Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 725 | 0,2 % |
| ≥50 % | 3.220 | 0,9 % |
| ≥10 % | 22.091 | 5,9 % |
| <10 % | 347.626 | 93,0 % |
CVE-2026-85228 – Integer overflow in tensor buffer validation in Deep Java Library
Read this article This article has been indexed from Latest Bulletins Read the original article: CVE-2026-85228 – Integer overflow in tensor buffer validation in Deep Java Library The post CVE-2026-85228 – Integer overflow in tensor buffer
CVE-2026-89090 – Denial of service in the event stream header decoder in AWS SDK for Go v2
Read this article This article has been indexed from Latest Bulletins Read the original article: CVE-2026-89090 – Denial of service in the event stream header decoder in AWS SDK for Go v2 The post CVE-2026-89090 – Denial of service in the e
CVE-2026-89065 and CVE-2026-89066: Issue with projen – Path traversal and OS command injection
Read this article This article has been indexed from Latest Bulletins Read the original article: CVE-2026-89065 and CVE-2026-89066: Issue with projen – Path traversal and OS command injection The post CVE-2026-89065 and CVE-2026-89066: Issu
CVE-2026-90106 | Linux Kernel up to 7.2.5 Net Bridge ARP ND Proxy race condition (WID-SEC-2026-3444)
A vulnerability marked as very critical has been reported in Linux Kernel up to 7.2.5. This impacts an unknown function of the component Net Bridge ARP ND Proxy. The manipulation leads to race condition. This vulnerability is listed as CVE-
CVE-2026-90105 | Linux Kernel up to 7.2.5 vxlan arp/neigh_reduce race condition (WID-SEC-2026-3444)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 7.2.5. The affected element is the function arp/neigh_reduce of the component vxlan. Such manipulation leads to race condition. This vulnerability is ref
CVE-2026-90104 | Linux Kernel up to 7.2.5 NFSv4 Callback Decoding decode_cb_sequence_args uninitialized variable (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been classified as very critical. This vulnerability affects the function decode_cb_sequence_args of the component NFSv4 Callback Decoding. The manipulation leads to use of unini
CVE-2026-90103 | Linux Kernel up to 7.2.5 NFSv4.2 encode_layoutstats buffer overflow (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5 and classified as critical. This affects the function encode_layoutstats of the component NFSv4.2. Executing a manipulation can lead to buffer overflow. This vulnerability is handled as
CVE-2026-90101 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 bnxt_en hwmon_notify_event input validation (WID-SEC-2026-3444)
A vulnerability classified as critical was found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. Affected by this issue is the function hwmon_notify_event of the component bnxt_en. Such manipulation leads to improper input validation. This vu
CVE-2026-90100 | Linux Kernel up to 6.18.51/7.2.5 ptp net_timer_enable_perout period divide by zero (WID-SEC-2026-3444)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.18.51/7.2.5. This affects the function net_timer_enable_perout of the component ptp. The manipulation of the argument period results in divide by zero. Thi
CVE-2026-90099 | Linux Kernel up to 7.2.5 Network Scheduler Classifier cls_api.c tcf_exts_init_ex/u32_init_knode/basic_change allocation of resources (WID-SEC-2026-3444)
A vulnerability classified as problematic was found in Linux Kernel up to 7.2.5. This vulnerability affects the function tcf_exts_init_ex/u32_init_knode/basic_change of the file cls_api.c of the component Network Scheduler Classifier. Such
CVE-2026-90098 | Linux Kernel up to 7.2.5 sparx5 kernel/locking/mutex.c sparx5_set_rx_mode (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been declared as critical. This impacts the function sparx5_set_rx_mode of the file kernel/locking/mutex.c of the component sparx5. Such manipulation leads to improper locking. T
CVE-2026-90097 | Linux Kernel up to 6.18.51/7.2.5 vmbus hv_acpi_init initialization (WID-SEC-2026-3444)
A vulnerability classified as problematic has been found in Linux Kernel up to 6.18.51/7.2.5. This affects the function hv_acpi_init of the component vmbus. This manipulation causes improper initialization. This vulnerability appears as CVE
CVE-2026-90096 | Linux Kernel FUSE fuse_direct_write_iter ki_pos information disclosure (WID-SEC-2026-3444)
A vulnerability classified as problematic was found in Linux Kernel. The affected element is the function fuse_direct_write_iter of the component FUSE. Executing a manipulation of the argument ki_pos can lead to information disclosure. This
CVE-2026-90095 | Linux Kernel FUSE fuse_uring_cmd deadlock (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel. It has been classified as problematic. This affects the function fuse_uring_cmd of the component FUSE. This manipulation causes deadlock. The identification of this vulnerability is CVE-2026-90095.
