Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 761 | 0,2 % |
| ≥50 % | 3.393 | 0,9 % |
| ≥10 % | 22.552 | 5,7 % |
| <10 % | 365.987 | 93,2 % |
Ubuntu Releases Security Fixes for Critical Linux Kernel Vulnerability Allowing Remote Code Execution
Ubuntu has published fixes for CVE-2026-98432, a critical Linux kernel flaw in IPv4 TCP connection handling. It carries a CVSS 3.1 score of 9.8 and can lead to remote code execution. The fixes for Ubuntu 22.04 LTS and newer are in the -prop
5-Year-Old Linux Kernel Vulnerability Allows Unprivileged Attackers to Gain Root Access
A Linux kernel flaw that sat unnoticed for nearly five years can let an unprivileged local user take full root control of a system. Tracked as CVE-2026-31695, the bug was found and fixed by researcher Alexander Popov. He has now published a
CVE-2026-95395 | Wireshark up to 4.4.18/4.6.8 Dissector memory leak (Nessus ID 362908 / WID-SEC-2026-3547)
A vulnerability classified as problematic has been found in Wireshark up to 4.4.18/4.6.8. The affected element is an unknown function of the component Dissector. The manipulation leads to memory leak. This vulnerability is listed as CVE-202
CVE-2026-95394 | Microsoft Network Monitor up to 4.4.18/4.6.8 File Parser infinite loop (Nessus ID 362908 / WID-SEC-2026-3547)
A vulnerability classified as problematic has been found in Microsoft Network Monitor up to 4.4.18/4.6.8. This vulnerability affects unknown code of the component File Parser. Performing a manipulation results in infinite loop. This vulnera
CVE-2026-95393 | Wireshark up to 4.4.18/4.6.8 Dissector denial of service (Nessus ID 362908 / WID-SEC-2026-3547)
A vulnerability described as problematic has been identified in Wireshark up to 4.4.18/4.6.8. Impacted is an unknown function of the component Dissector. Executing a manipulation can lead to denial of service. This vulnerability is tracked
CVE-2026-95392 | Wireshark up to 4.4.18/4.6.8 MBIM Protocol Dissector denial of service (Nessus ID 362908 / WID-SEC-2026-3547)
A vulnerability marked as problematic has been reported in Wireshark up to 4.4.18/4.6.8. This issue affects some unknown processing of the component MBIM Protocol Dissector. Performing a manipulation results in denial of service. This vulne
CVE-2026-95391 | Wireshark up to 4.6.8 ZigBee ZCL Protocol Dissector denial of service (WID-SEC-2026-3547)
A vulnerability labeled as problematic has been found in Wireshark up to 4.6.8. This vulnerability affects unknown code of the component ZigBee ZCL Protocol Dissector. Such manipulation leads to denial of service. This vulnerability is refe
CVE-2026-95390 | Wireshark up to 4.6.8 TRC file parser denial of service (WID-SEC-2026-3547)
A vulnerability identified as problematic has been detected in Wireshark up to 4.6.8. This affects an unknown part of the component TRC file parser. This manipulation causes denial of service. The identification of this vulnerability is CVE
CVE-2026-95389 | Wireshark up to 4.4.18/4.6.8 SCTP Dissector denial of service (Nessus ID 362908 / WID-SEC-2026-3547)
A vulnerability categorized as critical has been discovered in Wireshark up to 4.4.18/4.6.8. Affected by this issue is some unknown functionality of the component SCTP Dissector. The manipulation results in denial of service. This vulnerabi
CVE-2026-95388 | Wireshark up to 4.4.18/4.6.8 Sharkd denial of service (Nessus ID 362908 / WID-SEC-2026-3547)
A vulnerability was found in Wireshark up to 4.4.18/4.6.8. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component Sharkd. The manipulation leads to denial of service. This vulnerability
CVE-2026-95387 | Wireshark up to 4.4.18/4.6.8 Dissector denial of service (Nessus ID 362908 / WID-SEC-2026-3547)
A vulnerability was found in Wireshark up to 4.4.18/4.6.8. It has been declared as critical. Affected is an unknown function of the component Dissector. Executing a manipulation can lead to denial of service. This vulnerability is handled a
CVE-2026-95386 | Wireshark up to 4.6.8 TTL file infinite loop (WID-SEC-2026-3547)
