Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 725 | 0,2 % |
| ≥50 % | 3.220 | 0,9 % |
| ≥10 % | 22.091 | 5,9 % |
| <10 % | 347.695 | 93,0 % |
CVE-2026-90116 | Linux Kernel up to 6.18.51/7.2.5 ALSA mtpav Output Timer snd_mtpav_free race condition (WID-SEC-2026-3444)
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.51/7.2.5. Affected by this vulnerability is the function snd_mtpav_free of the component ALSA mtpav Output Timer. The manipulation results in race condition.
CVE-2026-90115 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 XSK net/xdp/xsk.c __xsk_rcv null pointer dereference (WID-SEC-2026-3444)
A vulnerability identified as very critical has been detected in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. Affected is the function __xsk_rcv of the file net/xdp/xsk.c of the component XSK. The manipulation leads to null pointer de
CVE-2026-90114 | Linux Kernel up to 7.2.5 Bridge uninitialized variable (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5 and classified as very critical. Impacted is an unknown function of the component Bridge. The manipulation results in use of uninitialized variable. This vulnerability is known as CVE-20
CVE-2026-90113 | Linux Kernel up to 6.18.51/7.2.5 netdevsim nsim_queue_start napi_id use after free (WID-SEC-2026-3444)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.51/7.2.5. This impacts the function nsim_queue_start of the component netdevsim. Executing a manipulation of the argument napi_id can lead to use af
CVE-2026-90111 | Linux Kernel up to 7.2.5 ip6mr ip6mr_cache_report use after free (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been declared as very critical. The impacted element is the function ip6mr_cache_report of the component ip6mr. Such manipulation leads to use after free. This vulnerability is u
CVE-2026-90110 | Linux Kernel up to 7.2.5 inetpeer inet_getpeer information disclosure (WID-SEC-2026-3444)
A vulnerability has been found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5 and classified as problematic. Affected by this issue is the function inet_getpeer of the component inetpeer. Performing a manipulation results in i
CVE-2026-90109 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 Network Scheduler gred_enqueue/bfifo_enqueue/plug_enqueue integer overflow (WID-SEC-2026-3444)
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. Affected by this vulnerability is the function gred_enqueue/bfifo_enqueue/plug_enqueue of the component Network Scheduler. Such ma
CVE-2026-90108 | Linux Kernel up to 7.2.5 SMC LLC Flow net/smc smc_llc_event_handler qentry allocation of resources (WID-SEC-2026-3444)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. This vulnerability affects the function smc_llc_event_handler of the file net/smc of the component SMC LLC Flow. Exec
CVE-2026-90107 | Linux Kernel up to 7.2.5 SMC LLC Flow net/smc smc_llc_flow_stop memory leak (WID-SEC-2026-3444)
A vulnerability described as problematic has been identified in Linux Kernel up to 7.2.5. Affected is the function smc_llc_flow_stop of the file net/smc of the component SMC LLC Flow. The manipulation results in memory leak. This vulnerabil
CVE-2025-62058 | favethemes Houzez Theme up to 4.2.0 on WordPress cross site scripting
A vulnerability classified as problematic has been found in favethemes Houzez Theme up to 4.2.0 on WordPress. This affects an unknown function. Performing a manipulation results in cross site scripting. This vulnerability is identified as C
CVE-2025-62025 | eyecix JobSearch Plugin up to 3.0.8 on WordPress deserialization
A vulnerability has been found in eyecix JobSearch Plugin up to 3.0.8 on WordPress and classified as critical. Affected by this issue is some unknown functionality. This manipulation causes deserialization. This vulnerability is registered
CVE-2025-62005 | FantasticPlugins SUMO Memberships for WooCommerce Plugin up to 7.8.0 on WordPress cross-site request forgery
A vulnerability described as problematic has been identified in FantasticPlugins SUMO Memberships for WooCommerce Plugin up to 7.8.0 on WordPress. This affects an unknown function. The manipulation results in cross-site request forgery. Thi
CVE-2025-59580 | GoodLayers Goodlayers Core Plugin up to 2.1.7 on WordPress privileges assignment
A vulnerability was found in GoodLayers Goodlayers Core Plugin up to 2.1.7 on WordPress. It has been classified as critical. Impacted is an unknown function. Performing a manipulation results in incorrect privilege assignment. This vulnerab
CVE-2025-59571 | purethemes WorkScout-Core Plugin up to 1.7.06 on WordPress cross site scripting
A vulnerability categorized as problematic has been discovered in purethemes WorkScout-Core Plugin up to 1.7.06 on WordPress. This affects an unknown function. The manipulation results in cross site scripting. This vulnerability was named C
CVE-2025-59564 | ThemeMove EduMall Plugin up to 4.4.5 on WordPress php file inclusion
A vulnerability labeled as critical has been found in ThemeMove EduMall Plugin up to 4.4.5 on WordPress. Impacted is an unknown function. Such manipulation leads to improper control of filename for include/require statement in php program.
