Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 785 | 0,2 % |
| ≥50 % | 3.559 | 0,9 % |
| ≥10 % | 13.142 | 3,2 % |
| <10 % | 396.069 | 95,8 % |
OpenSSH CVE-2026-123158: Auth bypass on musl-based Linux
A critical vulnerability in OpenSSH servers running on Linux systems built with the musl C library allows remote attackers to bypass authentication by sending overly long passwords. This article has been indexed from CyberMaterial Read the
CVE-2026-113702 | iomad up to 4.5.15/5.0.11/5.1.8/5.2.4 PDF Certificate lib.php local_iomad_pluginfile authorization (Issue 2817)
A vulnerability, which was classified as problematic, was found in iomad up to 4.5.15/5.0.11/5.1.8/5.2.4. Affected by this vulnerability is the function local_iomad_pluginfile in the library public/local/iomad/lib.php of the component PDF C
CVE-2026-37461 | gobgp 4.3.0 BGP /bgp/bgp.go ParseIP6Extended out-of-bounds
A vulnerability, which was classified as problematic, has been found in gobgp 4.3.0. This issue affects the function ParseIP6Extended of the file /bgp/bgp.go of the component BGP Handler. This manipulation causes out-of-bounds read. This vu
CVE-2026-31205 | Pluck CMS up to 4.7.20 editpage.php sanitizePageContent cross site scripting (ID 141)
A vulnerability classified as problematic was found in Pluck CMS up to 4.7.20. This affects the function sanitizePageContent of the file editpage.php. Such manipulation leads to cross site scripting. This vulnerability is uniquely identifie
CVE-2026-121623 | SensioLabs Symfony up to 5.4.55/6.4.49/7.4.22/8.1.10 Serializer denormalize path traversal (Nessus ID 377472)
A vulnerability was found in SensioLabs Symfony up to 5.4.55/6.4.49/7.4.22/8.1.10. It has been declared as problematic. Affected by this issue is the function DataUriNormalizer::denormalize of the component Serializer. Executing a manipulat
CVE-2026-120222 | undici up to 7.30.1/8.12.3 Cache Interceptor escape output (Nessus ID 377471)
A vulnerability, which was classified as problematic, was found in undici up to 7.30.1/8.12.3. Affected is an unknown function of the component Cache Interceptor. Such manipulation leads to escaping of output. This vulnerability is traded a
CVE-2026-68984 | Samsung Semiconductor Exynos 1680 Exynos NPU integer overflow (Nessus ID 377474)
A vulnerability categorized as very critical has been discovered in Samsung Semiconductor Exynos 2100, Exynos 1280, Exynos 2200, Exynos 1380, Exynos 1480, Exynos 2400, Exynos 1580, Exynos 2500, Exynos 2600 and Exynos 1680. Affected is an un
CVE-2026-111062 | russh 0.34.0-beta.1/0.63.3 Publickey Authentication encrypted.rs server_read_auth_request_pk signature verification (Nessus ID 377473)
A vulnerability was found in russh 0.34.0-beta.1/0.63.3. It has been classified as critical. The affected element is the function server_read_auth_request_pk of the file russh/src/server/encrypted.rs of the component Publickey Authenticatio
CVE-2026-122328 | SDL SDL_mixer up to 3.2.4 WAV file src/decoder_wav.c FetchXLaw stack-based overflow (Nessus ID 377476)
A vulnerability was found in SDL SDL_mixer up to 3.2.4. It has been classified as critical. Affected is the function FetchXLaw of the file src/decoder_wav.c of the component WAV file Handler. This manipulation causes stack-based buffer over
CVE-2026-100080 | Linux Kernel up to 7.3.2 xen-netback synchronize_net use after free (Nessus ID 377475)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 7.3.2. The impacted element is the function synchronize_net of the component xen-netback. Executing a manipulation can lead to use after free. This vulne
CVE-2026-43041 | Linux Kernel up to 6.19.11 net __radix_tree_create memory leak
A vulnerability identified as critical has been detected in Linux Kernel up to 6.19.11. This issue affects the function __radix_tree_create of the component net. Performing a manipulation results in memory leak. This vulnerability is known
CVE-2024-58317 | Kentico Xperience up to 13.0.164 web.config missing secure attribute
A vulnerability was found in Kentico Xperience up to 13.0.164. It has been declared as problematic. Affected is an unknown function of the file web.config. Such manipulation leads to sensitive cookie without secure attribute. This vulnerabi
CVE-2024-56089 | Technitium up to 13.2.2 DNS injection
A vulnerability was found in Technitium up to 13.2.2 and classified as problematic. The impacted element is an unknown function of the component DNS Handler. Such manipulation leads to injection. This vulnerability is referenced as CVE-2024
CVE-2024-44657 | PHPGurukul Complaint Management System 2.0 between-date-userreport.php fromdate/todate sql injection
A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the file between-date-userreport.php. Performing a manipulation of th
CVE-2024-44641 | PHPGurukul Small CRM 3.0 change-password.php oldpass sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Small CRM 3.0. Impacted is an unknown function of the file change-password.php. Executing a manipulation of the argument oldpass can lead to sql injection. This vuln