A vulnerability was found in Wireshark up to 4.6.8. It has been classified as problematic. This impacts an unknown function of the component TTL file Handler. Performing a manipulation results in infinite loop. This vulnerability is known a
CVE-2026-118696 | JetBrains CLion Embedded Browser certificate validation (WID-SEC-2026-4279)
A vulnerability, which was classified as problematic, has been found in JetBrains CLion, DataGrip, DataSpell, GoLand, IntelliJ IDEA, PhpStorm, PyCharm, Rider, RubyMine, RustRover and WebStorm. Impacted is an unknown function of the componen
CVE-2026-108817 | agno-agi agno up to 3.0.9 CodingTools coding.py agno.CodingTools.run_shell command os command injection (Issue 10048 / EUVD-2026-97301)
A vulnerability identified as problematic has been detected in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the component CodingTools. This man
CVE-2026-59042 | Google Android MMU mmu.c __pkvm_pages_to_ppages out-of-bounds write (EUVD-2026-115443)
A vulnerability, which was classified as very critical, has been found in Google Android. This impacts the function __pkvm_pages_to_ppages of the file mmu.c of the component MMU. The manipulation leads to out-of-bounds write. This vulnerabi
CVE-2026-59043 | Google Android io-pgtable-arm io-pgtable-arm-common.c arm_lpae_split_blk_unmap race condition (EUVD-2026-115444)
A vulnerability categorized as very critical has been discovered in Google Android. This affects the function arm_lpae_split_blk_unmap of the file io-pgtable-arm-common.c of the component io-pgtable-arm. Executing a manipulation can lead to
CVE-2026-55262 | Google Android up to 17 Notification Manager NotificationManagerService.java input validation (EUVD-2026-115568)
A vulnerability labeled as very critical has been found in Google Android 14/15/16/16-qpr2/17. Impacted is the function setNotificationListenerAccessGrantedForUserInternal of the file NotificationManagerService.java of the component Notific
CVE-2026-112545 | Apple macOS up to 15.8.1/26.7.1/27.1 Path Validation privileges management (EUVD-2026-110375)
A vulnerability was found in Apple macOS up to 15.8.1/26.7.1/27.1. It has been declared as very critical. This affects an unknown function of the component Path Validation. Such manipulation leads to improper privilege management. This vuln
CVE-2026-112430 | Apple macOS 15.8.1/26.7.1/27.1 privileges management (EUVD-2026-110117)
A vulnerability marked as critical has been reported in Apple macOS 15.8.1/26.7.1/27.1. This impacts an unknown function. Performing a manipulation results in improper privilege management. This vulnerability was named CVE-2026-112430. The
CVE-2026-77799 | Zohocorp ManageEngine Key Manager Plus prior 7151 improper authentication (EUVD-2026-115674)
A vulnerability categorized as critical has been discovered in Zohocorp ManageEngine Key Manager Plus. The affected element is an unknown function. Such manipulation leads to improper authentication. This vulnerability is uniquely identifie
CVE-2026-77800 | ManageEngine Key Manager Plus up to 7150 assertion (EUVD-2026-115675)
A vulnerability was found in ManageEngine Key Manager Plus up to 7150. It has been rated as critical. Impacted is an unknown function. This manipulation causes reachable assertion. This vulnerability is handled as CVE-2026-77800. The attack
Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up
HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python and more. AI found it: OpenAI’s agents turned it up in late Septe
CVE-2022-48478 | Huawei HarmonyOS Facial Recognition TA buffer overflow (EUVD-2022-51174)
A vulnerability marked as critical has been reported in Huawei HarmonyOS. Affected is an unknown function of the component Facial Recognition TA. Performing a manipulation results in buffer overflow. This vulnerability is identified as CVE-
CVE-2022-48468 | protobuf-c up to 1.4.0 parse_required_member integer overflow (Issue 499 / EUVD-2022-51164)
A vulnerability, which was classified as problematic, was found in protobuf-c up to 1.4.0. Affected is the function parse_required_member. The manipulation results in integer overflow. This vulnerability is identified as CVE-2022-48468. The