CVE-2025-59558 | ThemeMove Billey Plugin up to 2.1.6 on WordPress php file inclusion
A vulnerability, which was classified as critical, has been found in ThemeMove Billey Plugin up to 2.1.6 on WordPress. The impacted element is an unknown function. The manipulation leads to improper control of filename for include/require s
CVE-2025-59555 | ThemeMove Medizin Plugin up to 1.9.7 on WordPress php file inclusion
A vulnerability was found in ThemeMove Medizin Plugin up to 1.9.7 on WordPress. It has been classified as critical. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in improper control of filenam
CVE-2025-59550 | designervily Xcare Plugin up to 6.5 on WordPress php file inclusion
A vulnerability was found in designervily Xcare Plugin up to 6.5 on WordPress and classified as critical. Affected is an unknown function. Such manipulation leads to improper control of filename for include/require statement in php program.
CVE-2025-58967 | ThemeMove Businext Plugin up to 2.4.4 on WordPress php file inclusion
A vulnerability classified as critical has been found in ThemeMove Businext Plugin up to 2.4.4 on WordPress. Impacted is an unknown function. Performing a manipulation results in improper control of filename for include/require statement in
CVE-2025-58966 | Basix NEX-Forms LITE Plugin up to 8.2 on WordPress cross site scripting
A vulnerability classified as problematic has been found in Basix NEX-Forms LITE Plugin up to 8.2 on WordPress. Affected is an unknown function. Performing a manipulation results in cross site scripting. This vulnerability is cataloged as C
CVE-2025-61581 | Apache Traffic Control Traffic Router redos
A vulnerability has been found in Apache Traffic Control and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Traffic Router. Performing a manipulation results in inefficient regular exp
CVE-2025-58963 | 7oroof Medcity Plugin up to 1.1.9 on WordPress unrestricted upload
A vulnerability described as critical has been identified in 7oroof Medcity Plugin up to 1.1.9 on WordPress. This impacts an unknown function. Such manipulation leads to unrestricted upload. This vulnerability is listed as CVE-2025-58963. T
CVE-2025-58958 | ThemeMove SmilePure Plugin up to 1.8.5 on WordPress php file inclusion
A vulnerability classified as critical was found in ThemeMove SmilePure Plugin up to 1.8.5 on WordPress. The affected element is an unknown function. Executing a manipulation can lead to improper control of filename for include/require stat
CVE-2025-58955 | designervily Karzo Plugin up to 2.6 on WordPress php file inclusion (EUVD-2025-35452)
A vulnerability marked as critical has been reported in designervily Karzo Plugin up to 2.6 on WordPress. The affected element is an unknown function. Performing a manipulation results in improper control of filename for include/require sta
CVE-2025-49936 | xtemos WoodMart Plugin up to 8.3.2 on WordPress cross site scripting
A vulnerability was found in xtemos WoodMart Plugin up to 8.3.2 on WordPress. It has been declared as problematic. Impacted is an unknown function. Such manipulation leads to cross site scripting. This vulnerability is referenced as CVE-202
CVE-2025-49935 | xtemos WoodMart Plugin up to 8.3.2 on WordPress php file inclusion
A vulnerability categorized as critical has been discovered in xtemos WoodMart Plugin up to 8.3.2 on WordPress. This vulnerability affects unknown code. The manipulation results in improper control of filename for include/require statement
CVE-2025-49901 | quantumcloud Simple Link Directory Plugin up to 14.8.1 on WordPress authentication bypass
A vulnerability was found in quantumcloud Simple Link Directory Plugin up to 14.8.1 on WordPress. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to authentication bypass using alternate cha
CVE-2025-11715 | Mozilla Thunderbird up to 143 memory corruption (EUVD-2025-34200 / Nessus ID 270625)
A vulnerability classified as critical has been found in Mozilla Thunderbird up to 143. Affected by this vulnerability is an unknown functionality. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2025-11715.
