Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 743 | 0,2 % |
| ≥50 % | 3.223 | 0,8 % |
| ≥10 % | 22.078 | 5,8 % |
| <10 % | 354.685 | 93,2 % |
CVE-2026-118651 | Labstack Echo up to 5.3.x Proxy Middleware access control (Nessus ID 373710)
A vulnerability was found in Labstack Echo up to 5.3.x. It has been declared as problematic. Affected is an unknown function of the component Proxy Middleware. The manipulation results in improper access controls. This vulnerability is iden
CVE-2026-118654 | Labstack Echo up to 4.15.x/5.3.x Static File Handlers path traversal (Nessus ID 373712)
A vulnerability, which was classified as problematic, has been found in Labstack Echo up to 4.15.x/5.3.x. This affects an unknown function of the component Static File Handlers. Performing a manipulation results in path traversal. This vuln
CVE-2026-76465 | Cisco NX-OS Software up to 10.6(3s) MPLS OAM code injection (Nessus ID 373713)
A vulnerability, which was classified as very critical, was found in Cisco NX-OS Software. This vulnerability affects unknown code of the component MPLS OAM. Such manipulation leads to code injection. This vulnerability is listed as CVE-202
CVE-2026-104048 | Red Hat Enterprise Linux/OpenShift Container Platform SSSD improper authorization (Nessus ID 373728)
A vulnerability classified as critical was found in Red Hat Enterprise Linux and OpenShift Container Platform. Impacted is an unknown function of the component SSSD. The manipulation results in improper authorization. This vulnerability is
CVE-2025-39753 | Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1 mm/migrate.c migrate_folio privilege escalation (Nessus ID 264770 / WID-SEC-2025-2040)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1. This vulnerability affects the function migrate_folio of the file mm/migrate.c. Performing a manipulation results in pri
CVE-2025-39752 | Linux Kernel up to 6.16.1 ARM rockchip_smp_prepare_cpus initialization (EUVD-2025-28959 / Nessus ID 264734)
A vulnerability classified as critical was found in Linux Kernel up to 6.16.1. This affects the function rockchip_smp_prepare_cpus of the component ARM. Such manipulation leads to improper initialization. This vulnerability is documented as
CVE-2025-39751 | Linux Kernel up to 6.16.1 ALSA add_tuning_control buffer overflow (EUVD-2025-28960 / Nessus ID 264736)
This issue seems to be a false positive. Please check the referenced sources and consider omitting this entry entirely. Weiterlesen
CVE-2025-39750 | Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1 wifi ath12k_dp_rx_peer_tid_setup tid out-of-bounds (Nessus ID 264717 / WID-SEC-2025-2040)
A vulnerability classified as critical has been found in Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1. Affected by this issue is the function ath12k_dp_rx_peer_tid_setup of the component wifi. This manipulation of the argument tid caus
CVE-2025-39749 | Linux Kernel up to 6.16.1 rcu rcu_read_unlock defer_qs_iw_pending race condition (EUVD-2025-28962 / Nessus ID 264751)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.16.1. Affected by this issue is the function rcu_read_unlock of the component rcu. Such manipulation of the argument defer_qs_iw_pending leads to race cond
CVE-2025-39748 | Linux Kernel up to 6.12.42/6.15.10/6.16.1 bpf is_branch_taken memory corruption (Nessus ID 264755 / WID-SEC-2025-2040)
A vulnerability described as critical has been identified in Linux Kernel up to 6.12.42/6.15.10/6.16.1. Affected by this vulnerability is the function is_branch_taken of the component bpf. The manipulation results in memory corruption. This
CVE-2026-5627 | mintplex-labs anything-llm up to 1.12.0 AgentFlows index.js loadFlow/deleteFlow path traversal
A vulnerability categorized as problematic has been discovered in mintplex-labs anything-llm up to 1.12.0. This affects the function loadFlow/deleteFlow of the file server/utils/agentFlows/index.js of the component AgentFlows. Such manipula
CVE-2026-23818 | HPE Private 5G Core up to 1.25.3.0 Graphical User Interface redirect
A vulnerability has been found in HPE Private 5G Core up to 1.25.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Graphical User Interface. This manipulation causes open redirect
