Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 720 | 0,2 % |
| ≥50 % | 3.222 | 0,9 % |
| ≥10 % | 22.115 | 6,0 % |
| <10 % | 343.232 | 92,9 % |
CVE-2026-101309 | FreeBSD bhyve up to p1/p4/p10 xHCI device model race condition (EUVD-2026-101932)
A vulnerability described as very critical has been identified in FreeBSD bhyve up to p1/p4/p10. Affected by this vulnerability is an unknown functionality of the component xHCI device model. Such manipulation leads to race condition. This
CVE-2026-101310 | FreeBSD bhyve HDA audio device model out-of-bounds (p2/p5/p11 / EUVD-2026-101931)
A vulnerability classified as very critical has been found in FreeBSD bhyve. Affected by this issue is some unknown functionality of the component HDA audio device model. Performing a manipulation results in out-of-bounds read. This vulnera
CVE-2026-101311 | FreeBSD bhyve Framebuffer Device Model width/height input validation (p2/p5/p11 / EUVD-2026-101930)
A vulnerability, which was classified as very critical, has been found in FreeBSD bhyve. This vulnerability affects unknown code of the component Framebuffer Device Model. The manipulation of the argument width/height leads to improper inpu
CVE-2026-102475 | Eclipse Vert.x up to 5.0.12/5.1.9/5.2.0 vertx-http-proxy resource consumption (EUVD-2026-101928)
A vulnerability classified as problematic was found in Eclipse Vert.x up to 5.0.12/5.1.9/5.2.0. This affects an unknown part of the component vertx-http-proxy. Executing a manipulation can lead to resource consumption. This vulnerability is
CVE-2026-102467 | Eclipse Vert.x up to 4.5.34/5.0.12/5.1.9/5.2.0 io.vertx:vertx-core allocation of resources (EUVD-2026-101929)
A vulnerability has been found in Eclipse Vert.x up to 4.5.34/5.0.12/5.1.9/5.2.0 and classified as problematic. Impacted is an unknown function of the component io.vertx:vertx-core. This manipulation causes allocation of resources. This vul
CVE-2026-102465 | Eclipse Vert.x up to 4.5.34/5.0.12/5.1.9/5.2.0 RESP Parser allocation of resources (EUVD-2026-101927)
A vulnerability, which was classified as problematic, was found in Eclipse Vert.x up to 4.5.34/5.0.12/5.1.9/5.2.0. This issue affects some unknown processing of the component RESP Parser. The manipulation results in allocation of resources.
Langflow: Authentifizierte RCE-Lücke (CVE-2026-105740) wird aktiv ausgenutzt
LONDON (IT BOLTWISE) – Angreifer nutzen eine kritische Sicherheitslücke in Langflow gezielt aus: CVE-2026-105740 ermöglicht Remote Code Execution trotz Authentifizierung. Laut Daten aus Honeypot-Sensoren gab es seit dem 19. September 2026 i
CVE-2026-108092 | Blog2Social Plugin up to 9.1.4 on WordPress AJAX Handlers b2s_ship_item/b2s_ship_item_reload_url postId resource injection (EUVD-2026-101926)
A vulnerability was found in Blog2Social Plugin up to 9.1.4 on WordPress and classified as problematic. The affected element is the function b2s_ship_item/b2s_ship_item_reload_url of the component AJAX Handlers. Such manipulation of the arg
CVE-2025-29897 | QNAP Qsync Central up to 5.0.0.3 buffer overflow (EUVD-2025-211092)
A vulnerability described as very critical has been identified in QNAP Qsync Central up to 5.0.0.3. This affects an unknown function. The manipulation results in buffer overflow. This vulnerability is identified as CVE-2025-29897. The attac
CVE-2025-29896 | QNAP Qsync Central up to 5.0.0.3 null pointer dereference (EUVD-2025-211091)
A vulnerability marked as critical has been reported in QNAP Qsync Central up to 5.0.0.3. The impacted element is an unknown function. The manipulation leads to null pointer dereference. This vulnerability is referenced as CVE-2025-29896. R
CVE-2025-29895 | QNAP Qsync Central up to 5.0.0.3 null pointer dereference (EUVD-2025-211090)
