Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 720 | 0,2 % |
| ≥50 % | 3.224 | 0,9 % |
| ≥10 % | 22.096 | 6,0 % |
| <10 % | 345.215 | 93,0 % |
CVE-2026-89659 | Linux Kernel up to 6.18.50/7.2.3 NFSD nfs4_laundromat use after free (EUVD-2026-76571)
A vulnerability classified as very critical has been found in Linux Kernel up to 6.18.50/7.2.3. This issue affects the function nfs4_laundromat of the component NFSD. The manipulation leads to use after free. This vulnerability is traded as
CVE-2026-89662 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 NFSD __destroy_client use after free (EUVD-2026-76574)
A vulnerability classified as very critical was found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. Impacted is the function __destroy_client of the component NFSD. The manipulation results in use after free. This vulnerability is known as
CVE-2026-89675 | Linux Kernel up to 6.18.50/7.2.3 NFSd Async Copy nfsd4_do_async_copy refcount/nf_src/nf_dst/copy_task use after free (EUVD-2026-76587 / Nessus ID 364483)
A vulnerability has been found in Linux Kernel up to 6.18.50/7.2.3 and classified as very critical. This affects the function nfsd4_do_async_copy of the component NFSd Async Copy. Performing a manipulation of the argument refcount/nf_src/nf
CVE-2026-89672 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 NFSACL nfsacld_proc_setacl mask input validation (EUVD-2026-76584)
A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. The affected element is the function nfsacld_proc_setacl of the component NFSACL. The manipulation of the argument mask leads to improp
CVE-2026-89676 | Linux Kernel up to 6.18.49/7.2.3 nfsd nfsd4_copy use after free (EUVD-2026-76588 / Nessus ID 364483)
A vulnerability was found in Linux Kernel up to 6.18.49/7.2.3 and classified as very critical. This impacts the function nfsd4_copy of the component nfsd. Executing a manipulation can lead to use after free. The identification of this vulne
PwnEscape (CVE-2026-99999): Patched kernels available in testing
A new Linux kernel vulnerability, nicknamed PwnEscape (CVE-2026-99999), has been disclosed. It is a guest-to-host virtual machine (VM) escape: anyone who controls a guest VM can send specially crafted network packets that leak the host’s ke
CVE-2026-89685 | Linux Kernel up to 6.18.50/7.2.3 nfsd clients_still_reclaiming comparison (EUVD-2026-76597)
A vulnerability was found in Linux Kernel up to 6.18.50/7.2.3. It has been rated as critical. The affected element is the function clients_still_reclaiming of the component nfsd. Performing a manipulation results in incorrect comparison. Th
CVE-2026-89699 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 nfsd nfsd4_decode_create cr_datalen out-of-bounds write (EUVD-2026-76611)
A vulnerability was found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. It has been rated as critical. Affected by this issue is the function nfsd4_decode_create of the component nfsd. This manipulation of the argument cr_datalen causes out
CVE-2026-89697 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 nfsd nfsd_proc_setattr authorization (EUVD-2026-76609)
A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. The impacted element is the function nfsd_proc_setattr of the component nfsd. This manipulation causes missing authorization. This vuln
CVE-2026-89686 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 nfsd nfsd4_alloc_layout_stateid locking (EUVD-2026-76598)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. This affects the function nfsd4_alloc_layout_stateid of the component nfsd. This manipulation causes improper locking. The ident
Critical BlockStrap flaw lets hackers run code on Magento servers
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. [...] Weiterlesen
CVE-2022-46740 | Huawei WS7100-20 Wi-Fi denial of service (EUVD-2022-49526)
A vulnerability categorized as problematic has been discovered in Huawei WS7100-20. This affects an unknown function of the component Wi-Fi Module. Executing a manipulation can lead to denial of service. The identification of this vulnerabi
CVE-2022-46723 | Apache macOS privilege escalation (EUVD-2022-49512)
A vulnerability labeled as critical has been found in Apache macOS. Affected is an unknown function. Such manipulation leads to privilege escalation. This vulnerability is traded as CVE-2022-46723. The attack may be launched remotely. There
CVE-2022-46720 | Apple iOS/iPadOS up to 16.1.x integer overflow (HT213530 / EUVD-2022-49509)
A vulnerability classified as problematic was found in Apple iOS and iPadOS up to 16.1.x. This issue affects some unknown processing. Executing a manipulation can lead to integer overflow. This vulnerability appears as CVE-2022-46720. The a
