Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

VULNRecorded Future27 days ago

Social Engineering in the Age of Synthetic Media

How AI Changes Phishing, Impersonation, and Identity Verification

VULNcriticalCVE-2026-887719.8 CRITICALPalo Alto Unit 4227 days ago

Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild

Unit 42 is aware of possible 0-day activity against NetScaler devices. Citrix reports CVE-2026-88771, CVE-2026-88772 have been exp…

VULNhighMicrosoft Security27 days ago

NeedyMantis: Unpacking a post-compromise malware family used in targeted operations

Microsoft Threat Intelligence identified NeedyMantis, a modular post-compromise malware framework used in targeted intrusions that…

VULNCheck Point Research27 days ago

28th September – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 28th September, please download our Threat Intelligence Bulletin. TOP…

VULNhighCVE-2026-887719.8 CRITICALwatchTowr Labs27 days ago

Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)

God damn it, we're back in the room again. We'll probably write more here later, but for now, deal with this picture of our favor…

VULNRecorded Future28 days ago

Recorded Future Launches MCP, the Intelligence Layer for Agentic Security Operations

Recorded Future launches Model Context Protocol (MCP), providing AI agents and LLM workflows direct access to the Intelligence Gra…

VULNhighCVE-2026-13742Full Disclosure28 days ago

SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Sep 26 SEC Consult Vulnerability Lab Security Advisory ============…

VULNFull Disclosure28 days ago

[SYSS-2026-071]: GDCM (Grassroots DICOM) - Format String (CWE-134)

Posted by Matthias Deeg via Fulldisclosure on Sep 26 Advisory ID: SYSS-2026-071 Product: GDCM (Gra…

VULNFull Disclosure28 days ago

[SYSS-2026-070]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)

Posted by Matthias Deeg via Fulldisclosure on Sep 26 Advisory ID: SYSS-2026-070 Product: GDCM (Gra…

VULNFull Disclosure28 days ago

[SYSS-2026-069]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)

Posted by Matthias Deeg via Fulldisclosure on Sep 26 Advisory ID: SYSS-2026-069 Product: GDCM (Gra…

VULNFull Disclosure28 days ago

[SYSS-2026-068]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)

Posted by Matthias Deeg via Fulldisclosure on Sep 26 Advisory ID: SYSS-2026-068 Product: GDCM (Gra…

VULNFull Disclosure28 days ago

[SYSS-2026-067]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)

Posted by Matthias Deeg via Fulldisclosure on Sep 26 Advisory ID: SYSS-2026-067 Product: GDCM (Gra…

VULNFull Disclosure28 days ago

harness Gitspace hardcoded password for every user account

Posted by Khashayar Fereidani on Sep 26 # harness Gitspace hardcoded password for every user account https://fereidani.com/harness…

VULNFull Disclosure28 days ago

harness(gitness) registry webhook sort_order blind SQL injection

Posted by Khashayar Fereidani on Sep 26 # harness registry webhook sort_order blind SQL injection https://fereidani.com/harness-re…

VULNFull Disclosure28 days ago

dive tar-slip in image file extraction

Posted by Khashayar Fereidani on Sep 26 # dive tar-slip in image file extraction https://fereidani.com/dive-tar-slip-in-image-file…

VULNFull Disclosure28 days ago

usvg SVGZ decompression bomb in `Tree::from_data`

Posted by Khashayar Fereidani on Sep 26 # usvg SVGZ decompression bomb in `Tree::from_data` https://fereidani.com/usvg-svgz-decomp…

VULNFull Disclosure28 days ago

openEQUELLA authenticated RCE chain(s)

Posted by evan via Fulldisclosure on Sep 26 SUMMARY: an authenticated deserialization vuln in openEQUELLA allows https://blog.evan…

VULNcriticalFull Disclosure28 days ago

[0day-rubbish] Server Technology PRO3X PDU 030600 port_mux listener program override to root command execution (7.2)

Posted by disclosure via Fulldisclosure on Sep 26 0day Rubbish Research Team is publicly disclosing a vulnerability in Server Tech…

VULNcriticalFull Disclosure28 days ago

[0day-rubbish] Netsis NetOpenX REST 2.0.6.9 Unauthenticated SQL injection to xp_cmdshell SYSTEM command execution (9.8)

Posted by disclosure via Fulldisclosure on Sep 26 0day Rubbish Research Team is publicly disclosing a vulnerability in Logo Netsis…

VULNcriticalFull Disclosure28 days ago

[0day-rubbish] MultiTech Conduit AEP 6.3.6 Authenticated import_config filename command injection to root RCE (7.2)

Posted by disclosure via Fulldisclosure on Sep 26 0day Rubbish Research Team is publicly disclosing a vulnerability in MultiTech C…

VULNcriticalFull Disclosure28 days ago

[0day-rubbish] Lightstreamer Server 7.4.8 Unauthenticated JMX jvmtiAgentLoad native code execution (8.1)