A vulnerability classified as critical was found in QNAP Qsync Central up to 5.0.0.3. The impacted element is an unknown function. The manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2025-29895. The
CVE-2025-66275 | QNAP Video Station up to 5.8.4 path traversal (EUVD-2025-211094)
A vulnerability classified as problematic was found in QNAP Video Station up to 5.8.4. Affected is an unknown function. Such manipulation leads to path traversal. This vulnerability is listed as CVE-2025-66275. The attack may be performed f
CVE-2025-66272 | QNAP Video Station up to 5.8.4 path traversal (EUVD-2025-211093)
A vulnerability classified as problematic has been found in QNAP Video Station up to 5.8.4. This impacts an unknown function. This manipulation causes path traversal. This vulnerability is tracked as CVE-2025-66272. The attack is possible t
CVE-2025-68403 | QNAP QuRouter up to 2.6.4.001 config (EUVD-2025-211095)
A vulnerability labeled as critical has been found in QNAP QuRouter up to 2.6.4.001. This impacts an unknown function. The manipulation results in configuration. This vulnerability was named CVE-2025-68403. The attack needs to be approached
CVE-2026-22896 | QNAP Network & Virtual Switch cross site scripting (EUVD-2026-101872)
A vulnerability marked as problematic has been reported in QNAP Network &amp; Virtual Switch. Affected is an unknown function. This manipulation causes cross site scripting. The identification of this vulnerability is CVE-2026-22896. It
CVE-2026-24715 | QNAP QuRouter up to 2.6.3.009 information disclosure (EUVD-2026-101873)
A vulnerability categorized as problematic has been discovered in QNAP QuRouter up to 2.6.3.009. This issue affects some unknown processing. Such manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE
CVE-2026-101303 | FreeBSD Jail access control (EUVD-2026-101874)
A vulnerability categorized as very critical has been discovered in FreeBSD. The impacted element is an unknown function of the component Jail. Executing a manipulation can lead to improper access controls. This vulnerability is handled as
CVE-2026-24722 | QNAP File Station up to 5.5.6.5208 null pointer dereference (EUVD-2026-101877)
A vulnerability was found in QNAP File Station and classified as problematic. This vulnerability affects unknown code. The manipulation results in null pointer dereference. This vulnerability is reported as CVE-2026-24722. The attack can be
CVE-2026-24721 | QNAP File Station 5 5.5.6.4741/5.5.6.4933/5.5.6.5208 null pointer dereference (EUVD-2026-101876)
A vulnerability has been found in QNAP File Station 5 5.5.6.4741/5.5.6.4933/5.5.6.5208 and classified as problematic. This affects an unknown part. The manipulation leads to null pointer dereference. This vulnerability is documented as CVE-
CVE-2026-24718 | QNAP Qsync Central prior 5.0.0.7/5.1.0.3/5.2.0.5/5.3.0.2 path traversal (EUVD-2026-101875)
A vulnerability, which was classified as problematic, was found in QNAP Qsync Central. Affected by this issue is some unknown functionality. Executing a manipulation can lead to path traversal. This vulnerability is registered as CVE-2026-2
CVE-2026-39993 | QNAP Download Station prior 5.10.2.313/5.11.3.322 path traversal (EUVD-2026-101879)
A vulnerability was found in QNAP Download Station. It has been declared as problematic. Impacted is an unknown function. Such manipulation leads to path traversal. This vulnerability is traded as CVE-2026-39993. The attack may be launched
CVE-2026-24723 | QNAP File Station up to 5.5.6.5208 null pointer dereference (EUVD-2026-101878)
A vulnerability was found in QNAP File Station. It has been classified as problematic. This issue affects some unknown processing. This manipulation causes null pointer dereference. This vulnerability appears as CVE-2026-24723. The attack m
CVE-2026-101339 | NLnet Labs NSD up to 4.15.2 stack-based overflow (Nessus ID 365994)
