Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 780 | 0,2 % |
| ≥50 % | 3.518 | 0,9 % |
| ≥10 % | 22.974 | 5,7 % |
| <10 % | 378.013 | 93,3 % |
U.S. CISA adds Apple flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Apple flaw, tracked as CVE-2024-27834 (CV
CVE-2026-80946 | Linux Kernel up to 6.18.50/7.2.3 FUSE fs/fuse/dev_uring.c fuse_uring_copy_to_ring stack-based overflow (WID-SEC-2026-3321)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.18.50/7.2.3. The impacted element is the function fuse_uring_copy_to_ring of the file fs/fuse/dev_uring.c of the component FUSE. Performing a manipulation results
CVE-2026-80942 | Linux Kernel up to 6.12.108/6.18.49/7.2.3 rtl8192du rtl92du_init_sw_vars memory leak (WID-SEC-2026-3321)
A vulnerability has been found in Linux Kernel up to 6.12.108/6.18.49/7.2.3 and classified as critical. This affects the function rtl92du_init_sw_vars of the component rtl8192du. Performing a manipulation results in memory leak. This vulner
CVE-2026-120959 | MongoDB Atlas SQL up to 3.0.0 memory corruption (WID-SEC-2026-4328)
A vulnerability was found in MongoDB Atlas SQL up to 3.0.0. It has been declared as problematic. Affected by this issue is some unknown functionality. Executing a manipulation can lead to memory corruption. This vulnerability appears as CVE
Critical Citrix XenServer Vulnerability Could Let Hackers Take Over Virtualization Hosts Without Authentication
Citrix has disclosed a critical XenServer vulnerability that could let an unauthenticated attacker compromise virtualization hosts and supporting appliances. Tracked as CVE-2026-98432, the flaw requires access to the management network, an
CVE-2026-120954 | MongoDB C Driver up to 2.5.7 BSON Vector integer overflow (WID-SEC-2026-4328)
A vulnerability labeled as problematic has been found in MongoDB C Driver up to 2.5.7. The affected element is an unknown function of the component BSON Vector Handler. The manipulation results in integer overflow. This vulnerability is cat
CVE-2026-120953 | MongoDB Atlas SQL JDBC Driver up to 4.0.0 Authentication redirect (WID-SEC-2026-4328)
A vulnerability, which was classified as problematic, was found in MongoDB Atlas SQL JDBC Driver up to 4.0.0. Affected by this issue is some unknown functionality of the component Authentication Component. The manipulation results in open r
CVE-2026-120952 | MongoDB Atlas SQL ODBC Driver up to 3.0.0 out-of-bounds write (WID-SEC-2026-4328)
A vulnerability, which was classified as problematic, was found in MongoDB Atlas SQL ODBC Driver up to 3.0.0. This affects an unknown function. The manipulation results in out-of-bounds write. This vulnerability is cataloged as CVE-2026-120
CVE-2026-120684 | MongoDB C Driver up to 1.30.14/2.5.7 GridFS uninitialized pointer (Nessus ID 376173 / WID-SEC-2026-4328)
A vulnerability identified as problematic has been detected in MongoDB C Driver up to 1.30.14/2.5.7. Impacted is an unknown function of the component GridFS. The manipulation leads to uninitialized pointer. This vulnerability is listed as C
CVE-2026-120678 | MongoDB C Driver up to 1.30.14/2.5.7 memory leak (WID-SEC-2026-4328)
A vulnerability classified as critical has been found in MongoDB C Driver up to 1.30.14/2.5.7. This impacts an unknown function. Performing a manipulation results in memory leak. This vulnerability is reported as CVE-2026-120678. The attack
CVE-2026-120673 | MongoDB Rust Driver up to 3.9.0 Diagnostic Tracing information disclosure (WID-SEC-2026-4328)
A vulnerability marked as problematic has been reported in MongoDB Rust Driver up to 3.9.0. The impacted element is an unknown function of the component Diagnostic Tracing. This manipulation causes information disclosure. This vulnerability
CVE-2026-120567 | MongoDB Entity Framework Core Provider up to 9.1.4/10.0.4 sql injection (WID-SEC-2026-4328)
A vulnerability was found in MongoDB Entity Framework Core Provider up to 9.1.4/10.0.4. It has been rated as critical. This impacts an unknown function. This manipulation causes sql injection. The identification of this vulnerability is CVE
CVE-2026-119776 | FRRouting OSPFv3 improper authentication (Nessus ID 376170)
A vulnerability, which was classified as very critical, was found in FRRouting. This affects an unknown function of the component OSPFv3. The manipulation results in improper authentication. This vulnerability is identified as CVE-2026-1197
CVE-2026-114627 | Web::Simple up to 0.35 String Interpolation cross site scripting (Nessus ID 376171)
A vulnerability described as problematic has been identified in Web::Simple up to 0.35. The impacted element is an unknown function of the component String Interpolation. Executing a manipulation can lead to cross site scripting. This vulne
CVE-2026-120758 | HDF Group HDF5 up to 2.2.x Local Heap src/H5HL.c H5HL_unprotect null pointer dereference (Nessus ID 376172)
A vulnerability was found in HDF Group HDF5 up to 2.2.x and classified as problematic. Affected by this issue is the function H5HL_unprotect of the file src/H5HL.c of the component Local Heap. Executing a manipulation can lead to null point
Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution
Zyxel GS1900 network switches that received the vendor's earlier fix for an actively exploited flaw are still open to the exploit attackers used, researchers at Binarly found. The exploit lets anyone who can reach a switch's web m
CVE-2026-119675 | MongoDB Database Tools up to 100.20.0 mongorestore improper authorization (WID-SEC-2026-4328)
