Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 725 | 0,2 % |
| ≥50 % | 3.224 | 0,9 % |
| ≥10 % | 22.086 | 5,9 % |
| <10 % | 346.895 | 93,0 % |
CVE-2026-109618 and CVE-2026-109619: PHP Vulnerable to Unauthenticated RCE Attacks
IntroductionOn October 21, 2026, two critical remote code execution (RCE) vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively referred to as “PHP2Shell,” were publicly disclosed. Both vulnerabilities carry a CVSS v4.0 score o
CVE-2025-68319 | Linux Kernel up to 6.17.7 netconsole update_userdata state issue (Nessus ID 298897 / WID-SEC-2025-2868)
A vulnerability has been found in Linux Kernel up to 6.17.7 and classified as critical. Affected by this issue is the function update_userdata of the component netconsole. Performing a manipulation results in state issue. This vulnerability
CVE-2025-68318 | Linux Kernel up to 6.17.7 clk privilege escalation (Nessus ID 298897 / WID-SEC-2025-2868)
A vulnerability was found in Linux Kernel up to 6.17.7. It has been declared as critical. The impacted element is an unknown function of the component clk. Such manipulation leads to privilege escalation. This vulnerability is referenced as
CVE-2025-68311 | Linux Kernel up to 6.12.57/6.17.7 tty uart_port privilege escalation (Nessus ID 298897 / WID-SEC-2025-2868)
A vulnerability classified as critical was found in Linux Kernel up to 6.12.57/6.17.7. This impacts the function uart_port of the component tty. The manipulation results in privilege escalation. This vulnerability is known as CVE-2025-68311
CVE-2025-68251 | Linux Kernel up to 6.17.5 z_erofs_load_lcluster_from_disk infinite loop (EUVD-2025-203645 / Nessus ID 298897)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.17.5. Affected is the function z_erofs_load_lcluster_from_disk. Executing a manipulation can lead to infinite loop. This vulnerability appears as CVE-2025-68251. The
CVE-2025-68236 | Linux Kernel up to 6.17.9 scsi Power_Condition initialization (Nessus ID 302766 / WID-SEC-2025-2868)
A vulnerability was found in Linux Kernel up to 6.17.9. It has been declared as critical. This affects the function Power_Condition of the component scsi. Such manipulation leads to improper initialization. This vulnerability is traded as C
CVE-2025-68230 | Linux Kernel up to 6.12.59/6.17.9 amdgpu gfx_v9_4_3_switch_compute_partition memory corruption (Nessus ID 302766 / WID-SEC-2025-2868)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.12.59/6.17.9. This vulnerability affects the function gfx_v9_4_3_switch_compute_partition of the component amdgpu. This manipulation causes memory corruption. This
CVE-2025-68209 | Linux Kernel up to 6.17.8 mlx5_add_cq_to_tasklet initialization (Nessus ID 296481 / WID-SEC-2025-2868)
A vulnerability was found in Linux Kernel up to 6.17.8. It has been classified as critical. This issue affects the function mlx5_add_cq_to_tasklet. Performing a manipulation results in improper initialization. This vulnerability is reported
CVE-2025-68201 | Linux Kernel up to 6.12.58/6.17.8 amdgpu privilege escalation (Nessus ID 298897 / WID-SEC-2025-2868)
A vulnerability was found in Linux Kernel up to 6.12.58/6.17.8 and classified as critical. Affected by this issue is some unknown functionality of the component amdgpu. Such manipulation leads to privilege escalation. This vulnerability is
CVE-2025-68193 | Linux Kernel up to 6.17.7 guc xe_guc_ct_init use after free (Nessus ID 298897 / WID-SEC-2025-2868)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.17.7. The impacted element is the function xe_guc_ct_init of the component guc. This manipulation causes use after free. The identification of this vulnerability i
CVE-2025-68188 | Linux Kernel up to 6.12.57/6.17.7 tcp dst_dev_rcu use after free (Nessus ID 298924 / WID-SEC-2025-2868)
A vulnerability classified as critical has been found in Linux Kernel up to 6.12.57/6.17.7. The affected element is the function dst_dev_rcu of the component tcp. This manipulation causes use after free. This vulnerability is tracked as CVE
CVE-2025-49300 | shinetheme Traveler Option Tree Plugin up to 2.8 on WordPress insertion of sensitive information into sent data
