Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | 2026-08-30 | 2026-09-18 |
|---|---|---|
| ≥90 % | 0 | 0 |
| ≥50 % | 0 | 0 |
| ≥10 % | 0 | 0 |
| <10 % | 300 | 300 |
Orkes Conductor: kritische RCE-Lücke wird aktiv ausgenutzt – Update dringend
LONDON (IT BOLTWISE) – Eine kritische Sicherheitslücke in Orkes Conductor wird laut Fortinet aktiv ausgenutzt. Betroffen ist CVE-2026-58138 mit 9,8 (CVSS v3.1) bzw. 9,3 (CVSS v4) und einer unauthentifizierten Remote-Code-Execution vor der A
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthe
CVE-2026-88926 | VikRentItems Flexible Rental Management System Plugin sql injection (EUVD-2026-83508)
A vulnerability has been found in VikRentItems Flexible Rental Management System Plugin up to 1.2.3 on WordPress and classified as critical. The impacted element is an unknown function. Performing a manipulation results in sql injection. Th
CVE-2026-92099 | WPGraphQL Smart Cache Plugin up to 2.3.1 on WordPress access control (EUVD-2026-83510)
A vulnerability was found in WPGraphQL Smart Cache Plugin up to 2.3.1 on WordPress. It has been classified as problematic. This impacts an unknown function. The manipulation leads to improper access controls. This vulnerability is uniquely
CVE-2026-91847 | Online Scheduling and Appointment Booking System Plugin authorization (EUVD-2026-83509)
A vulnerability was found in Online Scheduling and Appointment Booking System Plugin up to 28.1 on WordPress and classified as critical. This affects an unknown function. Executing a manipulation can lead to authorization bypass. This vulne
CVE-2026-92404 | MgoSync Plugin up to 2.1.6 on WordPress REST API Endpoint information disclosure (EUVD-2026-83512)
A vulnerability labeled as problematic has been found in MgoSync Plugin up to 2.1.6 on WordPress. Affected by this vulnerability is an unknown functionality of the component REST API Endpoint. Such manipulation leads to information disclosu
CVE-2026-92403 | Secure Custom Fields Plugin up to 6.9.3 on WordPress authorization (EUVD-2026-83511)
A vulnerability identified as problematic has been detected in Secure Custom Fields Plugin up to 6.9.3 on WordPress. Affected is an unknown function. This manipulation causes incorrect authorization. This vulnerability is tracked as CVE-202
CVE-2026-92421 | Hydra Booking Plugin up to 1.2.2 on WordPress authorization (EUVD-2026-83514)
A vulnerability was found in Hydra Booking Plugin up to 1.2.2 on WordPress. It has been rated as critical. Affected by this vulnerability is an unknown functionality. This manipulation causes authorization bypass. The identification of this
CVE-2026-92420 | Hydra Booking Plugin up to 1.2.1 on WordPress authorization (EUVD-2026-83513)
A vulnerability was found in Hydra Booking Plugin up to 1.2.1 on WordPress. It has been declared as problematic. Affected is an unknown function. The manipulation results in authorization bypass. This vulnerability was named CVE-2026-92420.
CVE-2026-92430 | Rede Itaú for WooCommerce Plugin up to 5.4.6 on WordPress authorization (EUVD-2026-83516)
A vulnerability described as problematic has been identified in Rede Itaú for WooCommerce Plugin up to 5.4.6 on WordPress. This affects an unknown part. Executing a manipulation can lead to missing authorization. This vulnerability is regis
CVE-2026-92425 | Hydra Booking Plugin up to 1.2.3 on WordPress authorization (EUVD-2026-83515)
A vulnerability marked as problematic has been reported in Hydra Booking Plugin up to 1.2.3 on WordPress. Affected by this issue is some unknown functionality. Performing a manipulation results in authorization bypass. This vulnerability is
CVE-2026-92435 | WooCommerce Mailchimp for WooCommerce Plugin up to 6.1.0 on WordPress Permission Callback authorization (EUVD-2026-83517)
A vulnerability marked as critical has been reported in WooCommerce Mailchimp for WooCommerce Plugin up to 6.1.0 on WordPress. This issue affects some unknown processing of the component Permission Callback. The manipulation leads to missin
CVE-2026-93741 | Totolink A3002MU Hh-B20211125.1046 /boafrm/formWlWds submit-url buffer overflow (EUVD-2026-83497)
A vulnerability labeled as very critical has been found in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in bu
CVE-2026-65381 | Apple macOS up to 15.7/26/26.6 Entitlement Verification sandbox
