Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

5th October – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 5th October, please download our Threat Intelligence Bulletin. TOP AT…

VULNMicrosoft Security24 days ago

Preparing governments for an era of interconnected cyber risk

According to this year’s Microsoft Digital Defense Report, government agencies and services were the sector most impacted by cyber…

VULNMicrosoft Security24 days ago

Insights from the 2026 Microsoft Digital Defense Report

Read highlights from the 2026 Microsoft Digital Defense Report, which reflects a security environment that continues to grow more…

VULNhighCVE-2026-00197.8 HIGHFull Disclosure24 days ago

[NotCVE-2026-0019] game-music-emu through 0.6.5 VGM Command Interpreter Missing Operand Length Check Allows Heap Out-of-Bounds Read

Posted by advisories on Sep 30 ---------------------------------------------------------------------------- NotCVE Advisory — NotC…

VULNhighCVE-2026-00185.5 MEDIUMFull Disclosure24 days ago

[NotCVE-2026-0018] game-music-emu (libgme) through 0.6.5 Unbounded GYM Command Loop Allows Heap Out-of-Bounds Read

Posted by advisories on Sep 30 ---------------------------------------------------------------------------- NotCVE Advisory — NotC…

VULNhighCVE-2026-00177.7 HIGHFull Disclosure24 days ago

[NotCVE-2026-0017] game-music-emu (libgme) 0.6.5 and Earlier AY Loader NULL Pointer Dereference Allows Denial of Service

Posted by advisories on Sep 30 ---------------------------------------------------------------------------- NotCVE Advisory — NotC…

VULNhighCVE-2026-00163.3 LOWFull Disclosure24 days ago

[NotCVE-2026-0016] game-music-emu VGM Command Interpreter Unvalidated 0xE0 PCM Seek Offset Allows Out-of-Bounds Read and Denial of Service

Posted by advisories on Sep 30 ---------------------------------------------------------------------------- NotCVE Advisory — NotC…

VULNhighCVE-2026-503756.3 MEDIUMZero Day Initiative24 days ago

ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…

VULNExploit-DB25 days ago

[remote] Teltonika_RutOS 00.07.06.21 - command injection

Teltonika_RutOS 00.07.06.21 - command injection

VULNExploit-DB25 days ago

[webapps] TigerGraph_Community_Edition 4.2.4 - arbitrary file write

TigerGraph_Community_Edition 4.2.4 - arbitrary file write

VULNExploit-DB25 days ago

[webapps] WordPress 7.0.2 - Path Travesal

WordPress 7.0.2 - Path Travesal

VULNExploit-DB25 days ago

[webapps] Food-Ordering 1.0 - LFI

Food-Ordering 1.0 - LFI

VULNExploit-DB25 days ago

[remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE

Ecava_ntegraXor IGX_16.0.701.10 - RCE

VULNExploit-DB25 days ago

[webapps] Krayin CRM 2.2.4 - IDOR

Krayin CRM 2.2.4 - IDOR

VULNExploit-DB25 days ago

[webapps] SuiteCRM 8.10.1 - Authenticated SSRF

SuiteCRM 8.10.1 - Authenticated SSRF

VULNExploit-DB25 days ago

[webapps] InvoicePlane 1.7.1 - RCE

InvoicePlane 1.7.1 - RCE

VULNhighExploit-DB25 days ago

[webapps] POMS oretnom23v1.0 - SQLi vulnerabilities

POMS oretnom23v1.0 - SQLi vulnerabilities

VULNMicrosoft Security25 days ago

Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026

This year at Microsoft Ignite, we spotlight our AI-first, end-to-end security platform designed to protect identities, devices, da…

VULNhighCVE-2026-735708.9 HIGHMicrosoft Security25 days ago

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

Microsoft Threat Intelligence examines CVE-2026-73570 exploitation in Zimbra, including observed attack paths, detection opportuni…

VULNhighCVE-2026-181457.2 HIGHZero Day Initiative25 days ago

ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authenti…

VULNhighCVE-2026-130467.2 HIGHZero Day Initiative25 days ago

ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. An attac…

VULNhighMicrosoft Security26 days ago

Phishing Abuses RMM Tools for Persistent Access

Microsoft observed phishing campaigns that abused MSP360 RMM to deploy ScreenConnect, creating redundant remote-access channels fo…

VULNMicrosoft Security26 days ago

Beyond source code: A path to the keys to the kingdom

Explore how Storm-3068 turned a compromised identity into broader cloud access and the steps organizations can take to defend thei…

VULNhighMicrosoft Security26 days ago

Star Blizzard refines phishing and malware delivery with the RedFlick technique

Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capabilities th…

VULNhighCVE-2026-887728.1 HIGHwatchTowr Labs26 days ago

Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)

Part 1 of this week's saga can be found here. This research is a glimpse into the capabilities that power our Preemptive Exposure…

VULNPalo Alto Unit 4226 days ago

OperTraitors: How Kubernetes Operators Betray Your Security Posture

We introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human…

VULNFull Disclosure26 days ago

APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1

Posted by Apple Product Security via Fulldisclosure on Sep 28 APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1 https://support.apple.com…

VULNFull Disclosure26 days ago

APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1

Posted by Apple Product Security via Fulldisclosure on Sep 28 APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1 https://support.apple.com/1…

VULNFull Disclosure26 days ago

APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1

Posted by Apple Product Security via Fulldisclosure on Sep 28 APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1 https://support.a…

VULNRecorded Future27 days ago

Recorded Future Debuts Autonomous Defense, Built for Machine-Speed Threats

Recorded Future just revealed autonomous defense capabilities. The platform hunts, investigates, and stops threats on its own, act…

Vulnerability Alerts

5th October – Threat Intelligence Report

Preparing governments for an era of interconnected cyber risk

Insights from the 2026 Microsoft Digital Defense Report

[NotCVE-2026-0019] game-music-emu through 0.6.5 VGM Command Interpreter Missing Operand Length Check Allows Heap Out-of-Bounds Read

[NotCVE-2026-0018] game-music-emu (libgme) through 0.6.5 Unbounded GYM Command Loop Allows Heap Out-of-Bounds Read

[NotCVE-2026-0017] game-music-emu (libgme) 0.6.5 and Earlier AY Loader NULL Pointer Dereference Allows Denial of Service

[NotCVE-2026-0016] game-music-emu VGM Command Interpreter Unvalidated 0xE0 PCM Seek Offset Allows Out-of-Bounds Read and Denial of Service

ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

[remote] Teltonika_RutOS 00.07.06.21 - command injection

[webapps] TigerGraph_Community_Edition 4.2.4 - arbitrary file write

[webapps] WordPress 7.0.2 - Path Travesal

[webapps] Food-Ordering 1.0 - LFI

[remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE

[webapps] Krayin CRM 2.2.4 - IDOR

[webapps] SuiteCRM 8.10.1 - Authenticated SSRF

[webapps] InvoicePlane 1.7.1 - RCE

[webapps] POMS oretnom23v1.0 - SQLi vulnerabilities

​​Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570

ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution Vulnerability

Phishing Abuses RMM Tools for Persistent Access

​​Beyond source code: A path to the keys to the kingdom

Star Blizzard refines phishing and malware delivery with the RedFlick technique

Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772)

OperTraitors: How Kubernetes Operators Betray Your Security Posture

APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1

APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1

APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1

Recorded Future Debuts Autonomous Defense, Built for Machine-Speed Threats

Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026

Beyond source code: A path to the keys to the kingdom