Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 753 | 0,2 % |
| ≥50 % | 3.281 | 0,9 % |
| ≥10 % | 21.929 | 5,7 % |
| <10 % | 359.743 | 93,3 % |
CVE-2026-120281 | WAVLINK WN536AX6-A V260507 OpenVPN /protocol.csp strcpy openvpn_ip stack-based overflow
A vulnerability was found in WAVLINK WN536AX6-A V260507. It has been declared as very critical. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results
CVE-2026-72213 | Linux Kernel up to 6.12.100/6.18.39/7.1.4 Hugetlb Cgroup mm/page_counter.c alloc_hugetlb_folio integer overflow
A vulnerability has been found in Linux Kernel up to 6.12.100/6.18.39/7.1.4 and classified as very critical. This vulnerability affects the function alloc_hugetlb_folio of the file mm/page_counter.c of the component Hugetlb Cgroup. This man
CVE-2026-72203 | Linux Kernel up to 7.1.4 NTFS attrib.c ntfs_mft_writepages deadlock (EUVD-2026-58961)
A vulnerability classified as critical has been found in Linux Kernel up to 7.1.4. The affected element is the function ntfs_mft_writepages of the file attrib.c of the component NTFS. Performing a manipulation results in deadlock. This vuln
CVE-2026-72200 | Linux Kernel ntfs integer overflow (EUVD-2026-58958)
A vulnerability described as very critical has been identified in Linux Kernel. Affected by this vulnerability is an unknown functionality of the component ntfs. The manipulation results in integer overflow. This vulnerability is cataloged
CVE-2026-72198 | Linux Kernel up to 7.1.4 ntfs dir.c ntfs_inode_sync_standard_information non_resident improper synchronization (EUVD-2026-58956)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 7.1.4. Impacted is the function ntfs_inode_sync_standard_information of the file dir.c of the component ntfs. Performing a manipulation of the argu
CVE-2026-72162 | Linux Kernel up to 6.18.39/7.1.4 ocfs2 ocfs2_sum_rightmost_rec l_next_free_rec/l_recs out-of-bounds
A vulnerability was found in Linux Kernel up to 6.18.39/7.1.4. It has been rated as critical. Impacted is the function ocfs2_sum_rightmost_rec of the component ocfs2. The manipulation of the argument l_next_free_rec/l_recs leads to out-of-b
CVE-2026-72144 | Linux Kernel up to 6.6.147/6.12.96/6.18.39/7.1.4 dell-laptop dell_init initialization
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.6.147/6.12.96/6.18.39/7.1.4. This affects the function dell_init of the component dell-laptop. This manipulation causes improper initialization. The identif
CVE-2026-72130 | Linux Kernel up to 6.12.100/6.18.39/7.1.4 nvmet-auth nvmet_execute_auth_receive out-of-bounds write (Nessus ID 342234)
A vulnerability has been found in Linux Kernel up to 6.12.100/6.18.39/7.1.4 and classified as very critical. This issue affects the function nvmet_execute_auth_receive of the component nvmet-auth. Performing a manipulation results in out-of
CVE-2026-72009 | Linux Kernel up to 6.18.41/7.1.4/7.2-rc3 pmdomain race condition (WID-SEC-2026-2852)
A vulnerability classified as problematic was found in Linux Kernel up to 6.18.41/7.1.4/7.2-rc3. This vulnerability affects unknown code of the component pmdomain. Such manipulation leads to race condition. This vulnerability is traded as C
CVE-2026-68471 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc3 Wifi Ieee80211 Mle ieee80211_mle_size_ok input validation (WID-SEC-2026-2852)
A vulnerability has been found in Linux Kernel up to 6.18.39/7.1.4/7.2-rc3 and classified as very critical. Impacted is the function ieee80211_mle_size_ok of the component Wifi Ieee80211 Mle. The manipulation leads to improper input validat
CVE-2026-13002 | Red Hat Enterprise Linux/OpenShift Container Platform NSEC NSEC3 Bitmap Parsing infinite loop (Nessus ID 335458)
It seems this issue is a false-positive. Please confirm the sources provided and consider disregarding this entry. Weiterlesen
CVE-2026-73608 | Siyuan Note SiYuan up to 3.7.3 getAttributeViewSearchTarget improper authorization
A vulnerability classified as problematic was found in Siyuan Note SiYuan up to 3.7.3. This issue affects some unknown processing of the file /api/av/getAttributeViewSearchTarget. The manipulation results in improper authorization. This vul
CVE-2026-72814 | actix actix-files up to 0.6.9 Files::new serve_from information disclosure
A vulnerability, which was classified as problematic, was found in actix actix-files up to 0.6.9. The affected element is the function Files::new. The manipulation of the argument serve_from results in information disclosure. This vulnerabi
CVE-2026-72791 | siyuan-note SiYuan up to 3.7.3 AttributeViewFieldViews endpoint getAttributeViewFieldViews avID information disclosure
A vulnerability, which was classified as problematic, was found in siyuan-note SiYuan up to 3.7.3. This affects an unknown function of the file /api/av/getAttributeViewFieldViews of the component AttributeViewFieldViews endpoint. Executing
CVE-2026-71408 | Fortinet FortiOS prior 6.4.16/7.0.19/7.2.13/7.4.12/7.6.6 allocation of resources
A vulnerability was found in Fortinet FortiOS. It has been classified as critical. This affects an unknown part. Performing a manipulation results in allocation of resources. This vulnerability is known as CVE-2026-71408. Remote exploitatio
CVE-2026-70354 | Microsoft .NET/Visual Studio out-of-bounds write (EUVD-2026-56770 / Nessus ID 341336)
A vulnerability described as problematic has been identified in Microsoft .NET and Visual Studio. This issue affects some unknown processing. Executing a manipulation can lead to out-of-bounds write. This vulnerability is handled as CVE-202
CVE-2026-68807 | Microsoft Office up to LTSC for Mac 2024 buffer overflow (Nessus ID 334691)
A vulnerability categorized as problematic has been discovered in Microsoft Office. The impacted element is an unknown function. Such manipulation leads to buffer overflow. This vulnerability is uniquely identified as CVE-2026-68807. Local
CVE-2026-68453 | Linux Kernel up to 6.18.43/7.1.7/7.2-rc5 zcrypt cca_cipher2protkey buffer overflow
A vulnerability was found in Linux Kernel up to 6.18.43/7.1.7/7.2-rc5 and classified as critical. The impacted element is the function cca_cipher2protkey of the component zcrypt. The manipulation results in buffer overflow. This vulnerabili
CVE-2026-68445 | Linux Kernel up to 7.2-rc4 vc4 vc4_gem_object_mmap privileges management (Nessus ID 334892 / WID-SEC-2026-2799)
A vulnerability classified as very critical was found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. This impacts the function vc4_gem_object_mmap of the component vc4. Such manipulation leads to improper privilege management
CVE-2026-62909 | Microsoft .NET/Visual Studio privileges management (EUVD-2026-56412 / Nessus ID 335447)
A vulnerability was found in Microsoft .NET and Visual Studio. It has been declared as problematic. Impacted is an unknown function. Such manipulation leads to improper privilege management. This vulnerability is documented as CVE-2026-6290
CVE-2026-62902 | Microsoft .NET/Visual Studio improper authorization (EUVD-2026-56410 / WID-SEC-2026-2761)
A vulnerability classified as problematic was found in Microsoft .NET and Visual Studio. Affected is an unknown function. Such manipulation leads to improper authorization. This vulnerability is referenced as CVE-2026-62902. It is possible
CVE-2026-62901 | Microsoft .NET/Visual Studio infinite loop (EUVD-2026-56409 / Nessus ID 335447)
A vulnerability, which was classified as problematic, was found in Microsoft .NET and Visual Studio. Affected by this issue is some unknown functionality. Executing a manipulation can lead to infinite loop. This vulnerability is tracked as
CVE-2026-62900 | Microsoft .NET/Visual Studio information disclosure (Nessus ID 335252 / WID-SEC-2026-2761)
A vulnerability classified as problematic has been found in Microsoft .NET and Visual Studio. This impacts an unknown function. This manipulation causes information disclosure. The identification of this vulnerability is CVE-2026-62900. It
CVE-2026-62899 | Microsoft .NET/Visual Studio improper authorization (Nessus ID 335252 / WID-SEC-2026-2761)
A vulnerability, which was classified as critical, has been found in Microsoft .NET and Visual Studio. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in improper authorization. This vulnerabili
heise-Angebot: Nach PHP2Shell: Vom Notfall-Patch zum sicheren Upgrade
Ein 2,5-stündiges Webinar zeigt detailliert, wie Entwickler und Betreiber älterer PHP-Anwendungen und -Websites sicher auf eine aktuelle PHP-Version upgraden. Weiterlesen
Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server. This article has been indexed from SecurityWeek Read the original article: Max-Severity GitLab Vulnerability Exploited Against Alpi
CVE-2026-112816: LXD- und MicroCloud-Schwachstelle mit CVSS 10.0 erlaubt Client-Impersonation
