Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 725 | 0,2 % |
| ≥50 % | 3.220 | 0,9 % |
| ≥10 % | 22.091 | 5,9 % |
| <10 % | 347.696 | 93,0 % |
PHP-Sicherheitslücke: Hacker im Vorteil - VOL.AT
Hacker haben wegen PHP-Lücke derzeit einen VorteilAPA/AFP/Kirill KUDRYAVTSEV. Die schwerwiegende ... Weiterlesen
CVE-2026-90153 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd smb_check_perm_dacl out-of-bounds (WID-SEC-2026-3444)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. This vulnerability affects the function smb_check_perm_dacl of the component ksmbd. The manipulation leads to out-o
CVE-2026-90152 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 ksmbd ksmbd_session_register memory leak (WID-SEC-2026-3444)
A vulnerability classified as critical was found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. This affects the function ksmbd_session_register of the component ksmbd. Executing a manipulation can lead to memory leak. This vulnerability is
CVE-2026-90150 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 pnfs/blocklayout bdev_file allocation of resources (WID-SEC-2026-3444)
A vulnerability classified as critical has been found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. Affected by this issue is the function bl_parse_concat/bl_parse_stripe/bl_parse_scsi/bl_free_device of the component pnfs/blocklayout. Perfo
CVE-2026-90149 | Linux Kernel up to 6.18.51/7.2.5 flexfiles null pointer dereference (WID-SEC-2026-3444)
A vulnerability described as critical has been identified in Linux Kernel up to 6.18.51/7.2.5. Affected by this vulnerability is the function nfs4_init_ds_session/ff_layout_async_handle_error_v4 of the component flexfiles. Such manipulation
CVE-2026-90148 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 NFSv4 nfs4_add_lease priv null pointer dereference (WID-SEC-2026-3444)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.12.109/6.18.51/7.2.5. Affected is the function nfs4_add_lease of the component NFSv4. This manipulation of the argument priv causes null pointer dereference. The i
CVE-2026-90147 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 devres devm_clk_get_optional_enabled_with_rate state issue (WID-SEC-2026-3444)
A vulnerability identified as very critical has been detected in Linux Kernel up to 6.12.109/6.18.51/7.2.5. This affects the function devm_clk_get_optional_enabled_with_rate of the component devres. The manipulation leads to state issue. Th
CVE-2026-90146 | Linux Kernel up to 6.18.51/7.2.5 BPF XDP dev_xdp_install privileges management (WID-SEC-2026-3444)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.18.51/7.2.5. This impacts the function dev_xdp_install of the component BPF XDP. The manipulation results in improper privilege management. This vulnerability was na
CVE-2026-90145 | Linux Kernel up to 6.18.51/7.2.5 hinic3 hinic3_send_one_skb out-of-bounds (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.18.51/7.2.5. It has been declared as very critical. Impacted is the function hinic3_send_one_skb of the component hinic3. Such manipulation leads to out-of-bounds read. This vulnerability is
CVE-2026-90144 | Linux Kernel up to 7.2.5 DPLL drivers/dpll/dpll_core.c dpll_device_ops null pointer dereference (WID-SEC-2026-3444)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 7.2.5. The impacted element is the function dpll_device_ops of the file drivers/dpll/dpll_core.c of the component DPLL. Executing a manipulation can lead to n
CVE-2026-90143 | Linux Kernel up to 7.2.5 kcm kcm_parse_func_strparser locking (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been classified as critical. This issue affects the function kcm_parse_func_strparser of the component kcm. This manipulation causes improper locking. This vulnerability appears
CVE-2026-90142 | Linux Kernel up to 7.2.5 virtio_net virtnet_rx_resume out-of-bounds write (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been rated as very critical. The affected element is the function virtnet_rx_resume of the component virtio_net. Performing a manipulation results in out-of-bounds write. This vu
CVE-2026-78659 | Go HTTP/2 Server amplification (EUVD-2026-95419 / Nessus ID 371915)