CVE-2022-46718 | Apple macOS information disclosure (EUVD-2022-49507)
A vulnerability was found in Apple macOS. It has been rated as problematic. This vulnerability affects unknown code. Performing a manipulation results in information disclosure. This vulnerability was named CVE-2022-46718. The attack needs
CVE-2022-46717 | Apple iOS/iPadOS up to 16.1 Accessibility Features information disclosure (EUVD-2022-49506)
A vulnerability marked as problematic has been reported in Apple iOS and iPadOS up to 16.1. Affected is an unknown function of the component Accessibility Features. Performing a manipulation results in information disclosure. This vulnerabi
CVE-2022-46716 | Apple macOS Private Relay state issue (EUVD-2022-49505)
A vulnerability labeled as problematic has been found in Apple macOS. This issue affects some unknown processing of the component Private Relay Handler. The manipulation results in state issue. This vulnerability was named CVE-2022-46716. T
CVE-2022-46715 | Apple iOS/iPadOS Privacy Preferences access control (EUVD-2022-49504)
A vulnerability labeled as critical has been found in Apple iOS and iPadOS. The affected element is an unknown function of the component Privacy Preferences. The manipulation results in improper access controls. This vulnerability is identi
CVE-2022-46713 | Apple macOS File System race condition (EUVD-2022-49502)
A vulnerability was found in Apple macOS. It has been classified as problematic. Impacted is an unknown function of the component File System Handler. Performing a manipulation results in race condition. This vulnerability is cataloged as C
CVE-2022-46712 | Apple macOS up to 12.7.6 App use after free (HT213488 / EUVD-2022-49501)
A vulnerability, which was classified as critical, was found in Apple macOS. This affects an unknown part of the component App Handler. The manipulation results in use after free. This vulnerability is identified as CVE-2022-46712. The atta
CVE-2022-46709 | Apple iOS 15.x Kernel memory corruption (EUVD-2022-49498)
A vulnerability was found in Apple iOS 15.x. It has been declared as critical. The affected element is an unknown function of the component Kernel. The manipulation results in memory corruption. This vulnerability is reported as CVE-2022-46
CVE-2022-46704 | Apple macOS App state issue (EUVD-2022-49493)
A vulnerability was found in Apple macOS and classified as problematic. This issue affects some unknown processing of the component App Handler. Such manipulation leads to state issue. This vulnerability is listed as CVE-2022-46704. The att
CVE-2022-46703 | Apple iOS/iPadOS Location information disclosure (EUVD-2022-49492)
A vulnerability classified as problematic has been found in Apple iOS and iPadOS. The impacted element is an unknown function of the component Location Handler. Performing a manipulation results in information disclosure. This vulnerability
Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise
Attackers exploit a critical Cisco email gateway flaw to gain root access. Cisco urges customers to update scanner tools and check for compromise. Cisco confirmed this week that threat actors are exploiting a critical vulnerability in Cisco
CVE-2026-85831 | Microsoft Windows up to Server 2025 Windows Biometric Service buffer overflow (EUVD-2026-99540)
A vulnerability was found in Microsoft Windows up to Server 2025. It has been classified as problematic. This vulnerability affects unknown code of the component Windows Biometric Service. Performing a manipulation results in buffer overflo
CVE-2026-85830 | Microsoft Windows up to Server 2025 Installer out-of-bounds (EUVD-2026-99539)
A vulnerability was found in Microsoft Windows and classified as problematic. This affects an unknown part of the component Installer. Such manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2026-85830. An attack
CVE-2026-85833 | Microsoft Windows up to Server 2025 Modern Device Management use after free (EUVD-2026-99542)
A vulnerability was found in Microsoft Windows. It has been classified as very critical. The affected element is an unknown function of the component Modern Device Management. The manipulation leads to use after free. This vulnerability is
CVE-2026-85832 | Microsoft Windows up to Server 2025 Background Intelligent Transfer Service buffer overflow (EUVD-2026-99541)
A vulnerability has been found in Microsoft Windows and classified as very critical. This issue affects some unknown processing of the component Background Intelligent Transfer Service. Performing a manipulation results in buffer overflow.
CVE-2026-85834 | Microsoft Windows up to Server 2025 TCP IP heap-based overflow (EUVD-2026-99543)
A vulnerability categorized as very critical has been discovered in Microsoft Windows. This impacts an unknown function of the component TCP IP. Such manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identifie
CVE-2026-85835 | Microsoft Windows up to Server 2025 Servicing Stack out-of-bounds (EUVD-2026-99544)
A vulnerability was found in Microsoft Windows 11 24H2/11 25H2/11 26H1/11 26H2/Server 2025. It has been rated as problematic. Impacted is an unknown function of the component Servicing Stack. The manipulation leads to out-of-bounds read. Th
CVE-2026-85836 | Microsoft Windows up to Server 2025 Kernel use after free (EUVD-2026-99545)
A vulnerability was found in Microsoft Windows 11 24H2/11 25H2/11 26H1/11 26H2/Server 2025. It has been declared as very critical. This issue affects some unknown processing of the component Kernel. Executing a manipulation can lead to use
CVE-2026-85837 | Microsoft Windows up to Server 2025 out-of-bounds (EUVD-2026-99546)
A vulnerability categorized as very critical has been discovered in Microsoft Windows 11 24H2/11 25H2/11 26H1/11 26H2/Server 2025. The affected element is an unknown function. The manipulation results in out-of-bounds read. This vulnerabili
CVE-2026-85842 | Microsoft Windows up to Server 2025 Windows Image Acquisition format string (EUVD-2026-99548)
A vulnerability was found in Microsoft Windows up to Server 2025. It has been declared as very critical. The impacted element is an unknown function of the component Windows Image Acquisition. The manipulation results in format string. This
CVE-2026-85840 | Microsoft Windows up to Server 2025 Event Viewer information disclosure (EUVD-2026-99547)
A vulnerability, which was classified as problematic, was found in Microsoft Windows. Affected by this vulnerability is an unknown functionality of the component Event Viewer. The manipulation results in information disclosure. This vulnera
CVE-2026-85843 | Microsoft Windows up to Server 2025 Background Intelligent Transfer Service uninitialized resource (EUVD-2026-99549)
A vulnerability labeled as very critical has been found in Microsoft Windows. This affects an unknown function of the component Background Intelligent Transfer Service. Such manipulation leads to uninitialized resource. This vulnerability i
CVE-2022-46702 | Apple iOS/iPadOS up to 16.1.2 GPU Drivers memory corruption (HT213530 / EUVD-2022-49491)
A vulnerability identified as problematic has been detected in Apple iOS and iPadOS up to 16.1.2. Affected is an unknown function of the component GPU Drivers. This manipulation causes memory corruption. This vulnerability is registered as
CVE-2022-46701 | Apple iOS/iPadOS up to 16.1.2 Kernel memory corruption (HT213530 / EUVD-2022-49490)
A vulnerability was found in Apple iOS and iPadOS up to 16.1.2 and classified as critical. This affects an unknown function of the component Kernel. Executing a manipulation can lead to memory corruption. The identification of this vulnerab
CVE-2026-102764 | BeyondTrust Remote Support up to 26.2.3 data authenticity (WID-SEC-2026-4001)
A vulnerability marked as very critical has been reported in BeyondTrust Remote Support up to 26.2.3. Affected by this vulnerability is an unknown functionality. The manipulation leads to insufficient verification of data authenticity. This
CVE-2026-9703 | Grafana Data Source Proxy /loki/api/v1/rules access control (WID-SEC-2026-4002)
A vulnerability was found in Grafana. It has been declared as problematic. Affected is an unknown function of the file /loki/api/v1/rules of the component Data Source Proxy. Such manipulation leads to improper access controls. This vulnerab
CVE-2026-95155 | FasterXML Jackson up to 1.9.13 ObjectMapper.readValue denial of service (WID-SEC-2026-4003)
A vulnerability classified as problematic has been found in FasterXML Jackson 1.8.3/1.9.2/1.9.11/1.9.12/1.9.13. Affected by this issue is the function ObjectMapper.readValue. This manipulation causes denial of service. This vulnerability is
Prolific Chinese espionage group exploits BeyondTrust zero-day
Researchers said the first known attack by Armory Castle, also known as UNC5221, occurred almost seven weeks ago. The threat group previously compromised Ivanti and Citrix customers. This article has been indexed from CyberScoop Read the or
CVE-2026-96806 | Apache Airflow Keycloak Provider up to 0.11.0 KeycloakJWTMiddleware session expiration (WID-SEC-2026-4005)
A vulnerability, which was classified as critical, was found in Apache Airflow Keycloak Provider up to 0.11.0. This issue affects some unknown processing of the component KeycloakJWTMiddleware. The manipulation results in session expiration
