Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 720 | 0,2 % |
| ≥50 % | 3.224 | 0,9 % |
| ≥10 % | 22.120 | 6,0 % |
| <10 % | 345.063 | 93,0 % |
CVE-2026-85296 | Apache Camel AS2 state issue (WID-SEC-2026-4006)
A vulnerability categorized as critical has been discovered in Apache Camel. The affected element is an unknown function of the component AS2. Executing a manipulation can lead to state issue. This vulnerability is registered as CVE-2026-85
CVE-2026-85260 | Apache Camel information disclosure (WID-SEC-2026-4006)
A vulnerability, which was classified as problematic, was found in Apache Camel. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to information disclosure. The identification of this vulnerabili
CVE-2026-85257 | Apache Camel Camel-CXF information disclosure (WID-SEC-2026-4006)
A vulnerability was found in Apache Camel. It has been classified as problematic. The affected element is an unknown function of the component Camel-CXF. Performing a manipulation results in information disclosure. This vulnerability is ide
CVE-2026-85254 | Apache Camel HTTP information disclosure (WID-SEC-2026-4006)
A vulnerability described as problematic has been identified in Apache Camel. The impacted element is an unknown function of the component HTTP. The manipulation results in information disclosure. This vulnerability is known as CVE-2026-852
CVE-2026-85251 | Apache Camel HTTP information disclosure (WID-SEC-2026-4006)
A vulnerability labeled as problematic has been found in Apache Camel. Impacted is an unknown function of the component HTTP. Executing a manipulation can lead to information disclosure. This vulnerability appears as CVE-2026-85251. The att
CVE-2026-85250 | Apache Camel XPath xml external entity reference (WID-SEC-2026-4006)
A vulnerability, which was classified as critical, has been found in Apache Camel. Affected is an unknown function of the component XPath. Performing a manipulation results in xml external entity reference. This vulnerability was named CVE-
CVE-2026-85249 | Apache Camel Tika injection (WID-SEC-2026-4006)
A vulnerability was found in Apache Camel. It has been rated as critical. Impacted is an unknown function of the component Tika. Performing a manipulation results in injection. This vulnerability is cataloged as CVE-2026-85249. It is possib
CVE-2026-85248 | Apache Camel Camel-PQC signature verification (WID-SEC-2026-4006)
A vulnerability categorized as critical has been discovered in Apache Camel. This impacts an unknown function of the component Camel-PQC. The manipulation results in improper verification of cryptographic signature. This vulnerability is ca
CVE-2026-16755 | Lenovo Smart Camera XW1 prior 05.02.31.140 information disclosure (EUVD-2026-102533)
A vulnerability was found in Lenovo Smart Camera C33, Smart Camera C33 Pro, Smart Camera C35, Smart Camera C5X, Smart Camera RQ3, Smart Camera X6Q, Smart Camera X6T, Smart Camera X9T, Smart Network PTZ X5E, Smart Network PTZ X5Q, Smart Netw
CVE-2026-16754 | Lenovo Smart Camera C33 prior 05.02.31.140 certificate validation (EUVD-2026-102532)
A vulnerability was found in Lenovo Smart Camera C33, Smart Camera C35, Smart Camera C5X, Smart Camera RQ3, Smart Camera X5E, Smart Camera X5Q, Smart Camera X5T, Smart Camera X6Q, Smart Camera X6T and Smart Camera X9T. It has been declared
CVE-2026-11732 | NETGEAR CAX30/RAX30/RAX5/RAXE300 Block Sites input validation (EUVD-2026-98774)
A vulnerability described as very critical has been identified in NETGEAR CAX30, RAX30, RAX5 and RAXE300. Impacted is an unknown function of the component Block Sites. Executing a manipulation can lead to improper input validation. This vul
CVE-2026-111368 | ClassroomIO up to 1.0.0 Hono API Course Submission Routes authorization (EUVD-2026-102508)
A vulnerability was found in ClassroomIO up to 1.0.0 and classified as critical. The affected element is an unknown function of the component Hono API Course Submission Routes. Such manipulation leads to authorization bypass. This vulnerabi
Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
Overview On October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar. GitLab assigned it a CVSS sco
CVE-2022-46698 | Apple iOS/iPadOS up to 16.1.2 WebKit information disclosure (HT213530 / EUVD-2022-49487)
A vulnerability categorized as problematic has been discovered in Apple iOS and iPadOS up to 16.1.2. This issue affects some unknown processing of the component WebKit. Executing a manipulation can lead to information disclosure. This vulne
CVE-2026-110143 | Google Chrome up to 155.0.8059.39 lmza_sdk uninitialized pointer (Nessus ID 366230)
A vulnerability classified as problematic has been found in Google Chrome. This affects an unknown function of the component lmza_sdk. Performing a manipulation results in uninitialized pointer. This vulnerability is known as CVE-2026-11014
CVE-2026-110142 | Google Chrome up to 155.0.8059.39 FileSystem use after free (Nessus ID 366230)
A vulnerability classified as critical was found in Google Chrome. This impacts an unknown function of the component FileSystem. Executing a manipulation can lead to use after free. This vulnerability is handled as CVE-2026-110142. The atta
CVE-2026-110141 | Google Chrome up to 155.0.8059.39 Media information disclosure (Nessus ID 366230)
A vulnerability described as problematic has been identified in Google Chrome. Affected is an unknown function of the component Media. Executing a manipulation can lead to information disclosure. This vulnerability appears as CVE-2026-11014
CVE-2026-84016 | Microsoft Windows up to Server 2025 EAPHost Service out-of-bounds write (EUVD-2026-99453)
A vulnerability was found in Microsoft Windows. It has been rated as very critical. Affected by this issue is some unknown functionality of the component EAPHost Service. This manipulation causes out-of-bounds write. This vulnerability is t
CVE-2026-83875 | Microsoft Windows up to Server 2025 HID Parser out-of-bounds (EUVD-2026-99396)
A vulnerability labeled as problematic has been found in Microsoft Windows up to Server 2025. This affects an unknown part of the component HID Parser. The manipulation results in out-of-bounds read. This vulnerability was named CVE-2026-83
CVE-2026-85811 | Microsoft Windows up to Server 2025 Network Policy Server use after free (EUVD-2026-99522)
A vulnerability has been found in Microsoft Windows and classified as very critical. This impacts an unknown function of the component Network Policy Server. The manipulation leads to use after free. This vulnerability is traded as CVE-2026
CVE-2026-84017 | Microsoft Windows up to Server 2025 Routing/Remote Access Service null pointer dereference (EUVD-2026-99454)
A vulnerability, which was classified as critical, has been found in Microsoft Windows. This vulnerability affects unknown code of the component Routing/Remote Access Service. The manipulation leads to null pointer dereference. This vulnera
CVE-2026-85812 | Microsoft Windows up to Server 2025 Bind Filter Driver information disclosure (EUVD-2026-99523)
A vulnerability marked as problematic has been reported in Microsoft Windows up to Server 2025. This vulnerability affects unknown code of the component Bind Filter Driver. The manipulation leads to information disclosure. This vulnerabilit
CVE-2026-85933 | Microsoft Windows up to Server 2025 Print Spooler use after free (EUVD-2026-99630)
A vulnerability classified as very critical has been found in Microsoft Windows. Impacted is an unknown function of the component Print Spooler. The manipulation leads to use after free. This vulnerability is traded as CVE-2026-85933. An at
CVE-2026-85934 | Microsoft Windows up to Server 2025 AppX Deployment Service use after free (EUVD-2026-99631)
A vulnerability was found in Microsoft Windows up to Server 2025. It has been declared as very critical. This vulnerability affects unknown code of the component AppX Deployment Service. Executing a manipulation can lead to use after free.