CVE-2025-62818 | Samsung Mobile Processor/Wearable Processor/Modem Exynos up to 9110 SMS TP-UD Packet out-of-bounds write
A vulnerability categorized as critical has been discovered in Samsung Mobile Processor, Wearable Processor and Modem Exynos up to 9110. This vulnerability affects unknown code of the component SMS TP-UD Packet Handler. The manipulation res
CVE-2024-13362 | Role Based Pricing for Woo by Meow Crew Plugin on WordPress Parameter url cross site scripting
A vulnerability, which was classified as problematic, has been found in Role Based Pricing for Woo by Meow Crew Plugin on WordPress. This affects an unknown function of the component Parameter Handler. This manipulation of the argument url
CVE-2022-48149 | Online Student Admission System 1.0 username sql injection (EUVD-2022-50861)
A vulnerability categorized as critical has been discovered in Online Student Admission System 1.0. The affected element is an unknown function. Executing a manipulation of the argument Username can lead to sql injection. This vulnerability
CVE-2022-48140 | DedeCMS 5.7.97 file_manage_view.php?fmdo=edit&filename cross site scripting (EUVD-2022-50852)
A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7.97. Affected by this issue is some unknown functionality of the file /file_manage_view.php?fmdo=edit&amp;filename. The manipulation leads to cross site
CVE-2022-48130 | Tenda W20E 15.11.0.6 formSetStaticRoute stack-based overflow (EUVD-2022-50842)
A vulnerability labeled as critical has been found in Tenda W20E 15.11.0.6. The impacted element is the function formSetStaticRoute. The manipulation of the argument staticRouteNet/staticRouteMask/staticRouteGateway/staticRouteWAN results i
CVE-2026-119266 | Google Chrome up to 156.0.8078.73 Quota use after free (EUVD-2026-113435)
A vulnerability marked as critical has been reported in Google Chrome. Affected by this issue is some unknown functionality of the component Quota. This manipulation causes use after free. This vulnerability appears as CVE-2026-119266. The
CVE-2026-119265 | Google Chrome up to 156.0.8078.73 Quota memory corruption (EUVD-2026-113434)
A vulnerability described as critical has been identified in Google Chrome. This affects an unknown part of the component Quota. Such manipulation leads to memory corruption. This vulnerability is traded as CVE-2026-119265. The attack may b
CVE-2026-119264 | Google Chrome up to 156.0.8078.73 Dawn memory corruption (EUVD-2026-113433)
A vulnerability labeled as critical has been found in Google Chrome. Affected by this vulnerability is an unknown functionality of the component Dawn. The manipulation results in memory corruption. This vulnerability is reported as CVE-2026
CVE-2026-119268 | Google Chrome up to 156.0.8078.73 Editing integer overflow (EUVD-2026-113437)
A vulnerability, which was classified as critical, has been found in Google Chrome. Impacted is an unknown function of the component Editing. The manipulation leads to integer overflow. This vulnerability is uniquely identified as CVE-2026-
CVE-2026-119267 | Google Chrome up to 156.0.8078.73 DOM memory corruption (EUVD-2026-113436)
A vulnerability classified as critical has been found in Google Chrome. This vulnerability affects unknown code of the component DOM. Performing a manipulation results in memory corruption. This vulnerability is known as CVE-2026-119267. Re
CVE-2026-119269 | Google Chrome up to 156.0.8078.73 Blink use after free (EUVD-2026-113438)
A vulnerability, which was classified as critical, was found in Google Chrome. The affected element is an unknown function of the component Blink. The manipulation results in use after free. This vulnerability was named CVE-2026-119269. The
CVE-2026-119270 | Google Chrome up to 156.0.8078.73 CacheStorage input validation (EUVD-2026-113439)
A vulnerability classified as critical was found in Google Chrome. This issue affects some unknown processing of the component CacheStorage. Executing a manipulation can lead to improper input validation. This vulnerability is handled as CV
CVE-2026-119271 | Google Chrome up to 156.0.8078.73 Skia use after free (EUVD-2026-113440)
