Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 751 | 0,2 % |
| ≥50 % | 3.276 | 0,9 % |
| ≥10 % | 22.090 | 5,7 % |
| <10 % | 359.192 | 93,2 % |
CVE-2022-48259 | Huawei BiSheng-WNM 3.0.0.325 System Command command injection (EUVD-2022-50968)
A vulnerability was found in Huawei BiSheng-WNM 3.0.0.325. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component System Command Handler. The manipulation results in command injection.
CVE-2022-48258 | Eternal Terminal 6.2.1 etserver/etclient permission (Issue 555 / EUVD-2022-50967)
A vulnerability classified as critical has been found in Eternal Terminal 6.2.1. Affected by this vulnerability is an unknown functionality of the component etserver/etclient. The manipulation leads to permission issues. This vulnerability
CVE-2022-48257 | Eternal Terminal 6.2.1 etserver/etclient /tmp temp file (Issue 555 / EUVD-2022-50966)
A vulnerability described as critical has been identified in Eternal Terminal 6.2.1. Affected is an unknown function of the file /tmp of the component etserver/etclient. Executing a manipulation can lead to insecure temporary file. This vul
CVE-2022-48256 | Technitium DNS Server up to 9.x CNAME denial of service (EUVD-2022-50965)
A vulnerability marked as problematic has been reported in Technitium DNS Server up to 9.x. This impacts an unknown function of the component CNAME Handler. Performing a manipulation results in denial of service. This vulnerability is ident
CVE-2022-48255 | Huawei BiSheng-WNM 3.0.0.325 System Command command injection (EUVD-2022-50964)
A vulnerability classified as critical has been found in Huawei BiSheng-WNM 3.0.0.325. This issue affects some unknown processing of the component System Command Handler. The manipulation leads to command injection. This vulnerability is re
CVE-2026-65595 | n8n-io n8n up to 2.30.0/2.29.7 Token Exchange module privileges management
A vulnerability was found in n8n-io n8n up to 2.30.0/2.29.7 and classified as critical. Impacted is an unknown function of the component Token Exchange module. Executing a manipulation can lead to improper privilege management. This vulnera
CVE-2026-65594 | n8n-io n8n up to 2.29.7/2.30.0 OAuth2 privileges management
A vulnerability was found in n8n-io n8n up to 2.29.7/2.30.0. It has been rated as problematic. This affects an unknown function of the component OAuth2. This manipulation causes improper privilege management. This vulnerability is handled a
CVE-2026-65593 | n8n-io n8n up to 1.123.63 Dynamic Node Parameter absolute_urls server-side request forgery
A vulnerability described as problematic has been identified in n8n-io n8n up to 1.123.63. This affects an unknown part of the component Dynamic Node Parameter. The manipulation of the argument absolute_urls results in server-side request f
CVE-2026-65592 | n8n-io n8n Resource Locator window.open cachedResultUrl cross site scripting
A vulnerability marked as problematic has been reported in n8n-io n8n. Affected by this issue is the function window.open of the component Resource Locator. The manipulation of the argument cachedResultUrl leads to cross site scripting. Thi
CVE-2026-65591 | n8n-io n8n prior 1.123.64/2.29.8/2.30.1 Expression code injection
A vulnerability was found in n8n-io n8n. It has been declared as critical. The impacted element is an unknown function of the component Expression Handler. The manipulation results in code injection. This vulnerability is known as CVE-2026-
CVE-2026-65590 | n8n-io n8n up to 2.29.7/2.30.0 computer-use privileges management
A vulnerability was found in n8n-io n8n up to 2.29.7/2.30.0. It has been classified as critical. The affected element is an unknown function of the component computer-use. The manipulation leads to improper privilege management. This vulner