F5 addressed critical RCE flaws in NGINX
F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application delivery firm F5 announced fixes for eleven security issues in NGINX. Among them, cri
CVE-2026-85247 | Apache Camel Knative certificate validation (WID-SEC-2026-4006)
A vulnerability was found in Apache Camel. It has been rated as problematic. This affects an unknown function of the component Knative. The manipulation leads to improper certificate validation. This vulnerability is listed as CVE-2026-8524
CVE-2026-85246 | Apache Camel Camel-Mina information disclosure (WID-SEC-2026-4006)
A vulnerability was found in Apache Camel and classified as problematic. Impacted is an unknown function of the component Camel-Mina. Such manipulation leads to information disclosure. This vulnerability is referenced as CVE-2026-85246. It
CVE-2026-84181 | Apache Camel Shiro improper authentication (WID-SEC-2026-4006)
A vulnerability was found in Apache Camel. It has been declared as critical. The impacted element is an unknown function of the component Shiro. Executing a manipulation can lead to improper authentication. This vulnerability is tracked as
CVE-2026-84180 | Apache Camel Knative information disclosure (WID-SEC-2026-4006)
A vulnerability described as problematic has been identified in Apache Camel. This issue affects some unknown processing of the component Knative. Executing a manipulation can lead to information disclosure. This vulnerability is handled as
CVE-2026-84178 | Apache Camel cross-site request forgery (WID-SEC-2026-4006)
A vulnerability, which was classified as problematic, was found in Apache Camel. This affects an unknown function. Such manipulation leads to cross-site request forgery. This vulnerability is referenced as CVE-2026-84178. It is possible to
CVE-2026-84176 | Apache Camel Camel-Platform-HTTP-Vertx cross-domain policy (WID-SEC-2026-4006)
A vulnerability labeled as problematic has been found in Apache Camel. This affects an unknown part of the component Camel-Platform-HTTP-Vertx. Such manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerabi
CVE-2026-102923 | SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, SparkyFitnessServer/services/chatService.ts and SparkyFitnessServer/services/labelScanService.ts do not validate destinations supplied in custom AI service settings. An authenticated user saves a custom AI service URL and invokes an affected AI flow. The user can save a custom AI service URL and trigger an outbound request. Successful exploitation can send ser
SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, SparkyFitnessServer/services/chatService.ts and SparkyFitnessServer/services/labelScanService.ts do not validate destinations supplied in cu
CVE-2026-83531 | Apache Camel Camel-Dynamic-Router Control Endpoint code injection (WID-SEC-2026-4006)
A vulnerability classified as critical was found in Apache Camel. The affected element is an unknown function of the component Camel-Dynamic-Router Control Endpoint. The manipulation results in code injection. This vulnerability was named C
CVE-2026-80344 | Apache Camel AS2 server-side request forgery (WID-SEC-2026-4006)
A vulnerability, which was classified as critical, has been found in Apache Camel. The impacted element is an unknown function of the component AS2. This manipulation causes server-side request forgery. The identification of this vulnerabil
CVE-2026-80343 | Apache Camel Camel-Netty-HTTP improper authorization (WID-SEC-2026-4006)
A vulnerability marked as critical has been reported in Apache Camel. This vulnerability affects unknown code of the component Camel-Netty-HTTP. Performing a manipulation results in improper authorization. This vulnerability is known as CVE
CVE-2026-80312 | Apache Camel Fail-Open Processors improper authentication (WID-SEC-2026-4006)
A vulnerability classified as critical has been found in Apache Camel. Impacted is an unknown function of the component Fail-Open Processors. The manipulation leads to improper authentication. This vulnerability is uniquely identified as CV
CVE-2026-79986 | Apache Camel camel-azure-files path traversal (WID-SEC-2026-4006)
A vulnerability identified as critical has been detected in Apache Camel. Affected by this issue is some unknown functionality of the component camel-azure-files. This manipulation causes path traversal. This vulnerability appears as CVE-20
CVE-2026-79985 | Apache Camel SMB path traversal (WID-SEC-2026-4006)
A vulnerability categorized as critical has been discovered in Apache Camel. Affected by this vulnerability is an unknown functionality of the component SMB. The manipulation results in path traversal. This vulnerability is reported as CVE-
