Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

666 articles

VULNhighCVE-2026-0001Full Disclosure10 days ago

[NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding — CVE-2026-14440 assigned 163 days after public no-CVE disclosure

Posted by NotCVE Advisories on Jul 15 ---------------------------------------------------------------------------- NotCVE Disclosu…

VULNFull Disclosure10 days ago

Subject: Advisory Submission: EZ Game Booster - Cleartext Storage of Sensitive Credentials (CWE-312)

Posted by AliReza on Jul 15 # Exploit Title: EZ Game Booster v1.0.0 - Cleartext Credentials in user.config https://ezsystemrepairs…

VULNhighCVE-2026-568776.3 MEDIUMFull Disclosure10 days ago

CVE-2026-56877 - Skillable SCORM userId authorisation bypass

Posted by Greg via Fulldisclosure on Jul 15 Skillable's SCORM lab launch endpoint validates a launch token but enforces per-user a…

VULNMicrosoft Security10 days ago

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This analysi…

VULNRecorded Future10 days ago

AI Has Enhanced Iran’s Asymmetric Playbook During the 2026 Conflict

Explore how Iran has utilized AI to enhance its asymmetric playbook during the 2026 conflict. Learn how AI acts as a force multipl…

VULNMicrosoft Security10 days ago

Turning threat intelligence into decisive action with Defender Experts

Security teams have never had more visibility, yet rarely have they felt more uncertain. Signal pours in from endpoints, identitie…

VULNPalo Alto Unit 4210 days ago

TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development

TuxBot v3 Evolution, an IoT botnet framework built with LLMs. Read our analysis of its cross-compiled binaries, C2 architecture an…

VULNhighCVE-2026-14266Zero Day Initiative11 days ago

ZDI-26-444: 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is requi…

VULNhighZero Day Initiative11 days ago

ZDI-26-443: Linux Kernel vmwgfx Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first…

VULNhighZero Day Initiative11 days ago

ZDI-26-442: Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first…

VULNhighCVE-2026-22917.3 HIGHZero Day Initiative11 days ago

ZDI-26-441: dnsmasq DNS Response Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of dnsmasq. Authentication is not r…

VULNhighCVE-2026-81087.8 HIGHZero Day Initiative11 days ago

ZDI-26-440: Fuji Electric Tellus pcid64 Driver Untrusted Pointer Dereference Denial of Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Fuji Electric Tellu…

VULNhighCVE-2026-81087.8 HIGHZero Day Initiative11 days ago

ZDI-26-439: Fuji Electric Tellus pcid64 Driver Exposed Dangerous Method Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Fuji Electric Tellus. An attacker mu…

VULNhighCVE-2026-6071Zero Day Initiative11 days ago

ZDI-26-438: Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simula…

VULNhighCVE-2026-13308Zero Day Initiative11 days ago

ZDI-26-437: (Pwn2Own) Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home…

VULNhighCVE-2026-13307Zero Day Initiative11 days ago

ZDI-26-436: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC…

VULNhighCVE-2026-13309Zero Day Initiative11 days ago

ZDI-26-435: (Pwn2Own) Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC…

VULNhighCVE-2026-13306Zero Day Initiative11 days ago

ZDI-26-434: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability

This vulnerability allows physically present attackers to bypass authentication on affected installations of Autel MaxiCharger AC…

VULNhighCVE-2026-13305Zero Day Initiative11 days ago

ZDI-26-433: (Pwn2Own) Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability

This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC…

VULNhighCVE-2026-13268Zero Day Initiative11 days ago

ZDI-26-432: G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker m…

VULNhighCVE-2026-6102Zero Day Initiative11 days ago

ZDI-26-430: MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MSI Center. An attacker must first o…

VULNhighCVE-2026-8247Zero Day Initiative11 days ago

ZDI-26-428: WatchGuard FireWare OS admd Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS…

VULNhighCVE-2026-13084Zero Day Initiative11 days ago

ZDI-26-427: WatchGuard FireWare OS iked ike2_hmac Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of WatchGuard FireWar…

VULNhighCVE-2026-13135Zero Day Initiative11 days ago

ZDI-26-424: Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability

This vulnerability allows network-adjacent attackers to access the Redis instance on affected installations of Synology DiskStatio…

VULNhighCVE-2025-15660Zero Day Initiative11 days ago

ZDI-26-423: Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation D…

VULNhighCVE-2026-541297.0 HIGHZero Day Initiative11 days ago

ZDI-26-416: Microsoft Hyper-V netvsc Out-Of-Bounds Read Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Hyper-V. An attacker must…

VULNhighCVE-2026-559998.5 HIGHZero Day Initiative11 days ago

ZDI-26-409: X.Org Server Glamor Font Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-560038.5 HIGHZero Day Initiative11 days ago

ZDI-26-408: X.Org Server ComputeScaledProperties Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-12578Zero Day Initiative11 days ago

ZDI-26-404: Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DTM Soft. User…

VULNhighCVE-2026-241577.8 HIGHZero Day Initiative11 days ago

ZDI-26-429: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA NeMo Framework. User inte…