Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 785 | 0,2 % |
| ≥50 % | 3.561 | 0,9 % |
| ≥10 % | 13.154 | 3,2 % |
| <10 % | 396.055 | 95,8 % |
Google patches eighth Chrome zero-day exploited in attacks this year
Google has released emergency security updates to patch a new Chrome vulnerability exploited in zero-day attacks, the eighth such flaw since the start of the year. [...] Weiterlesen
Notfall-Update stopft 0-Day-Lücke in Chrome
In den neuen Chrome-Versionen 157.0.8103.50/51 für Windows und macOS sowie 157.0.8103.50 für Linux haben die Entwickler als hohes Risiko eingestufte Schwachstellen behoben. Laut Google wird eine der gestopften Lücken bereits für Angriffe au
Chrome-Update schließt aktiv ausgenutzte Zero-Day-Lücke (CVE-2026-125350)
LONDON (IT BOLTWISE) – Google hat Chrome-Updates veröffentlicht, die neun Schwachstellen schließen, darunter eine aktiv ausgenutzte Zero-Day-Lücke. Betroffen ist CVE-2026-125350, laut Beschreibung ein Use-after-free-Fehler im XML-Komponente
Barracuda Email Security Gateway Flaws Allow Unauthenticated Attackers to Execute Commands as Root
Two critical security vulnerabilities in Barracuda Email Security Gateway (ESG) could let unauthenticated attackers bypass authentication and run operating system commands as root. The vulnerabilities, tracked as CVE-2026-116606 and CVE-202
Chrome Update Patches Exploited XML Zero-Day, Eighth This Year
The high-severity use-after-free in Chrome’s XML component was reported anonymously on November 6 and is already exploited in attacks. This article has been indexed from SecurityWeek Read the original article: Chrome Update Patches Exploite
CVE-2026-43277 | Linux Kernel up to 6.19.5 ghes_new buffer overflow
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.19.5. Affected by this vulnerability is the function ghes_new. This manipulation causes buffer overflow. This vulnerability is tracked as CVE-2026-432
CVE-2026-43267 | Linux Kernel up to 6.18.15/6.19.5 wifi divide by zero
A vulnerability classified as critical has been found in Linux Kernel up to 6.18.15/6.19.5. This affects an unknown function of the component wifi. Performing a manipulation results in divide by zero. This vulnerability is cataloged as CVE-
CVE-2026-26083 | Fortinet FortiSandbox Cloud/FortiSandbox/FortiSandbox PaaS up to 4.4.8/5.0.1 HTTP Request authorization (FG-IR-26-136)
A vulnerability identified as critical has been detected in Fortinet FortiSandbox Cloud, FortiSandbox and FortiSandbox PaaS up to 4.4.8/5.0.1. Affected by this vulnerability is an unknown functionality of the component HTTP Request Handler.
CVE-2026-14543 | Axis Communications AB AXIS OS up to 12.11.83/13.0.41 VAPIX Edge Storage API privileges management (EUVD-2026-120772)
A vulnerability was found in Axis Communications AB AXIS OS up to 12.11.83/13.0.41 and classified as problematic. Impacted is an unknown function of the component VAPIX Edge Storage API. Executing a manipulation can lead to improper privile
CVE-2026-14542 | Axis Communications AB Axis OS up to 10.12.351/11.11.227/12.11.122/13.0.82 VAPIX SIP configuration API input validation (EUVD-2026-120771)
A vulnerability was found in Axis Communications AB Axis OS up to 10.12.351/11.11.227/12.11.122/13.0.82. It has been rated as critical. This affects an unknown function of the component VAPIX SIP configuration API. This manipulation causes
CVE-2026-63288 | Axis Communications AB AXIS A1810 improper authorization (EUVD-2026-120775)
A vulnerability classified as very critical has been found in Axis Communications AB AXIS A1210, AXIS A1601, AXIS A1610, AXIS A1710 and AXIS A1810. This vulnerability affects unknown code. This manipulation causes improper authorization. Th
CVE-2026-63282 | Axis Communications Axis OS up to 13.0.83 command injection (EUVD-2026-120773)
A vulnerability was found in Axis Communications Axis OS up to 13.0.83. It has been classified as problematic. The affected element is an unknown function. The manipulation leads to command injection. This vulnerability is documented as CVE
CVE-2026-14918 | Axis Communications Signed Video Framework out-of-bounds (EUVD-2026-120774)
A vulnerability was found in Axis Communications Signed Video Framework, Signed Media Verifier and Axis File Player. It has been declared as problematic. The impacted element is an unknown function. The manipulation results in out-of-bounds
CVE-2026-8372 | Axis Communications AB AXIS Camera Station Pro up to 6.17 improper authorization (EUVD-2026-120777)
A vulnerability, which was classified as critical, has been found in Axis Communications AB AXIS Camera Station Pro up to 6.17. Impacted is an unknown function. Performing a manipulation results in improper authorization. This vulnerability
CVE-2026-4762 | Axis Communications AB AXIS Camera Station Pro up to 6.17 privileges management (EUVD-2026-120776)
A vulnerability classified as very critical was found in Axis Communications AB AXIS Camera Station Pro up to 6.17. This issue affects some unknown processing. Such manipulation leads to improper privilege management. This vulnerability is
Chrome Update Patches Exploited XML Zero-Day, Eighth This Year
The high-severity use-after-free in Chrome’s XML component was reported anonymously on November 6 and is already exploited in attacks. The post Chrome Update Patches Exploited XML Zero-Day, Eighth This Year appeared first on SecurityWeek. W
