Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 743 | 0,2 % |
| ≥50 % | 3.220 | 0,8 % |
| ≥10 % | 22.068 | 5,8 % |
| <10 % | 354.698 | 93,2 % |
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel's own CVE team rates it 9.8 out of 10 on the CVSS scale. Anthropic said o
Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls
China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed t
CVE-2026-34217 | nyariv SandboxJS up to 0.8.35 exposure of resource (GHSA-hg73-4w7g-q96w)
A vulnerability has been found in nyariv SandboxJS up to 0.8.35 and classified as critical. This affects an unknown part. Performing a manipulation results in exposure of resource. This vulnerability was named CVE-2026-34217. The attack may
CVE-2026-34211 | nyariv SandboxJS up to 0.8.35 restOfExp recursion (GHSA-8pfc-jjgw-6g26)
A vulnerability marked as problematic has been reported in nyariv SandboxJS up to 0.8.35. Affected is the function restOfExp. The manipulation leads to uncontrolled recursion. This vulnerability is documented as CVE-2026-34211. The attack c
CVE-2026-34208 | nyariv SandboxJS up to 0.8.35 protection mechanism (GHSA-2gg9-6p7w-6cpj)
A vulnerability identified as critical has been detected in nyariv SandboxJS up to 0.8.35. This affects an unknown function. Performing a manipulation results in protection mechanism failure. This vulnerability is cataloged as CVE-2026-3420
CVE-2026-34148 | fedify vocab-runtime up to 1.9.5/1.10.4/2.0.7/2.1.0 Outbound Request resource consumption (GHSA-gm9m-gwc4-hwgp)
A vulnerability was found in fedify vocab-runtime up to 1.9.5/1.10.4/2.0.7/2.1.0. It has been rated as problematic. This vulnerability affects unknown code of the component Outbound Request Handler. The manipulation leads to resource consum
CVE-2026-33752 | curl_cffi prior 0.15.0 redirect
A vulnerability classified as problematic has been found in curl_cffi. Affected is an unknown function. The manipulation leads to open redirect. This vulnerability is uniquely identified as CVE-2026-33752. The attack is possible to be carri
CVE-2026-33405 | pi-hole web up to 6.4 queries.js formatInfo cross site scripting (GHSA-jx8x-mj2r-62vq)
A vulnerability categorized as problematic has been discovered in pi-hole web up to 6.4. The impacted element is the function formatInfo of the file queries.js. Such manipulation leads to cross site scripting. This vulnerability is listed a
CVE-2026-21381 | Qualcomm Snapdragon Auto up to XRV9209 Connection buffer over-read
A vulnerability categorized as critical has been discovered in Qualcomm Snapdragon Auto, Snapdragon CCW, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon MC, Sn
Sicherheitslücke in TightVNC Viewer 2.8.88, RCE ohne CVE geschlossen
... Windows veröffentlicht: Ein bösartiger VNC-Server kann Code auf dem Rechner desjenigen ausführen, der sich verbindet, noch bevor die ... Weiterlesen
Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls
China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed t
CVE-2026-34897 | David Lingren Media LIbrary Assistant Plugin up to 3.34 on WordPress cross site scripting
A vulnerability labeled as problematic has been found in David Lingren Media LIbrary Assistant Plugin up to 3.34 on WordPress. Affected is an unknown function. The manipulation results in cross site scripting. This vulnerability is identifi
CVE-2026-33406 | pi-hole web up to 6.4 Admin Interface /api/config cross site scripting (GHSA-9rfm-c5g6-538p)
A vulnerability identified as problematic has been detected in pi-hole web up to 6.4. This vulnerability affects unknown code of the file /api/config of the component Admin Interface. This manipulation causes cross site scripting. This vuln
CVE-2026-33404 | pi-hole web up to 6.4 Admin Interface network.js cross site scripting (GHSA-px6w-85wp-ww9v)
A vulnerability categorized as problematic has been discovered in pi-hole web up to 6.4. This affects an unknown part of the file network.js of the component Admin Interface. The manipulation results in cross site scripting. This vulnerabil