CVE-2026-65016 | n8n-io n8n up to 1.123.63/2.29.7/2.30.0 Enterprise SSO instance-role provisioning N8N_SSO_SCOPES_PROVISION_INSTANCE_ROLE privileges management
A vulnerability classified as critical has been found in n8n-io n8n up to 1.123.63/2.29.7/2.30.0. Affected by this vulnerability is an unknown functionality of the component Enterprise SSO instance-role provisioning. The manipulation of the
CVE-2026-65015 | n8n-io n8n up to 2.30.0 AI Agents feature improper authorization
A vulnerability described as problematic has been identified in n8n-io n8n up to 2.30.0. Affected is an unknown function of the component AI Agents feature. Executing a manipulation can lead to improper authorization. This vulnerability is
CVE-2026-65014 | n8n up to 2.27.3 Webhook Registration id improper authentication
A vulnerability classified as critical was found in n8n up to 2.27.3. The impacted element is an unknown function of the component Webhook Registration. Executing a manipulation of the argument ID can lead to improper authentication. This v
CVE-2026-64038 | Linux Kernel up to 6.18.33/7.0.10 Lm90 drivers/hwmon/lm90.c lm90_probe hwmon_dev use after free
A vulnerability was found in Linux Kernel up to 6.18.33/7.0.10 and classified as critical. This issue affects the function lm90_probe of the file drivers/hwmon/lm90.c of the component Lm90. Executing a manipulation of the argument hwmon_dev
CVE-2026-64036 | Linux Kernel up to 6.18.33/7.0.10 Cgroup Rstat kernel/cgroup/rstat.c css_rstat_updated memory corruption
A vulnerability has been found in Linux Kernel up to 6.18.33/7.0.10 and classified as very critical. This vulnerability affects the function css_rstat_updated of the file kernel/cgroup/rstat.c of the component Cgroup Rstat. Performing a man
CVE-2026-64025 | Linux Kernel up to 6.6.141/6.12.91/6.18.33/7.0.10 Skmsg sk_psock_verdict_data_ready use after free (Nessus ID 343493)
A vulnerability classified as very critical was found in Linux Kernel up to 6.6.141/6.12.91/6.18.33/7.0.10. This affects the function sk_psock_verdict_data_ready of the component Skmsg. The manipulation results in use after free. This vulne
CVE-2026-64015 | Linux Kernel up to 7.0.10 Keyring find_key_to_update race condition (Nessus ID 343493)
A vulnerability was found in Linux Kernel up to 6.1.174/6.6.141/6.12.91/6.18.33/7.0.10. It has been classified as very critical. This issue affects the function find_key_to_update of the component Keyring. Performing a manipulation results
CVE-2026-64006 | Linux Kernel up to 6.6.142/6.18.34/7.0.11 nf_tables calculation
A vulnerability classified as very critical was found in Linux Kernel up to 6.6.142/6.18.34/7.0.11. Affected is an unknown function of the component nf_tables. The manipulation results in incorrect calculation. This vulnerability was named
CVE-2026-63968 | Linux Kernel up to 7.0.11 Ipv6 fib6_select_path fib6_siblings/fib6_nsiblings infinite loop
A vulnerability was found in Linux Kernel up to 6.1.175/6.6.142/6.12.92/6.18.34/7.0.11. It has been classified as critical. This affects the function fib6_select_path of the component Ipv6. The manipulation of the argument fib6_siblings/fib
CVE-2026-63967 | Linux Kernel up to 7.0.11 Iio Imu St Lsm6dsx stack-based overflow
A vulnerability was found in Linux Kernel up to 7.0.11 and classified as problematic. The impacted element is an unknown function of the component Iio Imu St Lsm6dsx. Executing a manipulation can lead to stack-based buffer overflow. This vu
CVE-2026-109742 | Mozilla Firefox up to 153.4/157 PDF Viewer information disclosure (Nessus ID 374553)
A vulnerability, which was classified as problematic, has been found in Mozilla Firefox up to 153.4/157. Affected by this vulnerability is an unknown functionality of the component PDF Viewer. The manipulation leads to information disclosur
