Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 753 | 0,2 % |
| ≥50 % | 3.301 | 0,9 % |
| ≥10 % | 22.010 | 5,7 % |
| <10 % | 360.242 | 93,3 % |
GitLab's Critical CVSS 10.0 Wake-Up Call: Is Your CI/CD Pipeline Secure?
The Alpine Linux incident reveals why patching GitLab is not enough—and what every business should do to protect its software supply chain. A critical vulnerability can turn a trusted development platform into an attacker's entry point
CVE-2026-105483 remediation checklist for Node.js teams
CVE-2026-105483 remediation checklist for Node.js teams The fastest accurate response to CVE-2026-105483 starts with the runtime version and ends with evidence that the deployed client rejects the wrong certificate identity. The bug affects
CVE-2026-109782 | Mozilla Firefox up to 153.4 File unnecessary privileges (Nessus ID 374794)
A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 153.4. The affected element is an unknown function of the component File Handler. Performing a manipulation results in execution with unnecessary pri
CVE-2026-109745 | Mozilla Firefox up to 153.4/157 Web Serial uninitialized pointer (Nessus ID 374794)
A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 153.4/157. This vulnerability affects unknown code of the component Web Serial. This manipulation causes uninitialized pointer. This vulnerability is
CVE-2026-109709 | Mozilla Firefox up to 153.4/157 Process Sandboxing privileges management (Nessus ID 374794)
A vulnerability described as critical has been identified in Mozilla Firefox up to 153.4/157. Affected is an unknown function of the component Process Sandboxing. Such manipulation leads to improper privilege management. This vulnerability
CVE-2026-109724 | Mozilla Firefox up to 153.4/157 DOM/HTML use after free (Nessus ID 374794)
A vulnerability, which was classified as critical, was found in Mozilla Firefox up to 153.4/157. This impacts an unknown function of the component DOM/HTML. Executing a manipulation can lead to use after free. This vulnerability is register
CVE-2026-109713 | Mozilla Firefox up to 153.4/157 Crash Reporting use after free (Nessus ID 374794)
A vulnerability was found in Mozilla Firefox up to 153.4/157. It has been rated as critical. This affects an unknown function of the component Crash Reporting. The manipulation leads to use after free. This vulnerability is uniquely identif
CVE-2026-109740 | Mozilla Firefox up to 153.4/157 Win32 sandbox (Nessus ID 374794)
A vulnerability marked as critical has been reported in Mozilla Firefox up to 153.4/157. Affected is an unknown function of the component Win32. Performing a manipulation results in sandbox issue. This vulnerability was named CVE-2026-10974
CVE-2026-109706 | Mozilla Firefox up to 115.42/153.4/157 IndexedDB use after free (Nessus ID 374794)
A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 115.42/153.4/157. This affects an unknown part of the component IndexedDB. The manipulation leads to use after free. This vulnerability is documented
CVE-2026-109715 | Mozilla Firefox up to 115.42/153.4/157 JavaScript Engine integer overflow (Nessus ID 374794)
A vulnerability identified as critical has been detected in Mozilla Firefox up to 115.42/153.4/157. Affected is an unknown function of the component JavaScript Engine. This manipulation causes integer overflow. The identification of this vu
CVE-2026-96391 | Drupal Webform REST up to 4.2.0 improper authorization
A vulnerability was found in Drupal Webform REST up to 4.2.0. It has been classified as critical. Affected is an unknown function of the component REST. The manipulation leads to improper authorization. This vulnerability is documented as C
CVE-2026-96379 | Drupal CookieCuttr up to 2.0.3 cross site scripting
A vulnerability was found in Drupal CookieCuttr up to 2.0.3. It has been classified as problematic. The impacted element is an unknown function. Performing a manipulation results in cross site scripting. This vulnerability is reported as CV
CVE-2026-92202 | Luxion KeyShot BIP File Parser uncontrolled search path
A vulnerability marked as critical has been reported in Luxion KeyShot. This issue affects some unknown processing of the component BIP File Parser. The manipulation leads to uncontrolled search path. This vulnerability is traded as CVE-202
CVE-2026-87938 | Drupal CSP log Plugin up to 1.0.2 sql injection
A vulnerability categorized as critical has been discovered in Drupal CSP log Plugin up to 1.0.2. The affected element is an unknown function. Such manipulation leads to sql injection. This vulnerability is referenced as CVE-2026-87938. It
CVE-2026-76529 | Splunk SOAR up to 8.6.x improper protection of alternate path
A vulnerability was found in Splunk SOAR up to 8.6.x and classified as critical. This issue affects some unknown processing. Executing a manipulation can lead to improper protection of alternate path. The identification of this vulnerabilit
