Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 720 | 0,2 % |
| ≥50 % | 3.222 | 0,9 % |
| ≥10 % | 22.115 | 6,0 % |
| <10 % | 343.247 | 92,9 % |
Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool
CVE-2026-35029 and CVE-2026-59823 affect LiteLLM, which is commonly used by enterprises to connect their AI applications to providers like OpenAI and Anthropic Weiterlesen
CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products
The US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a high-severity remote code execution (RCE) vulnerability in the manageme
Compromise Assessment After CVE-2026-76504: Building a Defensible Investigation Order
Compromise Assessment After CVE-2026-76504: Building a Defensible Investigation Order Vulnerability overview CVE-2026-76504 is a critical authentication bypass in Cisco Catalyst SD-WAN Manager, disclosed by Cisco and added to the CISA Known
Critical Next.js SVG Image Processing Vulnerability Could Enable Remote Code Execution
Vercel has released an out-of-band security update for Next.js that fixes two critical remote code execution (RCE) flaws and one high-severity denial-of-service (DoS) bug. One of the critical flaws, CVE-2026-96889 (GHSA-2464-fhr4-w9xw), sit
CVE-2026-100784 | Mozilla Firefox up to 115.41/140.16/153.3/156 Layout Text/Fonts use after free (Nessus ID 366012 / WID-SEC-2026-3654)
A vulnerability was found in Mozilla Firefox up to 115.41/140.16/153.3/156 and classified as critical. The impacted element is an unknown function of the component Layout Text/Fonts. Executing a manipulation can lead to use after free. This
CVE-2026-80489 | Free Software Foundation glibc up to 2.44 EUC_JISX0213 infinite loop (Nessus ID 366015 / WID-SEC-2026-3051)
A vulnerability was found in Free Software Foundation glibc up to 2.44 and classified as critical. Affected is an unknown function of the component EUC_JISX0213. Executing a manipulation can lead to infinite loop. This vulnerability appears
CVE-2026-77117 | Free Software Foundation glibc up to 2.44 SHIFT_JISX0213 converter infinite loop (Nessus ID 366015 / WID-SEC-2026-3014)
A vulnerability was found in Free Software Foundation glibc up to 2.44. It has been declared as critical. Affected by this issue is some unknown functionality of the component SHIFT_JISX0213 converter. The manipulation results in infinite l
CVE-2022-46585 | TRENDnet TEW755AP 1.13B01 get_access REMOTE_USER stack-based overflow (EUVD-2022-49389)
A vulnerability was found in TRENDnet TEW755AP 1.13B01 and classified as critical. The affected element is the function get_access. Executing a manipulation of the argument REMOTE_USER can lead to stack-based buffer overflow. This vulnerabi
CVE-2022-46584 | TRENDnet TEW755AP 1.13B01 kick_ban_wifi_mac_deny maclist stack-based overflow (EUVD-2022-49388)
A vulnerability identified as critical has been detected in TRENDnet TEW755AP 1.13B01. Affected by this vulnerability is the function kick_ban_wifi_mac_deny. Performing a manipulation of the argument maclist results in stack-based buffer ov
CVE-2022-46583 | TRENDnet TEW755AP 1.13B01 wizard_ipv6 reboot_type stack-based overflow (EUVD-2022-49387)
A vulnerability categorized as critical has been discovered in TRENDnet TEW755AP 1.13B01. Affected is the function wizard_ipv6. Such manipulation of the argument reboot_type leads to stack-based buffer overflow. This vulnerability is docume
CVE-2022-46582 | TRENDnet TEW755AP 1.13B01 do_graph_auth login_name stack-based overflow (EUVD-2022-49386)
A vulnerability was found in TRENDnet TEW755AP 1.13B01. It has been rated as critical. This impacts the function do_graph_auth. This manipulation of the argument login_name causes stack-based buffer overflow. This vulnerability is registere
CVE-2022-46581 | TRENDnet TEW755AP 1.13B01 tools_nslookup cameo.cameo.nslookup_target stack-based overflow (EUVD-2022-49385)
A vulnerability was found in TRENDnet TEW755AP 1.13B01. It has been declared as critical. This affects the function tools_nslookup. The manipulation of the argument cameo.cameo.nslookup_target results in stack-based buffer overflow. This vu
Ivanti Connect Secure: 0-Day-Exploit zum Diebstahl von Active-Directory-Anmeldedaten
Setzt jemand die SSL-VPN-Fernzugriffslösung Ivanti Connect Secure in seiner Unternehmensumgebung ein? Mir ist gerade die Information untergekommen, dass es einen 0-Day Exploited für Ivanti Connect Secure gibt. Dieser Exploit lässt sich miss
Microsoft Windows Server 0-Day Flaw Lets Attackers Crash Servers With a Single Packet
Microsoft patched a Windows Server vulnerability that lets a network-adjacent attacker crash a server with a crafted Distributed File System (DFS) referral response. Tracked as CVE-2026-70111, the flaw affects Windows Server 2019, 2022, and
