Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 720 | 0,2 % |
| ≥50 % | 3.224 | 0,9 % |
| ≥10 % | 22.120 | 6,0 % |
| <10 % | 345.001 | 93,0 % |
Researchers Use AI to Discover Critical Linux Kernel Flaw That Enables Virtual Machine Escape
Researchers at pwn.ai used an AI-assisted research harness to find a critical Linux kernel networking flaw, tracked as CVE-2026-99999 and nicknamed “PwnEscape”. It lets an untrusted guest virtual machine leak host kernel memory and, in lab
Hackers Exploit Critical Nextcloud Collabora Flaw to Execute Remote Commands
Hackers are exploiting a critical vulnerability in Nextcloud’s built-in Collabora Online CODE Server app to run operating system commands without authentication. Tracked as CVE-2026-110447, the flaw affects richdocumentscode versions before
BeyondTrust 0-Day Vulnerability Exploited Since August to Gain Full Admin Access in Minutes
A critical zero-day vulnerability in BeyondTrust Remote Support was exploited in late August, weeks before the company disclosed the flaw and released a patch. The suspected China-linked espionage group ARMORY CASTLE used the weakness to ac
CVE-2018-1305 | Oracle MICROS XBRi up to 10.8.3 Retail access control (Nessus ID 110264 / ID 87328)
A vulnerability classified as critical has been found in Oracle MICROS XBRi up to 10.8.3. Affected by this issue is some unknown functionality of the component Retail. The manipulation leads to improper access controls. This vulnerability i
CVE-2018-0851 | Microsoft Office up to 2016 memory corruption (Nessus ID 106817 / ID 110311)
A vulnerability, which was classified as critical, has been found in Microsoft Office 2007 SP2/2010 SP2/2013 RT SP1/2013 SP1/2016. Affected is an unknown function. This manipulation causes memory corruption. This vulnerability appears as CV
CVE-2017-7674 | Apache Tomcat up to 7.0.78/8.0.44/8.5.15/9.0.0.M21 CORS Filter Cache Poisoning data authenticity (RHSA-2017:1801 / Nessus ID 102587)
A vulnerability was found in Apache Tomcat up to 7.0.78/8.0.44/8.5.15/9.0.0.M21. It has been rated as problematic. This affects an unknown part of the component CORS Filter. This manipulation causes insufficient verification of data authent
CVE-2017-12616 | Apache Tomcat up to 7.0.80 VirtualDirContext Source information disclosure (RHSA-2018:0465 / Nessus ID 103430)
A vulnerability described as problematic has been identified in Apache Tomcat up to 7.0.80. This vulnerability affects unknown code of the component VirtualDirContext. Executing a manipulation can lead to information disclosure (Source). Th
CVE-2017-12172 | PostgreSQL up to 10.0 link following (RHSA-2017:3402 / Nessus ID 104574)
A vulnerability was found in PostgreSQL up to 10.0. It has been rated as critical. This issue affects some unknown processing. This manipulation causes link following. This vulnerability is registered as CVE-2017-12172. The attack needs to
BeyondTrust Zero-Day: Hacker übernehmen Remote-Support-Appliances
LONDON (IT BOLTWISE) – Eine von China-nexus-Aktivisten betriebene Gruppe soll eine Zero-Day-Lücke in BeyondTrust Remote Support ausgenutzt haben, um Remote-Support-Appliances zu übernehmen. Laut Meldung betraf die Schwachstelle die unzureic
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability
CVE-2026-62834 | Microsoft Azure Data Factory improper authorization (WID-SEC-2026-2951)
A vulnerability classified as critical has been found in Microsoft Azure Data Factory. This vulnerability affects unknown code. The manipulation leads to improper authorization. This vulnerability is documented as CVE-2026-62834. The attack
CVE-2026-55467 | OpenPrinting CUPS up to 2.4.19 Option String Builder scheduler/job.c cupsdCreateJob destination-uri/pre-dial-string injection (WID-SEC-2026-3860)
A vulnerability classified as problematic has been found in OpenPrinting CUPS up to 2.4.19. This affects the function cupsdCreateJob of the file scheduler/job.c of the component Option String Builder. Performing a manipulation of the argume
CVE-2026-110039 | Smush Plugin up to 4.3.3 on WordPress authorization (EUVD-2026-102695)
A vulnerability marked as problematic has been reported in Smush Plugin up to 4.3.3 on WordPress. This affects an unknown part. This manipulation causes incorrect authorization. The identification of this vulnerability is CVE-2026-110039. I
CVE-2026-110015 | Salon Booking System Plugin up to 10.31.8 on WordPress REST API Request Verification cross-site request forgery (EUVD-2026-102694)
A vulnerability, which was classified as problematic, was found in Salon Booking System Plugin up to 10.31.8 on WordPress. This issue affects some unknown processing of the component REST API Request Verification. Executing a manipulation c
CVE-2026-110014 | Salon Booking System Plugin up to 10.31.8 on WordPress authorization (EUVD-2026-102693)
A vulnerability labeled as critical has been found in Salon Booking System Plugin up to 10.31.8 on WordPress. Affected by this issue is some unknown functionality. The manipulation results in missing authorization. This vulnerability was na
