Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 743 | 0,2 % |
| ≥50 % | 3.224 | 0,8 % |
| ≥10 % | 22.060 | 5,8 % |
| <10 % | 354.702 | 93,2 % |
Attackers Exploit Critical Drupal Commerce Core Vulnerability CVE-2026-118539
Drupal warns that attackers are exploiting a critical authorization flaw in Commerce Core, putting vulnerable online stores at risk. Drupal warns that threat actors are exploiting a highly critical security flaw, tracked as CVE-2026-118539,
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog, following active exploitation in the wild. The v
CVE-2026-59257 | n8n up to 1.123.60/2.27.3/2.28.0 MySQL v1 Node executeQuery sql injection
A vulnerability has been found in n8n up to 1.123.60/2.27.3/2.28.0 and classified as critical. Affected by this issue is the function executeQuery of the component MySQL v1 Node. The manipulation leads to sql injection. This vulnerability i
CVE-2026-56778 | n8n up to 2.25.6/2.26.1 Public API Execution Retry Endpoint authorization
A vulnerability, which was classified as critical, was found in n8n up to 2.25.6/2.26.1. This affects an unknown function of the component Public API Execution Retry Endpoint. Such manipulation leads to authorization bypass. This vulnerabil
CVE-2026-56777 | n8n-io n8n up to 2.25.6/2.26.1 Task Executor incomplete blacklist (GHSA-jwm3-qcfw-c5pp)
A vulnerability was found in n8n-io n8n up to 2.25.6/2.26.1. It has been declared as critical. This affects an unknown part of the component Task Executor Module. Executing a manipulation can lead to incomplete blacklist. This vulnerability
CVE-2026-56776 | n8n prior 1.123.55/2.25.7/2.26.2 Evaluations feature /test-runs/new authorization
A vulnerability, which was classified as problematic, has been found in n8n. The impacted element is an unknown function of the file /test-runs/new of the component Evaluations feature. This manipulation causes authorization bypass. This vu
CVE-2026-56775 | n8n prior 1.123.55/2.25.7/2.26.2 Evaluation Test-Run Endpoints improper authorization
A vulnerability classified as problematic was found in n8n. The affected element is an unknown function of the component Evaluation Test-Run Endpoints. The manipulation results in improper authorization. This vulnerability is identified as
CVE-2026-53987 | GLPI Project GLPI 11 up to 2.14.3 Tag preKanbanContent tag name cross site scripting
A vulnerability was found in GLPI Project GLPI 11 up to 2.14.3 and classified as problematic. Affected by this vulnerability is the function PluginTagTag::preKanbanContent of the component day. Such manipulation of the argument tag name lea
CVE-2026-53317 | Linux Kernel up to 6.12.90/6.18.32/7.0.9 wifi denial of service
A vulnerability described as critical has been identified in Linux Kernel up to 6.12.90/6.18.32/7.0.9. The affected element is an unknown function of the component wifi. The manipulation results in denial of service. This vulnerability was
CVE-2026-53258 | Linux Kernel up to 6.18.35/7.0.12 wifi cfg80211_scan int_scan_req memory leak
A vulnerability was found in Linux Kernel up to 6.18.35/7.0.12. It has been classified as critical. The affected element is the function cfg80211_scan of the component wifi. This manipulation of the argument int_scan_req causes memory leak.
CVE-2025-8444 | wealcoder Animation Addons for Elementor Plugin up to 2.6.7 on WordPress cross site scripting
A vulnerability classified as problematic was found in wealcoder Animation Addons for Elementor Plugin up to 2.6.7 on WordPress. Affected by this issue is some unknown functionality. Such manipulation leads to cross site scripting. This vul
Sicherheitslücke: Network Agent für Kaspersky Security Center
Sicherheitsanbieter Kaspersky hat zum 29. Oktober 2026 einen Fix für eine Sicherheitslücke im Network Agent für das Windows Kaspersky Security Center veröffentlicht. Die Sicherheitslücke (CVE-2026-88941. CVSSv40: 6.2) in diesem Unternehmens
Securepoint zur Linux IPv4-TCP-Schwachstelle CVE-2026-98432
In Linux wurde gerade die Schwachstelle CVE-2026-98432 in der IPv4-TCP-Verarbeitung bekannt. Für einzelne Linux-Distributionen sind Patches erst in Arbeit, andere haben bereits Updates erhalten. Securepoint hat einige Informationen zur Absi
CVE-2026-39910 | STACKIT IaaS API prior 2026-05-28 Instance Metadata Service authorization
A vulnerability classified as critical was found in STACKIT IaaS API. This affects an unknown function of the component Instance Metadata Service. Such manipulation leads to missing authorization. This vulnerability is listed as CVE-2026-39
CVE-2026-10843 | Red Hat OpenShift Container Platform 4 unnecessary privileges
A vulnerability was found in Red Hat OpenShift Container Platform 4. It has been classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to execution with unnecessary privileges. This vulnerabili
CVE-2026-43271 | Linux Kernel up to 6.6.127/6.12.74/6.18.15/6.19.5 process_metadata_update null pointer dereference
A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.127/6.12.74/6.18.15/6.19.5. Impacted is the function process_metadata_update. This manipulation causes null pointer dereference. This vulnerability is handle
CVE-2026-43258 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 alpha flush_tlb_other heap-based overflow
A vulnerability identified as critical has been detected in Linux Kernel up to 6.12.74/6.18.15/6.19.5. This vulnerability affects the function flush_tlb_other of the component alpha. Performing a manipulation results in heap-based buffer ov
CVE-2026-43253 | Linux Kernel up to 6.6.127/6.12.74/6.18.15/6.19.5 iommu wait_on_sem locking
A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.127/6.12.74/6.18.15/6.19.5. Affected by this issue is the function wait_on_sem of the component iommu. The manipulation leads to improper locking. This vulnerabi
CVE-2026-43250 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 ChipIdea UDC Driver _ep_nuke memory corruption
A vulnerability labeled as critical has been found in Linux Kernel up to 6.12.74/6.18.15/6.19.5. The affected element is the function _ep_nuke of the component ChipIdea UDC Driver. Executing a manipulation can lead to memory corruption. Thi
CVE-2026-43244 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 kcm_write_msgs null pointer dereference
A vulnerability classified as critical has been found in Linux Kernel up to 6.12.74/6.18.15/6.19.5. The affected element is the function kcm_write_msgs. Performing a manipulation results in null pointer dereference. This vulnerability is id
CVE-2026-43239 | Linux Kernel up to 6.6.127/6.12.74/6.18.15/6.19.5 smb query_interfaces privilege escalation
A vulnerability was found in Linux Kernel up to 6.6.127/6.12.74/6.18.15/6.19.5 and classified as critical. Impacted is the function query_interfaces of the component smb. Executing a manipulation can lead to privilege escalation. This vulne
CVE-2026-43204 | Linux Kernel up to 6.19.5 ASoC privilege escalation
A vulnerability labeled as critical has been found in Linux Kernel up to 6.19.5. Affected by this issue is some unknown functionality of the component ASoC. Such manipulation leads to privilege escalation. This vulnerability is documented a
CVE-2026-43185 | Linux Kernel up to 6.18.15/6.19.5 smb_direct_prepare_negotiation buffer overflow
A vulnerability labeled as critical has been found in Linux Kernel up to 6.18.15/6.19.5. This affects the function smb_direct_prepare_negotiation. Executing a manipulation can lead to buffer overflow. This vulnerability is tracked as CVE-20
TeamViewer Security Flaw Could Turn Remote Support Sessions Into Computer Takeovers
A newly disclosed TeamViewer vulnerability could let an attacker turn a routine remote support session against the technician providing help. Tracked as CVE-2026-111585, the flaw allows a malicious remote computer to crash the viewer applic
CVE-2026-43042 | Linux Kernel up to 6.19.11 mpls platform_label out-of-bounds
A vulnerability labeled as critical has been found in Linux Kernel up to 6.19.11. Impacted is the function platform_label of the component mpls. Executing a manipulation can lead to out-of-bounds read. This vulnerability is handled as CVE-2
CVE-2026-116477 | a2aproject a2a-dotnet up to 1.0.0-preview2 Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync information exposure (ID 452 / EUVD-2026-110072)
A vulnerability was found in a2aproject a2a-dotnet up to 1.0.0-preview2. It has been classified as problematic. The impacted element is the function A2AJsonRpcProcessor.ProcessRequestAsync of the file src/A2A.AspNetCore/A2AJsonRpcProcessor.
