Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 720 | 0,2 % |
| ≥50 % | 3.224 | 0,9 % |
| ≥10 % | 22.096 | 6,0 % |
| <10 % | 345.215 | 93,0 % |
Google Warns China-Linked Hackers Exploited BeyondTrust Zero-Day
Google says China-linked hackers exploited a critical BeyondTrust zero-day. See affected versions, patch guidance, and what defenders should check now. This article has been indexed from eSecurityPlanet Read the original article: Google War
CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability
IntroductionOn September 27, 2026, Citrix disclosed CVE-2026-88771, a critical remote code execution (RCE) vulnerability affecting NetScaler Application Delivery Controller (ADC) and NetScaler Gateway. The vulnerability carries a CVSS v3.1
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group. This article has been indexed from darkreading Read the original article: BeyondTrust Remote Support Z
CVE-2026-89649 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 Ceph __build_xattrs val_len out-of-bounds (EUVD-2026-76561)
A vulnerability has been found in Linux Kernel up to 6.12.108/6.18.49/7.2.3 and classified as problematic. Affected by this vulnerability is the function __build_xattrs of the component Ceph. The manipulation of the argument val_len leads t
CVE-2026-89652 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 Ceph NFS Export ceph_get_name/__get_snap_name dname_len out-of-bounds write (EUVD-2026-76564)
A vulnerability identified as very critical has been detected in Linux Kernel up to 6.12.108/6.18.49/7.2.3. Affected by this vulnerability is the function ceph_get_name/__get_snap_name of the component Ceph NFS Export. This manipulation of
CVE-2026-89650 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 CephFS Client fs/ceph/mdsmap.c ceph_mdsmap_decode num_export_targets out-of-bounds (EUVD-2026-76562)
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. The affected element is the function ceph_mdsmap_decode of the file fs/ceph/mdsmap.c of the component CephFS Client. Executing a manipulatio
CVE-2026-89653 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 ceph check_new_map stack-based overflow (EUVD-2026-76565)
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. Affected by this issue is the function check_new_map of the component ceph. Such manipulation leads to stack-based buffer overflow. This vul
CVE-2026-89655 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 ceph __kick_flushing_caps use after free (EUVD-2026-76567)
A vulnerability marked as very critical has been reported in Linux Kernel up to 6.12.108/6.18.49/7.2.3. This affects the function __kick_flushing_caps of the component ceph. Performing a manipulation results in use after free. This vulnerab
CVE-2026-89654 | Linux Kernel up to 7.2.3 Ceph md.c check_new_map s use after free (EUVD-2026-76566)
A vulnerability labeled as very critical has been found in Linux Kernel up to 7.2.3. This vulnerability affects the function check_new_map of the file md.c of the component Ceph. Such manipulation of the argument s leads to use after free.
CVE-2026-89656 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 libceph bucket_perm_choose out-of-bounds write (EUVD-2026-76568)
A vulnerability described as very critical has been identified in Linux Kernel up to 6.12.108/6.18.49/7.2.3. This affects the function bucket_perm_choose of the component libceph. The manipulation results in out-of-bounds write. This vulner
BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group. Weiterlesen
CVE-2026-89659 | Linux Kernel up to 6.18.50/7.2.3 NFSD nfs4_laundromat use after free (EUVD-2026-76571)
A vulnerability classified as very critical has been found in Linux Kernel up to 6.18.50/7.2.3. This issue affects the function nfs4_laundromat of the component NFSD. The manipulation leads to use after free. This vulnerability is traded as
CVE-2026-89662 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 NFSD __destroy_client use after free (EUVD-2026-76574)
A vulnerability classified as very critical was found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. Impacted is the function __destroy_client of the component NFSD. The manipulation results in use after free. This vulnerability is known as
CVE-2026-89675 | Linux Kernel up to 6.18.50/7.2.3 NFSd Async Copy nfsd4_do_async_copy refcount/nf_src/nf_dst/copy_task use after free (EUVD-2026-76587 / Nessus ID 364483)
A vulnerability has been found in Linux Kernel up to 6.18.50/7.2.3 and classified as very critical. This affects the function nfsd4_do_async_copy of the component NFSd Async Copy. Performing a manipulation of the argument refcount/nf_src/nf
CVE-2026-89672 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 NFSACL nfsacld_proc_setacl mask input validation (EUVD-2026-76584)
A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. The affected element is the function nfsacld_proc_setacl of the component NFSACL. The manipulation of the argument mask leads to improp
CVE-2026-89676 | Linux Kernel up to 6.18.49/7.2.3 nfsd nfsd4_copy use after free (EUVD-2026-76588 / Nessus ID 364483)