Apple-Schwachstelle von 2024 in Angriffskampagne eingesetzt
Eine aktuell Spionagekampagne kombiniert eine 2024 behobene Apple-Schwachstelle mit einem weiteren WebKit-Fehler, um Cookies auf ungepatchten iPhones zu stehlen. Ein Zusammenhang mit den jüngsten Warnungen zur „Mercenary Spyware“ ist nicht
CVE-2026-8810 | Insyde H2O up to 05.63.20/05.72.20 HDD Password information disclosure (EUVD-2026-62294 / WID-SEC-2026-3254)
A vulnerability, which was classified as problematic, was found in Insyde H2O up to 05.63.20/05.72.20. The impacted element is an unknown function of the component HDD Password. The manipulation results in information disclosure. This vulne
CVE-2026-76235 | Red Hat Enterprise Linux/OpenShift Dev Spaces 7/8/9/10 cockpit-ws CockpitLang memory leak
A vulnerability was found in Red Hat Enterprise Linux and OpenShift Dev Spaces 7/8/9/10. It has been classified as critical. This affects an unknown function of the component cockpit-ws. Performing a manipulation of the argument CockpitLang
CVE-2026-76166 | Red Hat Enterprise Application Platform Advertise Listener AdvertiseListenerImpl.java verifyDigest comparison (EUVD-2026-62367)
A vulnerability was found in Red Hat Enterprise Application Platform, Enterprise Application Platform Expansion Pack, Web Server and Single Sign-On. It has been rated as problematic. This issue affects the function verifyDigest of the file
CVE-2026-75981 | Cozmos Labs TranslatePress Plugin up to 3.2.5 on WordPress class-translation-render.php translate_page cross site scripting
A vulnerability has been found in Cozmos Labs TranslatePress Plugin up to 3.2.5 on WordPress and classified as problematic. This affects the function translate_page of the file includes/class-translation-render.php. This manipulation causes
CVE-2026-75900 | Red Hat Enterprise Linux NVRAM SWTPM_NVRAM_CheckHeader out-of-bounds (EUVD-2026-62363)
A vulnerability has been found in Red Hat Enterprise Linux and classified as problematic. Affected by this vulnerability is the function SWTPM_NVRAM_CheckHeader of the component NVRAM. Performing a manipulation results in out-of-bounds read
CVE-2026-72868 | Dokploy up to 0.29.12 Destination Router destination.ts child_process.exec privileges management (EUVD-2026-55726)
A vulnerability marked as very critical has been reported in Dokploy up to 0.29.12. This issue affects the function child_process.exec of the file apps/dokploy/server/api/routers/destination.ts of the component Destination Router. This mani
CVE-2026-49431 | FreeBSD ZFS up to p0.x/p6/p10/p15 ZFS_IOC_SET_PROP hasrecvd improper authorization
A vulnerability was found in FreeBSD ZFS up to p0.x/p6/p10/p15. It has been classified as problematic. Affected by this vulnerability is the function ZFS_IOC_SET_PROP. This manipulation of the argument hasrecvd causes improper authorization
CVE-2026-49430 | FreeBSD ZFS up to p0.x/p6/p10/p15 Heal Receive Path ZFS_IOC_RECV_NEW memory corruption
A vulnerability was found in FreeBSD ZFS up to p0.x/p6/p10/p15 and classified as critical. Affected is the function ZFS_IOC_RECV_NEW of the component Heal Receive Path. The manipulation results in memory corruption. This vulnerability is id
CVE-2026-49429 | FreeBSD ZFS up to p0.x/p6/p10/p15 ZFS_IOC_USERSPACE_MANY heap-based overflow
A vulnerability has been found in FreeBSD ZFS up to p0.x/p6/p10/p15 and classified as critical. This impacts the function ZFS_IOC_USERSPACE_MANY. The manipulation leads to heap-based buffer overflow. This vulnerability is referenced as CVE-
CVE-2026-49428 | FreeBSD Kernel up to p0.x/p6/p10/p15 Largepage Objects open/fspacectl O_TRUNC privileges management
A vulnerability has been found in FreeBSD Kernel up to p0.x/p6/p10/p15 and classified as very critical. Affected is the function open/fspacectl of the component Largepage Objects. This manipulation of the argument O_TRUNC causes improper pr
CVE-2026-49423 | FreeBSD Kernel up to p0.x/p6/p10/p15 Ktls Ocf ktls_ocf_tls_cbc_decrypt uninitialized resource
A vulnerability was found in FreeBSD Kernel up to p0.x/p6/p10/p15. It has been declared as critical. Affected by this vulnerability is the function ktls_ocf_tls_cbc_decrypt of the component Ktls Ocf. Executing a manipulation can lead to uni
CVE-2026-19489 | Citrix ADC/Gateway up to 14.1/73.32/13.1/63.21 buffer overflow (Nessus ID 338328)
A vulnerability classified as very critical has been found in Citrix ADC and Gateway up to 14.1/73.32/13.1/63.21. Affected is an unknown function. This manipulation causes buffer overflow. This vulnerability is tracked as CVE-2026-19489. Th
CVE-2026-15780 | Veronalabs WP Statistics Plugin up to 14.16.8 on WordPress REST Endpoint /wp-statistics/v2/hit utm_campaign cross site scripting
A vulnerability was found in Veronalabs WP Statistics Plugin up to 14.16.8 on WordPress and classified as problematic. This impacts an unknown function of the file /wp-statistics/v2/hit of the component REST Endpoint. Such manipulation of t
CVE-2026-15446 | nosilver4u EWWW Image Optimizer Plugin up to 8.7.3 on WordPress Unveilhooks Addon data-script cross site scripting
A vulnerability was found in nosilver4u EWWW Image Optimizer Plugin up to 8.7.3 on WordPress. It has been classified as problematic. Affected is an unknown function of the component Unveilhooks Addon. Performing a manipulation of the argume
CVE-2026-5745 | libarchive ACL Parser archive_acl_from_text_nl null pointer dereference
