Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 740 | 0,2 % |
| ≥50 % | 3.215 | 0,8 % |
| ≥10 % | 22.027 | 5,8 % |
| <10 % | 354.747 | 93,2 % |
CVE-2026-107098 | Royal Addons for Elementor Plugin up to 1.7.1069 on WordPress Map Widget cross site scripting (WID-SEC-2026-4184)
A vulnerability, which was classified as problematic, was found in Royal Addons for Elementor Plugin up to 1.7.1069 on WordPress. This vulnerability affects unknown code of the component Map Widget. The manipulation results in cross site sc
CVE-2026-107097 | Royal Addons Plugin up to 1.7.1069 on WordPress authorization (WID-SEC-2026-4184)
A vulnerability classified as critical has been found in Royal Addons Plugin up to 1.7.1069 on WordPress. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in missing authorization. This vulnerabi
CVE-2026-106648 | Royal Elementor Addons Plugin up to 1.7.1069 on WordPress Email Notification injection (WID-SEC-2026-4184)
A vulnerability categorized as problematic has been discovered in Royal Elementor Addons Plugin up to 1.7.1069 on WordPress. Affected by this vulnerability is an unknown functionality of the component Email Notification. Executing a manipul
CVE-2026-106647 | Royal Addons for Elementor Plugin up to 1.7.1069 on WordPress authorization (WID-SEC-2026-4184)
A vulnerability has been found in Royal Addons for Elementor Plugin up to 1.7.1069 on WordPress and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to missing authorization. This vulnerab
CVE-2026-107590 | Qt up to 4.4.x/6.8.8/6.11.2 Qt 5 Compatibility APIs module out-of-bounds write (WID-SEC-2026-4178)
A vulnerability was found in Qt up to 4.4.x/6.8.8/6.11.2. It has been classified as critical. This affects an unknown part of the component Qt 5 Compatibility APIs module. The manipulation leads to out-of-bounds write. This vulnerability is
CVE-2026-107472 | Qt up to 3.3.8 QTextCodec TSCII encoding out-of-bounds (WID-SEC-2026-4178)
A vulnerability was found in Qt and classified as critical. The impacted element is an unknown function of the component QTextCodec TSCII encoding. Executing a manipulation can lead to out-of-bounds read. This vulnerability is registered as
CVE-2026-105946 | Qt Group up to 6.7.x/6.8.9/6.11.1 Network out-of-bounds (WID-SEC-2026-4178)
A vulnerability identified as critical has been detected in Qt Group Qt up to 6.7.x/6.8.9/6.11.1. This impacts an unknown function of the component Network Module. This manipulation causes out-of-bounds read. This vulnerability is handled a
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in
CVE-2026-5330 | SourceCodester/mayuri_k Best Courier Management System 1.0 User Delete ajax.php?action=delete_user id access control
A vulnerability, which was classified as critical, has been found in SourceCodester/mayuri_k Best Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=delete_user of the component
CVE-2026-5328 | shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6 ProductItemDao Interface ProductIndexServiceImpl.java listItem sidx/sort sql injection
A vulnerability labeled as critical has been found in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/com/suisung/shopsuite/pt/service/impl/Prod
CVE-2026-4636 | Keycloak authorization before parsing and canonicalization (RHSA-2026:6477)
A vulnerability categorized as critical has been discovered in Keycloak. The affected element is an unknown function. Such manipulation leads to authorization before parsing and canonicalization. This vulnerability is documented as CVE-2026
CVE-2026-4634 | Keycloak scope excessive platform resource consumption within a loop (RHSA-2026:6477 / EUVD-2026-18212)
A vulnerability was found in Keycloak. It has been rated as critical. Impacted is an unknown function. This manipulation of the argument Scope causes excessive platform resource consumption within a loop. This vulnerability is registered as
CVE-2026-4325 | Keycloak SingleUseObjectProvider isolation (RHSA-2026:6477)
A vulnerability described as problematic has been identified in Keycloak. Affected is an unknown function of the component SingleUseObjectProvider. The manipulation results in improper isolation or compartmentalization. This vulnerability i
CVE-2026-4282 | Keycloak isolation (RHSA-2026:6477 / Nessus ID 330085)
A vulnerability marked as problematic has been reported in Keycloak. This impacts an unknown function. The manipulation leads to improper isolation or compartmentalization. This vulnerability is traded as CVE-2026-4282. It is possible to in
CVE-2026-3872 | Keycloak redirect (RHSA-2026:6477)
A vulnerability was found in Keycloak. It has been classified as problematic. This vulnerability affects unknown code. The manipulation leads to open redirect. This vulnerability is listed as CVE-2026-3872. The attack may be initiated remot
CVE-2026-29782 | devcode-it openstamanager up to 2.10.1 oauth2.php unserialize deserialization (GHSA-whv5-4q2f-q68g)
A vulnerability was found in devcode-it openstamanager up to 2.10.1 and classified as problematic. This affects the function unserialize of the file oauth2.php. Executing a manipulation can lead to deserialization. This vulnerability is tra