A vulnerability has been found in Go and classified as problematic. Affected by this issue is some unknown functionality of the component HTTP2 Server. The manipulation leads to asymmetric resource consumption. This vulnerability is documen
CVE-2026-44229 | Best Practical RT up to 5.0.9/6.0.2 Upload cross site scripting (Nessus ID 371922)
A vulnerability was found in Best Practical RT up to 5.0.9/6.0.2. It has been declared as problematic. The impacted element is an unknown function of the component Upload. Such manipulation leads to cross site scripting. This vulnerability
CVE-2026-96960 | Microsoft System.Security.Cryptography.Xml amplification (Nessus ID 371924)
A vulnerability, which was classified as problematic, was found in Microsoft System.Security.Cryptography.Xml. The affected element is an unknown function. Such manipulation leads to asymmetric resource consumption. This vulnerability is un
CVE-2025-61873 | Best Practical Request Tracker up to 4.4.8/5.0.8/6.0.1 TSV Export csv injection (Nessus ID 371922)
A vulnerability classified as problematic was found in Best Practical Request Tracker up to 4.4.8/5.0.8/6.0.1. This impacts an unknown function of the component TSV Export. Executing a manipulation can lead to csv injection. The identificat
CVE-2026-96959 | Microsoft .NET/System.Security.Cryptography.Xml allocation of resources (Nessus ID 371924)
A vulnerability was found in Microsoft .NET and System.Security.Cryptography.Xml. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component System.Security.Cryptography.Xml. This manipulat
CVE-2026-96958 | Microsoft .NET/Visual Studio up to 10.0.12/11.0.0-rc.1/8.0.4/9.0.20 Signed XML algorithmic complexity (Nessus ID 371924)
A vulnerability classified as problematic was found in Microsoft .NET and Visual Studio up to 10.0.12/11.0.0-rc.1/8.0.4/9.0.20. This issue affects some unknown processing of the component Signed XML. The manipulation results in inefficient
CVE-2026-96235 | Microsoft .NET/Visual Studio WPF CPSTrans::Initialize out-of-bounds write (Nessus ID 371924)
A vulnerability marked as critical has been reported in Microsoft .NET and Visual Studio. This issue affects the function CPSTrans::Initialize of the component WPF. The manipulation leads to out-of-bounds write. This vulnerability is docume
CVE-2026-96234 | Microsoft .NET/Visual Studio up to 8.0.31/9.0.20/10.0.12/11.0.0-rc.1 WPF origin validation (Nessus ID 371924)
A vulnerability classified as problematic was found in Microsoft .NET and Visual Studio up to 8.0.31/9.0.20/10.0.12/11.0.0-rc.1. The impacted element is an unknown function of the component WPF. Such manipulation leads to origin validation
CVE-2026-96232 | Microsoft .NET/Visual Studio WPF out-of-bounds (Nessus ID 371924)
A vulnerability described as problematic has been identified in Microsoft .NET and Visual Studio. Impacted is an unknown function of the component WPF. The manipulation results in out-of-bounds read. This vulnerability is reported as CVE-20
CVE-2026-90141 | Linux Kernel up to 7.2.5 ipvs ip_vs_ftp_get_addrport integer overflow (WID-SEC-2026-3444)
A vulnerability has been found in Linux Kernel up to 7.2.5 and classified as very critical. This affects the function ip_vs_ftp_get_addrport of the component ipvs. The manipulation leads to integer overflow. This vulnerability is documented
CVE-2026-90140 | Linux Kernel up to 7.2.5 cuse cuse_exit use after free (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5 and classified as critical. This vulnerability affects the function cuse_exit of the component cuse. The manipulation results in use after free. This vulnerability is reported as CVE-202
CVE-2026-90139 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 FUSE fuse_fill_super_submount nlookup null pointer dereference (WID-SEC-2026-3444)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. This issue affects the function fuse_fill_super_submount of the component FUSE. Such manipulation of the argument nlookup lead
CVE-2026-90138 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 vsock vsock_accept sk_err memory leak (WID-SEC-2026-3444)
A vulnerability classified as critical was found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. Affected is the function vsock_accept of the component vsock. Such manipulation of the argument sk_err leads to memory leak. This vulnerability i
CVE-2026-90137 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 hp-bioscfg hp-bioscfg.c hp_convert_hexstr_to_str out-of-bounds (WID-SEC-2026-3444)
A vulnerability has been found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 and classified as problematic. Affected is the function hp_convert_hexstr_to_str of the file hp-bioscfg.c of the component hp-bioscfg. Performing a manipula
CVE-2026-90136 | Linux Kernel up to 6.18.51/7.2.5 AMD HSMP hsmp.c hsmp_hwmon_write power1_cap signed conversion (WID-SEC-2026-3444)
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.18.51/7.2.5. Impacted is the function hsmp_hwmon_write of the file hsmp.c of the component AMD HSMP. Performing a manipulation of the argument power1_cap re
CVE-2026-90135 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 Net Device Allocation alloc_netdev_mqs use after free (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. It has been rated as very critical. This vulnerability affects the function alloc_netdev_mqs of the component Net Device Allocation. This manipulation causes use after
CVE-2026-90134 | Linux Kernel up to 7.2.5 NTFS Compression ntfs_decompress memory corruption (WID-SEC-2026-3444)
A vulnerability classified as very critical has been found in Linux Kernel up to 7.2.5. This impacts the function ntfs_decompress of the component NTFS Compression. This manipulation causes memory corruption. This vulnerability is tracked a
CVE-2026-90133 | Linux Kernel up to 7.2.5 NTFS ntfs_ir_to_ib heap-based overflow (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been declared as critical. This affects the function ntfs_ir_to_ib of the component NTFS. The manipulation results in heap-based buffer overflow. This vulnerability is known as C
CVE-2026-90132 | Linux Kernel up to 7.2.5 NTFS setxattr LXUID/LXGID/LXMOD/LXDEV privileges management (WID-SEC-2026-3444)
A vulnerability described as critical has been identified in Linux Kernel up to 7.2.5. This affects the function setxattr of the component NTFS. The manipulation of the argument LXUID/LXGID/LXMOD/LXDEV results in improper privilege manageme
CVE-2026-90130 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 vdpa_sim vdpasim_create null pointer dereference (WID-SEC-2026-3444)
A vulnerability marked as problematic has been reported in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. The impacted element is the function vdpasim_create of the component vdpa_sim. The manipulation leads to null pointer dereference.
CVE-2026-90129 | Linux Kernel up to 6.18.51/7.2.5 virtio_balloon virtballoon_free_page_report acked resource consumption (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.18.51/7.2.5. It has been classified as problematic. Affected by this issue is the function virtballoon_free_page_report of the component virtio_balloon. The manipulation of the argument acke
CVE-2025-40806 | Siemens Gridscale X Prepay up to 4.2.0 response discrepancy (ssa-356310)
A vulnerability labeled as problematic has been found in Siemens Gridscale X Prepay up to 4.2.0. The impacted element is an unknown function. The manipulation results in observable response discrepancy. This vulnerability is known as CVE-20
PHP2Shell-Angriffe: KI-gestützte Post-Exploitation nach Critical RCE
LONDON (IT BOLTWISE) – Nach der Ausnutzung der PHP2Shell-Schwachstellen CVE-2026-109618 und CVE-2026-109619 beobachten Security-Teams KI-gestützte, „agentic“ Post-Exploitation-Schritte. In einem Fall gelang Angreifern innerhalb von zwei Stu
CVE-2025-9316 | N-able N-central up to 2025.3 improper validation of specified quantity in input
A vulnerability labeled as problematic has been found in N-able N-central up to 2025.3. This affects an unknown part. The manipulation results in improper validation of specified quantity in input. This vulnerability is reported as CVE-2025
CVE-2025-66056 | Uncanny Owl Uncanny Automator Plugin up to 6.10.0 on WordPress information expsure
A vulnerability was found in Uncanny Owl Uncanny Automator Plugin up to 6.10.0 on WordPress. It has been rated as problematic. The affected element is an unknown function. Performing a manipulation results in exposure of sensitive system in
