Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 720 | 0,2 % |
| ≥50 % | 3.222 | 0,9 % |
| ≥10 % | 22.115 | 6,0 % |
| <10 % | 343.282 | 92,9 % |
Drupal Field UI: Security-Team schließt kritischen RCE-Pfad (CVE-2026-108097)
LONDON (IT BOLTWISE) – Drupal schließt eine kritische Schwachstelle im Field-UI-Modul, die einen Angreifer zur Ausführung von Code auf dem Server nutzen könnte. Die Fixes wurden am 14. Oktober in mehreren Drupal-Versionen ausgeliefert, daru
Version 1.0: Cisco Secure Email Gateway - Zero-Day-Schwachstelle wird aktiv ausgenutzt
Weiterlesen
What’s old is new: Lightwell discovers novel zero-day vulnerability in core Java framework
Enterprise IT runs on decades-old foundational code. The prevailing assumption around these mature components is that if code has been sitting untouched in production for ten years without breaking, it must be safe. Libraries like the Eclip
Mysteriöse Sicherheitslücke: AMD-GPUs erhalten seltene vBIOS-Updates
Für ältere Grafikkarten der Radeon-RX-7000-Serie von AMD stehen aktuell vBIOS-Updates bereit. Sie sollen eine bisher nicht näher spezifizierte potenzielle Sicherheitslücke schließen. AMD rät Besitzern entsprechender Hardware zum zeitnahen U
Attackers exploit Palo Alto PAN-OS flaw for root access as CISA orders three-day fix
Attackers are exploiting a newly disclosed flaw in Palo Alto Networks’ PAN-OS firewall software to run code with root privileges, and US federal agencies have been ordered to fix it and check for compromise by October 17. Palo Alto Networks
Warning Over High-Risk Vulnerabilities in Widely Used LLM Gateway Tool
CVE-2026-35029 and CVE-2026-59823 affect LiteLLM, which is commonly used by enterprises to connect their AI applications to providers like OpenAI and Anthropic Weiterlesen
[UPDATE] [mittel] Gitea: Schwachstelle ermöglicht Offenlegung von Informationen
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Gitea ausnutzen, um Informationen offenzulegen. Weiterlesen
CVE-2017-9047 | libxml2 20904-GITv2.9.4-16-g0741801 valid.c memory corruption (Nessus ID 100708 / ID 170014)
A vulnerability, which was classified as critical, was found in libxml2 20904-GITv2.9.4-16-g0741801. The impacted element is an unknown function of the file valid.c. The manipulation results in memory corruption. This vulnerability is known
CVE-2016-9318 | libxml2 up to 2.9.4 xml external entity reference (Nessus ID 99916 / ID 172163)
A vulnerability classified as critical was found in libxml2 up to 2.9.4. This affects an unknown function. The manipulation results in xml external entity reference. This vulnerability was named CVE-2016-9318. The attack needs to be approac
CVE-2016-4658 | libxml2 memory corruption (Nessus ID 94319 / ID 196731)
A vulnerability labeled as critical has been found in libxml2. Affected by this issue is some unknown functionality. Executing a manipulation can lead to memory corruption. This vulnerability appears as CVE-2016-4658. The attack may be perf
CVE-2016-10228 | GNU C Library up to 2.25 iconv -c input validation (Nessus ID 266254 / BID-96525)
A vulnerability labeled as problematic has been found in GNU C Library up to 2.25. Affected by this vulnerability is an unknown functionality of the component iconv. Such manipulation of the argument -c leads to improper input validation. T
CVE-2015-8126 | Apple Mac OS X up to 10.11.3 Python memory corruption (HT206167 / Nessus ID 89527)
A vulnerability was found in Apple Mac OS X up to 10.11.3. It has been classified as critical. Impacted is an unknown function of the component Python. Performing a manipulation results in memory corruption. This vulnerability is identified
CVE-2015-6117 | Microsoft SharePoint Foundation 2013 SP1 Access Control Policy cross site scripting (MS16-004 / Nessus ID 87882)
A vulnerability classified as problematic has been found in Microsoft SharePoint Foundation 2013 SP1. This issue affects some unknown processing of the component Access Control Policy. Performing a manipulation results in cross site scripti
CVE-2015-5351 | Apache Tomcat 7.0/8.0/9.0 Index Page cross-site request forgery (RHSA-2016:1087 / Nessus ID 88936)
A vulnerability categorized as problematic has been discovered in Apache Tomcat 7.0/8.0/9.0. Affected by this issue is some unknown functionality of the component Index Page. Executing a manipulation can lead to cross-site request forgery.