CVE-2026-26928 | Krajowa Izba Rozliczeniowa SzafirHost up to 1.0.x JAR File Parser /temp integrity check
A vulnerability, which was classified as critical, was found in Krajowa Izba Rozliczeniowa SzafirHost up to 1.0.x. This vulnerability affects unknown code of the file /temp of the component JAR File Parser. Executing a manipulation can lead
CVE-2026-26927 | Krajowa Izba Rozliczeniowa Szafir SDK Web prior 0.0.17.4 document_base_url less trusted source
A vulnerability, which was classified as problematic, has been found in Krajowa Izba Rozliczeniowa Szafir SDK Web. This affects an unknown part. Performing a manipulation of the argument document_base_url results in use of less trusted sour
MariaDB exposure is not proof of CVE-2026-92262 compromise
MariaDB exposure is not proof of CVE-2026-92262 compromise Internet measurements can show that MariaDB is common. They cannot tell an incident responder which servers are running an affected release or which tables have entered the vulnerab
CVE-2026-35273: SSRF to RCE in Oracle PeopleSoft
On September 25, 2026, Mandiant released a report regarding continued mass exploitation of CVE-2026-35273 by the ShinyHunters group. TrendAI’s Zero Day Initiative first reported this CVE to Oracle on June 10, 2026, following an investigatio
Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads
Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGrap
CVE-2026-5326 | SourceCodester Leave Application System 1.0 User Information index.php?page=manage_user id authorization
A vulnerability categorized as problematic has been discovered in SourceCodester Leave Application System 1.0. Impacted is an unknown function of the file /index.php?page=manage_user of the component User Information Handler. Such manipulat
CVE-2026-5246 | Cesanta Mongoose up to 7.20 P-384 Public Key mongoose.c mg_tls_verify_cert_signature authorization
A vulnerability labeled as critical has been found in Cesanta Mongoose up to 7.20. Affected is the function mg_tls_verify_cert_signature of the file mongoose.c of the component P-384 Public Key Handler. Executing a manipulation can lead to
CVE-2026-5245 | Cesanta Mongoose up to 7.20 mDNS Record mongoose.c handle_mdns_record buf stack-based overflow
A vulnerability identified as critical has been detected in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file mongoose.c of the component mDNS Record Handler. Performing a manipulation of the argument buf
CVE-2026-34890 | Mark O’Donnell MSTW League Manager Plugin up to 2.10 on WordPress cross site scripting
A vulnerability categorized as problematic has been discovered in Mark O’Donnell MSTW League Manager Plugin up to 2.10 on WordPress. This impacts an unknown function. Executing a manipulation can lead to cross site scripting. This vulnerabi
CVE-2026-33617 | MB connect line mbCONNECT24/mymbCONNECT24 up to 2.19.4 Configuration File information expsure (VDE-2026-030)
A vulnerability categorized as problematic has been discovered in MB connect line mbCONNECT24 and mymbCONNECT24 up to 2.19.4. This vulnerability affects unknown code of the component Configuration File Handler. The manipulation results in e
CVE-2026-33615 | MB connect line mbCONNECT24/mymbCONNECT24 up to 2.19.4 Setinfo Endpoint sql injection (VDE-2026-030)
A vulnerability was found in MB connect line mbCONNECT24 and mymbCONNECT24 up to 2.19.4. It has been declared as critical. Affected by this issue is some unknown functionality of the component Setinfo Endpoint. Executing a manipulation can
CVE-2026-32145 | gleam-wisp up to 2.2.1 multipart_body allocation of resources
A vulnerability was found in gleam-wisp wisp up to 2.2.1 and classified as problematic. Affected is the function multipart_body. Such manipulation leads to allocation of resources. This vulnerability is listed as CVE-2026-32145. The attack
CVE-2026-62911 prüfen: 12 Schritte, 90 Min [2026] - shattered.io
CVE-2026-62911 trifft Microsoft Exchange Server 2016, 2019 und die Subscription Edition. Der CVE-Eintrag beschreibt eine ... Weiterlesen
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in
CVE-2026-63958 | Linux Kernel up to 7.0.11 UCSI Connector ucsi_connector_change connector_number null pointer dereference (Nessus ID 372930)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.1.175/6.6.142/6.12.92/6.18.34/7.0.11. This issue affects the function ucsi_connector_change of the component UCSI Connector. The manipulation of the argumen
CVE-2026-93543 | x.org libXi up to 1.8.3 XI2 class parser out-of-bounds (Nessus ID 372931)
A vulnerability described as problematic has been identified in x.org libXi up to 1.8.3. Affected by this issue is the function XI2 class parser. Executing a manipulation can lead to out-of-bounds read. This vulnerability appears as CVE-202
CVE-2026-93542 | x.org LibXi up to 1.8.3 XI2 Class Parsing size_classes/copy_classes out-of-bounds (Nessus ID 372931)