CVE-2026-92263 | SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, the api/admin/backup/restore endpoint interpolates an uploaded filename into a shell command. An authenticated global administrator uploads a restore archive with a crafted filename. The administrator can supply a restore archive with a filename containing shell metacharacters. Successful exploitation can execute arbitrary operating-system commands with the ser
SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, the api/admin/backup/restore endpoint interpolates an uploaded filename into a shell command. An authenticated global administrator uploads
CVE-2026-68906 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, parseUserInformation in src/mms/iso_acse/acse.c checks len for zero before validating the negative bufPos returned by BerDecoder_decodeLength for a truncated long-form length. The continue path therefore swallows the error, reads buffer[-1], resets parsing to the beginning, and repeats the same malformed st
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, parseUserInformation in src/mms/iso_acse/acse.c checks len for zero before validating
CVE-2026-68907 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtils_copyStringToBuffer while constructing an MMS_ASSOCIATION_SPECIFIC dataset reference. The helper treats uninitialized dataSetRef[130] storage as a source string, causing strlen to read beyond the stack buffer, and then copies tho
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess reverses the source and destination arguments to StringUtils_copyS
CVE-2026-68908 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, Reporting_RCBWriteAccessHandler accepts an RptID longer than 129 bytes in the report-control-block write path. When GI later causes sendNextReportEntrySegment to serialize the report, the function wraps rptIdBuf[130] as a temporary MmsValue and passes it to MmsValue_setVisibleString. The setter's resize pat
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, Reporting_RCBWriteAccessHandler accepts an RptID longer than 129 bytes in the report-
CVE-2026-57446 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. From 1.6.1 until 1.6.2, a successful MMS ObtainFile operation closes MmsObtainFileTask::fileHandle but leaves the stale non-NULL value in a task marked MMS_FILE_UPLOAD_STATE_NOT_USED. If a later ObtainFile request reuses that task and destination creation fails, MMS_FILE_UPLOAD_STATE_SEND_OBTAIN_FILE_ERROR_DESTINATION clea
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. From 1.6.1 until 1.6.2, a successful MMS ObtainFile operation closes MmsObtainFileTask::fileHandle bu
CVE-2026-48741 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, alternateArrayAccess in src/mms/iso_mms/server/mms_read_service.c does not validate an alternate-access sub-array range when numberOfElements is greater than zero. An out-of-range MmsValue_getElement call returns NULL, and the sub-array branch passes that value to MmsValue_isDeletable, causing a NULL pointe
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, alternateArrayAccess in src/mms/iso_mms/server/mms_read_service.c does not validate a
CVE-2026-48503 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, the MMS file service in src/mms/iso_mms/server/mms_file_service.c accepts an out-of-range initialPosition in fileOpen and stores it in the file-read state. The fileRead path then subtracts the larger read position from the file size using unsigned arithmetic and fails to limit the response to the actual Fil
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, the MMS file service in src/mms/iso_mms/server/mms_file_service.c accepts an out-of-r
CVE-2022-46697 | Apple macOS up to 13.0 IOMobileFrameBuffer out-of-bounds (HT213532 / EUVD-2022-49486)
A vulnerability was found in Apple macOS and classified as critical. This issue affects some unknown processing of the component IOMobileFrameBuffer. Executing a manipulation can lead to out-of-bounds read. This vulnerability appears as CVE
CVE-2026-111581 | A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a label starting with '-' to be interpreted as a command-line flag by the spawned tool, potentially bypassing safety checks or causing unintended operations. This
A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or inp
CVE-2026-102941 | The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url[:nPath] before the len(url) >= nPath guard. A short destination causes a slice-bounds panic when the loop reaches a relative-path prefix for which len(url) < nPath and cap(url) < nPath. The one-byte destination / is an explicit non-panic counterexample because i