CVE-2022-48437 | OpenBSD/LibreSSL x509/x509_verify.c x509_verify_ctx_add_chain certificate validation (EUVD-2022-51133)
A vulnerability classified as critical was found in OpenBSD and LibreSSL. Affected by this issue is the function x509_verify_ctx_add_chain of the file x509/x509_verify.c. The manipulation results in improper certificate validation. This vul
CVE-2022-48425 | Linux Kernel up to 6.2.7 Metadata fs/ntfs3/inode.c ntfs_read_mft MFT_REC_MFT use after free (EUVD-2022-51121 / Nessus ID 249857)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.2.7. This affects the function ntfs_read_mft of the file fs/ntfs3/inode.c of the component Metadata Handler. The manipulation of the argument MFT_REC_
CVE-2026-99218 | Linux Kernel up to 7.3.0 Coredump coredump_finish infinite loop (Nessus ID 375363)
A vulnerability marked as very critical has been reported in Linux Kernel up to 7.3.0. The impacted element is the function coredump_finish of the component Coredump. Performing a manipulation results in infinite loop. This vulnerability is
CVE-2026-99217 | Linux Kernel up to 6.12.114/6.18.59/7.2.13/7.3.0 fork copy_process deadlock (Nessus ID 375364)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.114/6.18.59/7.2.13/7.3.0. This affects the function copy_process of the component fork. The manipulation leads to deadlock. This vulnerability is t
CVE-2026-104063 | Scribus up to 1.6.6 Image Loader out-of-bounds (Nessus ID 375365)
A vulnerability described as critical has been identified in Scribus up to 1.6.6. This impacts an unknown function of the component Image Loader. Executing a manipulation can lead to out-of-bounds read. This vulnerability is handled as CVE-
CVE-2026-99229 | Linux Kernel up to 6.6.160/6.12.114/6.18.59/7.2.13 io_uring io_uring/wait.c io_cqring_wait_schedule infinite loop (Nessus ID 375366)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.160/6.12.114/6.18.59/7.2.13. Affected by this issue is the function io_cqring_wait_schedule of the file io_uring/wait.c of the component io_uring. Such m
Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors
A maximum-severity security flaw impacting Siemens SIMATIC IoT2050 Advanced devices has come under active exploitation, VulnCheck has revealed. The vulnerability, tracked as CVE-2026-58115 (CVSS score: 10.0), is a case of missing authentica
CVE-2026-81648: Ungepatchte WordPress-Lücke gefährdet Wallet-Zugriff bei „CryptoPayment Gateway“
LONDON / LONDON (IT BOLTWISE) – Angreifer versuchen offenbar, eine maximal kritische Sicherheitslücke im WordPress-Plugin „CryptoPayment Gateway“ auszunutzen. Laut CVE-2026-81648 (CVSS 10,0) könnten Unautorisierte ohne Login beliebige Datei
Angreifer missbrauchen Siemens SIMATIC IoT2050-Sicherheitslücke für Remote-Backdoors
LONDON (IT BOLTWISE) – Eine kritische Sicherheitslücke in Siemens SIMATIC IoT2050 Advanced wird nach Angaben von Vulnerability-Analysten bereits aktiv ausgenutzt. Der Fehler betrifft eine fehlende Authentifizierung in der Node-RED-HTTP-Schn
CVE-2021-2351 | Oracle Real User Experience Insight 13.4.1.0/13.5.1.0 JDBC risky encryption
A vulnerability was found in Oracle Real User Experience Insight 13.5.1.0/13.4.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component JDBC. Performing a manipulation results in risky crypto
CVE-2026-98364 | Linux Kernel xfrm net/ipv6/xfrm6_policy.c xfrm6_fill_dst use after free (Nessus ID 375175)
A vulnerability was found in Linux Kernel and classified as very critical. This issue affects the function xfrm6_fill_dst of the file net/ipv6/xfrm6_policy.c of the component xfrm. The manipulation results in use after free. This vulnerabil
CVE-2026-17183 | Grafana up to 13.1.1 Unified Alerting authorization (Nessus ID 375182)
A vulnerability was found in Grafana up to 13.1.1. It has been classified as critical. Affected by this issue is some unknown functionality of the component Unified Alerting. The manipulation leads to incorrect authorization. This vulnerabi