CVE-2025-40834 | Siemens Mendix RichText up to 4.6.0 Widget cross site scripting (ssa-190588)
A vulnerability was found in Siemens Mendix RichText up to 4.6.0. It has been rated as problematic. This issue affects some unknown processing of the component Widget. The manipulation leads to cross site scripting. This vulnerability is li
CVE-2025-34336 | eGovFramework egovframe-common-components up to 4.3.1 /utl/wed/insertImage.do unrestricted upload
A vulnerability was found in eGovFramework egovframe-common-components up to 4.3.1. It has been declared as critical. This impacts an unknown function of the file /utl/wed/insertImage.do. Executing a manipulation can lead to unrestricted up
CVE-2025-11700 | N-able N-central up to 2025.3 xml external entity reference (EUVD-2025-131914)
A vulnerability has been found in N-able N-central up to 2025.3 and classified as problematic. Affected by this issue is some unknown functionality. Performing a manipulation results in xml external entity reference. This vulnerability was
CVE-2022-4984 | Qingdao Esoft Tianchuang Network ZenTao Biz/ZenTao Max/ZenTao Open Source Edition Login /zentao/user-login.html account sql injection (CNVD-2022-42853 / EUVD-2022-55680)
A vulnerability marked as critical has been reported in Qingdao Esoft Tianchuang Network ZenTao Biz, ZenTao Max and ZenTao Open Source Edition. The impacted element is an unknown function of the file /zentao/user-login.html of the component
CVE-2024-32010 | Siemens Spectrum Power 4 up to 4.69 SP12 U1 permission assignment (ssa-339694)
A vulnerability labeled as critical has been found in Siemens Spectrum Power 4 up to 4.69 SP12 U1. Impacted is an unknown function. Executing a manipulation can lead to incorrect permission assignment. This vulnerability is tracked as CVE-2
CVE-2024-32009 | Siemens Spectrum Power 4 up to 4.70 SP12 U1 privileges assignment (ssa-339694)
A vulnerability, which was classified as critical, has been found in Siemens Spectrum Power 4 up to 4.70 SP12 U1. This affects an unknown part. The manipulation leads to incorrect privilege assignment. This vulnerability is documented as CV
CVE-2024-32008 | Siemens Spectrum Power up to 4.70 SP12 U1 incorrect privileged apis (ssa-339694)
A vulnerability labeled as critical has been found in Siemens Spectrum Power up to 4.70 SP12 U1. This affects an unknown function. The manipulation results in incorrect use of privileged apis. This vulnerability is identified as CVE-2024-32
CVE-2026-96224 | Microsoft .NET/Visual Studio WPF CPSTrans::Initialize out-of-bounds write (Nessus ID 371924)
A vulnerability identified as critical has been detected in Microsoft .NET and Visual Studio. This affects the function CPSTrans::Initialize of the component WPF. Performing a manipulation results in out-of-bounds write. This vulnerability
CVE-2026-87697 | Microsoft .NET/Visual Studio WPF XPS Synthetic Hyperlinks deserialization (Nessus ID 371924)
A vulnerability categorized as problematic has been discovered in Microsoft .NET and Visual Studio. Affected by this issue is some unknown functionality of the component WPF XPS Synthetic Hyperlinks. Such manipulation leads to deserializati
CVE-2026-85363 | Microsoft .NET/.NET Framework/Visual Studio WPF RectFillAlpha integer overflow (Nessus ID 371924)
A vulnerability labeled as problematic has been found in Microsoft .NET, .NET Framework and Visual Studio. This vulnerability affects the function CD3DGlyphBank::RectFillAlpha of the component WPF. Executing a manipulation can lead to integ
CVE-2026-84008 | Microsoft .NET System.Security.Cryptography.Pkcs SignedCms.CheckSignature algorithmic complexity (Nessus ID 371924)
A vulnerability, which was classified as problematic, has been found in Microsoft .NET. Impacted is the function SignedCms.CheckSignature of the component System.Security.Cryptography.Pkcs. This manipulation causes inefficient algorithmic c
CVE-2026-83520 | Microsoft .NET/.NET Framework deserialization (Nessus ID 371924)
A vulnerability has been found in Microsoft .NET and .NET Framework and classified as critical. The affected element is an unknown function. Performing a manipulation results in deserialization. This vulnerability was named CVE-2026-83520.