LONDON (IT BOLTWISE) – Eine kritische Schwachstelle in LXD und MicroCloud ermöglicht Angreifern die Anmeldung als vertrauenswürdiger Client ohne dessen privaten Schlüssel. Voraussetzung sind Netzwerkzugriff auf die HTTPS-API und ein öffentl
CVE-2026-98432: The Linux TCP Use-After-Free Flaw Explained
CVE-2026-98432 is a use-after-free in the Linux TCP stack that an AI research model turned into a root shell in under an hour, no login required. This guide explains the race in plain language, lists the first fixed kernel version per branc
CVE-2026-72773 | n8n-io n8n prior 2.31.5/2.32.1 computer-use search_files path traversal
A vulnerability classified as problematic has been found in n8n-io n8n. Impacted is the function search_files of the component computer-use. Performing a manipulation results in path traversal. This vulnerability is reported as CVE-2026-727
CVE-2026-62898 | Microsoft .NET/Visual Studio QUIC use after free (EUVD-2026-56773 / WID-SEC-2026-2761)
A vulnerability categorized as critical has been discovered in Microsoft .NET and Visual Studio. Affected by this vulnerability is an unknown functionality of the component QUIC. Executing a manipulation can lead to use after free. The iden
CVE-2026-62897 | Microsoft .NET/.NET Framework/Visual Studio integer overflow (WID-SEC-2026-2761)
A vulnerability was found in Microsoft .NET, .NET Framework and Visual Studio. It has been classified as problematic. This issue affects some unknown processing. This manipulation causes integer overflow. This vulnerability is registered as
CVE-2026-62877 | Microsoft Windows up to Server 2025 Win32K buffer overflow (EUVD-2026-56399)
A vulnerability marked as very critical has been reported in Microsoft Windows. The affected element is an unknown function of the component Win32K. Performing a manipulation results in buffer overflow. This vulnerability is identified as C
CVE-2026-62871 | Microsoft .NET/Visual Studio out-of-bounds write (WID-SEC-2026-2761)
A vulnerability identified as problematic has been detected in Microsoft .NET and Visual Studio. This issue affects some unknown processing. This manipulation causes out-of-bounds write. The identification of this vulnerability is CVE-2026-
CVE-2026-62752 | Microsoft Windows up to Server 2025 Kerberos buffer overflow
A vulnerability categorized as very critical has been discovered in Microsoft Windows. The affected element is an unknown function of the component Kerberos. Executing a manipulation can lead to buffer overflow. This vulnerability appears a
CVE-2026-62740 | Microsoft Windows up to Server 2025 Windows Imaging uninitialized pointer
A vulnerability has been found in Microsoft Windows and classified as problematic. The affected element is an unknown function of the component Windows Imaging Component. This manipulation causes uninitialized pointer. This vulnerability is
CVE-2026-40375 | Microsoft Dynamics 365 Business Central improper authorization
A vulnerability was found in Microsoft Dynamics 365 Business Central and classified as problematic. This issue affects some unknown processing. Such manipulation leads to improper authorization. This vulnerability is listed as CVE-2026-4037
CVE-2026-72771 | n8n-io n8n up to 2.32.0 AI/LLM nodes redirect
A vulnerability, which was classified as problematic, has been found in n8n-io n8n up to 2.32.0. This issue affects some unknown processing of the component AI/LLM nodes. Performing a manipulation results in open redirect. This vulnerabilit
CVE-2026-72770 | n8n-io n8n up to 1.123.64 Git node path traversal
A vulnerability labeled as problematic has been found in n8n-io n8n. This affects an unknown part of the component Git node. The manipulation results in path traversal. This vulnerability is cataloged as CVE-2026-72770. The attack may be la
CVE-2026-72768 | n8n-io n8n up to 2.32.0 MCP Client node server-side request forgery
A vulnerability described as problematic has been identified in n8n-io n8n up to 2.32.0. This issue affects some unknown processing of the component MCP Client node. Such manipulation leads to server-side request forgery. This vulnerability
CVE-2026-72766 | n8n-io n8n Send Email node body server-side request forgery
A vulnerability classified as critical was found in n8n-io n8n. The affected element is an unknown function of the component Send Email node. Executing a manipulation of the argument body can lead to server-side request forgery. This vulner
CVE-2026-72765 | n8n-io n8n up to 2.31.4/2.32.0 Expression Evaluation sandbox
