Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,024 articles

VULNExploit-DB23 days ago

[webapps] Duplicati 2.2.0.3 - JWT Signing Key Leak

Duplicati 2.2.0.3 - JWT Signing Key Leak

VULNExploit-DB23 days ago

[webapps] Joomla JCE_2.9.15 - Remote Code Execution

Joomla JCE_2.9.15 - Remote Code Execution

VULNExploit-DB23 days ago

[remote] ipTIME A3004T - Remote Code Execution

ipTIME A3004T - Remote Code Execution

VULNExploit-DB23 days ago

[remote] D-Link DNS_340L - OS Command Injection

D-Link DNS_340L - OS Command Injection

VULNExploit-DB23 days ago

[webapps] WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload

WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload

VULNhighCVE-2026-84529.8 CRITICALwatchTowr Labs26 days ago

You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))

Suddenly, you’re in a room. You look around - oh, you’re surrounded by other new starters at your new job. Yes, it’s Monday, and y…

VULNFull Disclosure27 days ago

APPLE-SA-08-06-2026-2 macOS Sequoia 15.7.9

Posted by Apple Product Security via Fulldisclosure on Aug 13 APPLE-SA-08-06-2026-2 macOS Sequoia 15.7.9 https://support.apple.com…

VULNFull Disclosure27 days ago

APPLE-SA-08-06-2026-3 macOS Sonoma 14.8.9

Posted by Apple Product Security via Fulldisclosure on Aug 13 APPLE-SA-08-06-2026-3 macOS Sonoma 14.8.9 https://support.apple.com/…

VULNhighSentinelOne Labs27 days ago

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for…

VULNCheck Point Research27 days ago

The State of Ransomware Q2 2026

For the past year, the ransomware conversation has centered on concentration: a handful of dominant RaaS operations controlling mo…

VULNhighCVE-2024-139627.8 HIGHZero Day Initiative27 days ago

ZDI-26-567: Norton Utilities Ultimate NortonUtilitiesSvc Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Norton Utilities Ultimate. An attack…

VULNhighCVE-2026-402727.0 HIGHZero Day Initiative27 days ago

ZDI-26-566: BlackBerry QNX KEV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BlackBerry QNX. User interaction…

VULNhighCVE-2026-124107.8 HIGHZero Day Initiative27 days ago

ZDI-26-565: Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Gen Digital CCleaner. An attacker mu…

VULNhighCVE-2026-242324.3 MEDIUMZero Day Initiative27 days ago

ZDI-26-564: NVIDIA Transformers4Rec load_model_trainer_states_from_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Transformers4Rec. User in…

VULNhighCVE-2026-48907.5 HIGHZero Day Initiative27 days ago

ZDI-26-584: dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of dnsmasq. Authentic…

VULNhighCVE-2026-202157.5 HIGHZero Day Initiative27 days ago

ZDI-26-583: Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Clam AntiVirus. Interaction with…

VULNhighCVE-2026-201484.9 MEDIUMZero Day Initiative27 days ago

ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Identity Services…

VULNhighCVE-2026-201479.9 CRITICALZero Day Initiative27 days ago

ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Identity Services Engine.…

VULNcriticalCVE-2026-201907.5 HIGHZero Day Initiative27 days ago

ZDI-26-580: Cisco Identity Services Engine Missing Authentication for Critical Function Information Disclosure Vulnerability

The vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Identity Services E…

VULNhighCVE-2026-201819.1 CRITICALZero Day Initiative27 days ago

ZDI-26-579: Cisco Identity Services Engine zipFiles Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Identity Services Engine.…

VULNhighCVE-2026-67212Zero Day Initiative27 days ago

ZDI-26-577: Trend Micro VPN OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro VPN. An attacker must fi…

VULNhighZero Day Initiative27 days ago