CVE-2026-76408 | Splunk SOAR up to 8.6.x resource control
A vulnerability marked as very critical has been reported in Splunk SOAR up to 8.6.x. This affects an unknown function. Performing a manipulation results in improper control of resource through lifetime. This vulnerability is reported as CV
CVE-2026-76288 | Splunk Enterprise up to 9.4.15/10.0.10/10.2.7/10.4.3 JavaScript Logger Endpoint resource consumption
A vulnerability has been found in Splunk Enterprise up to 9.4.15/10.0.10/10.2.7/10.4.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component JavaScript Logger Endpoint. This manipulation
CVE-2026-105869 | Apache Pulsar up to 4.0.13/4.2.4 MultiRolesTokenAuthorizationProvider improper authentication
A vulnerability was found in Apache Pulsar up to 4.0.13/4.2.4. It has been declared as very critical. This issue affects some unknown processing of the component MultiRolesTokenAuthorizationProvider. Such manipulation leads to improper auth
CVE-2026-86959 | Apple iOS/iPadOS/macOS input validation
A vulnerability identified as critical has been detected in Apple iOS, iPadOS and macOS. The impacted element is an unknown function. The manipulation leads to improper input validation. This vulnerability is uniquely identified as CVE-2026
CVE-2026-86948 | Apple Xcode up to 26 sandbox
A vulnerability was found in Apple Xcode up to 26. It has been declared as problematic. The impacted element is an unknown function. Executing a manipulation can lead to sandbox issue. This vulnerability appears as CVE-2026-86948. The attac
CVE-2026-86944 | Apple iOS/iPadOS/macOS prior 26.7/26.7/15.8/26.7 out-of-bounds write
A vulnerability classified as very critical has been found in Apple iOS, iPadOS and macOS. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in out-of-bounds write. This vulnerability is identifie
CVE-2026-86935 | Apple macOS up to 26 information disclosure
A vulnerability was found in Apple macOS up to 26. It has been classified as problematic. The affected element is an unknown function. Performing a manipulation results in information disclosure. This vulnerability is reported as CVE-2026-8
CVE-2026-84582 | Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS up to 26 access control
A vulnerability described as problematic has been identified in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS up to 26. The impacted element is an unknown function. The manipulation results in improper access controls. This vulnerabi
CVE-2026-83651 | Microsoft Windows up to Server 2025 GDI out-of-bounds
A vulnerability identified as problematic has been detected in Microsoft Windows. This impacts an unknown function of the component GDI. This manipulation causes out-of-bounds read. This vulnerability is registered as CVE-2026-83651. Remote
CVE-2026-68482 | Apache Answer improper authorization
A vulnerability was found in Apache Answer. It has been declared as problematic. Affected is an unknown function. Such manipulation leads to improper authorization. This vulnerability is uniquely identified as CVE-2026-68482. The attack can
CVE-2026-113264 | Google Chrome up to 155.0.8059.84 Extensions input validation
A vulnerability marked as critical has been reported in Google Chrome. The impacted element is an unknown function of the component Extensions. This manipulation causes improper input validation. The identification of this vulnerability is
ParticleDB's Jepsen report, Lenovo's fingerprint USB stick, Karpathy's HackerTube and the Linux TCP bug CVE-2026-98432
Four developer stories from Sunday, November 1, 2026, each read from its own source. The first is a database whose home page said Full ACID. The video has the walkthrough; this article keeps the quotes, numbers and links in one place. TL;DR
CVE-2026-95117 | zserge jsmn jsmn.h jsmn_parse buffer overflow (ID 25647e6)
A vulnerability marked as problematic has been reported in zserge jsmn. The impacted element is the function jsmn_parse of the file jsmn.h. The manipulation leads to buffer overflow. This vulnerability is listed as CVE-2026-95117. The attac
CVE-2026-70125 | Microsoft Outlook code injection
A vulnerability described as problematic has been identified in Microsoft Outlook. Impacted is an unknown function. The manipulation results in code injection. This vulnerability is known as CVE-2026-70125. It is possible to launch the atta
CVE-2026-67240 | RabbitMQ up to 4.2.6/4.3.0 Like Filter rabbit_amqp_session.erl incorrect regex
A vulnerability labeled as problematic has been found in RabbitMQ up to 4.2.6/4.3.0. Impacted is an unknown function of the file rabbit_amqp_session.erl of the component Like Filter. Executing a manipulation can lead to incorrect regular ex
CVE-2026-67228 | RabbitMQ up to 4.2.6/4.3.0 Runtime Parameter Lookup rabbit_runtime_parameters.erl lookup_component denial of service