A vulnerability has been found in shinetheme Traveler Option Tree Plugin up to 2.8 on WordPress and classified as problematic. This affects an unknown function. This manipulation causes insertion of sensitive information into sent data. The
WebLogic on the internet: the T3 problem that a port count will not solve
WebLogic on the internet: the T3 problem that a port count will not solve Oracle's October 2026 Critical Patch Update contains six vulnerabilities scored 10.0 and several more at 9.8 in WebLogic Server Core: CVE-2026-83399 reachable ov
CVE-2022-47616 | Hitron CODA-5310 Connection Test os command injection (EUVD-2022-50376)
A vulnerability identified as critical has been detected in Hitron CODA-5310. This impacts an unknown function of the component Connection Test Handler. Performing a manipulation results in os command injection. This vulnerability is report
CVE-2022-47583 | Mintty up to 3.6.2 Terminal Character injection (EUVD-2022-50343)
A vulnerability classified as problematic has been found in Mintty up to 3.6.2. This impacts an unknown function of the component Terminal Character Handler. Performing a manipulation results in injection. This vulnerability is known as CVE
CVE-2022-47581 | Isode M-Vault up to 17.0v23 LDAP v1 Bind Request denial of service (EUVD-2022-50341)
A vulnerability identified as problematic has been detected in Isode M-Vault up to 17.0v23. Affected by this vulnerability is an unknown functionality of the component LDAP v1 Bind Request Handler. The manipulation leads to denial of servic
CVE-2025-40355 | Linux Kernel up to 6.17.5 sysfs net/core/dev.c __dev_change_net_namespace privilege escalation (Nessus ID 298236 / WID-SEC-2025-2868)
A vulnerability was found in Linux Kernel up to 6.17.5 and classified as critical. This affects the function __dev_change_net_namespace of the file net/core/dev.c of the component sysfs. Executing a manipulation can lead to privilege escala
CVE-2025-40289 | Linux Kernel up to 6.12.58/6.17.8 amdgpu denial of service (EUVD-2025-201566 / Nessus ID 277637)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.58/6.17.8. Affected by this issue is some unknown functionality of the component amdgpu. The manipulation leads to denial of service. This vulnerab
CVE-2025-40213 | Linux Kernel up to 6.17.7/6.18-rc3 Bluetooth set_mesh_complete out-of-bounds (Nessus ID 276662 / WID-SEC-2025-2672)
A vulnerability was found in Linux Kernel up to 6.17.7/6.18-rc3 and classified as critical. Affected by this issue is the function set_mesh_complete of the component Bluetooth. Executing a manipulation can lead to out-of-bounds read. This v
CVE-2025-40180 | Linux Kernel up to 6.12.53/6.17.3 mailbox array index (Nessus ID 298897 / WID-SEC-2025-2595)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.12.53/6.17.3. This vulnerability affects unknown code of the component mailbox. Such manipulation leads to improper validation of array index. This vulnerability is
CVE-2025-40170 | Linux Kernel up to 6.17.2 net dst_dev_rcu privilege escalation (Nessus ID 296481 / WID-SEC-2025-2579)
A vulnerability described as critical has been identified in Linux Kernel up to 6.17.2. Affected by this vulnerability is the function dst_dev_rcu of the component net. Executing a manipulation can lead to privilege escalation. The identifi
CVE-2025-40158 | Linux Kernel up to 6.17.2 ipv6 ip6_output use after free (Nessus ID 279677 / WID-SEC-2025-2579)
A vulnerability was found in Linux Kernel up to 6.17.2. It has been rated as critical. This issue affects the function ip6_output of the component ipv6. The manipulation leads to use after free. This vulnerability is documented as CVE-2025-
CVE-2025-40136 | Linux Kernel up to 6.17.2 allocation of resources (Nessus ID 275230 / WID-SEC-2025-2579)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.17.2. This affects an unknown part. Such manipulation leads to allocation of resources. This vulnerability is referenced as CVE-2025-40136. The attack need
CVE-2025-40130 | Linux Kernel up to 6.17.2 ufshcd_pm_qos_exit use after free (Nessus ID 275233 / WID-SEC-2025-2579)