CVE-2026-33403 | pi-hole web up to 6.4 Admin Interface taillog.js file cross site scripting (GHSA-7xqw-r9pr-qv59)
A vulnerability, which was classified as problematic, was found in pi-hole web up to 6.4. Affected is an unknown function of the file taillog.js of the component Admin Interface. Such manipulation of the argument File leads to cross site sc
CVE-2026-21378 | Qualcomm Snapdragon Compute up to XG101039 IOCTL buffer over-read
A vulnerability was found in Qualcomm Snapdragon Compute, Snapdragon Industrial IOT and Snapdragon Mobile. It has been declared as critical. The affected element is an unknown function of the component IOCTL Handler. Such manipulation leads
CVE-2026-21376 | Qualcomm Snapdragon Compute up to XG101039 IOCTL buffer over-read
A vulnerability was found in Qualcomm Snapdragon Compute, Snapdragon Industrial IOT and Snapdragon Mobile. It has been classified as critical. Impacted is an unknown function of the component IOCTL Handler. This manipulation causes buffer o
CVE-2026-21375 | Qualcomm Snapdragon Compute up to XG101039 IOCTL buffer over-read
A vulnerability was found in Qualcomm Snapdragon Compute, Snapdragon Industrial IOT and Snapdragon Mobile and classified as critical. This issue affects some unknown processing of the component IOCTL Handler. The manipulation results in buf
CVE-2026-21374 | Qualcomm Snapdragon Compute up to XG101039 buffer over-read
A vulnerability classified as critical was found in Qualcomm Snapdragon Compute, Snapdragon Industrial IOT and Snapdragon Mobile. Affected by this vulnerability is an unknown functionality. Such manipulation leads to buffer over-read. This
CVE-2026-21373 | Qualcomm Snapdragon Compute up to XG101039 IOCTL buffer over-read
A vulnerability, which was classified as critical, was found in Qualcomm Snapdragon Compute, Snapdragon Industrial IOT and Snapdragon Mobile. This affects an unknown part of the component IOCTL Handler. Executing a manipulation can lead to
CVE-2026-21371 | Qualcomm Snapdragon Compute up to XG101039 buffer over-read
A vulnerability marked as critical has been reported in Qualcomm Snapdragon Compute, Snapdragon Industrial IOT and Snapdragon Mobile. This affects an unknown function. The manipulation leads to buffer over-read. This vulnerability is listed
CVE-2026-21367 | Qualcomm Snapdragon Auto up to XRV9209 FILS Discovery Frame buffer over-read
A vulnerability was found in Qualcomm Snapdragon Auto, Snapdragon CCW, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon MC, Snapdragon Mobile, Snapdragon WBC an
CVE-2023-26142 | CrowCpp Crow response splitting
A vulnerability described as critical has been identified in CrowCpp Crow. This issue affects some unknown processing. The manipulation results in http response splitting. This vulnerability is identified as CVE-2023-26142. The attack can b
CVE-2026-5660 | itsourcecode Construction Management System 1.0 Parameter /borrowed_equip.php emp sql injection
A vulnerability identified as critical has been detected in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /borrowed_equip.php of the component Parameter Handler. This manipulation o
CVE-2026-5659 | pytries datrie up to 0.8.3 trie File src/datrie.pyx Trie.load/Trie.read/Trie.__setstate__ deserialization (Issue 109)
A vulnerability categorized as critical has been discovered in pytries datrie up to 0.8.3. The affected element is the function Trie.load/Trie.read/Trie.__setstate__ of the file src/datrie.pyx of the component trie File Handler. The manipul
CVE-2026-5642 | Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f HTTP POST Request /viva/update.php name improper authorization (Issue 236)
A vulnerability marked as critical has been reported in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This affects an unknown function of the file /viva/update.php of the component HTTP POST Request Han
CVE-2026-5641 | PHPGurukul Online Shopping Portal Project 2.1 Parameter /admin/update-image1.php filename sql injection