A vulnerability was found in NLnet Labs NSD up to 4.15.2. It has been rated as very critical. This issue affects some unknown processing. This manipulation causes stack-based buffer overflow. This vulnerability is tracked as CVE-2026-101339
CVE-2026-101337 | NLnet Labs NSD up to 4.15.2 stack-based overflow (Nessus ID 365996)
A vulnerability identified as very critical has been detected in NLnet Labs NSD up to 4.15.2. The affected element is an unknown function. Performing a manipulation results in stack-based buffer overflow. This vulnerability is cataloged as
CVE-2026-101338 | NLnet Labs NSD up to 4.15.2 Base64 Decoder stack-based overflow (Nessus ID 365997)
A vulnerability categorized as very critical has been discovered in NLnet Labs NSD up to 4.15.2. Impacted is an unknown function of the component Base64 Decoder. Such manipulation leads to stack-based buffer overflow. This vulnerability is
CVE-2026-93262 | Linux Kernel up to 7.2.5 raid5-ppl drivers/md/raid5-ppl.c ppl_do_flush use after free (Nessus ID 366002)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.2.5. Impacted is the function ppl_do_flush of the file drivers/md/raid5-ppl.c of the component raid5-ppl. This manipulation causes use after free
PoC Exploit Released for Critical Fortinet FortiClient EMS Authentication Bypass Vulnerability
A public proof-of-concept exploit is available for CVE-2026-35616, a critical authentication and authorization bypass vulnerability affecting Fortinet FortiClient Endpoint Management Server (EMS). Published by GitHub user Alaatk, the reposi
CVE-2026-41544 | QNAP QcalAgent up to 1.1.9 path traversal (EUVD-2026-101880)
A vulnerability was found in QNAP QcalAgent up to 1.1.9. It has been rated as problematic. The affected element is an unknown function. Performing a manipulation results in path traversal. This vulnerability is known as CVE-2026-41544. Remo
CVE-2026-19377 | Cato Client for Windows Tunnel Handshake certificate validation (EUVD-2026-101881)
A vulnerability, which was classified as problematic, has been found in Cato Client for Windows, Client for macOS, Client for Linux, Client for iOS and Client for Android. Affected by this vulnerability is an unknown functionality of the co
CVE-2026-101307 | FreeBSD Kernel RACK stack out-of-bounds write (EUVD-2026-101882)
A vulnerability labeled as very critical has been found in FreeBSD Kernel. The affected element is an unknown function of the component RACK stack. Executing a manipulation can lead to out-of-bounds write. The identification of this vulnera
CVE-2026-101308 | FreeBSD Kernel up to p1/p4/p10 sound use after free (EUVD-2026-101883)
A vulnerability identified as very critical has been detected in FreeBSD Kernel up to p1/p4/p10. This affects an unknown function of the component sound. The manipulation leads to use after free. This vulnerability is uniquely identified as
CISA Warns Hackers Are Exploiting Ivanti VPN Zero-Day to Steal Credentials and Data
CISA has warned that hackers are actively exploiting a newly disclosed Ivanti Connect Secure vulnerability to steal credentials and exfiltrate data. Tracked as CVE-2026-104935, the authentication bypass enables remote, unauthenticated comma
CVE-2026-75996 | Adobe ColdFusion resource consumption (WID-SEC-2026-3945)
A vulnerability classified as problematic was found in Adobe ColdFusion. This issue affects some unknown processing. The manipulation results in resource consumption. This vulnerability was named CVE-2026-75996. The attack may be performed
CVE-2026-75994 | Adobe ColdFusion improper authorization (WID-SEC-2026-3945)
A vulnerability was found in Adobe ColdFusion and classified as critical. Affected by this issue is some unknown functionality. Such manipulation leads to improper authorization. This vulnerability is uniquely identified as CVE-2026-75994.
