Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 785 | 0,2 % |
| ≥50 % | 3.559 | 0,9 % |
| ≥10 % | 13.139 | 3,2 % |
| <10 % | 396.072 | 95,8 % |
CVE-2026-97193 | Secure Custom Fields Plugin up to 6.9.7 on WordPress Bidirectional Relationship Synchronization authorization (EUVD-2026-119462)
A vulnerability labeled as problematic has been found in Secure Custom Fields Plugin up to 6.9.7 on WordPress. This affects an unknown function of the component Bidirectional Relationship Synchronization. The manipulation results in authori
CVE-2026-97192 | Secure Custom Fields Plugin up to 6.9.7 on WordPress Field Group Location Rules access control (EUVD-2026-119461)
A vulnerability classified as critical has been found in Secure Custom Fields Plugin up to 6.9.7 on WordPress. This affects an unknown function of the component Field Group Location Rules. This manipulation causes improper access controls.
CVE-2026-97195 | Secure Custom Fields Plugin up to 6.9.7 on WordPress Field Definition cross site scripting (EUVD-2026-119464)
A vulnerability was found in Secure Custom Fields Plugin up to 6.9.7 on WordPress and classified as problematic. This affects an unknown part of the component Field Definition. The manipulation results in cross site scripting. This vulnerab
CVE-2026-97194 | Secure Custom Fields Plugin up to 6.9.7 on WordPress Relational Fields information disclosure (EUVD-2026-119463)
A vulnerability, which was classified as problematic, has been found in Secure Custom Fields Plugin up to 6.9.7 on WordPress. Affected is an unknown function of the component Relational Fields. Performing a manipulation results in informati
CVE-2026-96961 | Pie Register Plugin up to 3.8.4.15 on WordPress Request authorization (EUVD-2026-119466)
A vulnerability has been found in Pie Register Plugin up to 3.8.4.15 on WordPress and classified as critical. This issue affects some unknown processing of the component Request Handler. This manipulation causes missing authorization. The i
CVE-2026-103375 | Antom Payments Plugin up to 2.0.11 on WordPress authorization (EUVD-2026-119465)
A vulnerability classified as problematic was found in Antom Payments Plugin up to 2.0.11 on WordPress. Affected by this issue is some unknown functionality. Executing a manipulation can lead to authorization bypass. This vulnerability is h
CVE-2026-96963 | Pie Register Plugin up to 3.8.4.15 on WordPress authorization (EUVD-2026-119467)
A vulnerability was found in Pie Register Plugin up to 3.8.4.15 on WordPress. It has been classified as critical. The affected element is an unknown function. Performing a manipulation results in missing authorization. This vulnerability is
CVE-2026-122060 | WP Recipe Maker Plugin up to 10.9.1 on WordPress information disclosure (EUVD-2026-119457)
A vulnerability, which was classified as problematic, was found in WP Recipe Maker Plugin up to 10.9.1 on WordPress. This vulnerability affects unknown code. The manipulation results in information disclosure. This vulnerability was named C
CVE-2026-122062 | Pronamic Pay Plugin/Pronamic Pay doneren met Mollie Plugin on WordPress REST API information disclosure (EUVD-2026-119458)
A vulnerability was found in Pronamic Pay Plugin and Pronamic Pay doneren met Mollie Plugin on WordPress. It has been declared as problematic. This issue affects some unknown processing of the component REST API. Such manipulation leads to
CVE-2026-122085 | WooCommerce Event Tickets Manager for WooCommerce Plugin up to 1.5.x on WordPress Ticket Transfer Feature authorization (EUVD-2026-119459)
A vulnerability identified as critical has been detected in WooCommerce Event Tickets Manager for WooCommerce Plugin up to 1.5.x on WordPress. The impacted element is an unknown function of the component Ticket Transfer Feature. The manipul
CVE-2026-124504 | erupts erupt up to 2.3.0 ReportService.java ReportService.queryBiData sort sql injection (ID 485 / EUVD-2026-119760)
A vulnerability marked as critical has been reported in erupts erupt up to 2.3.0. Affected by this issue is the function ReportService.queryBiData of the file ReportService.java. Performing a manipulation of the argument sort results in sql
CVE-2026-124505 | Dianping CAT 3.0.0/3.1.0/4.0-RC1 Login/Logout Handler.java Handler.redirect rtnUrl (EUVD-2026-119761)
