Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 753 | 0,2 % |
| ≥50 % | 3.281 | 0,9 % |
| ≥10 % | 21.929 | 5,7 % |
| <10 % | 359.743 | 93,3 % |
heise-Angebot: Nach PHP2Shell: Vom Notfall-Patch zum sicheren Upgrade
Ein 2,5-stündiges Webinar zeigt detailliert, wie Entwickler und Betreiber älterer PHP-Anwendungen und -Websites sicher auf eine aktuelle PHP-Version upgraden. Weiterlesen
Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server. This article has been indexed from SecurityWeek Read the original article: Max-Severity GitLab Vulnerability Exploited Against Alpi
CVE-2026-112816: LXD- und MicroCloud-Schwachstelle mit CVSS 10.0 erlaubt Client-Impersonation
LONDON (IT BOLTWISE) – Eine kritische Schwachstelle in LXD und MicroCloud ermöglicht Angreifern die Anmeldung als vertrauenswürdiger Client ohne dessen privaten Schlüssel. Voraussetzung sind Netzwerkzugriff auf die HTTPS-API und ein öffentl
CVE-2026-98432: The Linux TCP Use-After-Free Flaw Explained
CVE-2026-98432 is a use-after-free in the Linux TCP stack that an AI research model turned into a root shell in under an hour, no login required. This guide explains the race in plain language, lists the first fixed kernel version per branc
CVE-2026-72773 | n8n-io n8n prior 2.31.5/2.32.1 computer-use search_files path traversal
A vulnerability classified as problematic has been found in n8n-io n8n. Impacted is the function search_files of the component computer-use. Performing a manipulation results in path traversal. This vulnerability is reported as CVE-2026-727
CVE-2026-62898 | Microsoft .NET/Visual Studio QUIC use after free (EUVD-2026-56773 / WID-SEC-2026-2761)
A vulnerability categorized as critical has been discovered in Microsoft .NET and Visual Studio. Affected by this vulnerability is an unknown functionality of the component QUIC. Executing a manipulation can lead to use after free. The iden
CVE-2026-62897 | Microsoft .NET/.NET Framework/Visual Studio integer overflow (WID-SEC-2026-2761)
A vulnerability was found in Microsoft .NET, .NET Framework and Visual Studio. It has been classified as problematic. This issue affects some unknown processing. This manipulation causes integer overflow. This vulnerability is registered as
CVE-2026-62877 | Microsoft Windows up to Server 2025 Win32K buffer overflow (EUVD-2026-56399)
A vulnerability marked as very critical has been reported in Microsoft Windows. The affected element is an unknown function of the component Win32K. Performing a manipulation results in buffer overflow. This vulnerability is identified as C
CVE-2026-62871 | Microsoft .NET/Visual Studio out-of-bounds write (WID-SEC-2026-2761)
A vulnerability identified as problematic has been detected in Microsoft .NET and Visual Studio. This issue affects some unknown processing. This manipulation causes out-of-bounds write. The identification of this vulnerability is CVE-2026-
CVE-2026-62752 | Microsoft Windows up to Server 2025 Kerberos buffer overflow
A vulnerability categorized as very critical has been discovered in Microsoft Windows. The affected element is an unknown function of the component Kerberos. Executing a manipulation can lead to buffer overflow. This vulnerability appears a
CVE-2026-62740 | Microsoft Windows up to Server 2025 Windows Imaging uninitialized pointer
A vulnerability has been found in Microsoft Windows and classified as problematic. The affected element is an unknown function of the component Windows Imaging Component. This manipulation causes uninitialized pointer. This vulnerability is
CVE-2026-40375 | Microsoft Dynamics 365 Business Central improper authorization
A vulnerability was found in Microsoft Dynamics 365 Business Central and classified as problematic. This issue affects some unknown processing. Such manipulation leads to improper authorization. This vulnerability is listed as CVE-2026-4037