A vulnerability has been found in Google Chrome and classified as critical. The impacted element is an unknown function of the component Skia. This manipulation causes use after free. The identification of this vulnerability is CVE-2026-119
CVE-2026-119272 | Google Chrome up to 156.0.8078.73 FileSystem out-of-bounds (EUVD-2026-113441)
A vulnerability was found in Google Chrome. It has been declared as problematic. Affected is an unknown function of the component FileSystem. Executing a manipulation can lead to out-of-bounds read. This vulnerability is tracked as CVE-2026
CVE-2026-118947 | Red Hat Keycloak/Single Sign-On UMA resource registration endpoint privileges management (EUVD-2026-113442)
A vulnerability classified as problematic has been found in Red Hat Keycloak and Single Sign-On. The affected element is an unknown function of the component UMA resource registration endpoint. The manipulation leads to improper privilege m
CVE-2026-118959 | Red Hat Keycloak/Single Sign-On Required Action Provider kc_action improper authorization (EUVD-2026-113443)
A vulnerability, which was classified as critical, was found in Red Hat Keycloak and Single Sign-On. This impacts an unknown function of the component Required Action Provider. Such manipulation of the argument kc_action leads to improper a
CVE-2026-110133 | Ghostscript Outline heap-based overflow (EUVD-2026-113444)
A vulnerability was found in Ghostscript and classified as critical. This affects an unknown function of the component Outline. Such manipulation leads to heap-based buffer overflow. This vulnerability is listed as CVE-2026-110133. The atta
CVE-2026-15801 | Red Hat CRI-O Container Checkpoint And Restore Feature input validation (EUVD-2026-83865)
A vulnerability was found in Red Hat CRI-O. It has been declared as very critical. Affected by this vulnerability is an unknown functionality of the component Container Checkpoint And Restore Feature. The manipulation results in improper in
CVE-2026-93008 | Red Hat Ceph Storage DNS Resolver improper authorization (EUVD-2026-112787)
A vulnerability labeled as problematic has been found in Red Hat Ceph Storage, Enterprise Linux, OpenShift Container Platform and OpenStack Platform. This impacts an unknown function of the component DNS Resolver. The manipulation results i
CVE-2026-112602 | Apple Xcode up to 27.1 State Management improper authorization (EUVD-2026-113445)
A vulnerability, which was classified as problematic, has been found in Apple Xcode up to 27.1. This affects an unknown function of the component State Management. This manipulation causes improper authorization. This vulnerability is handl
CVE-2026-112605 | Apple Xcode up to 27.1 Symlinks symlink (EUVD-2026-113446)
A vulnerability classified as problematic was found in Apple Xcode up to 27.1. The impacted element is an unknown function of the component Symlinks. The manipulation results in symlink following. This vulnerability is known as CVE-2026-112
CVE-2026-119317 | Tenable Plugin Feed Unix compliance audit information disclosure (ID 202610282338 / EUVD-2026-113393)
A vulnerability was found in Tenable Plugin Feed and classified as problematic. This affects an unknown part of the component Unix compliance audit. Executing a manipulation can lead to information disclosure. This vulnerability is tracked
CVE-2026-116566 | Python up to 3.15.x Socket socket.getaddrinfo host/port input validation (EUVD-2026-113279)
A vulnerability marked as critical has been reported in Python up to 3.15.x. This affects the function socket.getaddrinfo of the component Socket. The manipulation of the argument host/port leads to improper input validation. This vulnerabi
CVE-2025-39747 | Linux Kernel up to 6.12.42/6.15.10/6.16.1 drm msm_ioctl_gem_info_set_metadata null pointer dereference (Nessus ID 264747 / WID-SEC-2025-2040)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.12.42/6.15.10/6.16.1. Affected is the function msm_ioctl_gem_info_set_metadata of the component drm. The manipulation leads to null pointer dereference. This vulne
CVE-2025-39746 | Linux Kernel up to 6.12.42/6.15.10/6.16.1 wifi ath10k_pci denial of service (Nessus ID 264741 / WID-SEC-2025-2040)