A vulnerability was found in n8n-io n8n up to 2.31.4/2.32.0. It has been classified as critical. This affects an unknown function of the component Expression Evaluation. This manipulation causes sandbox issue. The identification of this vul
CVE-2026-72763 | n8n-io n8n prior 1.123.67/2.31.5/2.32.1 access control
A vulnerability classified as critical was found in n8n-io n8n. This vulnerability affects unknown code. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2026-72763. The attack may be launched remotel
CVE-2026-94281 | x.org libXi up to 1.8.3 XListInputDevices out-of-bounds (Nessus ID 374609)
A vulnerability described as problematic has been identified in x.org libXi up to 1.8.3. The affected element is the function XListInputDevices. Executing a manipulation can lead to out-of-bounds read. The identification of this vulnerabili
CVE-2026-93544 | x.org libXi up to 1.8.3 XIQueryDevice out-of-bounds (Nessus ID 374609)
A vulnerability classified as problematic was found in x.org libXi up to 1.8.3. This vulnerability affects the function XIQueryDevice. The manipulation results in out-of-bounds read. This vulnerability is known as CVE-2026-93544. It is poss
CVE-2026-94282 | libXi Cookie Conversion wireToEnterLeave out-of-bounds (Nessus ID 374609)
A vulnerability was found in libXi. It has been declared as critical. This affects the function wireToEnterLeave of the component Cookie Conversion. Executing a manipulation can lead to out-of-bounds read. The identification of this vulnera
CVE-2026-109089 | X.Org libXi up to 1.8.3 DEVICE_RESOLUTION buffer overflow (f7836d0a0 / Nessus ID 374609)
A vulnerability marked as critical has been reported in X.Org libXi up to 1.8.3. The impacted element is an unknown function. The manipulation of the argument DEVICE_RESOLUTION leads to buffer overflow. This vulnerability is referenced as C
CVE-2026-109090 | x.org libXi up to 1.8.3 heap-based overflow (Nessus ID 374609)
A vulnerability has been found in x.org libXi up to 1.8.3 and classified as critical. Impacted is an unknown function. This manipulation causes heap-based buffer overflow. This vulnerability is registered as CVE-2026-109090. Remote exploita
CVE-2026-72750 | n8n-io n8n up to 1.123.66/2.31.4/2.32.0 Snowflake node sql injection
A vulnerability classified as critical has been found in n8n-io n8n up to 1.123.66/2.31.4/2.32.0. This affects an unknown part of the component Snowflake node. This manipulation causes sql injection. This vulnerability appears as CVE-2026-7
CVE-2026-72749 | n8n-io n8n up to 1.123.66/2.31.4/2.32.0 name prototype pollution
A vulnerability has been found in n8n-io n8n up to 1.123.66/2.31.4/2.32.0 and classified as critical. The affected element is an unknown function. The manipulation of the argument Name leads to improperly controlled modification of object p
CVE-2026-68401 | Linux Kernel up to 6.18.41/7.1.5/7.2-rc3 arm_ffa ffa_setup_and_transmit reserved memory corruption
A vulnerability identified as very critical has been detected in Linux Kernel up to 6.18.41/7.1.5/7.2-rc3. This issue affects the function ffa_setup_and_transmit of the component arm_ffa. The manipulation of the argument reserved leads to m
CVE-2026-68399 | Linux Kernel BPF sk_clone use after free (Nessus ID 334405)
A vulnerability categorized as very critical has been discovered in Linux Kernel. This vulnerability affects the function sk_clone of the component BPF. Executing a manipulation can lead to use after free. This vulnerability appears as CVE-
CVE-2026-68381 | Linux Kernel up to 7.2-rc3 ksmbd race condition
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc3. Affected by this vulnerability is the function smb2_oplock_break_noti/smb2_lease_break_noti/ksmbd_conn_write/ksmb
CVE-2026-120226 | Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows P2P SDK P2PAPI_Connect input buffer overflow
A vulnerability categorized as problematic has been discovered in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Affected by this issue is the function P2PAPI_Connect of the component P2P SDK. Such manipulation of the argument
CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in
CVE-2026-116839 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the
CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in mis
CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PAS
CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .