Vulnerability Alerts

CVEs, zero-days, exploits, and security advisories

All Feeds Attack & News Gov Alerts / ISAC Vulnerability Alerts Privacy & Governance Fraud & Scams

1,213 articles

VULNhighCVE-2026-201769.1 CRITICALZero Day Initiativeabout 1 month ago

ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Identity Services Engine.…

VULNhighCVE-2026-19772Zero Day Initiativeabout 1 month ago

ZDI-26-715: Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interac…

VULNPalo Alto Unit 42about 1 month ago

Inside the Modern SOC: Defending the Cross-Environment Pivot

Cross-environment attacks demand a new approach to security operations. Learn how Unit 42 Managed XSIAM helps SOC teams investigat…

VULNMicrosoft Securityabout 1 month ago

From guidance to action: Security fundamentals that materially reduce risk

AI has made fundamental changes to the operating environment for cybersecurity. Explore exposure management guidance on recommende…

VULNMicrosoft Securityabout 1 month ago

Improving email security outcomes with real-world Microsoft Defender insights

The latest email security benchmarking reports show strong Microsoft Defender performance across pre-delivery and post-delivery sc…

VULNCheck Point Researchabout 1 month ago

AI Threat Landscape Digest: July–August 2026

The defining development of the period came not from attackers but from the AI labs themselves, whose models broke out of controll…

VULNhighCVE-2026-918264.4 MEDIUMZero Day Initiativeabout 1 month ago

ZDI-26-714: Samsung rlottie Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie. Interaction wit…

VULNRecorded Futureabout 1 month ago

The New Rules of Machine Speed Defense

Experts from Recorded Future and Mastercard explore how security organizations can shift to proactive, machine-speed defense by le…

VULNRecorded Futureabout 1 month ago

Our View on What It Takes To Be Named an Industry-Recognized Threat Intelligence Leader

A behind-the-scenes look at how Recorded Future earned its spot as a threat intelligence leader in the latest Forrester Wave.

VULNSentinelOne Labsabout 1 month ago

Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face

Two Hugging Face accounts reveal that OpenAI's agents staged relay code, internal probes and ChatGPT account registration beyond t…

VULNPalo Alto Unit 42about 1 month ago

Atomic macOS (AMOS) Stealer Activity

Modern macOS malware uses deceptive setup guides to steal credentials and sensitive user data. Learn how to identify and block the…

VULNhighCVE-2026-921837.8 HIGHZero Day Initiativeabout 1 month ago

ZDI-26-713: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is requir…

VULNhighCVE-2026-202429.8 CRITICALZero Day Initiativeabout 1 month ago

ZDI-26-709: Cisco Secure Firewall Management Center CommandSinkRmi Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Secure Firewall Management…

VULNcriticalZero Day Initiativeabout 1 month ago

ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must…

VULNcriticalCVE-2026-92207Zero Day Initiativeabout 1 month ago

ZDI-26-707: (0Day) MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MindsDB. Authentication is requi…

VULNcriticalCVE-2026-92206Zero Day Initiativeabout 1 month ago

ZDI-26-706: (0Day) CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CrewAI crewAI. User interaction…

VULNcriticalCVE-2026-92205Zero Day Initiativeabout 1 month ago

ZDI-26-705: (0Day) BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability

This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is req…

VULNcriticalCVE-2026-92204Zero Day Initiativeabout 1 month ago

ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authen…

VULNcriticalCVE-2026-92203Zero Day Initiativeabout 1 month ago

ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authen…

VULNhighCVE-2026-922107.2 HIGHZero Day Initiativeabout 1 month ago

ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Auth…

VULNhighCVE-2026-922097.8 HIGHZero Day Initiativeabout 1 month ago

ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first ob…

VULNhighCVE-2026-922088.8 HIGHZero Day Initiativeabout 1 month ago

ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authenticat…

VULNhighRecorded Futureabout 1 month ago

Tajin Group: Guarantee Marketplace Vendor Involved in Phishing and Chinese Money Laundering Group

Analyze Tajin Group's role in phishing and Chinese money laundering. Discover how this Telegram-based vendor exploits payment gate…

VULNCheck Point Researchabout 1 month ago

14th September – Threat Intelligence Report

For the latest discoveries in cyber research for the week of 14th Setpember, please download our Threat Intelligence Bulletin. TOP…

VULNPalo Alto Unit 42about 1 month ago

Unmasking Cloud Identities: From Behavioral Clustering to Automated Detection

We designed a behavioral clustering model to map cloud identity roles from audit logs, enabling continuous threat detection using…

VULNhighCVE-2025-220504.7 MEDIUMZero Day Initiativeabout 1 month ago

ZDI-26-702: Linux Kernel usbnet Driver Race Condition Privilege Escalation Vulnerability

This vulnerability allows physically present attackers to escalate privileges on affected installations of Linux Kernel. Authentic…

VULNhighCVE-2026-640469.8 CRITICALZero Day Initiativeabout 1 month ago

ZDI-26-701: Linux Kernel TLS Protocol Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker…

VULNhighCVE-2026-229997.8 HIGHZero Day Initiativeabout 1 month ago

ZDI-26-700: Linux Kernel QFQ Plus Scheduler Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first…

VULNhighZero Day Initiativeabout 1 month ago

ZDI-26-699: Linux Kernel NTFS3 Out-of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker…

VULNhighZero Day Initiativeabout 1 month ago

ZDI-26-698: Linux Kernel NTFS3 Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker…