Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 755 | 0,2 % |
| ≥50 % | 3.336 | 0,9 % |
| ≥10 % | 22.173 | 5,7 % |
| <10 % | 362.846 | 93,3 % |
CVE-2026-65059 | Furl up to 3.15 Decompression lib/Furl/ZlibStream.pm memory allocation (EUVD-2026-115332)
A vulnerability labeled as problematic has been found in Furl up to 3.15. Affected by this issue is some unknown functionality of the file lib/Furl/ZlibStream.pm of the component Decompression. The manipulation results in uncontrolled memor
CVE-2026-116769 | Absolute Security Secure Access up to 14.60 improper authentication (EUVD-2026-115456)
A vulnerability was found in Absolute Security Secure Access up to 14.60 and classified as very critical. This affects an unknown function. Executing a manipulation can lead to improper authentication. This vulnerability is tracked as CVE-2
CVE-2026-86365 | Dell Alienware Command Center up to 6.14.20.0 input validation (EUVD-2026-115457)
A vulnerability was found in Dell Alienware Command Center up to 6.14.20.0. It has been declared as problematic. Impacted is an unknown function. Executing a manipulation can lead to improper input validation. This vulnerability is tracked
CVE-2026-118276 | a2ui-project a2ui up to 0.10.6 Parser expression_parser.ts formatString resource consumption (Issue 2389 / EUVD-2026-111578)
A vulnerability classified as problematic has been found in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the file renderers/web_core/src/v0_9/basic_catalog/expressions/expression_parser.ts of the c
CVE-2026-90723 | Dell PowerProtect Data Domain Management Center up to 8.6.1.20 sql injection (EUVD-2026-111822)
A vulnerability described as problematic has been identified in Dell PowerProtect Data Domain Management Center up to 7.7.1.0/8.8/7.13.1.80/8.3.1.40/8.6.1.20. This vulnerability affects unknown code. The manipulation results in sql injectio
CVE-2026-118378 | TabularisDB Tabularis up to 0.27.x SQLite Driver table_name sql injection (EUVD-2026-111554)
A vulnerability identified as critical has been detected in TabularisDB Tabularis up to 0.27.x. This impacts an unknown function of the component SQLite Driver. The manipulation of the argument table_name leads to sql injection. This vulner
CVE-2026-91896 | Dell Alienware Command Center up to 6.14.20.0 improper authentication (EUVD-2026-115458)
A vulnerability, which was classified as problematic, was found in Dell Alienware Command Center up to 6.14.20.0. Affected by this issue is some unknown functionality. The manipulation results in improper authentication. This vulnerability
CVE-2026-84725 | Red Hat JBoss Enterprise Application Platform JDKBridge deserialization (EUVD-2026-112282)
A vulnerability labeled as critical has been found in Red Hat JBoss Enterprise Application Platform. The impacted element is an unknown function of the component JDKBridge. Executing a manipulation can lead to deserialization. This vulnerab
CVE-2026-91901 | Dell Alienware Command Center up to 6.14.20.0 improper authorization (EUVD-2026-115459)
A vulnerability was found in Dell Alienware Command Center up to 6.14.20.0. It has been declared as problematic. Affected is an unknown function. The manipulation results in improper authorization. This vulnerability is cataloged as CVE-202
CVE-2026-90719 | Dell PowerProtect Data Domain Management Center up to 8.8 sql injection (EUVD-2026-111825)
A vulnerability classified as problematic was found in Dell PowerProtect Data Domain Management Center up to 8.8. Impacted is an unknown function. Such manipulation leads to sql injection. This vulnerability is traded as CVE-2026-90719. The
CVE-2026-28588 | Google Android up to 17 External Storage Provider ExternalStorageProvider.java shouldBlockDirectoryFromTree privileges management (EUVD-2026-115551)
A vulnerability, which was classified as very critical, has been found in Google Android 14/15/16/16-qpr2/17. The impacted element is the function shouldBlockDirectoryFromTree of the file ExternalStorageProvider.java of the component Extern
CVE-2026-118370 | Libexpat up to 2.9.0 Lib/xmlparse.c StoreAtts integer overflow (WID-SEC-2026-4214)