A vulnerability described as problematic has been identified in Dianping CAT 3.0.0/3.1.0/4.0-RC1. This affects the function Handler.redirect of the file Handler.java of the component Login/Logout. Executing a manipulation of the argument rt
CVE-2026-124501 | Tidelift moto up to 5.2.4 AWS Batch Emulation moto/batch/models.py privileged/volumes privileges management (EUVD-2026-119758)
A vulnerability identified as critical has been detected in Tidelift moto up to 5.2.4. Affected is an unknown function of the file moto/batch/models.py of the component AWS Batch Emulation. This manipulation of the argument privileged/volum
CVE-2026-98974 | Linux Kernel up to 6.12.113/6.18.56/7.2.10 XFS xmi_can_exchange_reflink_flags information disclosure (Nessus ID 377500)
A vulnerability marked as problematic has been reported in Linux Kernel up to 6.12.113/6.18.56/7.2.10. This affects the function xmi_can_exchange_reflink_flags of the component XFS. This manipulation causes information disclosure. The ident
CVE-2026-90315 | Linux Kernel up to 7.2.5 locking (Nessus ID 377500)
A vulnerability marked as critical has been reported in Linux Kernel up to 7.2.5. This affects the function pci_write_legacy_io/pci_mmap_legacy_mem/pci_mmap_legacy_io. This manipulation causes improper locking. This vulnerability is tracked
CVE-2026-80863 | Linux Kernel up to 7.2.2 RDMA/rxe rxe_qp.c free_rd_atomic_resources out-of-bounds (Nessus ID 377506)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.2.2. Affected is the function free_rd_atomic_resources of the file drivers/infiniband/sw/rxe/rxe_qp.c of the component RDMA/rxe. The manipulation
CVE-2026-80864 | Linux Kernel up to 6.12.107/6.18.48/7.1.12/7.2.2 RDMA/rxe rxe_resp.c rxe_qp_from_attr/rxe_receiver use after free (Nessus ID 377506)
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.12.107/6.18.48/7.1.12/7.2.2. This issue affects the function rxe_qp_from_attr/rxe_receiver of the file rxe_resp.c of the component RDMA/rxe. Executing a
CVE-2026-91203 | Cockpit Files race condition (Nessus ID 377511)
A vulnerability has been found in Cockpit and classified as very critical. The affected element is an unknown function of the component Files. Performing a manipulation results in race condition. This vulnerability is known as CVE-2026-9120
CVE-2026-80584 | Linux Kernel up to 7.1.9 s390 qeth qeth_snmp_command udata_len buffer overflow (Nessus ID 377513)
A vulnerability marked as critical has been reported in Linux Kernel up to 7.1.9. This affects the function qeth_snmp_command of the component s390 qeth. The manipulation of the argument udata_len leads to buffer overflow. This vulnerabilit
CVE-2026-80571 | Linux Kernel up to 6.18.45/7.1.9 papr-phy-attest papr_phy_attest_create_handle cmd.length buffer overflow (Nessus ID 377513)
A vulnerability was found in Linux Kernel up to 6.18.45/7.1.9 and classified as very critical. Affected by this vulnerability is the function papr_phy_attest_create_handle of the component papr-phy-attest. The manipulation of the argument c
CVE-2026-85344 | Flowplayer FV Flowplayer Video Player Plugin 7.5.55.7212/7.5.56.7212 on WordPress authorization (EUVD-2026-119460)
A vulnerability, which was classified as problematic, has been found in Flowplayer FV Flowplayer Video Player Plugin 7.5.55.7212/7.5.56.7212 on WordPress. This affects an unknown part. The manipulation leads to missing authorization. This v
CVE-2026-101371 | Oracle REST Data Services up to 26.1.0 Core improper authorization (EUVD-2026-105787)
A vulnerability categorized as problematic has been discovered in Oracle REST Data Services up to 26.1.0. The affected element is an unknown function of the component Core. Executing a manipulation can lead to improper authorization. This v
CVE-2026-101370 | Oracle REST Data Services up to 26.1.0 Core information disclosure (EUVD-2026-105786)
A vulnerability marked as problematic has been reported in Oracle REST Data Services up to 26.1.0. This impacts an unknown function of the component Core. This manipulation causes information disclosure. This vulnerability is handled as CVE
CVE-2026-101369 | Oracle REST Data Services up to 26.1.0 Backend-as-a-Service access control (EUVD-2026-105785)
A vulnerability identified as critical has been detected in Oracle REST Data Services up to 26.1.0. The impacted element is an unknown function of the component Backend-as-a-Service. The manipulation leads to improper access controls. This
