Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

Where Expertise Meets Algorithm: The Insikt Group® Intelligence Edge

Discover how Recorded Future’s Insikt Group combines human expertise with automated analysis to turn raw data into actionable, ind…

VULNMicrosoft Security4 months ago

CNAPP evolution: How Microsoft aligns with leading cloud risk management platforms

Learn how CNAPP platforms are helping organizations prioritize exploitable risks, reduce exposure, and operationalize security acr…

VULNMicrosoft Security4 months ago

StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that formed…

VULNhighCVE-2026-97858.8 HIGHZero Day Initiative4 months ago

ZDI-26-374: Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although…

VULNhighCVE-2026-97728.8 HIGHZero Day Initiative4 months ago

ZDI-26-385: Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is requir…

VULNhighCVE-2026-97738.8 HIGHZero Day Initiative4 months ago

ZDI-26-386: Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is requir…

VULNhighCVE-2026-502567.8 HIGHZero Day Initiative4 months ago

ZDI-26-390: X.Org Server Font Alias Stack-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-502577.8 HIGHZero Day Initiative4 months ago

ZDI-26-391: X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first…

VULNhighCVE-2026-272787.8 HIGHZero Day Initiative4 months ago

ZDI-26-361: Adobe Acrobat Reader DC Field signatureInfo Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User in…

VULNhighCVE-2026-468737.5 HIGHZero Day Initiative4 months ago

ZDI-26-362: Oracle VirtualBox VMSVGA Stack-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must…

VULNhighCVE-2026-55887Zero Day Initiative4 months ago

ZDI-26-363: Docker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Docker MCP Plugin. User interact…

VULNhighCVE-2026-412649.8 CRITICALZero Day Initiative4 months ago

ZDI-26-364: FlowiseAI Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not r…

VULNhighCVE-2026-97808.8 HIGHZero Day Initiative4 months ago

ZDI-26-369: Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User inter…

VULNhighCVE-2026-97818.8 HIGHZero Day Initiative4 months ago

ZDI-26-370: Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although…

VULNhighCVE-2026-97828.8 HIGHZero Day Initiative4 months ago

ZDI-26-371: Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although…

VULNhighCVE-2026-97868.8 HIGHZero Day Initiative4 months ago

ZDI-26-375: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although…

VULNhighCVE-2026-97878.8 HIGHZero Day Initiative4 months ago

ZDI-26-376: Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although…

VULNhighCVE-2026-75698.8 HIGHZero Day Initiative4 months ago

ZDI-26-377: Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User inter…

VULNhighCVE-2026-97797.2 HIGHZero Day Initiative4 months ago

ZDI-26-383: ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is r…

VULNhighCVE-2026-100437.8 HIGHZero Day Initiative4 months ago

ZDI-26-384: MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MosaicML Composer. User interact…

VULNhighCVE-2026-97838.8 HIGHZero Day Initiative4 months ago

ZDI-26-372: Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although…

VULNhighCVE-2026-97848.8 HIGHZero Day Initiative4 months ago

ZDI-26-373: Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although…

VULNhighCVE-2026-502625.5 MEDIUMZero Day Initiative4 months ago

ZDI-26-396: X.Org Server ChangeDrawableAttributes Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker…

VULNhighCVE-2026-502635.5 MEDIUMZero Day Initiative4 months ago

ZDI-26-397: X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker…

VULNhighCVE-2026-411378.8 HIGHZero Day Initiative4 months ago

ZDI-26-365: FlowiseAI Flowise CSV Agent customReadCSV Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Although authentication…

VULNhighCVE-2026-81087.8 HIGHZero Day Initiative4 months ago

ZDI-26-366: Fuji Electric Tellus pcid64 Driver File APIs Exposed Dangerous Method Arbitrary File Deletion Vulnerability

This vulnerability allows local attackers to delete arbitrary files on affected installations of Fuji Electric Tellus. An attacker…

VULNhighCVE-2026-81087.8 HIGHZero Day Initiative4 months ago

ZDI-26-367: Fuji Electric Tellus pcid64 Driver Registry APIs Exposed Dangerous Method Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Fuji Electric Tellus. An attacker mu…

VULNhighCVE-2026-75708.8 HIGHZero Day Initiative4 months ago

ZDI-26-368: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest NetVault Backup. Although…

VULNhighCVE-2026-352739.8 CRITICALZero Day Initiative4 months ago

ZDI-26-387: Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Oracle PeopleSo…

VULNhighCVE-2026-352739.8 CRITICALZero Day Initiative4 months ago

ZDI-26-388: Oracle PeopleSoft HubMBeanPersistance Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle PeopleSoft. Although auth…