A vulnerability was found in Linux Kernel up to 6.12.42/6.15.10/6.16.1 and classified as critical. This vulnerability affects the function ath10k_pci of the component wifi. Executing a manipulation can lead to denial of service. This vulner
CVE-2025-39745 | Linux Kernel up to 6.15.10/6.16.1 rcu kernel/rcu/rcutorture.c rcutorture_one_extend_check privilege escalation (Nessus ID 264721 / WID-SEC-2025-2040)
A vulnerability has been found in Linux Kernel up to 6.15.10/6.16.1 and classified as problematic. Impacted is the function rcutorture_one_extend_check of the file kernel/rcu/rcutorture.c of the component rcu Handler. The manipulation leads
CVE-2025-39744 | Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1 rcu_read_unlock state issue (Nessus ID 264771 / WID-SEC-2025-2040)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1. This impacts the function rcu_read_unlock. Executing a manipulation can lead to state issue. This vulnerability is tracked as CVE-2025-
CVE-2025-39743 | Linux Kernel up to 6.16.1 jfs clear_inode fileset privilege escalation (EUVD-2025-28968 / Nessus ID 264731)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.16.1. This affects the function clear_inode of the component jfs. Performing a manipulation of the argument fileset results in privilege escalation. This vulne
CVE-2025-39742 | Linux Kernel up to 6.16.1 RDMA find_hw_thread_mask divide by zero (EUVD-2025-28969 / Nessus ID 264750)
A vulnerability was found in Linux Kernel up to 6.16.1. It has been rated as critical. The affected element is the function find_hw_thread_mask of the component RDMA. This manipulation causes divide by zero. The identification of this vulne
CVE-2025-39741 | Linux Kernel up to 6.16.1/6.17-rc1 assertion (Nessus ID 264694 / WID-SEC-2025-2040)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.16.1/6.17-rc1. Affected by this vulnerability is an unknown functionality. This manipulation causes reachable assertion. This vulnerability appears as
CVE-2025-39740 | Linux Kernel up to 6.16.1/6.17-rc1 drm put use after free (Nessus ID 264692 / WID-SEC-2025-2040)
A vulnerability classified as critical was found in Linux Kernel up to 6.16.1/6.17-rc1. Affected is the function put of the component drm. The manipulation results in use after free. This vulnerability is reported as CVE-2025-39740. The att
CVE-2025-39739 | Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1 MDSS arm_smmu_context_fault allocation of resources (Nessus ID 264720 / WID-SEC-2025-2040)
A vulnerability was found in Linux Kernel up to 6.6.102/6.12.42/6.15.10/6.16.1. It has been declared as critical. Impacted is the function arm_smmu_context_fault of the component MDSS Component. The manipulation results in allocation of res
CVE-2026-95284 | Google Chrome up to 153.0.8010.52 ANGLE buffer overflow (Nessus ID 373745)
A vulnerability classified as critical has been found in Google Chrome. This affects an unknown function of the component ANGLE. This manipulation causes buffer overflow. The identification of this vulnerability is CVE-2026-95284. It is pos
CVE-2026-86345 | Red Hat Directory Server/Enterprise Linux 389-ds-base cleartext transmission (EUVD-2026-91139 / Nessus ID 373732)
A vulnerability identified as problematic has been detected in Red Hat Directory Server and Enterprise Linux. This vulnerability affects unknown code of the component 389-ds-base. This manipulation causes cleartext transmission of sensitive
CVE-2026-95281 | Google Chrome up to 153.0.8010.52 ANGLE buffer overflow (Nessus ID 373745)
A vulnerability marked as critical has been reported in Google Chrome. The affected element is an unknown function of the component ANGLE. The manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2026-9528
CVE-2026-110152 | Google Chrome up to 155.0.8059.39 ANGLE buffer overflow (Nessus ID 373745)
A vulnerability categorized as critical has been discovered in Google Chrome. This vulnerability affects unknown code of the component ANGLE. Executing a manipulation can lead to buffer overflow. This vulnerability is registered as CVE-2026
CVE-2026-102331 | Google Chrome up to 154.0.8037.57 ANGLE buffer overflow (Nessus ID 373745 / WID-SEC-2026-3648)
