Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 785 | 0,2 % |
| ≥50 % | 3.559 | 0,9 % |
| ≥10 % | 13.139 | 3,2 % |
| <10 % | 396.072 | 95,8 % |
CVE-2026-16682 | IBM OPENBMC/Hardware Management Console up to OP940.00-OP940.A2 uninitialized resource (EUVD-2026-119742)
A vulnerability categorized as critical has been discovered in IBM OPENBMC and Hardware Management Console. The impacted element is an unknown function. Executing a manipulation can lead to uninitialized resource. This vulnerability is regi
CVE-2026-101493 | Oracle REST Data Services up to 26.2.1 Core improper authorization (EUVD-2026-105909)
A vulnerability was found in Oracle REST Data Services up to 26.2.1. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component Core. Performing a manipulation results in improper authori
CVE-2026-101485 | Oracle Autonomous Health Framework up to 26.8 Trace File Analyzer improper authorization (EUVD-2026-105901)
A vulnerability was found in Oracle Autonomous Health Framework up to 26.8. It has been classified as problematic. This affects an unknown function of the component Trace File Analyzer. This manipulation causes improper authorization. This
CVE-2026-17426 | IBM Power Systems Firmware up to FW1060.81 denial of service (EUVD-2026-119744)
A vulnerability labeled as critical has been found in IBM Power Systems Firmware up to FW1060.81. This impacts an unknown function. The manipulation results in denial of service. This vulnerability is reported as CVE-2026-17426. The attack
CVE-2026-16697 | IBM OPENBMC/Power Hardware Management Console Firmware allocation of resources (EUVD-2026-119743)
A vulnerability marked as critical has been reported in IBM OPENBMC and Power Hardware Management Console FW1060.00-FW1060.81/OP940.00-OP940.A2/OP910.00-OP910.95/OP940.00-OP940.82. Affected is an unknown function of the component Firmware.
CVE-2026-101494 | Oracle REST Data Services up to 26.2.2 Core privileges management (EUVD-2026-105910)
A vulnerability was found in Oracle REST Data Services up to 26.2.2 and classified as problematic. Affected is an unknown function of the component Core. Such manipulation leads to improper privilege management. This vulnerability is traded
CVE-2026-17427 | IBM OPENBMC/Power Hardware Management Console up to FW1060.81/OP940.A2/OP910.95/OP940.82 denial of service (EUVD-2026-119745)
A vulnerability identified as critical has been detected in IBM OPENBMC and Power Hardware Management Console up to FW1060.81/OP940.A2/OP910.95/OP940.82. This affects an unknown function. The manipulation leads to denial of service. This vu
CVE-2026-101504 | Oracle Trusted Answer Search 26.1 Application expert UI improper authorization (EUVD-2026-105919)
A vulnerability was found in Oracle Trusted Answer Search 26.1. It has been declared as problematic. This issue affects some unknown processing of the component Application expert UI. The manipulation results in improper authorization. This
CVE-2026-101498 | Oracle Trusted Answer Search 26.1 PLSQL package privileges management (EUVD-2026-105913)
A vulnerability was found in Oracle Trusted Answer Search 26.1. It has been rated as very critical. This affects an unknown part of the component PLSQL package. The manipulation leads to improper privilege management. This vulnerability is
CVE-2026-101505 | Oracle Trusted Answer Search 26.1 Application expert UI improper authorization (EUVD-2026-105920)
A vulnerability was found in Oracle Trusted Answer Search 26.1. It has been rated as problematic. Impacted is an unknown function of the component Application expert UI. This manipulation causes improper authorization. This vulnerability is
CVE-2026-101506 | Oracle Trusted Answer Search 26.1 Application expert UI privileges management (EUVD-2026-105921)
A vulnerability has been found in Oracle Trusted Answer Search 26.1 and classified as problematic. Affected by this issue is some unknown functionality of the component Application expert UI. Performing a manipulation results in improper pr
