Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 739 | 0,2 % |
| ≥50 % | 3.214 | 0,8 % |
| ≥10 % | 22.042 | 5,8 % |
| <10 % | 354.734 | 93,2 % |
CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft
On September 25, 2026, Mandiant released a report regarding continued mass exploitation of CVE-2026-35273 by the ShinyHunters group. TrendAI’s Zero Day Initiative first reported this CVE to Oracle on June 10, 2026, following an investigatio
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGrap
CVE-2026-63958 | Linux Kernel up to 7.0.11 UCSI Connector ucsi_connector_change connector_number null pointer dereference (Nessus ID 372930)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.1.175/6.6.142/6.12.92/6.18.34/7.0.11. This issue affects the function ucsi_connector_change of the component UCSI Connector. The manipulation of the argumen
CVE-2026-93543 | x.org libXi up to 1.8.3 XI2 class parser out-of-bounds (Nessus ID 372931)
A vulnerability described as problematic has been identified in x.org libXi up to 1.8.3. Affected by this issue is the function XI2 class parser. Executing a manipulation can lead to out-of-bounds read. This vulnerability appears as CVE-202
CVE-2026-93542 | x.org LibXi up to 1.8.3 XI2 Class Parsing size_classes/copy_classes out-of-bounds (Nessus ID 372931)
A vulnerability labeled as problematic has been found in x.org LibXi up to 1.8.3. Affected is the function size_classes/copy_classes of the component XI2 Class Parsing. Such manipulation leads to out-of-bounds read. This vulnerability is do
CVE-2026-93541 | X.org LibXi up to 1.8.3 XQueryDeviceState out-of-bounds (Nessus ID 372931)
A vulnerability was found in X.org LibXi up to 1.8.3. It has been rated as problematic. This issue affects the function XQueryDeviceState. Performing a manipulation results in out-of-bounds read. This vulnerability is cataloged as CVE-2026-
CVE-2022-48090 | Tramyardg hotel-mgmt-system 2022.4 /app/dao/CustomerDAO.php sql injection (Issue 21 / EUVD-2022-50804)
A vulnerability classified as critical was found in Tramyardg hotel-mgmt-system 2022.4. Affected is an unknown function of the file /app/dao/CustomerDAO.php. The manipulation results in sql injection. This vulnerability is identified as CVE
CVE-2022-48082 | Easyone CRM 5.50.02 SearchTag text sql injection (EUVD-2022-50796)
A vulnerability classified as critical was found in Easyone CRM 5.50.02. Affected by this vulnerability is an unknown functionality of the file /Services/Misc.asmx/SearchTag. Executing a manipulation of the argument text can lead to sql inj
CVE-2022-48078 | pycdc 44a730f3a889503014fec94ae6e62d8401cb75e5 ASTree.cpp BuildFromCode stack-based overflow (Issue 295 / EUVD-2022-50792)
A vulnerability was found in pycdc 44a730f3a889503014fec94ae6e62d8401cb75e5. It has been declared as critical. This impacts the function BuildFromCode of the file ASTree.cpp. Executing a manipulation can lead to stack-based buffer overflow.
CVE-2022-48077 | Genymotion Desktop 3.3.2 uncontrolled search path (EUVD-2022-50791)
A vulnerability marked as critical has been reported in Genymotion Desktop 3.3.2. Impacted is an unknown function. This manipulation causes uncontrolled search path. The identification of this vulnerability is CVE-2022-48077. It is possible
CVE-2026-33614 | MB connect line mbCONNECT24/mymbCONNECT24 up to 2.19.4 Getinfo Endpoint sql injection (VDE-2026-030)
A vulnerability was found in MB connect line mbCONNECT24 and mymbCONNECT24 up to 2.19.4. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component Getinfo Endpoint. Performing a manipula
CVE-2026-33613 | MB connect line mbCONNECT24/mymbCONNECT24 up to 2.19.4 generateSrpArray os command injection (VDE-2026-030)
A vulnerability has been found in MB connect line mbCONNECT24 and mymbCONNECT24 up to 2.19.4 and classified as critical. This impacts the function generateSrpArray. This manipulation causes os command injection. This vulnerability is tracke
CVE-2026-29144 | SEPPmail Secure Email Gateway up to 15.0.2 input validation
A vulnerability classified as critical was found in SEPPmail Secure Email Gateway up to 15.0.2. The affected element is an unknown function. Executing a manipulation can lead to improper input validation. The identification of this vulnerab
CVE-2026-29143 | SEPPmail Secure Email Gateway up to 15.0.2 SMIME Message improper authentication
A vulnerability classified as critical has been found in SEPPmail Secure Email Gateway up to 15.0.2. Impacted is an unknown function of the component SMIME Message Handler. Performing a manipulation results in improper authentication. This
CVE-2026-29142 | SEPPmail Secure Email Gateway up to 15.0.2 GINA Mail missing cryptographic step
A vulnerability described as problematic has been identified in SEPPmail Secure Email Gateway up to 15.0.2. This issue affects some unknown processing of the component GINA Mail Handler. Such manipulation leads to missing cryptographic step
CVE-2026-29141 | SEPPmail Secure Email Gateway up to 15.0.2 Subject input validation
A vulnerability labeled as problematic has been found in SEPPmail Secure Email Gateway up to 15.0.2. This affects an unknown part of the component Subject Handler. The manipulation results in improper input validation. This vulnerability is
CVE-2026-29140 | SEPPmail Secure Email Gateway up to 15.0.2 Certificate certificate validation
A vulnerability, which was classified as critical, was found in SEPPmail Secure Email Gateway up to 15.0.2. Impacted is an unknown function of the component Certificate Handler. Executing a manipulation can lead to improper certificate vali
CVE-2026-29139 | SEPPmail Secure Email Gateway up to 15.0.2 GINA Account authentication bypass
A vulnerability identified as critical has been detected in SEPPmail Secure Email Gateway up to 15.0.2. Affected by this issue is some unknown functionality of the component GINA Account Handler. The manipulation leads to authentication byp
CVE-2026-29138 | SEPPmail Secure Email Gateway up to 15.0.2 PGP Signature ldap injection
A vulnerability, which was classified as problematic, was found in SEPPmail Secure Email Gateway up to 15.0.2. This affects an unknown function of the component PGP Signature Handler. The manipulation results in ldap injection. This vulnera
CVE-2026-29137 | SEPPmail Secure Email Gateway up to 15.0.2 input validation
A vulnerability was found in SEPPmail Secure Email Gateway up to 15.0.2. It has been rated as problematic. Affected is an unknown function. Performing a manipulation results in improper input validation. This vulnerability is reported as CV
Volt Typhoon hides zero-day attacks using ‘Silent Train’ framework
Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. […] This article has been
PSN-Sicherheitslücke: Fremde Kinderkonten können zum Account-Verlust führen -
Ein maskierter Hacker in Kapuzenpullover sitzt am PC, daneben das PlayStation Network (PSN). Sony untersucht eine Sicherheitslücke im PlayStation ... Weiterlesen
CVE-2026-5325 | SourceCodester Simple Customer Relationship Management System 1.0 Create Ticket /create-ticket.php description cross site scripting
A vulnerability was found in SourceCodester Simple Customer Relationship Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /create-ticket.php of the component Create Ticket. This
CVE-2026-5244 | Cesanta Mongoose up to 7.20 TLS 1.3 mongoose.c mg_tls_recv_cert pubkey heap-based overflow
A vulnerability categorized as critical has been discovered in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv_cert of the file mongoose.c of the component TLS 1.3 Handler. Such manipulation of the argument pubkey leads t
CVE-2026-29136 | SEPPmail Secure Email Gateway up to 15.0.2 Notification cross site scripting
A vulnerability marked as problematic has been reported in SEPPmail Secure Email Gateway up to 15.0.2. This vulnerability affects unknown code of the component Notification Handler. This manipulation causes cross site scripting. This vulner
CVE-2026-29135 | SEPPmail Secure Email Gateway up to 15.0.2 password-tag input validation
A vulnerability was found in SEPPmail Secure Email Gateway up to 15.0.2. It has been declared as critical. This impacts an unknown function. Such manipulation of the argument password-tag leads to improper input validation. This vulnerabili
CVE-2026-29134 | SEPPmail Secure Email Gateway up to 15.0.2 GINA Webdomain Metadata reliance on untrusted inputs in a security decision
A vulnerability was found in SEPPmail Secure Email Gateway up to 15.0.2. It has been classified as critical. This affects an unknown function of the component GINA Webdomain Metadata Handler. This manipulation causes reliance on untrusted i
CVE-2026-29133 | SEPPmail Secure Email Gateway up to 15.0.2 PGP Key input validation
A vulnerability was found in SEPPmail Secure Email Gateway up to 15.0.2 and classified as problematic. The impacted element is an unknown function of the component PGP Key Handler. The manipulation results in improper input validation. This
CVE-2026-29132 | SEPPmail Secure Email Gateway up to 15.0.2 missing authentication
A vulnerability has been found in SEPPmail Secure Email Gateway up to 15.0.2 and classified as critical. The affected element is an unknown function. The manipulation leads to missing authentication. This vulnerability is listed as CVE-2026
CVE-2026-29131 | SEPPmail Secure Email Gateway up to 15.0.2 ldap injection
A vulnerability categorized as problematic has been discovered in SEPPmail Secure Email Gateway up to 15.0.2. Affected by this vulnerability is an unknown functionality of the component Email Handler. Executing a manipulation can lead to ld
CVE-2026-0634 | TECNO Pova7 Pro 5G 15.1.0 on Android AssistFeedbackService argument injection
A vulnerability, which was classified as critical, has been found in TECNO Pova7 Pro 5G 15.1.0 on Android. The impacted element is an unknown function of the component AssistFeedbackService. The manipulation leads to argument injection. Thi
ZDI-26-818: (0Day) Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious fil
ZDI-26-817: (0Day) Ultralytics parse_model Code Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious fil
ZDI-26-816: (0Day) Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious fil
ZDI-26-815: (0Day) Ultralytics parse_model Code Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious fil
ZDI-26-814: (0Day) Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious fil
ZDI-26-813: (0Day) Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious fil
ZDI-26-812: (0Day) Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious fil
ZDI-26-829: (0Day) (Pwn2Own) Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8.
ZDI-26-828: (0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. Th
ZDI-26-827: (0Day) (Pwn2Own) Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8.
ZDI-26-825: (0Day) (Pwn2Own) Alpine iLX-F511 diagapp Command Injection Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8.
ZDI-26-824: (0Day) (Pwn2Own) Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. Th
ZDI-26-822: (0Day) (Pwn2Own) Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8.
ZDI-26-821: (0Day) (Pwn2Own) Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Alpine iLX-F511 devices. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.
ZDI-26-820: (0Day) (Pwn2Own) Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Alpine iLX-F511. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerabil
ZDI-26-819: (0Day) (Pwn2Own) Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. Th
CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in
CVE-2026-116839 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the
CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in mis
CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PAS
CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .
CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash
CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place
CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.
llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor siz
CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF fil
CVE-2026-116816 | llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model loading, causing crashes or potential code execution.
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like whose nega
CVE-2025-71439 | llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-server to read past id_to_token and crash.
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short