Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 730 | 0,2 % |
| ≥50 % | 3.215 | 0,9 % |
| ≥10 % | 22.094 | 5,9 % |
| <10 % | 348.048 | 93,0 % |
PHP2Shell: What to know about two critical PHP flaws
Here's the lowdown on CVE-2026-109618 and CVE-2026-109619, as well as what website owners and IT teams should do to stay safe – all in a little more than two minutes This article has been indexed from WeLiveSecurity Read the original a
Palo Alto Confirms Brotli Vulnerability Impact on PAN-OS and Releases Workarounds
Palo Alto Networks has confirmed that a critical Brotli vulnerability affects some PAN-OS firewall deployments and its Prisma Cloud Application Security Transporter Client. Tracked as CVE-2026-111497, the flaw could let an attacker corrupt
CVE-2026-33759 | WWBN AVideo up to 26.0 playlistsVideos.json.php playlists_id authorization
A vulnerability marked as problematic has been reported in WWBN AVideo up to 26.0. This vulnerability affects unknown code of the file objects/playlistsVideos.json.php. This manipulation of the argument playlists_id causes missing authoriza
CVE-2026-33755 | Intermesh GroupOffice up to 6.8.157/25.0.91/26.0.16 Contact/query sql injection
A vulnerability categorized as critical has been discovered in Intermesh GroupOffice up to 6.8.157/25.0.91/26.0.16. This vulnerability affects unknown code of the file Contact/query. The manipulation results in sql injection. This vulnerabi
CVE-2026-33284 | globaleaks globaleaks-whistleblowing-software up to 5.0.88 /api/support input validation
A vulnerability was found in globaleaks globaleaks-whistleblowing-software up to 5.0.88. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the file /api/support. Performing a manipulation r
CVE-2026-1496 | Black Duck Coverity up to 2025.12.0 API Endpoint /token authorization
A vulnerability was found in Black Duck Coverity up to 2024.12.1/2025.3.1/2025.6.3/2025.9.2/2025.12.0. It has been declared as critical. This impacts an unknown function of the file /token of the component API Endpoint. Such manipulation le
CVE-2026-4309 | NEC Platforms Aterm W1200EX Setting authorization
A vulnerability, which was classified as critical, has been found in NEC Platforms Aterm W1200EX, Aterm WG1200HP2, Aterm WG1900HP, Aterm WG1200HS2, Aterm WG1800HP3, Aterm WG1200HP3, Aterm WG1900HP2, Aterm WG1200HS3, Aterm WG1800HP4, Aterm W
CVE-2026-3457 | Thales Sentinel LDK Runtime up to 10.21 on Windows cross site scripting (KB0027106)
A vulnerability classified as problematic was found in Thales Sentinel LDK Runtime up to 10.21 on Windows. Impacted is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is traded as CVE-2026-3457. An a
CVE-2026-33366 | Buffalo Wi-Fi Router missing authentication
A vulnerability, which was classified as critical, has been found in Buffalo Wi-Fi Router. This affects an unknown function. Performing a manipulation results in missing authentication. This vulnerability was named CVE-2026-33366. The attac
CVE-2026-33280 | Buffalo Wi-Fi Router backdoor
A vulnerability categorized as critical has been discovered in Buffalo Wi-Fi Router. Affected by this issue is some unknown functionality. Such manipulation leads to backdoor. This vulnerability is documented as CVE-2026-33280. The attack c
CVE-2026-32678 | Buffalo Wi-Fi Router Setting authentication bypass
A vulnerability classified as critical was found in Buffalo Wi-Fi Router. The impacted element is an unknown function of the component Setting Handler. Such manipulation leads to authentication bypass using alternate channel. This vulnerabi
CVE-2026-32669 | Buffalo Wi-Fi Router code injection
A vulnerability described as critical has been identified in Buffalo Wi-Fi Router. Impacted is an unknown function. The manipulation results in code injection. This vulnerability is known as CVE-2026-32669. It is possible to launch the atta
CVE-2026-27650 | Buffalo Wi-Fi Router os command injection
A vulnerability marked as critical has been reported in Buffalo Wi-Fi Router. This issue affects some unknown processing. The manipulation leads to os command injection. This vulnerability is traded as CVE-2026-27650. It is possible to init
CVE-2026-22744 | VMware Spring AI up to 1.0.4/1.1.3 RedisFilterExpressionConverter stringValue information disclosure
A vulnerability was found in VMware Spring AI up to 1.0.4/1.1.3. It has been rated as problematic. Affected by this vulnerability is the function stringValue of the component RedisFilterExpressionConverter. This manipulation causes informat
CVE-2026-0747 | Devolutions Remote Desktop Manager up to 2025.3.28.0 on Windows information disclosure (DEVO-2026-0002 / Nessus ID 286266)
A vulnerability was found in Devolutions Remote Desktop Manager up to 2025.3.28.0 on Windows and classified as problematic. The impacted element is an unknown function. Executing a manipulation can lead to information disclosure. The identi
CVE-2026-0719 | libsoup NTLM md4sum stack-based overflow (ID 477 / EUVD-2026-1573)
A vulnerability classified as critical was found in libsoup. The impacted element is the function md4sum of the component NTLM. The manipulation results in stack-based buffer overflow. This vulnerability is identified as CVE-2026-0719. The
