Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 725 | 0,2 % |
| ≥50 % | 3.220 | 0,9 % |
| ≥10 % | 22.091 | 5,9 % |
| <10 % | 347.695 | 93,0 % |
CVE-2026-90128 | Linux Kernel up to 7.2.5 vdpa/mlx5 add_direct_chain infinite loop (WID-SEC-2026-3444)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.2.5. Affected by this vulnerability is the function add_direct_chain of the component vdpa/mlx5. Performing a manipulation results in infinite lo
CVE-2026-90127 | Linux Kernel up to 6.18.51/7.2.5 virtio_rtc viortc_remove allocation of resources (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.18.51/7.2.5 and classified as problematic. Affected by this vulnerability is the function viortc_remove of the component virtio_rtc. Executing a manipulation can lead to allocation of resour
CVE-2026-90126 | Linux Kernel up to 7.2.5 Rtc Driver pcf8563_clkout_register_clk allocation of resources (WID-SEC-2026-3444)
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 7.2.5. This affects the function pcf8563_clkout_register_clk of the component Rtc Driver. This manipulation causes allocation of resources. This vuln
CVE-2026-90125 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 SMB Client smb2_new_read_req memory leak (WID-SEC-2026-3444)
A vulnerability classified as critical has been found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. The affected element is the function smb2_new_read_req of the component SMB Client. The manipulation leads to memory leak. This vuln
CVE-2026-90124 | Linux Kernel up to 7.2.5 irqchip/renesas-rzg2l rzg2l_clear_irq_int/rzg2l_clear_tint_int race condition (WID-SEC-2026-3444)
A vulnerability described as critical has been identified in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. Impacted is the function rzg2l_clear_irq_int/rzg2l_clear_tint_int of the component irqchip/renesas-rzg2l. Executing a ma
CVE-2026-90123 | Linux Kernel up to 7.2.5 irqchip/ast2700-intc allocation of resources (WID-SEC-2026-3444)
A vulnerability classified as very critical was found in Linux Kernel up to 7.2.5. The impacted element is the function aspeed_intc1_irq_domain_activate/aspeed_intc0_resolve_route of the component irqchip/ast2700-intc. The manipulation resu
CVE-2026-90122 | Linux Kernel up to 7.2.5 Visconti Clock Driver visconti_clk_register_gate uninitialized variable (WID-SEC-2026-3444)
A vulnerability marked as very critical has been reported in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. This issue affects the function visconti_clk_register_gate of the component Visconti Clock Driver. Performing a manipula
CVE-2026-90121 | Linux Kernel up to 7.2.5 irqchip/gic-v5 use after free (WID-SEC-2026-3444)
A vulnerability classified as very critical was found in Linux Kernel up to 7.2.5. This issue affects some unknown processing of the component irqchip/gic-v5. Executing a manipulation can lead to use after free. This vulnerability is regist
CVE-2026-90120 | Linux Kernel up to 7.2.5 irqchip/gic-v5 gic_acpi_parse_iaffid out-of-bounds (WID-SEC-2026-3444)
A vulnerability classified as very critical has been found in Linux Kernel up to 7.2.5. This vulnerability affects the function gic_acpi_parse_iaffid of the component irqchip/gic-v5. Performing a manipulation results in out-of-bounds read.
CVE-2026-90119 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ALSA snd_ice1712_probe memory leak (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. It has been classified as critical. The affected element is the function snd_ice1712_probe of the component ALSA. This manipulation causes memory leak. This vul
CVE-2026-90118 | Linux Kernel up to 7.2.5 NTFS ntfs_decompress off-by-one (WID-SEC-2026-3444)
A vulnerability described as very critical has been identified in Linux Kernel up to 7.2.5. This affects the function ntfs_decompress of the component NTFS. Such manipulation leads to off-by-one. This vulnerability is listed as CVE-2026-901
CVE-2026-90117 | Linux Kernel up to 7.2.5 NTFS ntfs_mft_record_alloc usa_ofs use after free (WID-SEC-2026-3444)
A vulnerability marked as very critical has been reported in Linux Kernel up to 7.2.5. Affected by this issue is the function ntfs_mft_record_alloc of the component NTFS. This manipulation of the argument usa_ofs causes use after free. This
CVE-2026-106578 | ImageMagick up to 6.9.13-55/7.1.2-30 MVG Decoder use after free (Nessus ID 371925)
A vulnerability was found in ImageMagick up to 6.9.13-55/7.1.2-30. It has been rated as problematic. Affected is an unknown function of the component MVG Decoder. This manipulation causes use after free. This vulnerability is handled as CVE
CVE-2026-106577 | ImageMagick up to 6.9.13-55/7.1.2-30 PostScript coders code injection (Nessus ID 371925)
A vulnerability was found in ImageMagick up to 6.9.13-55/7.1.2-30. It has been classified as problematic. This affects an unknown function of the component PostScript coders. The manipulation leads to code injection. This vulnerability is t
CVE-2026-106573 | ImageMagick up to 6.9.13-55/7.1.2-30 MVG Decoder resource consumption (Nessus ID 371925)
A vulnerability categorized as problematic has been discovered in ImageMagick up to 6.9.13-55/7.1.2-30. This affects an unknown function of the component MVG Decoder. The manipulation results in resource consumption. This vulnerability was
CVE-2026-106572 | ImageMagick up to 6.9.13-54/7.1.2-29 CALS decoder recursion (Nessus ID 371925)
A vulnerability has been found in ImageMagick up to 6.9.13-54/7.1.2-29 and classified as problematic. The affected element is an unknown function of the component CALS decoder. Performing a manipulation results in uncontrolled recursion. Th
CVE-2026-106571 | ImageMagick up to 6.9.13-55/7.1.2-30 GetVirtualPixels API heap-based overflow (Nessus ID 371925)
A vulnerability labeled as problematic has been found in ImageMagick up to 6.9.13-55/7.1.2-30. This affects the function GetVirtualPixels of the component GetVirtualPixels API. Executing a manipulation can lead to heap-based buffer overflow
CVE-2026-116110 | GiantappMan LiveWallPaper 2.6.8.0 on Windows SignalR Hub UploadFile missing authentication (Issue 185)
A vulnerability has been found in GiantappMan LiveWallPaper 2.6.8.0 on Windows and classified as critical. This issue affects some unknown processing of the file /LiveWallpaper/UploadFile of the component SignalR Hub. Performing a manipulat
CVE-2026-116067 | ananthakumaran Paisa up to 0.7.7 GetFile/GetSheet/DeleteBackups/DeleteSheetBackups path traversal (EUVD-2026-109381)
A vulnerability was found in ananthakumaran Paisa up to 0.7.7. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the component GetFile/GetSheet/DeleteBackups/DeleteSheetBackups. Performing a manipu
CVE-2026-116066 | Firecrawl up to 2.11.585 Playwright Service server-side request forgery (EUVD-2026-109380)
A vulnerability marked as problematic has been reported in Firecrawl up to 2.11.585. This issue affects some unknown processing of the component Playwright Service. This manipulation causes server-side request forgery. The identification of
CVE-2026-116052 | LinkStackOrg LinkStack up to 4.8.8 cross-site request forgery (EUVD-2026-109390)
A vulnerability has been found in LinkStackOrg LinkStack up to 4.8.8 and classified as problematic. The affected element is an unknown function. Performing a manipulation results in cross-site request forgery. This vulnerability is known as
CVE-2026-116069 | Albert-Weasker NiubiGEO up to 0.3.1 server-side request forgery (EUVD-2026-109383)