CVE-2026-109718 | Mozilla Firefox up to 115.42/153.4/157 XML use after free (Nessus ID 374553)
A vulnerability described as critical has been identified in Mozilla Firefox up to 115.42/153.4/157. This affects an unknown part of the component XML. Executing a manipulation can lead to use after free. This vulnerability is tracked as CV
CVE-2026-109704 | Mozilla Firefox up to 153.4/157 Application Update privileges management (Nessus ID 374553)
A vulnerability classified as critical was found in Mozilla Firefox up to 153.4/157. Affected by this issue is some unknown functionality of the component Application Update. Executing a manipulation can lead to improper privilege managemen
CVE-2026-120194 | Red Hat Enterprise Linux/OpenShift Container Platform JSONPath Slice Evaluator json_path_query resource consumption (Nessus ID 374559)
A vulnerability was found in Red Hat Enterprise Linux and OpenShift Container Platform. It has been rated as critical. Impacted is the function json_path_query of the component JSONPath Slice Evaluator. Performing a manipulation results in
CVE-2026-114508 | Laravel up to 12.67.x/13.26.x Relationship privileges management (Nessus ID 374560)
A vulnerability classified as problematic was found in Laravel up to 12.67.x/13.26.x. Impacted is an unknown function of the component Relationship. Such manipulation leads to improper privilege management. This vulnerability is uniquely id
CVE-2026-63966 | Linux Kernel up to 6.18.34/7.0.11 Iio Imu Adis16550 adis16550_trigger_handler missing initialization
A vulnerability described as problematic has been identified in Linux Kernel up to 6.18.34/7.0.11. The impacted element is the function adis16550_trigger_handler of the component Iio Imu Adis16550. Such manipulation leads to missing initial
CVE-2026-63965 | Linux Kernel up to 6.18.34/7.0.11 Bmp280 Pressure Driver bmp280-core.c bmp580_trigger_handler information disclosure
A vulnerability has been found in Linux Kernel up to 6.18.34/7.0.11 and classified as problematic. This affects the function bmp580_trigger_handler of the file drivers/iio/pressure/bmp280-core.c of the component Bmp280 Pressure Driver. Perf
CVE-2026-63964 | Linux Kernel Ucsi Ccg Driver do_flash null pointer dereference
A vulnerability was found in Linux Kernel. It has been rated as problematic. This issue affects the function do_flash of the component Ucsi Ccg Driver. This manipulation causes null pointer dereference. This vulnerability is tracked as CVE-
CVE-2026-63960 | Linux Kernel up to 7.0.11 Wcove wcove_read_rx_buffer stack-based overflow
A vulnerability described as critical has been identified in Linux Kernel up to 7.0.11. This affects the function wcove_read_rx_buffer of the component Wcove. Executing a manipulation can lead to stack-based buffer overflow. This vulnerabil
CVE-2026-63959 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Tcpm Tcpci Maxim stack-based overflow
A vulnerability was found in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11. It has been rated as very critical. This affects an unknown part of the component Tcpm Tcpci Maxim. Performing a manipulation results in stack-based buffer over
CVE-2026-63955 | Linux Kernel up to 7.0.11 Vmalloc __get_vm_area_node locking
A vulnerability categorized as critical has been discovered in Linux Kernel up to 7.0.11. The impacted element is the function __get_vm_area_node of the component Vmalloc. Such manipulation leads to improper locking. This vulnerability is d
CVE-2026-63954 | Linux Kernel up to 7.0.11 Hpfs hpfs_map_dnode_bitmap uninitialized variable
A vulnerability has been found in Linux Kernel up to 7.0.11 and classified as problematic. The affected element is the function hpfs_map_dnode_bitmap of the component Hpfs. Performing a manipulation results in use of uninitialized variable.