Posted by disclosure via Fulldisclosure on Sep 26 0day Rubbish Research Team is publicly disclosing a vulnerability in Lightstream…

VULNcriticalFull Disclosure28 days ago

[0day-rubbish] Cambium cnMatrix EX3024F 6.2.1-r4 SSL CSR COMMON_NAME command injection to root RCE (7.2)

Posted by disclosure via Fulldisclosure on Sep 26 0day Rubbish Research Team is publicly disclosing a vulnerability in the Cambium…

VULNFull Disclosure28 days ago

SCHUTZWERK-SA-2024-006: Stored Cross-Site Scripting via text fields in H5P module (h5p-nodejs-library) of Lumi Education

Posted by David Brown via Fulldisclosure on Sep 26 A stored cross-site scripting (XSS) vulnerability has been identified in the H…

VULNhighCVE-2026-00156.2 MEDIUMFull Disclosure28 days ago

[NotCVE-2026-0015] Input Leap through 3.0.3 input-leapd Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM

Posted by advisories on Sep 26 ---------------------------------------------------------------------------- NotCVE Advisory — NotC…

VULNhighCVE-2026-00146.2 MEDIUMFull Disclosure28 days ago

[NotCVE-2026-0014] Input Leap 3.0.3 Drag-and-Drop File Transfer Path Traversal Allows Arbitrary File Write Outside the Drop Directory

Posted by advisories on Sep 26 ---------------------------------------------------------------------------- NotCVE Advisory — NotC…

VULNPalo Alto Unit 4230 days ago

3 Consulting Myths Debunked by Unit 42 Experts

Unit 42 security experts address critical cybersecurity misconceptions, offering practical insights to help your organization rein…

VULNMicrosoft Securityabout 1 month ago

Storm-3168: Agentic-driven cloud attacks using compromised service principals

Microsoft details JADEPUFFER-linked Azure reconnaissance, resource deletion, and credential access using compromised service princ…

VULNcriticalRecorded Futureabout 1 month ago

Using Threat Intelligence to Stop Ransomware Attacks

Learn how ransomware threat intelligence empowers your team to actively follow adversary infrastructure, monitor dark web chatter…

VULNMicrosoft Securityabout 1 month ago

Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

Storm-2570 is a ransomware affiliate that uses consistent post-compromise tools and techniques across deployments involving Qilin,…

VULNMicrosoft Securityabout 1 month ago

What’s new in Microsoft Security: September 2026

This month's updates help you discover and control local AI agents, extend Zero Trust to agent traffic, and strengthen SOC foundat…

Vulnerability Alerts

Social Engineering in the Age of Synthetic Media

Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild

NeedyMantis: Unpacking a post-compromise malware family used in targeted operations

28th September – Threat Intelligence Report

Oh Look, The Foot Gun Went Off Again (Citrix NetScaler PreAuth Command Injection CVE-2026-88771)

Recorded Future Launches MCP, the Intelligence Layer for Agentic Security Operations

SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742

[SYSS-2026-071]: GDCM (Grassroots DICOM) - Format String (CWE-134)

[SYSS-2026-070]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)

[SYSS-2026-069]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)

[SYSS-2026-068]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)

[SYSS-2026-067]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)

harness Gitspace hardcoded password for every user account

harness(gitness) registry webhook sort_order blind SQL injection

dive tar-slip in image file extraction

usvg SVGZ decompression bomb in `Tree::from_data`

openEQUELLA authenticated RCE chain(s)

[0day-rubbish] Server Technology PRO3X PDU 030600 port_mux listener program override to root command execution (7.2)

[0day-rubbish] Netsis NetOpenX REST 2.0.6.9 Unauthenticated SQL injection to xp_cmdshell SYSTEM command execution (9.8)

[0day-rubbish] MultiTech Conduit AEP 6.3.6 Authenticated import_config filename command injection to root RCE (7.2)

[0day-rubbish] Lightstreamer Server 7.4.8 Unauthenticated JMX jvmtiAgentLoad native code execution (8.1)

[0day-rubbish] Cambium cnMatrix EX3024F 6.2.1-r4 SSL CSR COMMON_NAME command injection to root RCE (7.2)

SCHUTZWERK-SA-2024-006: Stored Cross-Site Scripting via text fields in H5P module (h5p-nodejs-library) of Lumi Education

[NotCVE-2026-0015] Input Leap through 3.0.3 input-leapd Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM

[NotCVE-2026-0014] Input Leap 3.0.3 Drag-and-Drop File Transfer Path Traversal Allows Arbitrary File Write Outside the Drop Directory

3 Consulting Myths Debunked by Unit 42 Experts

Storm-3168: Agentic-driven cloud attacks using compromised service principals

Using Threat Intelligence to Stop Ransomware Attacks

Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

​​​​​​​​What’s new in Microsoft Security: September 2026​​

What’s new in Microsoft Security: September 2026