CVE-2026-94135 | Apache Airflow SFTP Provider up to 6.x Deferrable Code Paths no_host_key_check certificate validation (WID-SEC-2026-4005)
A vulnerability marked as problematic has been reported in Apache Airflow SFTP Provider up to 6.x. Affected is an unknown function of the component Deferrable Code Paths. This manipulation of the argument no_host_key_check causes improper c
CVE-2026-94134 | Apache Airflow SSH Provider/Airflow SFTP Provider up to 6.x SSH Hook/SFTP Hook host_key/no_host_key_check certificate validation (WID-SEC-2026-4005)
A vulnerability classified as problematic has been found in Apache Airflow SSH Provider and Airflow SFTP Provider up to 6.x. Affected by this issue is some unknown functionality of the component SSH Hook/SFTP Hook. Performing a manipulation
CVE-2026-92228 | Apache Airflow Keycloak Provider up to 0.11.0 Multi-Team Provisioning _attach_team_permissions privileges management (WID-SEC-2026-4005)
A vulnerability described as problematic has been identified in Apache Airflow Keycloak Provider up to 0.11.0. Affected by this vulnerability is the function _attach_team_permissions of the component Multi-Team Provisioning. Such manipulati
CVE-2026-91858 | Apache Camel Camel-FOP xml external entity reference (WID-SEC-2026-4006)
A vulnerability described as critical has been identified in Apache Camel. Affected is an unknown function of the component Camel-FOP. Such manipulation leads to xml external entity reference. This vulnerability is traded as CVE-2026-91858.
Warnung des BSI: Angriffe auf Zero-Day-Lücke in Cisco Secure Email Gateway - Golem.de
Der Malware-Scanner von Ciscos Secure Email Gateway reagiert fehlerhaft auf speziell gestaltete E-Mails. Hacker erhalten so Root-Rechte. Weiterlesen
CVE-2026-59970 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks when an authenticated user creates a Space, configures an AI provider with a URL targeting an internal address, and invokes an AI action. In cookbook/views/api.py, the affected AI actions call completion through TAR
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF
CVE-2026-61726 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks instead of the private-recipe owner or sharing predicate when an authenticated user with read and write API scope in the victim's Space supplies a private recipe or step identifier to the Step API. Request processing uses StepViewSet, Ingredien
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks instead of the privat
CVE-2026-59966 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, executes user-controlled Automation regular-expression patterns with Python re.sub() without complexity validation or an execution timeout when an authenticated user stores a catastrophic-backtracking regex and any user in the same Space imports a matching recipe. Request processing uses Automation.param_2, apply_regex_replace_automation, sub,
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, executes user-controlled Automation regular-expression patterns with Python re.sub() without complexity validation or an e
CVE-2026-59963 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies another member's private recipe identifier to AI import, file, external-link, or share-link endpoints. Request processing uses api/ai-import/, api/get_recipe_file/,
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permissio
CVE-2026-17068 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag.
CVE-2026-17073 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution.
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution.
CVE-2026-17275 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers.
CVE-2026-17488 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.
CVE-2026-17491 | IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive.
IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive.
CVE-2026-102917 | IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system.
IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system.
CVE-2026-89098 | A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted.
A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed
CVE-2026-81452 | Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privilege and Denial of Service.
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileg
CVE-2026-111723 | LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manage all accounts through the /admin/v1/admins API protected only by AuthAdminJWT. Attackers can self-register, read every account's bcrypt hash, reset the bootstrap administrator's password via PUT, raise their authority_id, and delete accounts.
LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manage all accounts through the /admin/v1/admins API protected only by AuthAdminJWT. Attackers can self-register, read ev