Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | 2026-09-15 | 2026-09-28 |
|---|---|---|
| ≥90 % | 0 | 299 |
| ≥50 % | 0 | 958 |
| ≥10 % | 0 | 3 |
| <10 % | 300 | 250 |
CVE-2026-77142 | TYPO3 Industry Directory up to 8.1.1 Frontend Company Self-Service Editing Feature access control
A vulnerability was found in TYPO3 Industry Directory up to 8.1.1. It has been classified as problematic. Affected is an unknown function of the component Frontend Company Self-Service Editing Feature. This manipulation causes improper acce
CVE-2026-77141 | TYPO3 Club Directory Extension up to 8.1.2 privileges management
A vulnerability was found in TYPO3 Club Directory Extension up to 8.1.2. It has been rated as critical. Affected by this issue is some unknown functionality. Performing a manipulation results in improper privilege management. This vulnerabi
CVE-2026-77135 | TYPO3 Femanager Plugin up to 6.4.4/7.5.4/8.4.1/13.3.4 User Detail View privileges management
A vulnerability was found in TYPO3 Femanager Plugin up to 6.4.4/7.5.4/8.4.1/13.3.4 and classified as problematic. This impacts an unknown function of the component User Detail View. The manipulation results in improper privilege management.
CVE-2026-77140 | TYPO3 Telephone Directory Extension up to 6.1.x access control
A vulnerability classified as problematic was found in TYPO3 Telephone Directory Extension up to 6.1.x. Impacted is an unknown function. Such manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2
CVE-2026-77139 | TYPO3 Mask up to 8.3.11/9.0.10 Mask module template element key path traversal
A vulnerability classified as critical has been found in TYPO3 Mask up to 8.3.11/9.0.10. This issue affects some unknown processing of the component Mask module. This manipulation of the argument template element key causes path traversal.
CVE-2026-77136 | TYPO3 Powermail up to 10.9.2/12.6.0/13.2.0 Fluid View sender_name code injection
A vulnerability was found in TYPO3 Powermail up to 10.9.2/12.6.0/13.2.0 and classified as critical. The affected element is an unknown function of the component Fluid View. Executing a manipulation of the argument sender_name can lead to co
CVE-2026-77137 | TYPO3 Forms Export Extension up to 5.0.4/6.1.2/7.1.0 sql injection
A vulnerability described as critical has been identified in TYPO3 Forms Export Extension up to 5.0.4/6.1.2/7.1.0. This vulnerability affects unknown code of the component Forms Export. The manipulation results in sql injection. This vulner
CVE-2026-78654 | cleverbrush framework/deep up to 4.4.0 deepExtend.ts deepExtend prototype pollution (Issue 213)
A vulnerability identified as critical has been detected in cleverbrush framework and deep up to 4.4.0. This impacts the function deepExtend of the file libs/deep/src/deepExtend.ts. The manipulation leads to improperly controlled modificati
CVE-2026-77138 | TYPO3 HTML5 Video Player vs. Powermail Plugin up to 0.2.1 unserialize cookie deserialization
A vulnerability classified as critical was found in TYPO3 HTML5 Video Player vs. Powermail Plugin up to 0.2.1. This affects the function unserialize. The manipulation of the argument cookie results in deserialization. This vulnerability was
CVE-2026-16481 | Google MCP Toolbox for Databases up to 1.4.0 pageURL server-side request forgery
A vulnerability, which was classified as problematic, was found in Google MCP Toolbox for Databases up to 1.4.0. This impacts an unknown function. Such manipulation of the argument pageURL leads to server-side request forgery. This vulnerab
CVE-2026-78478 | Elated-mes Mane Plugin up to 1.7 on WordPress file inclusion
A vulnerability was found in Elated-mes Mane Plugin up to 1.7 on WordPress. It has been declared as critical. Affected is an unknown function. The manipulation results in file inclusion. This vulnerability is reported as CVE-2026-78478. The
CVE-2026-78470 | wedevs WP Project Manager Pro Plugin up to 4.0.1 on WordPress sql injection
A vulnerability labeled as critical has been found in wedevs WP Project Manager Pro Plugin up to 4.0.1 on WordPress. This vulnerability affects unknown code. Executing a manipulation can lead to sql injection. This vulnerability is handled
CVE-2026-20263 | Cisco IOS XE Software up to 26.2.1ea BEEP denial of service (Nessus ID 334512)
A vulnerability categorized as critical has been discovered in Cisco IOS XE Software. This impacts an unknown function of the component BEEP. Executing a manipulation can lead to denial of service. This vulnerability is handled as CVE-2026-
CVE-2026-20786 | Intel NPU Driver out-of-bounds (Nessus ID 335912)
A vulnerability, which was classified as problematic, has been found in Intel NPU Driver. This vulnerability affects unknown code. The manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-20786. The attack
CVE-2026-12561 | tagDiv Composer Plugin up to 5.4.5 on WordPress Shortcode vc_raw_html::render cross site scripting
A vulnerability was found in tagDiv Composer Plugin up to 5.4.5 on WordPress and classified as problematic. This affects the function vc_raw_html::render of the component Shortcode. Executing a manipulation can lead to cross site scripting.