A vulnerability has been found in MongoDB Database Tools up to 100.20.0 and classified as problematic. This impacts an unknown function of the component mongorestore. Performing a manipulation results in improper authorization. This vulnera
CVE-2026-119674 | MongoDB Database Tools up to 100.20.0 mongorestore improper authorization (WID-SEC-2026-4328)
A vulnerability was found in MongoDB Database Tools up to 100.20.0 and classified as problematic. The impacted element is an unknown function of the component mongorestore. Such manipulation leads to improper authorization. This vulnerabili
CVE-2026-119673 | MongoDB Database Tools up to 100.20.0 mongofiles symlink (WID-SEC-2026-4328)
A vulnerability was found in MongoDB Database Tools up to 100.20.0. It has been declared as problematic. This impacts an unknown function of the component mongofiles. Executing a manipulation can lead to symlink following. This vulnerabilit
CVE-2026-119672 | MongoDB Database Tools up to 100.20.0 mongofiles privileges management (WID-SEC-2026-4328)
A vulnerability labeled as problematic has been found in MongoDB Database Tools up to 100.20.0. This affects an unknown part of the component mongofiles. Such manipulation leads to improper privilege management. This vulnerability is traded
CVE-2026-119179 | MongoDB Node.js Driver up to 6.21.x/7.7.x Connection Management information disclosure (WID-SEC-2026-4328)
A vulnerability, which was classified as problematic, was found in MongoDB Node.js Driver up to 6.21.x/7.7.x. This affects an unknown part of the component Connection Management. The manipulation results in information disclosure. This vuln
CVE-2026-77690 | ZohoCorp ManageEngine Key Manager Plus up to 7150 Deployment Target Configuration command injection (EUVD-2026-116757)
A vulnerability was found in ZohoCorp ManageEngine Key Manager Plus up to 7150. It has been rated as problematic. This affects an unknown function of the component Deployment Target Configuration. The manipulation leads to command injection
CVE-2026-84730 | ASUS Router AiCloud buffer overflow (EUVD-2026-116688)
A vulnerability categorized as very critical has been discovered in ASUS Router. The affected element is an unknown function of the component AiCloud. Executing a manipulation can lead to buffer overflow. This vulnerability is tracked as CV
CVE-2026-76506 | Cisco Unified Computing System Central Software up to 2.1(2b) Web-based Management Interface information disclosure (EUVD-2026-116971)
A vulnerability was found in Cisco Unified Computing System Central Software. It has been rated as problematic. This vulnerability affects unknown code of the component Web-based Management Interface. This manipulation causes information di
CVE-2026-121621 | Red Hat OpenShift GitOps Argo CD Image Updater command injection (EUVD-2026-116381)
A vulnerability was found in Red Hat OpenShift GitOps and classified as critical. This impacts an unknown function of the component Argo CD Image Updater. Executing a manipulation can lead to command injection. The identification of this vu
CVE-2026-123012 | Gogs 0.14.3 Git Smart HTTP Authorization Layer http.go improper authorization (EUVD-2026-117331)
A vulnerability categorized as problematic has been discovered in Gogs 0.14.3. This affects an unknown function of the file internal/route/repo/http.go of the component Git Smart HTTP Authorization Layer. Executing a manipulation can lead t
CVE-2026-123014 | iTerm2 up to 3.7.7beta1 URL argument injection (EUVD-2026-117332)
A vulnerability identified as critical has been detected in iTerm2 up to 3.7.7beta1. This impacts an unknown function of the component URL Handler. The manipulation leads to argument injection. This vulnerability is listed as CVE-2026-12301
Debian and Ubuntu Fix APT Security Flaw That Could Give Attackers Root Access
Debian and Ubuntu released security updates addressing CVE-2026-109518, an APT package manager flaw that lets an attacker controlling HTTP traffic replace downloaded packages and execute arbitrary code with root privileges. Published on Nov
CVE-2026-121009 | SQL::Abstract up to 2.000001_03 Injection Guard func sql injection (Nessus ID 376177)
A vulnerability, which was classified as critical, has been found in SQL::Abstract up to 2.000001_03. Affected is an unknown function of the component Injection Guard. This manipulation of the argument func causes sql injection. The identif
CVE-2026-120755 | HDF Group HDF5 up to 2.2.x Szip Filter src/H5Zszip.c H5Z__filter_szip out-of-bounds (Nessus ID 376175)
A vulnerability marked as problematic has been reported in HDF Group HDF5 up to 2.2.x. Affected is the function H5Z__filter_szip of the file src/H5Zszip.c of the component Szip Filter. The manipulation leads to out-of-bounds read. This vuln
CVE-2026-120757 | HDF Group HDF5 up to 2.2.x External Link Traversal src/H5Lexternal.c H5L__extern_traverse heap-based overflow (Nessus ID 376178)
A vulnerability, which was classified as critical, has been found in HDF Group HDF5 up to 2.2.x. This impacts the function H5L__extern_traverse of the file src/H5Lexternal.c of the component External Link Traversal. This manipulation causes
CVE-2026-121007 | dbsrgits SQL::Abstract 1.90_01/2.000001_03 Nested Statement Processing where sql injection (Nessus ID 376180)
A vulnerability classified as critical was found in dbsrgits SQL::Abstract 1.90_01/2.000001_03. This impacts an unknown function of the component Nested Statement Processing. The manipulation of the argument where results in sql injection.