CVE-2026-63953 | Linux Kernel up to 7.0.11 mm migrate_device mm/migrate_device migrate_vma_insert_huge_pmd_page memory leak
A vulnerability was found in Linux Kernel up to 7.0.11. It has been declared as critical. This affects the function migrate_vma_insert_huge_pmd_page of the file mm/migrate_device of the component mm migrate_device. Executing a manipulation
CVE-2026-63952 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Memfd mapping_deny_writable access control (Nessus ID 340747)
A vulnerability was found in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11. It has been classified as very critical. Affected by this issue is the function mapping_deny_writable of the component Memfd. Performing a manipulation results
CVE-2026-63951 | Linux Kernel up to 7.0.11 Zram zram_writeback_endio use after free
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.0.11. Impacted is the function zram_writeback_endio of the component Zram. Such manipulation leads to use after free. This vulnerability is documented
CVE-2026-63949 | Linux Kernel up to 7.0.11 Line Display line-display.c linedisp_display out-of-bounds
A vulnerability has been found in Linux Kernel up to 6.1.175/6.6.142/6.12.92/6.18.34/7.0.11 and classified as problematic. Affected is the function linedisp_display of the file drivers/auxdisplay/line-display.c of the component Line Display
CVE-2026-63948 | Linux Kernel up to 7.0.11 L2CAP l2cap_chan_timeout conn memory leak
A vulnerability, which was classified as critical, was found in Linux Kernel up to 7.0.11. This impacts the function l2cap_chan_timeout of the component L2CAP. The manipulation of the argument conn results in memory leak. This vulnerability
CVE-2026-63943 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Xpad xpadone_process_packet actual_length out-of-bounds
A vulnerability described as very critical has been identified in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11. Impacted is the function xpadone_process_packet of the component Xpad. Such manipulation of the argument actual_length lead
CVE-2026-63940 | Linux Kernel up to 6.12.94/6.18.34/7.0.11 KVM integer underflow
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.12.94/6.18.34/7.0.11. This vulnerability affects unknown code of the component KVM. The manipulation results in integer underflow. This vulnerability is known a
CVE-2026-63939 | Linux Kernel up to 6.12.92/6.18.34/7.0.11 KVM buffer overflow
A vulnerability identified as very critical has been detected in Linux Kernel up to 6.12.92/6.18.34/7.0.11. This affects an unknown part of the component KVM. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-20
CVE-2026-63936 | Linux Kernel up to 6.12.92/6.18.34/7.0.11 Adc mt6358_read_imp val_v uninitialized variable
A vulnerability was found in Linux Kernel up to 6.12.92/6.18.34/7.0.11. It has been declared as problematic. Affected is the function mt6358_read_imp of the component Adc. Such manipulation of the argument val_v leads to use of uninitialize
CVE-2026-63935 | Linux Kernel up to 7.0.11 Nxp Sar Adc write_raw sampling_frequency divide by zero
A vulnerability was found in Linux Kernel up to 7.0.11. It has been classified as critical. This impacts the function write_raw of the component Nxp Sar Adc. This manipulation of the argument sampling_frequency causes divide by zero. This v
CVE-2026-63934 | Linux Kernel up to 7.0.11 Iio Gyro Itg3200 itg3200_read_all_channels buf information disclosure
A vulnerability, which was classified as problematic, has been found in Linux Kernel up to 7.0.11. Affected by this vulnerability is the function itg3200_read_all_channels of the component Iio Gyro Itg3200. This manipulation of the argument
CVE-2026-63933 | Linux Kernel up to 7.0.11 Iio Gyro write_raw sampling_frequency divide by zero
A vulnerability was found in Linux Kernel up to 7.0.11 and classified as critical. This affects the function write_raw of the component Iio Gyro. The manipulation of the argument sampling_frequency results in divide by zero. This vulnerabil
CVE-2026-63932 | Linux Kernel up to 6.18.34/7.0.11 Mhz19b mhz19b_receive_buf buffer overflow
A vulnerability has been found in Linux Kernel up to 6.18.34/7.0.11 and classified as very critical. The impacted element is the function mhz19b_receive_buf of the component Mhz19b. The manipulation leads to buffer overflow. This vulnerabil
CVE-2026-63931 | Linux Kernel up to 7.0.11 Iio Chemical Scd30 write_raw val2 divide by zero