A vulnerability has been found in Libexpat up to 2.9.0 and classified as problematic. The affected element is the function StoreAtts of the file Lib/xmlparse.c. This manipulation causes integer overflow. This vulnerability is registered as
CVE-2026-117610 | libexpat up to 2.9.0 lib/xmlparse.c externalEntityInitProcessor2 null pointer dereference (WID-SEC-2026-4214)
A vulnerability was found in libexpat up to 2.9.0. It has been classified as problematic. Impacted is the function externalEntityInitProcessor2 of the file lib/xmlparse.c. This manipulation causes null pointer dereference. This vulnerabilit
CVE-2026-119977 | WordPress up to 7.1.3 on WordPress Upgrade code injection (WID-SEC-2026-4283)
A vulnerability was found in WordPress on WordPress. It has been classified as critical. Affected is an unknown function of the component Upgrade. Performing a manipulation results in code injection. This vulnerability was named CVE-2026-11
CVE-2026-119729 | GStreamer AV1 LEB128 Parser integer overflow (WID-SEC-2026-4284)
A vulnerability was found in GStreamer. It has been declared as problematic. Impacted is an unknown function of the component AV1 LEB128 Parser. Such manipulation leads to integer overflow. This vulnerability is uniquely identified as CVE-2
CVE-2026-112398 | Python Pillow up to 12.x FlashPix JPEG-tile decoder ImagingJpegDecode buffer overflow (WID-SEC-2026-4285)
A vulnerability marked as critical has been reported in Python Pillow Pillow up to 12.x. Impacted is the function ImagingJpegDecode of the component FlashPix JPEG-tile decoder. Performing a manipulation results in buffer overflow. This vuln
StyleSmuggler Exploitation Deploys PSK Agent RAT Against Magento Stores
TL;DR: Between September 9 and September 13, 2026, we detected a coordinated campaign exploiting Magento and Adobe Commerce stores across Western Europe, North America, and the Asia-Pacific region. The activity used /paypal/transparent/resp
CVE-2026-59044 | Google Android use after free
A vulnerability identified as very critical has been detected in Google Android. This vulnerability affects unknown code. The manipulation leads to use after free. This vulnerability is listed as CVE-2026-59044. The attack must be carried o
CVE-2026-120497 – Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows
Bulletin ID: 2026-163-AWS Publication Date: 11/02/2026 11:00 AM PST Description: aidlc-traceability is an open source command-line tool, formerly published in the awslabs/aidlc-workflows repository, that generates traceability-matrix report
CVE-2026-116576 | sebhildebrandt systeminformation up to 5.33.15 Service Processing lib/processes.js services service os command injection (EUVD-2026-110317)
A vulnerability has been found in sebhildebrandt systeminformation up to 5.33.15 and classified as critical. Affected by this issue is the function services of the file lib/processes.js of the component Service Processing. This manipulation
CVE-2021-4187 | vim use after free (EUVD-2021-34047 / Nessus ID 233548)
A vulnerability labeled as critical has been found in vim. This affects an unknown part. The manipulation results in use after free. This vulnerability is cataloged as CVE-2021-4187. The attack may be launched remotely. There is no exploit
CVE-2021-4204 | Linux Kernel eBPF out-of-bounds write (EUVD-2021-34062 / Nessus ID 211841)
A vulnerability classified as critical was found in Linux Kernel. Impacted is an unknown function of the component eBPF. The manipulation results in out-of-bounds write. This vulnerability is reported as CVE-2021-4204. The attack can be lau
CVE-2021-4217 | unzip Unicode String null pointer dereference (EUVD-2021-34075 / Nessus ID 234300)
A vulnerability has been found in unzip and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Unicode String Handler. The manipulation leads to null pointer dereference. This vulnerabilit
CVE-2021-42322 | Microsoft Visual Studio Code privileges management (EUVD-2021-29297)
A vulnerability marked as problematic has been reported in Microsoft Visual Studio Code. This issue affects some unknown processing. This manipulation causes improper privilege management. This vulnerability is handled as CVE-2021-42322. Th
