Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 730 | 0,2 % |
| ≥50 % | 3.213 | 0,9 % |
| ≥10 % | 22.091 | 5,9 % |
| <10 % | 347.698 | 93,0 % |
CVE-2026-90209 | Linux Kernel up to 7.2.5 s390dbf debug_unregister deadlock (WID-SEC-2026-3444)
A vulnerability identified as problematic has been detected in Linux Kernel up to 7.2.5. Affected by this issue is the function debug_unregister of the component s390dbf. Performing a manipulation results in deadlock. This vulnerability is
CVE-2026-90208 | Linux Kernel up to 7.2.5 Samsung PWM Timer samsung_pwm locking (WID-SEC-2026-3444)
A vulnerability described as very critical has been identified in Linux Kernel up to 7.2.5. Affected by this issue is some unknown functionality of the file samsung_pwm of the component Samsung PWM Timer. Executing a manipulation can lead t
CVE-2026-90207 | Linux Kernel up to 7.2.5 ALSA MIDI snd_midi_input_event rmidi null pointer dereference (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. It has been declared as problematic. The affected element is the function snd_midi_input_event of the component ALSA MIDI. Executing a manipulation of t
CVE-2026-90206 | Linux Kernel up to 7.2.5 nvmet nvmet_alloc_ctrl out-of-bounds (WID-SEC-2026-3444)
A vulnerability labeled as very critical has been found in Linux Kernel up to 7.2.5. Affected is the function nvmet_alloc_ctrl of the component nvmet. Such manipulation leads to out-of-bounds read. This vulnerability is traded as CVE-2026-9
CVE-2026-90205 | Linux Kernel up to 6.18.51/7.2.5 ocfs2 fs/ocfs2/sysfile.c ocfs2_validate_inode_block max_slots use after free (WID-SEC-2026-3444)
A vulnerability marked as very critical has been reported in Linux Kernel up to 6.18.51/7.2.5. The affected element is the function ocfs2_validate_inode_block of the file fs/ocfs2/sysfile.c of the component ocfs2. This manipulation of the a
CVE-2026-90204 | Linux Kernel up to 6.18.51/7.2.5 ocfs2 fs/ocfs2/sysfile.c ocfs2_del_inode_from_orphan use after free (WID-SEC-2026-3444)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.18.51/7.2.5. Impacted is the function ocfs2_del_inode_from_orphan of the file fs/ocfs2/sysfile.c of the component ocfs2. The manipulation results in use after free.
CVE-2026-90203 | Linux Kernel up to 7.2.5 Squashfs squashfs_copy_data out-of-bounds (WID-SEC-2026-3444)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 7.2.5. Affected by this vulnerability is the function squashfs_copy_data of the component Squashfs. Such manipulation leads to out-of-bounds read. This vulner
CVE-2026-90202 | Linux Kernel up to 7.2.5 mpt3sas _base_release_memory_pools null pointer dereference (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been rated as critical. Affected is the function _base_release_memory_pools of the component mpt3sas. This manipulation causes null pointer dereference. This vulnerability is reg
CVE-2026-90200 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ntfs3 fs/ntfs3/run.c ntfs_init_from_boot mlcn/mlcn2 integer overflow (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. It has been declared as critical. This impacts the function ntfs_init_from_boot of the file fs/ntfs3/run.c of the component ntfs3. The manipulation of the argum
CVE-2026-90199 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ntfs3 fs/ntfs3 mi_enum_attr integer overflow (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. It has been classified as critical. This affects the function mi_enum_attr of the file fs/ntfs3 of the component ntfs3. The manipulation leads to integer overfl
CVE-2026-90198 | Linux Kernel up to 7.2.5 ALSA Core sound/core/init.c snd_card_do_free use after free (WID-SEC-2026-3444)
A vulnerability has been found in Linux Kernel up to 7.2.5 and classified as critical. This vulnerability affects the function snd_card_do_free of the file sound/core/init.c of the component ALSA Core. This manipulation causes use after fre
CVE-2026-5650 | code-projects Online Application System for Admission 1.0 oas.sql sensitive information
A vulnerability was found in code-projects Online Application System for Admission 1.0. It has been classified as critical. Impacted is an unknown function of the file /enrollment/database/oas.sql. Performing a manipulation results in insec
CVE-2026-34951 | forceworkbench up to 64.x Error Page footerScripts cross site scripting (GHSA-j94x-h584-rjf9)
A vulnerability classified as problematic was found in forceworkbench up to 64.x. This affects an unknown part of the component Error Page. Such manipulation of the argument footerScripts leads to cross site scripting. This vulnerability is
