Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 725 | 0,2 % |
| ≥50 % | 3.222 | 0,9 % |
| ≥10 % | 22.088 | 5,9 % |
| <10 % | 347.080 | 93,0 % |
CVE-2026-98913 | Linux Kernel up to 6.1.188/6.6.157/6.12.110/6.18.52 thunderx nicvf_probe memory leak (EUVD-2026-108869)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.1.188/6.6.157/6.12.110/6.18.52. Impacted is the function nicvf_probe of the component thunderx. This manipulation causes memory leak. The identification of thi
CVE-2026-98912 | Linux Kernel up to 6.18.52 ALSA OSS Sequencer snd_seq_oss_read buffer overflow (EUVD-2026-108868)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.52. This issue affects the function snd_seq_oss_read of the component ALSA OSS Sequencer. The manipulation results in buffer overflow. This vulnerab
CVE-2026-98915 | Linux Kernel up to 6.1.188/6.6.157/6.12.110/6.18.52 video-i2c video_unregister_device denial of service (EUVD-2026-108871)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.188/6.6.157/6.12.110/6.18.52. This affects the function video_unregister_device of the component video-i2c. This manipulation causes denial of servi
CVE-2026-98914 | Linux Kernel up to 6.18.52 amdgpu infinite loop (EUVD-2026-108870)
A vulnerability was found in Linux Kernel up to 6.18.52. It has been rated as problematic. This vulnerability affects unknown code of the component amdgpu. The manipulation leads to infinite loop. This vulnerability is uniquely identified a
CVE-2026-98916 | Linux Kernel up to 6.6.159/6.12.113/6.18.52 nl80211 input validation (EUVD-2026-108872)
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.6.159/6.12.113/6.18.52. The affected element is an unknown function of the component nl80211. Such manipulation leads to improper input validation. This vulnera
CVE-2026-55889 | flatpak xdg-desktop-portal up to 1.22.0 FileTransfer FileTransfer.RetrieveFiles random values (EUVD-2026-108751)
A vulnerability, which was classified as problematic, has been found in flatpak xdg-desktop-portal up to 1.22.0. The affected element is the function FileTransfer.RetrieveFiles of the component FileTransfer. The manipulation leads to insuff
CVE-2026-55888 | Flatpak XDG Desktop Portal up to 1.22.0 FileChooser.SaveFiles sandbox (EUVD-2026-108752)
A vulnerability classified as problematic was found in Flatpak XDG Desktop Portal up to 1.22.0. Impacted is the function FileChooser.SaveFiles. Executing a manipulation can lead to sandbox issue. This vulnerability is tracked as CVE-2026-55
CVE-2026-114649 | MongoDB C# Driver up to 3.12.x TLS Client Certificate Comparison certificate validation (WID-SEC-2026-4126)
A vulnerability classified as problematic was found in MongoDB C# Driver up to 3.12.x. The affected element is an unknown function of the component TLS Client Certificate Comparison. The manipulation results in improper certificate validati
CVE-2026-114648 | MongoDB C# Driver up to 3.12.x LINQ Query Processing neutralization (WID-SEC-2026-4126)
A vulnerability categorized as very critical has been discovered in MongoDB C# Driver up to 3.12.x. This vulnerability affects unknown code of the component LINQ Query Processing. Such manipulation leads to improper neutralization. This vul
CVE-2026-114647 | MongoDB C# Driver up to 3.12.x Document Replacement Validation FindOneAndReplace input validation (WID-SEC-2026-4126)
A vulnerability identified as problematic has been detected in MongoDB C# Driver up to 3.12.x. Affected by this issue is the function FindOneAndReplace of the component Document Replacement Validation. This manipulation causes improper inpu
CVE-2026-114646 | MongoDB C# Driver up to 3.12.x BSON input validation (WID-SEC-2026-4126)
A vulnerability was found in MongoDB C# Driver up to 3.12.x. It has been classified as critical. The affected element is an unknown function of the component BSON Handler. Performing a manipulation results in improper input validation. This
CVE-2026-114644 | MongoDB C# Driver up to 3.12.x Deserialization resource consumption (WID-SEC-2026-4126)
A vulnerability was found in MongoDB C# Driver up to 3.12.x. It has been declared as critical. This impacts an unknown function of the component Deserialization. Executing a manipulation can lead to resource consumption. This vulnerability
CVE-2026-114643 | MongoDB C# Driver up to 3.12.x input validation (WID-SEC-2026-4126)