CVE-2026-70388 | RT-Labs AB SOEM up to 2.0.0 allocation of resources (EUVD-2026-109659)
A vulnerability was found in RT-Labs AB SOEM up to 2.0.0. It has been rated as critical. This affects an unknown function. The manipulation leads to allocation of resources. This vulnerability is referenced as CVE-2026-70388. Remote exploit
CVE-2021-43809 | Bundler up to 2.2.32 Gemfile argument injection (GHSA-fj7f-vq84-fh43 / EUVD-2021-2513)
A vulnerability has been found in Bundler up to 2.2.32 and classified as critical. This affects an unknown part of the component Gemfile Handler. Performing a manipulation results in argument injection. This vulnerability is reported as CVE
CVE-2021-43877 | Microsoft ASP.NET Core/Visual Studio privilege escalation (EUVD-2021-30739)
A vulnerability classified as critical has been found in Microsoft ASP.NET Core and Visual Studio. This vulnerability affects unknown code. This manipulation causes privilege escalation. This vulnerability is tracked as CVE-2021-43877. The
CVE-2024-7532 | Google Chrome up to 127.0.6533.88 ANGLE out-of-bounds (ID 350528 / Nessus ID 374924)
A vulnerability labeled as critical has been found in Google Chrome. This issue affects some unknown processing of the component ANGLE. Such manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2024-7532. The attack
CVE-2023-4860 | Google Chrome Skia Remote Code Execution (Nessus ID 374924)
A vulnerability described as critical has been identified in Google Chrome. This impacts an unknown function of the component Skia. Such manipulation leads to Remote Code Execution. This vulnerability is uniquely identified as CVE-2023-4860
CVE-2026-93787 | Linux Kernel up to 6.12.110/6.18.52 smb cifs_filldir out-of-bounds (Nessus ID 374938)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.110/6.18.52. Impacted is the function cifs_filldir of the component smb. Such manipulation leads to out-of-bounds read. This vulnerability is uniquely i
CVE-2026-74283 | Linux Kernel up to 7.1.4 tipc netlink_net_capable permission (Nessus ID 374938)
A vulnerability was found in Linux Kernel up to 7.1.4. It has been rated as problematic. Affected is the function netlink_net_capable of the component tipc. The manipulation leads to permission issues. This vulnerability is uniquely identif
CVE-2026-72083 | Linux Kernel up to 7.2-rc3 SCSI Target Core core_scsi3_emulate_pro_register_and_move use after free (Nessus ID 374938)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.2-rc3. This vulnerability affects the function core_scsi3_emulate_pro_register_and_move of the component SCSI Target Core. The manipulation leads
CVE-2026-53615 | util-linux up to 2.41.3 libblkid dos.c parse_dos_extended integer overflow (Nessus ID 374940)
A vulnerability identified as critical has been detected in util-linux up to 2.41.3. This affects the function parse_dos_extended of the file libblkid/src/partitions/dos.c of the component libblkid. The manipulation leads to integer overflo
CVE-2026-20551 | MediaTek MT2737/MT6813/MT6980D/MT6982/MT6986/MT6988/MT6990 gnss out-of-bounds write (ALPS11309305 / EUVD-2026-115016)
A vulnerability was found in MediaTek MT2737, MT6813, MT6980D, MT6982, MT6986, MT6988 and MT6990. It has been classified as problematic. Affected by this issue is some unknown functionality of the component gnss. The manipulation leads to o
CVE-2026-116122 | NocoDB up to 2026.07.0 Sign-in Endpoint AuthService.validateUser salt information disclosure (Issue 14687 / EUVD-2026-109615)
A vulnerability, which was classified as problematic, has been found in NocoDB up to 2026.07.0. Impacted is the function AuthService.validateUser of the component Sign-in Endpoint. Performing a manipulation of the argument salt results in i
CVE-2026-107030 | CraftXbox YubiClip XOR fork 1.0.1 OTP-clipboard permission (EUVD-2026-113182)
A vulnerability was found in CraftXbox YubiClip XOR fork 1.0.1. It has been classified as critical. Affected by this issue is some unknown functionality of the component OTP-clipboard. Performing a manipulation results in permission issues.