CVE-2026-72771 | n8n-io n8n up to 2.32.0 AI/LLM nodes redirect
A vulnerability, which was classified as problematic, has been found in n8n-io n8n up to 2.32.0. This issue affects some unknown processing of the component AI/LLM nodes. Performing a manipulation results in open redirect. This vulnerabilit
CVE-2026-72770 | n8n-io n8n up to 1.123.64 Git node path traversal
A vulnerability labeled as problematic has been found in n8n-io n8n. This affects an unknown part of the component Git node. The manipulation results in path traversal. This vulnerability is cataloged as CVE-2026-72770. The attack may be la
CVE-2026-72768 | n8n-io n8n up to 2.32.0 MCP Client node server-side request forgery
A vulnerability described as problematic has been identified in n8n-io n8n up to 2.32.0. This issue affects some unknown processing of the component MCP Client node. Such manipulation leads to server-side request forgery. This vulnerability
CVE-2026-72766 | n8n-io n8n Send Email node body server-side request forgery
A vulnerability classified as critical was found in n8n-io n8n. The affected element is an unknown function of the component Send Email node. Executing a manipulation of the argument body can lead to server-side request forgery. This vulner
CVE-2026-72765 | n8n-io n8n up to 2.31.4/2.32.0 Expression Evaluation sandbox
A vulnerability was found in n8n-io n8n up to 2.31.4/2.32.0. It has been classified as critical. This affects an unknown function of the component Expression Evaluation. This manipulation causes sandbox issue. The identification of this vul
CVE-2026-72763 | n8n-io n8n prior 1.123.67/2.31.5/2.32.1 access control
A vulnerability classified as critical was found in n8n-io n8n. This vulnerability affects unknown code. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2026-72763. The attack may be launched remotel
CVE-2026-94281 | x.org libXi up to 1.8.3 XListInputDevices out-of-bounds (Nessus ID 374609)
A vulnerability described as problematic has been identified in x.org libXi up to 1.8.3. The affected element is the function XListInputDevices. Executing a manipulation can lead to out-of-bounds read. The identification of this vulnerabili
CVE-2026-93544 | x.org libXi up to 1.8.3 XIQueryDevice out-of-bounds (Nessus ID 374609)
A vulnerability classified as problematic was found in x.org libXi up to 1.8.3. This vulnerability affects the function XIQueryDevice. The manipulation results in out-of-bounds read. This vulnerability is known as CVE-2026-93544. It is poss
CVE-2026-94282 | libXi Cookie Conversion wireToEnterLeave out-of-bounds (Nessus ID 374609)
A vulnerability was found in libXi. It has been declared as critical. This affects the function wireToEnterLeave of the component Cookie Conversion. Executing a manipulation can lead to out-of-bounds read. The identification of this vulnera
CVE-2026-109089 | X.Org libXi up to 1.8.3 DEVICE_RESOLUTION buffer overflow (f7836d0a0 / Nessus ID 374609)
A vulnerability marked as critical has been reported in X.Org libXi up to 1.8.3. The impacted element is an unknown function. The manipulation of the argument DEVICE_RESOLUTION leads to buffer overflow. This vulnerability is referenced as C
CVE-2026-109090 | x.org libXi up to 1.8.3 heap-based overflow (Nessus ID 374609)
A vulnerability has been found in x.org libXi up to 1.8.3 and classified as critical. Impacted is an unknown function. This manipulation causes heap-based buffer overflow. This vulnerability is registered as CVE-2026-109090. Remote exploita
CVE-2026-72750 | n8n-io n8n up to 1.123.66/2.31.4/2.32.0 Snowflake node sql injection
A vulnerability classified as critical has been found in n8n-io n8n up to 1.123.66/2.31.4/2.32.0. This affects an unknown part of the component Snowflake node. This manipulation causes sql injection. This vulnerability appears as CVE-2026-7