CVE-2026-101522 | Oracle TimesTen In-Memory Database up to 22.1.1.43.0 TimesTen IMDB improper authorization (EUVD-2026-105935)
A vulnerability was found in Oracle TimesTen In-Memory Database up to 22.1.1.43.0. It has been classified as problematic. The affected element is an unknown function of the component TimesTen IMDB. This manipulation causes improper authoriz
CVE-2026-101507 | Oracle Trusted Answer Search 26.1 PLSQL package improper authorization (EUVD-2026-105922)
A vulnerability was found in Oracle Trusted Answer Search 26.1 and classified as problematic. This affects an unknown part of the component PLSQL package. Executing a manipulation can lead to improper authorization. This vulnerability appea
CVE-2026-101577 | Oracle Helidon up to 4.5.5 helidon-cors improper authorization (EUVD-2026-105985)
A vulnerability identified as problematic has been detected in Oracle Helidon up to 4.5.5. This affects an unknown function of the component helidon-cors. The manipulation leads to improper authorization. This vulnerability is traded as CVE
CVE-2026-101573 | Oracle Helidon up to 3.2.21/4.5.5/27.0.0 helidon-security-providers-http-auth improper authorization (EUVD-2026-105981)
A vulnerability identified as problematic has been detected in Oracle Helidon up to 3.2.21/4.5.5/27.0.0. Impacted is an unknown function of the component helidon-security-providers-http-auth. Performing a manipulation results in improper au
CVE-2026-6064 | Gen Digital AVG Internet Security up to 26.4 Data Shredder privileges management (EUVD-2026-111873)
A vulnerability identified as critical has been detected in Gen Digital AVG Internet Security, Avast Antivirus and Norton Antivirus up to 26.4. Affected by this issue is some unknown functionality of the component Data Shredder. The manipul
CVE-2026-103407 | Juniper Networks Session Smart Router/Session Smart Conductor up to 7.0.4/7.1.6/7.2.2 ConfigDirector path traversal (EUVD-2026-112214)
A vulnerability described as very critical has been identified in Juniper Networks Session Smart Router and Session Smart Conductor up to 7.0.4/7.1.6/7.2.2. This affects an unknown part of the component ConfigDirector. The manipulation resu
CVE-2026-96146 | IBM SevOne Network Performance Management up to 8.2.2 resource consumption (EUVD-2026-119747)
A vulnerability described as critical has been identified in IBM SevOne Network Performance Management up to 8.2.2. Affected by this vulnerability is an unknown functionality. Such manipulation leads to resource consumption. This vulnerabil
CVE-2026-95867 | IBM SevOne Network Performance Management up to 8.2.2 buffer overflow (EUVD-2026-119746)
A vulnerability classified as problematic has been found in IBM SevOne Network Performance Management up to 8.2.2. Affected by this issue is some unknown functionality. Performing a manipulation results in buffer overflow. This vulnerabilit
CVE-2026-118904 | IBM webMethods Integration Server 12.1 improper authentication (EUVD-2026-119748)
A vulnerability classified as critical was found in IBM webMethods Integration Server 12.1. This affects an unknown part. Executing a manipulation can lead to improper authentication. This vulnerability is handled as CVE-2026-118904. The at
CVE-2026-18893 | IBM CockroachDB PostgreSQL for VPC up to 25.2.20/25.4.12/26.2.3 privileges management (EUVD-2026-119705)
A vulnerability identified as problematic has been detected in IBM CockroachDB PostgreSQL for VPC up to 25.2.20/25.4.12/26.2.3. This affects an unknown part. This manipulation causes improper privilege management. This vulnerability appears
CVE-2026-18546 | IBM CockroachDB PostgreSQL for VPC up to 26.2.3/25.4.12/25.2.20 server-side request forgery (EUVD-2026-119704)
A vulnerability was found in IBM CockroachDB PostgreSQL for VPC up to 26.2.3/25.4.12/25.2.20. It has been rated as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to server-side request forgery.