CVE-2026-0707 | Keycloak on Red Hat Authorization Header authorization before parsing and canonicalization (Nessus ID 300554 / WID-SEC-2026-0034)
A vulnerability, which was classified as problematic, has been found in Keycloak on Red Hat. This impacts an unknown function of the component Authorization Header Handler. The manipulation leads to authorization before parsing and canonica
CVE-2026-0701 | code-projects Intern Membership Management System 1.0 add_admin.php username sql injection
A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /intern/admin/add_admin.php. The manipulation
CVE-2026-0700 | code-projects Intern Membership Management System 1.0 check_admin.php username sql injection
A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /intern/admin/check_admin.php. Executing a manipulation of the argument Username can lead
CVE-2026-20026 | Cisco Secure Firewall Threat Defense Software Snort 3 Detection Engine double free (cisco-sa-snort3-dcerpc-vulns-J9HNF4tH / WID-SEC-2026-0041)
A vulnerability, which was classified as problematic, has been found in Cisco Secure Firewall Threat Defense Software and UTD SNORT IPS Engine Software. The impacted element is an unknown function of the component Snort 3 Detection Engine.
CVE-2026-0650 | OpenFlagr up to 1.1.18 HTTP Middleware missing authentication
A vulnerability described as critical has been identified in OpenFlagr Flagr up to 1.1.18. Affected is an unknown function of the component HTTP Middleware. Executing a manipulation can lead to missing authentication. This vulnerability app
CVE-2026-0642 | projectworlds House Rental and Property Listing 1.0 /app/complaint.php name cross site scripting (EUVD-2026-1142)
A vulnerability, which was classified as problematic, was found in projectworlds House Rental and Property Listing 1.0. This issue affects some unknown processing of the file /app/complaint.php. The manipulation of the argument Name results
CVE-2026-0641 | TOTOLINK WA300 5.2cu.7112_B20190227 cstecgi.cgi sub_401510 UPLOAD_FILENAME command injection (EUVD-2026-0958)
A vulnerability, which was classified as critical, has been found in TOTOLINK WA300 5.2cu.7112_B20190227. This vulnerability affects the function sub_401510 of the file cstecgi.cgi. The manipulation of the argument UPLOAD_FILENAME leads to
CVE-2026-0640 | Tenda AC23 16.03.07.52 /goform/PowerSaveSet sscanf time buffer overflow
A vulnerability classified as critical was found in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. This vulnerability is
CVE-2026-0628 | Google Chrome up to 143.0.7499.146 WebView Tag authorization (Nessus ID 281895 / WID-SEC-2026-0020)
A vulnerability was found in Google Chrome and classified as critical. Affected is an unknown function of the component WebView Tag Handler. The manipulation results in missing authorization. This vulnerability is identified as CVE-2026-062
CVE-2026-0618 | Devolutions PowerShell Universal up to 4.5.5/5.6.12 cross site scripting (DEVO-2026-0001)
A vulnerability described as problematic has been identified in Devolutions PowerShell Universal up to 4.5.5/5.6.12. Impacted is an unknown function. The manipulation results in cross site scripting. This vulnerability is known as CVE-2026-
CVE-2026-0578 | code-projects Online Product Reservation System 1.0 delete.php id sql injection (EUVD-2026-0779 / CNNVD-202601-795)
A vulnerability has been found in code-projects Online Product Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /handgunner-administrator/delete.php. The manipulation of the
CVE-2025-65877 | Lvzhou CMS title sql injection (EUVD-2025-200301)
A vulnerability labeled as critical has been found in Lvzhou CMS. This impacts an unknown function of the component com.wanli.lvzhoucms.service.ContentService#findPage. The manipulation of the argument Title results in sql injection. This v
CVE-2025-65656 | Dcat-Admin up to 2.2.3-beta VersionManager.php file inclusion
A vulnerability identified as problematic has been detected in Dcat-Admin up to 2.2.3-beta. Affected is an unknown function of the file admin/src/Extend/VersionManager.php. The manipulation leads to file inclusion. This vulnerability is doc
CVE-2025-65358 | edoc-doctor-appointment-system 1.0.1 /admin/appointment.php docid sql injection
A vulnerability categorized as critical has been discovered in edoc-doctor-appointment-system 1.0.1. This impacts an unknown function of the file /admin/appointment.php. Executing a manipulation of the argument docid can lead to sql injecti
CVE-2025-63528 | Blood Bank Management System 1.0 blooddinfo.php error cross site scripting
A vulnerability has been found in Blood Bank Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file blooddinfo.php. Performing a manipulation of the argument Error results
CVE-2025-63499 | Alinto Sogo 5.12.3 theme cross site scripting (EUVD-2025-201283 / Nessus ID 277525)
A vulnerability classified as problematic has been found in Alinto Sogo 5.12.3. This impacts an unknown function. Performing a manipulation of the argument theme results in cross site scripting. This vulnerability is identified as CVE-2025-