CVE-2026-115924 | danielgatis rembg up to 2.0.81 SAM Sessions rembg/sessions/sam.py pooch.retrieve sam_model path traversal (EUVD-2026-110073)
A vulnerability categorized as critical has been discovered in danielgatis rembg up to 2.0.81. Affected by this vulnerability is the function pooch.retrieve of the file rembg/sessions/sam.py of the component SAM Sessions. Such manipulation
CVE-2026-116577 | TornadoWeb Tornado up to 6.5 HTTP Header Parser allocation of resources (EUVD-2026-110318)
A vulnerability, which was classified as problematic, was found in TornadoWeb Tornado up to 6.5. Affected by this vulnerability is an unknown functionality of the component HTTP Header Parser. The manipulation results in allocation of resou
CVE-2026-116482 | subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578 patientregistration.php pat_name cross site scripting (Issue 12 / EUVD-2026-110313)
A vulnerability categorized as problematic has been discovered in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Affected is an unknown function of the file patientregistration.php. Such manipul
CVE-2026-116755 | SoftIron HyperCloud up to 2.6.17 Orchestrator command injection (EUVD-2026-114571)
A vulnerability described as critical has been identified in SoftIron HyperCloud up to 2.6.17. Affected by this vulnerability is an unknown functionality of the component Orchestrator. The manipulation results in command injection. This vul
CVE-2026-71490 | OPNsense up to 26.1.10 ACL hasPrivilege privileges management (WID-SEC-2026-2177)
A vulnerability, which was classified as problematic, has been found in OPNsense up to 26.1.10. This impacts the function OPNsense\Core\ACL::hasPrivilege of the component ACL. This manipulation causes improper privilege management. This vul
CVE-2026-63442 | OPNsense up to 26.1.10 WebGUI Login syslog-ng-lockout.conf readline usernamefld injection (WID-SEC-2026-2177)
A vulnerability was found in OPNsense up to 26.1.10 and classified as critical. The affected element is the function readline of the file syslog-ng-lockout.conf of the component WebGUI Login. The manipulation of the argument usernamefld res
CVE-2026-58395 | OPNsense up to 26.1.10 Safe-Delete config.xml delBase xpath injection (WID-SEC-2026-2177)
A vulnerability identified as problematic has been detected in OPNsense up to 26.1.10. This affects the function ApiMutableModelControllerBase::delBase of the file config.xml of the component Safe-Delete. Performing a manipulation results i
CVE-2024-13362 | XT Quick View for WooCommerce Plugin on WordPress Parameter url cross site scripting
A vulnerability was found in XT Quick View for WooCommerce Plugin on WordPress and classified as problematic. The affected element is an unknown function of the component Parameter Handler. Such manipulation of the argument url leads to cro
CVE-2026-33789 | Juniper Networks Junos OS/Junos OS Evolved rpd stack-based overflow (Nessus ID 374265)
A vulnerability classified as very critical was found in Juniper Networks Junos OS and Junos OS Evolved. The affected element is an unknown function of the component rpd. Such manipulation leads to stack-based buffer overflow. This vulnerab
CVE-2026-102175 | Juniper Junos OS/Junos OS Evolved sdxd heap-based overflow (Nessus ID 374265)
A vulnerability marked as very critical has been reported in Juniper Junos OS and Junos OS Evolved. Affected by this issue is some unknown functionality of the component sdxd. The manipulation leads to heap-based buffer overflow. This vulne
CVE-2026-33796 | Juniper Networks Junos OS/Junos OS Evolved rpd buffer overflow (Nessus ID 374265)
A vulnerability, which was classified as very critical, has been found in Juniper Networks Junos OS and Junos OS Evolved. The impacted element is an unknown function of the component rpd. Performing a manipulation results in buffer overflow
CVE-2026-84784 | OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2 QUIC Stack allocation of resources (Nessus ID 374269 / WID-SEC-2026-3638)
A vulnerability was found in OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2 and classified as problematic. This vulnerability affects unknown code of the component QUIC Stack. Executing a manipulation can lead to allocation of resources. This vulner
CVE-2026-76641 | libexpat Expat up to 2.8.3 External Entity Parser XML_ExternalEntityParserCreate out-of-bounds (Nessus ID 374269 / WID-SEC-2026-2960)
A vulnerability classified as problematic has been found in libexpat Expat up to 2.8.3. Impacted is the function XML_ExternalEntityParserCreate of the component External Entity Parser. This manipulation causes out-of-bounds read. This vulne
CVE-2026-75804 | OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2 QUIC Stack allocation of resources (Nessus ID 374269 / WID-SEC-2026-3638)
A vulnerability, which was classified as problematic, was found in OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2. Affected by this issue is some unknown functionality of the component QUIC Stack. Such manipulation leads to allocation of resources.