A vulnerability was found in Apple macOS up to 15.7/26/26.6 and classified as critical. This affects an unknown function of the component Entitlement Verification. Such manipulation leads to sandbox issue. This vulnerability is uniquely ide
CVE-2026-65377 | Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS prior 26.7/27/15.8 memory corruption
A vulnerability, which was classified as very critical, has been found in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS. Impacted is an unknown function. The manipulation leads to memory corruption. This vulnerability is traded as CV
CVE-2026-65376 | Apple macOS up to 15.7/26/26.6 out-of-bounds
A vulnerability classified as problematic was found in Apple macOS up to 15.7/26/26.6. This issue affects some unknown processing. Executing a manipulation can lead to out-of-bounds read. This vulnerability appears as CVE-2026-65376. The at
CVE-2026-65375 | Apple macOS up to 15.7/26/26.5 improper authentication
A vulnerability classified as problematic has been found in Apple macOS up to 15.7/26/26.5. This vulnerability affects unknown code. Performing a manipulation results in improper authentication. This vulnerability is reported as CVE-2026-65
CVE-2026-65369 | Apple macOS up to 15.7/26/26.6 Gatekeeper state issue
A vulnerability was found in Apple macOS up to 15.7/26/26.6. It has been declared as very critical. The impacted element is an unknown function of the component Gatekeeper. Such manipulation leads to state issue. This vulnerability is refer
CVE-2026-65371 | Apple iPadOS/iOS/macOS/tvOS/visionOS/watchOS Kernel information disclosure
A vulnerability labeled as problematic has been found in Apple iPadOS, iOS, macOS, tvOS, visionOS and watchOS. Affected by this vulnerability is an unknown functionality of the component Kernel. The manipulation results in information discl
CVE-2026-65360 | Apple iPadOS/iOS/macOS/tvOS/visionOS/watchOS prior 26.7/15.8/27 race condition
A vulnerability classified as problematic was found in Apple iPadOS, iOS, macOS, tvOS, visionOS and watchOS. Affected by this issue is some unknown functionality. Such manipulation leads to race condition. This vulnerability is traded as CV
CVE-2026-65361 | Apple macOS up to 15.7/26/26.6 information disclosure
A vulnerability, which was classified as problematic, was found in Apple macOS up to 15.7/26/26.6. This vulnerability affects unknown code. Executing a manipulation can lead to information disclosure. This vulnerability is handled as CVE-20
CVE-2026-65359 | Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS prior 26.7/27/15.8/Golden Gate 27/Tahoe 26.7 out-of-bounds
A vulnerability was found in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS. It has been classified as problematic. This vulnerability affects unknown code. The manipulation leads to out-of-bounds read. This vulnerability is reference
CVE-2026-65358 | Apple iPadOS/iOS/macOS/tvOS/visionOS/watchOS prior 27 race condition
A vulnerability classified as problematic has been found in Apple iPadOS, iOS, macOS, tvOS, visionOS and watchOS. Affected by this vulnerability is an unknown functionality. This manipulation causes race condition. This vulnerability appear
CVE-2026-65378 | Apple macOS up to 15.7/26/26.6 privileges management
A vulnerability, which was classified as problematic, was found in Apple macOS up to 15.7/26/26.6. The affected element is an unknown function. The manipulation results in improper privilege management. This vulnerability is known as CVE-20
CVE-2026-65357 | Apple iPadOS/iOS/macOS/tvOS/visionOS/watchOS up to 26.5 memory corruption
A vulnerability was found in Apple iPadOS, iOS, macOS, tvOS, visionOS and watchOS up to 26.5 and classified as very critical. This affects an unknown part. Executing a manipulation can lead to memory corruption. The identification of this v
CVE-2022-44431 | Unisoc S8000 WLAN Driver denial of service (EUVD-2022-47374)
A vulnerability, which was classified as problematic, has been found in Unisoc SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T610, T618, T606, T612, T616, T760, T770, T820 and S8000. This affects an unknown function of the component WL
CVE-2022-44429 | Unisoc S8000 WLAN Driver denial of service (EUVD-2022-47372)