CVE-2015-5346 | Apache Tomcat 7.0/8.0/9.0 requestedSessionSSL session fixiation (RHSA-2016:1087 / Nessus ID 88937)
A vulnerability has been found in Apache Tomcat 7.0/8.0/9.0 and classified as critical. The impacted element is an unknown function. The manipulation of the argument requestedSessionSSL leads to session fixiation. This vulnerability is uniq
CVE-2015-5345 | Apache Tomcat 6.0/7.0/8.0/9.0 Error path traversal (RHSA-2016:1087 / Nessus ID 88935)
A vulnerability was found in Apache Tomcat 6.0/7.0/8.0/9.0. It has been declared as problematic. Affected is an unknown function of the component Error Handler. Such manipulation leads to path traversal. This vulnerability is referenced as
CVE-2015-5174 | Apache Tomcat 6.0/7.0/8.0/9.0 ServletContext getResource/getResourceAsStream/getResourcePaths path traversal (RHSA-2016:1432 / Nessus ID 88935)
A vulnerability identified as critical has been detected in Apache Tomcat 6.0/7.0/8.0/9.0. This affects the function getResource/getResourceAsStream/getResourcePaths of the component ServletContext. The manipulation leads to path traversal.
CVE-2026-39781 | Dan Rossiter Document Gallery Plugin up to 5.1.1 on WordPress cross site scripting (EUVD-2026-93029)
A vulnerability was found in Dan Rossiter Document Gallery Plugin up to 5.1.1 on WordPress. It has been rated as problematic. This vulnerability affects unknown code. This manipulation causes cross site scripting. This vulnerability appears
CISA Warns of Hackers Exploiting Ivanti Connect Secure Zero-Day to Steal Credentials
CISA urged administrators to patch Ivanti Connect Secure appliances after attackers exploited CVE-2026-104935, a zero-day flaw that allows remote authentication bypass and command execution, enabling credential theft and data exfiltration.
Compromise Assessment After CVE-2026-76504: Building a Defensible Investigation Order
Compromise Assessment After CVE-2026-76504: Building a Defensible Investigation Order Vulnerability overview CVE-2026-76504 is a critical authentication bypass in Cisco Catalyst SD-WAN Manager, disclosed by Cisco and added to the CISA Known
CVE-2022-46590 | TRENDnet TEW755AP 1.13B01 tools_netstat cameo.cameo.netstat_rsname stack-based overflow (EUVD-2022-49394)
A vulnerability classified as critical has been found in TRENDnet TEW755AP 1.13B01. This issue affects the function tools_netstat. This manipulation of the argument cameo.cameo.netstat_rsname causes stack-based buffer overflow. This vulnera
CVE-2022-46589 | TRENDnet TEW755AP 1.13B01 tools_netstat cameo.cameo.netstat_option stack-based overflow (EUVD-2022-49393)
A vulnerability described as critical has been identified in TRENDnet TEW755AP 1.13B01. This vulnerability affects the function tools_netstat. The manipulation of the argument cameo.cameo.netstat_option results in stack-based buffer overflo
CVE-2022-46588 | TRENDnet TEW755AP 1.13B01 setup_wizard_mydlink sys_service stack-based overflow (EUVD-2022-49392)
A vulnerability marked as critical has been reported in TRENDnet TEW755AP 1.13B01. This affects the function setup_wizard_mydlink. The manipulation of the argument sys_service leads to stack-based buffer overflow. This vulnerability is trad
CVE-2022-46586 | TRENDnet TEW755AP 1.13B01 kick_ban_wifi_mac_allow maclist stack-based overflow (EUVD-2022-49390)
A vulnerability labeled as critical has been found in TRENDnet TEW755AP 1.13B01. Affected by this issue is the function kick_ban_wifi_mac_allow. Executing a manipulation of the argument maclist can lead to stack-based buffer overflow. This
Critical Next.js SVG Image Processing Vulnerability Could Enable Remote Code Execution
Vercel has released an out-of-band security update for Next.js that fixes two critical remote code execution (RCE) flaws and one high-severity denial-of-service (DoS) bug. One of the critical flaws, CVE-2026-96889 (GHSA-2464-fhr4-w9xw), sit
CVE-2026-100784 | Mozilla Firefox up to 115.41/140.16/153.3/156 Layout Text/Fonts use after free (Nessus ID 366012 / WID-SEC-2026-3654)
A vulnerability was found in Mozilla Firefox up to 115.41/140.16/153.3/156 and classified as critical. The impacted element is an unknown function of the component Layout Text/Fonts. Executing a manipulation can lead to use after free. This
CVE-2026-80489 | Free Software Foundation glibc up to 2.44 EUC_JISX0213 infinite loop (Nessus ID 366015 / WID-SEC-2026-3051)