CVE-2026-13214 | Zephyr Project up to 4.4.1 OCPP Client ocpp_j.c parse_getconfig_msg key stack-based overflow (EUVD-2026-65291)
A vulnerability has been found in Zephyr Project Zephyr up to 4.4.1 and classified as very critical. The impacted element is the function parse_getconfig_msg of the file subsys/net/lib/ocpp/ocpp_j.c of the component OCPP Client. Performing
CVE-2026-13215 | Zephyr Project up to 4.4.1 ext2 filesystem driver ext2_impl.c ext2_verify_disk_superblock s_log_block_size out-of-bounds write (EUVD-2026-65292)
A vulnerability, which was classified as very critical, was found in Zephyr Project Zephyr up to 4.4.1. The affected element is the function ext2_verify_disk_superblock of the file subsys/fs/ext2/ext2_impl.c of the component ext2 filesystem
CVE-2026-78637 | Fdawgs node-poppler up to 9.1.2/10.0.1 Argument Injection src/index.js file_path argument injection (Issue 822 / EUVD-2026-65293)
A vulnerability was found in Fdawgs node-poppler up to 9.1.2/10.0.1. It has been rated as critical. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSepar
CVE-2026-78638 | peerigon unzip-crx/unzip-crx-3 up to 0.2.0 Archive Extraction dist/index.js unzip destination path traversal (Issue 19)
A vulnerability categorized as problematic has been discovered in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/index.js of the component Archive Extraction. Executing a manipulation of the
CVE-2026-73624 | gitpython-developers GitPython up to 3.1.53 Diffable Diffable.diff other/output file inclusion
A vulnerability, which was classified as critical, was found in gitpython-developers GitPython up to 3.1.53. This impacts the function Diffable.diff of the component Diffable. Executing a manipulation of the argument other/output can lead t
CVE-2026-66616 | 10Web Form Maker Plugin up to 1.15.46 on WordPress cross site scripting
A vulnerability classified as problematic was found in 10Web Form Maker Plugin up to 1.15.46 on WordPress. The impacted element is an unknown function. The manipulation results in cross site scripting. This vulnerability was named CVE-2026-
CVE-2026-20906 | Intel Neural Compressor up to 3.5 protection mechanism
A vulnerability was found in Intel Neural Compressor up to 3.5. It has been declared as problematic. This affects an unknown function. Executing a manipulation can lead to protection mechanism failure. This vulnerability is registered as CV
CVE-2026-20908 | Intel NPU Driver for Windows Device Drivers race condition
A vulnerability described as critical has been identified in Intel NPU Driver for Windows. This vulnerability affects unknown code of the component Device Drivers. Executing a manipulation can lead to race condition. This vulnerability is h
132,792 Matches for Magento and 10.0 CVSS: Sizing the Commerce Surface Behind CVE-2026-75650
132,792 Matches for Magento and 10.0 CVSS: Sizing the Commerce Surface Behind CVE-2026-75650 A commerce platform population that maps directly to attacker value CVE-2026-75650 is a template engine vulnerability in Adobe Commerce and Magento
CVE-2025-68475 | fedify-dev fedify up to 1.6.12/1.7.13/1.8.14/1.9.1 docloader.ts redos (GHSA-rchf-xwx2-hm93)
A vulnerability labeled as problematic has been found in fedify-dev fedify up to 1.6.12/1.7.13/1.8.14/1.9.1. This vulnerability affects unknown code of the file packages/fedify/src/runtime/docloader.ts. Such manipulation leads to inefficien
CVE-2026-13742 | Honeywell IQ MultiAccess up to 28 toctou
A vulnerability described as problematic has been identified in Honeywell IQ MultiAccess up to 28. This vulnerability affects unknown code. The manipulation results in time-of-check time-of-use. This vulnerability is reported as CVE-2026-13