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 7.0.11. The affected element is the function write_raw of the component Iio Chemical Scd30. Executing a manipulation of the argument val2 can lead to divi
CVE-2026-63929 | Linux Kernel up to 6.12.92/6.18.34/7.0.11 Buffer iio_buffer_enqueue_dmabuf allocation of resources
A vulnerability was found in Linux Kernel up to 6.12.92/6.18.34/7.0.11. It has been declared as critical. Affected by this issue is the function iio_buffer_enqueue_dmabuf of the component Buffer. Such manipulation leads to allocation of res
CVE-2026-63918 | Linux Kernel up to 6.12.92/6.18.34/7.0.11 L2TP l2tp_session_get_by_ifname use after free
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.12.92/6.18.34/7.0.11. This affects the function l2tp_session_get_by_ifname of the component L2TP. The manipulation results in use after free. This vuln
CVE-2026-63916 | Linux Kernel up to 7.0.11 HID wacom_hid_set_device_mode out-of-bounds write
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 7.0.11. Impacted is the function wacom_hid_set_device_mode of the component HID. Executing a manipulation can lead to out-of-bounds write. The identifica
CVE-2026-63915 | Linux Kernel up to 7.0.11 NFC HCI HCP Header Parsing nfc_hci_recv_from_llc/nci_hci_data_received_cb out-of-bounds
A vulnerability was found in Linux Kernel up to 7.0.11. It has been declared as very critical. This vulnerability affects the function nfc_hci_recv_from_llc/nci_hci_data_received_cb of the component NFC HCI HCP Header Parsing. Such manipula
CVE-2026-63914 | Linux Kernel up to 7.0.11 Xfrm Migration net/xfrm/xfrm_user.c xfrm_send_migrate information disclosure
A vulnerability was found in Linux Kernel up to 7.0.11. It has been rated as problematic. This issue affects the function xfrm_send_migrate of the file net/xfrm/xfrm_user.c of the component Xfrm Migration. Performing a manipulation results
CVE-2026-63913 | Linux Kernel up to 7.0.11 Netfilter Conntrack input validation (Nessus ID 340744)
A vulnerability was found in Linux Kernel up to 7.0.11. It has been declared as critical. Impacted is an unknown function of the component Netfilter Conntrack. Such manipulation leads to improper input validation. This vulnerability is refe
CVE-2026-63912 | Linux Kernel up to 7.0.11 Xfrm esp_output_head allocation of resources
A vulnerability was found in Linux Kernel up to 7.0.11. It has been classified as very critical. This affects the function esp_output_head of the component Xfrm. This manipulation causes allocation of resources. This vulnerability is handle
CVE-2026-63911 | Linux Kernel up to 6.18.34/7.0.11 IPTFS iptfs_clone_state use after free
A vulnerability was found in Linux Kernel up to 6.18.34/7.0.11 and classified as very critical. Affected by this issue is the function iptfs_clone_state of the component IPTFS. The manipulation results in use after free. This vulnerability
CVE-2026-63910 | Linux Kernel up to 7.0.11 Dma-buf dma_buf_fd use after free
A vulnerability was found in Linux Kernel up to 7.0.11. It has been classified as very critical. This issue affects the function dma_buf_fd of the component Dma-buf. This manipulation causes use after free. The identification of this vulner
CVE-2026-63909 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 Ksmbd smb_check_perm_dacl out-of-bounds
A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11. This affects the function smb_check_perm_dacl of the component Ksmbd. This manipulation causes out-of-bounds read. This vulnerabi
CVE-2026-62965 | SABnzbd up to 5.0.x Orphan Job Management sabnzbd/api.py _api_delete_orphan value path traversal (Nessus ID 374561)
A vulnerability labeled as problematic has been found in SABnzbd up to 5.0.x. This affects the function _api_delete_orphan of the file sabnzbd/api.py of the component Orphan Job Management. Such manipulation of the argument Value leads to p
CVE-2026-114509 | Laravel up to 12.67.x/13.28.x TokenGuard improper authentication (Nessus ID 374562)
A vulnerability, which was classified as critical, has been found in Laravel up to 12.67.x/13.28.x. The affected element is the function TokenGuard. Performing a manipulation results in improper authentication. This vulnerability was named
CVE-2026-48713 | i18next i18next-fs-backend up to 2.6.5 lib/utils.js Backend.writeFile prototype pollution (GHSA-2933-q333-qg83 / Nessus ID 374563)
A vulnerability classified as critical was found in i18next i18next-fs-backend up to 2.6.5. Affected by this vulnerability is the function Backend.writeFile of the file lib/utils.js. The manipulation results in improperly controlled modific