CVE-2026-101302 | FreeBSD Ktls off-by-one (p1/p4/p10/p14 / EUVD-2026-101870)
A vulnerability described as critical has been identified in FreeBSD. Impacted is an unknown function of the component Ktls. Executing a manipulation can lead to off-by-one. This vulnerability is tracked as CVE-2026-101302. The attack can b
[NEU] [mittel] Palo Alto Networks Cortex XSOAR: Schwachstelle ermöglicht Codeausführung
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Palo Alto Networks Cortex XSOAR ausnutzen, um beliebigen Programmcode auszuführen. Weiterlesen
PoC Released for Critical Fortinet FortiClient EMS Authentication Bypass Vulnerability
A public proof-of-concept (PoC) for CVE-2026-35616, a critical authentication and authorization bypass in Fortinet FortiClient Endpoint Management Server (EMS), lets defenders test whether affected systems are exposed. The Python tool’s rep
Unsichere Firewall: Palo Alto Networks warnt vor Angriffen auf Zero-Day-Lücke
Betroffen sind Firewalls der Serien PA und VM. Ein Angreifer kann Code mit Root-Rechten ausführen. (Firewall, Virtualisierung) Weiterlesen
Fortinet patcht CVE-2026-107656 in FortiSandbox
Kurze Information für Administratoren, die Fortinet-Produkte im Einsatz haben. In älteren Versionen der FortiSandbox gibt es eine kritischen Schwachstelle CVE-2026-107656 (CVSS Score 9.6), die die Authentifizierung betrifft. Es gibt aber Up
CVE-2026-101309 | FreeBSD bhyve up to p1/p4/p10 xHCI device model race condition (EUVD-2026-101932)
A vulnerability described as very critical has been identified in FreeBSD bhyve up to p1/p4/p10. Affected by this vulnerability is an unknown functionality of the component xHCI device model. Such manipulation leads to race condition. This
CVE-2026-101310 | FreeBSD bhyve HDA audio device model out-of-bounds (p2/p5/p11 / EUVD-2026-101931)
A vulnerability classified as very critical has been found in FreeBSD bhyve. Affected by this issue is some unknown functionality of the component HDA audio device model. Performing a manipulation results in out-of-bounds read. This vulnera
CVE-2026-101311 | FreeBSD bhyve Framebuffer Device Model width/height input validation (p2/p5/p11 / EUVD-2026-101930)
A vulnerability, which was classified as very critical, has been found in FreeBSD bhyve. This vulnerability affects unknown code of the component Framebuffer Device Model. The manipulation of the argument width/height leads to improper inpu
Langflow: Authentifizierte RCE-Lücke (CVE-2026-105740) wird aktiv ausgenutzt
LONDON (IT BOLTWISE) – Angreifer nutzen eine kritische Sicherheitslücke in Langflow gezielt aus: CVE-2026-105740 ermöglicht Remote Code Execution trotz Authentifizierung. Laut Daten aus Honeypot-Sensoren gab es seit dem 19. September 2026 i
CVE-2026-101303 | FreeBSD Jail access control (EUVD-2026-101874)
A vulnerability categorized as very critical has been discovered in FreeBSD. The impacted element is an unknown function of the component Jail. Executing a manipulation can lead to improper access controls. This vulnerability is handled as
CVE-2026-101339 | NLnet Labs NSD up to 4.15.2 stack-based overflow (Nessus ID 365994)
A vulnerability was found in NLnet Labs NSD up to 4.15.2. It has been rated as very critical. This issue affects some unknown processing. This manipulation causes stack-based buffer overflow. This vulnerability is tracked as CVE-2026-101339
CVE-2026-15176 | F5 NGINX Plus/NGINX Open Source Alias/Rewrite/Set/Return Directives request_filename heap-based overflow (Nessus ID 365995)
A vulnerability classified as critical has been found in F5 NGINX Plus and NGINX Open Source. Affected by this issue is some unknown functionality of the component Alias/Rewrite/Set/Return Directives. The manipulation of the argument reques
CVE-2026-101337 | NLnet Labs NSD up to 4.15.2 stack-based overflow (Nessus ID 365996)
A vulnerability identified as very critical has been detected in NLnet Labs NSD up to 4.15.2. The affected element is an unknown function. Performing a manipulation results in stack-based buffer overflow. This vulnerability is cataloged as
CVE-2026-101338 | NLnet Labs NSD up to 4.15.2 Base64 Decoder stack-based overflow (Nessus ID 365997)
A vulnerability categorized as very critical has been discovered in NLnet Labs NSD up to 4.15.2. Impacted is an unknown function of the component Base64 Decoder. Such manipulation leads to stack-based buffer overflow. This vulnerability is
CVE-2026-93262 | Linux Kernel up to 7.2.5 raid5-ppl drivers/md/raid5-ppl.c ppl_do_flush use after free (Nessus ID 366002)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.2.5. Impacted is the function ppl_do_flush of the file drivers/md/raid5-ppl.c of the component raid5-ppl. This manipulation causes use after free
CVE-2026-17525 | Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5.
Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5.
CVE-2026-79829 | A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.
A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.
CVE-2026-79828 | A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.
A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.
CVE-2026-79827 | A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.
A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.
CVE-2026-18659 | In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Jakarta Spec constraints defined as `http-method-omission` can be bypassed by using substrings of the defined HTTP Methods.
In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Jakarta Spec constraints defined as `http-method-omission` can be bypassed by using substrings of the defined HTTP Methods
CVE-2026-18662 | In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined properly per Jakarta Servlet Spec. Resulting in later http-method-omission sets overriding previous constraints with the same http-method-omission set.
In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined properly per Jakarta Servlet Spec. Re
CVE-2026-19864 | Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credentials contain a plaintext password and the authenticated session is persisted to a session data store, the password may consequently be written to persistent storage in plaintext. An attacker with sufficient privileges to read the persisted session data may obtain the plaintext passwords of authenticated users.
Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credentials contain a plaintext password and the authenticated session is persisted to a session data store, the password may cons
CVE-2026-19863 | An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path. This is caused by the authenticator using an unanchored substring match when identifying the login page. If the login path appears later within a protected request path, the request may be treated as the login page and its authentication or role requirement replaced with ALLOWED. Exploitation requires
An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path. This is caused by the authenticator using an unanchored substring match when identi
CVE-2026-79826 | A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.
A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.
CVE-2026-50619 | A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later
A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the followi
CVE-2026-47790 | A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: QuFTP Service 1.4.6 and later QuFTP Service 1.5.5 and later QuFTP Service 1.6.5 and later
A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in t
CVE-2026-47786 | An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.23 and later HybridDesk Station 4.3.4 and later
An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following vers
CVE-2026-39997 | A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and later
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability
CVE-2026-18660 | In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case.
In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case.
CVE-2026-39991 | A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.12 and later
A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in
CVE-2026-34009 | An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.11 and later
An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system.
CVE-2026-34008 | An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a local attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.11 and later
An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a local attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system.
CVE-2026-34007 | An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.11 and later
An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version
CVE-2026-53882 | An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Virtualization Station 4.1.1.130 and later
An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the securit
CVE-2026-50612 | An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuMagie 2.9.2 and later
An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed
CVE-2026-44084 | An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in
CVE-2026-41545 | A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QuMagie 2.9.1 and later
A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have alre
CVE-2026-41541 | An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.7 and later Qsync Central 5.1.0.3 and later Qsync Central 5.2.0.5 and later Qsync Central 5.3.0.2 and later
An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already
CVE-2026-39989 | A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following version: Download Station 5.10.1.312 and later Download Station 5.11.2.321 and later
A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read application data. We have already fixed the vulnera
CVE-2026-96614 | "ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishing attacks or disclosure of a service's session ID.
"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to access an arbitrary website, potentially leading to phishin
CVE-2026-79823 | HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.
HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.
CVE-2026-77711 | When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required). The client mistakenly interprets the 407 as coming from the proxy, so it re-sends the request with the `Proxy-Authentication` header, which arrives to the server, that now has access to the proxy credentials.
When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required). The client mistakenly interprets the 407 as coming from the proxy, so it re-sends the request
CVE-2026-76184 | In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the redirects, then HttpClient matches authentication credentials against `/secure` rather than normalizing the path to `/evil`, and will therefore follow the redirect sending the `Authorization` header for `/secure` to `/evil`. This also mean that the attacker must have an evil application deployed on the same domain as th
In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the redirects, then HttpClient matches authentication credentials against `/secure` rather than normalizi
CVE-2026-76182 | In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context. However, URI paths may contain characters that are reserved in URI queries so that a path of `/s&a=1` when applied to the template becomes `index?p=/s&a=1`, which is interpreted as 2 query parameters: `p=/s` and `a=1`, rather than just one query parameter `p` whose value is `/
In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in context. However, URI paths may contain characters that are res
CVE-2026-75559 | The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration credentials such as an access ID and access key.
The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted by the application, potentially leading to the exposure of API integration creden
CVE-2026-72528 | "Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, the user may become a victim of a phishing attack.
"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be displayed within the app's screen of a user. As a result, t