A vulnerability was found in MongoDB C# Driver up to 3.12.x. It has been declared as problematic. Affected by this issue is some unknown functionality. The manipulation results in improper input validation. This vulnerability is reported as
CVE-2026-106017 | OpenVPN up to 3.11.7 Core certificate validation (WID-SEC-2026-4127)
A vulnerability was found in OpenVPN up to 3.11.7. It has been rated as problematic. Impacted is an unknown function of the component Core. The manipulation leads to improper certificate validation. This vulnerability is listed as CVE-2026-
CVE-2026-98878 | Linux Kernel up to 6.18.52 irqchip-gic-v5 irq_eoi denial of service (EUVD-2026-108672)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.18.52. Affected by this issue is the function irq_eoi of the component irqchip-gic-v5. The manipulation leads to denial of service. This vulnerability
CVE-2026-98877 | Linux Kernel up to 6.18.52 irqchip-gic-v4 __irq_domain_instantiate null pointer dereference (EUVD-2026-108723)
A vulnerability classified as problematic was found in Linux Kernel up to 6.18.52. Affected by this vulnerability is the function __irq_domain_instantiate of the component irqchip-gic-v4. Executing a manipulation can lead to null pointer de
CVE-2026-98880 | Linux Kernel up to 6.6.157/6.12.110/6.18.52 ntfs3 set_blocksize buffer overflow (EUVD-2026-108674)
A vulnerability marked as problematic has been reported in Linux Kernel up to 6.6.157/6.12.110/6.18.52. This affects the function set_blocksize of the component ntfs3. This manipulation causes buffer overflow. This vulnerability appears as
CVE-2026-98879 | Linux Kernel up to 6.18.52 isofs set_blocksize buffer overflow (EUVD-2026-108673)
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.18.52. The impacted element is the function set_blocksize of the component isofs. The manipulation results in buffer overflow. This vulnerability is reported as C
CVE-2026-98882 | Linux Kernel up to 6.12.110/6.18.52 wave5 wave5-vpuapi.c wave5_vpu_dec_get_output_info frame_buf buffer overflow (EUVD-2026-108676)
A vulnerability described as very critical has been identified in Linux Kernel up to 6.12.110/6.18.52. This impacts the function wave5_vpu_dec_get_output_info of the file drivers/media/platform/chips-media/wave5/wave5-vpuapi.c of the compon
CVE-2026-98881 | Linux Kernel up to 6.18.52 Bridge Multicast br_multicast.c br_multicast_dev_del infinite loop (EUVD-2026-108675)
A vulnerability classified as critical has been found in Linux Kernel up to 6.18.52. Affected is the function br_multicast_dev_del of the file net/bridge/br_multicast.c of the component Bridge Multicast. Performing a manipulation results in
CVE-2026-114486 | Devolutions Server up to 2026.3.10 Token Generation improper authorization (WID-SEC-2026-4128)
A vulnerability, which was classified as problematic, was found in Devolutions Server up to 2026.3.10. The impacted element is an unknown function of the component Token Generation. The manipulation results in improper authorization. This v
CVE-2026-114485 | Devolutions Server up to 2026.3.10 User List Endpoint information disclosure (WID-SEC-2026-4128)
A vulnerability has been found in Devolutions Server up to 2026.3.10 and classified as problematic. This affects an unknown function of the component User List Endpoint. This manipulation causes information disclosure. This vulnerability ap
CVE-2026-93981 | honojs hono up to 4.13.6 JSX Rendering hono/jsx/dom/server renderToString/renderToReadableStream cross site scripting (WID-SEC-2026-4131)
A vulnerability categorized as problematic has been discovered in honojs hono up to 4.13.6. Impacted is the function renderToString/renderToReadableStream of the file hono/jsx/dom/server of the component JSX Rendering. The manipulation resu
CVE-2026-84365 | honojs Hono up to 4.13.4 Static Site Generation toSSG ssgParams path traversal (WID-SEC-2026-4131)
A vulnerability categorized as problematic has been discovered in honojs Hono up to 4.13.4. This affects the function toSSG of the component Static Site Generation. Such manipulation of the argument ssgParams leads to path traversal. This v
CVE-2026-84364 | honojs Hono up to 4.13.4 Dot-notation Parsing parseBody resource consumption (WID-SEC-2026-4131)