CVE-2026-70197 | Microsoft .NET/Visual Studio out-of-bounds write (Nessus ID 371924)
A vulnerability described as critical has been identified in Microsoft .NET and Visual Studio. This impacts an unknown function. The manipulation results in out-of-bounds write. This vulnerability is identified as CVE-2026-70197. The attack
CVE-2026-70174 | Microsoft .NET/.NET Framework/Visual Studio improper authorization (Nessus ID 371924)
A vulnerability classified as critical has been found in Microsoft .NET, .NET Framework and Visual Studio. This issue affects some unknown processing. Performing a manipulation results in improper authorization. This vulnerability is catalo
CVE-2026-70162 | Microsoft Visual Studio Common Object Runtime Library denial of service (Nessus ID 371924)
A vulnerability identified as problematic has been detected in Microsoft Visual Studio. Impacted is an unknown function of the component Common Object Runtime Library. Performing a manipulation results in denial of service. This vulnerabili
CVE-2026-70035 | Microsoft .NET/Visual Studio deserialization (Nessus ID 371924)
A vulnerability classified as critical was found in Microsoft .NET and Visual Studio. This affects an unknown part. Such manipulation leads to deserialization. This vulnerability is documented as CVE-2026-70035. The attack can be executed r
CVE-2026-70007 | Microsoft .NET/.NET Framework out-of-bounds write (Nessus ID 371924)
A vulnerability categorized as critical has been discovered in Microsoft .NET and .NET Framework. The impacted element is an unknown function. Such manipulation leads to out-of-bounds write. This vulnerability is referenced as CVE-2026-7000
CVE-2026-116063 | A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of the file dede/update_guide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
A weakness has been identified in DedeCMS up to 5.7.118. Impacted is the function require_once of the file dede/update_guide.php. This manipulation of the argument vtime causes code injection. Remote exploitation of the attack is possible.
CVE-2026-116230 | Ndemic Creations Plague Inc Evolved up to 1.24.0.3 Workshop Scenario Loader deserialization
A vulnerability was found in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. It has been declared as critical. The affected element is an unknown function of the component Workshop Scenario Loader. Such manipulation leads to deserializa
„Im Zweifel vorsorglich abschalten“: Wie im Kreis Zwickau auf die Internet-Sicherheitslücke ...
... Durch das schnelle Reagieren auf die Sicherheitslücke haben Kommunen und Einrichtungen die Gefahr von Hacker-Angriffen übers Internet reduziert. Weiterlesen
CVE-2026-116062 | A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/save_profile.php. The manipulation of the argument Contact results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/save_profile.php. The manipulation of the argument Contact results in sql injection.
Nextcloud-Lücke CVE-2026-110447: CISA setzt US-Behörden Frist bis 26. Oktober
Die US-Cybersicherheitsbehörde CISA hat die Schwachstelle CVE-2026-110447 in ihren Katalog aktiv ausgenutzter Sicherheitslücken (Known Exploited ... Weiterlesen
CVE-2026-116061 | A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_dealer.php. The manipulation of the argument Contact leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_dealer.php. The manipulation of the argument Contact leads to sql injection. The attack