CVE-2026-101372 | Oracle REST Data Services up to 26.1.0 Core information disclosure (EUVD-2026-105788)
A vulnerability labeled as problematic has been found in Oracle REST Data Services up to 26.1.0. This affects an unknown function of the component Core. The manipulation results in information disclosure. This vulnerability is known as CVE-
CVE-2026-101477 | Oracle Autonomous Health Framework up to 26.8 Trace File Analyzer privileges management (EUVD-2026-105893)
A vulnerability classified as very critical has been found in Oracle Autonomous Health Framework up to 26.8. This affects an unknown part of the component Trace File Analyzer. This manipulation causes improper privilege management. This vul
CVE-2026-101452 | Oracle Autonomous Health Framework up to 26.8 AHF Instant Diagnostic Replay privileges management (EUVD-2026-105868)
A vulnerability was found in Oracle Autonomous Health Framework up to 26.8. It has been rated as very critical. Affected by this issue is some unknown functionality of the component AHF Instant Diagnostic Replay. Performing a manipulation r
CVE-2026-101478 | Oracle Autonomous Health Framework up to 26.8 Trace File Analyzer privileges management (EUVD-2026-105894)
A vulnerability, which was classified as very critical, has been found in Oracle Autonomous Health Framework up to 26.8. This issue affects some unknown processing of the component Trace File Analyzer. Performing a manipulation results in i
CVE-2026-124499 | Fengoffice Feng Office up to 3.11.13.11/4.2.1.2 Translation Tool ToolController.class.php write_translations lang code injection (EUVD-2026-119756)
A vulnerability was found in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. It has been rated as problematic. This affects the function write_translations of the file application/controllers/ToolController.class.php of the component Trans
CVE-2026-124500 | Fengoffice Feng Office up to 3.11.13.11/4.2.1.2 File FilesController.class.php upload_document_image url server-side request forgery (EUVD-2026-119755)
A vulnerability categorized as critical has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This impacts the function upload_document_image of the file application/controllers/FilesController.class.php of the component F
CVE-2026-18093 | IBM App Connect Enterprise up to 13.0.8.2 access control (WID-SEC-2026-4383)
A vulnerability was found in IBM App Connect Enterprise up to 13.0.8.2. It has been declared as problematic. Affected is an unknown function. Executing a manipulation can lead to improper access controls. This vulnerability is registered as
CVE-2026-72813 | actix actix-files up to 0.6.9 Range resource consumption (Nessus ID 377516)
A vulnerability was found in actix actix-files up to 0.6.9. It has been declared as problematic. The impacted element is an unknown function. Such manipulation of the argument Range leads to resource consumption. This vulnerability is refer
CVE-2026-48057 | Randombit Botan up to 3.12.x X.509 Distinguished Name Decoder certificate validation (Nessus ID 377525)
A vulnerability was found in Randombit Botan up to 3.12.x. It has been declared as problematic. Affected by this issue is some unknown functionality of the component X.509 Distinguished Name Decoder. Such manipulation leads to improper cert
CVE-2026-99277 | Linux Kernel up to 7.3.1 ksmbd ksmbd_session_unregister use after free (Nessus ID 377526)
A vulnerability marked as very critical has been reported in Linux Kernel up to 7.3.1. The affected element is the function ksmbd_session_unregister of the component ksmbd. This manipulation causes use after free. This vulnerability is regi
CVE-2026-99271 | Linux Kernel up to 6.18.60/7.3.1 ALSA line6 playback.c submit_audio_out_urb prev_fbuf use after free (Nessus ID 377528)
A vulnerability was found in Linux Kernel up to 6.18.60/7.3.1. It has been classified as critical. Affected by this vulnerability is the function submit_audio_out_urb of the file sound/usb/line6/playback.c of the component ALSA line6. This
CVE-2026-124040 | CivetWeb up to 1.16 handle_http2 use after free (Nessus ID 377527)