A vulnerability was found in Google Chrome and classified as critical. Affected by this vulnerability is an unknown functionality of the component ANGLE. Executing a manipulation can lead to buffer overflow. This vulnerability is registered
CVE-2026-101548 | Oracle Application Testing Suite 13.3.0.1 OpenScript privileges management (Nessus ID 373755)
A vulnerability was found in Oracle Application Testing Suite 13.3.0.1. It has been declared as very critical. The affected element is an unknown function of the component OpenScript. Executing a manipulation can lead to improper privilege
CVE-2026-101549 | Oracle Application Testing Suite 13.3.0.1 OpenScript privileges management (Nessus ID 373755)
A vulnerability was found in Oracle Application Testing Suite 13.3.0.1. It has been rated as very critical. The impacted element is an unknown function of the component OpenScript. The manipulation leads to improper privilege management. Th
CVE-2026-93588 | ImageMagick prior 7.1.2-31/6.9.13-56 Pnm Image null pointer dereference (EUVD-2026-82907)
A vulnerability labeled as problematic has been found in ImageMagick. The impacted element is an unknown function of the component Pnm Image Handler. Such manipulation leads to null pointer dereference. This vulnerability is referenced as C
CVE-2026-93587 | ImageMagick prior 7.1.2-31/6.9.13-56 PCD Coder allocation of resources (EUVD-2026-82906)
A vulnerability identified as problematic has been detected in ImageMagick. This impacts an unknown function of the component PCD Coder. Performing a manipulation results in allocation of resources. This vulnerability was named CVE-2026-935
CVE-2026-61645 | docat-org docat up to 1.5.x Upload API unrestricted upload (EUVD-2026-113395)
A vulnerability marked as critical has been reported in docat-org docat up to 1.5.x. This impacts an unknown function of the component Upload API. The manipulation leads to unrestricted upload. This vulnerability is traded as CVE-2026-61645
CVE-2026-61654 | Lightdash up to 0.3213.0 Webhook projectController.ts testWebhook accountId/runId path traversal (EUVD-2026-113396)
A vulnerability labeled as critical has been found in Lightdash up to 0.3213.0. This affects the function testWebhook of the file packages/backend/src/controllers/projectController.ts of the component Webhook. Executing a manipulation of th
CVE-2026-61671 | LabRedesCefetRJ WeGIA up to 3.8.6 AtendidoControle /controle/control.php AtendidoControle.alterar authorization (EUVD-2026-113397)
A vulnerability was found in LabRedesCefetRJ WeGIA up to 3.8.6. It has been declared as problematic. This issue affects the function AtendidoControle.alterar of the file /controle/control.php of the component AtendidoControle. The manipulat
CVE-2026-61673 | LabRedesCefetRJ WeGIA up to 3.8.6 DOM listar_despachos.php html_entity_decode texto cross site scripting (EUVD-2026-113398)
A vulnerability categorized as problematic has been discovered in LabRedesCefetRJ WeGIA up to 3.8.6. The affected element is the function html_entity_decode of the file web/html/memorando/listar_despachos.php of the component DOM. Such mani
CVE-2026-61707 | SOCFortress CoPilot up to 0.1.75 Template Rendering db_operations.py render_document_with_context special elements in template engine (EUVD-2026-113399)
A vulnerability was found in SOCFortress CoPilot up to 0.1.75. It has been rated as very critical. Impacted is the function render_document_with_context of the file backend/app/incidents/routes/db_operations.py of the component Template Ren
CVE-2026-35632 | OpenClaw up to 2026.2.22 agents.create/agents.update symlink (GHSA-7xr2-q9vf-x4r5)
A vulnerability has been found in OpenClaw up to 2026.2.22 and classified as critical. Affected is the function agents.create/agents.update. Performing a manipulation results in symlink following. This vulnerability is identified as CVE-202
CVE-2026-22185 | OpenLDAP Lightning Memory-Mapped Database up to 2.6.10 readline out-of-bounds (EUVD-2026-1169 / Nessus ID 282442)
A vulnerability classified as problematic has been found in OpenLDAP Lightning Memory-Mapped Database up to 2.6.10. This vulnerability affects the function readline. The manipulation leads to out-of-bounds read. This vulnerability is unique