A vulnerability was found in honojs Hono up to 4.13.4. It has been classified as problematic. Affected is the function parseBody of the component Dot-notation Parsing. The manipulation leads to resource consumption. This vulnerability is li
CVE-2026-84363 | honojs Hono up to 4.13.4 Cache Middleware cross site scripting (WID-SEC-2026-4131)
A vulnerability was found in honojs Hono up to 4.13.4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Cache Middleware. This manipulation causes cross site scripting. This vulnerabili
Critical HPE Aruba AOS-8 Flaw Allows Hackers to Bypass SSH Authentication and Take Over Systems
Hewlett Packard Enterprise (HPE) has addressed a critical authentication-bypass vulnerability in the SSH daemon of its AOS-8 wireless operating system. This vulnerability, tracked as CVE-2026-79855, could let a remote, unauthenticated attac
CVE-2026-114645 | MongoDB C Driver up to 1.30.13/2.5.6 Kerberos Authentication out-of-bounds write (WID-SEC-2026-4134)
A vulnerability identified as critical has been detected in MongoDB C Driver up to 1.30.13/2.5.6. This issue affects some unknown processing of the component Kerberos Authentication. Performing a manipulation results in out-of-bounds write.
URGENT – PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an un
CVE-2026-113869 | Mozilla Thunderbird up to 158.0.0 use after free (WID-SEC-2026-4064)
A vulnerability categorized as problematic has been discovered in Mozilla Thunderbird up to 158.0.0. This issue affects some unknown processing. The manipulation results in use after free. This vulnerability is identified as CVE-2026-113869
CVE-2026-113868 | Mozilla Thunderbird up to 158.0.0 NTLM Authentication out-of-bounds (WID-SEC-2026-4064)
A vulnerability was found in Mozilla Thunderbird up to 158.0.0. It has been rated as problematic. This vulnerability affects unknown code of the component NTLM Authentication. The manipulation leads to out-of-bounds read. This vulnerability
CVE-2026-113867 | Mozilla Thunderbird up to 158.0.0 Chat injection (WID-SEC-2026-4064)
A vulnerability was found in Mozilla Thunderbird up to 158.0.0. It has been declared as problematic. This affects an unknown part of the component Chat. Executing a manipulation can lead to injection. The identification of this vulnerabilit
CVE-2026-113866 | Mozilla Thunderbird up to 158.0.0 AutoDiscover service cleartext transmission (WID-SEC-2026-4064)
A vulnerability was found in Mozilla Thunderbird up to 158.0.0. It has been classified as problematic. Affected by this issue is some unknown functionality of the component AutoDiscover service. Performing a manipulation results in cleartex
Nach Sicherheitslücke: Internetseite des Saalekreises bleibt vorsorglich offline
Cybersicherheit im Saalekreis Nach Sicherheitslücke: Internetseite des Saalekreises bleibt vorsorglich offline. Nach den Warnungen vor einer ... Weiterlesen
Webseiten-Abschaltung "richtig": Bund stellt bisher keine Angriffe nach PHP-Sicherheitslücke fest
... IT-Sicherheitsbehörde. "Dennoch können erfolgreiche Angriffe derzeit ... Auch der US-Geheimdienst National Security Agency (NSA) mahnte wegen ... Weiterlesen
PHP-Sicherheitslücke: IT-Experten fordern Maßnahmen über Updates hinaus - Tagesschau
Thomas Boele, Sicherheitsexperte beim Softwareunternehmen Check Point, warnte Systembetreiber davor, sich in falscher Sicherheit zu wiegen. Er ... Weiterlesen
CVE-2026-55422 | conda-forge is a GitHub organization containing repositories of conda recipes. In commits 85748ad2368a and prior, two React components render externally-sourced strings directly as HTML using dangerouslySetInnerHTML, with no sanitization (the project has no DOMPurify or equivalent dependency). JSON files are produced automatically by the conda-forge autotick bot (regro/cf-scripts) while it processes every conda-forge feedstock and its upstream source artifact
conda-forge is a GitHub organization containing repositories of conda recipes. In commits 85748ad2368a and prior, two React components render externally-sourced strings directly as HTML using dangerouslySetInnerHTML, with no sanitization (t
CVE-2026-63120 | pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.2, an incomplete path traversal fix in pghoard allows an attacker with write access to the backup object storage (such as S3, GCS, or Azure) to execute arbitrary file writes and directory creation outside the designated PostgreSQL data directory (pgdata). When a database administrator executes a restore operation (via pghoard_restore
pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.2, an incomplete path traversal fix in pghoard allows an attacker with write access to the backup object storage
Sicherheitslücke in PHP: KI kann rund um die Uhr Gefahren verbreiten | ndr.de
Das Bundesamt für Sicherheit in der Informationstechnik gab eine offizielle Cybersicherheitswarnung heraus und riet zu Sicherheitsupdates. Auch ... Weiterlesen
CVE-2026-96293 | WatchGuard Agent 1.17.24.0000 Full Disk Encryption cleartext storage (EUVD-2026-108073)
A vulnerability was found in WatchGuard Agent 1.17.24.0000. It has been rated as problematic. This affects an unknown part of the component Full Disk Encryption. Performing a manipulation results in cleartext storage of sensitive informatio
CVE-2026-74534 | Linux Kernel up to 6.18.43/7.1.7/7.2-rc5 Bluetooth iso_conn_del/iso_chan_del use after free (EUVD-2026-59727 / Nessus ID 335840)
A vulnerability was found in Linux Kernel up to 6.18.43/7.1.7/7.2-rc5. It has been rated as very critical. This issue affects the function iso_conn_del/iso_chan_del of the component Bluetooth. The manipulation leads to use after free. This
CVE-2026-112904 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. In versions 1.0.8.6 and prior, the nextRestore() and nextBackup() functions in the backup controller accept a file GET parameter and concatenate it directly to DIR_BACKUP without calling sanitizeFileName(). This allows an authenticated administrator to read arbitrary files on the server (via nextRestore) and write SQL dump content to arbitrary locations (v
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. In versions 1.0.8.6 and prior, the nextRestore() and nextBackup() functions in the backup controller accept a file GET parameter and con
CVE-2026-115727 | AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who reach the server port and obtain the derivable Werkzeug debugger PIN can execute Python code and operating system commands with llm_server privileges.
AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who reach the server port and obtain the derivable Werkzeug deb
CVE-2026-115726 | Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or editor values that are executed via subprocess with shell=True after model replies or /editor use, running commands with the victim's privileges.
Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a trust prompt. Attackers can set notifications-command or edi
CVE-2026-115725 | Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access other accounts by supplying a foreign contact inbox source_id. Attackers can call the conversations create endpoint with another account's source_id to create or retrieve conversations and post messages to that account's contacts.
Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access other accounts by supplying a foreign contact inbox source_id. Attackers can call the conversations create endpoint with an
CVE-2026-115724 | VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri() that trusts content URIs based only on the com.fsck.k9.attachmentprovider or gmail-ls authority. A co-installed app without permissions can declare these authorities and send a crafted VIEW intent to the exported StartActivity, making VLC write attacker-chosen content under an attacker-chosen name in the shared Download directory, overwriting other apps
VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri() that trusts content URIs based only on the com.fsck.k9.attachmentprovider or gmail-ls authority. A co-installed app without permissio
CVE-2026-115723 | Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow application buffers by declaring an unvalidated BSend total length. Attackers connecting from the configured peer address can declare up to 65535 bytes and send a short fragment, causing BRecv to memcpy past the buffer and crash or corrupt SCADA, HMI or gateway processes.
Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow application buffers by declaring an unvalidated BSend total length. Attackers connecting from the co
CVE-2026-115722 | RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes ply_read_list_property() call an out-of-bounds handler, crashing ASCII parsing or corrupting memory in binary parsing.
RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes ply_read_list_propert
CVE-2026-112998 | Google Chrome up to 155.0.8059.84 Views memory corruption (WID-SEC-2026-4067)
A vulnerability categorized as critical has been discovered in Google Chrome. Affected by this vulnerability is an unknown functionality of the component Views. The manipulation results in memory corruption. This vulnerability is known as C
CVE-2026-112997 | Google Chrome up to 155.0.8059.84 CSS memory corruption (WID-SEC-2026-4067)
A vulnerability was found in Google Chrome. It has been rated as critical. Affected is an unknown function of the component CSS. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2026-112997. It is possible to
CVE-2026-107685 | Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via a TLS certificate the client does not trust. ReqLLM.Streaming.WebSocketSession.Client.start/3 in lib/req_llm/streaming/web_socket_session/client.ex starts WebSockex without TLS options, and WebSockex defaults to insecure: true, which connects
Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via a TLS certificate th
CVE-2026-95620 | A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availability.
A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client application to crash, affecting availability.
CVE-2026-94263 | The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 to 0.9.2.7 do not consistently disable shortcode processing in the confirmation message of their front-end forms, allowing unauthenticated visitors to have arbitrary shortcodes executed server-side when they submit a form whose stored configuration does not carry the relevant setting.
The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 to 0.9.2.7 do not consistently disable shortcode processing in the confirmation message of their front-end forms, allowing unauthen
CVE-2026-111965 | The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPress comment form.
The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the anti-spam protection an administrator configured for the WordPr
Sicherheitslücke bei PHP: KI kann auch eine Freundin sein | taz.de
Denn aufgedeckt wurden die Lücken laut unabhängigen Cybersicherheitsfirmen mithilfe von KI. Ohne sie wäre es vermutlich nicht möglich gewesen, die ... Weiterlesen
CVE-2026-105963 | Externally-Generated Error Message Containing Sensitive Information vulnerability in plug_crypto in elixir-plug plug_crypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every public function in Plug.Crypto validates argument types in a function-head guard. A failed guard makes the Erlang VM raise FunctionClauseError with the actual argument values in the top stack frame, so the s
Externally-Generated Error Message Containing Sensitive Information vulnerability in plug_crypto in elixir-plug plug_crypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed a
Weltweite IT-Sicherheitslücke! Reaktion von Behörden und Verwaltung im Donau-Ries
Das Internet bietet immer wieder auch Angriffspunkte für Hacker. Weiterlesen
CVE-2026-16762 | An attacker able to supply a crafted XML document to an application using QXmlStreamReader can cause disproportionate CPU consumption during parsing, making the application unresponsive (denial of service). Exploitation requires only that the application parse attacker-influenced XML; no authentication, privileges, or user interaction beyond ingesting the input are needed. There is no loss of confidentiality or integrity — no data disclosure, data modificatio
An attacker able to supply a crafted XML document to an application using QXmlStreamReader can cause disproportionate CPU consumption during parsing, making the application unresponsive (denial of service). Exploitation requires only that t
CVE-2026-89320 | `HmacShaCryptor.Hash` never hashed its input. For any input it returned `HMAC_K("")` — the MAC of the empty message under the key. Every AES-CBC-HMAC JWE produced or verified by gose therefore carried an authentication tag that is constant per key and independent of the message, removing ciphertext integrity entirely.
`HmacShaCryptor.Hash` never hashed its input. For any input it returned `HMAC_K("")` — the MAC of the empty message under the key. Every AES-CBC-HMAC JWE produced or verified by gose therefore carried an authentication tag that is constant
CVE-2026-25784 | Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container image bluespice/wiki) allows privilege escalation. The default value of $mwsgTokenAuthenticatorServiceCIDR in the container's LocalSettings.php was intended to restrict internal service authentication to the container network, but evaluated to an empty string when the environment variable WIKI_SERVICE_TOKEN_AUTH_ALLOWED was not set. An empty value disa
Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container image bluespice/wiki) allows privilege escalation. The default value of $mwsgTokenAuthenticatorServiceCIDR in the container's Local