Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 785 | 0,2 % |
| ≥50 % | 3.561 | 0,9 % |
| ≥10 % | 13.145 | 3,2 % |
| <10 % | 396.064 | 95,8 % |
SonicWall releases patches for 7 flaws in its firewalls, most involving unauthenticated access
SonicWall on Monday updated its advisory about seven cybersecurity holes affecting its Gen 7 and Gen 8 firewalls, five of which allow unauthenticated remote attacks, to warn that it is aware of “potential” active exploitation of at least on
N-able Takes N-central Servers Offline Worldwide After 33 0-Day Vulnerabilities and Able2Shell Exploits
N-able took its hosted N-central environments offline on November 9, 2026, after an independent researcher published details of 33 alleged zero-day vulnerabilities and exploit code. The company also told customers running N-central on their
CVE-2026-125402 | Ettercap up to 0.8.4.1 SSL SNI src/ec_sslwrap.c sslw_get_clienthello_sni out-of-bounds (EUVD-2026-120565)
A vulnerability labeled as critical has been found in Ettercap up to 0.8.4.1. This impacts the function sslw_get_clienthello_sni of the file src/ec_sslwrap.c of the component SSL SNI Handler. The manipulation results in out-of-bounds read.
CVE-2026-125401 | Ettercap up to 0.8.4.1 Gadu-Gadu Dissector src/dissectors/ec_gg.c gg_get_version heap-based overflow (EUVD-2026-120564)
A vulnerability labeled as critical has been found in Ettercap up to 0.8.4.1. The affected element is the function gg_get_version of the file src/dissectors/ec_gg.c of the component Gadu-Gadu Dissector. Executing a manipulation can lead to
CVE-2026-125404 | Ettercap up to 0.8.4.1 src/ec_encryption_ccmp.c ccmp_decrypt integer underflow (EUVD-2026-120567)
A vulnerability identified as very critical has been detected in Ettercap up to 0.8.4.1. This affects the function ccmp_decrypt of the file src/ec_encryption_ccmp.c. The manipulation leads to integer underflow. This vulnerability is listed
CVE-2026-125403 | Ettercap up to 0.8.4.1 src/ec_sslwrap.c sslw_remove_sts out-of-bounds (EUVD-2026-120566)
A vulnerability has been found in Ettercap up to 0.8.4.1 and classified as critical. This affects the function sslw_remove_sts of the file src/ec_sslwrap.c. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identi
CVE-2026-125405 | Ettercap up to 0.8.4.1 HTTP Dissector src/dissectors/ec_http.c Parse_NTLM_Auth out-of-bounds (EUVD-2026-120568)
A vulnerability marked as critical has been reported in Ettercap up to 0.8.4.1. Affected is the function Parse_NTLM_Auth of the file src/dissectors/ec_http.c of the component HTTP Dissector. This manipulation causes out-of-bounds read. This
CVE-2026-125406 | Ettercap up to 0.8.4.1 Telnet Dissector ec_telnet.c stack-based overflow (EUVD-2026-120569)
A vulnerability was found in Ettercap up to 0.8.4.1 and classified as very critical. The affected element is an unknown function of the file src/dissectors/ec_telnet.c of the component Telnet Dissector. Such manipulation leads to stack-base
CVE-2026-81816 | Apache OFBiz up to 24.09.7 ContentWorker renderContentAsText xml external entity reference (EUVD-2026-117482)
A vulnerability classified as critical was found in Apache OFBiz up to 24.09.7. Impacted is the function renderContentAsText of the component ContentWorker. Such manipulation leads to xml external entity reference. This vulnerability is ref
CVE-2026-125076 | SourceCodester Smart Attendance System with QR Code Scanner 1.0 JSON Endpoint attendance_handler.php student_code missing authentication (EUVD-2026-120570)
A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. It has been classified as critical. Affected is an unknown function of the file api/attendance_handler.php of the component JSON Endpoint. Perform
CVE-2026-64244 | Linux Kernel up to 7.1.1 Memory Management drivers/base/memory __add_memory_block altmap memory corruption (WID-SEC-2026-2527)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.143/6.12.94/6.18.36/7.0.13/7.1.1. This vulnerability affects the function __add_memory_block of the file drivers/base/memory of the component Memory Manageme
CVE-2026-64243 | Linux Kernel up to 7.0.11 ASoC codecs simple-mux simple_mux_control_put items memory corruption (WID-SEC-2026-2527)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 7.0.11. This affects the function simple_mux_control_put of the component ASoC codecs simple-mux. Executing a manipulation of the argument items can lead
CVE-2026-64242 | Linux Kernel up to 7.0.11 net2280 net2280_remove double free (Nessus ID 330201 / WID-SEC-2026-2527)
A vulnerability was found in Linux Kernel up to 7.0.11. It has been rated as critical. Affected by this issue is the function net2280_remove of the component net2280. Performing a manipulation results in double free. This vulnerability is r