CVE-2026-119627 | Gitea up to 28.2.x Web Profile And RSS/Atom Feed Routes access control (WID-SEC-2026-4281)
A vulnerability identified as problematic has been detected in Gitea up to 28.2.x. Affected by this vulnerability is an unknown functionality of the component Web Profile And RSS/Atom Feed Routes. Performing a manipulation results in improp
CVE-2026-119625 | Gitea up to 28.2.x Feed privileges management (WID-SEC-2026-4281)
A vulnerability categorized as problematic has been discovered in Gitea up to 28.2.x. This affects an unknown part of the component Feed. Executing a manipulation can lead to improper privilege management. This vulnerability is registered a
CVE-2026-118697 | JetBrains IntelliJ IDEA/Toolbox App certificate validation (WID-SEC-2026-4280)
A vulnerability labeled as problematic has been found in JetBrains IntelliJ IDEA and Toolbox App. This vulnerability affects unknown code. Such manipulation leads to improper certificate validation. This vulnerability is listed as CVE-2026-
CVE-2026-119533 | Gitea up to 28.2.x Project Boards information disclosure (WID-SEC-2026-4281)
A vulnerability classified as problematic has been found in Gitea up to 28.2.x. The impacted element is an unknown function of the component Project Boards. Performing a manipulation results in information disclosure. This vulnerability is
CVE-2026-119441 | Gitea up to 28.2.x Routes access control (WID-SEC-2026-4281)
A vulnerability was found in Gitea up to 28.2.x. It has been classified as problematic. Affected is an unknown function of the component Routes. This manipulation causes improper access controls. This vulnerability is tracked as CVE-2026-11
CVE-2026-118504 | Gitea up to 28.2.x REST API privileges management (WID-SEC-2026-4281)
A vulnerability classified as problematic was found in Gitea up to 28.2.x. This affects an unknown function of the component REST API. Executing a manipulation can lead to improper privilege management. This vulnerability is handled as CVE-
CVE-2026-118395 | Gitea up to 28.2.x authorization (WID-SEC-2026-4281)
A vulnerability was found in Gitea up to 28.2.x. It has been rated as problematic. Affected by this issue is some unknown functionality. Performing a manipulation results in missing authorization. This vulnerability is cataloged as CVE-2026
CVE-2022-48424 | Linux Kernel up to 6.1.2 Attribute Name fs/ntfs3/inode.c attr out-of-bounds write (EUVD-2022-51120 / Nessus ID 248401)
A vulnerability classified as critical was found in Linux Kernel up to 6.1.2. The impacted element is an unknown function of the file fs/ntfs3/inode.c of the component Attribute Name Handler. Executing a manipulation of the argument attr ca
CVE-2017-2601 | Jenkins up to 2.32.1/2.43 names/descriptions cross site scripting (EUVD-2022-5111 / Nessus ID 96939)
A vulnerability classified as problematic has been found in Jenkins up to 2.32.1/2.43. This vulnerability affects unknown code. This manipulation of the argument names/descriptions as part of Parameter causes cross site scripting. This vuln
CVE-2022-48423 | Linux Kernel up to 6.1.2 Attribute Name fs/ntfs3/record.c mi_enum_attr out-of-bounds write (EUVD-2022-51119)
A vulnerability classified as critical has been found in Linux Kernel up to 6.1.2. The affected element is the function mi_enum_attr of the file fs/ntfs3/record.c of the component Attribute Name Handler. Performing a manipulation of the arg
CVE-2026-107024 | Archive Share 2 Archive Today Clipboard url permission (EUVD-2026-113179)
A vulnerability was found in Archive Share 2 Archive Today. It has been rated as problematic. Impacted is an unknown function of the component Clipboard. The manipulation of the argument url leads to permission issues. This vulnerability is
CVE-2026-120830 | Red Hat Enterprise Linux ICMP icmp_forward_error out-of-bounds (EUVD-2026-115651)
A vulnerability described as problematic has been identified in Red Hat Enterprise Linux, libslirp and OpenShift Container Platform. This issue affects the function icmp_forward_error of the component ICMP. Such manipulation leads to out-of