A vulnerability classified as critical was found in CivetWeb up to 1.16. Impacted is the function handle_http2. The manipulation results in use after free. This vulnerability is identified as CVE-2026-124040. The attack can be executed remo
CVE-2026-99278 | Linux Kernel up to 7.3.1 ksmbd allocation of resources (Nessus ID 377529)
A vulnerability was found in Linux Kernel up to 7.3.1. It has been declared as critical. Affected by this issue is some unknown functionality of the component ksmbd. Such manipulation leads to allocation of resources. This vulnerability is
CVE-2026-99276 | Linux Kernel up to 7.3.1 ksmbd destroy_previous_session locking (Nessus ID 377530)
A vulnerability described as critical has been identified in Linux Kernel up to 7.3.1. The impacted element is the function destroy_previous_session of the component ksmbd. Such manipulation leads to improper locking. This vulnerability is
CVE-2026-103022 | Urwid up to 4.0.6 Web Display Interface urwid/display/web.py handle_short_request denial of service (Nessus ID 377531)
A vulnerability was found in Urwid up to 4.0.6 and classified as problematic. Affected is the function handle_short_request of the file urwid/display/web.py of the component Web Display Interface. The manipulation results in denial of servi
CVE-2026-16682 | IBM OPENBMC/Hardware Management Console up to OP940.00-OP940.A2 uninitialized resource (EUVD-2026-119742)
A vulnerability categorized as critical has been discovered in IBM OPENBMC and Hardware Management Console. The impacted element is an unknown function. Executing a manipulation can lead to uninitialized resource. This vulnerability is regi
CVE-2026-101493 | Oracle REST Data Services up to 26.2.1 Core improper authorization (EUVD-2026-105909)
A vulnerability was found in Oracle REST Data Services up to 26.2.1. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component Core. Performing a manipulation results in improper authori
CVE-2026-101485 | Oracle Autonomous Health Framework up to 26.8 Trace File Analyzer improper authorization (EUVD-2026-105901)
A vulnerability was found in Oracle Autonomous Health Framework up to 26.8. It has been classified as problematic. This affects an unknown function of the component Trace File Analyzer. This manipulation causes improper authorization. This
CVE-2026-17426 | IBM Power Systems Firmware up to FW1060.81 denial of service (EUVD-2026-119744)
A vulnerability labeled as critical has been found in IBM Power Systems Firmware up to FW1060.81. This impacts an unknown function. The manipulation results in denial of service. This vulnerability is reported as CVE-2026-17426. The attack
CVE-2026-16697 | IBM OPENBMC/Power Hardware Management Console Firmware allocation of resources (EUVD-2026-119743)
A vulnerability marked as critical has been reported in IBM OPENBMC and Power Hardware Management Console FW1060.00-FW1060.81/OP940.00-OP940.A2/OP910.00-OP910.95/OP940.00-OP940.82. Affected is an unknown function of the component Firmware.
CVE-2026-101494 | Oracle REST Data Services up to 26.2.2 Core privileges management (EUVD-2026-105910)
A vulnerability was found in Oracle REST Data Services up to 26.2.2 and classified as problematic. Affected is an unknown function of the component Core. Such manipulation leads to improper privilege management. This vulnerability is traded
CVE-2026-17427 | IBM OPENBMC/Power Hardware Management Console up to FW1060.81/OP940.A2/OP910.95/OP940.82 denial of service (EUVD-2026-119745)
A vulnerability identified as critical has been detected in IBM OPENBMC and Power Hardware Management Console up to FW1060.81/OP940.A2/OP910.95/OP940.82. This affects an unknown function. The manipulation leads to denial of service. This vu
CVE-2026-101504 | Oracle Trusted Answer Search 26.1 Application expert UI improper authorization (EUVD-2026-105919)
A vulnerability was found in Oracle Trusted Answer Search 26.1. It has been declared as problematic. This issue affects some unknown processing of the component Application expert UI. The manipulation results in improper authorization. This
CVE-2026-101498 | Oracle Trusted Answer Search 26.1 PLSQL package privileges management (EUVD-2026-105913)
A vulnerability was found in Oracle Trusted Answer Search 26.1. It has been rated as very critical. This affects an unknown part of the component PLSQL package. The manipulation leads to improper privilege management. This vulnerability is