A vulnerability labeled as problematic has been found in x.org LibXi up to 1.8.3. Affected is the function size_classes/copy_classes of the component XI2 Class Parsing. Such manipulation leads to out-of-bounds read. This vulnerability is do
CVE-2026-93541 | X.org LibXi up to 1.8.3 XQueryDeviceState out-of-bounds (Nessus ID 372931)
A vulnerability was found in X.org LibXi up to 1.8.3. It has been rated as problematic. This issue affects the function XQueryDeviceState. Performing a manipulation results in out-of-bounds read. This vulnerability is cataloged as CVE-2026-
CVE-2022-48090 | Tramyardg hotel-mgmt-system 2022.4 /app/dao/CustomerDAO.php sql injection (Issue 21 / EUVD-2022-50804)
A vulnerability classified as critical was found in Tramyardg hotel-mgmt-system 2022.4. Affected is an unknown function of the file /app/dao/CustomerDAO.php. The manipulation results in sql injection. This vulnerability is identified as CVE
CVE-2022-48082 | Easyone CRM 5.50.02 SearchTag text sql injection (EUVD-2022-50796)
A vulnerability classified as critical was found in Easyone CRM 5.50.02. Affected by this vulnerability is an unknown functionality of the file /Services/Misc.asmx/SearchTag. Executing a manipulation of the argument text can lead to sql inj
CVE-2022-48078 | pycdc 44a730f3a889503014fec94ae6e62d8401cb75e5 ASTree.cpp BuildFromCode stack-based overflow (Issue 295 / EUVD-2022-50792)
A vulnerability was found in pycdc 44a730f3a889503014fec94ae6e62d8401cb75e5. It has been declared as critical. This impacts the function BuildFromCode of the file ASTree.cpp. Executing a manipulation can lead to stack-based buffer overflow.
CVE-2022-48077 | Genymotion Desktop 3.3.2 uncontrolled search path (EUVD-2022-50791)
A vulnerability marked as critical has been reported in Genymotion Desktop 3.3.2. Impacted is an unknown function. This manipulation causes uncontrolled search path. The identification of this vulnerability is CVE-2022-48077. It is possible
PSN-Sicherheitslücke: Fremde Kinderkonten können zum Account-Verlust führen -
Ein maskierter Hacker in Kapuzenpullover sitzt am PC, daneben das PlayStation Network (PSN). Sony untersucht eine Sicherheitslücke im PlayStation ... Weiterlesen
Microsoft Authenticator Flaw Scores 8.6: Android Users Must Update
Microsoft Authenticator flaw CVE-2026-80097 scores 8.6 and puts Android work account tokens at risk. Learn which versions are affected and how to stay safe. Weiterlesen
CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in
CVE-2026-116839 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the
CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in mis
CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PAS
CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .
CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash
CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place
CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.
llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor siz
CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF fil
CVE-2026-116816 | llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model loading, causing crashes or potential code execution.
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like whose nega
CVE-2025-71439 | llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-server to read past id_to_token and crash.
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short
CVE-2024-58400 | llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with IDs outside 0 to n_vocab to read embedding memory out of bounds or crash the process.
llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send intege
CVE-2024-58399 | llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF model file with arbitrary 64-bit tensor offsets to crash the process or load adjacent process memory as model weights.
llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF m
CVE-2026-116836 | A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.
A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.
CVE-2026-116620 | A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream<UTF8<char>>::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of
CVE-2026-116608 | A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function load_pretrained_model of the file videollama2/model/__init__.py of the component Model Loading. The manipulation of the argument _name_or_path leads to improper validation of integrity check value. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project was informed of the problem
A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function load_pretrained_model of the file videollama2/model/__init__.py of the component Model Loading. The manipulation of the
CVE-2026-116605 | A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. The exploit has been made public and could be used.
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side s
CVE-2026-116604 | A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete_admin.php. The manipulation of the argument ID leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete_admin.php. The manipulation of the argument ID leads to missing authentication. It is pos