is the function collect_bundle_siblings/walk_bundle_subdir of the component Bundle Scanner. This manipulation causes improper input
CVE-2026-120201 | Dromara Jpom up to 2.11.12 Condition parser JPOM-USER-TOKEN improper authentication (EUVD-2026-114722)
A vulnerability classified as critical has been found in Dromara Jpom up to 2.11.12. This vulnerability affects unknown code of the component Condition parser. The manipulation of the argument JPOM-USER-TOKEN leads to improper authenticatio
CVE-2026-120200 | gnmyt Nexterm up to 1.2.2-BETA Session Lifecycle missing authentication (EUVD-2026-114721)
A vulnerability marked as problematic has been reported in gnmyt Nexterm up to 1.2.2-BETA. Affected by this issue is some unknown functionality of the component Session Lifecycle. Performing a manipulation results in missing authentication.
CVE-2026-120204 | DeepSeek-AI DeepInfer up to 0.1.0 Profile Endpoint output_dir path traversal (EUVD-2026-114725)
A vulnerability was found in DeepSeek-AI DeepInfer up to 0.1.0. It has been rated as critical. This affects an unknown function of the component Profile Endpoint. The manipulation of the argument output_dir leads to path traversal. This vul
CVE-2026-120203 | ShowDoc up to 3.9.5 Mock feature MockController::add code injection (EUVD-2026-114724)
A vulnerability classified as very critical was found in ShowDoc up to 3.9.5. This issue affects the function MockController::add of the component Mock feature. The manipulation results in code injection. This vulnerability is identified as
CVE-2026-120207 | lia Page Module up to 2.0.3 Delete Routes cross-site request forgery (EUVD-2026-114728)
A vulnerability was found in lia Page Module up to 2.0.3 and classified as problematic. This affects an unknown function of the component Delete Routes. Executing a manipulation can lead to cross-site request forgery. This vulnerability is
CVE-2026-120206 | Thelia up to 3.1.x Back Office setToggleVisibilityAction/updatePositionAction cross-site request forgery (EUVD-2026-114727)
A vulnerability has been found in Thelia up to 3.1.x and classified as problematic. The impacted element is the function setToggleVisibilityAction/updatePositionAction of the component Back Office. Performing a manipulation results in cross
CVE-2026-120205 | Thelia up to 3.0.x Customer getSummary name cross site scripting (EUVD-2026-114726)
A vulnerability, which was classified as problematic, was found in Thelia up to 3.0.x. The affected element is the function ForSomeCustomers::getSummary of the component Customer. Such manipulation of the argument Name leads to cross site s