A vulnerability was found in Linux Kernel up to 6.17.2 and classified as critical. This vulnerability affects the function ufshcd_pm_qos_exit. Such manipulation leads to use after free. This vulnerability is documented as CVE-2025-40130. Th
Millionen von Hackerangriffen: So kam es zum Fiasko um die PHP-Sicherheitslücke - NZZ
Die Episode zeigt, wie stark KI die Hacking-Szene beschleunigt. Das enorme Tempo der KI nützt den Angreifern mehr als den Verteidigern, ist Wüest ... Weiterlesen
CVE-2026-101495 | Oracle Siebel CRM Development up to 26.9 Siebel Approval Manager input validation (Nessus ID 370447)
A vulnerability was found in Oracle Siebel CRM Development up to 26.9. It has been declared as critical. Affected by this issue is some unknown functionality of the component Siebel Approval Manager. Executing a manipulation can lead to imp
CVE-2026-101457 | Oracle Siebel Apps up to 26.9 eDetailing sql injection (Nessus ID 370447)
A vulnerability has been found in Oracle Siebel Apps up to 26.9 and classified as critical. This affects an unknown function of the component eDetailing. The manipulation leads to sql injection. This vulnerability is uniquely identified as
GitLab critical patches include one for a bug that allows code execution by unauthenticated users
GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that address a dozen bugs and security issues, including some that allow various unauthenticated actions. The most serious of the secu
Arista warnt: VeloCloud VCO SQL-Injection Zero-Day mit Login erforderlich
LONDON (IT BOLTWISE) – Arista warnt vor einer aktiv ausgenutzten SQL-Injection-Schwachstelle in der VeloCloud Orchestrator-Software (VCO). Wer sich in den Orchestrator einloggen kann, erhält auch mit einem Read-only-Konto Operator-Rechte bi
Webseiten wegen Sicherheitslücke noch offline – auch in Deutschland | STERN.de
„Millionen“ Hacker-Versuche. Viele Webseiten wegen Sicherheitslücke noch offline · Lage in Bundesländern sehr unterschiedlich · Mehr zum Thema · Behörde ... Weiterlesen
CVE-2025-40086 | Linux Kernel up to 6.17.4/6.18-rc1 allow_res_evict null pointer dereference (Nessus ID 272065 / WID-SEC-2025-2450)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.17.4/6.18-rc1. Affected is the function allow_res_evict. Performing a manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-
CVE-2025-40075 | Linux Kernel up to 6.17.2 tcp_metrics dst_dev_net_rcu privilege escalation (Nessus ID 271888 / WID-SEC-2025-2431)
A vulnerability was found in Linux Kernel up to 6.17.2. It has been classified as critical. This issue affects the function dst_dev_net_rcu of the component tcp_metrics. Performing a manipulation results in privilege escalation. This vulner
CVE-2025-40065 | Linux Kernel up to 6.17.2 KVM privilege escalation (Nessus ID 271877 / WID-SEC-2025-2431)
A vulnerability was found in Linux Kernel up to 6.17.2. It has been classified as critical. This impacts an unknown function of the component KVM. The manipulation leads to privilege escalation. This vulnerability is documented as CVE-2025-
CVE-2025-40003 | Linux Kernel up to 4.19.266 ocelot kernel/workqueue.c cancel_delayed_work initialization (EUVD-2025-34986 / Nessus ID 271677)
A vulnerability, which was classified as critical, has been found in Linux Kernel. Impacted is the function cancel_delayed_work of the file kernel/workqueue.c of the component ocelot. The manipulation leads to improper initialization. This
CVE-2025-39990 | Linux Kernel up to 6.12.49/6.16.9 bpf get_helper_proto privilege escalation (Nessus ID 271544 / WID-SEC-2025-2298)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.49/6.16.9. Impacted is the function get_helper_proto of the component bpf. Such manipulation leads to privilege escalation. This vulnerability is unique
CVE-2025-39958 | Linux Kernel up to 6.16.8 s390 __iommu_release_dma_ownership state issue (EUVD-2025-33325 / WID-SEC-2025-2246)
A vulnerability has been found in Linux Kernel up to 6.16.8 and classified as critical. Affected by this vulnerability is the function __iommu_release_dma_ownership of the component s390. The manipulation leads to state issue. This vulnerab
CVE-2025-39948 | Linux Kernel up to 6.12.48/6.16.8 ice_put_rx_mbuf buffer overflow (Nessus ID 269454 / WID-SEC-2025-2194)
A vulnerability described as critical has been identified in Linux Kernel up to 6.12.48/6.16.8. This affects the function ice_put_rx_mbuf. Such manipulation leads to buffer overflow. This vulnerability is listed as CVE-2025-39948. The attac
CVE-2025-26625 | Git LFS up to 3.7.0 link following (EUVD-2025-34886 / Nessus ID 271684)
A vulnerability, which was classified as critical, has been found in Git LFS up to 3.7.0. This impacts an unknown function. The manipulation leads to link following. This vulnerability is documented as CVE-2025-26625. The attack can be init
CVE-2025-39927 | Linux Kernel up to 6.12.47/6.16.7 ceph_mdsc_release_request race condition (EUVD-2025-31824 / Nessus ID 302439)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.47/6.16.7. This issue affects the function ceph_mdsc_release_request. The manipulation leads to race condition. This vulnerability is referenced as
CVE-2025-39921 | Linux Kernel up to 6.16.5 mchp_coreqspi_setup_clock privilege escalation (EUVD-2025-31830 / Nessus ID 269672)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.16.5. Affected by this vulnerability is the function mchp_coreqspi_setup_clock. This manipulation causes privilege escalation. This vulnerability is handled as CVE
CVE-2025-39910 | Linux Kernel vmalloc kasan_populate_vmalloc allocation of resources (EUVD-2025-32869 / Nessus ID 269657)
A vulnerability marked as critical has been reported in Linux Kernel. This affects the function kasan_populate_vmalloc of the component vmalloc. The manipulation leads to allocation of resources. This vulnerability is uniquely identified as
CVE-2025-39879 | Linux Kernel up to 6.16.7/6.17-rc5 ceph_shift_unused_folios_left null pointer dereference (Nessus ID 265861 / WID-SEC-2025-2107)
A vulnerability classified as critical has been found in Linux Kernel up to 6.16.7/6.17-rc5. This affects the function ceph_shift_unused_folios_left. This manipulation causes null pointer dereference. This vulnerability is tracked as CVE-20
CVE-2025-39878 | Linux Kernel up to 6.16.7/6.17-rc5 ceph fscrypt_encrypt_pagecache_blocks denial of service (Nessus ID 265870 / WID-SEC-2025-2107)
A vulnerability was found in Linux Kernel up to 6.16.7/6.17-rc5 and classified as critical. This affects the function fscrypt_encrypt_pagecache_blocks of the component ceph. The manipulation results in denial of service. This vulnerability
CVE-2025-39859 | Linux Kernel up to 6.16.5/6.17-rc4 ptp_ocp_detach use after free (Nessus ID 265844 / WID-SEC-2025-2099)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.16.5/6.17-rc4. This issue affects the function ptp_ocp_detach. Executing a manipulation can lead to use after free. The identification of this vulnerabilit
CVE-2025-39851 | Linux Kernel up to 6.12.45/6.16.5/6.17-rc4 vxlan first_remote_rcu null pointer dereference (Nessus ID 265480 / WID-SEC-2025-2099)
A vulnerability described as critical has been identified in Linux Kernel up to 6.12.45/6.16.5/6.17-rc4. This affects the function first_remote_rcu of the component vxlan. Executing a manipulation can lead to null pointer dereference. This
Deutscher rettete das Internet vor IT-Sicherheitslücke - WDR
Also zum Beispiel in Websites von Regierungen und sonstigen Einrichtungen. WDR: Was hätte denn konkret passieren können? Dusch: Hacker hätten auf den ... Weiterlesen
CVE-2026-110825 | The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this service. A remote, unauthenticated attacker can alter the device hostname, redirect DNS resolution, or modify the configured time source, enabling follow on attacks such as traffic interception or certificate validation bypass
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of the device's configured authentication setting for this serv
CVE-2026-101446 | Oracle Siebel CRM Cloud Applications up to 26.9 Siebel Cloud Manager privileges management (Nessus ID 370447)
A vulnerability identified as critical has been detected in Oracle Siebel CRM Cloud Applications up to 26.9. Impacted is an unknown function of the component Siebel Cloud Manager. The manipulation leads to improper privilege management. Thi
CVE-2026-108518 | DBI up to 1.655 dbi_profile type confusion (Nessus ID 370451)