CVE-2026-89049 – Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
Read this article This article has been indexed from Latest Bulletins Read the original article: CVE-2026-89049 – Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent The post CVE-202
CVE-2026-18061 – XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin
Read this article This article has been indexed from Latest Bulletins Read the original article: CVE-2026-18061 – XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin The post CVE-2026-18061 – XML External Entity (X
CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles
Bulletin ID: 2026-150-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/24/2026 20:00 PM PDT Summary: AWS identified CVE-2026-111943, a key-generation flaw at external CA eMudhra/emSign that made intermediate
CVE-2026-90094 | Linux Kernel up to 6.18.51/7.2.5 arm64 information disclosure (WID-SEC-2026-3444)
A vulnerability classified as problematic has been found in Linux Kernel up to 6.18.51/7.2.5. Impacted is an unknown function of the component arm64. Performing a manipulation results in information disclosure. This vulnerability is reporte
CVE-2026-90093 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock.c l2cap_sock_setsockopt use after free (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5 and classified as very critical. The impacted element is the function l2cap_sock_setsockopt of the file l2cap_sock.c of the component L2CAP. The manipulation results in use after free. T
CVE-2026-90092 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock_new_connection_cb use after free (WID-SEC-2026-3444)
A vulnerability described as very critical has been identified in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. This issue affects the function l2cap_sock_new_connection_cb of the component L2CAP. Such manipulation leads to use
CVE-2026-90091 | Linux Kernel up to 7.2.5 L2CAP l2cap_sock_cleanup_listen null pointer dereference (WID-SEC-2026-3444)
A vulnerability has been found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5 and classified as very critical. The affected element is the function l2cap_sock_cleanup_listen of the component L2CAP. The manipulation leads to nu
CVE-2026-90089 | Linux Kernel up to 6.18.51/7.2.5 btnxpuart nxp_process_fw_dump out-of-bounds (WID-SEC-2026-3444)
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.51/7.2.5. This affects the function nxp_process_fw_dump of the component btnxpuart. The manipulation results in out-of-bounds read. This vulnerability is cat
CVE-2026-90087 | Linux Kernel up to 7.2.5 Bluetooth create_le_conn_complete allocation of resources (WID-SEC-2026-3444)
A vulnerability identified as critical has been detected in Linux Kernel up to 7.2.5. Affected by this issue is the function create_le_conn_complete of the component Bluetooth. The manipulation leads to allocation of resources. This vulnera
CVE-2026-90086 | Linux Kernel up to 6.18.51/7.2.5 xsk xsk_tx_metadata_request state issue (WID-SEC-2026-3444)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.51/7.2.5. Affected by this vulnerability is the function xsk_tx_metadata_request of the component xsk. Executing a manipulation can lead to state is
CVE-2026-90085 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 octeontx2-af tm_tree rvu_dbg_nix_tm_tree_display sq_ctx null pointer dereference (WID-SEC-2026-3444)
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. This issue affects the function rvu_dbg_nix_tm_tree_display of the file /sys/kernel/debug/octeontx2/nix/tm_tree of the compon
CVE-2026-106432 | MongoDB PHP Driver up to 1.21.10/2.1.10/2.5.3 BSON encoder heap-based overflow (Nessus ID 371747 / WID-SEC-2026-3830)
A vulnerability identified as very critical has been detected in MongoDB PHP Driver up to 1.21.10/2.1.10/2.5.3. Affected is an unknown function of the component BSON encoder. Performing a manipulation results in heap-based buffer overflow.
CVE-2026-114629 | Web::Simple up to 0.034 ParamParser get_unpacked_body_from buffer overflow (EUVD-2026-109295 / Nessus ID 371748)
A vulnerability was found in Web::Simple up to 0.034. It has been classified as critical. Impacted is the function Web::Dispatch::ParamParser::get_unpacked_body_from of the component ParamParser. Performing a manipulation results in buffer
CVE-2026-106436 | MongoDB PHP Driver up to 1.21.10/2.1.10/2.5.3 BSON Encoder return value (Nessus ID 371747 / WID-SEC-2026-3830)
A vulnerability categorized as critical has been discovered in MongoDB PHP Driver up to 1.21.10/2.1.10/2.5.3. This impacts an unknown function of the component BSON Encoder. Such manipulation leads to unchecked return value. This vulnerabil
CVE-2026-93577 | GitLab up to 19.2.6/19.3.2/19.4.0 Regular Expression Compilation integer overflow (Nessus ID 371749)
A vulnerability was found in GitLab up to 19.2.6/19.3.2/19.4.0. It has been classified as critical. Affected by this issue is some unknown functionality of the component Regular Expression Compilation. This manipulation causes integer overf
CVE-2026-89078 | GitLab up to 19.2.6/19.3.2/19.4.0 Regular Expression Parsing double free (Nessus ID 371750)
A vulnerability classified as critical has been found in GitLab up to 19.2.6/19.3.2/19.4.0. The affected element is an unknown function of the component Regular Expression Parsing. This manipulation causes double free. This vulnerability is
CVE-2026-90084 | Linux Kernel up to 6.18.51/7.2.5 octeontx2-vf register_netdev initialization (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.18.51/7.2.5. It has been rated as very critical. Affected is the function register_netdev of the component octeontx2-vf. Performing a manipulation results in improper initialization. This vu
CVE-2026-90083 | Linux Kernel up to 6.18.51/7.2.5 act_ife net/sched/act_ife.c tcf_ife_act hard_header_len memory corruption (WID-SEC-2026-3444)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.51/7.2.5. Impacted is the function tcf_ife_act of the file net/sched/act_ife.c of the component act_ife. The manipulation of the argument hard_heade
CVE-2026-90082 | Linux Kernel up to 7.2.5 mana mana_gd_query_max_resources memory corruption (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5 and classified as very critical. This issue affects the function mana_gd_query_max_resources of the component mana. Executing a manipulation can lead to memory corruption. The identifica
CVE-2026-90081 | Linux Kernel up to 7.2.5 RDS include/linux/wait.h rds_cong_map_updated m_waitq race condition (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been rated as very critical. The impacted element is the function rds_cong_map_updated of the file include/linux/wait.h of the component RDS. This manipulation of the argument m_
CVE-2026-90080 | Linux Kernel up to 6.18.51/7.2.5 octeontx2-pf otx2_init_hw_resources/otx2_pool_aq_init null pointer dereference (WID-SEC-2026-3444)
A vulnerability has been found in Linux Kernel up to 6.18.51/7.2.5 and classified as critical. This vulnerability affects the function otx2_init_hw_resources/otx2_pool_aq_init of the component octeontx2-pf. Performing a manipulation results
CVE-2026-90079 | Linux Kernel up to 7.2.5 octeontx2-af rvu_mbox_init allocation of resources (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been declared as critical. The affected element is the function rvu_mbox_init of the component octeontx2-af. The manipulation results in allocation of resources. This vulnerabili
CVE-2026-90078 | Linux Kernel up to 7.2.5 act_skbmod net/sched/act_skbmod.c tcf_skbmod_act out-of-bounds (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been classified as critical. Impacted is the function tcf_skbmod_act of the file net/sched/act_skbmod.c of the component act_skbmod. The manipulation leads to out-of-bounds read.
CVE-2026-90077 | Linux Kernel up to 6.18.51/7.2.5 Network Namespace copy_net_ns memory leak (WID-SEC-2026-3444)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.18.51/7.2.5. This affects the function copy_net_ns of the component Network Namespace. Such manipulation leads to memory leak. This vulnerability is unique
CVE-2026-90076 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 Fair Queueing Scheduler net/sched/fq.c fq_init quantum infinite loop (WID-SEC-2026-3444)
A vulnerability marked as problematic has been reported in Linux Kernel up to 6.12.109/6.18.51/7.2.5. This affects the function fq_init of the file net/sched/fq.c of the component Fair Queueing Scheduler. Performing a manipulation of the ar
CVE-2026-90075 | Linux Kernel up to 7.2.5 fq_codel net/sched/sch_fq_codel.c fq_codel_init infinite loop (WID-SEC-2026-3444)
A vulnerability labeled as problematic has been found in Linux Kernel up to 7.2.5. The impacted element is the function fq_codel_init of the file net/sched/sch_fq_codel.c of the component fq_codel. Such manipulation leads to infinite loop.
CVE-2026-90074 | Linux Kernel up to 7.2.5 fq_pie net/sched/fq_pie.c fq_pie_init quantum/deficit infinite loop (WID-SEC-2026-3444)
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 7.2.5. Affected by this issue is the function fq_pie_init of the file net/sched/fq_pie.c of the component fq_pie. This manipulation of the argument q
CVE-2026-90073 | Linux Kernel up to 7.2.5 hhf sch_hhf.c hhf_change quantum integer overflow (WID-SEC-2026-3444)
A vulnerability identified as problematic has been detected in Linux Kernel up to 7.2.5. The affected element is the function hhf_change of the file sch_hhf.c of the component hhf. This manipulation of the argument quantum causes integer ov
CVE-2025-59042 | PyInstaller up to 5.x code injection (GHSA-p2xp-xx3r-mffc)
A vulnerability was found in PyInstaller up to 5.x. It has been rated as critical. This affects an unknown function. Performing a manipulation results in code injection. This vulnerability was named CVE-2025-59042. The attack needs to be ap
CVE-2025-58628 | kamleshyadav Miraculous Plugin up to 2.0.8 on WordPress sql injection
A vulnerability identified as critical has been detected in kamleshyadav Miraculous Plugin up to 2.0.8 on WordPress. The affected element is an unknown function. This manipulation causes sql injection. This vulnerability appears as CVE-2025
CVE-2025-52547 | Copeland LP E3 Supervisory Control up to 2.31F00 Application Service denial of service
A vulnerability categorized as problematic has been discovered in Copeland LP E3 Supervisory Control up to 2.31F00. Impacted is an unknown function of the component Application Service. Executing a manipulation can lead to denial of service
CVE-2025-52546 | Copeland LP E3 Supervisory Control up to 2.31F00 Floor Plan unrestricted upload
A vulnerability marked as critical has been reported in Copeland LP E3 Supervisory Control up to 2.31F00. This affects an unknown function of the component Floor Plan Handler. This manipulation causes unrestricted upload. This vulnerability
CVE-2025-10290 | Mozilla Focus up to 142.x on iOS ui layer
A vulnerability was found in Mozilla Focus up to 142.x on iOS and classified as problematic. This impacts an unknown function. Executing a manipulation can lead to improper restriction of rendered ui layers. The identification of this vulne
CVE-2026-110956 | asVereinbase Plugin up to 1.1.7 on WordPress improper authentication (EUVD-2026-109225)
A vulnerability classified as critical has been found in asVereinbase Plugin up to 1.1.7 on WordPress. This impacts an unknown function. This manipulation causes improper authentication. This vulnerability is handled as CVE-2026-110956. The
CVE-2026-97353 | News Kit Addons for Elementor Plugin up to 1.4.7 on WordPress authorization (EUVD-2026-109227)
