Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 745 | 0,2 % |
| ≥50 % | 3.225 | 0,8 % |
| ≥10 % | 22.060 | 5,8 % |
| <10 % | 354.699 | 93,2 % |
CVE-2026-120229 | WAVLINK WN553X1-B 260403_2.0.0 /bin/ioos sub_416B50 file_id os command injection
A vulnerability marked as very critical has been reported in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file /bin/ioos. The manipulation of the argument file_id leads to os command injection. This vuln
CVE-2026-120228 | WAVLINK WN553X1-B V260403_2.0.0 ioos Service /bin/ioos sub_416D88 group_id/group_name os command injection
A vulnerability labeled as very critical has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument gro
CVE-2026-85330 | Microsoft Edge up to 154.0.4258.62 improper authorization (EUVD-2026-112935)
A vulnerability was found in Microsoft Edge. It has been rated as problematic. The affected element is an unknown function. This manipulation causes improper authorization. This vulnerability appears as CVE-2026-85330. The attack may be ini
CVE-2026-96187 | Microsoft Edge up to 154.0.4258.62 type confusion (EUVD-2026-112937)
A vulnerability was found in Microsoft Edge. It has been declared as problematic. This vulnerability affects unknown code. The manipulation results in type confusion. This vulnerability is cataloged as CVE-2026-96187. The attack may be laun
CVE-2026-88090 | Microsoft Edge up to 153.0.4234.46 type confusion (EUVD-2026-113164)
A vulnerability, which was classified as critical, has been found in Microsoft Edge. Affected by this vulnerability is an unknown functionality. This manipulation causes type confusion. This vulnerability is tracked as CVE-2026-88090. The a
CVE-2026-85899 | Microsoft Edge up to 154.0.4258.37 use after free (EUVD-2026-112936)
A vulnerability, which was classified as problematic, was found in Microsoft Edge. Affected by this issue is some unknown functionality. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-85899. The attack m
CVE-2026-96196 | Microsoft Edge Chromium access control (EUVD-2026-112938)
A vulnerability categorized as critical has been discovered in Microsoft Edge. This vulnerability affects unknown code of the component Chromium. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2026-
CVE-2026-88078 | Microsoft Edge input validation (EUVD-2026-112940)
A vulnerability was found in Microsoft Edge. It has been rated as critical. This affects an unknown part. This manipulation causes improper input validation. This vulnerability appears as CVE-2026-88078. The attack may be initiated remotely
CVE-2026-62765 | Microsoft Edge up to 148.0.3967.70 type confusion (EUVD-2026-111398)
A vulnerability has been found in Microsoft Edge and classified as critical. The impacted element is an unknown function. The manipulation leads to type confusion. This vulnerability is uniquely identified as CVE-2026-62765. The attack is p
CVE-2026-88077 | Microsoft Edge up to 154.0.4258.37 integer overflow (EUVD-2026-112939)
A vulnerability has been found in Microsoft Edge and classified as critical. This affects an unknown part. Performing a manipulation results in integer overflow. This vulnerability is cataloged as CVE-2026-88077. It is possible to initiate
CVE-2026-83943 | Microsoft Azure API Center information disclosure (EUVD-2026-95395 / WID-SEC-2026-3834)
A vulnerability was found in Microsoft Azure API Center. It has been declared as problematic. The impacted element is an unknown function. Executing a manipulation can lead to information disclosure. This vulnerability appears as CVE-2026-8
CVE-2026-120199 | LearnHouse up to 1.1.0 Assignment API user_id improper authorization (EUVD-2026-114720)
A vulnerability, which was classified as problematic, has been found in LearnHouse up to 1.1.0. Impacted is an unknown function of the component Assignment API. This manipulation of the argument user_id causes improper authorization. This v
CVE-2026-102212 | Opengear ACM7000/CM7100/IM7200 up to 5.5.2 Content-Disposition index.cgi name buffer overflow (EUVD-2026-114719)
A vulnerability was found in Opengear ACM7000, CM7100 and IM7200 up to 5.5.2 and classified as very critical. Impacted is an unknown function of the file index.cgi of the component Content-Disposition. Such manipulation of the argument Name
CVE-2026-120202 | Highflame AI ramparts up to 0.8.10 Bundle Scanner collect_bundle_siblings/walk_bundle_subdir input validation (EUVD-2026-114723)
A vulnerability identified as problematic has been detected in Highflame AI ramparts up to 0.8.10. Affected is the function collect_bundle_siblings/walk_bundle_subdir of the component Bundle Scanner. This manipulation causes improper input
CVE-2026-120201 | Dromara Jpom up to 2.11.12 Condition parser JPOM-USER-TOKEN improper authentication (EUVD-2026-114722)
A vulnerability classified as critical has been found in Dromara Jpom up to 2.11.12. This vulnerability affects unknown code of the component Condition parser. The manipulation of the argument JPOM-USER-TOKEN leads to improper authenticatio
CVE-2026-120200 | gnmyt Nexterm up to 1.2.2-BETA Session Lifecycle missing authentication (EUVD-2026-114721)
A vulnerability marked as problematic has been reported in gnmyt Nexterm up to 1.2.2-BETA. Affected by this issue is some unknown functionality of the component Session Lifecycle. Performing a manipulation results in missing authentication.
CVE-2026-120204 | DeepSeek-AI DeepInfer up to 0.1.0 Profile Endpoint output_dir path traversal (EUVD-2026-114725)
A vulnerability was found in DeepSeek-AI DeepInfer up to 0.1.0. It has been rated as critical. This affects an unknown function of the component Profile Endpoint. The manipulation of the argument output_dir leads to path traversal. This vul
CVE-2026-120203 | ShowDoc up to 3.9.5 Mock feature MockController::add code injection (EUVD-2026-114724)
A vulnerability classified as very critical was found in ShowDoc up to 3.9.5. This issue affects the function MockController::add of the component Mock feature. The manipulation results in code injection. This vulnerability is identified as
CVE-2026-120207 | lia Page Module up to 2.0.3 Delete Routes cross-site request forgery (EUVD-2026-114728)
A vulnerability was found in lia Page Module up to 2.0.3 and classified as problematic. This affects an unknown function of the component Delete Routes. Executing a manipulation can lead to cross-site request forgery. This vulnerability is
CVE-2026-120206 | Thelia up to 3.1.x Back Office setToggleVisibilityAction/updatePositionAction cross-site request forgery (EUVD-2026-114727)
A vulnerability has been found in Thelia up to 3.1.x and classified as problematic. The impacted element is the function setToggleVisibilityAction/updatePositionAction of the component Back Office. Performing a manipulation results in cross
CVE-2026-120205 | Thelia up to 3.0.x Customer getSummary name cross site scripting (EUVD-2026-114726)
A vulnerability, which was classified as problematic, was found in Thelia up to 3.0.x. The affected element is the function ForSomeCustomers::getSummary of the component Customer. Such manipulation of the argument Name leads to cross site s
CVE-2026-120210 | FFmpeg up to 9.0.2 IMF demuxer ASSETMAP path traversal (EUVD-2026-114731)
A vulnerability labeled as problematic has been found in FFmpeg up to 9.0.2. Affected by this vulnerability is an unknown functionality of the component IMF demuxer. Such manipulation of the argument ASSETMAP leads to path traversal. This v
CVE-2026-120208 | strukturag libheif up to 1.23.2 HEIF Decoder processTile buffer overflow (EUVD-2026-114729)
A vulnerability described as critical has been identified in strukturag libheif up to 1.23.2. This affects the function unc_decoder_mixed_interleave::processTile of the component HEIF Decoder. Executing a manipulation can lead to buffer ove
CVE-2026-120209 | anji-plus AJ-Report up to 1.7.1 testTransform endpoint improper authentication (EUVD-2026-114730)
A vulnerability categorized as critical has been discovered in anji-plus AJ-Report up to 1.7.1. This impacts an unknown function of the component testTransform endpoint. The manipulation results in improper authentication. This vulnerabilit
CVE-2026-63880 | Linux Kernel up to 6.18.34/7.0.11 Amdgpu amdgpu_gem_op_ioctl num_entries denial of service
A vulnerability was found in Linux Kernel up to 6.18.34/7.0.11. It has been declared as problematic. Affected by this vulnerability is the function amdgpu_gem_op_ioctl of the component Amdgpu. The manipulation of the argument num_entries re
CVE-2026-63878 | Linux Kernel up to 6.18.34/7.0.11 amdgpu amdgpu_gem.c kvzalloc allocation of resources
A vulnerability classified as problematic was found in Linux Kernel up to 6.18.34/7.0.11. Affected by this vulnerability is the function kvzalloc of the file amdgpu_gem.c of the component amdgpu. Executing a manipulation can lead to allocat
CVE-2026-63877 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Dz serial_base_ctrl_add null pointer dereference
A vulnerability described as problematic has been identified in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11. This affects the function serial_base_ctrl_add of the component Dz. Such manipulation leads to null pointer dereference. This
CVE-2026-63876 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Zs serial_base_ctrl_add null pointer dereference
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11. Affected by this vulnerability is the function serial_base_ctrl_add of the component Zs. The manipulation results in null pointer de
CVE-2026-63874 | Linux Kernel up to 6.18.35/7.0.12 MCTP USB ndo_stop improper synchronization
A vulnerability was found in Linux Kernel up to 6.18.35/7.0.12. It has been classified as very critical. The impacted element is the function ndo_stop of the component MCTP USB. This manipulation causes improper synchronization. This vulner
CVE-2026-63873 | Linux Kernel up to 6.18.35/7.0.12 amdxdna amdxdna_aie2_v.c aie2_populate_range memory leak
A vulnerability was found in Linux Kernel up to 6.18.35/7.0.12 and classified as very critical. This impacts the function aie2_populate_range of the file drivers/accel/amdxdna/amdxdna_aie2_v.c of the component amdxdna. Such manipulation lea
CVE-2026-63856 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Vcn Encoder Decoder drm/amdgpu/vcn privilege escalation
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9. This affects an unknown function of the file drm/amdgpu/vcn of the component Vcn Encoder Decoder. Executing a manipulatio
CVE-2026-63855 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Vcn Encoder Decoder drm/amdgpu/vcn privilege escalation
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9. Affected by this vulnerability is an unknown functionality of the file drm/amdgpu/vcn of the component Vcn Encoder D
CVE-2026-63853 | Linux Kernel up to 6.18.32/7.0.9 Vcn encoder drm/amdgpu/vcn Local Privilege Escalation
A vulnerability classified as very critical has been found in Linux Kernel up to 6.18.32/7.0.9. This impacts an unknown function of the file drm/amdgpu/vcn of the component Vcn encoder. Performing a manipulation results in Local Privilege E
Zero-Day-Exploit erkennen: 14 Schritte, 75 Min [2026] - shattered.io
GamingCybersicherheitKI &amp; Machine LearningHardwareKryptographiePrivatsphäreKryptowährungSoftwareEsportsCasino · Startseite · Cybersicherheit. Zero-Day ... Weiterlesen
CVE-2026-61871 | ImageMagick prior 7.1.2-26/6.9.13-51 ICON decoder memory leak
A vulnerability described as problematic has been identified in ImageMagick. This impacts an unknown function of the component ICON decoder. Executing a manipulation can lead to memory leak. This vulnerability is registered as CVE-2026-6187
CVE-2026-58660 | Kanboard up to 1.2.51 Kanban Board Drag-and-Drop Endpoint save project_id/task_id information disclosure
A vulnerability classified as problematic has been found in Kanboard up to 1.2.51. This affects the function Save of the component Kanban Board Drag-and-Drop Endpoint. The manipulation of the argument project_id/task_id leads to information
CVE-2024-58366 | SurrealDB up to 1.1.0 Exception throw_type format string
A vulnerability, which was classified as critical, has been found in SurrealDB up to 1.1.0. Affected by this issue is the function throw_type of the component Exception. Performing a manipulation results in format string. This vulnerability
CVE-2024-58363 | SurrealDB up to 1.5.3 Database Switch use $auth improper authorization
A vulnerability was found in SurrealDB up to 1.5.3 and classified as critical. Affected by this issue is the function use of the component Database Switch. Executing a manipulation of the argument $auth can lead to improper authorization. T
CVE-2023-54366 | SurrealDB up to 1.0.0 permission
A vulnerability marked as critical has been reported in SurrealDB up to 1.0.0. Impacted is an unknown function. Performing a manipulation results in permission issues. This vulnerability is known as CVE-2023-54366. Remote exploitation of th
CVE-2026-99164 | Linux Kernel up to 7.2.12 SPI Driver dma_len use after free (EUVD-2026-111916)
A vulnerability classified as critical was found in Linux Kernel up to 7.2.12. The affected element is an unknown function of the component SPI Driver. Executing a manipulation of the argument dma_len can lead to use after free. This vulner
CVE-2026-99167 | Linux Kernel up to 6.18.58/7.2.12 Traffic Control Action __tcf_action_put use after free (EUVD-2026-111919)
A vulnerability was found in Linux Kernel up to 6.18.58/7.2.12 and classified as very critical. Impacted is the function __tcf_action_put of the component Traffic Control Action. The manipulation results in use after free. This vulnerabilit
CVE-2026-78189 | WebDyne up to 3.21 PSGI API path traversal (EUVD-2026-114715)
A vulnerability, which was classified as critical, has been found in WebDyne up to 3.21. This affects an unknown part of the component PSGI API. The manipulation leads to path traversal. This vulnerability is listed as CVE-2026-78189. The a
CVE-2026-78188 | WebDyne up to 3.21 Session cookie httponly flag (EUVD-2026-114714)
A vulnerability classified as problematic was found in WebDyne up to 3.21. Affected by this issue is some unknown functionality of the component Session. Executing a manipulation can lead to cookie without 'httponly' flag. This vu
CVE-2026-78192 | WebDyne up to 3.021 Source Viewer webdyne.psgi source information disclosure (EUVD-2026-114718)
A vulnerability classified as problematic has been found in WebDyne up to 3.021. Affected by this vulnerability is an unknown functionality of the file webdyne.psgi of the component Source Viewer. Performing a manipulation of the argument S
CVE-2026-78191 | ASPEER WebDyne up to 3.021 unrestricted upload (EUVD-2026-114717)
A vulnerability has been found in ASPEER WebDyne up to 3.021 and classified as critical. This issue affects some unknown processing. This manipulation causes unrestricted upload. This vulnerability is registered as CVE-2026-78191. Remote ex
CVE-2026-78190 | ASPEER WebDyne up to 3.021 HTML HTML injection (EUVD-2026-114716)
A vulnerability, which was classified as problematic, was found in ASPEER WebDyne up to 3.021. This vulnerability affects unknown code of the component HTML. The manipulation results in HTML injection. This vulnerability is cataloged as CVE
CVE-2026-113380 | Signal RingRTC up to 2.71.x FSM queue resource consumption (EUVD-2026-104796)
A vulnerability described as problematic has been identified in Signal RingRTC up to 2.71.x. Impacted is an unknown function of the component FSM queue. The manipulation results in resource consumption. This vulnerability was named CVE-2026
CVE-2026-118384 | GNU mtools up to 4.0.49 vfat vfat.c parse_vses out-of-bounds write (EUVD-2026-111572)
A vulnerability marked as problematic has been reported in GNU mtools up to 4.0.49. This vulnerability affects the function parse_vses of the file vfat.c of the component vfat. Performing a manipulation results in out-of-bounds write. This
HTTP2Shell: Brotli-Sicherheitslücke CVE-2026-111497 über Node.js hinaus prüfen
Seit einigen Tagen ist ja eine Schwachstelle (CVE-2026-111497) im Brotli-Decoder von Node.js bekannt geworden. Es gibt zwar Updates, aber inzwischen ist klar, dass die Brotli-Bibliotheken in mehr Software-Paketen als Node.js verwendet werde
CVE-2026-118307 | Google Chrome up to 156.0.8078.47 Paint use after free (Nessus ID 374452)
A vulnerability labeled as critical has been found in Google Chrome. The affected element is an unknown function of the component Paint. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-118307. The attack
CVE-2026-118306 | Google Chrome up to 156.0.8078.47 FileSystem memory corruption (Nessus ID 374452)
A vulnerability categorized as critical has been discovered in Google Chrome. This issue affects some unknown processing of the component FileSystem. The manipulation results in memory corruption. This vulnerability is identified as CVE-202
CVE-2026-118305 | Google Chrome up to 156.0.8078.47 Turbolev memory corruption (Nessus ID 374452)
A vulnerability identified as critical has been detected in Google Chrome. Impacted is an unknown function of the component Turbolev. This manipulation causes memory corruption. This vulnerability is tracked as CVE-2026-118305. The attack i
CVE-2026-118304 | Google Chrome up to 156.0.8078.47 SVG input validation (Nessus ID 374452)
A vulnerability was found in Google Chrome. It has been rated as critical. This vulnerability affects unknown code of the component SVG. The manipulation leads to improper input validation. This vulnerability is referenced as CVE-2026-11830
CVE-2026-42057 | VTK 9.6 PNGReader vtkPNGReaderUpdate2 null pointer dereference (Nessus ID 374455)
A vulnerability classified as problematic was found in VTK 9.6. This affects the function vtkPNGReader::vtkPNGReaderUpdate2 of the component PNGReader. Executing a manipulation can lead to null pointer dereference. This vulnerability is tra
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation. The vulnerabilit
CVE-2026-119195: CVE-2026-119195: Quadratic-Time Denial of Service in pyasn1 BER/CER/DER Decoders
CVE-2026-119195: Quadratic-Time Denial of Service in pyasn1 BER/CER/DER Decoders Vulnerability ID: CVE-2026-119195 CVSS Score: 7.5 Published: 2026-10-30 CVE-2026-119195 is an algorithmic complexity vulnerability (CWE-407) in the pyasn1 libr
CVE-2026-8822 | VTK 9.6.1 DEMReader ReadProfiles buffer overflow (Nessus ID 374457)
A vulnerability, which was classified as problematic, has been found in VTK 9.6.1. This impacts the function ReadProfiles of the component DEMReader. The manipulation leads to buffer overflow. This vulnerability is listed as CVE-2026-8822.
CVE-2026-45049 | OpenIdentityPlatform OpenAM up to 16.1.0 Cross-Domain Single Sign-On cross-site request forgery (Nessus ID 374458)
A vulnerability was found in OpenIdentityPlatform OpenAM up to 16.1.0. It has been classified as problematic. This vulnerability affects unknown code of the component Cross-Domain Single Sign-On. The manipulation leads to cross-site request
CVE-2026-41216 | VTK 9.6 PNG Reader ExecuteInformation null pointer dereference (Nessus ID 374456)
A vulnerability marked as problematic has been reported in VTK 9.6. Impacted is the function vtkPNGReader::ExecuteInformation of the component PNG Reader. This manipulation causes null pointer dereference. The identification of this vulnera
CVE-2026-9536 | VTK 9.6.1 vtkWindBladeReader vtkWindBladeReader.FindVariableOffsets buffer overflow (Nessus ID 374460)
A vulnerability, which was classified as problematic, was found in VTK 9.6.1. Affected is the function vtkWindBladeReader.FindVariableOffsets of the component vtkWindBladeReader. The manipulation results in buffer overflow. This vulnerabili