A vulnerability was found in DBI up to 1.655 and classified as critical. Affected by this vulnerability is an unknown functionality of the component dbi_profile. The manipulation results in type confusion. This vulnerability was named CVE-2
CVE-2022-31626 | PHP up to 7.4.29/8.0.19/8.1.6 pdo_mysql password buffer overflow (Bug 81719 / Nessus ID 370448)
A vulnerability was found in PHP up to 7.4.29/8.0.19/8.1.6. It has been rated as critical. This affects an unknown part of the component pdo_mysql. This manipulation of the argument Password causes buffer overflow. This vulnerability is tra
CVE-2026-111497 | Google Brotli up to 1.0.3/1.1.0/1.2.0 Brotli decoder c/dec/decode.c buffer overflow (Nessus ID 370455)
A vulnerability was found in Google Brotli up to 1.0.3/1.1.0/1.2.0 and classified as critical. This vulnerability affects unknown code of the file c/dec/decode.c of the component Brotli decoder. Executing a manipulation can lead to buffer o
CVE-2026-92450 | The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the firmware image, identical across all deployed devices. An attacker with access to the publicly distributed firmware can recover this secret and forge arbitrary session tokens, including administrative tokens, without valid credentials, enabling unauthenticated access to privileged devi
The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the firmware image, identical across all deployed devices. An attac
CVE-2026-110243 | The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration endpoint before passing it to a shell command, unlike sibling handlers that perform the same validation. An authenticated web user with permission to configure network settings can exploit this to execute arbitrary operating system commands as root.
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration endpoint before passing it to a shell command, unlike sibling ha
CVE-2026-107861 | The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary operating system commands as root, resulting in full device compromise.
The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this
CVE-2026-110491 | The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and will recover automatically after a period. This can be triggered repeatedly by any unauthenticated party with network access to the device.
The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and
CVE-2026-105265 | A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime to point to a file outside the intended zoneinfo directory .
A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime to point to a file outside the intended zoneinfo directory .
CVE-2026-96616 | Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extended period.
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compro
CVE-2026-111100 | The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their privilege levels. This aids attackers in fingerprinting vulnerable devices and preparing targeted credential attacks.
The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identifiers along with a list of configured user accounts and their
CVE-2026-109122 | The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when configuring static routes via the web management API. An authenticated web user with permission to configure static routes can exploit this to execute arbitrary operating system commands as root, and the malicious configuration persists across reboots. Successful exploitation could result in full device compromise, including exposure of stored cr
The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when configuring static routes via the web management API. An authenticated web user with permission to configure static routes can
CVE-2026-113643 | EspoCRM up to 9.3.10/10.0.10 PDF Rendering Pipeline ImageSourceProvider.php ImageSourceProvider::get id authorization (GHSA-r277-qh74-r86f/GHSA-w46f-mj7x-v5c6)
A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. It has been rated as problematic. This affects the function ImageSourceProvider::get of the file application/Espo/Tools/Pdf/Dompdf/ImageSourceProvider.php of the component PDF Rende