Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 786 | 0,2 % |
| ≥50 % | 3.561 | 0,9 % |
| ≥10 % | 13.157 | 3,2 % |
| <10 % | 396.051 | 95,8 % |
🗂️ …
CVE-2026-114147: CVE-2026-114147: Denial of Service via Memory Leak in ASP.NET Core SignalR Redis Backplane
CVE-2026-114147: Denial of Service via Memory Leak in ASP.NET Core SignalR Redis Backplane Vulnerability ID: CVE-2026-114147 CVSS Score: 7.5 Published: 2026-11-11 CVE-2026-114147 is a high-severity Denial of Service (DoS) vulnerability affe
Fortinet2Shell Vulnerability Lets Hackers Execute Code on FortiClient Systems Through Malicious Websites
Fortinet has patched a critical flaw in FortiClient that lets attackers run code on a victim’s computer through a malicious website. The bug is tracked as CVE-2026-121529 (advisory FG-IR-26-194). Researcher Kevin Joensen of Baldur Security
CVE-2025-40149 | Linux Kernel up to 6.17.2 __sk_dst_get use after free (EUVD-2025-124934 / Nessus ID 279063)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.17.2. This impacts the function __sk_dst_get. The manipulation leads to use after free. This vulnerability is referenced as CVE-2025-40149. The attack
CVE-2025-40105 | Linux Kernel up to 6.18-rc1 open_by_handle_at memory leak (Nessus ID 272061 / WID-SEC-2025-2450)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.18-rc1. This impacts the function open_by_handle_at. Such manipulation leads to memory leak. This vulnerability is listed as CVE-2025-40105. The attack must
CVE-2025-40080 | Linux Kernel up to 6.1.155/6.6.111/6.12.52/6.17.2 nbd shutdown privilege escalation (Nessus ID 271869 / WID-SEC-2025-2431)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.1.155/6.6.111/6.12.52/6.17.2. Affected by this issue is the function shutdown of the component nbd. Such manipulation leads to privilege escalation. This vu
CVE-2025-40078 | Linux Kernel up to 6.17.2 bpf_sock_addr privilege escalation (Nessus ID 271870 / WID-SEC-2025-2431)
A vulnerability classified as critical was found in Linux Kernel up to 5.15.194/6.1.155/6.6.111/6.12.52/6.17.2. Affected is the function bpf_sock_addr. Executing a manipulation can lead to privilege escalation. The identification of this vu
CVE-2025-40070 | Linux Kernel up to 6.17.2 drivers/base/core.c pps_register_cdev use after free (Nessus ID 271878 / WID-SEC-2025-2431)
A vulnerability described as critical has been identified in Linux Kernel up to 5.15.194/6.1.155/6.6.111/6.12.52/6.17.2. Affected is the function pps_register_cdev of the file drivers/base/core.c. Such manipulation leads to use after free.
CVE-2025-40022 | Linux Kernel up to 6.1.154/6.6.108/6.12.49/6.16.9 af_alg privilege escalation (Nessus ID 274816 / WID-SEC-2025-2407)
A vulnerability classified as critical was found in Linux Kernel up to 6.1.154/6.6.108/6.12.49/6.16.9. Affected by this issue is some unknown functionality of the component af_alg. Executing a manipulation can lead to privilege escalation.