CVE-2026-110179 | affiliate-toolkit Plugin up to 3.8.8 on WordPress sort sql injection (EUVD-2026-102697)
A vulnerability described as critical has been identified in affiliate-toolkit Plugin up to 3.8.8 on WordPress. This vulnerability affects unknown code. Such manipulation of the argument sort leads to sql injection. This vulnerability is re
CVE-2026-110135 | OTP Login & Register Woocommerce Plugin up to 2.7.2 on WordPress improper authentication (EUVD-2026-102696)
A vulnerability described as critical has been identified in OTP Login &amp; Register Woocommerce Plugin up to 2.7.2 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation results in improper authenti
CVE-2026-110191 | Product Delivery Date Plugin up to 3.3.1 on WordPress Calendar View information disclosure (EUVD-2026-102698)
A vulnerability classified as problematic has been found in Product Delivery Date Plugin up to 3.3.1 on WordPress. Affected by this issue is some unknown functionality of the component Calendar View. This manipulation causes information dis
Chinese Hackers Exploit BeyondTrust Zero-Day to Gain Root Access and Deploy Backdoors
A suspected China-linked espionage group exploited a zero-day vulnerability in BeyondTrust Remote Support appliances to gain access, reach root privileges and install tools for continued access. Google Threat Intelligence Group (GTIG) says
CISA Warns of Palo Alto Networks PAN-OS Code Injection Vulnerability Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency has added a high-severity Palo Alto Networks PAN-OS vulnerability to its Known Exploited Vulnerabilities catalog after confirming it is being used in real-world attacks. The flaw, tr
CVE-2026-110073 | Adobe Experience Manager up to 6.5.25 Form Fields cross site scripting (WID-SEC-2026-3926)
A vulnerability was found in Adobe Experience Manager up to 6.5.25. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Form Fields. Performing a manipulation results in cross site scripti
CVE-2026-110037 | Adobe Experience Manager up to 6.5 cross site scripting (WID-SEC-2026-3926)
A vulnerability categorized as problematic has been discovered in Adobe Experience Manager up to 6.5. This affects an unknown part. Executing a manipulation can lead to cross site scripting. This vulnerability is registered as CVE-2026-1100
CVE-2026-109415 | Adobe Experience Manager Form Fields cross site scripting (WID-SEC-2026-3926)
A vulnerability was found in Adobe Experience Manager. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Form Fields. Such manipulation leads to cross site scripting. This vulne
CVE-2026-107682 | Adobe Experience Manager up to 6.5.25 cross site scripting (WID-SEC-2026-3926)
A vulnerability was found in Adobe Experience Manager up to 6.5.25. It has been classified as problematic. Affected is an unknown function. This manipulation causes cross site scripting. This vulnerability is tracked as CVE-2026-107682. The
CVE-2026-107305 | Adobe Experience Manager up to 6.5.25 Form Fields cross site scripting (WID-SEC-2026-3926)
A vulnerability has been found in Adobe Experience Manager up to 6.5.25 and classified as problematic. This affects an unknown function of the component Form Fields. The manipulation leads to cross site scripting. This vulnerability is refe
CVE-2026-106634 | Adobe Experience Manager path traversal (WID-SEC-2026-3926)
A vulnerability described as problematic has been identified in Adobe Experience Manager. This vulnerability affects unknown code. The manipulation results in path traversal. This vulnerability is known as CVE-2026-106634. It is possible to
CVE-2026-106633 | Adobe Experience Manager 6.5 cross site scripting (WID-SEC-2026-3926)
A vulnerability was found in Adobe Experience Manager 6.5 and classified as problematic. This impacts an unknown function. The manipulation results in cross site scripting. This vulnerability is identified as CVE-2026-106633. The attack can
CVE-2026-106632 | Adobe Experience Manager cross site scripting (WID-SEC-2026-3926)
A vulnerability, which was classified as problematic, was found in Adobe Experience Manager. The impacted element is an unknown function. Executing a manipulation can lead to cross site scripting. The identification of this vulnerability is
CVE-2026-110916 | Google Chrome up to 155.0.8059.79 Desktop input validation (Nessus ID 366326)
A vulnerability categorized as critical has been discovered in Google Chrome. Affected by this issue is some unknown functionality of the component Desktop. The manipulation results in improper input validation. This vulnerability is known
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624
PEERSTITCH-Malware nutzt FortiOS-Schwachstelle für speicherresistente Angriffe
LONDON (IT BOLTWISE) – Eine speicherresidente ARM64-Malware namens PEERSTITCH wurde offenbar über eine FortiOS-Schwachstelle eingeschleust, ohne eine persistente Datei auf dem Gerät zu hinterlassen. Die Angreifer patchten offenbar nach Ausn