CVE-2026-48378 | Adobe Content Credentials Rust SDK input validation (WID-SEC-2026-3945)
A vulnerability, which was classified as problematic, has been found in Adobe Content Credentials Rust SDK, C2PA Tool and Content Credentials JS SDK. The impacted element is an unknown function. This manipulation causes improper input valid
CVE-2026-34634 | Adobe ColdFusion server-side request forgery (WID-SEC-2026-3945)
A vulnerability was found in Adobe ColdFusion. It has been rated as problematic. This impacts an unknown function. This manipulation causes server-side request forgery. This vulnerability is tracked as CVE-2026-34634. The attack is possible
CVE-2022-46580 | TRENDnet TEW755AP 1.13B01 wifi_captive_portal user_edit_page stack-based overflow (EUVD-2022-49384)
A vulnerability was found in TRENDnet TEW755AP 1.13B01. It has been classified as critical. The impacted element is the function wifi_captive_portal. The manipulation of the argument user_edit_page leads to stack-based buffer overflow. This
CVE-2022-46551 | Tenda F1203 2.0.1.6 saveParentControlInfo time buffer overflow (EUVD-2022-49355)
A vulnerability has been found in Tenda F1203 2.0.1.6 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/saveParentControlInfo. This manipulation of the argument Time causes buffer overflow.
CVE-2022-46550 | Tenda F1203 2.0.1.6 saveParentControlInfo urls buffer overflow (EUVD-2022-49354)
A vulnerability, which was classified as critical, was found in Tenda F1203 2.0.1.6. Affected by this vulnerability is an unknown functionality of the file /goform/saveParentControlInfo. The manipulation of the argument urls results in buff
CVE-2022-46549 | Tenda F1203 2.0.1.6 saveParentControlInfo deviceId buffer overflow (EUVD-2022-49353)
A vulnerability, which was classified as critical, has been found in Tenda F1203 2.0.1.6. Affected is an unknown function of the file /goform/saveParentControlInfo. The manipulation of the argument deviceId leads to buffer overflow. This vu
CVE-2015-8126 | Oracle Java SE 6u105/7u91/8u66 AWT memory corruption (Nessus ID 87015 / ID 168929)
A vulnerability, which was classified as very critical, was found in Oracle Java SE 6u105/7u91/8u66. This affects an unknown part of the component AWT. The manipulation results in memory corruption. This vulnerability is cataloged as CVE-20
CVE-2015-6093 | Microsoft Office/SharePoint memory corruption (MS15-116 / Nessus ID 86823)
A vulnerability was found in Microsoft Office and SharePoint. It has been classified as critical. This affects an unknown function. The manipulation leads to memory corruption. This vulnerability is referenced as CVE-2015-6093. Remote explo
CVE-2015-4911 | Oracle Java SE 6u101/7u85/8u60 JAXP denial of service (Nessus ID 86636 / ID 350097)
A vulnerability classified as problematic has been found in Oracle Java SE 6u101/7u85/8u60. Affected by this issue is some unknown functionality of the component JAXP. Performing a manipulation results in denial of service. This vulnerabili
CVE-2015-4903 | Oracle Java SE 6u101/7u85/8u60 RMI denial of service (Nessus ID 86636 / ID 350097)
A vulnerability labeled as problematic has been found in Oracle Java SE 6u101/7u85/8u60. This impacts an unknown function of the component RMI. The manipulation results in denial of service. This vulnerability was named CVE-2015-4903. The a
CVE-2015-4893 | Oracle Java SE 6u101/7u85/8u60 JAXP denial of service (Nessus ID 86636 / ID 350097)
A vulnerability described as problematic has been identified in Oracle Java SE 6u101/7u85/8u60. Affected by this vulnerability is an unknown functionality of the component JAXP. Such manipulation leads to denial of service. This vulnerabili
CVE-2015-4883 | Oracle Java SE 6u101/7u85/8u60 RMI denial of service (Nessus ID 86636 / ID 350097)
A vulnerability labeled as problematic has been found in Oracle Java SE 6u101/7u85/8u60. The affected element is an unknown function of the component RMI. Executing a manipulation can lead to denial of service. The identification of this vu
CVE-2015-4882 | Oracle Java SE 6u101/7u85/8u60 CORBA denial of service (Nessus ID 86636 / ID 350097)
A vulnerability was found in Oracle Java SE 6u101/7u85/8u60. It has been rated as problematic. The affected element is an unknown function of the component CORBA. Performing a manipulation results in denial of service. This vulnerability is