A vulnerability classified as problematic has been found in Albert-Weasker NiubiGEO up to 0.3.1. The affected element is an unknown function. Performing a manipulation results in server-side request forgery. This vulnerability is identified
CVE-2026-116068 | Dokploy up to 0.30.10 authorization (EUVD-2026-109382)
A vulnerability categorized as problematic has been discovered in Dokploy up to 0.30.10. Affected by this issue is some unknown functionality. Executing a manipulation can lead to authorization bypass. This vulnerability is handled as CVE-2
CVE-2026-116071 | rotki up to 1.44.1 hash predictable salt (EUVD-2026-109385)
A vulnerability was found in rotki up to 1.44.1. It has been declared as problematic. Affected is an unknown function. Such manipulation leads to use of a one-way hash with a predictable salt. This vulnerability is traded as CVE-2026-116071
CVE-2026-116070 | dqzboy Docker-Proxy up to 5.1.9 Hubcmd UI routes/config.js missing authentication (EUVD-2026-109384)
A vulnerability identified as critical has been detected in dqzboy Docker-Proxy up to 5.1.9. This affects an unknown part of the file routes/config.js of the component Hubcmd UI. The manipulation leads to missing authentication. This vulner
CVE-2026-116072 | Docile-Alligator Infinity for Reddit up to 8.3.4 LoginChromeCustomTabActivity cross-site request forgery (EUVD-2026-109386)
A vulnerability described as problematic has been identified in Docile-Alligator Infinity for Reddit up to 8.3.4. Impacted is an unknown function of the component LoginChromeCustomTabActivity. Such manipulation leads to cross-site request f
CVE-2026-116137 | cthackers adm-zip up to 0.6.1 readEntries integrity check (EUVD-2026-109389)
A vulnerability labeled as problematic has been found in cthackers adm-zip up to 0.6.1. This vulnerability affects the function readEntries. The manipulation results in improper validation of integrity check value. This vulnerability was na
CVE-2026-116136 | ProjectSend up to 2.7.1 File Versions FileVersions::link improper authorization (EUVD-2026-109388)
A vulnerability was found in ProjectSend up to 2.7.1. It has been classified as problematic. This impacts the function FileVersions::link of the component File Versions. This manipulation causes improper authorization. This vulnerability ap
CVE-2026-116073 | leon-ai Leon URL getModelFileNameFromURL path traversal (EUVD-2026-109387)
A vulnerability was found in leon-ai Leon and classified as problematic. This affects the function getModelFileNameFromURL of the component URL Handler. The manipulation results in path traversal. This vulnerability is reported as CVE-2026-
CVE-2026-90116 | Linux Kernel up to 6.18.51/7.2.5 ALSA mtpav Output Timer snd_mtpav_free race condition (WID-SEC-2026-3444)
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.51/7.2.5. Affected by this vulnerability is the function snd_mtpav_free of the component ALSA mtpav Output Timer. The manipulation results in race condition.
CVE-2026-90115 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 XSK net/xdp/xsk.c __xsk_rcv null pointer dereference (WID-SEC-2026-3444)
A vulnerability identified as very critical has been detected in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. Affected is the function __xsk_rcv of the file net/xdp/xsk.c of the component XSK. The manipulation leads to null pointer de
CVE-2026-90114 | Linux Kernel up to 7.2.5 Bridge uninitialized variable (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5 and classified as very critical. Impacted is an unknown function of the component Bridge. The manipulation results in use of uninitialized variable. This vulnerability is known as CVE-20
CVE-2026-90113 | Linux Kernel up to 6.18.51/7.2.5 netdevsim nsim_queue_start napi_id use after free (WID-SEC-2026-3444)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.51/7.2.5. This impacts the function nsim_queue_start of the component netdevsim. Executing a manipulation of the argument napi_id can lead to use af
CVE-2026-90111 | Linux Kernel up to 7.2.5 ip6mr ip6mr_cache_report use after free (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been declared as very critical. The impacted element is the function ip6mr_cache_report of the component ip6mr. Such manipulation leads to use after free. This vulnerability is u