A vulnerability was found in RabbitMQ up to 4.2.6/4.3.0. It has been classified as problematic. This vulnerability affects the function lookup_component of the file deps/rabbit/src/rabbit_runtime_parameters.erl of the component Runtime Para
CVE-2026-66069 | RabbitMQ up to 4.1.12/4.2.6/4.2.x Management Plugin rabbit_mgmt_wm_reset.erl is_authorized privileges management (WID-SEC-2026-2268)
A vulnerability described as problematic has been identified in RabbitMQ up to 4.1.12/4.2.6/4.2.x. The impacted element is the function is_authorized of the file rabbit_mgmt_wm_reset.erl of the component Management Plugin. The manipulation
CVE-2026-66067 | VMware RabbitMQ up to 4.2.6/4.3.0 Stream Open privileges management
A vulnerability marked as problematic has been reported in VMware RabbitMQ up to 4.2.6/4.3.0. The affected element is an unknown function of the component Stream Open Handler. The manipulation leads to improper privilege management. This vu
CVE-2026-109763 | Mozilla Firefox up to 153.4/157 File privileges assignment
A vulnerability was found in Mozilla Firefox up to 153.4/157. It has been declared as critical. This affects an unknown function of the component File Handler. The manipulation results in incorrect privilege assignment. This vulnerability i
CVE-2026-107161 | Cyrus Cyrus-SASL add_to_challenge heap-based overflow
A vulnerability identified as very critical has been detected in Cyrus Cyrus-SASL. This affects the function add_to_challenge. Performing a manipulation results in heap-based buffer overflow. This vulnerability is reported as CVE-2026-10716
CVE-2026-104040 | Red Hat Enterprise Linux/OpenShift Container Platform sssd information disclosure
A vulnerability was found in Red Hat Enterprise Linux and OpenShift Container Platform. It has been declared as problematic. Affected is an unknown function of the component sssd. The manipulation results in information disclosure. This vul
CVE-2026-104029 | sssd autofs out-of-bounds
A vulnerability marked as critical has been reported in sssd. This vulnerability affects unknown code of the component autofs. The manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2026-104029. It is possible to
CVE-2026-100517 | Villame Photo Reviews Plugin up to 1.2.30 on WordPress resource injection
A vulnerability described as critical has been identified in Villame Photo Reviews Plugin up to 1.2.30 on WordPress. Affected by this vulnerability is an unknown functionality. Such manipulation leads to improper control of resource identif
Apple-Sicherheitslücke: CVE-2026-86950 kann Geräte vollständig übernehmen
Illustration mit AI erstellt. Die Nationale Agentur für Cybersicherheit Aserbaidschans hat vor einer neu entdeckten Schwachstelle in den ... Weiterlesen
CVE-2022-48309 | Sophos Connect 2.1 cross-site request forgery (EUVD-2022-51009)
A vulnerability classified as problematic was found in Sophos Connect 2.1. This issue affects some unknown processing. The manipulation results in cross-site request forgery. This vulnerability was named CVE-2022-48309. The attack may be pe
CVE-2022-48308 | Palantir Sls-logging certificate host validation (EUVD-2022-51008)
A vulnerability has been found in Palantir Sls-logging and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to certificate with host mismatch. This vulnerability is traded as CVE-2022-4830
CVE-2022-48307 | Palantir Magritte-ftp certificate host validation (EUVD-2022-51007)
A vulnerability, which was classified as critical, was found in Palantir Magritte-ftp. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to certificate with host mismatch. This vulnerability appea
CVE-2022-48306 | Palantir Gotham up to 105.115.0 Chat IRC helper certificate host validation (EUVD-2022-51006)
A vulnerability categorized as critical has been discovered in Palantir Gotham. The affected element is an unknown function of the component Chat IRC helper. Executing a manipulation can lead to certificate with host mismatch. The identific
CVE-2022-48303 | GNU Tar up to 1.34 V7 Archive list.c from_header out-of-bounds (EUVD-2022-51003 / Nessus ID 211745)
A vulnerability, which was classified as problematic, has been found in GNU Tar up to 1.34. The affected element is the function from_header of the file list.c of the component V7 Archive Handler. The manipulation leads to out-of-bounds rea
CVE-2022-48299 | Huawei EMUI/Magic UI WMS Module improper authentication (EUVD-2022-50999)
A vulnerability was found in Huawei EMUI and Magic UI. It has been classified as critical. The impacted element is an unknown function of the component WMS Module. Performing a manipulation results in improper authentication. This vulnerabi
A staged upgrade plan for CVE-2026-96888 in BIND
A staged upgrade plan for CVE-2026-96888 in BIND Why staging matters CVE-2026-96888 can cause a BIND resolver to abort while processing an NXDOMAIN response when a redirect zone and strict QNAME minimization are both configured. ISC rates t
CVE-2026-110672 | cPanel Cpanel::JSON::XS up to 4.79 Decode decode_hv memory leak (Nessus ID 374777)
A vulnerability labeled as problematic has been found in cPanel Cpanel::JSON::XS up to 4.79. This vulnerability affects the function decode_hv of the component Decode. The manipulation results in memory leak. This vulnerability is reported
CVE-2026-79611 | Xen VMX VMEntry resource consumption (Nessus ID 374779)
A vulnerability was found in Xen and classified as problematic. Affected by this issue is some unknown functionality of the component VMX VMEntry. The manipulation results in resource consumption. This vulnerability is reported as CVE-2026-
CVE-2026-102700 | Xen Grant Table GNTTAB_cache_flush memory leak (XSA-520 / Nessus ID 374779)
A vulnerability has been found in Xen and classified as critical. This affects the function GNTTAB_cache_flush of the component Grant Table. Performing a manipulation results in memory leak. This vulnerability is reported as CVE-2026-102700
CVE-2026-79610 | Xen Grant Table race condition (Nessus ID 374779)
A vulnerability was found in Xen. It has been classified as very critical. Affected is an unknown function of the component Grant Table. The manipulation leads to race condition. This vulnerability is traded as CVE-2026-79610. It is possibl
CVE-2026-79609 | Xen Page Table Isolation information disclosure (Nessus ID 374779)
A vulnerability marked as problematic has been reported in Xen. This affects an unknown part of the component Page Table Isolation. Performing a manipulation results in information disclosure. This vulnerability is identified as CVE-2026-79
CVE-2026-79608 | Xen infinite loop (Nessus ID 374779)
A vulnerability classified as critical has been found in Xen. This issue affects some unknown processing. The manipulation leads to infinite loop. This vulnerability is listed as CVE-2026-79608. The attack may be initiated remotely. There i
CVE-2026-96282 | Red Hat Enterprise Linux 7/8/9/10 Flatpak Extension information disclosure (EUVD-2026-88044 / Nessus ID 374780)
A vulnerability classified as problematic was found in Red Hat Enterprise Linux 7/8/9/10. Affected is an unknown function of the component Flatpak Extension. The manipulation results in information disclosure. This vulnerability is known as
CVE-2026-96281 | Red Hat Enterprise Linux System Helper RemoveLocalRef privileges management (EUVD-2026-88027 / Nessus ID 374780)
A vulnerability marked as problematic has been reported in Red Hat Enterprise Linux. The impacted element is the function RemoveLocalRef of the component System Helper. Performing a manipulation results in improper privilege management. Thi
CVE-2026-92162 | Flatpak up to 1.18.0 flatpak-system-helper privileges management (Nessus ID 374780)
A vulnerability has been found in Flatpak up to 1.18.0 and classified as very critical. Affected is an unknown function of the component flatpak-system-helper. Performing a manipulation results in improper privilege management. This vulnera
CVE-2026-72395 | Linux Kernel up to 7.2-rc1 Hwmon Pmbus regulator_handle_critical event state issue
A vulnerability was found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4/7.2-rc1. It has been declared as problematic. The affected element is the function regulator_handle_critical of the component Hwmon Pmbus. Such manipulation of th
CVE-2026-72383 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc1 sctp sctp_free_addr_wq use after free
A vulnerability was found in Linux Kernel up to 6.18.39/7.1.4/7.2-rc1. It has been rated as very critical. This issue affects the function sctp_free_addr_wq of the component sctp. Performing a manipulation results in use after free. This vu
CVE-2026-72382 | Linux Kernel up to 7.2-rc1 ksmbd parse_dacl integer overflow
A vulnerability described as critical has been identified in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4/7.2-rc1. Affected is the function parse_dacl of the component ksmbd. Such manipulation leads to integer overflow. This vulnerabili
CVE-2026-72380 | Linux Kernel up to 7.1.4/7.2-rc1 xen/pvcalls class.c pvcalls_front_event_handler req_id out-of-bounds write
A vulnerability was found in Linux Kernel up to 7.1.4/7.2-rc1. It has been declared as very critical. This vulnerability affects the function pvcalls_front_event_handler of the file class.c of the component xen/pvcalls. The manipulation of
CVE-2026-72375 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc1 afs lib/debugobjects.c afs_lock_work race condition
A vulnerability was found in Linux Kernel up to 6.18.39/7.1.4/7.2-rc1. It has been rated as problematic. This impacts the function afs_lock_work of the file lib/debugobjects.c of the component afs. The manipulation leads to race condition.