CVE-2023-54365 | Traefik up to 2.10.4/3.0.0-beta3 resource consumption
A vulnerability was found in Traefik up to 2.10.4/3.0.0-beta3 and classified as problematic. This affects an unknown part. Executing a manipulation can lead to resource consumption. This vulnerability is registered as CVE-2023-54365. It is
CVE-2023-33854 | IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data authentication replay
A vulnerability was found in IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data and classified as problematic. The impacted element is an unknown function. Such manipulation leads to authentication bypass by capture-repla
CVE-2023-45796 | Pilz PMI v8xx/PASvisu Runtime cross site scripting (VDE-2023-050)
A vulnerability marked as problematic has been reported in Pilz PMI v8xx and PASvisu. Impacted is an unknown function of the component Runtime. Performing a manipulation results in cross site scripting. This vulnerability was named CVE-2023
CVE-2023-45795 | Pilz PMI v8xx/PASvisu prior 1.14.1 Builder cross site scripting (VDE-2023-050)
A vulnerability classified as problematic was found in Pilz PMI v8xx and PASvisu. This affects an unknown function of the component Builder. The manipulation results in cross site scripting. This vulnerability is identified as CVE-2023-4579
CVE-2026-49076 | Jetimpex JetEngine Plugin up to 3.8.9.1 on WordPress sql injection
A vulnerability labeled as critical has been found in Jetimpex JetEngine Plugin up to 3.8.9.1 on WordPress. Affected is an unknown function. Executing a manipulation can lead to sql injection. This vulnerability is registered as CVE-2026-49
CVE-2025-65199 | Windscribe for Linux Desktop App up to 2.18.7 changeMTU adapterName os command injection
A vulnerability described as critical has been identified in Windscribe for Linux Desktop App up to 2.18.7. Impacted is the function changeMTU. Such manipulation of the argument adapterName leads to os command injection. This vulnerability
CVE-2025-62181 | Pegasystems Pega Infinity up to 25.1.0 Authentication Service response discrepancy
A vulnerability identified as problematic has been detected in Pegasystems Pega Infinity up to 25.1.0. This affects an unknown function of the component Authentication Service Handler. This manipulation causes observable response discrepanc
CVE-2025-65823 | Meatmeet App on Android hard-coded credentials
A vulnerability, which was classified as critical, was found in Meatmeet App on Android. This issue affects some unknown processing. Such manipulation leads to hard-coded credentials. This vulnerability is traded as CVE-2025-65823. The atta
CVE-2025-9343 | ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System Plugin cross site scripting (EUVD-2025-204662)
A vulnerability, which was classified as problematic, was found in ELEXtensions ELEX WordPress HelpDesk &amp; Customer Ticketing System Plugin up to 3.3.4 on WordPress. The impacted element is an unknown function. Executing a manipulati
CVE-2025-14995 | Tenda FH1201 1.2.0.14(408) /goform/SetIpBind sprintf page stack-based overflow (EUVD-2025-204670)
A vulnerability categorized as critical has been discovered in Tenda FH1201 1.2.0.14(408). Affected is the function sprintf of the file /goform/SetIpBind. Such manipulation of the argument page leads to stack-based buffer overflow. This vul
CVE-2026-15442 | wolfSSL up to 5.9.2 TLS Shutdown wolfSSL_read use after free (Nessus ID 350849)
A vulnerability was found in wolfSSL up to 5.9.2. It has been classified as critical. This affects the function wolfSSL_read of the component TLS Shutdown. This manipulation causes use after free. This vulnerability appears as CVE-2026-1544
CVE-2026-94418 | wolfSSL up to 5.9.2 Certificate Signature Verification wolfssl/test.h ProcessPeerCertParse certificate validation (Nessus ID 350850)
