Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 743 | 0,2 % |
| ≥50 % | 3.222 | 0,8 % |
| ≥10 % | 22.081 | 5,8 % |
| <10 % | 354.683 | 93,2 % |
CVE-2026-39814 | Fortinet FortiWeb up to 7.4.12/7.6.6/8.0.2 path traversal (FG-IR-26-114)
A vulnerability classified as problematic was found in Fortinet FortiWeb up to 7.4.12/7.6.6/8.0.2. The impacted element is an unknown function. Executing a manipulation can lead to relative path traversal. The identification of this vulnera
CVE-2023-54349 | Spondonit AmazCart CMS 3.4 Search History cross site scripting (Exploit 51219)
A vulnerability classified as problematic has been found in Spondonit AmazCart CMS 3.4. This affects an unknown part of the component Search History Handler. Performing a manipulation results in cross site scripting. This vulnerability was
CVE-2023-54347 | OpenEMR 7.0.1 Main Login Endpoint authUser/clearPass excessive authentication (Exploit 51413)
A vulnerability categorized as problematic has been discovered in OpenEMR 7.0.1. This affects an unknown function of the component Main Login Endpoint. Executing a manipulation of the argument authUser/clearPass can lead to improper restric
CVE-2023-54346 | Backupbliss WordPress Plugin Backup Migration 1.2.8 on WordPress Configuration File file information disclosure (Exploit 51445)
A vulnerability was found in Backupbliss WordPress Plugin Backup Migration 1.2.8 on WordPress. It has been classified as problematic. Impacted is an unknown function of the component Configuration File Handler. This manipulation causes file
CVE-2023-54345 | Frappe ERPNext 13.4.0 call /app/server-script gi_frame code injection (Exploit 51580)
A vulnerability was found in Frappe ERPNext 13.4.0 and classified as critical. This issue affects some unknown processing of the file /app/server-script of the component call Handler. The manipulation of the argument gi_frame results in cod
CVE-2023-54344 | Eclipse equinox OSGi up to 3.7.2 Console Interface missing authentication (Exploit 51879)
A vulnerability was found in Eclipse equinox OSGi up to 3.7.2. It has been rated as critical. The impacted element is an unknown function of the component Console Interface. Performing a manipulation results in missing authentication. This
CVE-2023-54342 | Eclipse equinox OSGi up to 3.18 Console Interface missing authentication (Exploit 51878)
A vulnerability was found in Eclipse equinox OSGi up to 3.18. It has been declared as critical. The affected element is an unknown function of the component Console Interface. Such manipulation leads to missing authentication. This vulnerab
IT Security News Hourly Summary 2026-10-29 20h : 36 posts
36 posts published in the last hour 18:36Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users 18:36Claude Model Builds Exploits Across Major Browsers &amp; OSes 18:36Artificial Intimacy: Love and lies in the age of
CVE-2026-117870 | Mozilla Firefox up to 115.43/153.5/158 JavaScript Engine use after free (Nessus ID 373648)
A vulnerability marked as critical has been reported in Mozilla Firefox up to 115.43/153.5/158. The affected element is an unknown function of the component JavaScript Engine. The manipulation leads to use after free. This vulnerability is
CVE-2026-117869 | Mozilla Firefox up to 115.43/153.5/158 DOM Core/HTML use after free (Nessus ID 373648)
