Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 786 | 0,2 % |
| ≥50 % | 3.560 | 0,9 % |
| ≥10 % | 13.157 | 3,2 % |
| <10 % | 396.052 | 95,8 % |
[NEU] [mittel] Shibboleth Identity Provider: Schwachstelle ermöglicht Cross-Site Scripting
Ein entfernter Angreifer kann eine Schwachstelle in Shibboleth Identity Provider ausnutzen, um Dateien zu manipulieren oder einen Cross-Site Scripting Angriff durchzuführen. Weiterlesen
[NEU] [hoch] Pega Platform: Schwachstelle ermöglicht Cross-Site Scripting
Ein entfernter Angreifer kann eine Schwachstelle in Pega Platform ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen. Weiterlesen
[NEU] [mittel] Contao: Schwachstelle ermöglicht Offenlegung von Informationen
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Contao ausnutzen, um Informationen offenzulegen. Weiterlesen
[NEU] [UNGEPATCHT] [hoch] Siemens SIMATIC WinCC: Schwachstelle ermöglicht Codeausführung
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Siemens SIMATIC WinCC ausnutzen, um beliebigen Programmcode auszuführen. Weiterlesen
[NEU] [UNGEPATCHT] [hoch] Siemens SIMATIC: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Siemens SIMATIC ausnutzen, um Sicherheitsvorkehrungen zu umgehen und beliebigen Programmcode mit Benutzerrechten auszuführen. Weiterlesen
[NEU] [mittel] Python: Schwachstelle ermöglicht Manipulation von Dateien
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Python ausnutzen, um Dateien zu manipulieren. Weiterlesen
Security Awareness: Wenn Mitarbeiter zur Schwachstelle werden
Warum Security Awareness Trainings in KMU oft wichtiger sind als technische Schutzmaßnahmen erklärt Torsten Bechler, Manager Product Marketing bei Sharp Business Systems Deutschland im Interview. Herr Bechler, der Mensch gilt als größte Sic
Apple Patches Everyting: November 2026 Edition, (Tue, Nov 10th)
On Monday, Apple released updates for iOS/iPadOS, macOS, watchOS, and visionOS. These updates fix nine different vulnerabilities. One of the vulnerabilities, CVE-2026-113971, applies only to iOS/iPadOS version 26. Several of the vulnerabi
Plex2Shell: Synology und QNAP raten zum Update des Plex Media Servers
Sowohl QNAP als auch Synology warnen vor vier Schwachstellen in der Drittanbieteranwendung Plex Media Server, die unter der Bezeichnung Plex2Shell zusammengefasst werden. Die unter CVE-2026-96652, CVE-2026-96654, CVE-2026-96655 und CVE-2026
Critical Apache Airflow Flaw CVE-2026-68982 Enables Unauthenticated Remote Code Execution
A critical missing-authentication flaw in Apache Airflow lets attackers run code on Celery workers without any Airflow credentials. Tracked as CVE-2026-68982, the bug is classified as CWE-306 and affects Airflow versions before 3.4.0 that u
Chrome: Update schließt aktiv ausgenutzte Sicherheitslücke
Google hat ein Sicherheitsupdate für Chrome im Stable Channel veröffentlicht, das eine aktiv ausgenutzte Zero-Day-Lücke schließt. Für die als „High“ eingestufte Schwachstelle CVE-2026-125350 gibt es laut Google bereits einen Exploit, der in
[UPDATE] [hoch] RPM: Schwachstelle ermöglicht Codeausführung
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in RPM ausnutzen, um beliebigen Programmcode auszuführen. Weiterlesen
Anthropic Launches Claude Mythos 5.2, Scoring 76.3% on Cybersecurity Benchmark to Identify 0-Day Flaws
Anthropic has launched Claude Mythos 5.2, its latest AI model for cybersecurity engineering, reporting a 76.3% score on CyScenarioBench. Released on November 9 alongside Claude Fable 5.2, the model is designed to help security teams find, r
[NEU] [hoch] Atlassian Confluence: Schwachstelle ermöglicht Codeausführung
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Atlassian Confluence ausnutzen, um beliebigen Programmcode auszuführen. Weiterlesen