A vulnerability labeled as problematic has been found in wolfSSL up to 5.9.2. This issue affects the function ProcessPeerCertParse of the file wolfssl/test.h of the component Certificate Signature Verification. Executing a manipulation can
CVE-2026-77037 | expressjs multer up to 2.2.0 Disk Storage Engine denial of service (Nessus ID 350851)
A vulnerability has been found in expressjs multer up to 2.2.0 and classified as problematic. Affected is an unknown function of the component Disk Storage Engine. Performing a manipulation results in denial of service. This vulnerability i
CVE-2026-17113 | Red Hat OpenShift Container Platform privilege escalation (EUVD-2026-65156 / Nessus ID 350855)
A vulnerability described as very critical has been identified in Red Hat OpenShift Container Platform. The affected element is an unknown function. Executing a manipulation can lead to privilege escalation. This vulnerability is registered
CVE-2026-89133 | wolfSSL up to 5.9.2 certificate validation (Nessus ID 350861)
A vulnerability, which was classified as problematic, was found in wolfSSL up to 5.9.2. Affected is an unknown function. Executing a manipulation can lead to improper certificate validation. This vulnerability is registered as CVE-2026-8913
CVE-2025-8107 | OB OceanBase Server prior 3.2.4.9/4.2.1.10/4.2.5/4.3.3.2/4.3.4 exposure of resource (EUVD-2025-22483 / Nessus ID 350910)
A vulnerability classified as critical has been found in OB OceanBase Server. This impacts an unknown function. This manipulation causes exposure of resource. This vulnerability is handled as CVE-2025-8107. The attack can be initiated remot
CVE-2025-64541 | Adobe Experience Manager up to 6.5.23 cross site scripting (apsb25-115 / Nessus ID 278346)
A vulnerability classified as problematic was found in Adobe Experience Manager up to 6.5.23. The impacted element is an unknown function. Executing a manipulation can lead to cross site scripting. This vulnerability is registered as CVE-20
CVE-2025-64545 | Adobe Experience Manager up to 6.5.23 URL cross site scripting (apsb25-115 / Nessus ID 278346)
A vulnerability classified as problematic has been found in Adobe Experience Manager up to 6.5.23. This vulnerability affects unknown code of the component URL Handler. This manipulation causes cross site scripting. This vulnerability is re
CVE-2025-64543 | Adobe Experience Manager up to 6.5.23 URL cross site scripting (apsb25-115 / Nessus ID 278346)
A vulnerability marked as problematic has been reported in Adobe Experience Manager up to 6.5.23. Affected by this issue is some unknown functionality of the component URL Handler. The manipulation leads to cross site scripting. This vulner
CVE-2025-64544 | Adobe Experience Manager up to 6.5.23 URL cross site scripting (apsb25-115 / Nessus ID 278346)
A vulnerability described as problematic has been identified in Adobe Experience Manager up to 6.5.23. This affects an unknown part of the component URL Handler. The manipulation results in cross site scripting. This vulnerability is catalo
CVE-2025-64539 | Adobe Experience Manager up to 6.5.23 cross site scripting (apsb25-115 / Nessus ID 278346)
A vulnerability labeled as problematic has been found in Adobe Experience Manager up to 6.5.23. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to cross site scripting. This vulnerability is tra
CVE-2025-64537 | Adobe Experience Manager up to 6.5.23 cross site scripting (apsb25-115 / Nessus ID 278346)
A vulnerability categorized as problematic has been discovered in Adobe Experience Manager up to 6.5.23. This impacts an unknown function. Such manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2025-64537.
