Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

VULNcriticalCVE-2024-544487.2 HIGHFull Disclosure2 months ago

[0day-rubbish] LogicalDOC Enterprise Edition 9.3 (the incomplete CVE-2024-54448 fix suggests earlier 9.x versions are likely affected) Authenticated RCE (automation sandbox bypass + default credentials) (8.8)

Posted by disclosure via Fulldisclosure on Aug 26 0day Rubbish Research Team is publicly disclosing a vulnerability in LogicalDOC…

VULNcriticalFull Disclosure2 months ago

[0day-rubbish] CFEngine Enterprise Nova Hub 3.27.1 (other versions with the same generateScriptFromTemplates quoting are likely affected) Authenticated RCE (command injection via VCS settings, root) (8.8)

Posted by disclosure via Fulldisclosure on Aug 26 0day Rubbish Research Team is publicly disclosing a vulnerability in CFEngine En…

VULNcriticalFull Disclosure2 months ago

[0day-rubbish] Brekeke PBX 3.19.1.8 (other versions with the same Bean dispatch model are likely affected) Pre-authentication RCE (fail-open auth gate + reflection to exec) (9.8)

Posted by disclosure via Fulldisclosure on Aug 26 0day Rubbish Research Team is publicly disclosing a vulnerability in Brekeke PBX…

VULNhighCVE-2026-2007910.0 CRITICALFull Disclosure2 months ago

CVE-2026-20079 - Cisco Secure Firewall Management Center Authentication Bypass to Root RCE

Posted by Banks Tools on Aug 26 CVE-2026-20079 - Cisco Secure Firewall Management Center Authentication https://github.com/CyberAu…

VULNhighCVE-2026-78331Full Disclosure2 months ago

CVE-2026-78331 / CVE-2026-78332: Multiple Vulnerabilities in NethServer

Posted by Intilangelo, Andrea on Aug 26 Two stored XSS vulnerabilities have been disclosed in the NethServer WebTop module, affect…

VULNFull Disclosure2 months ago

NVIDIA Linux GPU driver: unprivileged Xid 31 MMU fault via undocumented peer-teardown ordering, no CVE (vendor: intended)

Posted by Abhinav Agarwal on Aug 26 NVIDIA Linux GPU driver - unprivileged Xid 31 copy-engine MMU fault during an NVLink peer tran…

VULNFull Disclosure2 months ago

NVIDIA Linux GPU driver: cross-UID GPU process telemetry via NVML, no CVE (vendor: expected behavior)

Posted by Abhinav Agarwal on Aug 26 NVIDIA Linux GPU driver - cross-UID GPU process telemetry disclosure via NVML ================…

VULNRecorded Future2 months ago

Recorded Future Launches AI Alert Filtering

AI Alert Filtering is now available. Powered by Recorded Future AI, it automates the first pass of filtering Alerts by relevance s…

VULNMicrosoft Security2 months ago

The patch window is collapsing: Why security needs a new control plane

Organizations need protection that operates in the gap between discovery and remediation. The post The patch window is collapsing:…

VULNhighPalo Alto Unit 422 months ago

The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution

Explore Unit 42 research on AI-enabled malware. Learn how existing behavioral detection and endpoint analytics stop AI-authored co…

VULNhighCVE-2026-421678.1 HIGHExploit-DB2 months ago

[remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE

CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE

VULNRecorded Future2 months ago

Mexico’s Cybersecurity Plan 2025-2030: Turning Ambition Into Defense

Explore Mexico’s 2025–2030 Cybersecurity Plan. Learn about key threats, including ransomware, and the roadmap for building durable…

VULNCheck Point Research2 months ago

24th August – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 24th August, please download our Threat Intelligence Bulletin. TOP AT…

VULNhighCVE-2026-572427.8 HIGHZero Day Initiative2 months ago

ZDI-26-598: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNhighCVE-2026-572527.8 HIGHZero Day Initiative2 months ago

ZDI-26-597: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNhighCVE-2026-572536.1 MEDIUMZero Day Initiative2 months ago

ZDI-26-596: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User i…

VULNhighCVE-2026-572547.8 HIGHZero Day Initiative2 months ago

ZDI-26-595: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNhighCVE-2026-647156.5 MEDIUMZero Day Initiative2 months ago

ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction i…

VULNhighZero Day Initiative2 months ago

ZDI-26-609: Linux Kernel Net Scheduler Packet Classifier Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first…

VULNhighZero Day Initiative2 months ago

ZDI-26-608: Linux Kernel KVM IOAPIC Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first…

VULNhighZero Day Initiative2 months ago

ZDI-26-607: Microsoft Office HTML Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office. User i…

VULNhighZero Day Initiative2 months ago

ZDI-26-606: Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…

VULNhighCVE-2026-505086.5 MEDIUMZero Day Initiative2 months ago

ZDI-26-605: Microsoft Windows Localized Filenames Improper Input Validation NTLM Response Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Microsoft Windows. User interac…

VULNhighCVE-2026-131267.8 HIGHZero Day Initiative2 months ago

ZDI-26-604: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNhighCVE-2026-131277.8 HIGHZero Day Initiative2 months ago

ZDI-26-603: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNhighCVE-2026-131287.8 HIGHZero Day Initiative2 months ago

ZDI-26-602: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interacti…

VULNhighCVE-2026-131297.8 HIGHZero Day Initiative2 months ago

ZDI-26-601: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User i…

VULNhighCVE-2026-572377.8 HIGHZero Day Initiative2 months ago

ZDI-26-600: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User i…

VULNhighCVE-2026-572387.8 HIGHZero Day Initiative2 months ago

ZDI-26-599: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User i…

VULNhighCVE-2026-242517.8 HIGHZero Day Initiative2 months ago

ZDI-26-594: NVIDIA Megatron Bridge load_model_config Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron Bridge. User int…