[NEU] [mittel] Google Cloud Service Mesh: Schwachstelle ermöglicht Denial of Service
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Google Cloud Service Mesh ausnutzen, um einen Denial of Service Angriff durchzuführen. Weiterlesen
[NEU] [mittel] Infoblox NIOS: Schwachstelle ermöglicht Cross-Site Scripting
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Infoblox NIOS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen. Weiterlesen
[NEU] [mittel] Ghostscript: Schwachstelle ermöglicht Codeausführung
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Ghostscript ausnutzen, um beliebigen Programmcode auszuführen. Weiterlesen
[NEU] [UNGEPATCHT] [mittel] Tinyproxy: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Tinyproxy ausnutzen, um Sicherheitsvorkehrungen zu umgehen. Weiterlesen
[NEU] [niedrig] ImageMagick: Schwachstelle ermöglicht Offenlegung von Informationen
Ein lokaler Angreifer kann eine Schwachstelle in ImageMagick ausnutzen, um Informationen offenzulegen. Weiterlesen
CVE-2026-28578 | Google Android 14/15/16/16-qpr2 DevicePolicyManagerService.java denial of service
A vulnerability, which was classified as critical, was found in Google Android 14/15/16/16-qpr2. The impacted element is an unknown function of the file DevicePolicyManagerService.java. Such manipulation leads to denial of service. This vul
CVE-2026-0100 | Google Android 14/15/16/16-qpr2 LoadedArsc.cpp Load heap-based overflow
A vulnerability classified as critical was found in Google Android 14/15/16/16-qpr2. Impacted is the function Load of the file LoadedArsc.cpp. The manipulation results in heap-based buffer overflow. This vulnerability was named CVE-2026-010
CVE-2026-60041 | MB connect line/Helmholz mbCONNECT24 up to 2.20.x cross-site request forgery (EUVD-2026-120861)
A vulnerability classified as problematic was found in MB connect line/Helmholz mbCONNECT24, mymbCONNECT24, myREX24V2 and myREX24V2.virtual up to 2.20.x. Affected is an unknown function. The manipulation results in cross-site request forger
CVE-2026-60040 | MB connect line/Helmholz mbCONNECT24 up to 2.20.x Backends Backup Creation denial of service (EUVD-2026-120860)
A vulnerability marked as critical has been reported in MB connect line/Helmholz mbCONNECT24, mymbCONNECT24, myREX24V2 and myREX24V2.virtual up to 2.20.x. The impacted element is an unknown function of the component Backends Backup Creation
CVE-2026-60042 | MB connect line/Helmholz mbCONNECT24 up to 2.20.x com_check improper authentication (EUVD-2026-120862)
A vulnerability was found in MB connect line/Helmholz mbCONNECT24, mymbCONNECT24, myREX24V2 and myREX24V2.virtual up to 2.20.x. It has been rated as critical. This vulnerability affects the function com_check. The manipulation leads to impr
CVE-2026-60045 | MB connect line/Helmholz mbCONNECT24 up to 2.20.x unrestricted upload (EUVD-2026-120834)
A vulnerability classified as problematic has been found in MB connect line/Helmholz mbCONNECT24, mymbCONNECT24, myREX24V2 and myREX24V2.virtual up to 2.20.x. This impacts an unknown function. The manipulation leads to unrestricted upload.
CVE-2026-60044 | MB connect line/Helmholz mbCONNECT24 up to 2.20.x Backup weak password (EUVD-2026-120833)
A vulnerability labeled as problematic has been found in MB connect line/Helmholz mbCONNECT24, mymbCONNECT24, myREX24V2 and myREX24V2.virtual up to 2.20.x. The affected element is an unknown function of the component Backup. Such manipulati
CVE-2026-60046 | MB connect line/Helmholz mbCONNECT24 up to 2.20.x password recovery (EUVD-2026-120835)
A vulnerability identified as critical has been detected in MB connect line/Helmholz mbCONNECT24, mymbCONNECT24, myREX24V2 and myREX24V2.virtual up to 2.20.x. Impacted is an unknown function. This manipulation causes weak password recovery.