The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url[:nPath] before the len(url) >= nPath gua
CVE-2026-77630 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 22.0.4, parse_hostport in upnp/src/genlib/net/uri/uri.c synchronously calls getaddrinfo while parse_uri is processing attacker-supplied hostnames from inbound HTTP request targets in upnp/src/genlib/net/http/httpparser.c and GENA SUBSCRIBE CALLBACK headers handled by create_url_list in upnp/src/gena/gena_device.c. A remote unauthenticated peer can choose a slow or nonrespo
pupnp is an SDK for development of UPnP device and control point applications. Prior to 22.0.4, parse_hostport in upnp/src/genlib/net/uri/uri.c synchronously calls getaddrinfo while parse_uri is processing attacker-supplied hostnames from i
CVE-2026-96425 | Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus
Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus
CVE-2026-96424 | Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read arbitrary file as root over DBus
Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read arbitrary file as root over DBus
CVE-2026-57488 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the caller stores it as unsigned int. On LP64 systems, values greater than INT_MAX can truncate or wrap, so the HTTP parser can accept a body length different from the declared value. A remote adjacent-network peer can use the res
pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol and casts the resulting long to a 32-bit int before the cal
CVE-2026-57487 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Transfer-Encoding: chunked causes the HTTP parser in upnp/src/genlib/net/http/httpparser.c to leave parser->content_length at zero while parser_parse_chunky_entity and parser_parse_chunky_body accumulate decoded bytes in parser->msg.entity. The g_maxContentLength checks in http_RecvMessage in upnp/src/genlib/net/http/httpreadwrite.c therefore reject oversized numeri
pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Transfer-Encoding: chunked causes the HTTP parser in upnp/src/genlib/net/http/httpparser.c to leave parser->content_length at zero while parser_p
CVE-2026-55862 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process deeply nested XML with unbounded recursion. The iterative XML parser accepts the document, but ixmlPrintDomTreeRecursive in ixml/src/ixml.c and ixmlNode_getElementsByTagNameRecursive, ixmlNode_getElementsByTagNameNSRecursive, ixmlNode_cloneNodeTreeRecursive, and ixmlNode_isAncestor in ixml/src/node.c recurse over firstCh
pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process deeply nested XML with unbounded recursion. The iterative XML parser accepts the document, but ixml
CVE-2018-7489 | Oracle Retail Invoice Matching 15.0/16.0 jackson-databind incomplete blacklist (Nessus ID 109906 / ID 236791)
A vulnerability has been found in Oracle Retail Invoice Matching 15.0/16.0 and classified as very critical. Affected is an unknown function of the component jackson-databind. The manipulation leads to incomplete blacklist. This vulnerabilit
CVE-2018-1304 | Apache Tomcat up to 7.0.84/8.0.49/8.5.27/9.0.4 URL Pattern Empty String 7pk security (RHSA-2018:0465 / Nessus ID 106975)
A vulnerability described as critical has been identified in Apache Tomcat up to 7.0.84/8.0.49/8.5.27/9.0.4. The affected element is an unknown function of the component URL Pattern Handler. Executing a manipulation as part of Empty String
CVE-2026-79984 | Apache Camel camel-mina-sftp path traversal (WID-SEC-2026-4006)
A vulnerability was found in Apache Camel. It has been rated as critical. Affected is an unknown function of the component camel-mina-sftp. The manipulation leads to path traversal. This vulnerability is documented as CVE-2026-79984. The at
CVE-2026-79983 | Apache Camel FTP path traversal (WID-SEC-2026-4006)
A vulnerability was found in Apache Camel. It has been declared as critical. This impacts an unknown function of the component FTP. Executing a manipulation can lead to path traversal. This vulnerability is registered as CVE-2026-79983. It
CVE-2026-78165 | Apache Camel Spring deserialization (WID-SEC-2026-4006)
A vulnerability was found in Apache Camel. It has been declared as critical. This issue affects some unknown processing of the component Spring. Such manipulation leads to deserialization. This vulnerability is listed as CVE-2026-78165. The
CVE-2026-78164 | Apache Camel HTTP Producer input validation (WID-SEC-2026-4006)
A vulnerability marked as critical has been reported in Apache Camel. The affected element is an unknown function of the component HTTP Producer. The manipulation leads to improper input validation. This vulnerability is traded as CVE-2026-