CVE-2015-4881 | Oracle Java SE 6u101/7u85/8u60 CORBA denial of service (Nessus ID 86636 / ID 350097)
A vulnerability categorized as problematic has been discovered in Oracle Java SE 6u101/7u85/8u60. This issue affects some unknown processing of the component CORBA. Such manipulation leads to denial of service. This vulnerability is uniquel
AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The vulnerabilities in question are CVE-2026-105
Sicherheitsrisiko Smartphonewechsel: TU Graz deckt Schwachstelle auf - derStandard.de
Zu dieser Erkenntnis sind IT-Sicherheitsforschende der TU Graz und des Zentrums für sichere Informationstechnologie A-SIT in Wien gekommen. Angreifer ... Weiterlesen
CVE-2026-93484 | Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or denial of service. Specifically this is in Kernel::System::Ticket::TicketSearch and Kernel::System::Ticket::ArticleSearchIndex::DB via the ContentSearch parameter. The p
Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary
CVE-2026-93483 | In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can impersonate any user, including administrators, without requiring a password. This grants full access to confidential data and system controls. More specifically, the HTTPBasicAuth modules for the agent
In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this hea
CVE-2026-110912 | In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address length (ar_hln) and protocol address length (ar_pln) fields of incoming ARP packets. in_arpreply() then uses these attacker-controlled values as memcpy lengths when copying from kernel buffers that are only 6 and 4 bytes long, resulting in an out-of-bounds read of kernel heap and stack memory that is
In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address length (ar_hln) and protocol address length (ar_pln) fields of incoming ARP pack
CVE-2026-110911 | Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property, operator, value), string/UUID-key lookup paths (findByKey, updateByKey, deleteByKey and findOrCreateBy...), and validatesUniquenessOf. The parser incorrectly treats a doubled single quote as the end of a literal. Applications passing request data
Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(property, value) and where(property, operator, value), string/
CVE-2026-110909 | Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A process listening on a port targeted by the CLI can receive the project's reload password and code submitted through wheels reload or wheels console; console also probes common ports when the project server is down. Other commands can perform unintended state-changing operations against a different local application's serve
Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A process listening on a port targeted by the CLI can receive the project's reload password and code subm
CVE-2026-110908 | Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filter value that breaks out of a single-quoted sed expression into which escapeshellarg() output is concatenated. Shell command substitution is then evaluated by a popen() pipeline, allowing attacker-selected commands to exec
Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI user with only the page-status-frr privilege can supply a filt
CVE-2026-76663 | A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.
A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.
CVE-2026-76662 | A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.
A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.
CVE-2026-110907 | Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like [node:title] or [user:name]) used to automatically insert dynamic data into text. A browser is provided for selecting tokens by type. The product doesn't sufficiently limit access to the types of tokens that are available in the token browser. The names of the individual tokens are adequately protected.
Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like [node:title] or [user:name]) used to automatically insert dynamic data into text. A browser is provided for selec
CVE-2026-76661 | A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.
A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.