A vulnerability was found in Free Software Foundation glibc up to 2.44 and classified as critical. Affected is an unknown function of the component EUC_JISX0213. Executing a manipulation can lead to infinite loop. This vulnerability appears
CVE-2026-77117 | Free Software Foundation glibc up to 2.44 SHIFT_JISX0213 converter infinite loop (Nessus ID 366015 / WID-SEC-2026-3014)
A vulnerability was found in Free Software Foundation glibc up to 2.44. It has been declared as critical. Affected by this issue is some unknown functionality of the component SHIFT_JISX0213 converter. The manipulation results in infinite l
CVE-2022-46585 | TRENDnet TEW755AP 1.13B01 get_access REMOTE_USER stack-based overflow (EUVD-2022-49389)
A vulnerability was found in TRENDnet TEW755AP 1.13B01 and classified as critical. The affected element is the function get_access. Executing a manipulation of the argument REMOTE_USER can lead to stack-based buffer overflow. This vulnerabi
CVE-2022-46584 | TRENDnet TEW755AP 1.13B01 kick_ban_wifi_mac_deny maclist stack-based overflow (EUVD-2022-49388)
A vulnerability identified as critical has been detected in TRENDnet TEW755AP 1.13B01. Affected by this vulnerability is the function kick_ban_wifi_mac_deny. Performing a manipulation of the argument maclist results in stack-based buffer ov
CVE-2022-46583 | TRENDnet TEW755AP 1.13B01 wizard_ipv6 reboot_type stack-based overflow (EUVD-2022-49387)
A vulnerability categorized as critical has been discovered in TRENDnet TEW755AP 1.13B01. Affected is the function wizard_ipv6. Such manipulation of the argument reboot_type leads to stack-based buffer overflow. This vulnerability is docume
CVE-2022-46582 | TRENDnet TEW755AP 1.13B01 do_graph_auth login_name stack-based overflow (EUVD-2022-49386)
A vulnerability was found in TRENDnet TEW755AP 1.13B01. It has been rated as critical. This impacts the function do_graph_auth. This manipulation of the argument login_name causes stack-based buffer overflow. This vulnerability is registere
CVE-2022-46581 | TRENDnet TEW755AP 1.13B01 tools_nslookup cameo.cameo.nslookup_target stack-based overflow (EUVD-2022-49385)
A vulnerability was found in TRENDnet TEW755AP 1.13B01. It has been declared as critical. This affects the function tools_nslookup. The manipulation of the argument cameo.cameo.nslookup_target results in stack-based buffer overflow. This vu
Microsoft Windows Server 0-Day Flaw Lets Attackers Crash Servers With a Single Packet
Microsoft patched a Windows Server vulnerability that lets a network-adjacent attacker crash a server with a crafted Distributed File System (DFS) referral response. Tracked as CVE-2026-70111, the flaw affects Windows Server 2019, 2022, and
CVE-2026-101302 | FreeBSD Ktls off-by-one (p1/p4/p10/p14 / EUVD-2026-101870)
A vulnerability described as critical has been identified in FreeBSD. Impacted is an unknown function of the component Ktls. Executing a manipulation can lead to off-by-one. This vulnerability is tracked as CVE-2026-101302. The attack can b
[NEU] [mittel] Palo Alto Networks Cortex XSOAR: Schwachstelle ermöglicht Codeausführung
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Palo Alto Networks Cortex XSOAR ausnutzen, um beliebigen Programmcode auszuführen. Weiterlesen
PoC Released for Critical Fortinet FortiClient EMS Authentication Bypass Vulnerability
A public proof-of-concept (PoC) for CVE-2026-35616, a critical authentication and authorization bypass in Fortinet FortiClient Endpoint Management Server (EMS), lets defenders test whether affected systems are exposed. The Python tool’s rep
CVE-2026-17525 | Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5.
Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5.
CVE-2026-79829 | A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.
A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.
CVE-2026-79828 | A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.
A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.
CVE-2026-79827 | A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.
A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.
CVE-2026-18659 | In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Jakarta Spec constraints defined as `http-method-omission` can be bypassed by using substrings of the defined HTTP Methods.