CVE-2026-20554 | MediaTek MT8893 Modem memory corruption (MOLY01911177 / EUVD-2026-115019)
A vulnerability has been found in MediaTek MT2716, MT2735, MT2737, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767, MT6768, MT6769, MT6771, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT687
CVE-2026-120214 | Fastify http-proxy up to 11.6.2 path traversal (EUVD-2026-115115)
A vulnerability was found in Fastify http-proxy up to 11.6.2 and classified as problematic. This impacts an unknown function. Executing a manipulation can lead to path traversal. This vulnerability is registered as CVE-2026-120214. It is po
CVE-2026-106803 | Kamailio 6.1.3/6.1.4 ims_registrar_pcscf process_contact alias stack-based overflow (EUVD-2026-115344)
A vulnerability identified as critical has been detected in Kamailio 6.1.3/6.1.4. Affected by this vulnerability is the function process_contact of the component ims_registrar_pcscf. The manipulation of the argument alias leads to stack-bas
CVE-2026-20566 | MediaTek MT8791 prior MOLY01923663/ALPS11315955 out-of-bounds write (MOLY01923663/ALPS11315955 / EUVD-2026-115031)
A vulnerability was found in MediaTek MT2716, MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6881, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT
CVE-2026-20550 | MediaTek MT6990 gnss out-of-bounds write (ALPS11309816 / EUVD-2026-115015)
A vulnerability has been found in MediaTek MT2735, MT2737, MT6880, MT6890, MT6980D, MT6982, MT6986, MT6988 and MT6990 and classified as problematic. Affected is an unknown function of the component gnss. Performing a manipulation results in
CVE-2026-18800 | WSO2 API Manager Event Publisher Output Adapter information disclosure (EUVD-2026-115114)
A vulnerability, which was classified as problematic, has been found in WSO2 API Manager, API Control Plane, API Manager, Traffic Manager, Universal Gateway, Identity Server, Identity Server as Key Manager, Open Banking IAM, Open Banking AM
CVE-2026-105769 | chainguard-forks kaniko up to 1.25.19 Azure Container Registry Credential Helper incorrect regex (EUVD-2026-115331)
A vulnerability was found in chainguard-forks kaniko up to 1.25.19. It has been rated as critical. This impacts an unknown function of the component Azure Container Registry Credential Helper. Performing a manipulation results in incorrect
CVE-2026-20526 | MediaTek MT8893 out-of-bounds write (MOLY01898195 / EUVD-2026-92201)
A vulnerability was found in MediaTek MT2716, MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6881, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT
CVE-2026-116223 | icret EasyImage up to 2.8.7 app/del.php hash privileges management (Issue 283 / EUVD-2026-109623)
A vulnerability classified as critical was found in icret EasyImage up to 2.8.7. The impacted element is an unknown function of the file app/del.php. Executing a manipulation of the argument hash can lead to improper privilege management. T
CVE-2026-88811 | SUSE Rancher up to 2.15.2 Meta Proxy access control (EUVD-2026-115330)
A vulnerability categorized as critical has been discovered in SUSE Rancher up to 2.11.18/2.12.14/2.13.10/2.14.6/2.15.2. Affected is an unknown function of the component Meta Proxy. Executing a manipulation can lead to improper access contr
Zero-Day-Lücke absichern: 12 Schritte, 60 Min [2026] - shattered.io
Microsoft empfiehlt für Server meist Defender for Servers Plan 2. Starten Sie Server mit einer eigenen Auswahl und Audit. Keine Rückmeldung an die ... Weiterlesen
CVE-2026-99234 | Linux Kernel up to 7.3.0 tracing event_hist_trigger_parse use after free (EUVD-2026-115276)
A vulnerability was found in Linux Kernel up to 7.3.0. It has been classified as critical. This issue affects the function event_hist_trigger_parse of the component tracing. The manipulation leads to use after free. This vulnerability is un
CVE-2026-99233 | Linux Kernel up to 7.3.0 Histograms event_hist_trigger_parse/hist_unreg_all event_call/ref use after free (EUVD-2026-115275)