CVE-2026-2477 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data Backend Authorization access control (EUVD-2026-119708)
A vulnerability labeled as problematic has been found in IBM watsonx Orchestrate Cartridge for Cloud Pak for Data up to 4.8.5/5.4.2. This vulnerability affects unknown code of the component Backend Authorization. Such manipulation leads to
CVE-2026-19307 | IBM Sterling B2B Integrator/Sterling File Gateway up to 6.2.1.2_1/6.2.2.1_1 improper authorization (EUVD-2026-119707)
A vulnerability marked as problematic has been reported in IBM Sterling B2B Integrator and Sterling File Gateway up to 6.2.1.2_1/6.2.2.1_1. This issue affects some unknown processing. Performing a manipulation results in improper authorizat
CVE-2026-19133 | IBM Storage TS4500 Library up to 1.12.0.3 improper authorization (EUVD-2026-119706)
A vulnerability classified as very critical was found in IBM Storage TS4500 Library up to 1.12.0.3. The impacted element is an unknown function. The manipulation results in improper authorization. This vulnerability was named CVE-2026-19133
CVE-2026-2700 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data privileges management (EUVD-2026-119709)
A vulnerability classified as problematic has been found in IBM watsonx Orchestrate Cartridge for Cloud Pak for Data up to 4.8.5/5.4.2. The affected element is an unknown function. The manipulation leads to improper privilege management. Th
CVE-2025-0166 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data information disclosure (EUVD-2025-211277)
A vulnerability identified as problematic has been detected in IBM watsonx Orchestrate Cartridge for Cloud Pak for Data up to 4.8.5/5.4.2. This impacts an unknown function. Performing a manipulation results in information disclosure. This v
CVE-2024-41786 | IBM Engineering Requirements Management DOORS Next 7.1/7.2 information disclosure (EUVD-2024-55842)
A vulnerability was found in IBM Engineering Requirements Management DOORS Next 7.1/7.2. It has been rated as problematic. The impacted element is an unknown function. This manipulation causes information disclosure. This vulnerability is h
CVE-2025-36075 | IBM Safer Payments up to 6.8.0.00 information disclosure (EUVD-2025-211279)
A vulnerability was found in IBM Safer Payments up to 6.4.2.11/6.5.0.09/6.6.0.07/6.7.0.03/6.8.0.00. It has been declared as problematic. This impacts an unknown function. Such manipulation leads to information disclosure. This vulnerability
CVE-2025-1837 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data privileges management (EUVD-2025-211278)
A vulnerability described as critical has been identified in IBM watsonx Orchestrate Cartridge for Cloud Pak for Data up to 4.8.5/5.4.2. Affected by this issue is some unknown functionality. The manipulation results in improper privilege ma
CVE-2026-109899 | Melapress Role Editor Plugin up to 1.3.0 on WordPress authorization (EUVD-2026-119612)
A vulnerability categorized as critical has been discovered in Melapress Role Editor Plugin up to 1.3.0 on WordPress. This affects an unknown function. Such manipulation leads to missing authorization. This vulnerability is uniquely identif
CVE-2026-3684 | IBM Cloud Pak for Data System permission (EUVD-2026-119710)
A vulnerability described as problematic has been identified in IBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001 through 11.3.1.2 Interim Fix 002. Impacted is an unknown function. Executing a manipulation can lead to permission issues
CVE-2026-99273 | Linux Kernel up to 6.18.60/7.3.1 ksmbd get_file_stream_info buffer overflow (Nessus ID 377532)
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.60/7.3.1. Impacted is the function get_file_stream_info of the component ksmbd. The manipulation results in buffer overflow. This vulnerability is cataloged
CVE-2026-99282 | Linux Kernel up to 6.18.60/7.3.1 sch_teql net/sched/sch_teql.c teql_master_xmit use after free (Nessus ID 377533)
A vulnerability was found in Linux Kernel up to 6.18.60/7.3.1. It has been rated as very critical. This affects the function teql_master_xmit of the file net/sched/sch_teql.c of the component sch_teql. Performing a manipulation results in u
CVE-2026-99275 | Linux Kernel SMB Client smb2_check_message/decode_ntlmssp_challenge SecurityBufferOffset/SecurityBufferLength out-of-bounds (Nessus ID 377535)
A vulnerability, which was classified as problematic, was found in Linux Kernel. Affected by this vulnerability is the function smb2_check_message/decode_ntlmssp_challenge of the component SMB Client. The manipulation of the argument Securi
CVE-2026-99279 | Linux Kernel up to 7.3.1 ksmbd denial of service (Nessus ID 377536)
A vulnerability has been found in Linux Kernel up to 7.3.1 and classified as very critical. This impacts an unknown function of the component ksmbd. The manipulation leads to denial of service. This vulnerability is uniquely identified as C
CVE-2026-99281 | Linux Kernel up to 6.18.60/7.3.1 tun privileges management (Nessus ID 377537)
A vulnerability categorized as very critical has been discovered in Linux Kernel up to 6.18.60/7.3.1. This vulnerability affects unknown code of the component tun. Executing a manipulation can lead to improper privilege management. This vul
CVE-2026-99280 | Linux Kernel up to 7.3.1 ksmbd proc_remove race condition (Nessus ID 377540)
A vulnerability classified as very critical has been found in Linux Kernel up to 7.3.1. This affects the function proc_remove of the component ksmbd. Performing a manipulation results in race condition. This vulnerability is reported as CVE
CVE-2026-99274 | Linux Kernel up to 6.18.60/7.3.1 SMB Client smb3_fiemap out-of-bounds (Nessus ID 377539)
A vulnerability was found in Linux Kernel up to 6.18.60/7.3.1 and classified as problematic. Affected is the function smb3_fiemap of the component SMB Client. The manipulation results in out-of-bounds read. This vulnerability was named CVE-
CVE-2026-99272 | Linux Kernel up to 7.3.1 smb SMB2_read DataOffset/DataLength out-of-bounds (Nessus ID 377541)
A vulnerability identified as critical has been detected in Linux Kernel up to 7.3.1. This issue affects the function SMB2_read of the component smb. The manipulation of the argument DataOffset/DataLength leads to out-of-bounds read. This v
CVE-2026-124317 | Libexpat up to 2.10.0 xmltok.c unknown_toUtf8/unknown_toUtf16 out-of-bounds (Nessus ID 377546)
A vulnerability described as critical has been identified in Libexpat up to 2.10.0. Affected is the function unknown_toUtf8/unknown_toUtf16 of the file xmltok.c. Executing a manipulation can lead to out-of-bounds read. This vulnerability is
Linux MPTCP Inventory: Turning a 3.1 Million Product Match into a Review Queue
Linux MPTCP Inventory: Turning a 3.1 Million Product Match into a Review Queue A broad search result can create more work than clarity. ZoomEye returned 3,138,477 matches for product="Linux" while researching CVE-2026-98438, and t
CVE-2026-31765 | Linux Kernel up to 6.12.80/6.18.21/6.19.11 amdgpu null pointer dereference
A vulnerability described as critical has been identified in Linux Kernel up to 6.12.80/6.18.21/6.19.11. This affects an unknown function of the component amdgpu. Executing a manipulation can lead to null pointer dereference. This vulnerabi
CVE-2026-31661 | Linux Kernel up to 6.19.12 wifi dma_free_coherent allocation of resources
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.19.12. Affected is the function dma_free_coherent of the component wifi. This manipulation causes allocation of resources. The identification of this
CVE-2026-18836 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended destinations and return the response to the attacker.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. The affected component can be made to send requests to unintended des
CVE-2026-18689 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to obtain limited information about other organizations due to incorrect authorization. A token issued for a limited purpose is accepted where it should not be, which could reveal the names of other organizations.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated user to obtain limited information about other organizations due to incorrect authorization. A token issued for a limited purpose is accep
CVE-2026-17428 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. Values supplied in the request URL are used in authorization decisions without sufficient verification, which could allow access to information belonging to others.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. Values supplied in the request URL are used in authorization
CVE-2026-17411 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized before it is used in database queries.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized befo
CVE-2026-17410 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters.
CVE-2026-17409 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access controls are not applied consistently to all variations of a request, which could allow restricted operations to be reached.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized administrative operations and obtain sensitive information due to improper handling of case sensitivity. Access c
CVE-2026-17408 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command.
CVE-2026-17407 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before
CVE-2026-17406 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the server to reach destinations that should be blocked.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Address checks can be bypassed, which could allow the s
CVE-2026-17405 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm that the requesting user is permitted to read them, which could expose keystore information.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. Access checks on keystore objects do not confirm
CVE-2026-17404 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery.
CVE-2026-17403 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full administrative control due to the use of hard-coded credentials.
CVE-2026-17402 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is passed to the operating system, which could allow commands to run on the underlying host.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection. User-supplied input is not properly neutralized before it is pas
CVE-2026-17401 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-17400 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to SQL injection.
CVE-2026-17399 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not sufficiently checked before it is processed, which could allow code to run on the server.
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. Content uploaded to the product is not suffic