In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Jakarta Spec constraints defined as `http-method-omission` can be bypassed by using substrings of the defined HTTP Methods
CVE-2026-18662 | In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined properly per Jakarta Servlet Spec. Resulting in later http-method-omission sets overriding previous constraints with the same http-method-omission set.
In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined properly per Jakarta Servlet Spec. Re
CVE-2026-19864 | Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credentials contain a plaintext password and the authenticated session is persisted to a session data store, the password may consequently be written to persistent storage in plaintext. An attacker with sufficient privileges to read the persisted session data may obtain the plaintext passwords of authenticated users.
Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credentials contain a plaintext password and the authenticated session is persisted to a session data store, the password may cons
CVE-2026-19863 | An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path. This is caused by the authenticator using an unanchored substring match when identifying the login page. If the login path appears later within a protected request path, the request may be treated as the login page and its authentication or role requirement replaced with ALLOWED. Exploitation requires
An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path. This is caused by the authenticator using an unanchored substring match when identi
CVE-2026-79826 | A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.
A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.
CVE-2026-50619 | A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsirch 7.0.3.0 and later
A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system data. We have already fixed the vulnerability in the followi
CVE-2026-47790 | A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: QuFTP Service 1.4.6 and later QuFTP Service 1.5.5 and later QuFTP Service 1.6.5 and later
A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in t
CVE-2026-47786 | An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.23 and later HybridDesk Station 4.3.4 and later
An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following vers
CVE-2026-39997 | A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability in the following version: HybridDesk Station 4.2.22 and later
A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain access to the system. We have already fixed the vulnerability
CVE-2026-18660 | In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case.
In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case.
CVE-2026-39991 | A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.12 and later
A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in
CVE-2026-34009 | An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.11 and later
An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system.
CVE-2026-34008 | An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a local attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.11 and later
An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a local attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system.
CVE-2026-34007 | An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.11 and later
An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version
CVE-2026-53882 | An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Virtualization Station 4.1.1.130 and later
An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the securit
CVE-2026-50612 | An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuMagie 2.9.2 and later
An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed
CVE-2026-44084 | An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in
CVE-2026-41545 | A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QuMagie 2.9.1 and later
A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have alre
CVE-2026-41541 | An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.7 and later Qsync Central 5.1.0.3 and later Qsync Central 5.2.0.5 and later Qsync Central 5.3.0.2 and later
An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already