ZDI-26-897: (Pwn2Own) Home Assistant Green aiohttp_client Server-Side Request Forgery Vulnerability 08/11/2026
ZDI-26-896: (Pwn2Own) Home Assistant Green Cleartext Storage of Credentials Local Privilege Escalation Vulnerability 08/11/2026
ZDI-26-895: LibreOffice dBase File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 08/11/2026
ZDI-26-894: Docker Sandboxes Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability 08/11/2026
ZDI-26-897: (Pwn2Own) Home Assistant Green aiohttp_client Server-Side Request Forgery Vulnerability This vulnerability allows network-adjacent attackers to initiate arbitrary server-side requests on affected installations of Home Assistant Green. Authentication is not... 08/11/2026 Zero-Day Initiative
ZDI-26-896: (Pwn2Own) Home Assistant Green Cleartext Storage of Credentials Local Privilege Escalation Vulnerability This vulnerability allows local attackers to escalate privileges on affected installations of Home Assistant Green. An attacker must first obtain... 08/11/2026 Zero-Day Initiative
ZDI-26-895: LibreOffice dBase File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability This vulnerability allows remote attackers to execute arbitrary code on affected installations of LibreOffice. User interaction is required to exploit... 08/11/2026 Zero-Day Initiative
ZDI-26-894: Docker Sandboxes Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability This vulnerability allows local attackers to execute arbitrary code on affected installations of Docker Sandboxes. User interaction is required to... 08/11/2026 Zero-Day Initiative
ZDI-26-893: Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to... 08/11/2026 Zero-Day Initiative
ZDI-26-892: Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge Pro. Authentication is not required... 08/11/2026 Zero-Day Initiative
ZDI-26-891: Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge Pro. Although authentication is... 08/11/2026 Zero-Day Initiative
ZDI-26-890: Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability This vulnerability allows local attackers to modify files on affected installations of Philips Hue Bridge Pro. An attacker must first... 08/11/2026 Zero-Day Initiative
ZDI-26-889: Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authentication is not... 08/11/2026 Zero-Day Initiative
ZDI-26-888: Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service Vulnerability This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Quest NetVault Backup. Authentication is not... 08/11/2026 Zero-Day Initiative
