Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 786 | 0,2 % |
| ≥50 % | 3.572 | 0,9 % |
| ≥10 % | 23.059 | 5,7 % |
| <10 % | 380.694 | 93,3 % |
[NEU] [hoch] OpenSSH: Schwachstelle ermöglicht Erlangen von Administratorrechten
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSH (in Kombination mit musl libc und ohne PAM) ausnutzen, um Administratorrechte zu erlangen. Weiterlesen
Sicherheitslücke in der Firmware: PHP2Shell bleibt in Firewalls und Industriegeräten gefährlich
Bei Firewalls, Routern und Industrieanlagen können Admins verwundbares PHP oft nicht selbst patchen. Selbst nach einem Update bleibt deshalb Handlungsbedarf. Ein Ratgebertext von Steffen Zahn (Security, PHP) Weiterlesen
Sicherheitslücke in der Firmware: PHP2Shell bleibt in Firewalls und Industriegeräten gefährlich
Bei Firewalls, Routern und Industrieanlagen können Admins verwundbares PHP oft nicht selbst patchen. Selbst nach einem Update bleibt deshalb Handlungsbedarf. Ein Ratgebertext von Steffen Zahn (Security, PHP) Weiterlesen
OpenSSH sshole Flaw Allows Hackers to Log Into Password-Disabled Linux Accounts Using 257-Character Passwords
A decade-old authentication bypass in OpenSSH on musl-based Linux lets attackers log into accounts that should never accept a password. The flaw, dubbed *sshole, is tracked as CVE-2026-123158. Any password between 257 and 1,024 characters w
Adobe Commerce und Magento von Code-Ausführung bedroht
Eine kritische Sicherheitslücke in Adobes Shop-Software wird nachweislich ausgenutzt. Für einen erfolgreichen Angriff muss ein Opfer eine präparierte URL aufrufen oder mit einer kompromittierten Webseite interagieren. Updates stehen seit Ju
GitLab Sicherheitslücke CVE-2026-97229: CVSS 10,0 [2026] - Tech Insider
GitLab CVE-2026-97229: CVSS 10,0, über 1.000 offen [2026]. Elias Virtanen; November 6, 2026; Cybersicherheit · Elias ... Weiterlesen
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
Two flaws in Barracuda's Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required. The company released patches on Monday, and the security
Microsoft Paint Vulnerability Allows Hackers to Execute Malicious Code Remotely Without User Interaction
Microsoft has announced a vulnerability in Windows Paint that could let unauthenticated attackers execute malicious code remotely without any user interaction. This vulnerability is tracked as CVE-2026-83844 and was disclosed on October 13,
CVE-2026-109518 – APT package manager that affects Ubuntu and Debian operating systems
Bulletin ID: 2026-172-AWS Publication Date: 11/05/2026 20:00 PM PST Description: An issue in the APT package manager (CVE-2026-109518) affects Ubuntu and Debian operating systems. Under specific conditions, when APT is configured to use HTT
CVE-2026-91713 | Google Chrome up to 153.0.8010.36 Browser improper authorization (Nessus ID 349114 / WID-SEC-2026-3380)
A vulnerability categorized as problematic has been discovered in Google Chrome. Affected by this vulnerability is an unknown functionality of the component Browser. Executing a manipulation can lead to improper authorization. The identific
CVE-2026-91712 | Google Chrome up to 153.0.8010.36 Extensions race condition (Nessus ID 349114 / WID-SEC-2026-3380)
A vulnerability was found in Google Chrome. It has been declared as critical. This impacts an unknown function of the component Extensions. Such manipulation leads to race condition. This vulnerability is uniquely identified as CVE-2026-917
CVE-2026-91711 | Google Chrome up to 153.0.8010.36 ServiceWorker out-of-bounds write (Nessus ID 349114 / WID-SEC-2026-3380)
A vulnerability was found in Google Chrome. It has been rated as critical. Affected is an unknown function of the component ServiceWorker. Performing a manipulation results in out-of-bounds write. This vulnerability was named CVE-2026-91711
CVE-2026-91710 | Google Chrome up to 153.0.8010.36 WebAppInstalls use after free (Nessus ID 349114 / WID-SEC-2026-3380)
A vulnerability was found in Google Chrome. It has been classified as critical. This affects an unknown function of the component WebAppInstalls. This manipulation causes use after free. This vulnerability is handled as CVE-2026-91710. The
CVE-2026-91709 | Google Chrome up to 153.0.8010.36 ServiceWorker type confusion (Nessus ID 349114 / WID-SEC-2026-3380)