CVE-2026-90110 | Linux Kernel up to 7.2.5 inetpeer inet_getpeer information disclosure (WID-SEC-2026-3444)
A vulnerability has been found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5 and classified as problematic. Affected by this issue is the function inet_getpeer of the component inetpeer. Performing a manipulation results in i
CVE-2026-90109 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 Network Scheduler gred_enqueue/bfifo_enqueue/plug_enqueue integer overflow (WID-SEC-2026-3444)
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. Affected by this vulnerability is the function gred_enqueue/bfifo_enqueue/plug_enqueue of the component Network Scheduler. Such ma
CVE-2026-90108 | Linux Kernel up to 7.2.5 SMC LLC Flow net/smc smc_llc_event_handler qentry allocation of resources (WID-SEC-2026-3444)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. This vulnerability affects the function smc_llc_event_handler of the file net/smc of the component SMC LLC Flow. Exec
CVE-2026-90107 | Linux Kernel up to 7.2.5 SMC LLC Flow net/smc smc_llc_flow_stop memory leak (WID-SEC-2026-3444)
A vulnerability described as problematic has been identified in Linux Kernel up to 7.2.5. Affected is the function smc_llc_flow_stop of the file net/smc of the component SMC LLC Flow. The manipulation results in memory leak. This vulnerabil
CVE-2025-62058 | favethemes Houzez Theme up to 4.2.0 on WordPress cross site scripting
A vulnerability classified as problematic has been found in favethemes Houzez Theme up to 4.2.0 on WordPress. This affects an unknown function. Performing a manipulation results in cross site scripting. This vulnerability is identified as C
CVE-2025-62025 | eyecix JobSearch Plugin up to 3.0.8 on WordPress deserialization
A vulnerability has been found in eyecix JobSearch Plugin up to 3.0.8 on WordPress and classified as critical. Affected by this issue is some unknown functionality. This manipulation causes deserialization. This vulnerability is registered
CVE-2025-62005 | FantasticPlugins SUMO Memberships for WooCommerce Plugin up to 7.8.0 on WordPress cross-site request forgery
A vulnerability described as problematic has been identified in FantasticPlugins SUMO Memberships for WooCommerce Plugin up to 7.8.0 on WordPress. This affects an unknown function. The manipulation results in cross-site request forgery. Thi
CVE-2025-59580 | GoodLayers Goodlayers Core Plugin up to 2.1.7 on WordPress privileges assignment
A vulnerability was found in GoodLayers Goodlayers Core Plugin up to 2.1.7 on WordPress. It has been classified as critical. Impacted is an unknown function. Performing a manipulation results in incorrect privilege assignment. This vulnerab
CVE-2025-59571 | purethemes WorkScout-Core Plugin up to 1.7.06 on WordPress cross site scripting
A vulnerability categorized as problematic has been discovered in purethemes WorkScout-Core Plugin up to 1.7.06 on WordPress. This affects an unknown function. The manipulation results in cross site scripting. This vulnerability was named C
CVE-2025-59564 | ThemeMove EduMall Plugin up to 4.4.5 on WordPress php file inclusion
A vulnerability labeled as critical has been found in ThemeMove EduMall Plugin up to 4.4.5 on WordPress. Impacted is an unknown function. Such manipulation leads to improper control of filename for include/require statement in php program.
CVE-2025-59558 | ThemeMove Billey Plugin up to 2.1.6 on WordPress php file inclusion
A vulnerability, which was classified as critical, has been found in ThemeMove Billey Plugin up to 2.1.6 on WordPress. The impacted element is an unknown function. The manipulation leads to improper control of filename for include/require s
CVE-2025-59555 | ThemeMove Medizin Plugin up to 1.9.7 on WordPress php file inclusion
A vulnerability was found in ThemeMove Medizin Plugin up to 1.9.7 on WordPress. It has been classified as critical. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in improper control of filenam
CVE-2025-59550 | designervily Xcare Plugin up to 6.5 on WordPress php file inclusion
A vulnerability was found in designervily Xcare Plugin up to 6.5 on WordPress and classified as critical. Affected is an unknown function. Such manipulation leads to improper control of filename for include/require statement in php program.