A vulnerability described as critical has been identified in Mozilla Firefox up to 115.43/153.5/158. The impacted element is an unknown function of the component DOM Core/HTML. The manipulation results in use after free. This vulnerability
CVE-2026-117868 | Mozilla Firefox up to 115.43/153.5/158 Networking sandbox (Nessus ID 373648)
A vulnerability identified as critical has been detected in Mozilla Firefox up to 115.43/153.5/158. This issue affects some unknown processing of the component Networking. Performing a manipulation results in sandbox issue. This vulnerabili
CVE-2026-117867 | Mozilla Firefox up to 115.43/153.5/158 Layout use after free (Nessus ID 373648)
A vulnerability categorized as critical has been discovered in Mozilla Firefox up to 115.43/153.5/158. This vulnerability affects unknown code of the component Layout. Such manipulation leads to use after free. This vulnerability is uniquel
CVE-2026-117865 | Mozilla Firefox GC use after free (Nessus ID 373648)
A vulnerability was found in Mozilla Firefox. It has been rated as critical. This affects an unknown part of the component GC. This manipulation causes use after free. This vulnerability is handled as CVE-2026-117865. The attack can be init
CVE-2026-74049 | Apache Tomcat up to 11.0.26 redirect (EUVD-2026-105005)
A vulnerability classified as problematic has been found in Apache Tomcat up to 7.0.109/8.5.100/9.0.122/10.1.60/11.0.26. This vulnerability affects unknown code. Performing a manipulation results in open redirect. This vulnerability is cata
CVE-2026-89009 | WAVLINK WN535M1/WN535M3 up to M35M1_V250922 sync_server daemon filename path traversal (EUVD-2026-76129)
A vulnerability was found in WAVLINK WN535M1 and WN535M3 up to M35M1_V250922. It has been rated as critical. Impacted is an unknown function of the component sync_server daemon. This manipulation of the argument filename causes path travers
CVE-2026-80353 | Apache Tomcat up to 9.0.122 APR-Native connector toctou (EUVD-2026-105006)
A vulnerability, which was classified as problematic, has been found in Apache Tomcat up to 9.0.122. Impacted is an unknown function of the component APR-Native connector. The manipulation leads to time-of-check time-of-use. This vulnerabil
CVE-2026-46651 | intranda goobi-viewer-core up to 26.04 Download Task Endpoint monitor.socket DownloadTaskEndpoint missing authentication (EUVD-2026-109059)
A vulnerability described as critical has been identified in intranda goobi-viewer-core up to 26.04. This impacts the function DownloadTaskEndpoint of the file /tasks/download/monitor.socket of the component Download Task Endpoint. Executin
CVE-2026-115477 | -40-Thieves obsidian-tc up to 1.31.3 Handler privileges management (EUVD-2026-109082)
A vulnerability was found in -40-Thieves obsidian-tc up to 1.31.3. It has been declared as problematic. This vulnerability affects unknown code of the component Handler. Executing a manipulation can lead to improper privilege management. Th
CVE-2026-51851 | agent0ai Agent-Zero 1.7/1.8/1.9/1.10 FileBrowser file_browser.py save_text_file path traversal (EUVD-2026-113288)
A vulnerability described as critical has been identified in agent0ai Agent-Zero 1.7/1.8/1.9/1.10. This vulnerability affects the function save_text_file of the file python/helpers/file_browser.py of the component FileBrowser. The manipulat
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift.
