Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 725 | 0,2 % |
| ≥50 % | 3.222 | 0,9 % |
| ≥10 % | 22.088 | 5,9 % |
| <10 % | 347.288 | 93,0 % |
Detecting CVE-2026-96655 exploitation in Plex logs
Detecting CVE-2026-96655 exploitation in Plex logs Patching Plex Media Server to 1.43.3.10861 removes the SSRF described in CVE-2026-96655. It does not tell you whether someone already used it. That question is answerable, but only if you k
CVE-2026-114375 | leomoon-studios wiki-go up to 1.9.1 Files Rename API files.go RenameFileHandler currentPath/newName path traversal (GHSA-xg75-vx57-m5mx / EUVD-2026-107543)
A vulnerability classified as critical has been found in leomoon-studios wiki-go up to 1.9.1. Affected is the function RenameFileHandler of the file internal/handlers/files.go of the component Files Rename API. Performing a manipulation of
CVE-2026-19947 | Zephyr Project up to 4.4.x Device Multiplexer Pseudo-Driver devmux.c z_vrfy_devmux_select_get/z_vrfy_devmux_select_set improper authorization (EUVD-2026-107488)
A vulnerability marked as very critical has been reported in Zephyr Project Zephyr up to 4.4.x. This issue affects the function z_vrfy_devmux_select_get/z_vrfy_devmux_select_set of the file drivers/misc/devmux/devmux.c of the component Devi
CVE-2026-111804 | Apache Traffic Server up to 10.1.4/10.2.0 experimental wasm plugin transaction-close handler use after free (EUVD-2026-107490)
A vulnerability was found in Apache Traffic Server up to 10.1.4/10.2.0. It has been classified as critical. This impacts the function transaction-close handler of the component experimental wasm plugin. The manipulation leads to use after f
CVE-2026-79976 | Zephyr Project up to 4.4.2 MCTP-over-I2C+GPIO target binding mctp_i2c_gpio_target.c mctp_i2c_gpio_target_stop reg_addr/rxtx null pointer dereference (EUVD-2026-107487)
A vulnerability classified as critical was found in Zephyr Project Zephyr up to 4.4.2. The impacted element is the function mctp_i2c_gpio_target_stop of the file subsys/pmci/mctp/mctp_i2c_gpio_target.c of the component MCTP-over-I2C+GPIO ta
CVE-2026-78119 | Zephyr Project up to 4.4.x Nuvoton NPCX eSPI Driver drivers/espi/espi_npcx.c espi_taf_parse out-of-bounds write (EUVD-2026-107486)
A vulnerability described as critical has been identified in Zephyr Project Zephyr up to 4.4.x. Impacted is the function espi_taf_parse of the file drivers/espi/espi_npcx.c of the component Nuvoton NPCX eSPI Driver. The manipulation results
Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks
Attackers are exploiting a zero-day SQL injection flaw in Arista's VeloCloud Orchestrator (VCO), the central management system for VeloCloud SD-WAN networks, the company said in an advisory on October 22. The flaw lets anyone who can l
CVE-2025-6519 | Copeland LP E3 Supervisory Control up to 2.31F00 insufficiently protected credentials (EUVD-2025-28745)
A vulnerability labeled as critical has been found in Copeland LP E3 Supervisory Control up to 2.31F00. The impacted element is an unknown function. The manipulation results in insufficiently protected credentials. This vulnerability is cat
CVE-2025-58214 | gavias Indutri Plugin up to 1.2.x on WordPress php file inclusion
A vulnerability, which was classified as problematic, has been found in gavias Indutri Plugin up to 1.2.x on WordPress. The affected element is an unknown function. Performing a manipulation results in improper control of filename for inclu
CVE-2025-52545 | Copeland LP E3 Supervisory Control up to 2.31F00 RCI Service insufficiently protected credentials
A vulnerability was found in Copeland LP E3 Supervisory Control up to 2.31F00. It has been rated as critical. This issue affects some unknown processing of the component RCI Service. Performing a manipulation results in insufficiently prote
CVE-2025-52544 | Copeland LP E3 Supervisory Control up to 2.31F00 Floor Plan input validation
A vulnerability was found in Copeland LP E3 Supervisory Control up to 2.31F00. It has been declared as critical. This vulnerability affects unknown code of the component Floor Plan Handler. Such manipulation leads to improper input validati
CVE-2025-52543 | Copeland LP E3 Supervisory Control up to 2.31F00 password hash instead of password for authentication
A vulnerability was found in Copeland LP E3 Supervisory Control up to 2.31F00. It has been classified as problematic. This affects an unknown part. This manipulation causes use of password hash instead of password for authentication. The id