A vulnerability was found in Linux Kernel up to 7.3.0. It has been declared as very critical. Impacted is the function event_hist_trigger_parse/hist_unreg_all of the component Histograms. The manipulation of the argument event_call/ref resu
CVE-2026-99236 | Linux Kernel up to 7.3.0 tracing predicate_parse out-of-bounds (EUVD-2026-115278)
A vulnerability classified as critical has been found in Linux Kernel up to 7.3.0. This impacts the function predicate_parse of the component tracing. The manipulation leads to out-of-bounds read. This vulnerability is documented as CVE-202
CVE-2026-99235 | Linux Kernel up to 7.3.0 Tracing event_hist_trigger_free use after free (EUVD-2026-115277)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 7.3.0. The impacted element is the function event_hist_trigger_free of the component Tracing. Such manipulation leads to use after free. This vulnerabili
CVE-2026-99239 | Linux Kernel up to 7.3.0 L2CAP __l2cap_chan_add toctou (EUVD-2026-115281)
A vulnerability marked as very critical has been reported in Linux Kernel up to 7.3.0. Affected is the function __l2cap_chan_add of the component L2CAP. The manipulation leads to time-of-check time-of-use. This vulnerability is listed as CV
CVE-2026-99238 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 Tracing trace_module_record locking (EUVD-2026-115280)
A vulnerability identified as very critical has been detected in Linux Kernel up to 6.18.59/7.2.13/7.3.0. This affects the function trace_module_record of the component Tracing. Performing a manipulation results in improper locking. This vu
CVE-2026-99237 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 tracing update_last_data_if_empty race condition (EUVD-2026-115279)
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.59/7.2.13/7.3.0. This impacts the function update_last_data_if_empty of the component tracing. Executing a manipulation can lead to race condition. This vuln
CVE-2026-99241 | Linux Kernel up to 7.2.13 NTFS ntfs_filemap_page_mkwrite race condition (EUVD-2026-115283)
A vulnerability classified as very critical has been found in Linux Kernel up to 7.2.13. Affected by this issue is the function ntfs_filemap_page_mkwrite of the component NTFS. This manipulation causes race condition. This vulnerability is
CVE-2026-99240 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 Damon Core mm/damon/core.c damos_commit_quota_goal target_value divide by zero (EUVD-2026-115282)
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.18.59/7.2.13/7.3.0. The affected element is the function damos_commit_quota_goal of the file mm/damon/core.c of the component Damon Core. Such manipulation of the
CVE-2026-99242 | Linux Kernel up to 7.2.13 ntfs ntfs_attr_fallocate information disclosure (EUVD-2026-115284)
A vulnerability identified as problematic has been detected in Linux Kernel up to 7.2.13. Impacted is the function ntfs_attr_fallocate of the component ntfs. This manipulation causes information disclosure. This vulnerability is tracked as
CVE-2026-62989 | Shopper Labs up to 2.9.x Variants Livewire Variants.php callTableAction/callTableBulkAction privileges management (EUVD-2026-114510)
A vulnerability labeled as problematic has been found in Shopper Labs Shopper up to 2.9.x. Affected by this vulnerability is the function callTableAction/callTableBulkAction of the file packages/admin/src/Livewire/Components/Products/Form/V
CVE-2026-119329 | Immich App up to 2.x Map Service map.service.ts information disclosure (EUVD-2026-114376)
A vulnerability classified as problematic was found in Immich App Immich up to 2.x. Affected by this vulnerability is an unknown functionality of the file server/src/services/map.service.ts of the component Map Service. Executing a manipula
CVE-2026-53614 | Linux util-linux mount privileges management (Nessus ID 374940)
A vulnerability was found in Linux util-linux. It has been rated as very critical. Affected is the function mount. The manipulation leads to improper privilege management. This vulnerability is referenced as CVE-2026-53614. The attack can o