CVE-2026-34885 | David Lingren Media LIbrary Assistant Plugin up to 3.34 on WordPress sql injection
A vulnerability described as critical has been identified in David Lingren Media LIbrary Assistant Plugin up to 3.34 on WordPress. The affected element is an unknown function. Executing a manipulation can lead to sql injection. This vulnera
CVE-2026-34729 | thorsten phpMyFAQ up to 4.1.0 Filter::removeAttributes cross site scripting (GHSA-cv2g-8cj8-vgc7)
A vulnerability, which was classified as problematic, was found in thorsten phpMyFAQ up to 4.1.0. The affected element is the function Filter::removeAttributes. The manipulation results in cross site scripting. This vulnerability was named
CVE-2026-33616 | MB connect line mbCONNECT24/mymbCONNECT24 up to 2.19.4 mb24api Endpoint sql injection (VDE-2026-030)
A vulnerability was found in MB connect line mbCONNECT24 and mymbCONNECT24 up to 2.19.4. It has been rated as critical. This affects an unknown part of the component mb24api Endpoint. The manipulation leads to sql injection. This vulnerabil
CVE-2026-28805 | devcode-it openstamanager up to 2.10.1 GET Parameter superselect['stato'] sql injection (GHSA-3gw8-3mg3-jmpc)
A vulnerability identified as critical has been detected in devcode-it openstamanager up to 2.10.1. The impacted element is an unknown function of the component GET Parameter Handler. Performing a manipulation of the argument superselect[&#
CVE-2026-21382 | Qualcomm Snapdragon Compute/Snapdragon Industrial IOT up to XG101039 buffer overflow
A vulnerability identified as critical has been detected in Qualcomm Snapdragon Compute and Snapdragon Industrial IOT. This impacts an unknown function. The manipulation leads to buffer overflow. This vulnerability is referenced as CVE-2026
CVE-2026-21380 | Qualcomm Snapdragon Compute/Snapdragon Industrial IOT up to XG101039 IOCTL Call use after free
A vulnerability was found in Qualcomm Snapdragon Compute and Snapdragon Industrial IOT. It has been rated as critical. The impacted element is an unknown function of the component IOCTL Call Handler. Performing a manipulation results in use
CVE-2026-21372 | Qualcomm Snapdragon Compute up to XG101039 IOCTL Request heap-based overflow
A vulnerability was found in Qualcomm Snapdragon Compute, Snapdragon Industrial IOT and Snapdragon Mobile. It has been rated as critical. This issue affects some unknown processing of the component IOCTL Request Handler. This manipulation c
CVE-2026-34750 | payloadcms payload up to 3.77.x URL Endpoint path traversal (GHSA-frq9-7j6g-v74x)
A vulnerability has been found in payloadcms payload up to 3.77.x and classified as critical. This affects an unknown part of the component URL Endpoint. This manipulation causes path traversal. This vulnerability appears as CVE-2026-34750.
CVE-2026-34568 | ci4-cms-erp ci4ms 0.28.5.0 cross site scripting (GHSA-x7wh-g25g-53vg)
A vulnerability described as problematic has been identified in ci4-cms-erp ci4ms 0.28.5.0. This impacts an unknown function. Executing a manipulation can lead to cross site scripting. The identification of this vulnerability is CVE-2026-34
CVE-2026-32925 | Fuji Electric V-SFT up to 6.2.10.0 WriteV7DataToRom stack-based overflow
A vulnerability was found in Fuji Electric V-SFT up to 6.2.10.0. It has been classified as critical. The impacted element is the function CV7BaseMap::WriteV7DataToRom. The manipulation leads to stack-based buffer overflow. This vulnerabilit
CVE-2026-2475 | IBM Verify Identity Access Container up to 11.0.2 Request redirect
A vulnerability classified as problematic was found in IBM Verify Identity Access Container, Security Verify Access Container, Verify Identity Access and Security Verify Access up to 11.0.2. Impacted is an unknown function of the component
CVE-2026-4972 | code-projects Online Reviewer System up to 1.0 btn_functions.php description cross site scripting (EUVD-2026-16805)
A vulnerability categorized as problematic has been discovered in code-projects Online Reviewer System up to 1.0. Affected is an unknown function of the file /system/system/students/assessments/databank/btn_functions.php. Such manipulation
CVE-2026-4961 | Tenda AC6 15.03.05.16 POST Request /goform/QuickIndex formQuickIndex PPPOEPassword stack-based overflow
A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. The manipulation
CVE-2026-34388 | fleetdm fleet up to 4.80.x RPC Launcher Endpoint improper check or handling of exceptional conditions (GHSA-w254-4hp5-7cvv)
A vulnerability categorized as problematic has been discovered in fleetdm fleet up to 4.80.x. Affected is an unknown function of the component RPC Launcher Endpoint. The manipulation results in improper check or handling of exceptional cond
CVE-2026-33882 | Statamic CMS up to 5.73.15/6.7.1 Markdown Preview Endpoint improper authentication (GHSA-cvh3-23vq-w7h4)
A vulnerability classified as critical was found in Statamic CMS up to 5.73.15/6.7.1. Affected by this vulnerability is an unknown functionality of the component Markdown Preview Endpoint. Executing a manipulation can lead to improper authe
CVE-2026-33874 | Gematik app-Authenticator up to 4.15.x on macOS File os command injection (GHSA-mjgm-7hwc-qqcr)
A vulnerability was found in Gematik app-Authenticator up to 4.15.x on macOS. It has been rated as critical. This issue affects some unknown processing of the component File Handler. Performing a manipulation results in os command injection
CVE-2026-26060 | fleetdm fleet up to 4.80.x Password Reset Token session expiration (GHSA-3458-r943-hmx4)
A vulnerability was found in fleetdm fleet up to 4.80.x. It has been declared as critical. This affects an unknown function of the component Password Reset Token Handler. Executing a manipulation can lead to session expiration. This vulnera
CVE-2026-90197 | Linux Kernel up to 6.18.51/7.2.5 HID haptic fill_effect_buf uninitialized variable (WID-SEC-2026-3444)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.18.51/7.2.5. Affected by this issue is the function fill_effect_buf of the component HID haptic. The manipulation leads to use of uninitialized v
CVE-2026-90196 | Linux Kernel up to 7.2.5 SOF integer overflow (WID-SEC-2026-3444)
A vulnerability classified as problematic was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. Affected by this vulnerability is an unknown functionality of the component SOF. Executing a manipulation can lead to integer
CVE-2026-90195 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 BPF JIT input validation (WID-SEC-2026-3444)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. This impacts an unknown function of the component BPF JIT. Performing a manipulation results in improper input validation. This
CVE-2026-90194 | Linux Kernel up to 7.2.5 ACPI acpi_device_cleanup allocation of resources (WID-SEC-2026-3444)
A vulnerability classified as critical has been found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. Affected is the function acpi_device_cleanup of the component ACPI. Performing a manipulation results in allocation of resou
CVE-2026-90193 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 qcom-cpucp qcom_cpucp_mbox_irq_fn deadlock (WID-SEC-2026-3444)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. This affects the function qcom_cpucp_mbox_irq_fn of the component qcom-cpucp. The manipulation results in deadlock. This vulnerabilit
CVE-2026-90192 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 qcom-cpucp qcom_cpucp_mbox_send_data null pointer dereference (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. It has been declared as critical. This vulnerability affects the function qcom_cpucp_mbox_send_data of the component qcom-cpucp. Such manipulation leads to null pointer
CVE-2026-90191 | Linux Kernel up to 6.18.51/7.2.5 mailbox buffer over-read (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.18.51/7.2.5. It has been classified as critical. This affects an unknown part of the component mailbox. This manipulation causes buffer over-read. This vulnerability is registered as CVE-202
CVE-2026-90190 | Linux Kernel up to 7.2.5 null_blk null_init race condition (WID-SEC-2026-3444)
A vulnerability described as problematic has been identified in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. This impacts the function null_init of the component null_blk. Such manipulation leads to race condition. This vulner
CVE-2026-90189 | Linux Kernel up to 7.2.5 null_blk block/genhd.c null_init use after free (WID-SEC-2026-3444)
A vulnerability classified as critical was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. This affects the function null_init of the file block/genhd.c of the component null_blk. Such manipulation leads to use after fre
CVE-2026-90188 | Linux Kernel up to 7.2.5 null_blk null_setup_tagset allocation of resources (WID-SEC-2026-3444)
A vulnerability marked as very critical has been reported in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. This affects the function null_setup_tagset of the component null_blk. This manipulation causes allocation of resources.
