Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

832 articles

VULNhighZero Day Initiativeabout 17 hours ago

ZDI-26-563: (Pwn2Own) Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery Vulnerability

This vulnerability allows network-adjacent attackers to initiate arbitrary server-side requests on affected installations of Home…

VULNhighZero Day Initiativeabout 17 hours ago

ZDI-26-562: (Pwn2Own) Home Assistant Green mDNS Server-Side Request Forgery Vulnerability

This vulnerability allows network-adjacent attackers to initiate arbitrary server-side requests on affected installations of Home…

VULNhighZero Day Initiativeabout 17 hours ago

ZDI-26-561: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Home Assistant Green.…

VULNhighZero Day Initiativeabout 17 hours ago

ZDI-26-560: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Home Assistant Green.…

VULNhighZero Day Initiativeabout 17 hours ago

ZDI-26-559: (Pwn2Own) Amazon Smart Plug OTA Update Process Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Amazon Smart Plug. Aut…

VULNhighZero Day Initiativeabout 17 hours ago

ZDI-26-558: (Pwn2Own) Amazon Smart Plug OTA Update Process Improper Certificate Validation Vulnerability

This vulnerability allows network-adjacent attackers to bypass certificate validation for OTA updates on affected installations of…

VULNhighZero Day Initiativeabout 17 hours ago

ZDI-26-557: (Pwn2Own) Amazon Smart Plug Insecure Fallback Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Amazon Smart P…

VULNcriticalCheck Point Research1 day ago

Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack

Key Points Introduction Since early 2026, Check Point Research has tracked a wave of the Operation Dream Job campaign. This wave p…

VULNPalo Alto Unit 421 day ago

Kimwolf v7: An Evolution of the Kimwolf Botnet

Discover how Kimwolf v7 targets Android IoT devices with HTTP/2 DDoS fingerprinting, Ethereum ENS C2 resolution and Tor backup rou…

VULNhighCVE-2026-18263Zero Day Initiative1 day ago

ZDI-26-556: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker mu…

VULNhighCVE-2026-18262Zero Day Initiative1 day ago

ZDI-26-555: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker mu…

VULNhighCVE-2026-13121Zero Day Initiative1 day ago

ZDI-26-554: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker mu…

VULNhighCVE-2026-18294Zero Day Initiative1 day ago

ZDI-26-553: OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User in…

VULNhighCVE-2026-18293Zero Day Initiative1 day ago

ZDI-26-552: OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User in…

VULNhighCVE-2026-18292Zero Day Initiative1 day ago

ZDI-26-551: OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro . User inter…

VULNhighCVE-2026-18291Zero Day Initiative1 day ago

ZDI-26-550: OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User intera…

VULNhighCVE-2026-18290Zero Day Initiative1 day ago

ZDI-26-549: OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User intera…

VULNhighCVE-2026-18289Zero Day Initiative1 day ago

ZDI-26-548: OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User intera…

VULNhighCVE-2026-18288Zero Day Initiative1 day ago

ZDI-26-547: OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User intera…

VULNhighCVE-2026-69264Zero Day Initiative1 day ago

ZDI-26-546: Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not r…

VULNhighCVE-2026-69256Zero Day Initiative1 day ago

ZDI-26-545: Flowise CSV_Agent customReadCSV Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is requi…

VULNhighCVE-2026-629118.0 HIGHZero Day Initiative1 day ago

ZDI-26-538: (Pwn2Own) Microsoft Exchange Improper Authorization Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Microsoft Exchange. Although authen…

VULNhighCVE-2026-203165.3 MEDIUMZero Day Initiative1 day ago

ZDI-26-533: Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Cisco Secure Firewall Management…

VULNhighCVE-2026-21045Zero Day Initiative1 day ago

ZDI-26-529: Samsung Galaxy S25 TIFF File Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S25 devices. User…

VULNhighCVE-2026-282208.4 HIGHZero Day Initiative1 day ago

ZDI-26-528: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wazuh. An attacker mus…

VULNhighCVE-2026-44901Zero Day Initiative1 day ago

ZDI-26-527: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wazuh. An attacker mus…

VULNhighCVE-2026-628939.8 CRITICALZero Day Initiative1 day ago

ZDI-26-544: Microsoft Windows Deployment Services Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Microsoft Windows Serv…

VULNhighCVE-2026-549847.8 HIGHZero Day Initiative1 day ago

ZDI-26-543: Microsoft Windows ICC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. Interaction w…

VULNhighCVE-2026-627127.8 HIGHZero Day Initiative1 day ago

ZDI-26-542: Microsoft Windows UMPDDrvBitBlt Improper Object Management Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…

VULNhighCVE-2026-657757.8 HIGHZero Day Initiative1 day ago

ZDI-26-541: (Pwn2Own) Microsoft Windows win32kfull Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…