CVE-2022-4982 | DBL GoIP-1 up to GHSFVT-1.1-67-5 frame.html path php file inclusion (EDB-50775)
A vulnerability, which was classified as problematic, has been found in DBL GoIP-1 up to GHSFVT-1.1-67-5. The affected element is an unknown function of the file frame.html. This manipulation of the argument path causes improper control of
CVE-2026-122671 | e2pdf Plugin up to 1.32.65 on WordPress authorization (EUVD-2026-123368)
A vulnerability categorized as problematic has been discovered in e2pdf Plugin up to 1.32.65 on WordPress. This issue affects some unknown processing. Such manipulation leads to missing authorization. This vulnerability is listed as CVE-202
CVE-2026-121472 | AutomatorWP Plugin up to 6.0.7 on WordPress cross-site request forgery (EUVD-2026-123184)
A vulnerability identified as problematic has been detected in AutomatorWP Plugin up to 6.0.7 on WordPress. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. This vulnerability is known as CV
CVE-2026-94513 | Microsoft SQL Server buffer overflow (EUVD-2026-121563)
A vulnerability, which was classified as very critical, was found in Microsoft SQL Server. Affected by this vulnerability is an unknown functionality. The manipulation results in buffer overflow. This vulnerability is identified as CVE-2026
CVE-2026-115600 | DEV Institute Restrict User Access Plugin up to 2.8.3 on WordPress access control (EUVD-2026-123370)
A vulnerability identified as problematic has been detected in DEV Institute Restrict User Access Plugin up to 2.8.3 on WordPress. Impacted is an unknown function. Performing a manipulation results in improper access controls. This vulnerab
CVE-2026-119531 | Live Composer Plugin up to 2.1.23 on WordPress shortcode cross site scripting (EUVD-2026-123183)
A vulnerability was found in Live Composer Plugin up to 2.1.23 on WordPress. It has been rated as problematic. This issue affects some unknown processing of the component shortcode Handler. The manipulation leads to cross site scripting. Th
N-able Warns of Critical N-central Zero-Day Vulnerability Actively Exploited by Hackers
N-able has warned that attackers are actively scanning for vulnerable N-central servers after the publication of proof-of-concept (PoC) code related to critical flaws in its remote monitoring and management (RMM) platform. The company decla
Windows Active Directory RCE and DoS Vulnerabilities Put Windows Systems at Risk
Microsoft disclosed two Windows Active Directory vulnerabilities on November 10, 2026, exposing affected systems to remote code execution and denial of service. Tracked as CVE-2026-119948 and CVE-2026-105559, both carry an Important severit
CVE-2025-61985 | OpenBSD OpenSSH up to 10.0 ssh URI neutralization of null byte (Nessus ID 275509 / WID-SEC-2025-2212)
A vulnerability, which was classified as problematic, has been found in OpenBSD OpenSSH up to 10.0. This affects an unknown part of the component ssh URI Handler. This manipulation causes improper neutralization of null byte or nul characte
CVE-2025-61984 | OpenBSD OpenSSH up to 10.0 ssh invalid special elements (Nessus ID 269984 / WID-SEC-2025-2212)
A vulnerability classified as problematic has been found in OpenBSD OpenSSH up to 10.0. Affected by this vulnerability is an unknown functionality of the component ssh. The manipulation leads to improper handling of invalid use of special e
CVE-2025-39978 | Linux Kernel up to 6.1.154/6.6.108/6.12.49/6.16.9 octeontx2-pf otx2_tc_add_flow use after free (Nessus ID 271564 / WID-SEC-2025-2298)
A vulnerability classified as critical was found in Linux Kernel up to 6.1.154/6.6.108/6.12.49/6.16.9. This vulnerability affects the function otx2_tc_add_flow of the component octeontx2-pf. The manipulation results in use after free. This
CVE-2025-39977 | Linux Kernel up to 6.1.154/6.6.108/6.12.49/6.16.9 futex futex_wait_requeue_pi use after free (Nessus ID 271415 / WID-SEC-2025-2298)
A vulnerability classified as critical has been found in Linux Kernel up to 6.1.154/6.6.108/6.12.49/6.16.9. This affects the function futex_wait_requeue_pi of the component futex. The manipulation leads to use after free. This vulnerability
CVE-2025-39871 | Linux Kernel up to 6.6.106/6.12.47/6.16.7/6.17-rc5 dmaengine lib/refcount.c idxd_free reference count (EUVD-2025-30862 / Nessus ID 265879)
A vulnerability described as critical has been identified in Linux Kernel up to 6.6.106/6.12.47/6.16.7/6.17-rc5. This issue affects the function idxd_free in the library lib/refcount.c of the component dmaengine. Executing a manipulation ca
CVE-2025-40300 | Linux Kernel up to 6.16.6 prctl information disclosure (EUVD-2025-28976 / Nessus ID 264594)
A vulnerability was found in Linux Kernel up to 6.16.6. It has been classified as critical. Affected is the function prctl. Performing a manipulation results in information disclosure. This vulnerability is known as CVE-2025-40300. Access t
CVE-2025-39866 | Linux Kernel up to 6.17-rc2 fs __mark_inode_dirty use after free (EUVD-2025-30334 / Nessus ID 265477)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.17-rc2. Affected is the function __mark_inode_dirty of the component fs. The manipulation leads to use after free. This vulnerability is traded as CVE-2025-39866.
CVE-2025-39826 | Linux Kernel up to 6.17-rc3 net rose_rt_ioctl reference count (Nessus ID 265277 / WID-SEC-2025-2077)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.1.149/6.6.103/6.12.44/6.16.4/6.17-rc3. Affected is the function rose_rt_ioctl of the component net. This manipulation causes improper update of reference count. Th
CVE-2025-39773 | Linux Kernel up to 6.17-rc2 br_multicast_query_expired denial of service (Nessus ID 264769 / WID-SEC-2025-2040)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.17-rc2. Impacted is the function br_multicast_query_expired. Such manipulation leads to denial of service. This vulnerability is uniquely identified as CVE-
CVE-2026-124257 | wordplus BP Better Messages Plugin up to 3.2.1 on WordPress cross site scripting (EUVD-2026-123339)
A vulnerability classified as problematic has been found in wordplus BP Better Messages Plugin up to 3.2.1 on WordPress. This vulnerability affects unknown code. Performing a manipulation results in cross site scripting. This vulnerability
CVE-2026-124256 | CodeRockz Delivery & Pickup Date Time Plugin up to 1.3.90 on WordPress cross site scripting (EUVD-2026-123340)
A vulnerability described as problematic has been identified in CodeRockz Delivery &amp; Pickup Date Time Plugin up to 1.3.90 on WordPress. This affects an unknown part. Such manipulation leads to cross site scripting. This vulnerabilit
CVE-2026-124250 | AyeCode GeoDirectory Plugin up to 2.8.202 on WordPress cross site scripting (EUVD-2026-123347)
A vulnerability classified as problematic was found in AyeCode GeoDirectory Plugin up to 2.8.202 on WordPress. This issue affects some unknown processing. Executing a manipulation can lead to cross site scripting. This vulnerability is hand
CVE-2026-90993 | Apache XML Graphics Batik input validation (EUVD-2026-123341)
A vulnerability was found in Apache XML Graphics Batik. It has been classified as critical. The affected element is an unknown function. This manipulation causes improper input validation. This vulnerability is tracked as CVE-2026-90993. Th
CVE-2026-82811 | Toggl OÜ Toggl Track Extension up to 4.11.21 postMessage origin validation (EUVD-2026-68679)
A vulnerability was found in Toggl OÜ Toggl Track Extension up to 4.11.21. It has been rated as problematic. This affects an unknown function of the component postMessage Handler. The manipulation leads to origin validation error. This vuln
CVE-2026-119017 | Adobe Experience Manager up to 6.5.25 improper authorization (EUVD-2026-123028)
A vulnerability classified as critical was found in Adobe Experience Manager up to 6.5.25. Affected by this issue is some unknown functionality. Executing a manipulation can lead to improper authorization. This vulnerability is handled as C
CVE-2026-114371 | Adobe Experience Manager as a Cloud Service improper authorization (EUVD-2026-123020)
A vulnerability described as critical has been identified in Adobe Experience Manager as a Cloud Service and Experience Manager. Affected is an unknown function. Such manipulation leads to improper authorization. This vulnerability is trade
CVE-2026-113580 | Adobe Experience Manager as a Cloud Service code injection (EUVD-2026-123019)
A vulnerability labeled as critical has been found in Adobe Experience Manager as a Cloud Service, Experience Manager and Experience Manager. This affects an unknown function. The manipulation results in code injection. This vulnerability i
CVE-2026-113579 | Adobe Experience Manager code injection (EUVD-2026-123018)
A vulnerability categorized as critical has been discovered in Adobe Experience Manager. The affected element is an unknown function. Executing a manipulation can lead to code injection. This vulnerability is registered as CVE-2026-113579.