Gefährliche PHP-Sicherheitslücke: Experte warnt vor Vorteil für Hacker | Nachrichten.at
Die schwerwiegende Sicherheitslücke in der Programmiersprache PHP ist nach Ansicht eines Experten der Cyberagentur des Bundes in Deutschland ein ... Weiterlesen
CVE-2025-40774 | Siemens SiPass integrated up to 2.x password recoverable (ssa-599451)
A vulnerability has been found in Siemens SiPass integrated up to 2.x and classified as problematic. This impacts an unknown function. The manipulation leads to storing passwords in a recoverable format. This vulnerability is referenced as
CVE-2025-40771 | Siemens SIMATIC CP 1542SP-1 prior 2.4.24 missing authentication (ssa-486936)
A vulnerability classified as critical was found in Siemens SIMATIC CP 1542SP-1, SIMATIC CP 1542SP-1 IRC, SIMATIC CP 1543SP-1, SIPLUS ET 200SP CP 1542SP-1 IRC TX RAIL, SIPLUS ET 200SP CP 1543SP-1 ISEC and SIPLUS ET 200SP CP 1543SP-1 ISEC TX
CVE-2025-11573 | Amazon Amazon.IonDotnet up to 1.3.1 improper validation of syntactic correctness of input (GHSA-q5r6-9qwq-g2wj)
A vulnerability identified as problematic has been detected in Amazon Amazon.IonDotnet up to 1.3.1. This affects an unknown part. The manipulation leads to improper validation of syntactic correctness of input. This vulnerability is documen
CVE-2025-11184 | qwc-services qwc-registration-gui up to 2025.03.31 cross site scripting (ntcf-2025-7724)
A vulnerability classified as problematic has been found in qwc-services qwc-registration-gui up to 2025.03.31. This impacts an unknown function. This manipulation causes cross site scripting. This vulnerability is tracked as CVE-2025-11184
CVE-2025-54289 | Canonical LXD up to 5.21.3/6.4 Operations API missing origin validation in websockets (EUVD-2025-32096 / Nessus ID 270713)
A vulnerability labeled as problematic has been found in Canonical LXD up to 5.21.3/6.4. This vulnerability affects unknown code of the component Operations API. Such manipulation leads to missing origin validation in websockets. This vulne
CVE-2025-10537 | Mozilla Firefox up to 142 memory corruption (EUVD-2025-29557 / Nessus ID 265341)
A vulnerability was found in Mozilla Firefox. It has been classified as critical. The impacted element is an unknown function. Performing a manipulation results in memory corruption. This vulnerability is identified as CVE-2025-10537. The a
CVE-2025-10536 | Mozilla Firefox up to 142 information disclosure (Nessus ID 265350 / WID-SEC-2025-2074)
A vulnerability was found in Mozilla Firefox up to 142 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation results in information disclosure. This vulnerability was named CVE-2025-10536. The
CVE-2025-10533 | Mozilla Firefox up to 142 integer overflow (Nessus ID 265350 / WID-SEC-2025-2074)
A vulnerability classified as problematic was found in Mozilla Firefox up to 142. This affects an unknown function. Such manipulation leads to integer overflow. This vulnerability is traded as CVE-2025-10533. Access to the local network is
CVE-2025-10532 | Mozilla Firefox up to 142 unusual condition (Nessus ID 265341 / WID-SEC-2025-2074)
A vulnerability, which was classified as problematic, has been found in Mozilla Firefox up to 142. This impacts an unknown function. Performing a manipulation results in improper check for unusual conditions. This vulnerability is known as
CVE-2025-10529 | Mozilla Firefox up to 142 cross-domain policy (Nessus ID 265341 / WID-SEC-2025-2074)
A vulnerability described as problematic has been identified in Mozilla Firefox up to 142. The affected element is an unknown function. The manipulation results in permissive cross-domain policy with untrusted domains. This vulnerability is
CVE-2025-10528 | Mozilla Firefox up to 142 protection mechanism (Nessus ID 265341 / WID-SEC-2025-2074)
A vulnerability marked as problematic has been reported in Mozilla Firefox up to 142. Impacted is an unknown function. The manipulation leads to protection mechanism failure. This vulnerability is documented as CVE-2025-10528. The attack re
CVE-2025-10527 | Mozilla Firefox up to 142 use after free (Nessus ID 265341 / WID-SEC-2025-2074)
A vulnerability labeled as problematic has been found in Mozilla Firefox up to 142. This issue affects some unknown processing. Executing a manipulation can lead to use after free. This vulnerability is registered as CVE-2025-10527. The att
CVE-2023-32391 | Apple watchOS up to 9.4 Shortcuts access control (HT213764 / EUVD-2023-36635)
A vulnerability was found in Apple watchOS up to 9.4. It has been classified as problematic. The impacted element is an unknown function of the component Shortcuts. The manipulation leads to improper access controls. This vulnerability is u
BeyondTrust-Lücke: CVSS 9,3, seit August ausgenutzt [2026] - shattered.io
Weitere Warnmeldungen bündelt die Rubrik Cybersicherheit. Cisco Secure Email Gateway: Zweiter Zero-Day in einer Woche. Am 14. Oktober 2026 ... Weiterlesen
CVE-2026-105164 | NASA cFS up to 7.0.1 cfe_fs_api.c CFE_FS_ParseInputFileNameEx out-of-bounds (Issue 893 / EUVD-2026-92130)
A vulnerability has been found in NASA cFS up to 7.0.1 and classified as problematic. This issue affects the function CFE_FS_ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe_fs_api.c. This manipulation causes out-of-bounds read.
Oktober 2026: Erneuter Rekord-Patchday mit 1.415 Microsoft-CVEs - B2B Cyber Security
... Server, Network Policy Server, Windows Error Reporting und Remote Desktop Gateway. Anzeige. Die wichtigsten Microsoft-Schwachstellen. CVE-2026-96951 ... Weiterlesen
CVE-2026-116044 | A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the component Remote URL File Upload Module. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the component Remote URL File Upload Module. The manipulation leads
CVE-2026-116007 | A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The impacted element is the function SmsCodeServiceImpl.validateSmsCode0 of the file /service/sms/SmsCodeServiceImpl.java of the component SMS Code Verification. This manipulation causes improper restriction of excessive authentication attempts. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitability is regarded as difficult. The exploit ha
A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The impacted element is the function SmsCodeServiceImpl.validateSmsCode0 of the file /service/sms/SmsCodeServiceImpl.java of the component SMS Code Verification. Thi
CVE-2026-116006 | A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function of the file AuthController.java of the component SMS Code Verification. The manipulation of the argument mobile/code results in improper authentication. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function of the file AuthController.java of the component SMS Code Verification. The manipulation of the argument mobile/co
CVE-2026-116004 | A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx. The manipulation leads to cross site scripting. The attack ca
CVE-2026-116000 | A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_from_uri of the file private_gpt/server/ingest/uri_loader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early abou
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_from_uri of the file private_gpt/server/ingest/uri_loader.py of the component URI Artifact Loader. Performing a manipulat
CVE-2026-115999 | A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqli_connect of the file lsmodal.php. The manipulation of the argument login_id/epsw leads to sql injection. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about
A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqli_connect of the file lsmodal.php. The manipulation of the argument login_id/epsw leads to sql injection. Remot
CVE-2026-115997 | A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/data/resolver/SqlFilterArgumentResolver.java. Executing a manipulation of the argument ascs/descs can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used. Upgrading to version 4.1.1 will fix this issue. This patch is called 9b631116
A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/data/resolver/SqlFilterArgumentResolver.java. Executing a manipul
CVE-2026-115996 | A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function WebSocketClient.connect of the file websocket.py of the component chat_go. Performing a manipulation results in improper certificate validation. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitability is reported as difficult. The vendor confirmed early: "These issues were previously submitted by th
A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function WebSocketClient.connect of the file websocket.py of the component chat_go. Performing a manipulation results in improper
CVE-2026-115995 | A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the component chat_go. Such manipulation of the argument Value leads to os command injection. The attack can be launched remotely. Upgrading to version 1.1.11.5 is sufficient to resolve this issue. You should upgrade the affected component. The vendor confirmed early: "Submission 990502 corres
A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the component chat_go. Such manipulation of the argument Value leads to
CVE-2026-115982 | A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file app/tools/racks/show-rack-popup.php of the component Rack Link Creation. Performing a manipulation of the argument deviceid results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file app/tools/racks/show-rack-popup.php of the component Rack Link Creation. Performing a manipulation of the argument devi
CVE-2026-115981 | A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown functionality of the file upgrade/index.php. Such manipulation of the argument REQUEST_URI leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown functionality of the file upgrade/index.php. Such manipulation of the argument REQUEST_URI leads to cross site scripting. The at
CVE-2026-114820 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and 21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with ne
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17
CVE-2026-115973 | A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of the file app/Http/Controllers/Auth/ForgotPasswordController.php. The manipulation leads to weak password recovery. The attack may be initiated remotely. The vendor was contacted early about this disclosure.
A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of the file app/Http/Controllers/Auth/ForgotPasswordController.
CVE-2026-115972 | A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthController.close/UnAuthController.open/UnAuthController.resolve of the file app/Http/Controllers/Client/helpdesk/UnAuthController.php. Executing a manipulation of the argument id/status can lead to missing authorization. The attack can be launched remotely. The vendor was contacted early about this disclo
A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthController.close/UnAuthController.open/UnAuthController.resolve of the file app/Http
CVE-2026-115971 | A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the file /api/channels/webhook/ of the component preParsing handler. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made public and could be used. The project has been completely taken offline and deprecated. The project maintainer explains: "The mentioned security risk was a design flaw that manif
A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the file /api/channels/webhook/ of the component preParsing handler. Performing a manipulation results in denial of service. The attack can be in