GitHub Release: nodejs/node v27.0.0-alpha.0.0.0 (29.10.2026)
🛡️ Security Fix nodejs/nodev27.0.0-alpha.0.0.029.10.2026@RafaelGSSNotable Changes V8 15.6 The V8 engine is updated to version 15.6.75.13, up from 14.6 in Node.js 26. Highlights: New language features enabled by default: Math.sumPrecise(),
GHSA-VPP8-G58W-M8MP: GHSA-vpp8-g58w-m8mp: HTTP/2 Rapid Reset Denial of Service in Twisted Web
GHSA-vpp8-g58w-m8mp: HTTP/2 Rapid Reset Denial of Service in Twisted Web Vulnerability ID: GHSA-VPP8-G58W-M8MP CVSS Score: 7.5 Published: 2026-10-29 Twisted versions up to and including 26.4.0 are vulnerable to an unauthenticated remote den
CVE-2022-48123 | TOTOLINK A7100RU 7.4cu.2313_B20191024 Setting delStaticDhcpRules servername command injection (EUVD-2022-50835)
A vulnerability described as critical has been identified in TOTOLINK A7100RU 7.4cu.2313_B20191024. Affected is the function delStaticDhcpRules of the component Setting Handler. The manipulation of the argument servername results in command
CVE-2022-48122 | TOTOlink A7100RU 7.4cu.2313_B20191024 Setting delStaticDhcpRules dayvalid command injection (EUVD-2022-50834)
A vulnerability marked as critical has been reported in TOTOlink A7100RU 7.4cu.2313_B20191024. This impacts the function delStaticDhcpRules of the component Setting Handler. The manipulation of the argument dayvalid leads to command injecti
CVE-2022-48121 | TOTOlink A7100RU 7.4cu.2313_B20191024 delStaticDhcpRules rsabits command injection (EUVD-2022-50833)
A vulnerability labeled as critical has been found in TOTOlink A7100RU 7.4cu.2313_B20191024. This affects an unknown function of the file setting/delStaticDhcpRules. Executing a manipulation of the argument rsabits can lead to command injec
CVE-2022-48120 | Hospital Management System /search.php contact/doctor sql injection (Issue 32 / EUVD-2022-50832)
A vulnerability has been found in Hospital Management System and classified as critical. This issue affects some unknown processing of the file /search.php. The manipulation of the argument contact/doctor leads to sql injection. This vulner
CVE-2026-111497: Node2Shell / HTTP2Shell Vulnerability May Allow RCE
IntroductionOn October 21, 2026, the Node.js project disclosed CVE-2026-111497, an out-of-bounds write vulnerability in Google’s Brotli decoder used by Node.js and other software. The vulnerability is also known as Node2Shell and more recen
CVE-2026-34950 | nearform fast-jwt up to 6.1.0 JSON Web Token fast-jwt/src/crypto.js risky encryption (GHSA-mvf2-f6gm-w987)
A vulnerability was found in nearform fast-jwt up to 6.1.0 and classified as problematic. The affected element is an unknown function of the file fast-jwt/src/crypto.js of the component JSON Web Token Handler. The manipulation results in ri
CVE-2026-34899 | Eniture LTL Freight Quotes Plugin up to 5.2.1 on WordPress authorization
A vulnerability labeled as critical has been found in Eniture LTL Freight Quotes Plugin up to 5.2.1 on WordPress. This issue affects some unknown processing. The manipulation results in missing authorization. This vulnerability is reported
CVE-2026-34896 | Analytify Under Construction, Coming Soon & Maintenance Mode Plugin cross-site request forgery
A vulnerability marked as problematic has been reported in Analytify Under Construction, Coming Soon &amp; Maintenance Mode Plugin up to 2.1.1 on WordPress. Impacted is an unknown function. This manipulation causes cross-site request fo
CVE-2026-1839 | huggingface transformers up to 5.0.0rc2 trainer.py _load_rng_state deserialization
A vulnerability has been found in huggingface transformers up to 5.0.0rc2 and classified as problematic. This affects the function _load_rng_state of the file src/transformers/trainer.py. The manipulation leads to deserialization. This vuln
CVE-2026-1114 | parisneo lollms up to 2.1.x JSON Web Token access control
A vulnerability was found in parisneo lollms up to 2.1.x. It has been classified as critical. Affected is an unknown function of the component JSON Web Token Handler. This manipulation causes improper access controls. This vulnerability is
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions
A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel's own CVE team rates it 9.8 out of 10 on the CVSS scale. Anthropic said o
Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls
China-nexus threat actors have exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the “Fragnesia” Linux kernel bug to root servers and firewalls, cybersecurity researchers claim. Cisco has also confirmed t
CVE-2026-34217 | nyariv SandboxJS up to 0.8.35 exposure of resource (GHSA-hg73-4w7g-q96w)
A vulnerability has been found in nyariv SandboxJS up to 0.8.35 and classified as critical. This affects an unknown part. Performing a manipulation results in exposure of resource. This vulnerability was named CVE-2026-34217. The attack may
CVE-2026-34211 | nyariv SandboxJS up to 0.8.35 restOfExp recursion (GHSA-8pfc-jjgw-6g26)
A vulnerability marked as problematic has been reported in nyariv SandboxJS up to 0.8.35. Affected is the function restOfExp. The manipulation leads to uncontrolled recursion. This vulnerability is documented as CVE-2026-34211. The attack c
CVE-2026-34208 | nyariv SandboxJS up to 0.8.35 protection mechanism (GHSA-2gg9-6p7w-6cpj)
A vulnerability identified as critical has been detected in nyariv SandboxJS up to 0.8.35. This affects an unknown function. Performing a manipulation results in protection mechanism failure. This vulnerability is cataloged as CVE-2026-3420
CVE-2026-34148 | fedify vocab-runtime up to 1.9.5/1.10.4/2.0.7/2.1.0 Outbound Request resource consumption (GHSA-gm9m-gwc4-hwgp)
A vulnerability was found in fedify vocab-runtime up to 1.9.5/1.10.4/2.0.7/2.1.0. It has been rated as problematic. This vulnerability affects unknown code of the component Outbound Request Handler. The manipulation leads to resource consum
CVE-2026-33752 | curl_cffi prior 0.15.0 redirect
A vulnerability classified as problematic has been found in curl_cffi. Affected is an unknown function. The manipulation leads to open redirect. This vulnerability is uniquely identified as CVE-2026-33752. The attack is possible to be carri
CVE-2026-33405 | pi-hole web up to 6.4 queries.js formatInfo cross site scripting (GHSA-jx8x-mj2r-62vq)
A vulnerability categorized as problematic has been discovered in pi-hole web up to 6.4. The impacted element is the function formatInfo of the file queries.js. Such manipulation leads to cross site scripting. This vulnerability is listed a
CVE-2026-21381 | Qualcomm Snapdragon Auto up to XRV9209 Connection buffer over-read
A vulnerability categorized as critical has been discovered in Qualcomm Snapdragon Auto, Snapdragon CCW, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon MC, Sn
Sicherheitslücke in TightVNC Viewer 2.8.88, RCE ohne CVE geschlossen
... Windows veröffentlicht: Ein bösartiger VNC-Server kann Code auf dem Rechner desjenigen ausführen, der sich verbindet, noch bevor die ... Weiterlesen
CVE-2026-34897 | David Lingren Media LIbrary Assistant Plugin up to 3.34 on WordPress cross site scripting
A vulnerability labeled as problematic has been found in David Lingren Media LIbrary Assistant Plugin up to 3.34 on WordPress. Affected is an unknown function. The manipulation results in cross site scripting. This vulnerability is identifi
CVE-2026-33406 | pi-hole web up to 6.4 Admin Interface /api/config cross site scripting (GHSA-9rfm-c5g6-538p)
A vulnerability identified as problematic has been detected in pi-hole web up to 6.4. This vulnerability affects unknown code of the file /api/config of the component Admin Interface. This manipulation causes cross site scripting. This vuln
CVE-2026-33404 | pi-hole web up to 6.4 Admin Interface network.js cross site scripting (GHSA-px6w-85wp-ww9v)
A vulnerability categorized as problematic has been discovered in pi-hole web up to 6.4. This affects an unknown part of the file network.js of the component Admin Interface. The manipulation results in cross site scripting. This vulnerabil
CVE-2026-33403 | pi-hole web up to 6.4 Admin Interface taillog.js file cross site scripting (GHSA-7xqw-r9pr-qv59)
A vulnerability, which was classified as problematic, was found in pi-hole web up to 6.4. Affected is an unknown function of the file taillog.js of the component Admin Interface. Such manipulation of the argument File leads to cross site sc
CVE-2026-21378 | Qualcomm Snapdragon Compute up to XG101039 IOCTL buffer over-read