A vulnerability categorized as critical has been discovered in News Kit Addons for Elementor Plugin up to 1.4.7 on WordPress. The impacted element is an unknown function. Executing a manipulation can lead to missing authorization. This vuln
CVE-2026-105199 | Pixel Tag Manager for WooCommerce Plugin up to 2.2.2 on WordPress AJAX Actions cross site scripting (EUVD-2026-109226)
A vulnerability classified as problematic was found in Pixel Tag Manager for WooCommerce Plugin up to 2.2.2 on WordPress. Affected is an unknown function of the component AJAX Actions. Such manipulation leads to cross site scripting. This v
CVE-2026-97352 | News Kit Addons for Elementor Plugin up to 1.4.8 on WordPress authorization (EUVD-2026-109228)
A vulnerability was found in News Kit Addons for Elementor Plugin up to 1.4.8 on WordPress. It has been classified as problematic. This issue affects some unknown processing. This manipulation causes missing authorization. This vulnerabilit
CVE-2026-107907 | MAS Videos Plugin up to 1.3.4 on WordPress authorization (EUVD-2026-109229)
A vulnerability, which was classified as problematic, has been found in MAS Videos Plugin up to 1.3.4 on WordPress. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in missing authorization. This
CVE-2026-87835 | Front End Users Plugin up to 3.2.35 on WordPress Registration access control (EUVD-2026-109230)
A vulnerability has been found in Front End Users Plugin up to 3.2.35 on WordPress and classified as critical. This affects an unknown part of the component Registration. The manipulation leads to improper access controls. This vulnerabilit
CVE-2026-107887 | Advanced Twenty Seventeen Plugin up to 1.3.1 on WordPress authorization (EUVD-2026-109231)
A vulnerability was found in Advanced Twenty Seventeen Plugin up to 1.3.1 on WordPress. It has been declared as problematic. Impacted is an unknown function. Such manipulation leads to missing authorization. This vulnerability is listed as
CVE-2026-114194 | Igor Funa Ad Inserter Plugin up to 2.8.18 on WordPress cross site scripting (EUVD-2026-109261)
A vulnerability was found in Igor Funa Ad Inserter Plugin up to 2.8.18 on WordPress. It has been rated as problematic. Affected by this issue is some unknown functionality. This manipulation causes cross site scripting. This vulnerability i
CVE-2026-112863 | Hogash KALLYAS Plugin up to 4.25.0 on WordPress cross site scripting (EUVD-2026-108942)
A vulnerability identified as problematic has been detected in Hogash KALLYAS Plugin up to 4.25.0 on WordPress. The affected element is an unknown function. Performing a manipulation results in cross site scripting. This vulnerability is kn
CVE-2026-114179 | wordplus BP Better Messages Plugin up to 3.1.3 on WordPress cross site scripting (EUVD-2026-109245)
A vulnerability categorized as problematic has been discovered in wordplus BP Better Messages Plugin up to 3.1.3 on WordPress. Affected is an unknown function. The manipulation results in cross site scripting. This vulnerability is cataloge
CVE-2026-112844 | Arraytics Event Solution Plugin up to 4.1.26 on WordPress cross site scripting (EUVD-2026-109246)
A vulnerability was found in Arraytics Event Solution Plugin up to 4.1.26 on WordPress and classified as problematic. The affected element is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is refere
CVE-2026-114705 | QuadLayers Wp Social Feed Gallery Plugin up to 5.0.13 on WordPress missing authentication (EUVD-2026-109263)
A vulnerability labeled as critical has been found in QuadLayers Wp Social Feed Gallery Plugin up to 5.0.13 on WordPress. This issue affects some unknown processing. Executing a manipulation can lead to missing authentication. This vulnerab
CVE-2026-115981 | phpIPAM up to 1.8.3 upgrade/index.php REQUEST_URI cross site scripting (EUVD-2026-109318)
A vulnerability described as problematic has been identified in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown functionality of the file upgrade/index.php. Such manipulation of the argument REQUEST_URI leads to cross site