CVE-2026-101505 | Oracle Trusted Answer Search 26.1 Application expert UI improper authorization (EUVD-2026-105920)
A vulnerability was found in Oracle Trusted Answer Search 26.1. It has been rated as problematic. Impacted is an unknown function of the component Application expert UI. This manipulation causes improper authorization. This vulnerability is
CVE-2026-101506 | Oracle Trusted Answer Search 26.1 Application expert UI privileges management (EUVD-2026-105921)
A vulnerability has been found in Oracle Trusted Answer Search 26.1 and classified as problematic. Affected by this issue is some unknown functionality of the component Application expert UI. Performing a manipulation results in improper pr
CVE-2026-101522 | Oracle TimesTen In-Memory Database up to 22.1.1.43.0 TimesTen IMDB improper authorization (EUVD-2026-105935)
A vulnerability was found in Oracle TimesTen In-Memory Database up to 22.1.1.43.0. It has been classified as problematic. The affected element is an unknown function of the component TimesTen IMDB. This manipulation causes improper authoriz
CVE-2026-101507 | Oracle Trusted Answer Search 26.1 PLSQL package improper authorization (EUVD-2026-105922)
A vulnerability was found in Oracle Trusted Answer Search 26.1 and classified as problematic. This affects an unknown part of the component PLSQL package. Executing a manipulation can lead to improper authorization. This vulnerability appea
CVE-2026-101577 | Oracle Helidon up to 4.5.5 helidon-cors improper authorization (EUVD-2026-105985)
A vulnerability identified as problematic has been detected in Oracle Helidon up to 4.5.5. This affects an unknown function of the component helidon-cors. The manipulation leads to improper authorization. This vulnerability is traded as CVE
CVE-2026-101573 | Oracle Helidon up to 3.2.21/4.5.5/27.0.0 helidon-security-providers-http-auth improper authorization (EUVD-2026-105981)
A vulnerability identified as problematic has been detected in Oracle Helidon up to 3.2.21/4.5.5/27.0.0. Impacted is an unknown function of the component helidon-security-providers-http-auth. Performing a manipulation results in improper au
CVE-2026-6064 | Gen Digital AVG Internet Security up to 26.4 Data Shredder privileges management (EUVD-2026-111873)
A vulnerability identified as critical has been detected in Gen Digital AVG Internet Security, Avast Antivirus and Norton Antivirus up to 26.4. Affected by this issue is some unknown functionality of the component Data Shredder. The manipul
CVE-2026-103407 | Juniper Networks Session Smart Router/Session Smart Conductor up to 7.0.4/7.1.6/7.2.2 ConfigDirector path traversal (EUVD-2026-112214)
A vulnerability described as very critical has been identified in Juniper Networks Session Smart Router and Session Smart Conductor up to 7.0.4/7.1.6/7.2.2. This affects an unknown part of the component ConfigDirector. The manipulation resu
CVE-2026-96146 | IBM SevOne Network Performance Management up to 8.2.2 resource consumption (EUVD-2026-119747)
A vulnerability described as critical has been identified in IBM SevOne Network Performance Management up to 8.2.2. Affected by this vulnerability is an unknown functionality. Such manipulation leads to resource consumption. This vulnerabil
CVE-2026-95867 | IBM SevOne Network Performance Management up to 8.2.2 buffer overflow (EUVD-2026-119746)
A vulnerability classified as problematic has been found in IBM SevOne Network Performance Management up to 8.2.2. Affected by this issue is some unknown functionality. Performing a manipulation results in buffer overflow. This vulnerabilit
CVE-2026-118904 | IBM webMethods Integration Server 12.1 improper authentication (EUVD-2026-119748)
A vulnerability classified as critical was found in IBM webMethods Integration Server 12.1. This affects an unknown part. Executing a manipulation can lead to improper authentication. This vulnerability is handled as CVE-2026-118904. The at
CVE-2026-18893 | IBM CockroachDB PostgreSQL for VPC up to 25.2.20/25.4.12/26.2.3 privileges management (EUVD-2026-119705)
A vulnerability identified as problematic has been detected in IBM CockroachDB PostgreSQL for VPC up to 25.2.20/25.4.12/26.2.3. This affects an unknown part. This manipulation causes improper privilege management. This vulnerability appears