A vulnerability was found in Qualcomm Snapdragon Compute, Snapdragon Industrial IOT and Snapdragon Mobile. It has been declared as critical. The affected element is an unknown function of the component IOCTL Handler. Such manipulation leads
CVE-2026-21376 | Qualcomm Snapdragon Compute up to XG101039 IOCTL buffer over-read
A vulnerability was found in Qualcomm Snapdragon Compute, Snapdragon Industrial IOT and Snapdragon Mobile. It has been classified as critical. Impacted is an unknown function of the component IOCTL Handler. This manipulation causes buffer o
CVE-2026-21375 | Qualcomm Snapdragon Compute up to XG101039 IOCTL buffer over-read
A vulnerability was found in Qualcomm Snapdragon Compute, Snapdragon Industrial IOT and Snapdragon Mobile and classified as critical. This issue affects some unknown processing of the component IOCTL Handler. The manipulation results in buf
CVE-2026-21374 | Qualcomm Snapdragon Compute up to XG101039 buffer over-read
A vulnerability classified as critical was found in Qualcomm Snapdragon Compute, Snapdragon Industrial IOT and Snapdragon Mobile. Affected by this vulnerability is an unknown functionality. Such manipulation leads to buffer over-read. This
CVE-2026-21373 | Qualcomm Snapdragon Compute up to XG101039 IOCTL buffer over-read
A vulnerability, which was classified as critical, was found in Qualcomm Snapdragon Compute, Snapdragon Industrial IOT and Snapdragon Mobile. This affects an unknown part of the component IOCTL Handler. Executing a manipulation can lead to
CVE-2026-21371 | Qualcomm Snapdragon Compute up to XG101039 buffer over-read
A vulnerability marked as critical has been reported in Qualcomm Snapdragon Compute, Snapdragon Industrial IOT and Snapdragon Mobile. This affects an unknown function. The manipulation leads to buffer over-read. This vulnerability is listed
CVE-2026-21367 | Qualcomm Snapdragon Auto up to XRV9209 FILS Discovery Frame buffer over-read
A vulnerability was found in Qualcomm Snapdragon Auto, Snapdragon CCW, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon MC, Snapdragon Mobile, Snapdragon WBC an
CVE-2023-26142 | CrowCpp Crow response splitting
A vulnerability described as critical has been identified in CrowCpp Crow. This issue affects some unknown processing. The manipulation results in http response splitting. This vulnerability is identified as CVE-2023-26142. The attack can b
Die nächste Schwachstelle kommt bestimmt: Fünf Lehren für wirksame Cyberresilienz
Schwachstellen in der IT- und Unternehmenssicherheit ... Marko Vogel. Partner, Consulting – Cyber Security &amp; Resilience, Head of Cyber Security &amp; ... Weiterlesen
CVE-2026-5660 | itsourcecode Construction Management System 1.0 Parameter /borrowed_equip.php emp sql injection
A vulnerability identified as critical has been detected in itsourcecode Construction Management System 1.0. The impacted element is an unknown function of the file /borrowed_equip.php of the component Parameter Handler. This manipulation o
CVE-2026-5659 | pytries datrie up to 0.8.3 trie File src/datrie.pyx Trie.load/Trie.read/Trie.__setstate__ deserialization (Issue 109)
A vulnerability categorized as critical has been discovered in pytries datrie up to 0.8.3. The affected element is the function Trie.load/Trie.read/Trie.__setstate__ of the file src/datrie.pyx of the component trie File Handler. The manipul
CVE-2026-5642 | Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f HTTP POST Request /viva/update.php name improper authorization (Issue 236)
A vulnerability marked as critical has been reported in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This affects an unknown function of the file /viva/update.php of the component HTTP POST Request Han
CVE-2026-5641 | PHPGurukul Online Shopping Portal Project 2.1 Parameter /admin/update-image1.php filename sql injection
A vulnerability labeled as critical has been found in PHPGurukul Online Shopping Portal Project 2.1. The impacted element is an unknown function of the file /admin/update-image1.php of the component Parameter Handler. The manipulation of th
ZDI-26-837: Linux Kernel XFRM Subsystem Use-After-Free Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability