Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 784 | 0,2 % |
| ≥50 % | 3.558 | 0,9 % |
| ≥10 % | 13.140 | 3,2 % |
| <10 % | 394.319 | 95,8 % |
SonicWall Warns of Potential In-the-Wild Exploitation of SSLVPN Flaw That Bypasses MFA
SonicWall has warned customers to patch a SonicOS SSLVPN vulnerability that could let attackers bypass SAML authentication and its multi-factor authentication checks. Tracked as CVE-2026-19868, the flaw carries a CVSS score of 7.1. The comp
iPhone Duo: Das neue Apple-Handy hat eine große Schwachstelle
(Bildquelle: Apple und Bildbearbeitung GIGA)Apples erstes Falt-Handy ist da. Ein YouTube-Experte spricht jedoch eine deutliche Warnung aus.Tech-Experte Zack Nelson nimmt sich das iPhone Duo vor. Auf seinem YouTube-Kanal JerryRigEverything u
Gravierende Sicherheitslücke: Millionen Webseiten bedroht - Panorama - SZ.de
MeinungCybersicherheit. :Die Vorfälle in den Supermärkten zeigen: Jetzt wird's wirklich ernst. Kommentar von Helmut Martin-Jung. Künstliche ... Weiterlesen
WordPress Schwachstellen CVE-2026-119977 u. CVE-2026-100109
Es gibt derzeit wohl zwei Schwachstellen im Umfeld von WordPress, die man als Administrator kennen sollte. Einmal kann WordPress beim Core-Update in bestimmten Konstellationen angreifbar sein (CVE-2026-119977). Zudem gibt es die kritische S
Sicherheitslücke GhostMap blockiert Android mit einer nie geöffneten App
Google liefert keinen Patch. Meistgelesen · Cybersicherheit ... Cybersicherheit Google Cybersecurity IT-Sicherheit ... Weiterlesen
CVE-2025-60514 | Tillywork up to 0.1.3 query.builder.helper.ts sql injection
A vulnerability, which was classified as critical, was found in Tillywork up to 0.1.3. Affected by this vulnerability is an unknown functionality of the file app/common/helpers/query.builder.helper.ts. Such manipulation leads to sql injecti
CVE-2025-60361 | Radare2 up to 5.9.8 bochs_open memory leak (EUVD-2025-34881 / Nessus ID 271635)
A vulnerability was found in Radare2 up to 5.9.8. It has been declared as problematic. This vulnerability affects the function bochs_open. Executing a manipulation can lead to memory leak. This vulnerability is handled as CVE-2025-60361. Th
CVE-2025-60358 | Radare2 up to 5.9.8 _load_relocations memory leak (EUVD-2025-34833 / Nessus ID 271674)
A vulnerability was found in Radare2 up to 5.9.8. It has been classified as problematic. The impacted element is the function _load_relocations. The manipulation leads to memory leak. This vulnerability is uniquely identified as CVE-2025-60
CVE-2025-57567 | PluXml CMS minify.php code injection (EUVD-2025-34891 / Nessus ID 271640)
A vulnerability marked as critical has been reported in PluXml CMS. Impacted is an unknown function of the file /themes/defaut/css/minify.php. This manipulation causes code injection. This vulnerability is tracked as CVE-2025-57567. The att
CVE-2025-57164 | FlowiseAI Flowise up to 3.0.4 Supabase RPC Filter command injection (GHSA-7944-7c6r-55vv)
A vulnerability identified as critical has been detected in FlowiseAI Flowise up to 3.0.4. This issue affects some unknown processing. This manipulation of the argument Supabase RPC Filter causes command injection. This vulnerability is han
CVE-2026-123037 | Red Hat Ansible Automation Platform/Ansible Core User User.ssh_key_gen symlink (Nessus ID 377113)
A vulnerability classified as problematic has been found in Red Hat Ansible Automation Platform and Ansible Core. Affected by this vulnerability is the function User.ssh_key_gen of the component User Module. The manipulation leads to symlin
CVE-2026-48761 | Symfony URL Attribute cross site scripting (Nessus ID 377115)
A vulnerability marked as problematic has been reported in Symfony. Affected is an unknown function of the component URL Attribute Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2026-48761. It i
CVE-2026-123962 | Debian FreedomBox up to 26.14 authorized_keys privileges management (Nessus ID 377114)
A vulnerability identified as problematic has been detected in Debian FreedomBox up to 26.14. This affects an unknown part of the file authorized_keys. This manipulation causes improper privilege management. The identification of this vulne
CVE-2026-45753 | Symfony HtmlSanitizer cross site scripting (Nessus ID 377115)
A vulnerability was found in Symfony HtmlSanitizer. It has been rated as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2026-4
CVE-2026-123273 | ImageMagick up to 7.1.2-34/6.9.13-59 SVG Decoder MagickCore/cache.c QueueAuthenticPixelCacheNexus infinite loop (Nessus ID 377117)
A vulnerability was found in ImageMagick up to 7.1.2-34/6.9.13-59 and classified as problematic. The affected element is the function QueueAuthenticPixelCacheNexus of the file MagickCore/cache.c of the component SVG Decoder. Such manipulati
CVE-2026-121949 | SensioLabs Symfony up to 6.4.49/7.4.22/8.1.10 HtmlSanitizer access control (Nessus ID 377115)
A vulnerability classified as problematic was found in SensioLabs Symfony up to 6.4.49/7.4.22/8.1.10. Affected by this issue is some unknown functionality of the component HtmlSanitizer. Such manipulation leads to improper access controls.
CVE-2026-123876 | Red Hat Enterprise Linux Seccomp Profile numeric truncation error (Nessus ID 377118)
A vulnerability, which was classified as problematic, has been found in Red Hat Enterprise Linux, Hardened Images and OpenShift Container Platform. This affects an unknown function of the component Seccomp Profile. This manipulation causes
CVE-2026-121006 | HTTP::Body 1.23_01/1.24_01 Trailer Parsing add resource consumption (Nessus ID 377119)
A vulnerability was found in HTTP::Body 1.23_01/1.24_01. It has been declared as problematic. Impacted is the function Add of the component Trailer Parsing. The manipulation results in resource consumption. This vulnerability is identified
CVE-2026-123202 | bakulf libnxml up to 0.18.5 src/nxml_parser.c buffer overflow (Nessus ID 377120)
A vulnerability described as problematic has been identified in bakulf libnxml up to 0.18.5. Impacted is an unknown function of the file src/nxml_parser.c. Executing a manipulation can lead to buffer overflow. This vulnerability is register
CVE-2026-112938 | tox-dev filelock up to 4.2.0 File Lock src/filelock/_strict.py StrictSoftFileLock._acquire race condition (Nessus ID 377121)
A vulnerability marked as problematic has been reported in tox-dev filelock up to 4.2.0. This affects the function StrictSoftFileLock._acquire of the file src/filelock/_strict.py of the component File Lock. The manipulation leads to race co
CVE-2026-123269 | libyal libvmdk Descriptor File Parser libvmdk_descriptor_file.c libvmdk_descriptor_file_read_header out-of-bounds (Issue 41 / Nessus ID 377122)
A vulnerability labeled as problematic has been found in libyal libvmdk. Affected by this vulnerability is the function libvmdk_descriptor_file_read_header of the file libvmdk/libvmdk_descriptor_file.c of the component Descriptor File Parse
CVE-2026-68481 | Apache CXF up to 3.6.11/4.1.7/4.2.2 DefaultEncryptingOAuthDataProvider access control (WID-SEC-2026-2682)
A vulnerability, which was classified as critical, has been found in Apache CXF up to 3.6.11/4.1.7/4.2.2. This issue affects the function DefaultEncryptingOAuthDataProvider. The manipulation leads to improper access controls. This vulnerabi
CVE-2026-68079 | Apache CXF up to 3.6.11/4.1.7/4.2.2 authentication replay (WID-SEC-2026-2682)
A vulnerability labeled as critical has been found in Apache CXF up to 3.6.11/4.1.7/4.2.2. Affected is an unknown function. The manipulation results in authentication bypass by capture-replay. This vulnerability is known as CVE-2026-68079.
CVE-2026-66909 | Apache CXF up to 3.6.11/4.1.7/4.2.2 JMS Transport deserialization (WID-SEC-2026-2682)
A vulnerability was found in Apache CXF up to 3.6.11/4.1.7/4.2.2. It has been classified as critical. Impacted is an unknown function of the component JMS Transport. This manipulation causes deserialization. This vulnerability is registered
CVE-2026-65583 | Apache CXF up to 3.6.11/4.1.7/4.2.2 improper authentication (WID-SEC-2026-2682)
A vulnerability classified as critical was found in Apache CXF up to 3.6.11/4.1.7/4.2.2. This vulnerability affects unknown code. Executing a manipulation can lead to improper authentication. The identification of this vulnerability is CVE-
CVE-2026-65432 | Apache CXF up to 3.6.11/4.1.7/4.2.2 StaxUtils/WSDL4J xml external entity reference (WID-SEC-2026-2682)
A vulnerability identified as critical has been detected in Apache CXF up to 3.6.11/4.1.7/4.2.2. This impacts an unknown function of the component StaxUtils/WSDL4J. The manipulation leads to xml external entity reference. This vulnerability
CVE-2026-105137 | Laradock up to 20.4 Build Process workspace/Dockerfile code download (EUVD-2026-92085)
A vulnerability, which was classified as problematic, was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in download of code without in
CVE-2026-121379 | Tournamatch Plugin up to 4.7.0 on WordPress file inclusion (EUVD-2026-118941)
A vulnerability has been found in Tournamatch Plugin up to 4.7.0 on WordPress and classified as critical. This vulnerability affects unknown code. Performing a manipulation results in file inclusion. This vulnerability is known as CVE-2026-
CVE-2026-121491 | Fiber Admin Plugin up to 4.0.0 on WordPress code injection (EUVD-2026-118943)
A vulnerability categorized as critical has been discovered in Fiber Admin Plugin up to 4.0.0 on WordPress. This affects an unknown function. Such manipulation leads to code injection. This vulnerability is referenced as CVE-2026-121491. It
CVE-2026-121380 | Tournamatch Plugin up to 4.7.0 on WordPress information disclosure (EUVD-2026-118942)
A vulnerability labeled as problematic has been found in Tournamatch Plugin up to 4.7.0 on WordPress. This affects an unknown part. The manipulation results in information disclosure. This vulnerability is identified as CVE-2026-121380. The
CVE-2026-121796 | Add From Server Lite Plugin up to 5.x on WordPress SVG file cross site scripting (EUVD-2026-118945)
A vulnerability was found in Add From Server Lite Plugin up to 5.x on WordPress. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component SVG file Handler. Performing a manipulation
CVE-2026-121492 | Fiber Admin Plugin up to 4.0.0 on WordPress authorization (EUVD-2026-118944)
A vulnerability identified as problematic has been detected in Fiber Admin Plugin up to 4.0.0 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to missing authorization. This vulnerability is referen
CVE-2026-121858 | Event Tickets with Ticket Scanner Plugin up to 3.2.8 on WordPress search sql injection (EUVD-2026-118948)
A vulnerability, which was classified as problematic, has been found in Event Tickets with Ticket Scanner Plugin up to 3.2.8 on WordPress. The impacted element is an unknown function. The manipulation of the argument Search leads to sql inj
CVE-2026-121857 | Event Tickets with Ticket Scanner Plugin up to 3.1.13 on WordPress authorization (EUVD-2026-118947)
A vulnerability classified as critical has been found in Event Tickets with Ticket Scanner Plugin up to 3.1.13 on WordPress. This affects an unknown part. This manipulation causes incorrect authorization. This vulnerability is registered as
CVE-2026-121848 | Magic Link Plugin up to 2.2.5 on WordPress privileges management (EUVD-2026-118946)
A vulnerability marked as critical has been reported in Magic Link Plugin up to 2.2.5 on WordPress. This vulnerability affects unknown code. This manipulation causes improper privilege management. This vulnerability is tracked as CVE-2026-1
CVE-2026-122001 | Komfortkasse for WooCommerce Plugin up to 1.4.8 on WordPress cross-site request forgery (EUVD-2026-118950)
A vulnerability classified as problematic was found in Komfortkasse for WooCommerce Plugin up to 1.4.8 on WordPress. This vulnerability affects unknown code. Such manipulation leads to cross-site request forgery. This vulnerability is docum
CVE-2026-121866 | Exsile iLeads SMS Gateway Plugin up to 1.x on WordPress privileges management (EUVD-2026-118949)
A vulnerability classified as critical has been found in Exsile iLeads SMS Gateway Plugin up to 1.x on WordPress. Impacted is an unknown function. Performing a manipulation results in improper privilege management. This vulnerability is cat
CVE-2026-83495 | Red Hat OpenShift AI Trainer privileges management (EUVD-2026-118951)
A vulnerability was found in Red Hat OpenShift AI and classified as critical. Affected is an unknown function of the component Trainer. Such manipulation leads to improper privilege management. This vulnerability is traded as CVE-2026-83495
CVE-2023-5156 | GNU C Library getaddrinfo.c free_and_return memory leak (EUVD-2023-57494 / Nessus ID 215876)
A vulnerability was found in GNU C Library and classified as problematic. The impacted element is the function free_and_return of the file sysdeps/posix/getaddrinfo.c. The manipulation results in memory leak. This vulnerability was named CV
CVE-2023-34966 | Samba up to 4.16.10/4.17.9/4.18.4 mdssvc RPC Service sl_unpack_loop infinite loop (FEDORA-2023-bcd91bfcd3 / EUVD-2023-39005)
A vulnerability has been found in Samba up to 4.16.10/4.17.9/4.18.4 and classified as problematic. Affected is the function sl_unpack_loop of the component mdssvc RPC Service. The manipulation leads to infinite loop. This vulnerability is d
CVE-2026-119158 | Genetechproducts Pie Register Plugin up to 3.8.4.16 on WordPress first_name cross site scripting (EUVD-2026-118602)
A vulnerability classified as problematic was found in Genetechproducts Pie Register Plugin up to 3.8.4.16 on WordPress. Affected is an unknown function. The manipulation of the argument first_name results in cross site scripting. This vuln
Android-Schwachstelle GhostMap zwingt Smartphones in Absturzschleife - it-daily.net
Nach Angaben der Sicherheitsforscher handelt es sich bei GhostMap um einen Proof of Concept, der bislang nicht für reale Angriffe beobachtet wurde. Weiterlesen
Android-Schwachstelle GhostMap zwingt Smartphones in Absturzschleife
Bitdefender-Forscher haben mit GhostMap eine Schwachstelle entdeckt, durch die eine speziell präparierte Android-App einen dauerhaften Systemabsturz auslösen kann. Betroffene Geräte lassen sich unter Umständen nur noch durch ein Zurücksetze
CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended des
CVE-2026-18689 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to obtain limited information about other organizations due to incorrect authorization. A token issued for a limited purpose is accepted where it should not be, which could reveal the names of other organizations.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to obtain limited information about other organizations due to incorrect authorization. A token issued for a limited purpose is accep
CVE-2026-17428 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. Values supplied in the request URL are used in authorization decisions without sufficient verification, which could allow access to information belonging to others.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. Values supplied in the request URL are used in authorization
CVE-2026-17411 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized before it is used in database queries.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized befo
CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.
CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access c
CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.
CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before
CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the s
CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm
CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.
CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is pas
CVE-2026-17401 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-17400 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
CVE-2026-17399 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not sufficiently checked before it is processed, which could allow code to run on the server.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not suffic
CVE-2026-17398 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.