CVE-2026-126614 | Progressive Robot hMailServer up to 6.3.7 Web Services Listener hMailServer.ini access control (EUVD-2026-123331)
A vulnerability has been found in Progressive Robot hMailServer up to 6.3.7 and classified as critical. Affected by this issue is some unknown functionality of the file hMailServer.ini of the component Web Services Listener. Performing a ma
CVE-2026-126618 | Progressive Robot hMailServer up to 6.3.7 Auto-ban improper authentication (EUVD-2026-123334)
A vulnerability, which was classified as problematic, was found in Progressive Robot hMailServer up to 6.3.7. Affected by this vulnerability is an unknown functionality of the component Auto-ban. Such manipulation leads to improper authenti
CVE-2026-126615 | Progressive Robot hMailServer up to 6.3.7 Authentication hMailServer.ini AccountLockoutThreshold comparison (EUVD-2026-123332)
A vulnerability classified as critical has been found in Progressive Robot hMailServer up to 6.3.7. This affects an unknown function of the file hMailServer.ini of the component Authentication. The manipulation of the argument AccountLockou
CVE-2026-18768 | Beckhoff Automation TcRouter.sys up to 3.1.0.2364 Ioctl privileges management (EUVD-2026-123319)
A vulnerability identified as very critical has been detected in Beckhoff Automation TcRouter.sys up to 3.1.0.2364. This issue affects some unknown processing of the file TcRouter.sys of the component Ioctl. This manipulation causes imprope
CVE-2026-18767 | Beckhoff Automation TcRouter.sys/TwinCAT.XAR.Base.KM prior 3.1.0.2365/3.18.1 IOCTL TcRouter.sys privileges management (EUVD-2026-123318)
A vulnerability labeled as very critical has been found in Beckhoff Automation TcRouter.sys and TwinCAT.XAR.Base.KM. Impacted is an unknown function of the file TcRouter.sys of the component IOCTL Handler. Such manipulation leads to imprope
CVE-2026-126619 | Progressive Robot hMailServer up to 6.3.7 Database Layer sql injection (EUVD-2026-123336)
A vulnerability was found in Progressive Robot hMailServer up to 6.3.7. It has been declared as critical. This issue affects some unknown processing of the component Database Layer. The manipulation results in sql injection. This vulnerabil
CVE-2026-18769 | Beckhoff Automation TcRouter.sys up to 3.1.0.2364 IOCTL privileges management (EUVD-2026-123320)
A vulnerability marked as very critical has been reported in Beckhoff Automation TcRouter.sys up to 3.1.0.2364. The affected element is an unknown function of the file TcRouter.sys of the component IOCTL Handler. Performing a manipulation r
CVE-2025-40742 | Siemens SIPROTEC 5 Compact 7SX800 get request method with sensitive query strings (ssa-904646)
A vulnerability has been found in Siemens SIPROTEC 5 6MD84, SIPROTEC 5 6MD85, SIPROTEC 5 6MD86, SIPROTEC 5 6MD89, SIPROTEC 5 6MD89 V9.6, SIPROTEC 5 6MU85, SIPROTEC 5 7KE85, SIPROTEC 5 7SA82, SIPROTEC 5 7SA86, SIPROTEC 5 7SA87, SIPROTEC 5 7S
CVE-2025-39691 | Linux Kernel up to 6.17-rc2 bh_read use after free (Nessus ID 261595 / WID-SEC-2025-1988)
A vulnerability classified as critical has been found in Linux Kernel up to 6.17-rc2. This impacts the function bh_read. Performing a manipulation results in use after free. This vulnerability is identified as CVE-2025-39691. The attack can
CVE-2025-38736 | Linux Kernel up to a754ab53993b1585132e871c5d811167ad3c52ff net asix_devices initialization (Nessus ID 261652 / WID-SEC-2025-1988)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.12.43/6.16.3/6.17-rc1/6.17-rc2/a754ab53993b1585132e871c5d811167ad3c52ff. This issue affects the function asix_devices of the component net. Executing a mani
CVE-2022-50238 | Microsoft Windows On-Endpoint Vulnerable Driver incomplete blacklist (EUVD-2022-55223)
A vulnerability, which was classified as critical, has been found in Microsoft Windows. Affected by this issue is some unknown functionality of the component On-Endpoint Vulnerable Driver Handler. The manipulation leads to incomplete blackl
CVE-2022-39888 | Samsung Devices retrieveExternalProxy access control (EUVD-2022-42333)
A vulnerability, which was classified as critical, has been found in Samsung Devices. This issue affects some unknown processing of the component retrieveExternalProxy. Performing a manipulation results in improper access controls. This vul