A vulnerability was found in libarchive and classified as problematic. Impacted is the function archive_acl_from_text_nl of the component ACL Parser. The manipulation results in null pointer dereference. This vulnerability is known as CVE-2
CVE-2026-43262 | Linux Kernel up to 6.19.5 gfs2_fiemap memory corruption
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.19.5. Impacted is the function gfs2_fiemap. Performing a manipulation results in memory corruption. This vulnerability is cataloged as CVE-2026-43262.
CVE-2026-43259 | Linux Kernel up to 6.18.15/6.19.5 phy platform_set_drvdata privilege escalation
A vulnerability classified as critical was found in Linux Kernel up to 6.18.15/6.19.5. This issue affects the function platform_set_drvdata of the component phy. Such manipulation leads to privilege escalation. This vulnerability is listed
CVE-2026-43257 | Linux Kernel up to 6.19.5 media snd_cx88_hw_params release of resource
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.19.5. This affects the function snd_cx88_hw_params of the component media. Such manipulation leads to missing release of resource. This vulnerability is lis
CVE-2026-70408 | Extra Innovation acmailer CGI/acmailer DB improper authorization
A vulnerability was found in Extra Innovation acmailer CGI and acmailer DB. It has been declared as critical. Affected by this issue is some unknown functionality. Such manipulation leads to improper authorization. This vulnerability is lis
CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended des
CVE-2026-18689 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to obtain limited information about other organizations due to incorrect authorization. A token issued for a limited purpose is accepted where it should not be, which could reveal the names of other organizations.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to obtain limited information about other organizations due to incorrect authorization. A token issued for a limited purpose is accep
CVE-2026-17428 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. Values supplied in the request URL are used in authorization decisions without sufficient verification, which could allow access to information belonging to others.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. Values supplied in the request URL are used in authorization
CVE-2026-17411 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized before it is used in database queries.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized befo
CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.
CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access c
CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.
CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before
CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the s
CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm
CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.
CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is pas
CVE-2026-17401 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-17400 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
CVE-2026-17399 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not sufficiently checked before it is processed, which could allow code to run on the server.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not suffic
CVE-2026-17398 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-17397 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-17396 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
CVE-2026-17395 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access internal network resources due to improper validation of a user-supplied URL. Destinations are not sufficiently restricted, which could allow the server to be made to contact internal systems.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access internal network resources due to improper validation of a user-supplied URL. Destinations are not sufficiently r
CVE-2026-17394 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improperly controlled modification of object attributes. A user-supplied value could change an access-related setting that should be controlled by the system, which could expose sensitive information.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improperly controlled modification of object attributes. A user-supplied value could
CVE-2026-17392 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain unauthorized administrative access to other tenants due to LDAP injection. User-supplied input is not properly neutralized in directory queries, which could change the query and grant access beyond the user's own tenant.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain unauthorized administrative access to other tenants due to LDAP injection. User-supplied input is not properly neut
CVE-2026-17391 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization.
CVE-2026-17390 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to execute arbitrary JavaScript in the web UI due to cross-site scripting. This could alter the intended functionality of the page and potentially lead to credential disclosure within a trusted session.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to execute arbitrary JavaScript in the web UI due to cross-site scripting. This could alter the intended functionality of the page an