CVE-2026-107029 | rubenalfon Pile 1.1.3 permission (EUVD-2026-113183)
A vulnerability categorized as critical has been discovered in rubenalfon Pile 1.1.3. This issue affects some unknown processing. The manipulation results in permission issues. This vulnerability is known as CVE-2026-107029. It is possible
CVE-2026-107035 | Basov MBasov 3400 Page object/Page.java permission (EUVD-2026-113171)
A vulnerability was found in Basov MBasov 3400. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file object/Page.java of the component Page. Executing a manipulation can lead to permiss
CVE-2026-105770 | octo-sts Octo STS up to 0.11.1 TrustPolicy TrustPolicy.CheckToken information disclosure (EUVD-2026-115653)
A vulnerability classified as problematic was found in octo-sts Octo STS up to 0.11.1. The affected element is the function TrustPolicy.CheckToken of the component TrustPolicy. Executing a manipulation can lead to information disclosure. Th
CVE-2026-107441 | Zyxel GS1900 Series Switches up to 2.90(AAHK.2)C0 CGI out-of-bounds write (EUVD-2026-115654)
A vulnerability, which was classified as very critical, has been found in Zyxel GS1900 Series Switches up to 2.90(AAHK.2)C0. The impacted element is an unknown function of the component CGI. The manipulation leads to out-of-bounds write. Th
CVE-2026-111464 | emrevona WP Fastest Cache Plugin up to 1.5.3 on WordPress Caching wp-activate.php missing encryption (EUVD-2026-115657)
A vulnerability was found in emrevona WP Fastest Cache Plugin up to 1.5.3 on WordPress and classified as problematic. Affected is an unknown function of the file wp-activate.php of the component Caching. Such manipulation leads to missing e
CVE-2021-21353 | pug up to 2.0.2/3.0.0 on npm Template injection
A vulnerability labeled as problematic has been found in pug up to 2.0.2/3.0.0 on npm. Affected by this issue is some unknown functionality of the component Template Handler. Such manipulation leads to injection. This vulnerability is refer
CVE-2020-8231 | libcURL up to 7.71.1 Connection use after free (Nessus ID 236591)
A vulnerability was found in libcURL up to 7.71.1. It has been declared as critical. This issue affects some unknown processing of the component Connection Handler. Such manipulation leads to use after free. This vulnerability is traded as
CVE-2020-8169 | curl up to 7.70.0 DNS Server information disclosure
A vulnerability was found in curl up to 7.70.0 and classified as problematic. This affects an unknown part of the component DNS Server Handler. The manipulation results in information disclosure. This vulnerability is reported as CVE-2020-8
CVE-2026-109969 | Red Hat Enterprise Linux/OpenShift Container Platform afunix-socket-unlock permission (EUVD-2026-100954)
A vulnerability was found in Red Hat Enterprise Linux and OpenShift Container Platform. It has been rated as problematic. Affected by this issue is some unknown functionality of the component afunix-socket-unlock. The manipulation leads to
CVE-2026-76955 | Zyxel NWA110AX up to 7.12(ABTG.0)C0 buffer overflow (EUVD-2026-115655)
A vulnerability has been found in Zyxel NWA110AX up to 7.12(ABTG.0)C0 and classified as very critical. This impacts an unknown function. This manipulation causes buffer overflow. This vulnerability appears as CVE-2026-76955. The attack may
CVE-2026-120831 | Red Hat Enterprise Linux/OpenShift Container Platform libslirp if_output denial of service (EUVD-2026-115656)
A vulnerability, which was classified as critical, was found in Red Hat Enterprise Linux and OpenShift Container Platform. This affects the function if_output of the component libslirp. The manipulation results in denial of service. This vu
CVE-2026-102276 | juliangruber brace-expansion up to 1.1.18/2.1.4/3.0.6/5.0.9 Comma Parts parseCommaParts denial of service (Nessus ID 375193)
A vulnerability, which was classified as problematic, was found in juliangruber brace-expansion up to 1.1.18/2.1.4/3.0.6/5.0.9. Impacted is the function parseCommaParts of the component Comma Parts. Executing a manipulation can lead to deni