CVE-2024-43028 | JeecgBoot up to 3.5.3 HTTP /jmreport/show command injection
A vulnerability categorized as critical has been discovered in JeecgBoot up to 3.5.3. The affected element is an unknown function of the file /jmreport/show of the component HTTP Handler. Executing a manipulation can lead to command injecti
CVE-2024-40489 | JeecgBoot up to 3.5.3 HTTP Request injection
A vulnerability was found in JeecgBoot up to 3.5.3 and classified as problematic. This affects an unknown part of the component HTTP Request Handler. The manipulation results in injection. This vulnerability was named CVE-2024-40489. The at
CVE-2024-25812 | MyNET up to 26.05 src cross site scripting
A vulnerability was found in MyNET up to 26.05. It has been rated as problematic. Impacted is an unknown function. This manipulation of the argument src causes cross site scripting. This vulnerability is handled as CVE-2024-25812. The attac
CVE-2026-50240 | Red Hat Builds for OpenShift privileges management (EUVD-2026-118524)
A vulnerability described as critical has been identified in Red Hat Builds for OpenShift, OpenShift Dev Spaces, OpenShift Pipelines, OpenShift Serverless and Web Terminal. The impacted element is an unknown function. Such manipulation lead
CVE-2026-118196 | Apache Allura OAuth1 session fixiation (EUVD-2026-119928)
A vulnerability identified as critical has been detected in Apache Allura. The affected element is an unknown function of the component OAuth1. The manipulation leads to session fixiation. This vulnerability is traded as CVE-2026-118196. It
CVE-2026-120761 | Apache Axis2 WSDL xml external entity reference (EUVD-2026-119930)
A vulnerability described as critical has been identified in Apache Axis2. This affects an unknown function of the component WSDL. The manipulation results in xml external entity reference. This vulnerability is identified as CVE-2026-12076
CVE-2026-120367 | Apache Axis2/Java Request Body buffer overflow (EUVD-2026-119980)
A vulnerability has been found in Apache Axis2 and Java and classified as critical. Impacted is an unknown function of the component Request Body. This manipulation causes buffer overflow. This vulnerability is registered as CVE-2026-120367
CVE-2026-123766 | Apache Axis2/Java OpenAPI module cross site scripting (EUVD-2026-119935)
A vulnerability marked as problematic has been reported in Apache Axis2 and Java. The impacted element is an unknown function of the component OpenAPI module. The manipulation leads to cross site scripting. This vulnerability is referenced
CVE-2026-123753 | Apache Axis2 Java WS-Addressing server-side request forgery (EUVD-2026-119936)
A vulnerability classified as critical has been found in Apache Axis2 Java. This impacts an unknown function of the component WS-Addressing. This manipulation causes server-side request forgery. This vulnerability is tracked as CVE-2026-123
CVE-2026-120832 | Apache Axis2/Java Schema Import Resolution server-side request forgery (EUVD-2026-119929)
A vulnerability has been found in Apache Axis2 and Java and classified as critical. This affects an unknown function of the component Schema Import Resolution. Performing a manipulation results in server-side request forgery. This vulnerabi
CVE-2026-123779 | Apache Axis2/Java Metadata Routes exposeServiceMetadata access control (EUVD-2026-119978)
A vulnerability classified as problematic has been found in Apache Axis2 and Java. This issue affects the function exposeServiceMetadata of the component Metadata Routes. The manipulation leads to improper access controls. This vulnerabilit
CVE-2026-123770 | Apache Axis2/Java resource consumption (EUVD-2026-119934)
A vulnerability labeled as problematic has been found in Apache Axis2 and Java. The affected element is an unknown function. Executing a manipulation can lead to resource consumption. The identification of this vulnerability is CVE-2026-123
CVE-2026-92546 | Keepnet Labs Cybersecurity Agentic AI/Agentic Ally improper authentication (0ef61f2e / EUVD-2026-110830)
A vulnerability identified as problematic has been detected in Keepnet Labs Cybersecurity Agentic AI and Agentic Ally. The affected element is an unknown function. Performing a manipulation results in improper authentication. This vulnerabi
CVE-2026-124684 | Samsung Escargot use after free (EUVD-2026-119996)
A vulnerability was found in Samsung Escargot. It has been declared as problematic. The impacted element is an unknown function. The manipulation results in use after free. This vulnerability is known as CVE-2026-124684. It is possible to l
CVE-2026-121629 | Red Hat Enterprise Linux Adaptive Streaming Demuxers injection (EUVD-2026-119997)
A vulnerability was found in Red Hat Enterprise Linux. It has been classified as problematic. The affected element is an unknown function of the component Adaptive Streaming Demuxers. The manipulation leads to injection. This vulnerability
[NEU] [hoch] IBM Tape Library: Schwachstelle ermöglicht Erlangen von Benutzerrechten