CVE-2025-58967 | ThemeMove Businext Plugin up to 2.4.4 on WordPress php file inclusion
A vulnerability classified as critical has been found in ThemeMove Businext Plugin up to 2.4.4 on WordPress. Impacted is an unknown function. Performing a manipulation results in improper control of filename for include/require statement in
CVE-2025-58966 | Basix NEX-Forms LITE Plugin up to 8.2 on WordPress cross site scripting
A vulnerability classified as problematic has been found in Basix NEX-Forms LITE Plugin up to 8.2 on WordPress. Affected is an unknown function. Performing a manipulation results in cross site scripting. This vulnerability is cataloged as C
CVE-2025-61581 | Apache Traffic Control Traffic Router redos
A vulnerability has been found in Apache Traffic Control and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Traffic Router. Performing a manipulation results in inefficient regular exp
CVE-2025-58963 | 7oroof Medcity Plugin up to 1.1.9 on WordPress unrestricted upload
A vulnerability described as critical has been identified in 7oroof Medcity Plugin up to 1.1.9 on WordPress. This impacts an unknown function. Such manipulation leads to unrestricted upload. This vulnerability is listed as CVE-2025-58963. T
CVE-2025-58958 | ThemeMove SmilePure Plugin up to 1.8.5 on WordPress php file inclusion
A vulnerability classified as critical was found in ThemeMove SmilePure Plugin up to 1.8.5 on WordPress. The affected element is an unknown function. Executing a manipulation can lead to improper control of filename for include/require stat
CVE-2025-58955 | designervily Karzo Plugin up to 2.6 on WordPress php file inclusion (EUVD-2025-35452)
A vulnerability marked as critical has been reported in designervily Karzo Plugin up to 2.6 on WordPress. The affected element is an unknown function. Performing a manipulation results in improper control of filename for include/require sta
CVE-2025-49936 | xtemos WoodMart Plugin up to 8.3.2 on WordPress cross site scripting
A vulnerability was found in xtemos WoodMart Plugin up to 8.3.2 on WordPress. It has been declared as problematic. Impacted is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is referenced as CVE-202
CVE-2025-49935 | xtemos WoodMart Plugin up to 8.3.2 on WordPress php file inclusion
A vulnerability categorized as critical has been discovered in xtemos WoodMart Plugin up to 8.3.2 on WordPress. This vulnerability affects unknown code. The manipulation results in improper control of filename for include/require statement
CVE-2025-49901 | quantumcloud Simple Link Directory Plugin up to 14.8.1 on WordPress authentication bypass
A vulnerability was found in quantumcloud Simple Link Directory Plugin up to 14.8.1 on WordPress. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to authentication bypass using alternate cha
CVE-2025-11715 | Mozilla Thunderbird up to 143 memory corruption (EUVD-2025-34200 / Nessus ID 270625)
A vulnerability classified as critical has been found in Mozilla Thunderbird up to 143. Affected by this vulnerability is an unknown functionality. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2025-11715.
Gefährliche PHP-Sicherheitslücke: Experte warnt vor Vorteil für Hacker | Nachrichten.at
Die schwerwiegende Sicherheitslücke in der Programmiersprache PHP ist nach Ansicht eines Experten der Cyberagentur des Bundes in Deutschland ein ... Weiterlesen
Oktober 2026: Erneuter Rekord-Patchday mit 1.415 Microsoft-CVEs - B2B Cyber Security
... Server, Network Policy Server, Windows Error Reporting und Remote Desktop Gateway. Anzeige. Die wichtigsten Microsoft-Schwachstellen. CVE-2026-96951 ... Weiterlesen
CVE-2026-116044 | A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the component Remote URL File Upload Module. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the component Remote URL File Upload Module. The manipulation leads