Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,024 articles

VULNhighCVE-2026-629118.0 HIGHZero Day Initiative29 days ago

ZDI-26-534: (Pwn2Own) Microsoft Exchange Capture-Replay Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Microsoft Exchange. Authenticatio…

VULNhighCVE-2026-661497.8 HIGHZero Day Initiative29 days ago

ZDI-26-532: SonicWall Email Security updateNetIf Command Injection Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of SonicWall Email Security. An attacke…

VULNhighCVE-2026-661486.3 MEDIUMZero Day Initiative29 days ago

ZDI-26-531: SonicWall GMS Virtual Appliance interface Command Injection Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of SonicWall GMS Virtual Appliance. An…

VULNhighCVE-2026-661507.8 HIGHZero Day Initiative29 days ago

ZDI-26-530: SonicWall Email Security snmp Command Injection Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of SonicWall Email Security. An attacke…

VULNhighCVE-2026-182887.8 HIGHZero Day Initiative29 days ago

ZDI-26-547: OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User intera…

VULNhighCVE-2026-182637.8 HIGHZero Day Initiative29 days ago

ZDI-26-556: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker mu…

VULNhighCVE-2026-182627.8 HIGHZero Day Initiative29 days ago

ZDI-26-555: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker mu…

VULNhighCVE-2026-131217.8 HIGHZero Day Initiative29 days ago

ZDI-26-554: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker mu…

VULNhighCVE-2026-182947.8 HIGHZero Day Initiative29 days ago

ZDI-26-553: OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User in…

VULNhighCVE-2026-182937.8 HIGHZero Day Initiative29 days ago

ZDI-26-552: OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User in…

VULNhighCVE-2026-182927.8 HIGHZero Day Initiative29 days ago

ZDI-26-551: OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro . User inter…

VULNExploit-DB29 days ago

[webapps] Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF

Planyo_Online_Reservation_System 3.0 - Arbitrary File Read via SSRF

VULNExploit-DB29 days ago

[webapps] Ray 2.56.0 - Directory Traversal & Local File Inclusion

Ray 2.56.0 - Directory Traversal & Local File Inclusion

VULNExploit-DB29 days ago

[webapps] Apache Gravitino 1.2.1 - SSRF

Apache Gravitino 1.2.1 - SSRF

VULNExploit-DB29 days ago

[webapps] Blocksy Companion 2.1.46 - RCE

Blocksy Companion 2.1.46 - RCE

VULNExploit-DB29 days ago

[remote] PraisonAI praisonaiagents 1.6.77 - Remote Code Execution

PraisonAI praisonaiagents 1.6.77 - Remote Code Execution

VULNExploit-DB29 days ago

[remote] mcp-server-kubernetes 3.8.x - Argument Injection

mcp-server-kubernetes 3.8.x - Argument Injection

VULNExploit-DB29 days ago

[dos] LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting

LuCI DHCPv6 - Lease Hostname Stored Cross-Site Scripting

VULNRecorded Future29 days ago

Mines, Minds, and Machines: The Journey of AI

Minerals become chips. Chips become data centers. Data centers become models, and models are acquiring arms and legs. From Earth t…

VULNPalo Alto Unit 4230 days ago

The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications

Analysis of the Aeternum botnet loader, a threat leveraging Polygon blockchain smart contracts for decentralized C2 infrastructure…

VULNMicrosoft Security30 days ago

Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise

Microsoft is named a Leader in the 2026 IDC MarketScape for MDR services. Discover how Microsoft Defender Experts MDR combines AI,…

VULNMicrosoft Security30 days ago

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its use o…

VULNCheck Point Research30 days ago

10th August – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 10th August, please download our Threat Intelligence Bulletin. TOP AT…

VULNExploit-DBabout 1 month ago

[webapps] OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution

OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution

VULNExploit-DBabout 1 month ago

[local] Microsoft Edge 150.0.4078.48 - RCE

Microsoft Edge 150.0.4078.48 - RCE

VULNExploit-DBabout 1 month ago

[webapps] CorgetGpsDget 2_3.2 - OS Command Injection

CorgetGpsDget 2_3.2 - OS Command Injection

VULNExploit-DBabout 1 month ago

[webapps] Joomla 2.9.99.4 - Unauthenticated Remote Code Execution

Joomla 2.9.99.4 - Unauthenticated Remote Code Execution

VULNhighRecorded Futureabout 1 month ago

The Hugging Face Hack Was Cheap Persistence at Work

The Hugging Face incident shows AI won't make attackers brilliant. It makes persistence cheap. Defense has to close the gap from w…

VULNPalo Alto Unit 42about 1 month ago

Inside the Modern SOC: The Identity Front Door

Identity-based attacks drive 90% of incidents. Learn how modern attackers exploit identities and what SOC leaders can do to respon…

VULNRecorded Futureabout 1 month ago

July 2026 CVE Landscape

In July 2026, Insikt Group® identified 85 high-impact vulnerabilities that should be prioritized for remediation, 36 of which had…