CVE-2026-106631 | Adobe Experience Manager 6.5/6.5 LTS Form Fields cross site scripting (WID-SEC-2026-3926)
A vulnerability classified as problematic was found in Adobe Experience Manager 6.5 LTS/6.5. Impacted is an unknown function of the component Form Fields. Such manipulation leads to cross site scripting. This vulnerability is uniquely ident
CVE-2026-106630 | Adobe Experience Manager 6.5 cross site scripting (WID-SEC-2026-3926)
A vulnerability, which was classified as problematic, has been found in Adobe Experience Manager 6.5. The affected element is an unknown function. Performing a manipulation results in cross site scripting. This vulnerability was named CVE-2
CVE-2026-106629 | Adobe Experience Manager Form Fields cross site scripting (WID-SEC-2026-3926)
A vulnerability classified as problematic has been found in Adobe Experience Manager. This issue affects some unknown processing of the component Form Fields. This manipulation causes cross site scripting. This vulnerability is handled as C
CVE-2026-106628 | Adobe Experience Manager 6.5 cross site scripting (WID-SEC-2026-3926)
A vulnerability marked as problematic has been reported in Adobe Experience Manager 6.5. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2026-106628. It is possible to initia
CVE-2026-106626 | Adobe Experience Manager as a Cloud Service input validation (WID-SEC-2026-3926)
A vulnerability labeled as problematic has been found in Adobe Experience Manager as a Cloud Service and Experience Manager. Affected by this issue is some unknown functionality. Executing a manipulation can lead to improper input validatio
CVE-2026-105895 | Adobe Experience Manager up to 6.5.25 input validation (WID-SEC-2026-3926)
A vulnerability categorized as critical has been discovered in Adobe Experience Manager up to 6.5.25. Affected is an unknown function. Such manipulation leads to improper input validation. This vulnerability is documented as CVE-2026-105895
CVE-2026-103848 | Adobe Experience Manager 6.5 os command injection (WID-SEC-2026-3926)
A vulnerability identified as critical has been detected in Adobe Experience Manager 6.5. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in os command injection. This vulnerability is reported
BeyondTrust patches zero-day exploited in attacks since August
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. [...] Weiterlesen
CVE-2026-19746 | Calix GigaSpire 26.1.0 traceroute.cmd denial of service
A vulnerability has been found in Calix GigaSpire 26.1.0 and classified as problematic. The affected element is an unknown function of the file traceroute.cmd. The manipulation leads to denial of service. This vulnerability is listed as CVE
CVE-2026-19745 | Calix GigaSpire 26.1.0 Web Management Interface utilities_configurationsave.cgi sessionKey denial of service
A vulnerability, which was classified as problematic, was found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilities_configurationsave.cgi of the component Web Management Interface. Executing a manipulation of th
Ivanti Connect Secure Zero-Day CVE-2026-104935 [2026] - Tech Insider
Elias Virtanen is the Cybersecurity Analyst at Tech Insider, bringing hands-on expertise from his background in penetration testing and security ... Weiterlesen
Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
Vendor promises fix for separate privilege-escalation flaw in the coming weeks This article has been indexed from www.theregister.com – Articles Read the original article: Ivanti patches Connect Secure zero-day after researchers confirm in-
Critical Linux Kernel Zero-Day Lets Attackers Escape Virtual Machines and Gain Root Access
A critical Linux kernel networking vulnerability dubbed PwnEscape lets researchers escape virtual machines and run root-privileged commands on the host. Discovered during Vercel’s $1 million Sandbox challenge, the flaw affects host networki
Google Warns Chinese Hackers Exploited Critical BeyondTrust Zero-Day to Gain Root Access
A suspected China-linked espionage group exploited a critical BeyondTrust Remote Support vulnerability as a zero-day in late August 2026 weeks before BeyondTrust disclosed it on October 15. Mandiant, which investigated the incident, found t
Google Warns Chinese Hackers Exploited Critical BeyondTrust Zero-Day to Gain Root Access
A suspected China-linked espionage group exploited a critical BeyondTrust Remote Support vulnerability as a zero-day in late August 2026 weeks before BeyondTrust disclosed it on October 15. Mandiant, which investigated the incident, found t
CVE-2017-8512 | Microsoft Office up to 2016 data processing (KB3203436 / Nessus ID 100782)
A vulnerability was found in Microsoft Office up to 2016. It has been rated as critical. This affects an unknown part. This manipulation causes data processing error. This vulnerability is registered as CVE-2017-8512. Remote exploitation of
CVE-2017-8509 | Microsoft Office up to 2016 data processing (KB3191908 / Nessus ID 100758)
A vulnerability was found in Microsoft Office up to 2016 and classified as critical. Affected is an unknown function. Executing a manipulation can lead to data processing error. This vulnerability is tracked as CVE-2017-8509. The attack can
CVE-2017-5664 | Oracle Communications Instant Messaging Server 10.0.1 Apache Tomcat exceptional condition (ID 157497 / BID-98888)
A vulnerability has been found in Oracle Communications Instant Messaging Server 10.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Apache Tomcat. This manipulation causes handling
CVE-2016-6794 | Apache Tomcat up to 9.0.0.M9 System Property Replacement information disclosure (RHSA-2017:0455 / Nessus ID 94684)
A vulnerability identified as problematic has been detected in Apache Tomcat up to 6.0.45/7.0.70/8.0.36/8.5.4/9.0.0.M9. This issue affects some unknown processing of the component System Property Replacement. Performing a manipulation resul
CVE-2026-111451 | Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during builds. Package removal and destroy paths can delete unintended files; package extraction can overwrite other vendor files; generator names can write outside the project or inject executable CFML into generated code. Inputs
Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on deploy hosts as the SSH user and on the CI runner during bu
CVE-2026-111450 | Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request triggers a cold start can direct later error emails to an address under their control for that application's lifetime. Emails disclose error and request metadata; on engi
Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts
CVE-2026-111449 | Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by default). An allowed administrator request changes error/debug-display settings in shared application scope. If it overlaps with an unauthorized client's request that raises an error, that client can receive full exception details, including tag context or a serialized exception, and any sensitive data they contain. This race does not bypass the product
Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by default). An allowed administrator request changes error/debug-display settings in shared application scope. If it overlaps with an u
CVE-2026-111448 | Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, development assets/docs, guide images and image tags can accept paths through an existing symlink to a case-distinct sibling directory, allowing access outside the intended root, including limited file disclosure. Separately, the CLI database-dump output check can write outside the app
Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, development assets/docs, guide images and image tags can accept
CVE-2026-111447 | Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the parent being saved. A user able to submit a nested form for their own parent can update and reassign another parent's hasMany or hasOne rows, or delete them when allowDelete=true. Nested belongsTo records can also be edited by posting another associated record's key. New child rows with composite primary keys not made up of foreign keys
Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the parent being saved. A user able to submit a nested form for their own parent can update and reassign another parent'
CVE-2026-89280 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with custom-level access and above, to change the WordPress account password of any customer who has placed at l
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 via the 'password' par
CVE-2026-109207 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'media:thumbnail@url' parameter in all versions up to, and including, 5.2.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'media:thumbnail@url' parameter in all versions up to, and including,
CVE-2026-107758 | The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.0.390 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected payload survives storage because the widened comment allow-list permi
The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.0.390 due to insufficient input sanitization and output escaping. This makes it p
CVE-2026-97339 | The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter in all versions up to, and including, 7.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The exploit bypasses WordPress's wp_ks
The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter in all versions up to, and including, 7.5.5 due to insufficient input sani
CVE-2026-104769 | The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. Exploitation requires that the site administrator has enabled the Optimize CSS feature (wit
The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter. This makes it possible for authenticated attackers, with adm