A vulnerability labeled as critical has been found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of th
CVE-2026-97631: 16-Year-Old UEFI Flaw Threatens Servers
CVE-2026-97631: A 16-year-old UEFI flaw (CVSS score of 9.5/10) enables pre-OS code execution. Exposed servers need firmware patches and checks. A critical flaw, tracked as CVE-2026-97631 (CVSS score of 9.5), in the firmware that boots most
CVE-2026-34791 | Endian Firewall 3.3.25 Regular Expression /cgi-bin/logs_proxy.cgi open DATE os command injection
A vulnerability was found in Endian Firewall 3.3.25. It has been rated as critical. Affected by this vulnerability is the function Open of the file /cgi-bin/logs_proxy.cgi of the component Regular Expression Handler. The manipulation of the
CVE-2026-34790 | Endian Firewall 3.3.25 Parameter /cgi-bin/backup.cgi unlink ARCHIVE path traversal
A vulnerability was found in Endian Firewall 3.3.25. It has been declared as critical. Affected is the function unlink of the file /cgi-bin/backup.cgi of the component Parameter Handler. Executing a manipulation of the argument Archive can
CVE-2026-34728 | thorsten phpMyFAQ up to 4.1.0 index name path traversal (GHSA-38m8-xrfj-v38x)
A vulnerability, which was classified as critical, has been found in thorsten phpMyFAQ up to 4.1.0. Impacted is the function MediaBrowserController::index. The manipulation of the argument Name leads to path traversal. This vulnerability is
CVE-2026-33544 | steveiliop56 tinyauth up to 5.0.4 GenericOAuthService VerifyCode race condition (GHSA-9q5m-jfc4-wc92)
A vulnerability has been found in steveiliop56 tinyauth up to 5.0.4 and classified as problematic. The impacted element is the function VerifyCode of the component GenericOAuthService/GithubOAuthService/GoogleOAuthService. This manipulation
Ein Hacker aus Österreich entdeckte eine Sicherheitslücke bei Google und erhielt ... - Informat.ro
Ein österreichischer Hacker, Köck, entdeckte eine gravierende Schwachstelle in der Entwicklerplattform „Google for Developers“ und erhielt eine ... Weiterlesen
CVE-2026-5338 | Tenda G103 1.0.0.5 Setting system.lua action_set_system_settings lanIp command injection
A vulnerability was found in Tenda G103 1.0.0.5. It has been declared as critical. The affected element is the function action_set_system_settings of the file system.lua of the component Setting Handler. Such manipulation of the argument la
CVE-2026-5334 | itsourcecode Online Enrollment System 1.0 Parameter index.php?view=edit&id=3 deptid sql injection
A vulnerability was found in itsourcecode Online Enrollment System 1.0. It has been classified as critical. Impacted is an unknown function of the file /enrollment/index.php?view=edit&amp;id=3 of the component Parameter Handler. This ma
CVE-2026-5333 | DefaultFuction Content-Management-System 1.0 /admin/tools.php host command injection
A vulnerability was found in DefaultFuction Content-Management-System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/tools.php. The manipulation of the argument host results in command injectio
CVE-2026-5332 | Xiaopi Panel 1.0.0 WAF Firewall /demo.php param cross site scripting
A vulnerability has been found in Xiaopi Panel 1.0.0 and classified as problematic. This vulnerability affects unknown code of the file /demo.php of the component WAF Firewall. The manipulation of the argument param leads to cross site scri
CVE-2026-35168 | devcode-it openstamanager up to 2.10.1 Aggiornamenti sql injection (GHSA-2fr7-cc4f-wh98)
A vulnerability labeled as critical has been found in devcode-it openstamanager up to 2.10.1. This affects an unknown function of the component Aggiornamenti Module. Executing a manipulation can lead to sql injection. This vulnerability app
CVE-2026-32629 | thorsten phpMyFAQ up to 4.1.0 input validation (GHSA-98gw-w575-h2ph)
A vulnerability classified as critical has been found in thorsten phpMyFAQ up to 4.1.0. This vulnerability affects unknown code. Performing a manipulation results in improper input validation. This vulnerability is known as CVE-2026-32629.