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Tape Library ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Benutzerrechte zu erlangen. Weiterlesen
Critical ModSecurity WAF Flaw Lets Hackers Bypass File Upload Security and Deploy Web Shells
A High-severity parser differential in ModSecurity, tracked as CVE-2026-104269 (GHSA-5pww-8rfg-9crf), lets attackers slip executable uploads past OWASP Core Rule Set filename inspection. The weakness sits in ModSecurity’s multipart parser,
CISA Warns of SonicWall SonicOS SSLVPN Vulnerability Exploited in Attacks
CISA added a SonicWall SonicOS SSLVPN vulnerability, CVE-2026-19868, to its Known Exploited Vulnerabilities catalog, warning that valid-credential users can bypass SAML authentication controls and potentially evade multi-factor authenticati
[NEU] [hoch] Red Hat Enterprise Linux (yggdrasil-worker-package-manager): Schwachstelle ermöglicht Privilegieneskalation
Ein entfernter Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um mit Root-Rechten Dateien zu erstellen, zu überschreiben oder zu löschen. Weiterlesen
[NEU] [niedrig] JetBrains You Track: Schwachstelle ermöglicht Darstellen falscher Informationen
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in JetBrains You Track ausnutzen, um falsche Informationen darzustellen. Weiterlesen
[NEU] [mittel] JetBrains PyCharm: Schwachstelle ermöglicht Codeausführung
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in JetBrains PyCharm ausnutzen, um beliebigen Programmcode auszuführen. Weiterlesen
[NEU] [UNGEPATCHT] [hoch] PyTorch: Schwachstelle ermöglicht Privilegieneskalation
Ein lokaler Angreifer kann eine Schwachstelle in PyTorch ausnutzen, um seine Privilegien zu erhöhen und beliebigen Programmcode mit den Rechten des Dienstes auszuführen. Weiterlesen
[NEU] [hoch] Microsoft Entra Device Registration: Schwachstelle ermöglicht Privilegieneskalation
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Microsoft Entra Device Registration ausnutzen, um seine Privilegien zu erhöhen. Weiterlesen
[NEU] [niedrig] WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Offenlegung von Informationen
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in WP Royal Royal Elementor Addons ausnutzen, um Informationen offenzulegen. Weiterlesen
[NEU] [UNGEPATCHT] [mittel] Webmin: Schwachstelle ermöglicht Cross-Site Scripting
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Webmin ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen. Weiterlesen
[NEU] [mittel] IBM Tivoli Netcool/OMNIbus: Schwachstelle ermöglicht Cross-Site Scripting
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Tivoli Netcool/OMNIbus ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und Informationen offenzulegen. Weiterlesen
[NEU] [UNGEPATCHT] [hoch] Keycloak: Schwachstelle ermöglicht Codeausführung
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um Sicherheitsvorkehungen zu umgehen, beliebigen Programmcode auszuführen, Informationen auszulesen, Dateien zu manipulieren oder einen Denial-of-Servi
CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended des
CVE-2026-18689 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to obtain limited information about other organizations due to incorrect authorization. A token issued for a limited purpose is accepted where it should not be, which could reveal the names of other organizations.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to obtain limited information about other organizations due to incorrect authorization. A token issued for a limited purpose is accep
CVE-2026-17428 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. Values supplied in the request URL are used in authorization decisions without sufficient verification, which could allow access to information belonging to others.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. Values supplied in the request URL are used in authorization
CVE-2026-17411 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized before it is used in database queries.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized befo
CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.
CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access c
CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.
CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before
CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the s
CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm
CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.
CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is pas
CVE-2026-17401 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-17400 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
CVE-2026-17399 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not sufficiently checked before it is processed, which could allow code to run on the server.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not suffic
CVE-2026-17398 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-17397 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.