USN-9041-1: uutils coreutils vulnerabilities
It was discovered that uutils coreutils mkfifo incorrectly continued processing when a target file already existed, applying default permissions to the existing file. A local attacker could possibly use this issue to obtain sensitive inform
USN-9043-1: Linux kernel (NVIDIA) vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds con
USN-9044-1: Linux kernel (NVIDIA BaseOS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - IPv4 networking; (CVE-2026-98239, CVE-2
CVE-2026-125882 | N-able N-central up to 26.4.0 path traversal (WID-SEC-2026-4440)
A vulnerability classified as critical has been found in N-able N-central up to 26.4.0. The impacted element is an unknown function. The manipulation leads to path traversal. This vulnerability is referenced as CVE-2026-125882. Remote explo
CVE-2026-125881 | N-able N-central up to 26.4.0 server-side request forgery (WID-SEC-2026-4440)
A vulnerability was found in N-able N-central up to 26.4.0. It has been classified as critical. This affects an unknown part. The manipulation leads to server-side request forgery. This vulnerability is documented as CVE-2026-125881. The at
CVE-2026-125880 | N-able N-central up to 26.4.0 cross site scripting (WID-SEC-2026-4440)
A vulnerability was found in N-able N-central up to 26.4.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation results in cross site scripting. This vulnerability is reported as CVE-2026-125880. T
CVE-2026-125879 | N-able N-central up to 26.4.0 privileges management (WID-SEC-2026-4440)
A vulnerability, which was classified as very critical, has been found in N-able N-central up to 26.4.0. This impacts an unknown function. This manipulation causes improper privilege management. This vulnerability is tracked as CVE-2026-125
CVE-2026-125878 | N-able N-central up to 26.4.0 cross site scripting (WID-SEC-2026-4440)
A vulnerability was found in N-able N-central up to 26.4.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to cross site scripting. This vulnerability appea
CVE-2026-126623 | Progressive Robot hMailServer up to 6.3.7 JSON reader allocation of resources (EUVD-2026-123328)
A vulnerability identified as problematic has been detected in Progressive Robot hMailServer up to 6.3.7. The impacted element is an unknown function of the component JSON reader. Performing a manipulation results in allocation of resources
CVE-2026-126622 | Progressive Robot hMailServer 6.3.7 Installer privileges management (EUVD-2026-123327)
A vulnerability labeled as critical has been found in Progressive Robot hMailServer 6.3.7. This affects an unknown function of the component Installer. Executing a manipulation can lead to improper privilege management. This vulnerability a
CVE-2026-126624 | Progressive Robot hMailServer 6.3.7 Windows installer permission (EUVD-2026-123329)
A vulnerability classified as critical has been found in Progressive Robot hMailServer 6.3.7. Affected by this vulnerability is an unknown functionality of the component Windows installer. This manipulation causes permission issues. This vu
CVE-2026-126625 | Progressive Robot hMailServer 6.3.7 Windows Installer privileges management (EUVD-2026-123330)
A vulnerability described as critical has been identified in Progressive Robot hMailServer 6.3.7. Affected is an unknown function of the component Windows Installer. The manipulation results in improper privilege management. This vulnerabil
CVE-2026-126617 | Progressive Robot hMailServer up to 6.2.18 Database Layer GenerateFromCommand sql injection (EUVD-2026-123335)
A vulnerability classified as critical was found in Progressive Robot hMailServer up to 6.2.18. This impacts the function SQLStatement::GenerateFromCommand of the component Database Layer. The manipulation results in sql injection. This vul
CVE-2026-126616 | Progressive Robot hMailServer up to 6.3.3 Auto-ban improper authentication (EUVD-2026-123333)
A vulnerability was found in Progressive Robot hMailServer up to 6.3.3. It has been classified as critical. This vulnerability affects unknown code of the component Auto-ban. The manipulation leads to improper authentication. This vulnerabi