CVE-2026-72749 | n8n-io n8n up to 1.123.66/2.31.4/2.32.0 name prototype pollution
A vulnerability has been found in n8n-io n8n up to 1.123.66/2.31.4/2.32.0 and classified as critical. The affected element is an unknown function. The manipulation of the argument Name leads to improperly controlled modification of object p
CVE-2026-68404 | Linux Kernel up to 7.1.5/7.2-rc3 cfg80211 nl80211_netlink_notify race condition
A vulnerability identified as very critical has been detected in Linux Kernel up to 7.1.5/7.2-rc3. The affected element is the function nl80211_netlink_notify of the component cfg80211. The manipulation leads to race condition. This vulnera
CVE-2026-68401 | Linux Kernel up to 6.18.41/7.1.5/7.2-rc3 arm_ffa ffa_setup_and_transmit reserved memory corruption
A vulnerability identified as very critical has been detected in Linux Kernel up to 6.18.41/7.1.5/7.2-rc3. This issue affects the function ffa_setup_and_transmit of the component arm_ffa. The manipulation of the argument reserved leads to m
CVE-2026-68399 | Linux Kernel BPF sk_clone use after free (Nessus ID 334405)
A vulnerability categorized as very critical has been discovered in Linux Kernel. This vulnerability affects the function sk_clone of the component BPF. Executing a manipulation can lead to use after free. This vulnerability appears as CVE-
CVE-2026-68381 | Linux Kernel up to 7.2-rc3 ksmbd race condition
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc3. Affected by this vulnerability is the function smb2_oplock_break_noti/smb2_lease_break_noti/ksmbd_conn_write/ksmb
CVE-2026-68329 | Linux Kernel up to 7.2-rc4 IOMMU iommu_completion_wait use after free
A vulnerability was found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. It has been rated as very critical. This vulnerability affects the function iommu_completion_wait of the component IOMMU. This manipulation causes use a
CVE-2026-68323 | Linux Kernel TIPC UDP Bearer net/tipc/udp_media.c cleanup_bearer race condition
A vulnerability was found in Linux Kernel. It has been rated as very critical. Affected by this vulnerability is the function cleanup_bearer of the file net/tipc/udp_media.c of the component TIPC UDP Bearer. The manipulation leads to race c
CVE-2026-120226 | Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows P2P SDK P2PAPI_Connect input buffer overflow
A vulnerability categorized as problematic has been discovered in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by this issue is the function P2PAPI_Connect of the component P2P SDK. Such manipulation of the argument
CVE-2026-106206 | Google Chrome up to 154.0.8037.97 Mobile information disclosure (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been rated as problematic. Affected is an unknown function of the component Mobile. Performing a manipulation results in information disclosure. This vulnerability is known as CVE-2026-1062
CVE-2026-106205 | Google Chrome up to 154.0.8037.97 Passwords missing authentication (WID-SEC-2026-3761)
A vulnerability labeled as critical has been found in Google Chrome. Affected is an unknown function of the component Passwords. Executing a manipulation can lead to missing authentication. The identification of this vulnerability is CVE-20
CVE-2026-106204 | Google Chrome up to 154.0.8037.97 PDF file use after free (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as critical. This affects an unknown function of the component PDF file Handler. This manipulation causes use after free. This vulnerability appears as CVE-2026-106204. The
CVE-2026-106203 | Google Chrome up to 154.0.8037.97 Autofill information disclosure (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been declared as problematic. This impacts an unknown function of the component Autofill. Such manipulation leads to information disclosure. This vulnerability is traded as CVE-2026-106203.