A vulnerability was found in Linux Kernel up to 6.18.49/7.2.3 and classified as very critical. This impacts the function nfsd4_copy of the component nfsd. Executing a manipulation can lead to use after free. The identification of this vulne
PwnEscape (CVE-2026-99999): Patched kernels available in testing
A new Linux kernel vulnerability, nicknamed PwnEscape (CVE-2026-99999), has been disclosed. It is a guest-to-host virtual machine (VM) escape: anyone who controls a guest VM can send specially crafted network packets that leak the host’s ke
CVE-2026-89685 | Linux Kernel up to 6.18.50/7.2.3 nfsd clients_still_reclaiming comparison (EUVD-2026-76597)
A vulnerability was found in Linux Kernel up to 6.18.50/7.2.3. It has been rated as critical. The affected element is the function clients_still_reclaiming of the component nfsd. Performing a manipulation results in incorrect comparison. Th
CVE-2026-89699 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 nfsd nfsd4_decode_create cr_datalen out-of-bounds write (EUVD-2026-76611)
A vulnerability was found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. It has been rated as critical. Affected by this issue is the function nfsd4_decode_create of the component nfsd. This manipulation of the argument cr_datalen causes out
CVE-2026-89697 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 nfsd nfsd_proc_setattr authorization (EUVD-2026-76609)
A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. The impacted element is the function nfsd_proc_setattr of the component nfsd. This manipulation causes missing authorization. This vuln
CVE-2026-89686 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 nfsd nfsd4_alloc_layout_stateid locking (EUVD-2026-76598)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.108/6.18.49/7.2.3. This affects the function nfsd4_alloc_layout_stateid of the component nfsd. This manipulation causes improper locking. The ident
Critical BlockStrap flaw lets hackers run code on Magento servers
Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. [...] Weiterlesen
CVE-2022-46740 | Huawei WS7100-20 Wi-Fi denial of service (EUVD-2022-49526)
A vulnerability categorized as problematic has been discovered in Huawei WS7100-20. This affects an unknown function of the component Wi-Fi Module. Executing a manipulation can lead to denial of service. The identification of this vulnerabi
CVE-2022-46723 | Apache macOS privilege escalation (EUVD-2022-49512)
A vulnerability labeled as critical has been found in Apache macOS. Affected is an unknown function. Such manipulation leads to privilege escalation. This vulnerability is traded as CVE-2022-46723. The attack may be launched remotely. There
CVE-2022-46720 | Apple iOS/iPadOS up to 16.1.x integer overflow (HT213530 / EUVD-2022-49509)
A vulnerability classified as problematic was found in Apple iOS and iPadOS up to 16.1.x. This issue affects some unknown processing. Executing a manipulation can lead to integer overflow. This vulnerability appears as CVE-2022-46720. The a
CVE-2022-46718 | Apple macOS information disclosure (EUVD-2022-49507)
A vulnerability was found in Apple macOS. It has been rated as problematic. This vulnerability affects unknown code. Performing a manipulation results in information disclosure. This vulnerability was named CVE-2022-46718. The attack needs
CVE-2022-46717 | Apple iOS/iPadOS up to 16.1 Accessibility Features information disclosure (EUVD-2022-49506)
A vulnerability marked as problematic has been reported in Apple iOS and iPadOS up to 16.1. Affected is an unknown function of the component Accessibility Features. Performing a manipulation results in information disclosure. This vulnerabi
CVE-2022-46716 | Apple macOS Private Relay state issue (EUVD-2022-49505)
A vulnerability labeled as problematic has been found in Apple macOS. This issue affects some unknown processing of the component Private Relay Handler. The manipulation results in state issue. This vulnerability was named CVE-2022-46716. T
CVE-2022-46715 | Apple iOS/iPadOS Privacy Preferences access control (EUVD-2022-49504)
A vulnerability labeled as critical has been found in Apple iOS and iPadOS. The affected element is an unknown function of the component Privacy Preferences. The manipulation results in improper access controls. This vulnerability is identi
CVE-2022-46713 | Apple macOS File System race condition (EUVD-2022-49502)
A vulnerability was found in Apple macOS. It has been classified as problematic. Impacted is an unknown function of the component File System Handler. Performing a manipulation results in race condition. This vulnerability is cataloged as C
CVE-2022-46712 | Apple macOS up to 12.7.6 App use after free (HT213488 / EUVD-2022-49501)
A vulnerability, which was classified as critical, was found in Apple macOS. This affects an unknown part of the component App Handler. The manipulation results in use after free. This vulnerability is identified as CVE-2022-46712. The atta
CVE-2022-46709 | Apple iOS 15.x Kernel memory corruption (EUVD-2022-49498)
A vulnerability was found in Apple iOS 15.x. It has been declared as critical. The affected element is an unknown function of the component Kernel. The manipulation results in memory corruption. This vulnerability is reported as CVE-2022-46
CVE-2022-46704 | Apple macOS App state issue (EUVD-2022-49493)
A vulnerability was found in Apple macOS and classified as problematic. This issue affects some unknown processing of the component App Handler. Such manipulation leads to state issue. This vulnerability is listed as CVE-2022-46704. The att
CVE-2022-46703 | Apple iOS/iPadOS Location information disclosure (EUVD-2022-49492)
A vulnerability classified as problematic has been found in Apple iOS and iPadOS. The impacted element is an unknown function of the component Location Handler. Performing a manipulation results in information disclosure. This vulnerability
Cisco Urges Customers to Patch Email Gateway Flaw and Check for Compromise
Attackers exploit a critical Cisco email gateway flaw to gain root access. Cisco urges customers to update scanner tools and check for compromise. Cisco confirmed this week that threat actors are exploiting a critical vulnerability in Cisco
CVE-2026-85831 | Microsoft Windows up to Server 2025 Windows Biometric Service buffer overflow (EUVD-2026-99540)
A vulnerability was found in Microsoft Windows up to Server 2025. It has been classified as problematic. This vulnerability affects unknown code of the component Windows Biometric Service. Performing a manipulation results in buffer overflo
CVE-2026-85830 | Microsoft Windows up to Server 2025 Installer out-of-bounds (EUVD-2026-99539)
A vulnerability was found in Microsoft Windows and classified as problematic. This affects an unknown part of the component Installer. Such manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2026-85830. An attack
CVE-2026-85833 | Microsoft Windows up to Server 2025 Modern Device Management use after free (EUVD-2026-99542)
A vulnerability was found in Microsoft Windows. It has been classified as very critical. The affected element is an unknown function of the component Modern Device Management. The manipulation leads to use after free. This vulnerability is
CVE-2026-85832 | Microsoft Windows up to Server 2025 Background Intelligent Transfer Service buffer overflow (EUVD-2026-99541)
A vulnerability has been found in Microsoft Windows and classified as very critical. This issue affects some unknown processing of the component Background Intelligent Transfer Service. Performing a manipulation results in buffer overflow.
CVE-2026-85834 | Microsoft Windows up to Server 2025 TCP IP heap-based overflow (EUVD-2026-99543)
A vulnerability categorized as very critical has been discovered in Microsoft Windows. This impacts an unknown function of the component TCP IP. Such manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identifie
CVE-2026-85835 | Microsoft Windows up to Server 2025 Servicing Stack out-of-bounds (EUVD-2026-99544)
A vulnerability was found in Microsoft Windows 11 24H2/11 25H2/11 26H1/11 26H2/Server 2025. It has been rated as problematic. Impacted is an unknown function of the component Servicing Stack. The manipulation leads to out-of-bounds read. Th
CVE-2026-85836 | Microsoft Windows up to Server 2025 Kernel use after free (EUVD-2026-99545)
A vulnerability was found in Microsoft Windows 11 24H2/11 25H2/11 26H1/11 26H2/Server 2025. It has been declared as very critical. This issue affects some unknown processing of the component Kernel. Executing a manipulation can lead to use
CVE-2026-85837 | Microsoft Windows up to Server 2025 out-of-bounds (EUVD-2026-99546)
A vulnerability categorized as very critical has been discovered in Microsoft Windows 11 24H2/11 25H2/11 26H1/11 26H2/Server 2025. The affected element is an unknown function. The manipulation results in out-of-bounds read. This vulnerabili
CVE-2026-85842 | Microsoft Windows up to Server 2025 Windows Image Acquisition format string (EUVD-2026-99548)
A vulnerability was found in Microsoft Windows up to Server 2025. It has been declared as very critical. The impacted element is an unknown function of the component Windows Image Acquisition. The manipulation results in format string. This
CVE-2026-85840 | Microsoft Windows up to Server 2025 Event Viewer information disclosure (EUVD-2026-99547)
A vulnerability, which was classified as problematic, was found in Microsoft Windows. Affected by this vulnerability is an unknown functionality of the component Event Viewer. The manipulation results in information disclosure. This vulnera
CVE-2026-85843 | Microsoft Windows up to Server 2025 Background Intelligent Transfer Service uninitialized resource (EUVD-2026-99549)
A vulnerability labeled as very critical has been found in Microsoft Windows. This affects an unknown function of the component Background Intelligent Transfer Service. Such manipulation leads to uninitialized resource. This vulnerability i
CVE-2022-46702 | Apple iOS/iPadOS up to 16.1.2 GPU Drivers memory corruption (HT213530 / EUVD-2022-49491)
A vulnerability identified as problematic has been detected in Apple iOS and iPadOS up to 16.1.2. Affected is an unknown function of the component GPU Drivers. This manipulation causes memory corruption. This vulnerability is registered as
CVE-2022-46701 | Apple iOS/iPadOS up to 16.1.2 Kernel memory corruption (HT213530 / EUVD-2022-49490)
A vulnerability was found in Apple iOS and iPadOS up to 16.1.2 and classified as critical. This affects an unknown function of the component Kernel. Executing a manipulation can lead to memory corruption. The identification of this vulnerab
CVE-2026-102764 | BeyondTrust Remote Support up to 26.2.3 data authenticity (WID-SEC-2026-4001)
A vulnerability marked as very critical has been reported in BeyondTrust Remote Support up to 26.2.3. Affected by this vulnerability is an unknown functionality. The manipulation leads to insufficient verification of data authenticity. This
CVE-2026-9703 | Grafana Data Source Proxy /loki/api/v1/rules access control (WID-SEC-2026-4002)
A vulnerability was found in Grafana. It has been declared as problematic. Affected is an unknown function of the file /loki/api/v1/rules of the component Data Source Proxy. Such manipulation leads to improper access controls. This vulnerab
CVE-2026-95155 | FasterXML Jackson up to 1.9.13 ObjectMapper.readValue denial of service (WID-SEC-2026-4003)
A vulnerability classified as problematic has been found in FasterXML Jackson 1.8.3/1.9.2/1.9.11/1.9.12/1.9.13. Affected by this issue is the function ObjectMapper.readValue. This manipulation causes denial of service. This vulnerability is
CVE-2026-96806 | Apache Airflow Keycloak Provider up to 0.11.0 KeycloakJWTMiddleware session expiration (WID-SEC-2026-4005)
A vulnerability, which was classified as critical, was found in Apache Airflow Keycloak Provider up to 0.11.0. This issue affects some unknown processing of the component KeycloakJWTMiddleware. The manipulation results in session expiration
CVE-2026-94135 | Apache Airflow SFTP Provider up to 6.x Deferrable Code Paths no_host_key_check certificate validation (WID-SEC-2026-4005)
A vulnerability marked as problematic has been reported in Apache Airflow SFTP Provider up to 6.x. Affected is an unknown function of the component Deferrable Code Paths. This manipulation of the argument no_host_key_check causes improper c
CVE-2026-94134 | Apache Airflow SSH Provider/Airflow SFTP Provider up to 6.x SSH Hook/SFTP Hook host_key/no_host_key_check certificate validation (WID-SEC-2026-4005)
A vulnerability classified as problematic has been found in Apache Airflow SSH Provider and Airflow SFTP Provider up to 6.x. Affected by this issue is some unknown functionality of the component SSH Hook/SFTP Hook. Performing a manipulation
CVE-2026-92228 | Apache Airflow Keycloak Provider up to 0.11.0 Multi-Team Provisioning _attach_team_permissions privileges management (WID-SEC-2026-4005)
A vulnerability described as problematic has been identified in Apache Airflow Keycloak Provider up to 0.11.0. Affected by this vulnerability is the function _attach_team_permissions of the component Multi-Team Provisioning. Such manipulati
CVE-2026-91858 | Apache Camel Camel-FOP xml external entity reference (WID-SEC-2026-4006)
A vulnerability described as critical has been identified in Apache Camel. Affected is an unknown function of the component Camel-FOP. Such manipulation leads to xml external entity reference. This vulnerability is traded as CVE-2026-91858.
CVE-2026-59970 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF checks when an authenticated user creates a Space, configures an AI provider with a URL targeting an internal address, and invokes an AI action. In cookbook/views/api.py, the affected AI actions call completion through TAR
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to LiteLLM without applying the server's outbound-request SSRF
CVE-2026-61726 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks instead of the private-recipe owner or sharing predicate when an authenticated user with read and write API scope in the victim's Space supplies a private recipe or step identifier to the Step API. Request processing uses StepViewSet, Ingredien
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space and use role-level CustomIsUser checks instead of the privat
CVE-2026-59966 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, executes user-controlled Automation regular-expression patterns with Python re.sub() without complexity validation or an execution timeout when an authenticated user stores a catastrophic-backtracking regex and any user in the same Space imports a matching recipe. Request processing uses Automation.param_2, apply_regex_replace_automation, sub,
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, executes user-controlled Automation regular-expression patterns with Python re.sub() without complexity validation or an e
CVE-2026-59963 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permission when an authenticated member of a shared Space supplies another member's private recipe identifier to AI import, file, external-link, or share-link endpoints. Request processing uses api/ai-import/, api/get_recipe_file/,
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects without invoking the private-recipe owner or sharing permissio