A vulnerability was found in Google Chrome and classified as critical. The impacted element is an unknown function of the component ServiceWorker. The manipulation results in type confusion. This vulnerability is known as CVE-2026-91709. It
CVE-2025-57296 | Tenda AC6 15.03.05.19 /goform/SetIPTVCfg formSetIptv vlanId command injection
A vulnerability classified as critical has been found in Tenda AC6 15.03.05.19. This impacts the function formSetIptv of the file /goform/SetIPTVCfg. The manipulation of the argument vlanId leads to command injection. This vulnerability is
CVE-2025-57293 | Comfast CF-XR11 2.7.2 POST Request /usr/bin/webmgnt system command injection
A vulnerability described as critical has been identified in Comfast CF-XR11 2.7.2. This issue affects the function system of the file /usr/bin/webmgnt of the component POST Request Handler. The manipulation results in command injection. Th
CVE-2025-55912 | ClipBucket up to 5.5.0 plupload Endpoint photo_uploader.php unrestricted upload (EUVD-2025-29853 / EDB-52435)
A vulnerability categorized as critical has been discovered in ClipBucket up to 5.5.0. Affected is an unknown function of the file photo_uploader.php of the component plupload Endpoint. The manipulation results in unrestricted upload. This
CVE-2025-55911 | Clip Bucket 5.5.2 file_downloader.php file command injection (EUVD-2025-29929 / EDB-52434)
A vulnerability identified as critical has been detected in Clip Bucket 5.5.2. The affected element is an unknown function of the file file_downloader.php. The manipulation of the argument File leads to command injection. This vulnerability
CVE-2025-55910 | CmsEasy up to 7.7.8.0 database_admin.php denial of service
A vulnerability was found in CmsEasy up to 7.7.8.0. It has been classified as problematic. The impacted element is an unknown function of the file database_admin.php. This manipulation causes denial of service. This vulnerability is tracked
CVE-2025-39865 | Linux Kernel up to 6.17-rc4 tee tee_shm_put null pointer dereference (Nessus ID 265466 / WID-SEC-2025-2099)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.17-rc4. The impacted element is the function tee_shm_put of the component tee. Such manipulation leads to null pointer dereference. This vulnerability is do
CVE-2025-39853 | Linux Kernel up to 6.17-rc4 i40e list_first_entry null pointer dereference (Nessus ID 265484 / WID-SEC-2025-2099)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.17-rc4. The affected element is the function list_first_entry of the component i40e. Such manipulation leads to null pointer dereference. This vulnerability is trade
CVE-2025-39835 | Linux Kernel up to 6.17-rc3 xfs xfs_attr_leaf_get escape output (Nessus ID 265198 / WID-SEC-2025-2077)
A vulnerability classified as critical was found in Linux Kernel up to 6.17-rc3. Affected is the function xfs_attr_leaf_get of the component xfs. Such manipulation leads to escaping of output. This vulnerability is uniquely identified as CV
CVE-2025-39824 | Linux Kernel up to 6.17-rc3 HID_UP_UNDEFINED Usage Page hid_hw_start use after free (Nessus ID 265232 / WID-SEC-2025-2077)
A vulnerability was found in Linux Kernel up to 6.17-rc3. It has been classified as critical. Affected by this issue is the function hid_hw_start of the component HID_UP_UNDEFINED Usage Page. The manipulation leads to use after free. This v
CVE-2025-57104 | Teampel 5.1.6 /Common/login.aspx sql injection
A vulnerability classified as critical has been found in Teampel 5.1.6. The affected element is an unknown function of the file /Common/login.aspx. This manipulation causes sql injection. This vulnerability appears as CVE-2025-57104. The at
CVE-2025-52344 | Explorance Blue 8.1.2 Group name/Project Description cross site scripting
A vulnerability classified as problematic was found in Explorance Blue 8.1.2. The impacted element is an unknown function. Such manipulation of the argument Group name/Project Description leads to cross site scripting. This vulnerability is
CVE-2025-52053 | TOTOLINK X6000R 9.4.0cu.1360_B20241207 sub_417D74 file_name command injection
A vulnerability was found in TOTOLINK X6000R 9.4.0cu.1360_B20241207 and classified as critical. This vulnerability affects the function sub_417D74. Executing a manipulation of the argument file_name can lead to command injection. This vulne
CVE-2025-52048 | Frappe up to 14.96.9/15.71.x tag.py add_tag dt sql injection (GHSA-mggw-6xqj-rphj)
A vulnerability was found in Frappe up to 14.96.9/15.71.x. It has been classified as critical. This issue affects the function add_tag of the file frappe/desk/doctype/tag/tag.py. The manipulation of the argument dt leads to sql injection. T
CVE-2025-50110 | AVTECH EagleEyes Lite 2.0.0 Query Parameter push.lite.avtech.com.AvtechLib.GetHttpsResponse information disclosure
A vulnerability was found in AVTECH EagleEyes Lite 2.0.0 and classified as problematic. This impacts the function GetHttpsResponse in the library push.lite.avtech.com.AvtechLib.GetHttpsResponse of the component Query Parameter Handler. Exec
CVE-2025-46408 | AVTECH EagleEyes 2.0.0 getNewHttpClient certificate host validation
A vulnerability was found in AVTECH EagleEyes 2.0.0. It has been declared as critical. Affected by this vulnerability is the function getNewHttpClient. The manipulation results in certificate with host mismatch. This vulnerability is catalo
CVE-2025-39823 | Linux Kernel up to 6.17-rc3 KVM array_index_nospec memory corruption (Nessus ID 265253 / WID-SEC-2025-2077)
A vulnerability classified as critical was found in Linux Kernel up to 6.17-rc3. This affects the function array_index_nospec of the component KVM. Executing a manipulation can lead to memory corruption. This vulnerability is handled as CVE
CVE-2025-39819 | Linux Kernel up to 6.17-rc3 smb2_compound_op control flow (Nessus ID 265199 / WID-SEC-2025-2077)
A vulnerability has been found in Linux Kernel up to 6.1.149/6.6.103/6.12.44/6.16.4/6.17-rc3 and classified as critical. This affects the function smb2_compound_op. The manipulation leads to incorrect control flow. This vulnerability is ref
CVE-2025-39813 | Linux Kernel up to 6.17-rc2 ftrace_dump_one return value (Nessus ID 265231 / WID-SEC-2025-2077)
A vulnerability classified as critical has been found in Linux Kernel up to 6.17-rc2. This impacts the function ftrace_dump_one. This manipulation causes unchecked return value. This vulnerability is handled as CVE-2025-39813. The attack ca
CVE-2025-39808 | Linux Kernel up to 6.17-rc3 /dev/uhid ntrig_report_version hdev memory corruption (EUVD-2025-29606 / Nessus ID 265215)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.17-rc3. Impacted is the function ntrig_report_version of the file /dev/uhid. Performing a manipulation of the argument hdev results in memory corruption. This
Node.js Security Releases: Patching Node2Shell (CVE-2026-111497) & High Risks
HOC Shorts | Node.js security issuing updates across active release channels (v22.x, v24.x, and v26.x), patching multiple vulnerabilities… This article has been indexed from Hackers Online Club Read the original article: Node.js Security Re
CVE-2026-76027 | Google Chrome up to 156.0.8078.73 CacheStorage memory corruption (Nessus ID 376449)
A vulnerability marked as critical has been reported in Google Chrome. This issue affects some unknown processing of the component CacheStorage. Performing a manipulation results in memory corruption. This vulnerability is reported as CVE-2
CVE-2026-76026 | Google Chrome up to 156.0.8078.73 Autofill memory corruption (Nessus ID 376449)
A vulnerability was found in Google Chrome. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the component Autofill. The manipulation leads to memory corruption. This vulnerability is listed as CV
CVE-2026-76025 | Google Chrome up to 156.0.8078.73 FileSystem use after free (Nessus ID 376449)
A vulnerability was found in Google Chrome and classified as critical. This affects an unknown function of the component FileSystem. Such manipulation leads to use after free. This vulnerability is referenced as CVE-2026-76025. It is possib
CVE-2026-76024 | Google Chrome up to 156.0.8078.73 MediaStream memory corruption (Nessus ID 376449)
A vulnerability was found in Google Chrome. It has been classified as critical. This impacts an unknown function of the component MediaStream. Performing a manipulation results in memory corruption. This vulnerability is identified as CVE-2
CVE-2026-112257 | GIMP PSD Thumbnail Resource Loader out-of-bounds (Nessus ID 376450)
A vulnerability described as critical has been identified in GIMP. This vulnerability affects unknown code of the component PSD Thumbnail Resource Loader. Such manipulation leads to out-of-bounds read. This vulnerability is documented as CV
CVE-2025-45586 | Audi UTR Universal Traffic Recorder 2.0 PUT Request unrestricted upload (EUVD-2025-29080)
A vulnerability identified as critical has been detected in Audi UTR Universal Traffic Recorder 2.0. This affects an unknown function of the component PUT Request Handler. This manipulation causes unrestricted upload. This vulnerability is
CVE-2025-39801 | Linux Kernel up to 6.17-rc2 dwc3 denial of service (EUVD-2025-29185 / Nessus ID 265710)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.17-rc2. Affected by this vulnerability is an unknown functionality of the component dwc3. Such manipulation leads to denial of service. This vulnerability
CVE-2025-39795 | Linux Kernel up to 6.16.1 block blk_stack_limits buffer overflow (Nessus ID 264709 / WID-SEC-2025-2051)
A vulnerability was found in Linux Kernel up to 6.16.1 and classified as critical. Affected by this vulnerability is the function blk_stack_limits of the component block. The manipulation results in buffer overflow. This vulnerability is id
CVE-2025-39794 | Linux Kernel up to 6.16.1 ARM denial of service (Nessus ID 264712 / WID-SEC-2025-2051)
A vulnerability has been found in Linux Kernel up to 6.16.1 and classified as critical. Affected is an unknown function of the component ARM. The manipulation leads to denial of service. This vulnerability is referenced as CVE-2025-39794. T
CVE-2025-39784 | Linux Kernel up to 6.16.3 PCI pcie_failed_link_retrain privilege escalation (Nessus ID 264757 / WID-SEC-2025-2040)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.16.3. Affected by this vulnerability is the function pcie_failed_link_retrain of the component PCI. The manipulation leads to privilege escalation. This vulner
CVE-2025-39782 | Linux Kernel up to 6.17-rc2 jbd2_log_do_checkpoint buffer overflow (Nessus ID 264753 / WID-SEC-2025-2040)
A vulnerability classified as critical was found in Linux Kernel up to 6.17-rc2. This affects the function jbd2_log_do_checkpoint. The manipulation results in buffer overflow. This vulnerability is cataloged as CVE-2025-39782. The attack mu
CVE-2025-39772 | Linux Kernel up to 6.17-rc2 hibnc_hw_init null pointer dereference (Nessus ID 264739 / WID-SEC-2025-2040)
A vulnerability was found in Linux Kernel up to 6.17-rc2 and classified as critical. The affected element is the function hibnc_hw_init. The manipulation results in null pointer dereference. This vulnerability is known as CVE-2025-39772. Ac
CVE-2025-39765 | Linux Kernel up to 6.12.43/6.16.3/6.17-rc2 lib/idr.c snd_utimer_create allocation of resources (Nessus ID 264744 / WID-SEC-2025-2040)
A vulnerability classified as critical has been found in Linux Kernel up to 6.12.43/6.16.3/6.17-rc2. The impacted element is the function snd_utimer_create in the library lib/idr.c. The manipulation leads to allocation of resources. This vu
CVE-2025-39764 | Linux Kernel up to 6.16.1/6.17-rc1 netfilter refcount_inc_not_zero memory leak (Nessus ID 264746 / WID-SEC-2025-2040)
A vulnerability was found in Linux Kernel up to 6.16.1/6.17-rc1 and classified as critical. Affected by this issue is the function refcount_inc_not_zero of the component netfilter. Executing a manipulation can lead to memory leak. This vuln
CVE-2025-39678 | Linux Kernel up to 6.16.3/6.17-rc2 metric_tbl_addr null pointer dereference (Nessus ID 261608 / WID-SEC-2025-1988)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.16.3/6.17-rc2. The impacted element is the function metric_tbl_addr. The manipulation results in null pointer dereference. This vulnerability is known as CV
Android SMS of Death Flaw: How to Check If Your Phone Is Patched
Google's November security update fixes a critical Android vulnerability that can interrupt cellular calls through a hidden message. Here's how to check your device. The post Android SMS of Death Flaw: How to Check If Your Phone I
CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in
CVE-2026-116839 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the
CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in mis
CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PAS
CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .
CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash
CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place
CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.
llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor siz