CVE-2026-64240 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 igorplugusb igorplugusb.c usb_fill_control_urb request memory corruption (WID-SEC-2026-2527)
A vulnerability was found in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 and classified as very critical. This impacts the function usb_fill_control_urb of the file drivers/media/rc/igorplugusb.c of the component igorplugusb. The mani
CVE-2026-64238 | Linux Kernel up to 7.0.11 GPIO Shared gpio_chip::of_xlate offset deadlock (Nessus ID 330191 / WID-SEC-2026-2527)
A vulnerability, which was classified as problematic, was found in Linux Kernel up to 7.0.11. The impacted element is the function gpio_chip::of_xlate of the component GPIO Shared. Executing a manipulation of the argument offset can lead to
CVE-2026-64235 | Linux Kernel up to 6.12.92/6.18.34/7.0.11 ftrace ftrace_64.S text_poke_apply_relocation rip memory corruption (Nessus ID 330187 / WID-SEC-2026-2527)
A vulnerability labeled as problematic has been found in Linux Kernel up to 6.12.92/6.18.34/7.0.11. Affected by this issue is the function text_poke_apply_relocation of the file ftrace_64.S of the component ftrace. Executing a manipulation
IT Security News Hourly Summary 2026-11-10 01h : 6 posts
6 posts published in the last hour 23:31Hotel giant Wyndham exposed customer data after app security lapse 23:06IT Security News Roundup: 2026-11-09 Evening 23:03SEGA newsletter data breach exposes 2.2 million email addresses 23:02CVE-2026-
CVE-2026-36983 | D-Link DCS-932L 2.18.01 /bin/alphapd sub_42EF14 LightSensorControl command injection
A vulnerability was found in D-Link DCS-932L 2.18.01. It has been classified as critical. Affected by this vulnerability is the function sub_42EF14 of the file /bin/alphapd. Performing a manipulation of the argument LightSensorControl resul
CVE-2026-31248 | Docling up to 2.61.0 XML Parser etree.fromstring xml external entity reference
A vulnerability was found in Docling up to 2.61.0. It has been classified as problematic. This vulnerability affects the function etree.fromstring of the component XML Parser. The manipulation leads to xml external entity reference. This vu
CVE-2026-31247 | Docling up to 2.61.0 xml external entity reference
A vulnerability described as problematic has been identified in Docling up to 2.61.0. This vulnerability affects unknown code. The manipulation results in xml external entity reference. This vulnerability is known as CVE-2026-31247. It is p
CVE-2025-12200 | dnsmasq up to 2.73rc6 Config File src/option.c parse_dhcp_opt m null pointer dereference (EUVD-2025-36059 / Nessus ID 276817)
A vulnerability, which was classified as problematic, has been found in dnsmasq up to 2.73rc6. Affected by this issue is the function parse_dhcp_opt of the file src/option.c of the component Config File Handler. This manipulation of the arg
CVE-2025-12199 | dnsmasq up to 2.73rc6 Config File src/network.c check_servers null pointer dereference (EUVD-2025-36060 / Nessus ID 276818)
A vulnerability classified as problematic was found in dnsmasq up to 2.73rc6. Affected by this vulnerability is the function check_servers of the file src/network.c of the component Config File Handler. The manipulation results in null poin
CVE-2025-12198 | dnsmasq up to 2.73rc6 Config File src/util.c parse_hex i heap-based overflow (EUVD-2025-36061 / Nessus ID 276816)
A vulnerability classified as critical has been found in dnsmasq up to 2.73rc6. Affected is the function parse_hex of the file src/util.c of the component Config File Handler. The manipulation of the argument i leads to heap-based buffer ov
CVE-2024-0391 | WSO2 Identity Server prior 7.0.0.131 response discrepancy
A vulnerability was found in WSO2 Identity Server, Open Banking IAM, Identity Server as Key Manager, Email OTP Authenticator and Carbon Authenticator Library for EmailOTP. It has been rated as problematic. Affected by this vulnerability is
CVE-2026-124033 – Relative path traversal in the log export commands in AWS ParallelCluster CLI
Bulletin ID: 2026-174-AWS Publication Date: 11/09/2026 13:00 PM PST Description: AWS ParallelCluster CLI is an open source command line tool, distributed on PyPI as aws-parallelcluster. We identified CVE-2026-124033, an issue where the expo
CVE-2026-123218 | IBM Aspera Faspex up to 5.0.19 improper authorization
A vulnerability was found in IBM Aspera Faspex up to 5.0.19 and classified as very critical. This vulnerability affects unknown code. Executing a manipulation can lead to improper authorization. This vulnerability is handled as CVE-2026-123
CVE-2026-113970 | Apple iOS/iPadOS/macOS/visionOS/watchOS prior 27.2.1 use after free (EUVD-2026-120412)