CVE-2026-78118 | Zephyr Project up to 4.4.x Wait Queue kernel/include/wait_q.h z_waitq_head wait_q use after free (EUVD-2026-107485)
A vulnerability, which was classified as very critical, has been found in Zephyr Project Zephyr up to 4.4.x. This affects the function z_waitq_head of the file kernel/include/wait_q.h of the component Wait Queue. Performing a manipulation o
CVE-2026-78117 | Zephyr Project up to 4.4.2 Bluetooth HCI Driver hci_infineon_psoc6_bless.c psoc6_bless_send race condition (EUVD-2026-107484)
A vulnerability classified as critical has been found in Zephyr Project Zephyr up to 4.4.2. The affected element is the function psoc6_bless_send of the file drivers/bluetooth/hci/hci_infineon_psoc6_bless.c of the component Bluetooth HCI Dr
CVE-2026-18748 | ZephyrProject Zephyr up to 4.4.2 A2DP Host a2dp.c a2dp_process_config_ind len out-of-bounds (EUVD-2026-107483)
A vulnerability, which was classified as problematic, was found in ZephyrProject Zephyr up to 4.4.2. This impacts the function a2dp_process_config_ind of the file subsys/bluetooth/host/classic/a2dp.c of the component A2DP Host. Executing a
CVE-2026-113877 | HTTP::Headers::ActionPack up to 0.9 Accept-Language Header _language_match range resource consumption (EUVD-2026-109147)
A vulnerability identified as problematic has been detected in HTTP::Headers::ActionPack up to 0.9. Affected is the function _language_match of the component Accept-Language Header. The manipulation of the argument range leads to resource c
CVE-2026-91443 | Oracle Siebel CRM Deployment up to 26.9 Server Infrastructure improper authorization (EUVD-2026-106693)
A vulnerability identified as problematic has been detected in Oracle Siebel CRM Deployment up to 26.9. Affected is an unknown function of the component Server Infrastructure. The manipulation leads to improper authorization. This vulnerabi
CVE-2026-91445 | Oracle Siebel CRM End User up to 26.9 Communications Panel/Dashboard privileges management (EUVD-2026-106695)
A vulnerability labeled as critical has been found in Oracle Siebel CRM End User up to 26.9. Affected by this vulnerability is an unknown functionality of the component Communications Panel/Dashboard. The manipulation results in improper pr
CVE-2026-91444 | Oracle Siebel CRM Deployment up to 26.9 Server Infrastructure privileges management (EUVD-2026-106694)
A vulnerability has been found in Oracle Siebel CRM Deployment up to 26.9 and classified as critical. The impacted element is an unknown function of the component Server Infrastructure. This manipulation causes improper privilege management
CVE-2026-91446 | Oracle Siebel CRM Deployment up to 26.9 Server Infrastructure privileges management (EUVD-2026-106696)
A vulnerability was found in Oracle Siebel CRM Deployment up to 26.9 and classified as problematic. This affects an unknown function of the component Server Infrastructure. Such manipulation leads to improper privilege management. This vuln
Internet-Security - PHP-Sicherheitslücke: Landesseiten „down“ | krone.at
Internet-Security. PHP-Sicherheitslücke: Landesseiten „down“. Vorarlberg ... Und laut dem auf IT-Sicherheit spezialisierten US-Unternehmen ... Weiterlesen
CVE-2022-47757 | imo.im 2022.11.1051 Shared Library path traversal (GHSA-ghf9-x3c5-3mwj / EUVD-2022-50515)
A vulnerability classified as critical has been found in imo.im 2022.11.1051. Affected by this vulnerability is an unknown functionality of the component Shared Library Handler. The manipulation leads to path traversal. This vulnerability i
CVE-2022-47745 | EasyCorp ZenTao PMS up to 18.0.beta1 sql injection (Issue 106 / EUVD-2022-50504)
A vulnerability was found in EasyCorp ZenTao PMS up to 18.0.beta1. It has been rated as critical. Affected is an unknown function. Performing a manipulation results in sql injection. This vulnerability is cataloged as CVE-2022-47745. It is
CVE-2022-47740 | Seltmann Content Management System 6 /index.php sql injection (EUVD-2022-50499)
A vulnerability was found in Seltmann Content Management System 6 and classified as critical. The impacted element is an unknown function of the file /index.php. The manipulation results in sql injection. This vulnerability is identified as
CVE-2026-63887 | Linux Kernel up to 7.0.11 SCSI Target iSCSI iscsi_encode_text_output heap-based overflow (Nessus ID 334954)
A vulnerability classified as very critical has been found in Linux Kernel up to 7.0.11. This vulnerability affects the function iscsi_encode_text_output of the component SCSI Target iSCSI. Performing a manipulation results in heap-based bu
CVE-2026-63886 | Linux Kernel up to 7.0.11 Iscsi chap_server_compute_hash chap_r allocation of resources (Nessus ID 340744)
A vulnerability described as very critical has been identified in Linux Kernel up to 6.1.175/6.6.142/6.12.92/6.18.34/7.0.11. This affects the function chap_server_compute_hash of the component Iscsi. The manipulation of the argument chap_r
CVE-2026-63860 | Linux Kernel up to 7.0.9 RDMA Core nla_strcmp null termination
A vulnerability was found in Linux Kernel up to 7.0.9. It has been classified as very critical. Affected by this vulnerability is the function nla_strcmp of the component RDMA Core. This manipulation causes improper null termination. This v
CVE-2026-63850 | Linux Kernel up to 6.12.90/6.18.32/7.0.9 Vcn Encoder drm/amdgpu/vcn
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.90/6.18.32/7.0.9. The affected element is an unknown function of the file drm/amdgpu/vcn of the component Vcn Encoder. The manipulation results in an unknown w
CVE-2026-63849 | Linux Kernel up to 6.18.32/7.0.9 Vcn Encoder drm/amdgpu/vcn set_no_user_fence
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.18.32/7.0.9. Impacted is the function set_no_user_fence of the file drm/amdgpu/vcn of the component Vcn Encoder. The manipulation of the argument user_fence
CVE-2026-63848 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Drm Amdgpu Jpeg drm/amdgpu/jpeg Local Privilege Escalation
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9. This issue affects some unknown processing of the file drm/amdgpu/jpeg of the component Drm Amdgpu Jpeg. Executing a manip
CVE-2026-63846 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Drm Amdgpu Jpeg drm/amdgpu/jpeg
A vulnerability was found in Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9. It has been rated as problematic. This vulnerability affects unknown code of the file drm/amdgpu/jpeg of the component Drm Amdgpu Jpeg. Performing a manipulation
CVE-2026-63845 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 amdgpu/jpeg drm/amdgpu/jpeg
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9. This affects an unknown function of the file drm/amdgpu/jpeg of the component amdgpu/jpeg. Performing a manipulation r
CVE-2026-63844 | Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9 Amdgpu Jpeg drm/amdgpu/jpeg unusual condition
A vulnerability classified as very critical was found in Linux Kernel up to 6.6.140/6.12.90/6.18.32/7.0.9. The impacted element is an unknown function of the file drm/amdgpu/jpeg of the component Amdgpu Jpeg. Such manipulation leads to impr
CVE-2026-24401 | Avahi up to 0.9rc2 mDNS/DNS-SD lookup_handle_cname recursion (ID 501 / EUVD-2026-4603)
A vulnerability marked as problematic has been reported in Avahi up to 0.9rc2. Impacted is the function lookup_handle_cname of the component mDNS/DNS-SD. This manipulation causes uncontrolled recursion. This vulnerability is tracked as CVE-
CVE-2022-47717 | Last Yard 22.09.8-1 cross-domain policy (EUVD-2022-50476)
A vulnerability labeled as problematic has been found in Last Yard 22.09.8-1. Impacted is an unknown function. Such manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability is referenced as CVE-2022-47
CVE-2022-47715 | Last Yard 22.09.8-1 Cookie cleartext transmission (EUVD-2022-50474)
A vulnerability described as problematic has been identified in Last Yard 22.09.8-1. The impacted element is an unknown function of the component Cookie Handler. Executing a manipulation can lead to cleartext transmission of sensitive infor
CVE-2022-47714 | Last Yard 22.09.8-1 cleartext transmission (EUVD-2022-50473)
A vulnerability identified as problematic has been detected in Last Yard 22.09.8-1. This issue affects some unknown processing. This manipulation causes cleartext transmission of sensitive information. The identification of this vulnerabili
CVE-2022-47703 | TIANJIE CPE906-3 information disclosure (EUVD-2022-50462)
A vulnerability was found in TIANJIE CPE906-3. It has been classified as problematic. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in information disclosure. This vulnerability is identified
CVE-2026-18963 | Red Hat Build of Keycloak keycloak-services password recovery (EUVD-2026-61063 / EDB-52699)
A vulnerability labeled as critical has been found in Red Hat Build of Keycloak. Affected by this vulnerability is an unknown functionality of the component keycloak-services. The manipulation results in weak password recovery. This vulnera
CVE-2026-111384 | nezhahq Nezha up to 2.3.14 File Manager /api/v1/ws/file/:id SetReadLimit memory allocation (EUVD-2026-102565)
A vulnerability was found in nezhahq Nezha up to 2.3.14. It has been rated as problematic. This issue affects the function SetReadLimit of the file /api/v1/ws/file/:id of the component File Manager. Performing a manipulation of the argument
CVE-2026-111352 | ThinkCMF up to 8.0.1 RestAdminBaseController Auth::check improper authorization (EUVD-2026-102496)
A vulnerability was found in ThinkCMF up to 8.0.1 and classified as problematic. This vulnerability affects the function Auth::check of the component RestAdminBaseController. The manipulation results in improper authorization. This vulnerab
CVE-2026-111332 | AtalayaLabs OxiCloud up to 0.9.3 /api/files/{id} improper authorization (EUVD-2026-102486)
A vulnerability was found in AtalayaLabs OxiCloud up to 0.9.3. It has been declared as problematic. This affects an unknown part of the file /api/files/{id}. The manipulation results in improper authorization. This vulnerability is reported
CVE-2026-91399 | Oracle Primavera P6 Enterprise Project Portfolio Management Web Access improper authorization (EUVD-2026-106653)
A vulnerability was found in Oracle Primavera P6 Enterprise Project Portfolio Management. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Web Access. Such manipulation leads t
Popcorn Time updater flaw exposed millions of devices to hijacking
Eye Research delivered more than two million update downloads in an operation to disable an abandoned Popcorn Time updater that could have allowed attackers to hijack Windows and macOS systems with full privileges. The vulnerability, tracke
CVE-2022-47701 | Comfast CF-WR623N 2.3.0.1 cross site scripting (EUVD-2022-50460)
A vulnerability identified as problematic has been detected in Comfast CF-WR623N 2.3.0.1. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in cross site scripting. This vulnerability is cataloged
CVE-2022-47700 | Comfast CF-WR623N up to 2.3.0.1 improper authentication (EUVD-2022-50459)
A vulnerability, which was classified as critical, was found in Comfast CF-WR623N up to 2.3.0.1. This issue affects some unknown processing. Such manipulation leads to improper authentication. This vulnerability is uniquely identified as CV
CVE-2022-47699 | Comfast CF-WR623N 2.3.0.1 access control (EUVD-2022-50458)
A vulnerability was found in Comfast CF-WR623N 2.3.0.1. It has been declared as critical. This affects an unknown function. The manipulation results in improper access controls. This vulnerability is identified as CVE-2022-47699. The attack
CVE-2022-47698 | Comfast CF-WR623N 2.3.0.1 URL Filtering cross site scripting (EUVD-2022-50457)
A vulnerability was found in Comfast CF-WR623N 2.3.0.1. It has been classified as problematic. The impacted element is an unknown function of the component URL Filtering. The manipulation leads to cross site scripting. This vulnerability is
PHP Warns of New Code Execution Flaw Days After PHP2Shell Patches
PHP warns of a new, unlikely code execution flaw, CVE-2026-115560, and advises disabling session upload progress until a fix is released. PHP has warned of a new code execution vulnerability, tracked as CVE-2026-115560, just two days after
IT-Experten warnen vor zukünftigen Angriffen nach Sicherheitslücke bei PHP - Tagesschau
... 23.10.2026 • 20:00 Uhr. schnell informiert · IT · Cyberkriminalität · Sicherheit · Facebook · WhatsApp; Teilen; Mail; Drucken. Zur Startseite. Service. Weiterlesen
CVE-2026-115938 | Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluated as a sandboxed Twig object template. Craft’s allowed column filter delegates property lookup to Yii ArrayHelper, outside Twig’s SecurityPolicy. Repeated single-segment lookups therefore bypass the sandbox’s empty property/method allowlists. The vulnerable condition value is ultimately cast to an integer. That does not protect the
Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluated as a sandboxed Twig object template. Craft’s allowed column filter delegates property lookup to Yii ArrayHelper,
CVE-2026-115937 | The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong together: * commerceTransactionHash — selects which Craft Commerce transaction is completed * id — selects which Mollie payment is queried for its status An unauthenticated attacker holding any paid Mollie payment ID from the merchant’s account can pair it with any transaction hash. Commerce queries Mollie, sees status: paid,
The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong together: * commerceTransactionHash — selects which Craft Commerce transaction is completed * id — selects which
CVE-2026-115801 | A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the component JSON Config File Handler. The manipulation of the argument hidden_dim/class_num results in out-of-bounds read. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The vendor explains: "khaiii treats the resource dir
A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the component JSON Config File Handler. The manipulation of the ar
CVE-2026-115935 | The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated control panel user. A non-admin user with only accessCp can place newline characters in X-Craft-Plugin-Licenses. Craft passes this value to its .env writer without removing the newlines. This lets the user insert a new attacker-known CRAFT_SECURITY_KEY into .env. After Craft loads that key, the user can forge a signed login redirect containing a T
The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated control panel user. A non-admin user with only accessCp can place newline characters in X-Craft-Plugin-Licenses. Craft passes this
CVE-2026-115897 | Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. Prior to 7.1.3, the function-source escaping logic does not neutralize a bare closing-script prefix when attacker-influenced function source text ends exactly at that prefix. Because each function body is escaped independently, a delimiter supplied by surrounding serialized output can terminate an HTML script element, and a later serialize
Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. Prior to 7.1.3, the function-source escaping logic does not neutralize a bare closing-script prefix when attacker-influ
Critical HPE Aruba AOS-8 Flaw Allows Hackers to Bypass SSH Authentication and Take Over Systems
Hewlett Packard Enterprise (HPE) has addressed a critical authentication-bypass vulnerability in the SSH daemon of its AOS-8 wireless operating system. This vulnerability, tracked as CVE-2026-79855, could let a remote, unauthenticated attac
CVE-2026-87911
Read this article This article has been indexed from Latest Bulletins Read the original article: CVE-2026-87911 The post CVE-2026-87911 appeared first on IT Security News. Weiterlesen
CVE-2026-115895 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. From 17.0.0 until 21.0.4, packages/happy-dom/src/module/ECMAScriptModuleCompiler.ts accepts a named ESM import alias without validating that it is a JavaScript binding identifier before inserting it into a generated destructuring binding. With enableJavaScriptEvaluation enabled, attacker-controlled HTML or module source can use an invalid alias that becomes a vali
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. From 17.0.0 until 21.0.4, packages/happy-dom/src/module/ECMAScriptModuleCompiler.ts accepts a named ESM import alias without validating that it
CVE-2026-115893 | Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than approximately 256,000 targets so that it has an incorrect conditional branch target. The branch can then jump to arbitrary other code at a user-controlled offset, allowing a user-controlled Wasm module to escape the sandbox on aarch64 engines using the default Cranelift backend. This iss
Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than approximately 256,000 targets so that it has an incorrect conditio
CVE-2026-115892 | Wasmtime is a runtime for WebAssembly. From 46.0.0 until 48.0.7 and 49.0.4, lowering a host-created component-model stream or future into a guest can omit a required payload-type check after the value passes through guest code and returns through StreamAny, FutureAny, Val::Stream, Val::Future, or an equivalent typed reader. A malicious guest that controls exported function types or returned values can cause the host to pass the type-erased value to a guest e
Wasmtime is a runtime for WebAssembly. From 46.0.0 until 48.0.7 and 49.0.4, lowering a host-created component-model stream or future into a guest can omit a required payload-type check after the value passes through guest code and returns t