Oracle WebLogic ermöglicht Datenzugriff ohne Anmeldung
Eine kritische Sicherheitslücke in Oracle WebLogic Server ermöglicht Angreifern, über HTTP ohne Anmeldung Daten zu lesen, zu verändern oder zu löschen. Sie betrifft vier unterstützte Versionen von Oracle WebLogic Server, Updates stehen bere
CVE-2025-65858 | Calibre-Web 0.6.25 /ajax/listusers username cross site scripting (EUVD-2025-200242)
A vulnerability identified as problematic has been detected in Calibre-Web 0.6.25. This issue affects some unknown processing of the file /ajax/listusers. This manipulation of the argument Username causes cross site scripting. This vulnerab
CVE-2025-65403 | LightFTP 2.0 g_cfg.MaxUsers buffer overflow
A vulnerability classified as problematic has been found in LightFTP 2.0. Impacted is an unknown function of the component g_cfg.MaxUsers. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-2025-65403. Access to
CVE-2025-64030 | Eximbills Enterprise 4.1.5 WSTrxManager TMPL_INFO cross site scripting
A vulnerability classified as problematic has been found in Eximbills Enterprise 4.1.5. This affects an unknown part of the file /EximBillWeb/servlets/WSTrxManager. Performing a manipulation of the argument TMPL_INFO results in cross site s
CVE-2025-63535 | Blood Bank Management System 1.0 abs.php search sql injection
A vulnerability classified as critical was found in Blood Bank Management System 1.0. Affected by this vulnerability is an unknown functionality of the file abs.php. Such manipulation of the argument Search leads to sql injection. This vuln
CVE-2025-63534 | Blood Bank Management System 1.0 login.php error cross site scripting
A vulnerability, which was classified as problematic, was found in Blood Bank Management System 1.0. This affects an unknown part of the file login.php. Executing a manipulation of the argument Error can lead to cross site scripting. The id
CVE-2025-63532 | Blood Bank Management System 1.0 cancel.php search sql injection
A vulnerability classified as critical has been found in Blood Bank Management System 1.0. Affected is an unknown function of the file cancel.php. This manipulation of the argument Search causes sql injection. This vulnerability is handled
CVE-2025-63095 | Tempus Ex hello-video-codec 0.1.0 write_bits denial of service
A vulnerability was found in Tempus Ex hello-video-codec 0.1.0. It has been declared as problematic. This impacts the function BitstreamWriter::write_bits. Executing a manipulation can lead to denial of service. This vulnerability is tracke
CVE-2025-57489 | Shirt Pocket SuperDuper 3.10 SDAgent access control
A vulnerability has been found in Shirt Pocket SuperDuper 3.10 and classified as critical. The affected element is an unknown function of the component SDAgent. This manipulation causes improper access controls. The identification of this v
CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in
CVE-2026-116839 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the
CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in mis
CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PAS
CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .
CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash
CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place
CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.
llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor siz
CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF fil
CVE-2026-116816 | llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model loading, causing crashes or potential code execution.
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like whose nega
CVE-2025-71439 | llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-server to read past id_to_token and crash.
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short
CVE-2024-58400 | llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with IDs outside 0 to n_vocab to read embedding memory out of bounds or crash the process.
llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send intege
CVE-2024-58399 | llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF model file with arbitrary 64-bit tensor offsets to crash the process or load adjacent process memory as model weights.
llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF m
CVE-2026-116836 | A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.
A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.
CVE-2026-116620 | A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream<UTF8<char>>::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of
CVE-2026-116608 | A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function load_pretrained_model of the file videollama2/model/__init__.py of the component Model Loading. The manipulation of the argument _name_or_path leads to improper validation of integrity check value. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project was informed of the problem
A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function load_pretrained_model of the file videollama2/model/__init__.py of the component Model Loading. The manipulation of the
CVE-2026-116605 | A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. The exploit has been made public and could be used.
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side s