CVE-2025-39738 | Linux Kernel up to 6.17-rc1 /fs/btrfs/extent-tree.c num_bytes privilege escalation (EUVD-2025-28973 / Nessus ID 264733)
A vulnerability described as problematic has been identified in Linux Kernel up to 6.17-rc1. This affects the function num_bytes of the file /fs/btrfs/extent-tree.c. Executing a manipulation can lead to privilege escalation. This vulnerabil
CVE-2025-39737 | Linux Kernel up to 6.17-rc1 mm __kmemleak_do_cleanup iteration (Nessus ID 264742 / WID-SEC-2025-2040)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.17-rc1. The impacted element is the function __kmemleak_do_cleanup of the component mm. Such manipulation leads to excessive iteration. This vulnerability i
CVE-2025-39736 | Linux Kernel up to 6.17-rc1 kmemleak pr_warn deadlock (Nessus ID 264719 / WID-SEC-2025-2040)
A vulnerability has been found in Linux Kernel up to 6.17-rc1 and classified as critical. This affects the function pr_warn of the component kmemleak. Performing a manipulation results in deadlock. This vulnerability is known as CVE-2025-39
[NEU] [hoch] Cisco Secure Firewall Threat Defense und Cisco ASA: Schwachstelle ermöglicht Denial of Service
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Secure Firewall Threat Defense und Cisco ASA (Adaptive Security Appliance) ausnutzen, um einen Denial of Service Angriff durchzuführen. Weiterlesen
[NEU] [mittel] Norton Antivirus: Schwachstelle ermöglicht Privilegieneskalation
Ein lokaler Angreifer kann eine Schwachstelle in Norton Antivirus, Avast Antivirus und AVG Anti-Virus ausnutzen, um Daten zu manipulieren und seine Privilegien auf SYSTEM zu erhöhen. Weiterlesen
[NEU] [niedrig] MLflow: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in MLflow ausnutzen, um Sicherheitsvorkehrungen zu umgehen. Weiterlesen
[NEU] [UNGEPATCHT] [hoch] Sophos Unified Threat Management (UTM) Software: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Sophos Unified Threat Management (UTM) Software ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen. Weiterlesen
[NEU] [mittel] Red Hat WildFly: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat WildFly ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Daten zu manipulieren. Weiterlesen
[NEU] [niedrig] systemd: Schwachstelle ermöglicht Manipulation von Dateien
Ein Angreifer kann eine Schwachstelle in systemd ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Dateien zu manipulieren. Weiterlesen
[NEU] [mittel] Apache Camel A2A: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Camel ausnutzen, um Sicherheitsvorkehrungen zu umgehen. Weiterlesen
HTTP2Shell: Kritische Brotli-Schwachstelle gefährdet zahlreiche Anwendungen und IT ...
Was zunächst wie ein Sicherheitsproblem von Node.js aussah, entwickelt sich zu einer deutlich größeren Herausforderung für Unternehmen und ihre IT- ... Weiterlesen
Siemens Software Center Sicherheitslücke: CVSS 8,4 [2026] - Tech Insider
Das Software Center sitzt auf vielen Engineering-Rechnern, und der Hersteller ist ein deutscher Konzern. Wer die Entwicklung der Cybersicherheit in ... Weiterlesen
CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in
CVE-2026-116839 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the
CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in mis
CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PAS
CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .
CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash
CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place