CVE-2026-90187 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 null_blk null_del_dev memory leak (WID-SEC-2026-3444)
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.109/6.18.51/7.2.5. The impacted element is the function null_del_dev of the component null_blk. The manipulation results in memory leak. This vulnerability is
CVE-2026-90186 | Linux Kernel up to 7.2.5 null_blk main.c nullb_update_nr_hw_queues null pointer dereference (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5 and classified as problematic. Affected by this issue is the function nullb_update_nr_hw_queues of the file drivers/block/null_blk/main.c of the componen
CVE-2026-90185 | Linux Kernel up to 7.2.5 null_blk power_store race condition (WID-SEC-2026-3444)
A vulnerability has been found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5 and classified as critical. Affected by this vulnerability is the function power_store of the component null_blk. The manipulation leads to race con
CVE-2026-90184 | Linux Kernel up to 7.2.5 null_blk block/blk-zoned.c nullb_device_power_store zoned/zones race condition (WID-SEC-2026-3444)
A vulnerability classified as problematic has been found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. The impacted element is the function nullb_device_power_store of the file block/blk-zoned.c of the component null_blk. Th
CVE-2026-90183 | Linux Kernel up to 7.2.5 blk-iolatency iolatency_pd_free use_delay/congestion_count denial of service (WID-SEC-2026-3444)
A vulnerability identified as critical has been detected in Linux Kernel up to 7.2.5. The affected element is the function iolatency_pd_free of the component blk-iolatency. The manipulation of the argument use_delay/congestion_count leads t
CVE-2026-90182 | Linux Kernel up to 7.2.5 blk-iocost ioc_pd_free race condition (WID-SEC-2026-3444)
A vulnerability categorized as problematic has been discovered in Linux Kernel up to 7.2.5. Impacted is the function ioc_pd_free of the component blk-iocost. Executing a manipulation can lead to race condition. This vulnerability appears as
CVE-2026-90181 | Linux Kernel up to 7.2.5 ublk __ublk_shmem_remove_ranges infinite loop (WID-SEC-2026-3444)
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 7.2.5. Affected is the function __ublk_shmem_remove_ranges of the component ublk. Executing a manipulation can lead to infinite loop. This vulnerability i
CVE-2026-90180 | Linux Kernel up to 7.2.5 block mtip_hw_ioctl use after free (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. It has been rated as very critical. This issue affects the function mtip_hw_ioctl of the component block. Performing a manipulation results in use after
CVE-2026-90179 | Linux Kernel up to 6.18.51/7.2.5 AppArmor change_hat deadlock (WID-SEC-2026-3444)
A vulnerability described as critical has been identified in Linux Kernel up to 6.18.51/7.2.5. The affected element is the function change_hat of the component AppArmor. The manipulation results in deadlock. This vulnerability was named CVE
CVE-2026-90178 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 hwmon coretemp_device_remove allocation of resources (WID-SEC-2026-3444)
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.12.109/6.18.51/7.2.5. This vulnerability affects the function coretemp_device_remove of the component hwmon. Performing a manipulation results in allocation
CVE-2026-90177 | Linux Kernel up to 7.2.5 bpf input validation (WID-SEC-2026-3444)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 7.2.5. This affects an unknown part of the component bpf. Such manipulation leads to improper input validation. This vulnerability is traded as CVE-2026-
CVE-2026-90176 | Linux Kernel up to 7.2.5 ksmbd check_lock_range locking (WID-SEC-2026-3444)
A vulnerability classified as very critical was found in Linux Kernel up to 6.1.187/6.6.156/6.12.109/6.18.51/7.2.5. Impacted is the function check_lock_range of the component ksmbd. The manipulation results in improper locking. This vulnera
CVE-2026-90175 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd ksmbd_ipc_login_request_ext memory leak (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. It has been rated as critical. Affected by this issue is the function ksmbd_ipc_login_request_ext of the component ksmbd. This manipulation causes memory leak.
CVE-2026-90174 | Linux Kernel up to 7.2.5 ksmbd ksmbd_alloc_user hash_sz out-of-bounds (WID-SEC-2026-3444)
A vulnerability labeled as critical has been found in Linux Kernel up to 7.2.5. Affected by this issue is the function ksmbd_alloc_user of the component ksmbd. Such manipulation of the argument hash_sz leads to out-of-bounds read. This vuln
CVE-2026-90173 | Linux Kernel up to 7.2.5 smbdirect ib_free_cq use after free (WID-SEC-2026-3444)
A vulnerability identified as very critical has been detected in Linux Kernel up to 7.2.5. Affected by this vulnerability is the function ib_free_cq of the component smbdirect. This manipulation causes use after free. This vulnerability is
CVE-2026-90172 | Linux Kernel up to 7.2.5 smbdirect mm/slub.c smbdirect_accept_connect_request null pointer dereference (WID-SEC-2026-3444)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 7.2.5. Affected is the function smbdirect_accept_connect_request of the file mm/slub.c of the component smbdirect. The manipulation results in null pointer de
CVE-2026-90170 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd ipc_validate_msg out-of-bounds (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. It has been rated as critical. This impacts the function ipc_validate_msg of the component ksmbd. The manipulation leads to out-of-bounds read. This vulnerabili
CVE-2026-90169 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd memory leak (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5. It has been declared as critical. This affects an unknown function of the component ksmbd. Executing a manipulation can lead to memory leak. This vulnerability
CVE-2026-90168 | Linux Kernel up to 7.2.5 ksmbd ksmbd_free_work_struct improper synchronization (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been declared as very critical. Affected by this vulnerability is the function ksmbd_free_work_struct of the component ksmbd. The manipulation results in improper synchronization
CVE-2026-90167 | Linux Kernel up to 7.2.5 ksmbd test_and_set_bit race condition (WID-SEC-2026-3444)
A vulnerability was found in Linux Kernel up to 7.2.5. It has been classified as very critical. Affected is the function test_and_set_bit of the component ksmbd. The manipulation leads to race condition. This vulnerability is documented as