CVE-2025-63365 | SoftSea EPUB File Reader 1.0.0.0 EPUB File Parser path traversal
A vulnerability labeled as critical has been found in SoftSea EPUB File Reader 1.0.0.0. Impacted is an unknown function of the component EPUB File Parser. Executing a manipulation can lead to path traversal. This vulnerability is registered
CVE-2025-51735 | HCL Unica 12.0.0 csv injection
A vulnerability categorized as problematic has been discovered in HCL Unica 12.0.0. This vulnerability affects unknown code. Executing a manipulation can lead to csv injection. The identification of this vulnerability is CVE-2025-51735. The
CVE-2025-46175 | y_project RuoYi 4.8.0 SysUserController.java authRole access control (EUVD-2025-199727)
A vulnerability categorized as critical has been discovered in y_project RuoYi 4.8.0. The affected element is the function authRole of the file SysUserController.java. Such manipulation leads to improper access controls. This vulnerability
CVE-2026-116605 | A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. The exploit has been made public and could be used.
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side s
CVE-2026-116604 | A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete_admin.php. The manipulation of the argument ID leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete_admin.php. The manipulation of the argument ID leads to missing authentication. It is pos
CVE-2026-116603 | A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/add_food.php. Executing a manipulation of the argument image can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may be used.
A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/add_food.php. Executing a manipulation of the argument image can lead to unrestricted upload. The attack may be perfo
CVE-2026-63512 | Microsoft SharePoint Server improper authorization (EUVD-2026-56296)
A vulnerability labeled as problematic has been found in Microsoft SharePoint Server. Affected by this issue is some unknown functionality. Executing a manipulation can lead to improper authorization. This vulnerability is registered as CVE
CVE-2026-63520 | Microsoft SharePoint Server input validation (EUVD-2026-56298)
A vulnerability was found in Microsoft SharePoint Server. It has been declared as critical. This vulnerability affects unknown code. Executing a manipulation can lead to improper input validation. The identification of this vulnerability is
CVE-2026-63516 | Microsoft SharePoint Server deserialization (EUVD-2026-56297)
A vulnerability was found in Microsoft SharePoint Server. It has been classified as critical. This affects an unknown part. Performing a manipulation results in deserialization. This vulnerability was named CVE-2026-63516. The attack may be
CVE-2026-72970 | Microsoft Edge up to 151.0.4129.78 buffer overflow (EUVD-2026-58754)
A vulnerability classified as critical has been found in Microsoft Edge. The impacted element is an unknown function. This manipulation causes buffer overflow. This vulnerability is tracked as CVE-2026-72970. The attack is possible to be ca
CVE-2026-50515 | Microsoft Azure Service Bus deserialization (EUVD-2026-54324)
A vulnerability classified as critical has been found in Microsoft Azure Service Bus. This affects an unknown part. The manipulation leads to deserialization. This vulnerability is documented as CVE-2026-50515. The attack can be initiated r
CVE-2026-65801 | Microsoft Exchange Online server-side request forgery (EUVD-2026-63689)
A vulnerability was found in Microsoft Exchange Online and classified as critical. Impacted is an unknown function. Such manipulation leads to server-side request forgery. This vulnerability is uniquely identified as CVE-2026-65801. The att
CVE-2026-116828 | YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placed in an unquoted INTERVAL position. Authenticated administrators can inject SQL via the from POST parameter to perform blind reads of the database including user password hashes.
YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but placed in an unquoted INTERVAL position. Authenticated administrators can inject SQL via the from POST parameter to perform bl
CVE-2026-116827 | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() function that allows authenticated administrators to make arbitrary outbound requests by supplying crafted URLs in CSV file or image fields. Attackers can bypass the extension check with a query-string suffix or redirects to fetch cloud metadata credentials, internal services, or local files via file://, with responses stored in the web-acce
YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile() function that allows authenticated administrators to make arbitrary outbound requests by supplying crafted URLs in CSV fi
CVE-2026-116826 | YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that allows authenticated administrators to make arbitrary outbound requests via the files array. Attackers can POST file:// or internal URLs to /api/pages/{tag}/duplicate, storing local files, cloud metadata, or database credentials in the publicly accessible files/ directory.
YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that allows authenticated administrators to make arbitrary outbound requests via the files array. Attackers can POST file:// or
CVE-2026-116825 | YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validates the Date header or tracks seen signatures. Attackers who capture a signed request to the /api/forms/{formId}/actor/inbox endpoint can replay it later to re-execute Delete, Update, Follow, or Undo actions.
YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never validates the Date header or tracks seen signatures. Attackers who capture a signed request to the /api/forms/{formId}/actor/inb
CVE-2026-116824 | YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that allows unauthenticated attackers to inject scripts via crafted Referer headers. Attackers can send a Referer hostname containing HTML metacharacters that renders unescaped, executing JavaScript for any referrer-sites page visitor to perform same-origin authenticated actions.
YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that allows unauthenticated attackers to inject scripts via crafted Referer headers. Attackers can send a Referer hostname contai
CVE-2026-116823 | YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject JavaScript by supplying query parameters matching missing Bazar field names. Attackers can craft links where BazarField::getValue() falls back to unsanitized $_REQUEST values rendered via Twig |raw templates, performing same-origin authenticated actions in victims' sessions.
YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject JavaScript by supplying query parameters matching missing Bazar field names. Attackers can craft links where BazarF
CVE-2026-116822 | YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers to select arbitrary templates within the @bazar Twig namespace via the template GET parameter. Attackers can append crafted template values to pages containing the bazarliste action to force unintended layouts, causing page defacement for visitors following the crafted link.
YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers to select arbitrary templates within the @bazar Twig namespace via the template GET parameter. Attackers can append craft
CVE-2026-116821 | YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which interpolates usernames into SQL LIKE patterns without escaping the _ and % wildcards. Self-registered attackers can use usernames such as ___ or %%% that over-match ACL tokens, reading pages and Bazar entries restricted to other users or groups via the public Bazar listing API.
YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which interpolates usernames into SQL LIKE patterns without escaping the _ and % wildcards. Self-registered attackers can use usernames such as ___ or %%%
CVE-2026-116820 | YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL queries by adding the showreq parameter. Attackers can append showreq to public Bazar listing API requests to obtain table names, JSON storage paths, ACL filter logic, and collation, aiding targeted SQL injection.
YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers to view assembled SQL queries by adding the showreq parameter. Attackers can append showreq to public Bazar listing API r
CVE-2026-116819 | OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain plaintext integration secrets because the notification.rules query skips redactIntegration. Attackers can call the notification.rules tRPC query to retrieve Slack bot tokens, webhook URLs, and authorization headers for use against external systems.
OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain plaintext integration secrets because the notification.rules query skips redactIntegration. Attackers can call the noti
CVE-2026-116818 | OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers to inject SQL through the projectId parameter of the /live/visitors/:projectId WebSocket, which lacks session and project-access checks. Attackers can use UNION or boolean count oracles to read other tenants' events and profiles, and project members can similarly inject via the cohort.preview timeframe values.
OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers to inject SQL through the projectId parameter of the /live/visitors/:projectId WebSocket, which lacks session and project
CVE-2026-116817 | OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access the Bull Board dashboard served on the worker HTTP port. Attackers can query /api/queues and call mutating Bull Board APIs to add, retry, or clean jobs and read queue data, metrics, and datastore health.
OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access the Bull Board dashboard served on the worker HTTP port. Attackers can query /api/queues and call mutating Bull Board API
CVE-2026-116815 | OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows authenticated project members to break ClickHouse string literals by supplying backslashes in event names. Attackers with read access can submit crafted events[].name values to the chart.sankey procedure, causing ClickHouse parse errors that disable the project's Sankey chart endpoint.
OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows authenticated project members to break ClickHouse string literals by supplying backslashes in event names. Attackers with read access can su
CVE-2026-116814 | OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and email template data to standard output logs. Users with log access can obtain database credentials from migration startup logs and password-reset tokens logged when SMTP_HOST and RESEND_API_KEY are unset.
OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and email template data to standard output logs. Users with log access can obtain database credentials from migration startup logs an
CVE-2026-116813 | OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion that allows project-read members and share-link holders to inject ClickHouse SQL through unescaped event names and dates. Attackers can break out of string literals in series names or startDate/endDate values with OR 1=1 to neutralize project_id scoping and read other tenants' analytics data.
OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion that allows project-read members and share-link holders to inject ClickHouse SQL through unescaped event names and dates. Attackers can break
CVE-2026-116812 | OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.service.ts that allows project-read members to inject SQL by supplying unescaped profile filter column names. Attackers can submit a cohort.preview filter whose name contains a subquery spliced into argMax, cityHash64, or comparison clauses to read other tenants' ClickHouse data.
OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.service.ts that allows project-read members to inject SQL by supplying unescaped profile filter column names. Attackers can submit a cohort.previ