A vulnerability labeled as very critical has been found in Apple iOS, iPadOS, macOS, visionOS and watchOS. This affects an unknown part. The manipulation results in use after free. This vulnerability is known as CVE-2026-113970. It is possi
CVE-2026-113971 | Apple iOS/iPadOS up to 18.7.11/26.4 Lock Screen privileges management (EUVD-2026-120413)
A vulnerability described as problematic has been identified in Apple iOS and iPadOS up to 18.7.11/26.4. This issue affects some unknown processing of the component Lock Screen. Such manipulation leads to improper privilege management. This
CVE-2026-121223 | Google Chrome up to 157.0.8103.37 Media cross-domain policy (EUVD-2026-116301)
A vulnerability labeled as problematic has been found in Google Chrome up to 157.0.8103.37. This vulnerability affects unknown code of the component Media. The manipulation results in permissive cross-domain policy with untrusted domains. T
CVE-2026-121164 | Google Chrome up to 156.0.8078.79 Views privileges management (EUVD-2026-116300)
A vulnerability was found in Google Chrome. It has been rated as critical. Affected is an unknown function of the component Views. This manipulation causes improper privilege management. The identification of this vulnerability is CVE-2026-
CVE-2026-75879 | IBM Content Navigator 3.0.15.0/3.1.0.0/3.2.0.0/26.0.0.0 ldap injection (EUVD-2026-119722)
A vulnerability was found in IBM Content Navigator 3.0.15.0/26.0.0.0/3.1.0.0/3.2.0.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to ldap injection. This vulner
CVE-2026-121096 | Google Chrome up to 156.0.8078.79 V8 out-of-bounds (EUVD-2026-116290)
A vulnerability was found in Google Chrome. It has been classified as problematic. Affected is an unknown function of the component V8. The manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-121096. The a
CVE-2026-119759 | trailbaseio TrailBase 0.28.2/0.35.9 FileUpload like resource injection (EUVD-2026-120414)
A vulnerability was found in trailbaseio TrailBase 0.28.2/0.35.9. It has been classified as critical. This affects an unknown function of the component FileUpload. This manipulation of the argument like causes improper control of resource i
CVE-2026-15266 | IBM Concert up to 3.0.1.1 os command injection (EUVD-2026-119668)
A vulnerability categorized as very critical has been discovered in IBM Concert up to 3.0.1.1. This impacts an unknown function. Executing a manipulation can lead to os command injection. This vulnerability appears as CVE-2026-15266. The at
CVE-2026-124992 | nushell up to 0.116.1 Data Conversion ser.rs escape_bytes control sequence (Issue 19197 / EUVD-2026-120415)
A vulnerability has been found in nushell up to 0.116.1 and classified as problematic. Impacted is the function escape_bytes of the file crates/nu-json/src/ser.rs of the component Data Conversion Handler. The manipulation leads to improper
CVE-2026-121033 | Google Chrome up to 156.0.8078.79 GPU uninitialized pointer (EUVD-2026-116480)
A vulnerability classified as critical has been found in Google Chrome. This affects an unknown function of the component GPU. The manipulation leads to uninitialized pointer. This vulnerability is referenced as CVE-2026-121033. Remote expl
CVE-2026-122056 | Red Hat Enterprise Linux SDS Compose buffer overflow (EUVD-2026-120416)
A vulnerability, which was classified as problematic, has been found in Red Hat Enterprise Linux. This issue affects some unknown processing of the component SDS Compose. Performing a manipulation results in buffer overflow. This vulnerabil
CVE-2026-121190 | Google Chrome up to 156.0.8078.79 Extensions cross site scripting (EUVD-2026-116322)
A vulnerability was found in Google Chrome. It has been classified as problematic. This vulnerability affects unknown code of the component Extensions. Performing a manipulation results in cross site scripting. This vulnerability is known a
CVE-2026-19706 | Red Hat Assisted Installer for OpenShift Container Platform CSR Approval certificate validation (EUVD-2026-120121)
A vulnerability was found in Red Hat Assisted Installer for OpenShift Container Platform, Multicluster Engine for Kubernetes and OpenShift Container Platform and classified as problematic. This issue affects some unknown processing of the c
CVE-2026-60117 | KasemJaffer receive_sharing_intent up to 1.9.0 Android Implementation FileDirectory.getDataColumn _display_name path traversal (EUVD-2026-120158)
A vulnerability categorized as problematic has been discovered in KasemJaffer receive_sharing_intent up to 1.9.0. This affects the function FileDirectory.getDataColumn of the component Android Implementation. Executing a manipulation of the
CVE-2026-125063 | Red Hat Ansible Automation Platform Rrule Validation rrule redos (EUVD-2026-120159)