CVE-2025-34423 | MailEnable up to 10.53 MEAIAU.DLL uncontrolled search path (EUVD-2025-202442)
A vulnerability was found in MailEnable up to 10.53. It has been declared as problematic. This issue affects some unknown processing in the library MEAIAU.DLL. Executing a manipulation can lead to uncontrolled search path. The identificatio
CVE-2025-12046 | Lenovo App Store/Browser prior 9.0.2530.1027 uncontrolled search path
A vulnerability was found in Lenovo App Store and Browser. It has been declared as problematic. Affected by this issue is some unknown functionality. Such manipulation leads to uncontrolled search path. This vulnerability is referenced as C
CVE-2025-13184 | TOTOLINK AX1800 cstecgi.cgi?action=telnet missing authentication (EUVD-2025-202419)
A vulnerability classified as critical has been found in TOTOLINK AX1800. This affects an unknown part of the file /cgi-bin/cstecgi.cgi?action=telnet. The manipulation leads to missing authentication. This vulnerability is traded as CVE-202
CVE-2023-53757 | Linux Kernel up to 6.2.2 irq-mvebu-gicp of_irq_find_parent reference count (EUVD-2023-60071 / WID-SEC-2025-2756)
A vulnerability has been found in Linux Kernel up to 6.2.2 and classified as critical. Affected is the function of_irq_find_parent of the component irq-mvebu-gicp. This manipulation causes improper update of reference count. The identificat
CVE-2023-53755 | Linux Kernel up to 6.1.15/6.2.2 PTDMA Driver pt_issue_pending null pointer dereference (EUVD-2023-60073 / WID-SEC-2025-2756)
A vulnerability was found in Linux Kernel up to 6.1.15/6.2.2. It has been rated as critical. This affects the function pt_issue_pending of the component PTDMA Driver. This manipulation causes null pointer dereference. This vulnerability is
CVE-2023-53753 | Linux Kernel up to 6.1.15/6.2.2 out-of-bounds (EUVD-2023-60075 / Nessus ID 277669)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.15/6.2.2. This impacts an unknown function. The manipulation results in out-of-bounds read. This vulnerability was named CVE-2023-53753. The attack needs
CVE-2023-53754 | Linux Kernel up to 6.3.1 scsi lpfc_sli4_pci_mem_setup null pointer dereference (EUVD-2023-60074 / Nessus ID 277771)
A vulnerability was found in Linux Kernel up to 6.3.1. It has been declared as critical. The impacted element is the function lpfc_sli4_pci_mem_setup of the component scsi. The manipulation results in null pointer dereference. This vulnerab
CVE-2023-53752 | Linux Kernel up to 6.1.53/6.4.15/6.5.2 net net/core/skbuff.c kmalloc_reserve integer overflow (EUVD-2023-60076 / Nessus ID 277785)
A vulnerability classified as critical was found in Linux Kernel up to 6.1.53/6.4.15/6.5.2. Affected by this issue is the function kmalloc_reserve of the file net/core/skbuff.c of the component net. The manipulation results in integer overf
CVE-2023-53751 | Linux Kernel up to 6.1.27/6.2.14/6.3.1 cifs hostname use after free (EUVD-2023-60077 / Nessus ID 297065)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.27/6.2.14/6.3.1. This affects the function TCP_Server_Info::hostname of the component cifs. The manipulation leads to use after free. This vulnerabi
CVE-2025-13339 | Hippoo Mobile App for WooCommerce Plugin up to 1.7.1 on WordPress template_redirect path traversal (EUVD-2025-202393)
A vulnerability classified as problematic was found in Hippoo Mobile App for WooCommerce Plugin up to 1.7.1 on WordPress. The impacted element is the function template_redirect. The manipulation results in path traversal. This vulnerability
CVE-2025-61809 | Adobe ColdFusion up to 2021.22/2023.16/2025.4 Security Feature input validation (apsb25-105 / Nessus ID 278173)
A vulnerability identified as critical has been detected in Adobe ColdFusion up to 2021.22/2023.16/2025.4. This vulnerability affects unknown code of the component Security Feature. Performing a manipulation results in improper input valida
CVE-2025-64897 | Adobe ColdFusion up to 2021.22/2023.16/2025.4 access control (apsb25-105)
A vulnerability was found in Adobe ColdFusion up to 2021.22/2023.16/2025.4 and classified as critical. This impacts an unknown function. Executing a manipulation can lead to improper access controls. This vulnerability is tracked as CVE-202