A vulnerability classified as problematic has been found in Unisoc SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T610, T618, T606, T612, T616, T760, T770, T820 and S8000. The affected element is an unknown function of the component WLA
CVE-2022-44428 | Unisoc S8000 WLAN Driver denial of service (EUVD-2022-47371)
A vulnerability described as problematic has been identified in Unisoc SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T610, T618, T606, T612, T616, T760, T770, T820 and S8000. Impacted is an unknown function of the component WLAN Driver
CVE-2022-44430 | Unisoc S8000 WLAN Driver denial of service (EUVD-2022-47373)
A vulnerability classified as problematic was found in Unisoc SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T610, T618, T606, T612, T616, T760, T770, T820 and S8000. The impacted element is an unknown function of the component WLAN Dri
CVE-2022-44427 | Unisoc S8000 WLAN Driver denial of service (EUVD-2022-47370)
A vulnerability marked as problematic has been reported in Unisoc SC9863A, SC9832E, SC7731E, T610, T310, T606, T760, T610, T618, T606, T612, T616, T760, T770, T820 and S8000. This issue affects some unknown processing of the component WLAN
CVE-2026-77179: Docker's hypervisor for Mac compromised (Docker Desktop, Docker Sandboxes)
submitted by /u/natcoba [link] [comments] Weiterlesen
CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security flaws impacting the Linux kernel to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabiliti
CVE-2026-65348 | Apple iOS/iPadOS/macOS prior 26.7/27/15.8 permission
A vulnerability labeled as critical has been found in Apple iOS, iPadOS and macOS. This affects an unknown function. Executing a manipulation can lead to permission issues. This vulnerability is registered as CVE-2026-65348. The attack need
CVE-2026-65354 | Apple iOS/iPadOS/macOS up to 26 sandbox
A vulnerability described as very critical has been identified in Apple iOS, iPadOS and macOS up to 26. Affected is an unknown function. The manipulation results in sandbox issue. This vulnerability is reported as CVE-2026-65354. The attack
CVE-2026-43785 | Apple iOS/iPadOS/macOS/tvOS/visionOS prior 27 privileges management
A vulnerability was found in Apple iOS, iPadOS, macOS, tvOS and visionOS and classified as critical. The impacted element is an unknown function. The manipulation results in improper privilege management. This vulnerability is identified as
CVE-2026-43790 | Apple macOS up to 15.7/26/26.6 Kernel memory corruption
A vulnerability categorized as very critical has been discovered in Apple macOS up to 15.7/26/26.6. Affected by this vulnerability is an unknown functionality of the component Kernel. Executing a manipulation can lead to memory corruption.
CVE-2026-65345 | Apple iOS/iPadOS/macOS prior 26.7/27/15.8 permission
A vulnerability identified as problematic has been detected in Apple iOS, iPadOS and macOS. The impacted element is an unknown function. Performing a manipulation results in permission issues. This vulnerability is cataloged as CVE-2026-653
CVE-2026-65344 | Apple iOS/iPadOS/macOS/tvOS/visionOS prior 26.7/27/15.8 out-of-bounds write
A vulnerability categorized as very critical has been discovered in Apple iOS, iPadOS, macOS, tvOS and visionOS. The affected element is an unknown function. Such manipulation leads to out-of-bounds write. This vulnerability is listed as CV
CVE-2026-65342 | Apple macOS up to 15.7/26/26.6 permission
A vulnerability was found in Apple macOS up to 15.7/26/26.6. It has been rated as problematic. Impacted is an unknown function. This manipulation causes permission issues. This vulnerability is tracked as CVE-2026-65342. The attack is restr
CVE-2026-43791 | Apple macOS up to 15.7/26/26.6 information disclosure
A vulnerability was found in Apple macOS up to 15.7/26/26.6. It has been declared as problematic. Affected by this issue is some unknown functionality. Executing a manipulation can lead to information disclosure. This vulnerability is track
CVE-2026-43808 | Apple iPadOS/iOS/macOS/tvOS/watchOS up to 26.5 use after free
A vulnerability was found in Apple iPadOS, iOS, macOS, tvOS and watchOS up to 26.5. It has been rated as very critical. This affects an unknown part. The manipulation leads to use after free. This vulnerability is listed as CVE-2026-43808.
CVE-2026-43787 | Apple macOS up to 15.7/26/26.6 information disclosure
A vulnerability classified as problematic was found in Apple macOS up to 15.7/26/26.6. The affected element is an unknown function. Executing a manipulation can lead to information disclosure. This vulnerability is handled as CVE-2026-43787
CVE-2026-43789 | Apple macOS up to 15.7/26/26.6 Sandbox privileges management
A vulnerability was found in Apple macOS up to 15.7/26/26.6. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component Sandbox. Performing a manipulation results in improper privilege ma
CVE-2026-43696 | Apple macOS up to 26 improper authorization
A vulnerability marked as problematic has been reported in Apple macOS up to 26. Affected by this vulnerability is an unknown functionality. The manipulation leads to improper authorization. This vulnerability is traded as CVE-2026-43696. A
CVE-2026-43674 | Apple iOS/iPadOS up to 26 improper authentication
A vulnerability was found in Apple iOS and iPadOS up to 26. It has been classified as problematic. Affected is an unknown function. This manipulation causes improper authentication. This vulnerability is registered as CVE-2026-43674. The at
CVE-2026-43762 | Apple iOS/iPadOS/macOS/visionOS up to 26.5 information disclosure
A vulnerability was found in Apple iOS, iPadOS, macOS and visionOS up to 26.5. It has been declared as problematic. This impacts an unknown function. Such manipulation leads to information disclosure. This vulnerability is listed as CVE-202
CVE-2026-43737 | Apple iOS/iPadOS/macOS/tvOS/watchOS prior 26.7/27/15.8 improper authorization
A vulnerability, which was classified as problematic, was found in Apple iOS, iPadOS, macOS, tvOS and watchOS. Impacted is an unknown function. Executing a manipulation can lead to improper authorization. The identification of this vulnerab
CVE-2026-43702 | Apple iPadOS/iOS/macOS/tvOS/watchOS Video File memory corruption
A vulnerability, which was classified as very critical, has been found in Apple iPadOS, iOS, macOS, tvOS and watchOS. This issue affects some unknown processing of the component Video File Handler. Performing a manipulation results in memor
CVE-2026-43719 | Apple macOS up to 15.7/26/26.6 SMB use after free
A vulnerability classified as very critical has been found in Apple macOS up to 15.7/26/26.6. This affects an unknown part of the component SMB Handler. This manipulation causes use after free. This vulnerability is handled as CVE-2026-4371
CVE-2026-43695 | Apple iPadOS/iOS/macOS/tvOS/visionOS/watchOS prior prior iOS 27 improper authorization
A vulnerability labeled as problematic has been found in Apple iPadOS, iOS, macOS, tvOS, visionOS and watchOS. Affected is an unknown function. Executing a manipulation can lead to improper authorization. This vulnerability appears as CVE-2
CVE-2026-43697 | Apple macOS up to 15.7/26/26.6 out-of-bounds
A vulnerability was found in Apple macOS up to 15.7/26/26.6. It has been rated as problematic. The impacted element is an unknown function. This manipulation causes out-of-bounds read. This vulnerability is registered as CVE-2026-43697. Rem
CVE-2026-43690 | Apple macOS up to 15.7/26/26.6 race condition
A vulnerability, which was classified as problematic, has been found in Apple macOS up to 15.7/26/26.6. Affected by this issue is some unknown functionality. This manipulation causes race condition. The identification of this vulnerability
CVE-2026-43688 | Apple iOS/iPadOS/macOS up to 26 memory corruption
A vulnerability classified as very critical was found in Apple iOS, iPadOS and macOS up to 26. Affected by this vulnerability is an unknown functionality. The manipulation results in memory corruption. This vulnerability was named CVE-2026-
CVE-2026-43683 | Apple macOS up to 15.7/26.6/26.x out-of-bounds
A vulnerability marked as problematic has been reported in Apple macOS up to 15.7/26.6/26.x. This affects an unknown function. Performing a manipulation results in out-of-bounds read. This vulnerability is known as CVE-2026-43683. Attacking
CVE-2026-71641 | ZJU-FAST-Lab EGO-Planner-v2 EGOReplanFSM denial of service
A vulnerability was found in ZJU-FAST-Lab EGO-Planner-v2 and classified as problematic. Affected is an unknown function of the component EGOReplanFSM. Such manipulation leads to denial of service. This vulnerability is traded as CVE-2026-71
CVE-2026-89060 | Red Hat Advanced Cluster Management for Kubernetes multicluster-observability-addon information disclosure
A vulnerability, which was classified as problematic, was found in Red Hat Advanced Cluster Management for Kubernetes. Affected by this issue is some unknown functionality of the component multicluster-observability-addon. The manipulation
CVE-2026-82100 | IBM DataStage on Cloud Pak for Data 5.4.0.0 path traversal
A vulnerability was found in IBM DataStage on Cloud Pak for Data 5.4.0.0. It has been classified as problematic. This vulnerability affects unknown code. This manipulation causes path traversal. This vulnerability is registered as CVE-2026-
CVE-2026-78135 | strongSwan up to 6.0.7 libcharon improper authentication
A vulnerability was found in strongSwan up to 6.0.7. It has been declared as very critical. Affected is an unknown function of the component libcharon. The manipulation results in improper authentication. This vulnerability is cataloged as
CVE-2026-14276 | IBM i Access Family up to 1.1.9.15 Emulator Macro RunProgram os command injection
A vulnerability classified as critical was found in IBM i Access Family up to 1.1.9.15. This affects the function RunProgram of the component Emulator Macro. Executing a manipulation can lead to os command injection. The identification of t
CVE-2026-19542 | GNU glibc tdelete memory corruption (WID-SEC-2026-3014)
A vulnerability identified as very critical has been detected in GNU glibc. Impacted is the function tdelete. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2026-19542. It is possible to initiate the attack