A vulnerability marked as critical has been reported in Red Hat Ansible Automation Platform. Affected by this vulnerability is an unknown functionality of the component Rrule Validation. This manipulation of the argument rrule causes ineffi
CVE-2026-95743 | HPE Fabric Composer up to 7.3.4/7.4.0 privileges management (EUVD-2026-116160)
A vulnerability classified as very critical was found in HPE Fabric Composer up to 7.3.4/7.4.0. Affected by this vulnerability is an unknown functionality. The manipulation results in improper privilege management. This vulnerability is cat
CVE-2026-95742 | HPE Fabric Composer up to 7.3.4/7.4.0 file inclusion (EUVD-2026-116286)
A vulnerability, which was classified as very critical, has been found in HPE Fabric Composer up to 7.3.4/7.4.0. Affected by this issue is some unknown functionality. This manipulation causes file inclusion. This vulnerability is registered
CVE-2026-84503 | Red Hat Ansible Automation Platform Ansible Core ansible.builtin.git repository URL command injection (EUVD-2026-120161)
A vulnerability classified as critical has been found in Red Hat Ansible Automation Platform Ansible Core. This affects an unknown part of the component ansible.builtin.git. Performing a manipulation of the argument repository URL results i
CVE-2026-112899 | Pillow Eps Image Loading EpsImagePlugin.py Ghostscript scale denial of service (EUVD-2026-117791)
A vulnerability categorized as problematic has been discovered in Pillow. This vulnerability affects the function Ghostscript of the file src/PIL/EpsImagePlugin.py of the component Eps Image Loading. Such manipulation of the argument scale
CVE-2026-95745 | HPE Fabric Composer up to 7.3.4/7.4.0 denial of service (EUVD-2026-116162)
A vulnerability was found in HPE Fabric Composer up to 7.3.4/7.4.0. It has been classified as critical. Affected is an unknown function. This manipulation causes denial of service. This vulnerability is handled as CVE-2026-95745. The attack
CVE-2026-95744 | HPE Fabric Composer up to 7.3.4/7.4.0 information disclosure (EUVD-2026-116161)
A vulnerability labeled as problematic has been found in HPE Fabric Composer up to 7.3.4/7.4.0. Affected by this issue is some unknown functionality. Executing a manipulation can lead to information disclosure. This vulnerability is tracked
CVE-2026-114604 | Ardatan graphql-tools up to 12.0.1 setObjectKeyPath mergeIncrementalResult.ts mergeIncrementalResult path prototype pollution (EUVD-2026-117792)
A vulnerability labeled as critical has been found in Ardatan graphql-tools up to 12.0.1. The impacted element is the function mergeIncrementalResult of the file packages/utils/src/mergeIncrementalResult.ts of the component setObjectKeyPath
CVE-2026-0401 | SonicWall SonicOS null pointer dereference (SNWLID-2026-0001 / Nessus ID 300077)
A vulnerability was found in SonicWall SonicOS and classified as problematic. Affected is an unknown function. The manipulation results in null pointer dereference. This vulnerability is known as CVE-2026-0401. It is possible to launch the
CVE-2026-0400 | SonicWall SonicOS format string (SNWLID-2026-0001 / Nessus ID 300077)
A vulnerability has been found in SonicWall SonicOS and classified as critical. This impacts an unknown function. The manipulation leads to format string. This vulnerability is traded as CVE-2026-0400. It is possible to initiate the attack
CVE-2026-0399 | SonicWall SonicOS API Endpoint stack-based overflow (SNWLID-2026-0001 / Nessus ID 300077)
A vulnerability was found in SonicWall SonicOS. It has been declared as critical. Affected by this issue is some unknown functionality of the component API Endpoint. Such manipulation leads to stack-based buffer overflow. This vulnerability
CVE-2024-33396 | karmada up to 1.9.0 Token access control
A vulnerability was found in karmada up to 1.9.0. It has been declared as problematic. Affected by this issue is some unknown functionality of the component Token. Executing a manipulation can lead to improper access controls. This vulnerab
USN-9014-1: OpenJDK 17 vulnerabilities
It was discovered that the Security component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374) It was discovered that the JSSE component of OpenJD
USN-9013-1: Fetchmail vulnerabilities
Christian Herdtweck discovered that Fetchmail incorrectly handled certain long log messages. A remote attacker could possibly use this issue to cause Fetchmail to crash, resulting in a denial of service. This issue only affected Ubuntu 16.0
USN-9004-1: OpenJDK 25 vulnerabilities
It was discovered that the 2D component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to read or modify sensitive data. (CVE-2026-91415) It was discovered