ZDI-26-714: Samsung rlottie Stack-based Buffer Overflow Remote Code Execution Vulnerability 18/09/2026
CISA Warns of Cisco Identity Services Engine Authentication Bypass Vulnerability (CVE-2026-76460) 17/09/2026
ZDI-26-713: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability 17/09/2026
ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability 17/09/2026
ZDI-26-714: Samsung rlottie Stack-based Buffer Overflow Remote Code Execution Vulnerability This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie. Interaction with the rlottie library... 18/09/2026 Zero-Day Initiative
CISA Warns of Cisco Identity Services Engine Authentication Bypass Vulnerability (CVE-2026-76460) Cisco released security updates to address a critical severity vulnerability in Cisco Identity Services Engine. Tracked as CVE-2026-76460, successful exploitation... 17/09/2026 Qualys-Threat-Protect
ZDI-26-713: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit... 17/09/2026 Zero-Day Initiative
ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to... 17/09/2026 Zero-Day Initiative
ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability... 17/09/2026 Zero-Day Initiative
ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit... 17/09/2026 Zero-Day Initiative
ZDI-26-709: Cisco Secure Firewall Management Center CommandSinkRmi Deserialization of Untrusted Data Remote Code Execution Vulnerability This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Secure Firewall Management Center. Authentication is... 17/09/2026 Zero-Day Initiative
ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation Vulnerability This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the... 17/09/2026 Zero-Day Initiative
ZDI-26-707: (0Day) MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability This vulnerability allows remote attackers to execute arbitrary code on affected installations of MindsDB. Authentication is required to exploit this... 17/09/2026 Zero-Day Initiative
ZDI-26-706: (0Day) CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability This vulnerability allows remote attackers to execute arbitrary code on affected installations of CrewAI crewAI. User interaction is required to... 17/09/2026 Zero-Day Initiative