CVE-2022-48225 | Acuant AcuFill SDK prior 10.22.02.03 Installation uncontrolled search path (EUVD-2022-50934)
A vulnerability was found in Acuant AcuFill SDK. It has been classified as problematic. This vulnerability affects unknown code of the component Installation Handler. This manipulation causes uncontrolled search path. This vulnerability is
CVE-2022-48224 | Acuant AcuFill SDK prior 10.22.02.03 permission (EUVD-2022-50933)
A vulnerability, which was classified as critical, has been found in Acuant AcuFill SDK. Affected by this vulnerability is an unknown functionality. The manipulation leads to permission issues. This vulnerability is traded as CVE-2022-48224
CVE-2022-48223 | Acuant AcuFill SDK prior 10.22.02.03 certutil.exe race condition (EUVD-2022-50932)
A vulnerability marked as problematic has been reported in Acuant AcuFill SDK. The impacted element is an unknown function of the file certutil.exe. This manipulation causes race condition. This vulnerability is registered as CVE-2022-48223
CVE-2022-48222 | Acuant AcuFill SD prior 10.22.02.03 certutil.exe uncontrolled search path (EUVD-2022-50931)
A vulnerability labeled as critical has been found in Acuant AcuFill SD. The affected element is an unknown function of the file certutil.exe. The manipulation results in uncontrolled search path. This vulnerability is cataloged as CVE-2022
CVE-2022-48221 | Acuant AcuFill SDK prior 10.22.02.03 race condition (EUVD-2022-50930)
A vulnerability, which was classified as problematic, was found in Acuant AcuFill SDK. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to race condition. The identification of this vulnerability
CVE-2026-72897 | OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2 TLS Context Switching SSL_set_SSL_CTX out-of-bounds write (Nessus ID 374269 / WID-SEC-2026-3638)
A vulnerability classified as critical has been found in OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2. This impacts the function SSL_set_SSL_CTX of the component TLS Context Switching. The manipulation leads to out-of-bounds write. This vulnerabil
CVE-2026-54875 | OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2 SM2 timing discrepancy (Nessus ID 374269 / WID-SEC-2026-3638)
A vulnerability described as problematic has been identified in OpenSSL up to 3.4.7/3.5.8/3.6.4/4.0.2. This affects an unknown function of the component SM2. Executing a manipulation can lead to observable timing discrepancy. This vulnerabi
CVE-2026-103658 | GNU Aspell up to 0.60.8.2 Dictionary Loader common/string.hpp String::reserve heap-based overflow (Nessus ID 374270)
A vulnerability has been found in GNU Aspell up to 0.60.8.2 and classified as critical. The impacted element is the function String::reserve of the file common/string.hpp of the component Dictionary Loader. This manipulation causes heap-bas
CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in
CVE-2026-116839 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the
CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in mis
CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PAS
CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .
CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash
CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place
CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.
llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor siz
CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF fil
CVE-2026-116816 | llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model loading, causing crashes or potential code execution.
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like whose nega