CVE-2026-60043 | MB connect line/Helmholz mbCONNECT24 up to 2.20.x cross site scripting (EUVD-2026-120863)
A vulnerability described as problematic has been identified in MB connect line/Helmholz mbCONNECT24, mymbCONNECT24, myREX24V2 and myREX24V2.virtual up to 2.20.x. This affects an unknown function. Executing a manipulation can lead to cross
N-able nimmt MSP-Software nach 33 Zero-Day-Lücken vom Netz
Ein Forscher veröffentlichte Exploits für die Fernwartungsplattform ohne Absprache. Auch lokale Server sollen bis zum Hotfix abgeschaltet werden. Der Softwareanbieter N-able hat seine gehosteten Umgebungen der Plattform N-central in Nord- u
[UPDATE] [mittel] RPM: Schwachstelle ermöglicht Codeausführung
Ein lokaler Angreifer kann eine Schwachstelle in RPM ausnutzen, um potenziell Code auszuführen, Daten zu manipulieren oder um einen Denial-of-Service-Zustand herbeizuführen. Weiterlesen
CVE-2026-86921 | Apple iOS/iPadOS/macOS/visionOS prior 26.7/27 permission
A vulnerability described as very critical has been identified in Apple iOS, iPadOS, macOS and visionOS. Affected is an unknown function. Such manipulation leads to permission issues. This vulnerability is referenced as CVE-2026-86921. The
CVE-2026-86919 | Apple iOS/iPadOS/macOS/visionOS prior 26.7/27/15.8 stack-based overflow
A vulnerability was found in Apple iOS, iPadOS, macOS and visionOS. It has been classified as very critical. This vulnerability affects unknown code. This manipulation causes stack-based buffer overflow. This vulnerability appears as CVE-20
CVE-2026-86918 | Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS up to 26 Image Processing out-of-bounds write
A vulnerability was found in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS up to 26. It has been declared as very critical. This issue affects some unknown processing of the component Image Processing. Such manipulation leads to out-
CVE-2026-86872 | Apple Safari/visionOS/watchOS up to 26 state issue
A vulnerability was found in Apple Safari, visionOS and watchOS up to 26. It has been declared as critical. Affected by this issue is some unknown functionality. The manipulation results in state issue. This vulnerability is known as CVE-20
CVE-2026-84613 | Apple iOS/iPadOS/macOS/tvOS/visionOS/watchOS out-of-bounds write
A vulnerability has been found in Apple iOS, iPadOS, macOS, tvOS, visionOS and watchOS and classified as critical. This impacts an unknown function. Performing a manipulation results in out-of-bounds write. This vulnerability is reported as
CVE-2026-28850 | Apple visionOS up to 26 State Management improper authorization
A vulnerability identified as problematic has been detected in Apple visionOS up to 26. Affected by this issue is some unknown functionality of the component State Management. This manipulation causes improper authorization. The identificat
CVE-2026-110669 | cemtan sar2html 4.0.0 sar2html.py deleteHost/deleteRange/deleteAll missing authentication (Issue 21)
A vulnerability labeled as critical has been found in cemtan sar2html 4.0.0. This affects the function deleteHost/deleteRange/deleteAll of the file sar2html.py. Such manipulation leads to missing authentication. This vulnerability is listed
CVE-2024-58398 | Coder Login Page redirect
A vulnerability marked as problematic has been reported in Coder. Affected is an unknown function of the component Login Page. The manipulation of the argument redirect leads to open redirect. This vulnerability is uniquely identified as CV
CVE-2024-58392 | icculus PhysicsFS up to 3.2.0 __PHYSFS_utf8codepoint off-by-one
A vulnerability, which was classified as problematic, was found in icculus PhysicsFS up to 3.2.0. Affected by this issue is the function __PHYSFS_utf8codepoint. The manipulation results in off-by-one. This vulnerability is cataloged as CVE-
CVE-2026-115775 | Twisted up to 26.9.x ExpatElementStream parser twisted.words.xish.domish resource consumption (Nessus ID 377965)
A vulnerability, which was classified as problematic, was found in Twisted up to 26.9.x. This vulnerability affects unknown code of the file twisted.words.xish.domish of the component ExpatElementStream parser. Executing a manipulation can
CVE-2026-95519 | RPM rpmgi code injection (Nessus ID 377966)
A vulnerability identified as very critical has been detected in RPM. This impacts an unknown function of the component rpmgi. Performing a manipulation results in code injection. This vulnerability is identified as CVE-2026-95519. The atta
CVE-2026-118764 | isaacs minimatch up to 11.0.0 Glob Pattern Processing src/index.ts firstPhasePreProcess resource consumption (Nessus ID 377971)
A vulnerability classified as problematic has been found in isaacs minimatch up to 11.0.0. Affected by this issue is the function firstPhasePreProcess of the file src/index.ts of the component Glob Pattern Processing. The manipulation leads
Google fixes Chrome XML zero-day flaw exploited in attacks
Google released a Chrome security update that addresses nine vulnerabilities, including a high-severity XML flaw exploited in the wild. The security update brings the Stable channel to version 157.0.8103.50/.51 for Windows and macOS and 157
USN-9026-1: Linux kernel (Azure) vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds con
USN-9035-1: Linux kernel vulnerabilities
Pengfei Wang discovered that the Turtle Beach MultiSound audio device driver in the Linux kernel contained race conditions when fetching from the ring-buffer, leading to an out-of-bounds access. A local attacker could use this to cause a de
USN-9029-1: Linux kernel (Raspberry Pi) vulnerabilities
Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash).
USN-9033-1: Linux kernel vulnerabilities
Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to m
CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended des
CVE-2026-18689 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to obtain limited information about other organizations due to incorrect authorization. A token issued for a limited purpose is accepted where it should not be, which could reveal the names of other organizations.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to obtain limited information about other organizations due to incorrect authorization. A token issued for a limited purpose is accep
CVE-2026-17428 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. Values supplied in the request URL are used in authorization decisions without sufficient verification, which could allow access to information belonging to others.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. Values supplied in the request URL are used in authorization
CVE-2026-17411 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized before it is used in database queries.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized befo
CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.
CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access c
CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.
CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before
CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the s
CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm
CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.
CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is pas