CVE-2026-106202 | Google Chrome up to 154.0.8037.97 ANGLE uninitialized resource (WID-SEC-2026-3761)
A vulnerability described as problematic has been identified in Google Chrome. Affected by this issue is some unknown functionality of the component ANGLE. The manipulation results in uninitialized resource. This vulnerability is identified
CVE-2026-106201 | Google Chrome up to 154.0.8037.97 race condition (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as critical. The impacted element is an unknown function. The manipulation results in race condition. This vulnerability is reported as CVE-2026-106201. The attack can be launched re
CVE-2026-106200 | Google Chrome up to 154.0.8037.97 Track use after free (WID-SEC-2026-3761)
A vulnerability, which was classified as critical, was found in Google Chrome. Impacted is an unknown function of the component Track. Executing a manipulation can lead to use after free. This vulnerability is registered as CVE-2026-106200.
CVE-2026-106199 | Google Chrome up to 154.0.8037.97 Actor improper authorization (WID-SEC-2026-3761)
A vulnerability marked as critical has been reported in Google Chrome. Affected by this vulnerability is an unknown functionality of the component Actor. The manipulation leads to improper authorization. This vulnerability is referenced as
CVE-2026-106198 | Google Chrome up to 154.0.8037.97 FileSystem improper authorization (WID-SEC-2026-3761)
A vulnerability has been found in Google Chrome and classified as critical. The affected element is an unknown function of the component FileSystem. The manipulation leads to improper authorization. This vulnerability is documented as CVE-2
CVE-2026-106197 | Google Chrome up to 154.0.8037.97 Browser use after free (WID-SEC-2026-3761)
A vulnerability, which was classified as critical, has been found in Google Chrome. This issue affects some unknown processing of the component Browser. Performing a manipulation results in use after free. This vulnerability is cataloged as
CVE-2026-106196 | Google Chrome up to 154.0.8037.97 Navigation improper authorization (WID-SEC-2026-3761)
A vulnerability classified as critical has been found in Google Chrome. This affects an unknown part of the component Navigation. This manipulation causes improper authorization. This vulnerability is tracked as CVE-2026-106196. The attack
CVE-2026-106195 | Google Chrome up to 154.0.8037.97 Chromoting access control (WID-SEC-2026-3761)
A vulnerability classified as critical was found in Google Chrome. This vulnerability affects unknown code of the component Chromoting. Such manipulation leads to improper access controls. This vulnerability is listed as CVE-2026-106195. Th
CVE-2026-100866 | o2sh onefetch up to 2.28.1 injection (Nessus ID 374626)
A vulnerability identified as problematic has been detected in o2sh onefetch up to 2.28.1. Affected by this issue is some unknown functionality. Performing a manipulation results in injection. This vulnerability is known as CVE-2026-100866.
CVE-2026-19969 | Open Asset Import Library Assimp 17c12da 3DGS MDL7 Model Output Mesh Generator MDLLoader.cpp GenerateOutputMeshes_3DGS_MDL7 buffer overflow (Issue 6631 / EUVD-2026-60017)
A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of th
CVE-2026-19967 | Open Asset Import Library Assimp 17c12da File Parser Compression.cpp decompressBlock heap-based overflow (Issue 6624 / EUVD-2026-60015)
A vulnerability marked as critical has been reported in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing
CVE-2026-71979 | indilib indi up to 2.2.4.2 Message Queue MsgQueue.cpp sprintf stack-based overflow (Nessus ID 374633)
A vulnerability marked as critical has been reported in indilib indi up to 2.2.4.2. This impacts the function sprintf of the file MsgQueue.cpp of the component Message Queue. The manipulation leads to stack-based buffer overflow. This vulne
CVE-2026-120244 | FFmpeg up to 9.0.2 PCX decoder pcx_decode_frame uninitialized resource (EUVD-2026-114741)
A vulnerability described as problematic has been identified in FFmpeg up to 9.0.2. This affects the function pcx_decode_frame of the component PCX decoder. Such manipulation leads to uninitialized resource. This vulnerability is uniquely i
CVE-2026-120243 | FFmpeg up to 9.0.2 Go2Meeting decoder kempf_restore_buf uninitialized pointer (EUVD-2026-114740)
A vulnerability, which was classified as problematic, has been found in FFmpeg up to 9.0.2. Affected by this vulnerability is the function kempf_restore_buf of the component Go2Meeting decoder. The manipulation leads to uninitialized pointe
CVE-2026-120246 | FFmpeg up to 9.0.2 CDXL decoder cdxl_decode_ham8/cdxl_decode_ham6 uninitialized resource (EUVD-2026-114743)
A vulnerability has been found in FFmpeg up to 9.0.2 and classified as problematic. This affects the function cdxl_decode_ham8/cdxl_decode_ham6 of the component CDXL decoder. This manipulation causes uninitialized resource. This vulnerabili
CVE-2026-120245 | FFmpeg up to 9.0.2 Sun Raster Decoder sunrast_decode_frame missing initialization (EUVD-2026-114742)
A vulnerability classified as problematic has been found in FFmpeg up to 9.0.2. This impacts the function sunrast_decode_frame of the component Sun Raster Decoder. Performing a manipulation results in missing initialization of a variable. T
CVE-2026-120248 | Thelia up to 3.1.0 Image Upload logo_file/banner_file cross site scripting (EUVD-2026-114745)
A vulnerability was found in Thelia up to 3.1.0. It has been declared as problematic. Impacted is an unknown function of the component Image Upload. Executing a manipulation of the argument logo_file/banner_file can lead to cross site scrip
CVE-2026-120247 | FFmpeg up to 9.0.2 Huffyuv decoder decode_slice temp uninitialized resource (EUVD-2026-114744)
A vulnerability classified as problematic was found in FFmpeg up to 9.0.2. Affected is the function decode_slice of the component Huffyuv decoder. Executing a manipulation of the argument Temp can lead to uninitialized resource. The identif
CVE-2026-120249 | lia Back-office Default Twig Template up to 1.1.0 update cross-site request forgery (EUVD-2026-114746)
A vulnerability was found in lia Back-office Default Twig Template up to 1.1.0. It has been rated as problematic. The affected element is an unknown function of the file /admin/product/combinations/update. The manipulation leads to cross-si
CVE-2026-120191 | Presenton up to 0.9.11-beta API missing authentication (Issue 972 / EUVD-2026-114750)
A vulnerability identified as critical has been detected in Presenton up to 0.9.11-beta. Affected by this issue is some unknown functionality of the component API. This manipulation causes missing authentication. The identification of this
CVE-2026-120251 | cgohlke imagecodecs up to 2026.10.10 Ccittfax4 Codec ccitt_fax4_decode_size infinite loop (EUVD-2026-114748)
A vulnerability was found in cgohlke imagecodecs up to 2026.10.10 and classified as problematic. This vulnerability affects the function ccitt_fax4_decode_size of the component Ccittfax4 Codec. Such manipulation leads to infinite loop. This
CVE-2026-120250 | marketcalls OpenAlgo prior 2.0.3.1 Email Utils utils/email_utils.py certificate validation (EUVD-2026-114747)
A vulnerability, which was classified as problematic, was found in marketcalls OpenAlgo. Affected by this issue is some unknown functionality of the file utils/email_utils.py of the component Email Utils. The manipulation results in imprope
CVE-2026-120252 | cgohlke imagecodecs up to 2026.10.10 Lossless JPEG Define Huffman Table Parser decode_jpegsof3 stack-based overflow (EUVD-2026-114749)
A vulnerability was found in cgohlke imagecodecs up to 2026.10.10. It has been classified as problematic. This issue affects the function decode_jpegsof3 of the component Lossless JPEG Define Huffman Table Parser. Performing a manipulation
CVE-2026-120192 | Presenton up to 0.9.11-beta Desktop Authentication Middleware /app_data information disclosure (Issue 973 / EUVD-2026-114751)
A vulnerability labeled as problematic has been found in Presenton up to 0.9.11-beta. This affects an unknown part of the file /app_data of the component Desktop Authentication Middleware. Such manipulation leads to information disclosure.