# Secure Cyber Vulnerability Management > Proactive Protection. Trusted Compliance. > Generated by All in One SEO v5.0.3, this is an llms.txt file, used by LLMs to index the site. ## Sitemaps - [XML Sitemap](https://securecybervm.com/sitemap.xml): Contains all public & indexable URLs for this website. ## Posts - [ZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-778-adobe-photoshop-dcm-pixel-data-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-95636. - [ZDI-26-777: Adobe Photoshop AdobePDFL PDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-777-adobe-photoshop-adobepdfl-pdf-jpeg-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-83661. - [ZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-776-qnap-ts-453e-syslog-log_message-format-string-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-453E devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2018-10388, CVE-2018-10389. - [ZDI-26-775: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-775-gstreamer-rtpl16depay-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-111183. - [ZDI-26-774: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-774-nomachine-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-111185. - [ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-773-nomachine-named-pipe-incorrect-permission-assignment-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-111184. - [ZDI-26-772: Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability](https://securecybervm.com/zdi-26-772-fortinet-fortisandbox-admin-profile-improper-handling-of-exceptional-conditions-denial-of-service-vulnerability/): This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are assigned: CVE-2026-106170. - [ZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-771-fortinet-fortisandbox-login_user_profile-hard-coded-credentials-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on affected installations of Fortinet FortiSandbox. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-107656. - [ZDI-26-779: (0Day) Sparx Systems Enterprise Architect XSLT Debugger XML External Entity Processing Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-779-0day-sparx-systems-enterprise-architect-xslt-debugger-xml-external-entity-processing-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sparx Systems Enterprise Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2026-88794. - [ZDI-26-780: X.Org Server GestureBuildSprite Use-After-Free Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-780-x-org-server-gesturebuildsprite-use-after-free-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.4. The following CVEs are assigned: CVE-2026-93536. - [ZDI-26-781: LibreOffice EMF+ Brush Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-781-libreoffice-emf-brush-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of LibreOffice. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-6045. - [ZDI-26-782: LibreOffice PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-782-libreoffice-pdf-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of LibreOffice. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-63274. - [ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-783-libreoffice-pdf-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of LibreOffice. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-63273. - [ZDI-26-784: FreeBSD Kernel kqueue Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-784-freebsd-kernel-kqueue-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of FreeBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-58093. - [ZDI-26-785: FreeBSD Kernel Shared Memory Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-785-freebsd-kernel-shared-memory-time-of-check-time-of-use-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of FreeBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-58094. - [CISA Warns of Cisco Secure Email Gateway Arbitrary File Write Vulnerability (CVE-2026-76519)](https://securecybervm.com/cisa-warns-of-cisco-secure-email-gateway-arbitrary-file-write-vulnerability-cve-2026-76519/): Cisco released a security advisory for a critical-severity vulnerability in the Cisco Secure Email Gateway. Tracked as CVE-2026-76519, the vulnerability may allow an attacker to write arbitrary files and execute commands with root privileges on the underlying operating system. CISA acknowledged the active exploitation of the vulnerability by adding it to its Known Exploited Vulnerabilities… - [Palo Alto Networks (PAN-OS) Remote Code Execution Vulnerability Exploited in Attack (CVE-2026-0322)](https://securecybervm.com/palo-alto-networks-pan-os-remote-code-execution-vulnerability-exploited-in-attack-cve-2026-0322/): Threat actors are exploiting a high-severity PAN-OS vulnerability, tracked as CVE-2026-0322. The vulnerability exists in the management interface of Palo Alto Networks PAN-OS software. Successful exploitation of the vulnerability may allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. Palo Alto mentioned in their advisory that very… - [Microsoft Patch Tuesday, October 2026 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-october-2026-security-update-review/): Microsoft has released its October 2026 Patch Tuesday security updates, addressing vulnerabilities across its products and services. As organizations continue to navigate an evolving threat landscape, applying security patches promptly remains critical to reducing exposure and strengthening security posture. This month’s updates highlight the importance of identifying affected assets… Source - [ZDI-26-756: (0Day) Genesis World load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-756-0day-genesis-world-load_checkpoint-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. - [ZDI-26-755: (0Day) Genesis World glTF Server-Side Request Forgery Vulnerability](https://securecybervm.com/zdi-26-755-0day-genesis-world-gltf-server-side-request-forgery-vulnerability/): This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 6.1. - [ZDI-26-754: (0Day) Genesis World URDF Directory Traversal Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-754-0day-genesis-world-urdf-directory-traversal-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 5.5. - [ZDI-26-753: (0Day) Genesis World MJCF Directory Traversal Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-753-0day-genesis-world-mjcf-directory-traversal-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 5.5. - [ZDI-26-752: (0Day) Genesis World decompress_usdz Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-752-0day-genesis-world-decompress_usdz-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Genesis World. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. - [CISA Warns of Citrix Vulnerability Active Exploitation in Attacks (CVE-2026-88779)](https://securecybervm.com/cisa-warns-of-citrix-vulnerability-active-exploitation-in-attacks-cve-2026-88779/): Citrix released an emergency update to address an actively exploited vulnerability impacting Citrix NetScaler ADC and Citrix NetScaler Gateway. Tracked as CVE-2026-88779, successful exploitation of this memory overflow vulnerability may allow an attacker to achieve a denial-of-service condition. CISA added CVE-2026-88779 to its Known Exploited Vulnerabilities Catalog. CISA urged users to patch… Source - [ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-751-microsoft-windows-dxgkrnl-time-of-check-time-of-use-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-50375. - [Cisco Catalyst SD-WAN Manager Authentication Bypass Vulnerability Exploited in Attacks (CVE-2026-76504)](https://securecybervm.com/cisco-catalyst-sd-wan-manager-authentication-bypass-vulnerability-exploited-in-attacks-cve-2026-76504/): Cisco released a security advisory addressing a critical vulnerability affecting the Cisco Catalyst SD-WAN Manager. Tracked as CVE-2026-76504, successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to access an affected system with admin privileges. Cisco mentioned in their advisory that they are aware of the vulnerability being exploited. Source - [ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-750-watchguard-fireware-os-spamd-statushdlr-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-18145. - [ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-749-watchguard-fireware-os-samld-samlsession-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. An attacker must first obtain the ability to write to the samld session directory on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-13046. - [Apple Warns Users iOS Vulnerability Exploited in Attack (CVE-2026-86950)](https://securecybervm.com/apple-warns-users-ios-vulnerability-exploited-in-attack-cve-2026-86950/): Apple released updates to address an actively exploited vulnerability tracked as CVE-2026-86950. The vulnerability affects iOS, iPadOS, macOS Tahoe, and Sequoia. This is an out-of-bounds write flaw that can be exploited by processing a maliciously crafted file. Successful exploitation of the vulnerability may lead to arbitrary code execution. Apple has addressed the vulnerability with improved… - [Citrix NetScaler ADC and Gateway Zero-day Vulnerabilities Exploited in Attacks (CVE-2026-88771 & CVE-2026-88772)](https://securecybervm.com/citrix-netscaler-adc-and-gateway-zero-day-vulnerabilities-exploited-in-attacks-cve-2026-88771-cve-2026-88772/): The Cybersecurity and Infrastructure Security Agency (CISA) has ordered agencies to secure their systems against two critical Citrix NetScaler vulnerabilities that have been exploited in attacks. CISA added CVE-2026-88771 and CVE-2026-88772 to its Known Exploited Vulnerabilities Catalog. CISA urged users to patch the vulnerabilities before September 30, 2026. This is an improper input… Source - [ZDI-26-748: Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-748-luxion-keyshot-bip-file-parsing-uncontrolled-search-path-element-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-92202. - [ZDI-26-747: Wireshark RF4CE Packet Parsing Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-747-wireshark-rf4ce-packet-parsing-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Wireshark. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-96417. - [ZDI-26-746: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-746-foxit-pdf-reader-annotation-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-91818. - [ZDI-26-745: Foxit PDF Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-745-foxit-pdf-reader-acroform-out-of-bounds-read-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-91817. - [ZDI-26-744: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-744-foxit-pdf-reader-acroform-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-91816. - [ZDI-26-743: Foxit PDF Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-743-foxit-pdf-reader-jpeg2000-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-91815. - [ZDI-26-742: Foxit PDF Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-742-foxit-pdf-reader-foxitupdater-race-condition-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-91813. - [ZDI-26-741: Foxit PDF Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-741-foxit-pdf-reader-foxitupdater-improper-certificate-validation-local-privilege-escalation-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.1. The following CVEs are assigned: CVE-2026-91812. - [ZDI-26-740: Foxit PDF Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-740-foxit-pdf-reader-prc-stream-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-91811. - [ZDI-26-739: Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-739-foxit-pdf-reader-doc-object-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-91810. - [ZDI-26-738: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-738-foxit-pdf-reader-annotation-use-after-free-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-91809. - [ZDI-26-737: Foxit PDF Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-737-foxit-pdf-reader-jpeg-file-parsing-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-91808. - [ZDI-26-736: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-736-foxit-pdf-reader-pdf-file-parsing-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-91807. - [ZDI-26-735: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-735-foxit-pdf-reader-doc-object-use-after-free-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-91806. - [ZDI-26-734: Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-734-foxit-pdf-reader-richmedia-annotation-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-91801. - [CISA Warns of Check Point Vulnerabilities Exploited in Attacks (CVE-2026-85102 & CVE-2026-93616)](https://securecybervm.com/cisa-warns-of-check-point-vulnerabilities-exploited-in-attacks-cve-2026-85102-cve-2026-93616/): Check Point has two vulnerabilities that are being exploited in the wild, tracked as CVE-2026-85102 & CVE-2026-93616. The Cybersecurity and Infrastructure Security Agency (CISA) has added the vulnerabilities to its Known Exploited Vulnerabilities Catalog, urging users to patch before September 25, 2026. The vulnerability has a critical severity rating with a CVSS score of 9.8. - [ZDI-26-719: Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-719-cisco-thousandeyes-virtual-appliance-dhcp-client-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco ThousandEyes Virtual Appliance. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-20350. - [ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-718-cisco-identity-services-engine-mntrestlivelogservice-xml-external-entity-processing-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Identity Services Engine. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are assigned: CVE-2026-20235. - [ZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-717-cisco-identity-services-engine-alarmmessagediskqueue-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Identity Services Engine. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-20211. - [ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-716-cisco-identity-services-engine-createdblink-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Identity Services Engine. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-20176. - [ZDI-26-715: Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-715-linux-mint-xreader-pdf-file-parsing-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-19772. - [ZDI-26-714: Samsung rlottie Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-714-samsung-rlottie-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie. Interaction with the rlottie library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-91826. - [CISA Warns of Cisco Identity Services Engine Authentication Bypass Vulnerability (CVE-2026-76460)](https://securecybervm.com/cisa-warns-of-cisco-identity-services-engine-authentication-bypass-vulnerability-cve-2026-76460/): Cisco released security updates to address a critical severity vulnerability in Cisco Identity Services Engine. Tracked as CVE-2026-76460, successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to bypass authentication. Cisco mentioned in their advisory that they are aware of active exploitation of this vulnerability. CISA acknowledged the active… Source - [ZDI-26-713: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-713-gimp-apng-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-92183. - [ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-712-nomachine-nxhtd-server-side-request-forgery-information-disclosure-vulnerability/): This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-92210. - [ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-711-nomachine-redis-improper-authentication-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-92209. - [ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-710-nomachine-mdns-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92208. - [ZDI-26-709: Cisco Secure Firewall Management Center CommandSinkRmi Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-709-cisco-secure-firewall-management-center-commandsinkrmi-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Secure Firewall Management Center. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-20242. - [ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-708-0day-microsoft-windows-http-proxy-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.3. - [ZDI-26-707: (0Day) MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-707-0day-mindsdb-openbbtable-code-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of MindsDB. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92207. - [ZDI-26-706: (0Day) CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-706-0day-crewai-crewai-framework-agent-loading-unsafe-reflection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of CrewAI crewAI. User interaction is required to exploit this vulnerability in that the target must load a malicious agent configuration from the repository. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92206. - [ZDI-26-705: (0Day) BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability](https://securecybervm.com/zdi-26-705-0day-busybox-libarchive-symlink-directory-traversal-arbitrary-file-creation-vulnerability/): This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 6.1. The following CVEs are assigned: CVE-2026-92205. - [ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-704-0day-airbyte-onedrive-connector-_get_shared_drive_object-server-side-request-forgery-information-disclosure-vulnerability/): This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.7. The following CVEs are assigned: CVE-2026-92204. - [ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-703-0day-airbyte-sharepoint-connector-_get_shared_drive_object-server-side-request-forgery-information-disclosure-vulnerability/): This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.7. The following CVEs are assigned: CVE-2026-92203. - [Oracle Critical Security Patch Update, September 2026 Review](https://securecybervm.com/oracle-critical-security-patch-update-september-2026-review/): Oracle released its September edition of Critical Security Patch Update. The update received patches for 673 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products. Out of the 673 security updates published, total 104 (15% - [Cisco Secure Email Gateway Vulnerability Exploited in Attacks (CVE-2026-76461)](https://securecybervm.com/cisco-secure-email-gateway-vulnerability-exploited-in-attacks-cve-2026-76461/): Cisco released a security advisory about a critical-severity vulnerability in Cisco Secure Email Gateway. Tracked as CVE-2026-76461, the vulnerability is being exploited in the wild. Successful exploitation of the vulnerability may allow an attacker to execute arbitrary commands with root privileges on the underlying operating system. Cisco TAC team discovered the vulnerability. Source - [ZDI-26-702: Linux Kernel usbnet Driver Race Condition Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-702-linux-kernel-usbnet-driver-race-condition-privilege-escalation-vulnerability/): This vulnerability allows physically present attackers to escalate privileges on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.1. The following CVEs are assigned: CVE-2025-22050. - [ZDI-26-701: Linux Kernel TLS Protocol Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-701-linux-kernel-tls-protocol-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.7. The following CVEs are assigned: CVE-2026-64046. - [ZDI-26-700: Linux Kernel QFQ Plus Scheduler Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-700-linux-kernel-qfq-plus-scheduler-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-22999. - [ZDI-26-699: Linux Kernel NTFS3 Out-of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-699-linux-kernel-ntfs3-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.2. - [ZDI-26-698: Linux Kernel NTFS3 Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-698-linux-kernel-ntfs3-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.2. - [ZDI-26-697: Linux Kernel NTFS3 Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-697-linux-kernel-ntfs3-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. - [ZDI-26-696: Linux Kernel NTFS3 Journal Heap-based Buffer Overflow Code Execution Vulnerability](https://securecybervm.com/zdi-26-696-linux-kernel-ntfs3-journal-heap-based-buffer-overflow-code-execution-vulnerability/): This vulnerability allows local attackers to execute arbitrary code on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-72196. - [ZDI-26-695: Linux Kernel NFSv4 Server Race Condition Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-695-linux-kernel-nfsv4-server-race-condition-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is required to exploit this vulnerability. Furthermore, only systems with nfsd enabled are vulnerable. The ZDI has assigned a CVSS rating of 8.5. The following CVEs are assigned: CVE-2026-89688. - [ZDI-26-694: Linux Kernel Net Scheduler Clsact Qdisc Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-694-linux-kernel-net-scheduler-clsact-qdisc-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2026-23413. - [ZDI-26-693: Linux Kernel ksmbd Share Configuration Race Condition Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-693-linux-kernel-ksmbd-share-configuration-race-condition-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is required to exploit this vulnerability. Furthermore, only systems with ksmbd enabled are vulnerable. The ZDI has assigned a CVSS rating of 8.5. - [ZDI-26-692: Linux Kernel eMPIA USB Device Driver Race Condition Code Execution Vulnerability](https://securecybervm.com/zdi-26-692-linux-kernel-empia-usb-device-driver-race-condition-code-execution-vulnerability/): This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.1. The following CVEs are assigned: CVE-2026-31583. - [ZDI-26-691: Linux Kernel Netlink-based Wireless Configuration Integer Overflow Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-691-linux-kernel-netlink-based-wireless-configuration-integer-overflow-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2026-53182. - [ZDI-26-690: Linux Kernel MCTP Routing Uninitialized Memory Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-690-linux-kernel-mctp-routing-uninitialized-memory-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.0. The following CVEs are assigned: CVE-2026-45930. - [ZDI-26-689: Linux Kernel SCTP Subsystem Race Condition Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-689-linux-kernel-sctp-subsystem-race-condition-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.4. The following CVEs are assigned: CVE-2026-46227. - [ZDI-26-688: Linux Kernel OpenvSwitch Race Condition Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-688-linux-kernel-openvswitch-race-condition-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-74465. - [ZDI-26-679: Adobe Photoshop DCM JPEG Image Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-679-adobe-photoshop-dcm-jpeg-image-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-75862. - [ZDI-26-678: Adobe Photoshop DCM File Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-678-adobe-photoshop-dcm-file-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-75863. - [ZDI-26-677: Adobe Photoshop DCM JPEG-LS Image Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-677-adobe-photoshop-dcm-jpeg-ls-image-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-75771. - [ZDI-26-676: Adobe Acrobat Reader DC DigSig Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-676-adobe-acrobat-reader-dc-digsig-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81973. - [ZDI-26-675: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-675-adobe-acrobat-reader-dc-annotation-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81976. - [ZDI-26-674: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-674-adobe-acrobat-reader-dc-annotation-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81981. - [ZDI-26-673: Adobe Acrobat Pro DC Doc Object Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-673-adobe-acrobat-pro-dc-doc-object-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81988. - [ZDI-26-672: Adobe Acrobat Reader DC PDF File Parsing Integer Underflow Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-672-adobe-acrobat-reader-dc-pdf-file-parsing-integer-underflow-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-81977. - [ZDI-26-671: Adobe Acrobat Reader DC Dialog Object Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-671-adobe-acrobat-reader-dc-dialog-object-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-80161. - [ZDI-26-670: Adobe Acrobat Pro DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-670-adobe-acrobat-pro-dc-doc-object-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-81991. - [ZDI-26-669: Adobe Acrobat Reader DC JBIG2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-669-adobe-acrobat-reader-dc-jbig2-file-parsing-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-81978. - [ZDI-26-668: Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-668-adobe-acrobat-reader-dc-annotation-use-after-free-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-81984. - [ZDI-26-667: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-667-adobe-acrobat-reader-dc-annotation-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-81975. - [ZDI-26-666: Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-666-adobe-acrobat-reader-dc-jpeg2000-file-parsing-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-79910. - [ZDI-26-665: Adobe Acrobat Reader DC Annots Report Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-665-adobe-acrobat-reader-dc-annots-report-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-79909. - [Google Chrome Zero-day Vulnerability Exploited in the Wild (CVE-2026-87491)](https://securecybervm.com/google-chrome-zero-day-vulnerability-exploited-in-the-wild-cve-2026-87491/): Google released security updates to address 230 vulnerabilities impacting the Chrome browser. One of these vulnerabilities, tracked as CVE-2026-87491, is being exploited in the wild. This is an out-of-bounds write vulnerability in the V8 JavaScript engine. The vulnerability was discovered and reported by Jihyeon Jeong (Compsec Lab, Seoul National University /Research Intern). Source - [ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-647-vmware-workstation-vmxnet3-tso-segmentation-integer-overflow-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-59346. - [ZDI-26-646: Progress Software Kemp LoadMaster escape_quotes Uninitialized Memory Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-646-progress-software-kemp-loadmaster-escape_quotes-uninitialized-memory-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-8037. - [ZDI-26-645: Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-645-fortinet-fortisandbox-write_remote_backup_to_crontab-cronvalue-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-84387. - [ZDI-26-644: Oracle VirtualBox VMSVGA Race Condition Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-644-oracle-virtualbox-vmsvga-race-condition-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-60155. - [ZDI-26-643: Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-643-oracle-virtualbox-vmsvga-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.1. The following CVEs are assigned: CVE-2026-60162. - [ZDI-26-642: Oracle VirtualBox IDisplay Out-Of-Bounds Read Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-642-oracle-virtualbox-idisplay-out-of-bounds-read-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-60159. - [ZDI-26-641: Oracle VirtualBox VirtioSCSI Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-641-oracle-virtualbox-virtioscsi-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.1. The following CVEs are assigned: CVE-2026-71114. - [ZDI-26-640: Oracle VirtualBox VirtioSCSI Uninitialized Memory Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-640-oracle-virtualbox-virtioscsi-uninitialized-memory-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.3. The following CVEs are assigned: CVE-2026-71132. - [ZDI-26-639: Oracle VirtualBox VMSVGA Heap-based Buffer Overflow Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-639-oracle-virtualbox-vmsvga-heap-based-buffer-overflow-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-71116. - [ZDI-26-638: Oracle Outside In Technology WPS File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-638-oracle-outside-in-technology-wps-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle Outside In Technology. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-60414. - [ZDI-26-637: Oracle Outside In Technology GEM File Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-637-oracle-outside-in-technology-gem-file-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle Outside In Technology. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-60413. - [ZDI-26-636: Oracle Outside In Technology PostScript File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-636-oracle-outside-in-technology-postscript-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle Outside In Technology. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-60412. - [ZDI-26-635: Oracle Outside In Technology PDF File Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-635-oracle-outside-in-technology-pdf-file-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle Outside In Technology. User interaction is required to exploit this vulnerability in that the target must open a malicious file or visit a malicious page. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-60392. - [ZDI-26-634: Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-634-flowise-csv-agent-prompt-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-70477. - [ZDI-26-633: GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-633-gimp-psp-file-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-4153. - [Microsoft Patch Tuesday, September 2026 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-september-2026-security-update-review/): Microsoft kicks off September with its monthly Patch Tuesday release, delivering fixes for security vulnerabilities affecting products. The security updates are packed with security fixes, providing organizations with important updates to help protect their environments from emerging threats. This Patch Tuesday is Microsoft’s largest security update ever, marking a significant increase over… Source - [ZDI-26-622: Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-622-microsoft-windows-ikev2-aes-gcm-decryption-integer-underflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. Authentication is not required to exploit this vulnerability, but only systems with specific IPsec configurations are vulnerable. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-50696. - [ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-621-microsoft-windows-umpddrvrealizebrush-improper-object-management-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-62712. - [ZDI-26-620: Microsoft Windows UMPDDrvPlgBlt Improper Object Management Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-620-microsoft-windows-umpddrvplgblt-improper-object-management-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-62712. - [ZDI-26-619: Microsoft Windows UMPDDrvStretchBltROP Improper Object Management Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-619-microsoft-windows-umpddrvstretchbltrop-improper-object-management-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-62712. - [ZDI-26-618: Microsoft Windows UMPDDrvStretchBlt Improper Object Management Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-618-microsoft-windows-umpddrvstretchblt-improper-object-management-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-62712. - [ZDI-26-617: Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-617-microsoft-windows-midi-service-incorrect-permission-assignment-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-66804. - [ZDI-26-616: Koha Eval Code Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-616-koha-eval-code-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-19780. - [Google Chrome Zero-day Vulnerability Exploited in the Wild (CVE-2026-85046)](https://securecybervm.com/google-chrome-zero-day-vulnerability-exploited-in-the-wild-cve-2026-85046/): Google released security updates to address 12 vulnerabilities impacting the Chrome browser. One of these vulnerabilities, tracked as CVE-2026-85046, is being exploited in the wild. CVE-2026-85046 is a type confusion vulnerability in the V8 JavaScript engine. CISA acknowledged the active exploitation of the vulnerability by adding it to its Known Exploited Vulnerabilities Catalog. CISA urges users - [CISA Warns of SonicWall SMA1000 Vulnerabilities Active Exploitation (CVE-2026-83548 & CVE-2026-83549)](https://securecybervm.com/cisa-warns-of-sonicwall-sma1000-vulnerabilities-active-exploitation-cve-2026-83548-cve-2026-83549/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns users about the active exploitation of two vulnerabilities affecting the SonicWall SMA1000. CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog, urging users to patch it before September 5, 2026. SonicWall SMA1000 (Secure Mobile Access 1000 Series) is an enterprise-grade secure remote access gateway. It’s a VPN and - [CISA Added JFrog Artifactory Vulnerability to its Known Exploited Vulnerabilities Catalog (CVE-2026-82329)](https://securecybervm.com/cisa-added-jfrog-artifactory-vulnerability-to-its-known-exploited-vulnerabilities-catalog-cve-2026-82329/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns users about the active exploitation of a vulnerability impacting JFrog Artifactory, tracked as CVE-2026-82329. CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog, urging users to patch it before September 5, 2026. JFrog Artifactory is a universal artifact repository manager — a central store for the binary - [Langflow Remote Code Execution Vulnerability Exploited in Attacks (CVE-2026-0768)](https://securecybervm.com/langflow-remote-code-execution-vulnerability-exploited-in-attacks-cve-2026-0768/): A vulnerability impacting Langflow is being exploited in the wild. Tracked as CVE-2026-0768, the vulnerability has a critical severity rating with a CVSS score of 9.8. Successful exploitation of the vulnerability may allow a remote attacker to execute arbitrary code on affected installations of Langflow. Peter Girnus, William Gamazo Sanchez, and Alfredo Oliveira of Trend Research have discovered and reported the vulnerability to Langflow. Langflow is - [ZDI-26-615: (0Day) pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-615-0day-pdfforge-pdf-architect-activation-service-update-service-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. - [ZDI-26-614: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-614-0day-pdfforge-pdf-architect-pdf-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. - [ZDI-26-613: (0Day) pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-613-0day-pdfforge-pdf-architect-pdf-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. - [ZDI-26-612: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-612-0day-pdfforge-pdf-architect-pdf-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. - [ZDI-26-611: (0Day) pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-611-0day-pdfforge-pdf-architect-app-object-out-of-bounds-read-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. - [Veeam Released Patches for Critical Vulnerability (CVE-2026-65641)](https://securecybervm.com/veeam-released-patches-for-critical-vulnerability-cve-2026-65641/): Veeam released a security advisory addressing a vulnerability affecting Veeam ONE. Tracked as CVE-2026-65641, the vulnerability has a critical severity rating with a CVSS score of 9.3. Successful exploitation of the vulnerability may allow an unauthenticated network attacker to coerce SMB authentication from the service account. Veeam ONE is a monitoring, reporting, and capacity planning software - [PaperCut NG/MF Zero-day Vulnerability Exploited in the Attacks (CVE-2026-82078 & CVE-2026-81578)](https://securecybervm.com/papercut-ng-mf-zero-day-vulnerability-exploited-in-the-attacks-cve-2026-82078-cve-2026-81578/): PaperCut released an Urgent Security Advisory to address two actively exploited vulnerabilities, tracked as CVE-2026-82078 & CVE-2026-81578, impacting all versions of PaperCut NG and PaperCut MF. When chained together, these vulnerabilities can enable pre-authentication remote code execution in the PaperCut Application Server. The flaw originates from a request-confusion/authorization gap. The vendor has mentioned in their - [CISA Warns of Zimbra OS Command Injection Vulnerability Active Exploitation (CVE-2026-73570)](https://securecybervm.com/cisa-warns-of-zimbra-os-command-injection-vulnerability-active-exploitation-cve-2026-73570/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns users about the active exploitation of Zimbra vulnerability, tracked as CVE-2026-73570. CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog, urging users to patch it before August 24, 2026. The vulnerability exists in the SNMP monitoring component when SNMP notifications are enabled. Successful exploitation of the vulnerability - [ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-610-apple-safari-javascriptcore-b3-reducestrength-phase-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-64715. - [ZDI-26-609: Linux Kernel Net Scheduler Packet Classifier Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-609-linux-kernel-net-scheduler-packet-classifier-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. - [ZDI-26-608: Linux Kernel KVM IOAPIC Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-608-linux-kernel-kvm-ioapic-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. - [ZDI-26-607: Microsoft Office HTML Injection Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-607-microsoft-office-html-injection-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.6. - [ZDI-26-606: Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-606-microsoft-windows-compatibility-appraiser-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code in the context of LOCAL SERVICE on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. - [ZDI-26-605: Microsoft Windows Localized Filenames Improper Input Validation NTLM Response Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-605-microsoft-windows-localized-filenames-improper-input-validation-ntlm-response-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-50508. - [ZDI-26-604: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-604-foxit-pdf-reader-annotation-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-13126. - [ZDI-26-603: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-603-foxit-pdf-reader-annotation-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-13127. - [ZDI-26-602: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-602-foxit-pdf-reader-doc-object-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-13128. - [ZDI-26-601: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-601-foxit-pdf-reader-annotation-use-after-free-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-13129. - [ZDI-26-600: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-600-foxit-pdf-reader-annotation-use-after-free-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-57237. - [ZDI-26-599: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-599-foxit-pdf-reader-annotation-use-after-free-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-57238. - [ZDI-26-598: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-598-foxit-pdf-reader-acroform-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-57242. - [ZDI-26-597: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-597-foxit-pdf-reader-acroform-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-57252. - [ZDI-26-596: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-596-foxit-pdf-reader-pdf-file-parsing-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-57253. - [Oracle Critical Patch Update, August 2026 Security Update Review](https://securecybervm.com/oracle-critical-patch-update-august-2026-security-update-review/): Oracle released its August edition of Critical Patch Update. The update received patches for 943 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products. In this Oracle Critical Patch Update, Oracle Fusion Middleware and Oracle Hyperion received the highest number of patches, 262. - [CISA Warns of Apple macOS Vulnerability Exploited in Attack (CVE-2026-65400)](https://securecybervm.com/cisa-warns-of-apple-macos-vulnerability-exploited-in-attack-cve-2026-65400/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently acknowledged the active exploitation of the macOS vulnerability. Tracked as CVE-2026-65400, the vulnerability affects macOS Tahoe, macOS Sequoia, and macOS Sonoma. CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog, urging users to patch it before August 21, 2026. Alfredo Pesoli via Bynario Atlas discovered and reported the vulnerability to Apple. The authentication flaw impacts the - [ZDI-26-584: dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service Vulnerability](https://securecybervm.com/zdi-26-584-dnsmasq-dnssec-nsec-nsec3-type-bitmap-processing-infinite-loop-denial-of-service-vulnerability/): This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of dnsmasq. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-4890. - [ZDI-26-583: Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-583-clam-antivirus-7z-archive-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Clam AntiVirus. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 8.4. The following CVEs are assigned: CVE-2026-20215. - [ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-582-cisco-identity-services-engine-patchupdatelistener-directory-traversal-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Identity Services Engine. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are assigned: CVE-2026-20148. - [ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-581-cisco-identity-services-engine-invokescript-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Identity Services Engine. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-20147. - [ZDI-26-580: Cisco Identity Services Engine Missing Authentication for Critical Function Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-580-cisco-identity-services-engine-missing-authentication-for-critical-function-information-disclosure-vulnerability/): The vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Identity Services Engine. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-20190. - [ZDI-26-579: Cisco Identity Services Engine zipFiles Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-579-cisco-identity-services-engine-zipfiles-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Identity Services Engine. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-20181. - [ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-578-nginx-http-dav-module-alias-directive-integer-underflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NGINX. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-27654. - [ZDI-26-577: Trend Micro VPN OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-577-trend-micro-vpn-openssl-configuration-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro VPN. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2026-67212. - [ZDI-26-576: Linux Kernel XFRM Race Condition Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-576-linux-kernel-xfrm-race-condition-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-26-575: Linux Kernel Net Scheduler Packet Classifier API Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-575-linux-kernel-net-scheduler-packet-classifier-api-time-of-check-time-of-use-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-26-574: Linux Kernel Net Scheduler Connection Tracking Race Condition Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-574-linux-kernel-net-scheduler-connection-tracking-race-condition-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-46319. - [ZDI-26-573: Linux Kernel KSMBD Response Header Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-573-linux-kernel-ksmbd-response-header-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Linux Kernel KSMBD. Authentication is not required to exploit this vulnerability. However, only systems with ksmbd enabled are vulnerable. The ZDI has assigned a CVSS rating of 9.3. - [ZDI-26-572: Linux Kernel XFRM Race Condition Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-572-linux-kernel-xfrm-race-condition-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-26-571: Linux Kernel Net Scheduler Packet Classifier API Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-571-linux-kernel-net-scheduler-packet-classifier-api-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-64530. - [ZDI-26-570: Linux Kernel IGMP Subsystem Race Condition Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-570-linux-kernel-igmp-subsystem-race-condition-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. - [Cisco ASA and FTD DoS Vulnerability Exploited in the Wild (CVE-2026-20349)](https://securecybervm.com/cisco-asa-and-ftd-dos-vulnerability-exploited-in-the-wild-cve-2026-20349/): Cisco released a security advisory to address a high-severity vulnerability tracked as CVE-2026-20349. The vulnerability impacts the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. Successful exploitation of this vulnerability could allow an unauthenticated, remote attacker to cause the affected device - [ZDI-26-563: (Pwn2Own) Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery Vulnerability](https://securecybervm.com/zdi-26-563-pwn2own-home-assistant-green-simple-service-discovery-protocol-server-side-request-forgery-vulnerability/): This vulnerability allows network-adjacent attackers to initiate arbitrary server-side requests on affected installations of Home Assistant Green. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.4. - [ZDI-26-562: (Pwn2Own) Home Assistant Green mDNS Server-Side Request Forgery Vulnerability](https://securecybervm.com/zdi-26-562-pwn2own-home-assistant-green-mdns-server-side-request-forgery-vulnerability/): This vulnerability allows network-adjacent attackers to initiate arbitrary server-side requests on affected installations of Home Assistant Green. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.4. - [ZDI-26-561: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-561-pwn2own-home-assistant-green-go2rtc-command-injection-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Home Assistant Green. An attacker must first obtain the ability to access the device's localhost interface. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-26-560: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-560-pwn2own-home-assistant-green-go2rtc-command-injection-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Home Assistant Green. An attacker must first obtain the ability to access the device's localhost interface. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-26-559: (Pwn2Own) Amazon Smart Plug OTA Update Process Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-559-pwn2own-amazon-smart-plug-ota-update-process-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Amazon Smart Plug. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-26-558: (Pwn2Own) Amazon Smart Plug OTA Update Process Improper Certificate Validation Vulnerability](https://securecybervm.com/zdi-26-558-pwn2own-amazon-smart-plug-ota-update-process-improper-certificate-validation-vulnerability/): This vulnerability allows network-adjacent attackers to bypass certificate validation for OTA updates on affected installations of Amazon Smart Plug. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. - [ZDI-26-557: (Pwn2Own) Amazon Smart Plug Insecure Fallback Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-557-pwn2own-amazon-smart-plug-insecure-fallback-information-disclosure-vulnerability/): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Amazon Smart Plug. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.3. - [Microsoft Patch Tuesday, August 2026 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-august-2026-security-update-review/): The August 2026 Microsoft Patch Tuesday release delivers security fixes for vulnerabilities affecting a wide range of Microsoft products and services. As attackers continue to exploit unpatched vulnerabilities, timely patching remains critical for reducing exposure and strengthening enterprise security. This month’s release addresses 421 vulnerabilities, including 62 critical and 357 important-severity vulnerabilities. In this month’s updates, Microsoft has addressed three zero-day vulnerabilities: two publicly disclosed and one exploited - [ZDI-26-556: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-556-parallels-ras-client-rdp-backend-service-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-18263. - [ZDI-26-555: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-555-parallels-ras-client-rdp-backend-service-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-18262. - [ZDI-26-554: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-554-parallels-ras-client-rdp-backend-service-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-13121. - [ZDI-26-553: OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-553-originlab-origin-viewer-ogw-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-18294. - [ZDI-26-552: OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-552-originlab-origin-viewer-opj-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-18293. - [ZDI-26-551: OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-551-originlab-originpro-ogg-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro . User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-18292. - [ZDI-26-550: OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-550-originlab-originpro-ogw-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-18291. - [ZDI-26-549: OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-549-originlab-originpro-ogg-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-18290. - [ZDI-26-548: OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-548-originlab-originpro-opj-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-18289. - [ZDI-26-547: OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-547-originlab-originpro-opju-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab OriginPro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-18288. - [ZDI-26-546: Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-546-flowise-airtable_agent-code-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-69264. - [ZDI-26-545: Flowise CSV_Agent customReadCSV Code Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-545-flowise-csv_agent-customreadcsv-code-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-69256. - [ZDI-26-544: Microsoft Windows Deployment Services Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-544-microsoft-windows-deployment-services-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Microsoft Windows Server. Authentication is not required to exploit this vulnerability. However, only systems with Windows Deployment Services enabled are vulnerable. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-62893. - [ZDI-26-543: Microsoft Windows ICC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-543-microsoft-windows-icc-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. Interaction with the Mscms.dll color management library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-54984. - [ZDI-26-542: Microsoft Windows UMPDDrvBitBlt Improper Object Management Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-542-microsoft-windows-umpddrvbitblt-improper-object-management-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-62712. - [Cisco Addresses Catalyst SD-WAN Software Multiple Vulnerabilities (CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, & CVE-2026-20313)](https://securecybervm.com/cisco-addresses-catalyst-sd-wan-software-multiple-vulnerabilities-cve-2026-20303-cve-2026-20304-cve-2026-20310-cve-2026-20312-cve-2026-20313/): Cisco released a security advisory addressing five vulnerabilities affecting Catalyst SD-WAN Software. Three of these vulnerabilities have been given a critical severity rating with a CVSS score of 9.9. These vulnerabilities were disclosed during internal testing conducted by the Cisco team. The vulnerabilities are not known to be exploited in the wild. Cisco Catalyst SD-WAN Manager is a centralized - [Cisco IOS XE Software Multiple Vulnerabilities (CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, & CVE-2026-20273)](https://securecybervm.com/cisco-ios-xe-software-multiple-vulnerabilities-cve-2026-20267-cve-2026-20268-cve-2026-20269-cve-2026-20270-cve-2026-20271-cve-2026-20272-cve-2026-20273/): Cisco releases security patches to address seven vulnerabilities impacting Cisco IOS XE Software. Only one of these vulnerabilities has given a critical severity rating with a CVSS score of 9.0. These vulnerabilities were disclosed during internal testing conducted by the Cisco team. The vulnerabilities are not known to be exploited in the wild. Cisco IOS - [ZDI-26-526: (0Day) PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-526-0day-pax-technology-q80-application-installer-signature-verification-bypass-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-26-525: (0Day) PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-525-0day-pax-technology-q80-aip-file-parsing-link-following-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-26-524: (0Day) PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability](https://securecybervm.com/zdi-26-524-0day-pax-technology-q80-xcb-daemon-missing-authentication-vulnerability/): This vulnerability allows network-adjacent attackers to disclose sensitive information and modify configuration on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.1. - [CISA Warns of Cisco Secure Firewall Management Center Vulnerability (CVE-2026-20316)](https://securecybervm.com/cisa-warns-of-cisco-secure-firewall-management-center-vulnerability-cve-2026-20316/): CISA has warned U.S. government agencies about an actively exploited vulnerability impacting Cisco Secure Firewall Management Center. CISA added the CVE-2026-20316 to its Known Exploited Vulnerabilities Catalog, urging users to patch it before August 1, 2026. Successful exploitation of this vulnerability could allow an attacker to log in to the affected system and access sensitive data as - [JetBrains TeamCity Remote Code Execution Vulnerability (CVE-2026-63077)](https://securecybervm.com/jetbrains-teamcity-remote-code-execution-vulnerability-cve-2026-63077/): JetBrains released a security advisory addressing a critical severity vulnerability impacting TeamCity On-Premises. Tracked as CVE-2026-63077, successful exploitation of the vulnerability may allow an unauthenticated attacker to bypass authentication checks and execute arbitrary operating system commands. JetBrains mentioned in their advisory that they are not aware of any active exploitation of this vulnerability. TeamCity is a general-purpose CI/CD software platform that enables - [ZDI-26-523: Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-523-hugging-face-pytorch-image-models-checkpoint-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face PyTorch Image Models. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-15679. - [ZDI-26-522: Phoenix Contact CHARX SEC-3000 Insertion of Sensitive Information into Log File Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-522-phoenix-contact-charx-sec-3000-insertion-of-sensitive-information-into-log-file-information-disclosure-vulnerability/): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Phoenix Contact CHARX SEC-3000 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-41032. - [ZDI-26-521: Phoenix Contact CHARX SEC-3000 Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-521-phoenix-contact-charx-sec-3000-command-injection-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3000 devices. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-44095. - [ZDI-26-520: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Jupicore External Control of Path Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-520-pwn2own-phoenix-contact-charx-sec-3150-jupicore-external-control-of-path-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-44103. - [ZDI-26-519: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-519-pwn2own-phoenix-contact-charx-sec-3150-charxsystemconfigmanager-configuration-injection-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-44099. - [ZDI-26-518: (Pwn2Own) Phoenix Contact CHARX SEC-3150 MQTT Service Server-Side Request Forgery Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-518-pwn2own-phoenix-contact-charx-sec-3150-mqtt-service-server-side-request-forgery-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to access internal resources on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2026-44091. - [ZDI-26-517: (Pwn2Own) Phoenix Contact CHARX SEC-3150 BackendURL WebSocket Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-517-pwn2own-phoenix-contact-charx-sec-3150-backendurl-websocket-command-injection-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Phoenix Contact CHARX SEC-3150 devices. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-44098. - [ZDI-26-516: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability](https://securecybervm.com/zdi-26-516-pwn2own-phoenix-contact-charx-sec-3150-modbus-server-exposed-dangerous-function-denial-of-service-vulnerability/): This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-44090. - [ZDI-26-515: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-jupicore Missing Authentication Configuration Modification Vulnerability](https://securecybervm.com/zdi-26-515-pwn2own-phoenix-contact-charx-sec-3150-charx-jupicore-missing-authentication-configuration-modification-vulnerability/): This vulnerability allows network-adjacent attackers to modify configuration on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.2. The following CVEs are assigned: CVE-2026-44100. - [ZDI-26-514: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Failing Open Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-514-pwn2own-phoenix-contact-charx-sec-3150-failing-open-authentication-bypass-vulnerability/): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-44094. - [ZDI-26-513: (Pwn2Own) Phoenix Contact CHARX SEC-3150 update2-upload Arbitrary File Upload Vulnerability](https://securecybervm.com/zdi-26-513-pwn2own-phoenix-contact-charx-sec-3150-update2-upload-arbitrary-file-upload-vulnerability/): This vulnerability allows network-adjacent attackers to upload arbitrary files on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 2.4. The following CVEs are assigned: CVE-2026-44097. - [ZDI-26-512: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability](https://securecybervm.com/zdi-26-512-pwn2own-phoenix-contact-charx-sec-3150-modbus-server-exposed-dangerous-function-denial-of-service-vulnerability/): This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-44107. - [ZDI-26-511: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Symlink Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-511-pwn2own-phoenix-contact-charx-sec-3150-user-applications-symlink-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Phoenix Contact CHARX SEC-3150 devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-44093. - [ZDI-26-510: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Missing Cryptographic Signature Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-510-pwn2own-phoenix-contact-charx-sec-3150-missing-cryptographic-signature-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to bypass firmware validation on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-44104. - [ZDI-26-509: (Pwn2Own) Phoenix Contact CHARX SEC-3150 OCPP Missing Authentication for Critical Function Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-509-pwn2own-phoenix-contact-charx-sec-3150-ocpp-missing-authentication-for-critical-function-authentication-bypass-vulnerability/): This vulnerability allows network-adjacent attackers to modify configuration on affected installations of Phoenix Contact CHARX SEC-3150 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.0. The following CVEs are assigned: CVE-2026-44101. - [VMware ESX, vCenter, Workstation, and Fusion Multiple Vulnerabilities](https://securecybervm.com/vmware-esx-vcenter-workstation-and-fusion-multiple-vulnerabilities/): Broadcom has released a security advisory addressing five vulnerabilities affecting VMware ESX, vCenter, Workstation, and Fusion. Three of these vulnerabilities, tracked as CVE-2026-59309, CVE-2026-59310, and CVE-2026-47876, have been given critical severity ratings. CVE-2026-59309: vCenter Authentication Bypass Vulnerability This is an authentication bypass vulnerability in VMware vCenter’s VMware Directory Service. The threat actor must have network access to vCenter to exploit this vulnerability. Successful - [ZDI-26-501: WatchGuard FireWare OS sigd comp_start_cb Directory Traversal Arbitrary File Creation Vulnerability](https://securecybervm.com/zdi-26-501-watchguard-fireware-os-sigd-comp_start_cb-directory-traversal-arbitrary-file-creation-vulnerability/): This vulnerability allows remote attackers to create arbitrary files on affected installations of WatchGuard FireWare OS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-13054. - [ZDI-26-500: WatchGuard FireWare OS networkd network_wireless_kick_off_user_cb Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-500-watchguard-fireware-os-networkd-network_wireless_kick_off_user_cb-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-13050. - [ZDI-26-499: WatchGuard FireWare OS cli Token Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-499-watchguard-fireware-os-cli-token-parser-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.7. The following CVEs are assigned: CVE-2026-13053. - [ZDI-26-498: TrendAI Vision One Incorrect Privilege Assignment Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-498-trendai-vision-one-incorrect-privilege-assignment-privilege-escalation-vulnerability/): This vulnerability allows remote attackers to escalate privileges on affected installations of TrendAI Vision One. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2025-71387. - [ZDI-26-497: TrendAI Vision One Service Gateway Logs Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-497-trendai-vision-one-service-gateway-logs-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of TrendAI Vision One. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.7. The following CVEs are assigned: CVE-2025-71386. - [ZDI-26-496: Trend AI Cleaner One Pro Link Following Arbitrary File Deletion Vulnerability](https://securecybervm.com/zdi-26-496-trend-ai-cleaner-one-pro-link-following-arbitrary-file-deletion-vulnerability/): This vulnerability allows local attackers to delete arbitrary files on affected installations of Trend Micro Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.6. The following CVEs are assigned: CVE-2026-62660. - [ZDI-26-495: (Pwn2Own) VMware ESXi VMXNET3 espQueueMask Out-Of-Bounds Write Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-495-pwn2own-vmware-esxi-vmxnet3-espqueuemask-out-of-bounds-write-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of VMware ESXi. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2026-47876. - [ZDI-26-494: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-494-apple-macos-usd-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-43729. - [ZDI-26-493: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-493-apple-macos-usd-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-43733. - [ZDI-26-492: Apple macOS ImageIO Numeric Truncation Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-492-apple-macos-imageio-numeric-truncation-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-43780. - [ZDI-26-491: Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-491-apple-macos-coreaudio-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-43673. - [ZDI-26-490: (Pwn2Own) Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-490-pwn2own-kenwood-dnr1007xr-usb-incorrect-default-permissions-local-privilege-escalation-vulnerability/): This vulnerability allows physically present attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.6. The following CVEs are assigned: CVE-2026-18273. - [ZDI-26-489: (Pwn2Own) Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability](https://securecybervm.com/zdi-26-489-pwn2own-kenwood-dnr1007xr-startupdateprocess-command-injection-vulnerability/): This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-18272. - [ZDI-26-488: (Pwn2Own) Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability](https://securecybervm.com/zdi-26-488-pwn2own-kenwood-dnr1007xr-vcardparser-heap-based-buffer-overflow-code-execution-vulnerability/): This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-18271. - [ZDI-26-487: (Pwn2Own) Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-487-pwn2own-kenwood-dnr1007xr-udhcpd-incorrect-permission-assignment-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Kenwood DNR1007XR devices. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-18270. - [Adobe Releases Patches for Multiple Critical Vulnerabilities](https://securecybervm.com/adobe-releases-patches-for-multiple-critical-vulnerabilities/): Adobe released two security advisories addressing nine vulnerabilities affecting the Adobe Bridge and Adobe Format Plugins. All these vulnerabilities have critical severity ratings given by Adobe. Adobe Bridge is a free digital asset manager and file browser created by Adobe Inc. It allows users to preview, organize, and batch-process creative files without requiring a formal import process. Adobe format plugins are specialized software add-ons that enable Adobe applications such as Photoshop, - [ZDI-26-452: Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability](https://securecybervm.com/zdi-26-452-dify-ai-workflow-oauth_redirect_url-open-redirect-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Dify. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 5.4. - [ZDI-26-451: Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability](https://securecybervm.com/zdi-26-451-docker-desktop-for-macos-inference-server-permissive-allow-list-sandbox-escape-vulnerability/): This vulnerability allows local attackers to escape the model runner sandbox on affected installations of Docker Desktop for macOS. An attacker must first obtain the ability to execute low-privileged code within the sandbox in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. - [ZDI-26-450: AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-450-azeotech-daqfactory-ctl-file-parsing-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-12921. - [ZDI-26-449: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-449-azeotech-daqfactory-ctl-file-parsing-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-12390. - [ZDI-26-448: Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-448-bitdefender-total-security-shredder-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-6851. - [ZDI-26-447: Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-447-heimdall-data-database-proxy-generatefilecontent-crlf-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-12357. - [Oracle Critical Patch Update, July 2026 Security Update Review](https://securecybervm.com/oracle-critical-patch-update-july-2026-security-update-review/): Oracle released its third quarterly edition of this year’s Critical Patch Update. The update received patches for 1449 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products. In this quarterly Oracle Critical Patch Update, Oracle E-Business Suite received the highest - [ZDI-26-446: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-446-microsoft-windows-wmi-providers-incorrect-authorization-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2026-50297. - [ZDI-26-445: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-445-microsoft-windows-wmi-providers-incorrect-authorization-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2026-50325. - [WordPress wp2shell Vulnerabilities Exploited in the Wild (CVE-2026-63030 & CVE-2026-60137)](https://securecybervm.com/wordpress-wp2shell-vulnerabilities-exploited-in-the-wild-cve-2026-63030-cve-2026-60137/): Threat actors have released public exploit code for the WordPress core remote code execution vulnerabilities, named wp2shell. Tracked as CVE-2026-63030 and CVE-2026-60137, the vulnerabilities can be chained together to achieve pre-authentication remote code execution. Adam Kues of Searchlight Cyber discovered and reported the vulnerability to WordPress. The article mentioned that more than 500 million websites use WordPress, which - [Mozilla Firefox Zero-day Vulnerabilities Exploited in Attacks (CVE-2026-15718 & CVE-2026-15719)](https://securecybervm.com/mozilla-firefox-zero-day-vulnerabilities-exploited-in-attacks-cve-2026-15718-cve-2026-15719/): Mozilla released a security update to address two vulnerabilities impacting the Firefox browser, tracked as CVE-2026-15718 & CVE-2026-15719. Mozilla mentioned in the advisory that they are aware that exploit code for this is public; however, they are unaware of any attacks in the wild abusing this flaw. CVE-2026-15718 This is an invalid pointer vulnerability exists - [ZDI-26-444: 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-444-7-zip-xz-decompression-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2026-14266. - [ZDI-26-443: Linux Kernel vmwgfx Integer Overflow Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-443-linux-kernel-vmwgfx-integer-overflow-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. - [ZDI-26-442: Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-442-linux-kernel-can-iso-tp-protocol-race-condition-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. - [ZDI-26-441: dnsmasq DNS Response Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-441-dnsmasq-dns-response-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of dnsmasq. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-2291. - [ZDI-26-440: Fuji Electric Tellus pcid64 Driver Untrusted Pointer Dereference Denial of Service Vulnerability](https://securecybervm.com/zdi-26-440-fuji-electric-tellus-pcid64-driver-untrusted-pointer-dereference-denial-of-service-vulnerability/): This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Fuji Electric Tellus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2026-8108. - [ZDI-26-439: Fuji Electric Tellus pcid64 Driver Exposed Dangerous Method Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-439-fuji-electric-tellus-pcid64-driver-exposed-dangerous-method-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Fuji Electric Tellus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-8108. - [ZDI-26-438: Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-438-rockwell-automation-arena-simulation-doe-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-6071. - [ZDI-26-437: (Pwn2Own) Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-437-pwn2own-autel-maxicharger-ac-elite-home-websockets-integer-underflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-13308. - [ZDI-26-436: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability](https://securecybervm.com/zdi-26-436-pwn2own-autel-maxicharger-ac-elite-home-usb-heap-based-buffer-overflow-arbitrary-code-execution-vulnerability/): This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-13307. - [ZDI-26-435: (Pwn2Own) Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability](https://securecybervm.com/zdi-26-435-pwn2own-autel-maxicharger-ac-elite-home-nfc-stack-based-buffer-overflow-arbitrary-code-execution-vulnerability/): This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2026-13309. - [ZDI-26-434: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-434-pwn2own-autel-maxicharger-ac-elite-home-usb-authentication-bypass-vulnerability/): This vulnerability allows physically present attackers to bypass authentication on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.3. The following CVEs are assigned: CVE-2026-13306. - [ZDI-26-433: (Pwn2Own) Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability](https://securecybervm.com/zdi-26-433-pwn2own-autel-maxicharger-ac-elite-home-software-update-improper-verification-of-cryptographic-signature-arbitrary-code-execution-vulnerability/): This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.4. The following CVEs are assigned: CVE-2026-13305. - [ZDI-26-432: G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-432-g-data-total-security-backup-service-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-13268. - [ZDI-26-431: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-431-asus-business-manager-service-client-side-authentication-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of ASUS Business Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-8921. - [ZDI-26-430: MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-430-msi-center-ntiolib_x64-origin-validation-error-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of MSI Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-6102. - [Microsoft Patch Tuesday, July 2026 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-july-2026-security-update-review/): Microsoft’s July 2026 Patch Tuesday delivers security updates for a broad range of products and services, including several vulnerabilities that pose significant risks to enterprise environments. As attackers continue to target unpatched systems, timely deployment of these updates remains one of the most effective defenses against exploitation. This blog provides an overview of the month’s key security fixes, highlights - [CISA Warns About Langflow Authorization Bypass Vulnerability Exploitation (CVE-2026-55255)](https://securecybervm.com/cisa-warns-about-langflow-authorization-bypass-vulnerability-exploitation-cve-2026-55255/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently acknowledged the active exploitation of the Langflow vulnerability. Tracked as CVE-2026-55255, the vulnerability may allow an authenticated attacker to execute another user’s flow by specifying the victim’s flow ID in the request. The vendor has given this vulnerability a critical severity rating with a CVSS score of 9.9. CISA added the vulnerability to - [ZDI-26-403: (0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability](https://securecybervm.com/zdi-26-403-0day-ollama-downloadblob-improper-validation-of-array-index-denial-of-service-vulnerability/): This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-26-402: (0Day) Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-402-0day-glarysoft-glary-utilities-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. - [ZDI-26-401: (0Day) AnyDesk Support Information Link Following Denial-of-Service Vulnerability](https://securecybervm.com/zdi-26-401-0day-anydesk-support-information-link-following-denial-of-service-vulnerability/): This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.7. - [ZDI-26-400: (0Day) AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability](https://securecybervm.com/zdi-26-400-0day-anydesk-screen-recording-link-following-denial-of-service-vulnerability/): This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.7. - [ZDI-26-399: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability](https://securecybervm.com/zdi-26-399-0day-pwn2own-lorex-2k-indoor-wi-fi-security-camera-device-management-server-improper-certificate-validation-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. User interaction is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-26-398: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-398-0day-pwn2own-lorex-2k-indoor-wi-fi-security-camera-cdeviceoperator-format-string-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. - [Adobe Releases Patches for ColdFusion Critical Vulnerabilities](https://securecybervm.com/adobe-releases-patches-for-coldfusion-critical-vulnerabilities/): Adobe released security updates to address 11 vulnerabilities impacting the ColdFusion web app development platform and the Campaign Classic marketing automation platform. Six of these vulnerabilities have a maximum severity that can be exploited in low-complexity attacks without any user interaction. Adobe has mentioned in the advisory that they are unaware of any active exploits of these vulnerabilities. Adobe ColdFusion is a commercial rapid web application - [ZDI-26-397: X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-397-x-org-server-createsaverwindow-use-after-free-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2026-50263. - [ZDI-26-396: X.Org Server ChangeDrawableAttributes Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-396-x-org-server-changedrawableattributes-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2026-50262. - [ZDI-26-395: X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-395-x-org-server-syncchangecounter-use-after-free-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50261. - [ZDI-26-394: X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-394-x-org-server-freecounter-use-after-free-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50260. - [ZDI-26-393: X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-393-x-org-server-setmap-request-stack-based-buffer-overflow-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50259. - [ZDI-26-392: X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-392-x-org-server-xkb-key-types-stack-based-buffer-overflow-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50258. - [ZDI-26-391: X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-391-x-org-server-misyncdestroyfence-use-after-free-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50257. - [ZDI-26-390: X.Org Server Font Alias Stack-based Buffer Overflow Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-390-x-org-server-font-alias-stack-based-buffer-overflow-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-50256. - [ZDI-26-389: Oracle PeopleSoft ExecuteProcessActivityCommand External Control of File Path Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-389-oracle-peoplesoft-executeprocessactivitycommand-external-control-of-file-path-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle PeopleSoft. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-35273. - [ZDI-26-388: Oracle PeopleSoft HubMBeanPersistance Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-388-oracle-peoplesoft-hubmbeanpersistance-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle PeopleSoft. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-35273. - [ZDI-26-387: Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability](https://securecybervm.com/zdi-26-387-oracle-peoplesoft-httplisteningconnector-server-side-request-forgery-vulnerability/): This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Oracle PeopleSoft. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.3. The following CVEs are assigned: CVE-2026-35273. - [ZDI-26-386: Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-386-unraid-web-server-togglestate-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-9773. - [ZDI-26-385: Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-385-unraid-web-server-fileupload-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Unraid. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-9772. - [ZDI-26-384: MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-384-mosaicml-composer-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of MosaicML Composer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-10043. - [ZDI-26-383: ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-383-aten-unizon-docryptohugefiletofile-improper-verification-of-cryptographic-signature-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-9779. - [CVE‑2026‑35273 — Defending Against the Oracle PeopleSoft PSEMHUB Authentication Bypass](https://securecybervm.com/cve‑2026‑35273-defending-against-the-oracle-peoplesoft-psemhub-authentication-bypass/): Summary CVE–2026–35273 is an actively exploited, unauthenticated remote code execution vulnerability in Oracle PeopleSoft Enterprise PeopleTools — not a routine critical–CVE patch. Oracle disclosed it on June 10, 2026 in an out–of–band Security Alert, rating it CVSS 9.8 and placing it in the Updates Environment Management component. Oracle states successful exploitation may result in remote code execution; NVD describes possible takeover of PeopleSoft Enterprise PeopleTools. Reaching sensitive - [Oracle Critical Patch Update, June 2026 Security Update Review](https://securecybervm.com/oracle-critical-patch-update-june-2026-security-update-review/): Oracle released its third quarterly edition of this year’s Critical Patch Update. The update received patches for 245 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products. In this quarterly Oracle Critical Patch Update, Oracle Fusion Middleware received the highest - [Microsoft Defender Zero-day Vulnerability Exploited in Attacks (CVE-2026-50656) (RoguePlanet)](https://securecybervm.com/microsoft-defender-zero-day-vulnerability-exploited-in-attacks-cve-2026-50656-rogueplanet/): Microsoft announced the active exploitation of a Defender zero-day named RoguePlanet. Tracked as CVE-2026-50656, successful exploitation of the vulnerability may allow an attacker to gain SYSTEM-level access. Microsoft mentioned in the advisory that they are aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender. Microsoft Defender is a family of cybersecurity and antivirus solutions developed by Microsoft. It - [Cisco Identity Services Engine RCE and Information Disclosure Vulnerabilities (CVE-2026-20181 & CVE-2026-20190)](https://securecybervm.com/cisco-identity-services-engine-rce-and-information-disclosure-vulnerabilities-cve-2026-20181-cve-2026-20190/): Cisco released security updates to address two vulnerabilities impacting Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC). Tracked as CVE-2026-20181 & CVE-2026-20190, successful exploitation of the vulnerabilities may allow a remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device. Cisco mentioned in their advisory that they are unaware - [Fortinet FortiSandbox Vulnerability Exploited by Attackers (CVE-2026-39808, CVE-2026-25089, & CVE-2026-39813)](https://securecybervm.com/fortinet-fortisandbox-vulnerability-exploited-by-attackers-cve-2026-39808-cve-2026-25089-cve-2026-39813/): Threat actors are exploiting three security vulnerabilities in Fortinet FortiSandbox, tracked as CVE-2026-39808, CVE-2026-25089, & CVE-2026-39813. Successful exploitation of the vulnerabilities could lead to OS command injection, authentication bypass, and privilege escalation. Fortinet FortiSandbox is an advanced threat detection and analysis solution designed to identify and mitigate zero-day malware, ransomware, and targeted cyberattacks. It uses isolated, controlled environments (sandboxes) to safely execute - [CISA Warns of Active Exploitation of Cisco Catalyst SD-WAN Manager Vulnerability (CVE-2026-20262)](https://securecybervm.com/cisa-warns-of-active-exploitation-of-cisco-catalyst-sd-wan-manager-vulnerability-cve-2026-20262/): CISA has warned U.S. government agencies about an actively exploited vulnerability in Cisco Catalyst SD-WAN Manager. Tracked as CVE-2026-20262, successful exploitation of this vulnerability could allow an authenticated, remote attacker to create or overwrite any file on the affected system’s filesystem. CISA has urged users to patch the vulnerability before June 29, 2026. Cisco Catalyst SD-WAN Manager - [ZDI-26-359: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-359-samsung-rlottie-numeric-truncation-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie. Interaction with the rlottie library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-8916. - [ZDI-26-360: MATE Desktop Atril Document Viewer EPUB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-360-mate-desktop-atril-document-viewer-epub-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of MATE Desktop Atril Document Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-52849. - [ZDI-26-358: Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-358-allegra-downloadattachment-cross-site-scripting-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to execute arbitrary script on affected installations of Allegra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 4.6. The following CVEs are assigned: CVE-2026-11443. - [ZDI-26-356: Apache HTTP Server mod_proxy_ajp Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-356-apache-http-server-mod_proxy_ajp-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apache HTTP Server. An attacker must first obtain the ability to compromise an AJP backend associated with the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 3.7. The following CVEs are assigned: CVE-2026-34032. - [ZDI-26-357: Allegra exportReport Directory Traversal Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-357-allegra-exportreport-directory-traversal-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-11442. - [ZDI-26-355: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-355-adobe-acrobat-reader-dc-annotation-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-27220. - [CVE-2026-50751 — Defending Against the Check Point IKEv1 VPN Authentication Bypass](https://securecybervm.com/cve-2026-50751-defending-against-the-check-point-ikev1-vpn-authentication-bypass/): Summary CVE-2026-50751 is an actively exploited authentication-bypass vulnerability in Check Point remote-access VPN — not a generic perimeter flaw. Disclosed by Check Point on June 8, 2026, it sits in deprecated IKEv1 remote-access code paths and lets an unauthenticated remote attacker establish a VPN connection without a valid user password. The confirmed impact is unauthorized VPN session establishment; - [Microsoft Patch Tuesday, June 2026 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-june-2026-security-update-review/): Every Patch Tuesday presents a race between defenders applying fixes and attackers seeking opportunities. Microsoft’s June 2026 release is no exception, delivering security updates for vulnerabilities that could significantly impact enterprise environments if left unaddressed. This month’s release addresses 206 vulnerabilities, including 33 critical and 167 important-severity vulnerabilities. In this month’s updates, Microsoft has addressed three publicly disclosed zero-day vulnerabilities. There were also a massive 360 Microsoft Edge/Chromium vulnerabilities that were fixed by - [Google Zero-day Vulnerability Exploited in the Wild (CVE-2026-11645)](https://securecybervm.com/google-zero-day-vulnerability-exploited-in-the-wild-cve-2026-11645/): Google released security updates to address a large number of vulnerabilities impacting the Chrome browser. Tracked as CVE-2026-11645, this is an out-of-bounds memory access vulnerability in the V8 JavaScript engine. CISA acknowledged the active exploitation of the vulnerability by adding it to its Known Exploited Vulnerabilities Catalog. CISA urges users to patch the vulnerability before June 23, 2026. CVE-2026-11645 is the fifth zero-day vulnerability patched - [ZDI-26-354: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-354-adobe-acrobat-reader-dc-annotation-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-47919. - [ZDI-26-353: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-353-adobe-acrobat-reader-dc-annotation-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-47918. - [ZDI-26-352: Adobe Acrobat Pro DC AcroForm Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-352-adobe-acrobat-pro-dc-acroform-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-47917. - [ZDI-26-351: Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-351-adobe-usd-fileformat-plugins-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe USD-Fileformat-plugins. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-48292. - [ZDI-26-350: Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-350-adobe-usd-fileformat-plugins-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe USD-Fileformat-plugins. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-48291. - [ZDI-26-349: Adobe Acrobat Pro DC Annots.api Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-349-adobe-acrobat-pro-dc-annots-api-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-47915. - [ZDI-26-348: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-348-adobe-acrobat-reader-dc-annotation-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-47914. - [ZDI-26-347: Adobe Acrobat Reader DC Multimedia Rendition Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-347-adobe-acrobat-reader-dc-multimedia-rendition-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-47913. - [ZDI-26-346: Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-346-adobe-acrobat-reader-dc-annotation-use-after-free-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-47924. - [ZDI-26-345: Adobe Acrobat Reader DC Font Handling Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-345-adobe-acrobat-reader-dc-font-handling-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-47912. - [ZDI-26-344: Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-344-adobe-acrobat-reader-dc-doc-object-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-47923. - [ZDI-26-343: Adobe Acrobat Reader DC TIF File Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-343-adobe-acrobat-reader-dc-tif-file-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-47911. - [ZDI-26-342: Progress Software Kemp LoadMaster apiuser Uninitialized Memory Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-342-progress-software-kemp-loadmaster-apiuser-uninitialized-memory-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-8037. - [ZDI-26-341: Progress Software Kemp LoadMaster dolistapikeys Uninitialized Memory Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-341-progress-software-kemp-loadmaster-dolistapikeys-uninitialized-memory-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-8037. - [ZDI-26-340: Progress Software Kemp LoadMaster dodelapikey Uninitialized Memory Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-340-progress-software-kemp-loadmaster-dodelapikey-uninitialized-memory-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-8037. - [Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability Exploited in Attack (CVE-2026-20245)](https://securecybervm.com/cisco-catalyst-sd-wan-manager-privilege-escalation-vulnerability-exploited-in-attack-cve-2026-20245/): Cisco warned of active exploitation of a vulnerability in Catalyst SD-WAN Manager. Tracked as CVE-2026-20245, the vulnerability could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system. Cisco Catalyst SD-WAN Manager is a centralized network management system (NMS) that provides a single pane of glass for configuring, monitoring, and troubleshooting an entire - [ZDI-26-331: (Pwn2Own) Microsoft Edge Feedback Log File Handling Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-331-pwn2own-microsoft-edge-feedback-log-file-handling-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-45495. - [ZDI-26-330: (Pwn2Own) Microsoft Edge Navigation Handling Universal Cross-Site Scripting Vulnerability](https://securecybervm.com/zdi-26-330-pwn2own-microsoft-edge-navigation-handling-universal-cross-site-scripting-vulnerability/): This vulnerability allows remote attackers to execute arbitrary cross-origin script on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 5.0. The following CVEs are assigned: CVE-2026-45494. - [ZDI-26-329: (Pwn2Own) Microsoft Edge Origin Validation Error Security Bypass Vulnerability](https://securecybervm.com/zdi-26-329-pwn2own-microsoft-edge-origin-validation-error-security-bypass-vulnerability/): This vulnerability allows remote attackers to access restricted functionality on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 4.3. The following CVEs are assigned: CVE-2026-45492. - [ZDI-26-328: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-328-asus-business-manager-service-client-side-authentication-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of ASUS Business Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-7480. - [ZDI-26-327: Docker Desktop grpcfuse Kernel Module Uncontrolled Recursion Denial-of-Service Vulnerability](https://securecybervm.com/zdi-26-327-docker-desktop-grpcfuse-kernel-module-uncontrolled-recursion-denial-of-service-vulnerability/): This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code within a container on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-8936. - [Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability (CVE-2026-20230)](https://securecybervm.com/cisco-unified-communications-manager-server-side-request-forgery-vulnerability-cve-2026-20230/): Security researchers identified a critical severity vulnerability impacting Cisco Unified Communications Manager. Tracked as CVE-2026-20230, the vulnerability may allow an attacker to conduct server-side request forgery (SSRF) attacks through an affected device. Cisco Unified Communications Manager (CUCM) is a call-processing and session-management platform that enables enterprises to manage voice, video, messaging, and other collaboration services across devices and locations. It is the central - [CISA Warns of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)](https://securecybervm.com/cisa-warns-of-pan-os-globalprotect-authentication-bypass-vulnerability-cve-2026-0257/): CISA has warned about active exploitation of a vulnerability impacting the GlobalProtect portal and gateway of Palo Alto Networks’ PAN-OS software. Tracked as CVE-2026-0257, the vulnerability may allow a remote unauthenticated attacker to successfully establish a VPN connection through the GlobalProtect gateway of an affected appliance. Palo Alto has also mentioned in their advisory that they are aware of limited exploit attempts on unpatched PAN-OS devices without - [Notepad++ Vulnerabilities Allow Attackers to Execute Arbitrary Code (CVE-2026-48778)](https://securecybervm.com/notepad-vulnerabilities-allow-attackers-to-execute-arbitrary-code-cve-2026-48778/): Notepad++ released a security advisory addressing three vulnerabilities, including two arbitrary code execution flaws, that could allow attackers to silently run malicious code on a victim’s machine. The most critical vulnerability among the three is CVE-2026-48778, which can lead to an arbitrary code execution issue via config.xml files. Notepad++ is a free, open-source text and source - [ZDI-26-326: TrendAI Vision One Security Agent Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-326-trendai-vision-one-security-agent-time-of-check-time-of-use-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-45208. - [ZDI-26-325: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-325-trendai-vision-one-security-agent-origin-validation-error-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-45207. - [ZDI-26-324: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-324-trendai-vision-one-security-agent-origin-validation-error-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-45206. - [ZDI-26-323: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-323-trendai-vision-one-security-agent-origin-validation-error-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-34930. - [ZDI-26-322: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-322-trendai-vision-one-security-agent-origin-validation-error-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-34929. - [ZDI-26-321: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-321-trendai-vision-one-security-agent-origin-validation-error-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-34928. - [ZDI-26-320: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-320-trendai-vision-one-security-agent-origin-validation-error-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of TrendAI Vision One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-34927. - [Drupal Core SQL injection Vulnerability Added to CISA KEV (CVE-2026-9082)](https://securecybervm.com/drupal-core-sql-injection-vulnerability-added-to-cisa-kev-cve-2026-9082/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Drupal Core active exploited vulnerability to its Known Exploited Vulnerabilities catalog. Tracked as CVE-2026-9082, successful exploitation of the vulnerability may allow an attacker to elevate privileges and execute code remotely. CISA urged users to patch the vulnerability before May 27, 2026. Drupal mentioned in the advisory that exploit attempts are now being detected in the wild. Drupal - [ZDI-26-319: Progress Software Kemp LoadMaster addcountry Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-319-progress-software-kemp-loadmaster-addcountry-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-3517. - [ZDI-26-318: Progress Software Kemp LoadMaster ssodomain_killsession Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-318-progress-software-kemp-loadmaster-ssodomain_killsession-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-3518. - [Microsoft Exchange Server Spoofing Vulnerability Exploited in Attack (CVE-2026-42897)](https://securecybervm.com/microsoft-exchange-server-spoofing-vulnerability-exploited-in-attack-cve-2026-42897/): Microsoft has addressed a new security vulnerability impacting on-premises versions of Exchange Server that is being exploited in the wild. Tracked as CVE-2026-42897, the vulnerability may allow an attacker to perform network spoofing. Microsoft Exchange Server is a comprehensive email, calendaring, contact, and collaboration platform developed by Microsoft. It acts as a central hub for organizational - [Cisco Releases Patches for SD-WAN Vulnerability Exploited in the Wild (CVE-2026-20182)](https://securecybervm.com/cisco-releases-patches-for-sd-wan-vulnerability-exploited-in-the-wild-cve-2026-20182/): Cisco warned users about a critical vulnerability impacting the Catalyst SD-WAN Controller, tracked as CVE-2026-20182. Successful exploitation of the vulnerability may allow an attacker to bypass authentication and obtain administrative privileges on an affected system. CISA also acknowledged the active exploitation of the CVE-2026-20182 and added it to its Known Exploited Vulnerabilities Catalog. CISA urged users to patch the vulnerability before May 17, 2026. Cisco mentioned in their advisory - [Linux Kernel Local Privilege Escalation Vulnerability Exploited in Attacks (Fragnesia) (CVE-2026-46300)](https://securecybervm.com/linux-kernel-local-privilege-escalation-vulnerability-exploited-in-attacks-fragnesia-cve-2026-46300/): Cybersecurity researchers have identified a new variant in the DirtyFrag family of Linux local privilege escalation vulnerabilities, named ‘Fragnesia’. Tracked as CVE-2026-46300, successful exploitation of the vulnerability may allow an unprivileged local attacker to modify read-only file contents in the kernel page cache and gain root privileges. The vulnerability has been named Fragnesia because the core bug - [F5 Nginx Remote Code Execution Vulnerability (CVE-2026-42945)](https://securecybervm.com/f5-nginx-remote-code-execution-vulnerability-cve-2026-42945/): Threat researchers identified a critical severity vulnerability in NGINX Plus and NGINX Open, tracked as CVE-2026-42945. The vulnerability discovered by depthfirst is an 18-year-old memory corruption flaw in NGINX Plus and NGINX Open Source. Successful exploitation of the vulnerability may allow an unauthenticated attacker to cause a denial-of-service (DoS) on the NGINX system or to trigger code execution. NGINX is an open-source, high-performance HTTP web server, reverse proxy, - [Ivanti Addresses Multiple Vulnerabilities Impacting EPM, Xtraction, Secure Access Client, & Virtual Traffic Manager](https://securecybervm.com/ivanti-addresses-multiple-vulnerabilities-impacting-epm-xtraction-secure-access-client-virtual-traffic-manager/): Ivanti has released its May 2026 security updates, addressing security vulnerabilities across its popular products. The list of vulnerabilities and impacted products includes: Ivanti Xtraction — CVE-2026-8043 Ivanti Virtual Traffic Manager (vTM) — CVE-2026-8051 Ivanti Secure Access Client — CVE-2026-7431 and CVE-2026-7432 Ivanti Endpoint Manager (EPM) — CVE-2026-8109, CVE-2026-8110, CVE-2026-811 CVE-2026-8043: Ivanti Xtraction Path Traversal & Arbitrary File Write Vulnerability External control of - [Microsoft Patch Tuesday, May 2026 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-may-2026-security-update-review/): May 2026’s Patch Tuesday arrives with Microsoft addressing a fresh set of vulnerabilities across its ecosystem, reinforcing the ongoing need for timely patching in an increasingly threat-heavy landscape. Here’s a quick breakdown of what you need to know. This month’s release addresses 137 vulnerabilities, including 30 critical and 103 important-severity vulnerabilities. In this month’s updates, Microsoft has not addressed any publicly disclosed zero-day vulnerability. Microsoft has addressed 128 vulnerabilities in Microsoft - [ZDI-26-317: Siemens Simcenter Femap IPT File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-317-siemens-simcenter-femap-ipt-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-12659. - [ZDI-26-316: Siemens Simcenter Femap IPT File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-316-siemens-simcenter-femap-ipt-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-12659. - [ZDI-26-315: Apple macOS USD Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-315-apple-macos-usd-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-28941. - [ZDI-26-314: Apple macOS USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-314-apple-macos-usd-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-28940. - [ZDI-26-313: Apple Safari Regular Expression Duplicate Named Groups Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-313-apple-safari-regular-expression-duplicate-named-groups-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-28847. - [ZDI-26-312: Apple Safari Web Inspector WebCore Style Resolver Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-312-apple-safari-web-inspector-webcore-style-resolver-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-28955. - [ZDI-26-311: Apple macOS CoreSymbolication Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-311-apple-macos-coresymbolication-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the CoreSymbolication framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-28918. - [ZDI-26-310: Microsoft Windows splwow64 Race Condition Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-310-microsoft-windows-splwow64-race-condition-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.4. The following CVEs are assigned: CVE-2026-34342. - [ZDI-26-309: Microsoft Windows Message Queueing Double Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-309-microsoft-windows-message-queueing-double-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows that run Message Queueing. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-33838. - [ZDI-26-308: Ivanti Endpoint Manager RemoteControlAuth Exposed Dangerous Method Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-308-ivanti-endpoint-manager-remotecontrolauth-exposed-dangerous-method-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Ivanti Endpoint Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are assigned: CVE-2026-8109. - [Ollama Heap Out-of-bounds Read Vulnerability Leads to Remote Process Memory Leak (CVE-2026-7482)](https://securecybervm.com/ollama-heap-out-of-bounds-read-vulnerability-leads-to-remote-process-memory-leak-cve-2026-7482/): Threat researchers have identified a critical severity vulnerability impacting Ollama. Tracked as CVE-2026-7482, successful exploitation of the vulnerability may allow a remote, unauthenticated attacker to leak the entire process memory. Ollama is an open-source framework that lets users download and run large language models (LLMs) such as Llama 3, Mistral, and DeepSeek directly on their local machine. It simplifies the management of these - [Ivanti Endpoint Manager Mobile Vulnerability Exploited in the Wild (CVE-2026-6973)](https://securecybervm.com/ivanti-endpoint-manager-mobile-vulnerability-exploited-in-the-wild-cve-2026-6973/): Ivanti released security updates to address five high-severity vulnerabilities impacting Endpoint Manager Mobile (EPMM). One of these vulnerabilities, tracked as CVE-202606973, is said to be exploited in zero-day attacks. This Improper Input Validation vulnerability in Ivanti EPMM requires Admin authentication for successful exploitation. A remote authenticated user with administrative access may exploit the vulnerability to execute arbitrary code remotely. Ivanti mentioned in their advisory that they are “aware - [vm2 Sandbox Escape Vulnerability Allows Attackers to Execute Code (CVE-2026-26956)](https://securecybervm.com/vm2-sandbox-escape-vulnerability-allows-attackers-to-execute-code-cve-2026-26956/): Security researchers have identified a critical severity vulnerability impacting the popular Node.js sandboxing library vm2. Tracked as CVE-2026-26956, successful exploitation of the vulnerability allows an attacker to escape the sandbox and execute arbitrary code on the host system. Proof-of-concept code for the vulnerability is publicly available. vm2 is a widely used JavaScript sandbox that can run untrusted code with allowed Node’s built-in modules. Sandboxes are used in modern applications for a variety of functions. vm2 has - [Apache Addresses Multiple Vulnerabilities Impacting the HTTP Server](https://securecybervm.com/apache-addresses-multiple-vulnerabilities-impacting-the-http-server/): Apache has released security updates for the HTTP Server, addressing several security vulnerabilities. One of the vulnerabilities, tracked as CVE-2026-23918, can result in remote code execution. The Apache HTTP Server, colloquially known as Apache, is a free, open-source web server software that serves web content over the Internet. It runs on modern operating systems, including Linux, Unix, Microsoft Windows, and macOS. CVE-2026-23918 Apache described the vulnerability as a double-free issue with - [PAN-OS User-ID Authentication Portal Vulnerability Exploited in Attacks (CVE-2026-0300)](https://securecybervm.com/pan-os-user-id-authentication-portal-vulnerability-exploited-in-attacks-cve-2026-0300/): Palo Alto has warned its users about the active exploitation of a vulnerability in the Palo Alto User-ID Authentication Portal (aka Captive Portal) service running on PAN-OS. Tracked as CVE-2026-0300, the vulnerability has a critical severity rating with a CVSS score of 9.3. Successful exploitation of the vulnerability can lead to arbitrary code execution. Palo Alto has mentioned in their advisory that they are aware - [Linux Kernel Vulnerability Exploited in the Wild (Copy Fail) (CVE-2026-31431)](https://securecybervm.com/linux-kernel-vulnerability-exploited-in-the-wild-copy-fail-cve-2026-31431/): Threat actors are exploiting a vulnerability in the Linux Kernel tracked as CVE-2026-31431. Named Copy Fail, it’s a critical Linux kernel local privilege escalation vulnerability that allows unprivileged users to gain root by corrupting the page cache of setuid binaries via the AF_ALG crypto API. The vulnerability was discovered and reported by Theori and Xint. CISA also acknowledged the active exploitation of the vulnerability - [ZDI-26-307: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-307-flowiseai-flowise-airtable_agent-code-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-41265. - [cPanel and WHM Authentication Bypass Vulnerability Exploited in the Wild (CVE-2026-41940)](https://securecybervm.com/cpanel-and-whm-authentication-bypass-vulnerability-exploited-in-the-wild-cve-2026-41940/): Security researchers have identified a critical severity vulnerability impacting cPanel and WHM (Web Host Manager). Tracked as CVE-2026-41940, the vulnerability is being actively exploited in the wild. Successful exploitation of the vulnerability may allow an attacker to take control over the cPanel host system, its configurations and databases, and the websites it manages. cPanel and - [ZDI-26-306: Oracle VirtualBox SoundBlaster 16 Race Condition Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-306-oracle-virtualbox-soundblaster-16-race-condition-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-35230. - [ZDI-26-305: (0Day) OpenAI Codex Sandbox Escape Vulnerability](https://securecybervm.com/zdi-26-305-0day-openai-codex-sandbox-escape-vulnerability/): This vulnerability allows remote attackers to bypass the sandbox on affected installations of OpenAI Codex. User interaction is required to exploit this vulnerability in that the target must use Codex to process a repository containing malicious JavaScript. The ZDI has assigned a CVSS rating of 8.6. - [ZDI-26-304: Foxit PDF Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-304-foxit-pdf-reader-acroform-annotation-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-5943. - [ZDI-26-303: Foxit PDF Reader AcroForm Signature Use-After-Free Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-303-foxit-pdf-reader-acroform-signature-use-after-free-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-5942. - [ZDI-26-302: Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-302-foxit-pdf-reader-acroform-signature-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-5941. - [ZDI-26-301: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-301-foxit-pdf-reader-annotation-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-5940. - [ZDI-26-300: Flowise AccountService resetPassword Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-300-flowise-accountservice-resetpassword-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on affected installations of Flowise. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-41276. - [ZDI-26-299: Docker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-299-docker-desktop-enhanced-container-isolation-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code within a container in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-6406. - [ZDI-26-298: Siemens SINEC NMS Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-298-siemens-sinec-nms-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on affected installations of Siemens SINEC NMS. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-24032. - [ZDI-26-297: Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-297-siemens-sinec-nms-improper-authentication-privilege-escalation-vulnerability/): This vulnerability allows remote attackers to escalate privileges on affected installations of Siemens SINEC NMS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-25654. - [ZDI-26-296: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-296-delta-electronics-asda-soft-par-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ASDA-Soft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-5726. - [Oracle Critical Patch Update, April 2026 Security Update Review](https://securecybervm.com/oracle-critical-patch-update-april-2026-security-update-review/): Oracle released its second quarterly edition of this year’s Critical Patch Update. The update received patches for 481 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products. In this quarterly Oracle Critical Patch Update, Oracle Communications received - [ZDI-26-295: (0Day) PublicCMS getXml Server-Side Request Forgery Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-295-0day-publiccms-getxml-server-side-request-forgery-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PublicCMS. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. - [ZDI-26-294: (0Day) Microsoft Windows library-ms NTLM Response Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-294-0day-microsoft-windows-library-ms-ntlm-response-information-disclosure-vulnerability/): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must view a folder containing malicious content. The ZDI has assigned a CVSS rating of 3.5. - [ZDI-26-293: (0Day) Microsoft Office URI Handler NTLM Response Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-293-0day-microsoft-office-uri-handler-ntlm-response-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 4.3. - [Apache ActiveMQ Remote Code Execution Vulnerability Added to CISA KEV (CVE-2026-34197)](https://securecybervm.com/apache-activemq-remote-code-execution-vulnerability-added-to-cisa-kev-cve-2026-34197/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns of active exploitation of the Apache ActiveMQ vulnerability (CVE-2026-34197). CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog, urging users to patch before April 30, 2026. Successful exploitation of the vulnerability may allow an attacker to execute arbitrary code on vulnerable installations. Apache ActiveMQ is a popular, open-source, multi-protocol Java-based message broker designed to facilitate communication between distributed - [ZDI-26-292: QNAP TS-453E QVRPro excpostgres Exposed Dangerous Method Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-292-qnap-ts-453e-qvrpro-excpostgres-exposed-dangerous-method-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-453E devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-22898. - [ZDI-26-291: NI LabVIEW LVCLASS File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-291-ni-labview-lvclass-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI LabVIEW. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-32861. - [ZDI-26-290: NI LabVIEW LVLIB File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-290-ni-labview-lvlib-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI LabVIEW. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-32860. - [ZDI-26-289: Linux Kernel ETS Scheduler Race Condition Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-289-linux-kernel-ets-scheduler-race-condition-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-71066. - [ZDI-26-288: DriveLock Directory Traversal Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-288-drivelock-directory-traversal-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-5492. - [ZDI-26-287: DriveLock Directory Traversal Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-287-drivelock-directory-traversal-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-5491. - [ZDI-26-286: DriveLock SQL Injection Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-286-drivelock-sql-injection-privilege-escalation-vulnerability/): This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-5490. - [ZDI-26-285: DriveLock Directory Traversal Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-285-drivelock-directory-traversal-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.3. The following CVEs are assigned: CVE-2026-5489. - [ZDI-26-284: DriveLock Directory Traversal Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-284-drivelock-directory-traversal-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-5487. - [ZDI-26-283: GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-283-gstreamer-qtdemux-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-5056. - [ZDI-26-282: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-282-gimp-hdr-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2050. - [ZDI-26-281: Microsoft vcpkg OpenSSL Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-281-microsoft-vcpkg-openssl-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on applications built using the Microsoft vcpkg port of OpenSSL. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-34054. - [ZDI-26-280: (Pwn2Own) HP DeskJet 2855e JobStatusEvent Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-280-pwn2own-hp-deskjet-2855e-jobstatusevent-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP DeskJet 2855e printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-4682. - [ZDI-26-279: Microsoft Windows Snipping Tool Improper Input Validation Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-279-microsoft-windows-snipping-tool-improper-input-validation-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-32183. - [ZDI-26-278: Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-278-microsoft-windows-win32kfull-improper-locking-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-33104. - [ZDI-26-261: (0Day) Docker Desktop credentialHelper Directory Traversal Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-261-0day-docker-desktop-credentialhelper-directory-traversal-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must first obtain the ability to escape the container and execute high-privileged code within the Docker Hyper-V VM in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-26-260: (0Day) Docker Desktop System Editor Uncontrolled Search Path Element Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-260-0day-docker-desktop-system-editor-uncontrolled-search-path-element-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must first obtain the ability to escape the container and execute high-privileged code within the Docker Hyper-V VM in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-26-259: (0Day) Docker Desktop cli-plugins Incorrect Permission Assignment Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-259-0day-docker-desktop-cli-plugins-incorrect-permission-assignment-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop for Windows. An attacker must first obtain the ability to escape the container and execute low-privileged code within the Docker Hyper-V VM in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. - [ZDI-26-258: (0Day) Docker Desktop extension-manager Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-258-0day-docker-desktop-extension-manager-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop for Windows. An attacker must first obtain the ability to execute high-privileged code within the container in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. - [Microsoft Patch Tuesday, April 2026 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-april-2026-security-update-review/): April 2026’s Patch Tuesday arrives with Microsoft addressing a fresh set of vulnerabilities across its ecosystem, reinforcing the ongoing need for timely patching in an increasingly threat-heavy landscape. Here’s a quick breakdown of what you need to know. This month’s release addresses 163 vulnerabilities, including eight critical-severity vulnerabilities. In this month’s updates, Microsoft has addressed one publicly disclosed zero-day vulnerability and one being exploited - [Adobe Acrobat and Reader Arbitrary Code Execution Vulnerability Exploited in the Wild (CVE-2026-34621)](https://securecybervm.com/adobe-acrobat-and-reader-arbitrary-code-execution-vulnerability-exploited-in-the-wild-cve-2026-34621/): Adobe released a security update to address an actively exploited vulnerability impacting Adobe Acrobat and Reader. Tracked as CVE-2026-34621, the vulnerability may allow an attacker to run malicious code on affected installations. Haifei Li from EXPMON discovered and reported the vulnerability to Adobe. Adobe Acrobat Reader is a free, widely used application for viewing, printing, signing, sharing, and annotating PDF files on desktop and mobile devices. It serves as - [CISA added Ivanti EPMM Vulnerability to its Known Exploited Vulnerabilities Catalog (CVE-2026-1340)](https://securecybervm.com/cisa-added-ivanti-epmm-vulnerability-to-its-known-exploited-vulnerabilities-catalog-cve-2026-1340/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is informing users about an Ivanti Endpoint Manager vulnerability, tracked as CVE-2026-1340. CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog, urging users to patch before April 11, 2026. Ivanti addressed the vulnerability in its February security updates. The code injection vulnerability may allow attackers to achieve unauthenticated remote code execution. Ivanti Endpoint Manager Mobile (EPMM) is an on-premise Unified Endpoint - [ZDI-26-257: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-257-0day-labcenter-electronics-proteus-pdsprj-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-5495. - [ZDI-26-256: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-256-0day-labcenter-electronics-proteus-pdsprj-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-5494. - [ZDI-26-255: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-255-0day-labcenter-electronics-proteus-pdsprj-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-5493. - [ZDI-26-254: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-254-0day-labcenter-electronics-proteus-pdsprj-file-parsing-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Labcenter Electronics Proteus. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-5496. - [Fortinet FortiClientEMS Vulnerability Exploited in the Wild (CVE-2026-35616)](https://securecybervm.com/fortinet-forticlientems-vulnerability-exploited-in-the-wild-cve-2026-35616/): Fortinet released a security advisory to address an actively exploited vulnerability impacting FortiClientEMS. Tracked as CVE-2026-35616, the vulnerability has a critical severity rating with a CVSS score of 9.1. Successful exploitation may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests. Simo Kohonen from Defused and Nguyen Duc Anh discovered and reported the vulnerability to Fortinet. FortiClient - [ZDI-26-253: Microsoft Visual Studio Code mcp.json Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-253-microsoft-visual-studio-code-mcp-json-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio Code. User interaction is required to exploit this vulnerability in that the target open a malicious project. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-21518. - [ZDI-26-252: Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-252-mozilla-firefox-ionmonkey-switch-statement-optimization-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-4698. - [ZDI-26-251: Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-251-foxit-pdf-reader-update-service-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-3775. - [Axios npm Supply Chain Attack: Malicious RAT Deployment](https://securecybervm.com/axios-npm-supply-chain-attack-malicious-rat-deployment/): A sophisticated supply-chain attack is targeting the popular npm package Axios. Attackers compromised a lead maintainer’s account to publish malicious versions 1.14.1 and 0.30.4, injecting a hidden dependency called plain-crypto-js version 4.2.1. The dependency executes a postinstall script that acts as a cross-platform remote access trojan (RAT) dropper, targeting macOS, Windows, and Linux. Axios is a popular, promise-based open-source JavaScript library for making HTTP requests from browsers and Node.js environments. It simplifies asynchronous communication with REST endpoints by offering features such as automatic JSON data transformation, request/response interception, and robust error handling. - [Google Addresses Zero-day Vulnerability Exploited in the Wild (CVE-2026-5281)](https://securecybervm.com/google-addresses-zero-day-vulnerability-exploited-in-the-wild-cve-2026-5281/): Google released an urgent security advisory to address a vulnerability being exploited in the wild. CVE-2026-5281 is a use-after-free vulnerability in Dawn, the open-source implementation of the WebGPU standard. This type of memory corruption flaw occurs when an application continues to use a pointer after the memory it points to has been cleared. Attackers can leverage this to execute arbitrary code or bypass critical security boundaries on a - [ZDI-26-250: Linux Kernel Analog Device Driver Improper Validation of Array Index Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-250-linux-kernel-analog-device-driver-improper-validation-of-array-index-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2026-23092. - [ZDI-26-249: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-249-nomachine-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-5055. - [ZDI-26-248: NoMachine External Control of File Path Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-248-nomachine-external-control-of-file-path-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-5054. - [ZDI-26-247: NoMachine External Control of File Path Arbitrary File Deletion Vulnerability](https://securecybervm.com/zdi-26-247-nomachine-external-control-of-file-path-arbitrary-file-deletion-vulnerability/): This vulnerability allows local attackers to delete arbitrary files on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.1. The following CVEs are assigned: CVE-2026-5053. - [ZDI-26-246: (0Day) aws-mcp-server Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-246-0day-aws-mcp-server-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-5058. - [ZDI-26-245: (0Day) aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-245-0day-aws-mcp-server-aws-cli-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-5059. - [ZDI-26-244: (Pwn2Own) QNAP QHora-322 miro_webserver_controllers_api_login_singIn Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-244-pwn2own-qnap-qhora-322-miro_webserver_controllers_api_login_singin-authentication-bypass-vulnerability/): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of QNAP QHora-322 routers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.0. The following CVEs are assigned: CVE-2024-13088. - [ZDI-26-243: (Pwn2Own) QNAP TS-453E write_file_to_svr External Control of File Path Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-243-pwn2own-qnap-ts-453e-write_file_to_svr-external-control-of-file-path-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-453E devices. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2025-62842. - [ZDI-26-242: (Pwn2Own) QNAP TS-453E server_handlers.pyc rr2s.kwargs Error Message Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-242-pwn2own-qnap-ts-453e-server_handlers-pyc-rr2s-kwargs-error-message-information-disclosure-vulnerability/): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of QNAP TS-453E devices. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 3.5. The following CVEs are assigned: CVE-2025-62840. - [ZDI-26-241: (Pwn2Own) QNAP QHora-322 qvpn_db_mgr username SQL Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-241-pwn2own-qnap-qhora-322-qvpn_db_mgr-username-sql-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of QNAP QHora-322 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-62846. - [ZDI-26-240: (Pwn2Own) QNAP QHora-322 qvpn_db_mgr role_type Improper Neutralization of Escape Sequences Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-240-pwn2own-qnap-qhora-322-qvpn_db_mgr-role_type-improper-neutralization-of-escape-sequences-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on affected QNAP QHora-322 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2025-62845. - [ZDI-26-239: (Pwn2Own) QNAP QHora-322 login.newAuthMiddleware.Authenticator Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-239-pwn2own-qnap-qhora-322-login-newauthmiddleware-authenticator-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on affected installations of QNAP QHora-322 routers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.6. The following CVEs are assigned: CVE-2025-62844. - [ZDI-26-238: Linux Kernel AoE Driver Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-238-linux-kernel-aoe-driver-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2023-6270. - [ZDI-26-237: (Pwn2Own) QNAP QHora-322 ip6_wanifset Improper Restriction of Communication Channel to Intended Endpoints Firewall Bypass Vulnerability](https://securecybervm.com/zdi-26-237-pwn2own-qnap-qhora-322-ip6_wanifset-improper-restriction-of-communication-channel-to-intended-endpoints-firewall-bypass-vulnerability/): This vulnerability allows network-adjacent attackers to bypass firewall rules on affected installations of QNAP QHora-322 routers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2025-62843. - [ZDI-26-236: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-236-digilent-dasylab-dsb-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-0954. - [ZDI-26-235: Digilent DASYLab DSA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-235-digilent-dasylab-dsa-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-0957. - [ZDI-26-234: Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-234-digilent-dasylab-dsa-file-parsing-out-of-bounds-read-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-0956. - [ZDI-26-233: Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-233-digilent-dasylab-dsa-file-parsing-out-of-bounds-read-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-0955. - [ZDI-26-232: (Pwn2Own) Red Hat Enterprise Linux vmwgfx Driver Integer Overflow Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-232-pwn2own-red-hat-enterprise-linux-vmwgfx-driver-integer-overflow-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Red Hat Enterprise Linux. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-40277. - [N8n Patches Critical Remote Code Execution Vulnerability (CVE-2026-33660)](https://securecybervm.com/n8n-patches-critical-remote-code-execution-vulnerability-cve-2026-33660/): N8n is vulnerable to a critical remote code execution flaw. Tracked as CVE-2026-33660, the vulnerability has a CVSS score of 9.4. Successful exploitation of this vulnerability may allow an authenticated attacker to execute arbitrary commands on the target system. n8n is a powerful, open-source workflow automation tool that enables users to visually design and automate complex processes by connecting various apps, APIs, and services. It functions as a digital hub, transferring data and triggering - [CISA Warns about Active Exploitation of F5 BIG-IP Vulnerability (CVE-2025-53521)](https://securecybervm.com/cisa-warns-about-active-exploitation-of-f5-big-ip-vulnerability-cve-2025-53521/): CISA added a critical vulnerability in F5 BIG-IP Access Policy Manager (APM) to its Known Exploited Vulnerabilities catalog on Friday, based on evidence of ongoing exploitation. Tracked as CVE-2025-53521, successful exploitation of the vulnerability could allow a threat actor to achieve remote code execution. CISA urges users to patch the vulnerability before March 30, 2026. F5 BIG-IP Access Policy Manager - [CISA Added Langflow Vulnerability to its Known Exploited Vulnerabilities Catalog (CVE-2026-33017)](https://securecybervm.com/cisa-added-langflow-vulnerability-to-its-known-exploited-vulnerabilities-catalog-cve-2026-33017/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently acknowledged the active exploitation of the Langflow vulnerability. Tracked as CVE-2026, the vulnerability may allow an unauthenticated remote attacker to execute arbitrary code on the target system. CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog, urging users to patch it before April 8, 2025. Langflow is an open-source, low-code platform that uses - [ZDI-26-226: (0Day) Microsoft Azure MCP AzureCliService Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-226-0day-microsoft-azure-mcp-azurecliservice-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. - [Citrix NetScaler ADC and NetScaler Gateway multiple vulnerabilities (CVE-2026-3055 & CVE-2026-4368)](https://securecybervm.com/citrix-netscaler-adc-and-netscaler-gateway-multiple-vulnerabilities-cve-2026-3055-cve-2026-4368/): Citrix released a security advisory addressing two vulnerabilities in NetScaler ADC and NetScaler Gateway. Tracked as CVE-2026-3055 & CVE-2026-4368, successful exploitation of these vulnerabilities may result in memory overread and user session mix-up, respectively. Citrix NetScaler ADC is a comprehensive application delivery and load balancing solution. It optimizes application performance, availability, and security by distributing, - [ZDI-26-225: (Pwn2Own) Samsung Galaxy S25 Samsung Account Open Redirect Security Bypass Vulnerability](https://securecybervm.com/zdi-26-225-pwn2own-samsung-galaxy-s25-samsung-account-open-redirect-security-bypass-vulnerability/): This vulnerability allows remote attackers to bypass security on affected installations of Samsung Galaxy S25. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.6. The following CVEs are assigned: CVE-2025-58487. - [ZDI-26-224: (Pwn2Own) Samsung Galaxy S25 Samsung Account Cross-Site Scripting Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-224-pwn2own-samsung-galaxy-s25-samsung-account-cross-site-scripting-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary script on affected installations of Samsung Galaxy S25. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2025-58486. - [ZDI-26-223: (Pwn2Own) Samsung Galaxy S25 Smart Touch Call Application Protection Mechanism Failure Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-223-pwn2own-samsung-galaxy-s25-smart-touch-call-application-protection-mechanism-failure-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Samsung Galaxy S25. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 5.9. The following CVEs are assigned: CVE-2025-58488. - [ZDI-26-222: (Pwn2Own) Canon imageCLASS MF654Cdw BJNP Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-222-pwn2own-canon-imageclass-mf654cdw-bjnp-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF654Cdw printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-14233. - [ZDI-26-221: GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-221-gimp-xpm-file-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-4154. - [ZDI-26-220: GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-220-gimp-psp-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-4153. - [ZDI-26-219: GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-219-gimp-jp2-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-4152. - [ZDI-26-218: GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-218-gimp-ani-file-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-4151. - [ZDI-26-217: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-217-gimp-psd-file-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-4150. - [CISA Added Zimbra Vulnerability to its Known Exploited Vulnerabilities Catalog (CVE-2025-66376)](https://securecybervm.com/cisa-added-zimbra-vulnerability-to-its-known-exploited-vulnerabilities-catalog-cve-2025-66376/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned organizations and users about active exploitation of a vulnerability impacting Synacor Zimbra Collaboration Suite (ZCS). CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog, urging users to patch before April 1, 2026. CISA also warned users to follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Tracked as CVE-2025-66376, Syncor patched - [ZDI-26-216: (Pwn2Own) QNAP TS-453E smbd domain_name Argument Injection Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-216-pwn2own-qnap-ts-453e-smbd-domain_name-argument-injection-authentication-bypass-vulnerability/): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of QNAP TS-453E devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2025-62847. - [ZDI-26-215: KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-215-keepassxc-openssl-configuration-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of KeePassXC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-4158. - [ZDI-26-214: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-214-gimp-hdr-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2049. - [ZDI-26-213: GIMP LBM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-213-gimp-lbm-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2046. - [ZDI-26-212: Schneider Electric EcoStruxure Data Center Expert Hard-coded Password Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-212-schneider-electric-ecostruxure-data-center-expert-hard-coded-password-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Data Center Expert. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-13957. - [ZDI-26-211: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-211-delta-electronics-asda-soft-par-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ASDA-Soft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-1361. - [ZDI-26-210: (Pwn2Own) Samsung Galaxy S25 Samsung Members Security Feature Bypass Vulnerability](https://securecybervm.com/zdi-26-210-pwn2own-samsung-galaxy-s25-samsung-members-security-feature-bypass-vulnerability/): This vulnerability allows remote attackers to bypass a security feature on affected installations of Samsung Galaxy S25. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.4. The following CVEs are assigned: CVE-2025-21079. - [ZDI-26-209: (Pwn2Own) Samsung Galaxy S25 Samsung Members Open Redirect Security Bypass Vulnerability](https://securecybervm.com/zdi-26-209-pwn2own-samsung-galaxy-s25-samsung-members-open-redirect-security-bypass-vulnerability/): This vulnerability allows remote attackers to bypass security on affected installations of Samsung Galaxy S25. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.0. The following CVEs are assigned: CVE-2025-21079. - [ZDI-26-208: (Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-208-pwn2own-canon-imageclass-mf654cdw-ttf-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF654Cdw printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-14237. - [ZDI-26-207: (Pwn2Own) Canon imageCLASS MF654Cdw dtdc_addr_importSub Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-207-pwn2own-canon-imageclass-mf654cdw-dtdc_addr_importsub-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF654Cdw printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-14236. - [ZDI-26-206: (Pwn2Own) Canon imageCLASS MF654Cdw TTF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-206-pwn2own-canon-imageclass-mf654cdw-ttf-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF654Cdw printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-14235. - [ZDI-26-205: (Pwn2Own) Canon imageCLASS MF654Cdw PJCC Request Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-205-pwn2own-canon-imageclass-mf654cdw-pjcc-request-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF654Cdw printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-14234. - [ZDI-26-204: (Pwn2Own) Canon imageCLASS MF654Cdw XPS Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-204-pwn2own-canon-imageclass-mf654cdw-xps-parser-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF654Cdw printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-14232. - [ZDI-26-203: (Pwn2Own) Canon imageCLASS MF654Cdw XML SOAP Request Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-203-pwn2own-canon-imageclass-mf654cdw-xml-soap-request-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF654Cdw printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-14231. - [ZDI-26-202: (Pwn2Own) QNAP TS-453E Hyper Data Protector Plugin query_original_file_size SQL Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-202-pwn2own-qnap-ts-453e-hyper-data-protector-plugin-query_original_file_size-sql-injection-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-453E. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 8.0. The following CVEs are assigned: CVE-2025-59389. - [ZDI-26-201: (Pwn2Own) QNAP TS-453E Hyper Data Protector Plugin Hard-Coded Credentials Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-201-pwn2own-qnap-ts-453e-hyper-data-protector-plugin-hard-coded-credentials-authentication-bypass-vulnerability/): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of QNAP TS-453E devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2025-59388. - [Google Patches Two Chrome Vulnerabilities Exploited in the Wild (CVE-2026-3909 & CVE-2026-3910)](https://securecybervm.com/google-patches-two-chrome-vulnerabilities-exploited-in-the-wild-cve-2026-3909-cve-2026-3910/): Google released fixes to address two zero-day vulnerabilities impacting its Chrome browser. Tracked as CVE-2026-3909 & CVE-2026-3910, both vulnerabilities have been assigned a high severity rating with a CVSS score of 8.8. Both vulnerabilities were discovered and reported by Google itself on March 10, 2026. CISA also acknowledged the active exploitation of the vulnerabilities and added them to its Known Exploited Vulnerabilities Catalog. CISA urged users to patch the vulnerabilities before March - [CISA Warns About Ivanti EPM Vulnerability Exploited in Attacks (CVE-2026-1603)](https://securecybervm.com/cisa-warns-about-ivanti-epm-vulnerability-exploited-in-attacks-cve-2026-1603/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) informs users that the Ivanti Endpoint Manager vulnerability is being exploited in the wild. CISA added the vulnerability to its Known Exploited Vulnerabilities Catalog, urging users to patch before March 23, 2026. Ivanti Endpoint Manager (EPM) is a tool that helps IT administrators manage and secure devices and data across networks. It can manage Windows, macOS, Linux, iOS, - [Microsoft Patch Tuesday, March 2026 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-march-2026-security-update-review/): Microsoft has rolled out its March 2026 Patch Tuesday updates, delivering a fresh batch of security fixes designed to keep Windows environments protected from emerging threats. The release addresses multiple vulnerabilities spanning Windows components and other Microsoft products. Here’s a quick breakdown of what you need to know. This month’s release addresses 93 vulnerabilities, including eight critical - [ZDI-26-186: Fortinet FortiClient Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-186-fortinet-forticlient-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Fortinet FortiClient. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24018. - [ZDI-26-185: Microsoft Windows GDI Bitmap Parsing Out-Of-Bound Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-185-microsoft-windows-gdi-bitmap-parsing-out-of-bound-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Windows. Interaction with the GDI library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-25181. - [ZDI-26-184: Microsoft Windows NDIS Driver Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-184-microsoft-windows-ndis-driver-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24289. - [ZDI-26-183: Microsoft Windows win32full Improper Release Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-183-microsoft-windows-win32full-improper-release-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24285. - [ZDI-26-182: Microsoft Windows win32full Improper Release Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-182-microsoft-windows-win32full-improper-release-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24285. - [ZDI-26-181: Microsoft Windows win32full Improper Release Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-181-microsoft-windows-win32full-improper-release-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24285. - [ZDI-26-180: Microsoft Windows cdd Improper Locking Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-180-microsoft-windows-cdd-improper-locking-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-23668. - [ZDI-26-179: Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-179-microsoft-windows-win32kfull-improper-locking-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-23668. - [ZDI-26-178: Microsoft Windows cdd Improper Locking Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-178-microsoft-windows-cdd-improper-locking-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-23668. - [ZDI-26-177: Array Networks MotionPro ArrayInstallManager Incorrect Permission Assignment Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-177-array-networks-motionpro-arrayinstallmanager-incorrect-permission-assignment-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Array Networks MotionPro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-26364. - [ZDI-26-176: Apple macOS libusd_ms Alembic File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-176-apple-macos-libusd_ms-alembic-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must receive a malicious file that is written to the local filesystem. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-20616. - [ZDI-26-175: Apple macOS ImageIO SGI File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-175-apple-macos-imageio-sgi-file-parsing-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-20634. - [ZDI-26-174: Apple macOS ImageIO SGI File Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-174-apple-macos-imageio-sgi-file-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-20675. - [ZDI-26-173: Apple macOS Audio APAC Frame Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-173-apple-macos-audio-apac-frame-decoding-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-20611. - [ZDI-26-172: Unraid Authentication Request Path Traversal Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-172-unraid-authentication-request-path-traversal-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on affected installations of Unraid. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-3839. - [ZDI-26-170: GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-170-gstreamer-h-266-codec-parser-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-3086. - [ZDI-26-169: GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-169-gstreamer-h-266-codec-parser-integer-underflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-3084. - [ZDI-26-168: GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-168-gstreamer-riff-palette-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2921. - [ZDI-26-167: GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-167-gstreamer-rtpqdm2depay-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-3085. - [ZDI-26-166: GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-166-gstreamer-rtpqdm2depay-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-3083. - [ZDI-26-165: GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-165-gstreamer-realmedia-demuxer-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2922. - [ZDI-26-164: GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-164-gstreamer-asf-demuxer-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2920. - [ZDI-26-163: GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-163-gstreamer-jpeg-parser-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-3082. - [ZDI-26-162: GStreamer H.266 Codec Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-162-gstreamer-h-266-codec-parser-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-3081. - [ZDI-26-161: GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-161-gstreamer-dvb-subtitles-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2923. - [ZDI-26-160: (Pwn2Own) Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-160-pwn2own-philips-hue-bridge-hk_hap-ed25519-signature-verification-authentication-bypass-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2026-3562. - [ZDI-26-159: (Pwn2Own) Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-159-pwn2own-philips-hue-bridge-hk_hap-characteristics-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 8.0. The following CVEs are assigned: CVE-2026-3561. - [ZDI-26-158: (Pwn2Own) Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-158-pwn2own-philips-hue-bridge-homekit-hk_hap_pair_storage_put-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-3560. - [ZDI-26-157: (Pwn2Own) Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-157-pwn2own-philips-hue-bridge-homekit-accessory-protocol-static-nonce-authentication-bypass-vulnerability/): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-3559. - [ZDI-26-156: (Pwn2Own) Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-156-pwn2own-philips-hue-bridge-homekit-accessory-protocol-transient-pairing-mode-authentication-bypass-vulnerability/): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-3558. - [Cisco Patches Secure Firewall Management Center Software Vulnerabilities (CVE-2026-20079 & CVE-2026-20131)](https://securecybervm.com/cisco-patches-secure-firewall-management-center-software-vulnerabilities-cve-2026-20079-cve-2026-20131/): Cisco released security updates to address two critical-severity vulnerabilities impacting the Secure Firewall Management Center Software. Successful exploitation of the vulnerabilities may lead to code execution. Cisco Firewall Management Center analyzes network vulnerabilities, prioritizes attacks, and recommends protections to support security teams. FMC provides unified firewall management, application control, intrusion prevention, URL filtering, and malware defense. It also offers real-time visibility across networks to - [VMware Aria Operations Vulnerability Added to CISA Known Exploited Vulnerabilities Catalog (CVE-2026-22719)](https://securecybervm.com/vmware-aria-operations-vulnerability-added-to-cisa-known-exploited-vulnerabilities-catalog-cve-2026-22719/): CISA warns users about an actively exploited vulnerability in VMware Aria Operations by adding it to its Known Exploited Vulnerabilities Catalog. Tracked as CVE-2026-22719, CISA urged users to patch the vulnerability before March 24, 2026. Successful exploitation of this vulnerability may lead to the disclosure of sensitive information. VMware Aria Operations is an AI-powered, unified IT management platform for monitoring, troubleshooting, and optimizing private, hybrid, - [ZDI-26-150: Docker Desktop for Mac Docker Model Runner Exposed Dangerous Function Denial-of-Service Vulnerability](https://securecybervm.com/zdi-26-150-docker-desktop-for-mac-docker-model-runner-exposed-dangerous-function-denial-of-service-vulnerability/): This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-28400. - [ZDI-26-149: Trend Micro Cleaner One Pro Link Following Denial-of-Service Vulnerability](https://securecybervm.com/zdi-26-149-trend-micro-cleaner-one-pro-link-following-denial-of-service-vulnerability/): This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Trend Micro Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.0. The following CVEs are assigned: CVE-2025-71218. - [ZDI-26-148: Trend Micro Apex Central Improper Authentication Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-148-trend-micro-apex-central-improper-authentication-privilege-escalation-vulnerability/): This vulnerability allows remote attackers to escalate privileges on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2025-71209. - [ZDI-26-147: Trend Micro Apex Central Improper Authentication Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-147-trend-micro-apex-central-improper-authentication-privilege-escalation-vulnerability/): This vulnerability allows remote attackers to escalate privileges on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2025-71208. - [ZDI-26-146: Trend Micro Apex Central Manual Update Server-Side Request Forgery Vulnerability](https://securecybervm.com/zdi-26-146-trend-micro-apex-central-manual-update-server-side-request-forgery-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.4. The following CVEs are assigned: CVE-2025-71207. - [ZDI-26-145: Trend Micro Apex Central Scheduled Update Server-Side Request Forgery Vulnerability](https://securecybervm.com/zdi-26-145-trend-micro-apex-central-scheduled-update-server-side-request-forgery-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.4. The following CVEs are assigned: CVE-2025-71206. - [ZDI-26-144: Trend Micro Apex Central Hub Server Server-Side Request Forgery Vulnerability](https://securecybervm.com/zdi-26-144-trend-micro-apex-central-hub-server-server-side-request-forgery-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.4. The following CVEs are assigned: CVE-2025-71205. - [ZDI-26-143: Trend Micro Apex One Security Agent TmSelfProtect Origin Validation Error Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-143-trend-micro-apex-one-security-agent-tmselfprotect-origin-validation-error-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71217. - [ZDI-26-142: Trend Micro Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-142-trend-micro-apex-one-security-agent-cache-mechanism-time-of-check-time-of-use-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71216. - [ZDI-26-141: Trend Micro Apex One Security Agent iCore Service Signature Verification Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-141-trend-micro-apex-one-security-agent-icore-service-signature-verification-time-of-check-time-of-use-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71215. - [ZDI-26-140: Trend Micro Apex One Origin Validation Error Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-140-trend-micro-apex-one-origin-validation-error-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71213. - [ZDI-26-139: Trend Micro Apex One Security Agent iCore Service Origin Validation Error Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-139-trend-micro-apex-one-security-agent-icore-service-origin-validation-error-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71214. - [ZDI-26-138: Trend Micro Apex One Virus Scan Engine Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-138-trend-micro-apex-one-virus-scan-engine-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-71212. - [ZDI-26-137: Trend Micro Apex One Console Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-137-trend-micro-apex-one-console-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-71211. - [ZDI-26-136: Trend Micro Apex One Console Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-136-trend-micro-apex-one-console-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-71210. - [Cisco SD-WAN Controller and Manager Authentication Bypass Vulnerability (CVE-2026-20127)](https://securecybervm.com/cisco-sd-wan-controller-and-manager-authentication-bypass-vulnerability-cve-2026-20127/): Cisco released a security update to address an actively exploited vulnerability impacting Cisco Catalyst SD-WAN Controller and SD-WAN Manager. Tracked as CVE-2026-20127, successful exploitation of the vulnerability may allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. CISA also acknowledged the active exploitation of the vulnerability and added it to its Known Exploited Vulnerabilities Catalog. CISA - [ZDI-26-132: Siemens SINEC NMS Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-132-siemens-sinec-nms-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Siemens SINEC NMS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-25656. - [ZDI-26-131: Siemens SINEC NMS Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-131-siemens-sinec-nms-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Siemens SINEC NMS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-25655. - [ZDI-26-130: IceWarp collaboration Directory Traversal Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-130-icewarp-collaboration-directory-traversal-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of IceWarp. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-2493. - [ZDI-26-129: Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-129-socomec-diris-a-40-http-api-authentication-bypass-vulnerability/): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Socomec DIRIS A-40 power monitoring devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2026-2491. - [ZDI-26-128: (Pwn2Own) Ubiquiti Networks AI Pro Uncaught Exception Denial-of-Service Vulnerability](https://securecybervm.com/zdi-26-128-pwn2own-ubiquiti-networks-ai-pro-uncaught-exception-denial-of-service-vulnerability/): This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Ubiquiti Networks AI Pro. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-21634. - [ZDI-26-127: (Pwn2Own) Ubiquiti Networks AI Pro Cleartext Transmission Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-127-pwn2own-ubiquiti-networks-ai-pro-cleartext-transmission-information-disclosure-vulnerability/): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Ubiquiti Networks AI Pro. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.3. The following CVEs are assigned: CVE-2026-21633. - [ZDI-26-126: (Pwn2Own) Ubiquiti Networks AI Pro Discovery Protocol Missing Encryption Protocol Downgrade Vulnerability](https://securecybervm.com/zdi-26-126-pwn2own-ubiquiti-networks-ai-pro-discovery-protocol-missing-encryption-protocol-downgrade-vulnerability/): This vulnerability allows network-adjacent attackers to downgrade the communication protocol on affected installations of Ubiquiti Networks AI Pro. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.4. The following CVEs are assigned: CVE-2026-21633. - [ZDI-26-125: Docker Desktop grpcfuse Kernel Module Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-125-docker-desktop-grpcfuse-kernel-module-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-2664. - [ZDI-26-124: claude-hovercraft executeClaudeCode Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-124-claude-hovercraft-executeclaudecode-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of claude-hovercraft. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-15060. - [ZDI-26-123: Docker Desktop MCP Server Cleartext Storage of Sensitive Information Vulnerability](https://securecybervm.com/zdi-26-123-docker-desktop-mcp-server-cleartext-storage-of-sensitive-information-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. - [ZDI-26-122: PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-122-pdf-xchange-editor-trackerupdate-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of PDF-XChange Editor. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-2040. - [ZDI-26-121: GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-121-gimp-xwd-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2048. - [ZDI-26-120: GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-120-gimp-icns-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2047. - [ZDI-26-119: GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-119-gimp-xwd-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2045. - [ZDI-26-118: GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-118-gimp-pgm-file-parsing-uninitialized-memory-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2044. - [ZDI-26-117: RustDesk Client for Windows Transfer File Link Following Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-117-rustdesk-client-for-windows-transfer-file-link-following-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of RustDesk Client for Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2026-2490. - [ZDI-26-116: TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-116-tensorflow-hdf5-library-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of TensorFlow. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2026-2492. - [ZDI-26-115: Fortinet FortiClient VPN FCConfig Utility Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-115-fortinet-forticlient-vpn-fcconfig-utility-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Fortinet FortiClient VPN. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-62676. - [ZDI-26-114: Dassault Systèmes eDrawings Viewer EPRT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-114-dassault-systemes-edrawings-viewer-eprt-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-1335. - [ZDI-26-113: Dassault Systèmes eDrawings Viewer EPRT File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-113-dassault-systemes-edrawings-viewer-eprt-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-1334. - [ZDI-26-112: Dassault Systèmes eDrawings Viewer EPRT File Parsing Uninitialized Variable Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-112-dassault-systemes-edrawings-viewer-eprt-file-parsing-uninitialized-variable-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-1333. - [ZDI-26-111: MLflow Use of Default Password Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-111-mlflow-use-of-default-password-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-2635. - [ZDI-26-110: Bosch Rexroth IndraWorks Print Settings File Parsing Deserialization Of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-110-bosch-rexroth-indraworks-print-settings-file-parsing-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bosch Rexroth IndraWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-60037, CVE-2025-60038. - [ZDI-26-109: Bosch Rexroth IndraWorks OPC.TestClient XML File Parsing Deserialization Of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-109-bosch-rexroth-indraworks-opc-testclient-xml-file-parsing-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bosch Rexroth IndraWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-60035. - [ZDI-26-108: Bosch Rexroth IndraWorks UA.TestClient XML File Parsing Deserialization Of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-108-bosch-rexroth-indraworks-ua-testclient-xml-file-parsing-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bosch Rexroth IndraWorks. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-60036. - [ZDI-26-107: Autodesk AutoCAD MODEL File Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-107-autodesk-autocad-model-file-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-0875. - [ZDI-26-106: Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-106-autodesk-autocad-catpart-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-0874. - [Google Patches its First Zero-day Vulnerability of the Year (CVE-2026-2441)](https://securecybervm.com/google-patches-its-first-zero-day-vulnerability-of-the-year-cve-2026-2441/): Google released a security advisory to address a high-severity zero-day vulnerability in Chrome. Tracked as CVE-2026-2441, the vulnerability is being exploited in the wild. The vulnerability is a use-after-free flaw in the CSS browser’s CSS handling. An independent researcher, Shaheen Fazim, discovered and reported the vulnerability to Google on February 11, 2026. Use-after-free flaws often stem from improper object lifecycle management in rendering engines, allowing freed memory to be - [CISA Added BeyondTrust Vulnerability to its Known Exploited Vulnerabilities Catalog (CVE-2026-1731)](https://securecybervm.com/cisa-added-beyondtrust-vulnerability-to-its-known-exploited-vulnerabilities-catalog-cve-2026-1731/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns about an actively exploited vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) products. Tracked as CVE-2026-1731, successful exploitation of the vulnerability could allow an unauthenticated remote attacker to achieve remote code execution by sending specially crafted requests. CISA urged users to patch the vulnerability before February 16, 2026. BeyondTrust mentioned in the advisory, - [ZDI-26-105: MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-105-mlflow-tracking-server-artifact-handler-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-2033. - [ZDI-26-104: Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-104-sante-dicom-viewer-pro-dcm-file-parsing-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2034. - [ZDI-26-103: Oracle VirtualBox VMSVGA Out-Of-Bounds Access Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-103-oracle-virtualbox-vmsvga-out-of-bounds-access-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2026-21956. - [ZDI-26-102: Oracle VirtualBox VMSVGA Out-Of-Bounds Write Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-102-oracle-virtualbox-vmsvga-out-of-bounds-write-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-21957. - [ZDI-26-101: Oracle VirtualBox BusLogic Uninitialized Memory Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-101-oracle-virtualbox-buslogic-uninitialized-memory-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.0. The following CVEs are assigned: CVE-2026-21963. - [ZDI-26-100: Oracle VirtualBox LsiLogic Uninitialized Memory Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-100-oracle-virtualbox-lsilogic-uninitialized-memory-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.0. The following CVEs are assigned: CVE-2026-21985. - [ZDI-26-099: Oracle VirtualBox VMSVGA Race Condition Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-099-oracle-virtualbox-vmsvga-race-condition-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-21984. - [ZDI-26-098: Oracle VirtualBox VMSVGA Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-098-oracle-virtualbox-vmsvga-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2026-21955. - [ZDI-26-097: Oracle VirtualBox VMSVGA Heap-based Buffer Overflow Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-097-oracle-virtualbox-vmsvga-heap-based-buffer-overflow-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-21983. - [ZDI-26-096: Dassault Systèmes eDrawings Viewer EPRT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-096-dassault-systemes-edrawings-viewer-eprt-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-1283. - [ZDI-26-095: Dassault Systèmes eDrawings Viewer EPRT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-095-dassault-systemes-edrawings-viewer-eprt-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-1284. - [ZDI-26-094: Schneider Electric EcoStruxure Power Build SSD File Parsing Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-094-schneider-electric-ecostruxure-power-build-ssd-file-parsing-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13845. - [ZDI-26-093: Schneider Electric EcoStruxure Power Build SSD File Parsing Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-093-schneider-electric-ecostruxure-power-build-ssd-file-parsing-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13845. - [ZDI-26-092: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-092-schneider-electric-ecostruxure-power-build-ssd-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13845. - [ZDI-26-091: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-091-schneider-electric-ecostruxure-power-build-ssd-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13845. - [ZDI-26-090: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-090-schneider-electric-ecostruxure-power-build-ssd-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13845. - [ZDI-26-089: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-089-schneider-electric-ecostruxure-power-build-ssd-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13845. - [ZDI-26-088: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-088-schneider-electric-ecostruxure-power-build-ssd-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13845. - [ZDI-26-087: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-087-schneider-electric-ecostruxure-power-build-ssd-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13845. - [ZDI-26-086: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-086-schneider-electric-ecostruxure-power-build-ssd-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13845. - [ZDI-26-085: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-085-schneider-electric-ecostruxure-power-build-ssd-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13845. - [ZDI-26-084: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-084-schneider-electric-ecostruxure-power-build-ssd-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Build. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13845. - [ZDI-26-083: Microsoft Windows searchConnector-ms NTLM Response Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-083-microsoft-windows-searchconnector-ms-ntlm-response-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-21249. - [ZDI-26-082: Microsoft Exchange InterceptorSmtpAgent Reliance on Untrusted Inputs Security Feature Bypass Vulnerability](https://securecybervm.com/zdi-26-082-microsoft-exchange-interceptorsmtpagent-reliance-on-untrusted-inputs-security-feature-bypass-vulnerability/): This vulnerability allows remote attackers to bypass a security feature on affected installations of Microsoft Exchange. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.3. The following CVEs are assigned: CVE-2026-21527. - [ZDI-26-081: Microsoft Windows win32kfull Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-081-microsoft-windows-win32kfull-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-21235. - [ZDI-26-080: Ivanti Endpoint Manager AuthHelper Authentication Bypass Vulnerability](https://securecybervm.com/zdi-26-080-ivanti-endpoint-manager-authhelper-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Endpoint Manager. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.6. The following CVEs are assigned: CVE-2026-1603. - [Apple iOS Zero-day Vulnerability Exploited in Attacks (CVE-2026-20700)](https://securecybervm.com/apple-ios-zero-day-vulnerability-exploited-in-attacks-cve-2026-20700/): Apple released a security advisory to address its first zero-day vulnerability of the year. Tracked as CVE-2026-20700, successful exploitation of the vulnerability could lead to arbitrary code execution. Google Threat Analysis Group discovered and reported the vulnerability to Apple. The vulnerability exists in dyld, the Dynamic Link Editor used by Apple operating systems, including iOS, iPadOS, macOS, tvOS, watchOS, and visionOS. An attacker with memory write permission may exploit - [FortiClient Endpoint Management Server (EMS) SQL Injection Vulnerability (CVE-2026-21643)](https://securecybervm.com/forticlient-endpoint-management-server-ems-sql-injection-vulnerability-cve-2026-21643/): Fortinet released a security advisory to address a critical severity vulnerability impacting FortiClientEMS. Tracked as CVE-2026-21643, successful exploitation of the vulnerability could lead to arbitrary code execution on the target system. The vulnerability has a CVSS score of 9.1. Gwendal Guégniaud of the Fortinet Product Security team discovered the vulnerability. FortiClient Endpoint Management Server is a security management solution that enables users to manage multiple endpoints (computers) in a centralized, scalable manner. It provides visibility across the network - [Microsoft Patch Tuesday, February 2026 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-february-2026-security-update-review/): Microsoft’s February 2026 Patch Tuesday focuses on closing security gaps that attackers could exploit, reinforcing the importance of timely patching in enterprise environments. Here’s a quick breakdown of what you need to know. This month’s release addresses 61 vulnerabilities, including five critical and 52 important-severity vulnerabilities. In this month’s updates, Microsoft has addressed six zero-day vulnerabilities that have been exploited in the wild. Microsoft addressed one vulnerability in Microsoft Edge (Chromium-based) that was patched earlier this month. Microsoft Patch Tuesday, February edition, includes updates for vulnerabilities in Microsoft Exchange Server, Microsoft Graphics - [ZDI-26-070: Adobe ColdFusion CAR File Parsing Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-070-adobe-coldfusion-car-file-parsing-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe ColdFusion. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2025-61808. - [ZDI-26-069: (0Day) Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-069-0day-xmind-attachment-insufficient-ui-warning-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Xmind. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-0777. - [ZDI-26-068: Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-068-docker-desktop-for-windows-incorrect-permission-assignment-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop for Windows. User interaction on the part of an administrator is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.7. The following CVEs are assigned: CVE-2025-14740. - [ZDI-26-067: Docker Desktop for Windows Incorrect Permission Assignment Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-067-docker-desktop-for-windows-incorrect-permission-assignment-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop for Windows. User interaction on the part of an administrator is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.7. The following CVEs are assigned: CVE-2025-14740. - [ZDI-26-066: (Pwn2Own) Lexmark CX532adwe getCFFNames Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-066-pwn2own-lexmark-cx532adwe-getcffnames-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark CX532adwe printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-65079. - [ZDI-26-065: (Pwn2Own) Lexmark CX532adwe usecmap Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-065-pwn2own-lexmark-cx532adwe-usecmap-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark CX532adwe printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-65080. - [ZDI-26-064: Lexmark CX532adwe execuserobject Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-064-lexmark-cx532adwe-execuserobject-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark CX532adwe printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-65081. - [ZDI-26-063: (Pwn2Own) Lexmark CX532adwe libesffls Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-063-pwn2own-lexmark-cx532adwe-libesffls-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark CX532adwe printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-65082. - [ZDI-26-062: (Pwn2Own) Lexmark CX532adwe esfhelper Untrusted Search Path Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-062-pwn2own-lexmark-cx532adwe-esfhelper-untrusted-search-path-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Lexmark CX532adwe printers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-65083. - [ZDI-26-061: NVIDIA Triton Inference Server EVBufferToJson Uncaught Exception Denial-of-Service Vulnerability](https://securecybervm.com/zdi-26-061-nvidia-triton-inference-server-evbuffertojson-uncaught-exception-denial-of-service-vulnerability/): This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of NVIDIA Triton Inference Server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-33201. - [ZDI-26-060: NVIDIA Megatron-LM load_base_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-060-nvidia-megatron-lm-load_base_checkpoint-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron-LM. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-24149. - [ZDI-26-059: CyberArk Endpoint Privilege Management Improper Privilege Management Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-059-cyberark-endpoint-privilege-management-improper-privilege-management-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of CyberArk Endpoint Privilege Management. An attacker must first obtain a low-privileged interactive user session on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2025-63374. - [ZDI-26-058: AzeoTech DAQFactory Pro CTL File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-058-azeotech-daqfactory-pro-ctl-file-parsing-out-of-bounds-read-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66589. - [ZDI-26-057: Apple Safari JavaScriptCore FTL New Array Materialization Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-057-apple-safari-javascriptcore-ftl-new-array-materialization-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-46298. - [ZDI-26-056: Apple macOS AppleIntelKBLGraphics Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-056-apple-macos-appleintelkblgraphics-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2025-43283. - [ZDI-26-055: Progress Software Kemp LoadMaster addapikey Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-055-progress-software-kemp-loadmaster-addapikey-command-injection-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.4. The following CVEs are assigned: CVE-2025-13447. - [ZDI-26-054: Progress Software Kemp LoadMaster delapikey OS Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-054-progress-software-kemp-loadmaster-delapikey-os-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2025-13447. - [ZDI-26-053: Progress Software Kemp LoadMaster listapikeys Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-053-progress-software-kemp-loadmaster-listapikeys-command-injection-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.4. The following CVEs are assigned: CVE-2025-13447. - [ZDI-26-052: Progress Software Kemp LoadMaster getcipherset Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-052-progress-software-kemp-loadmaster-getcipherset-command-injection-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.1. The following CVEs are assigned: CVE-2025-13444. - [ZDI-26-051: Progress Software Kemp LoadMaster delcert Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-051-progress-software-kemp-loadmaster-delcert-command-injection-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.1. The following CVEs are assigned: CVE-2025-13447. - [ZDI-26-050: GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-050-gimp-ico-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-0797. - [ZDI-26-049: Delta Electronics DIAView Exposed Dangerous Method Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-049-delta-electronics-diaview-exposed-dangerous-method-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAView. User interaction is required to exploit this vulnerability in that the target must open and run a malicious project. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-0975. - [ZDI-26-048: Fortinet FortiSandbox fortisandbox Server-Side Request Forgery Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-048-fortinet-fortisandbox-fortisandbox-server-side-request-forgery-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-67685. - [ZDI-26-047: Hancom Office DOC File Parsing Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-047-hancom-office-doc-file-parsing-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-29867. - [ZDI-26-046: Cisco Snort _bnfa_search_csparse_nfa Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-046-cisco-snort-_bnfa_search_csparse_nfa-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cisco Snort. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-20026. - [ZDI-26-045: Cisco Snort _bnfa_search_csparse_nfa Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-045-cisco-snort-_bnfa_search_csparse_nfa-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Snort. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.3. The following CVEs are assigned: CVE-2026-20027. - [FortiOS and FortiSwitchManager Code Execution Vulnerability (CVE-2025-25249)](https://securecybervm.com/fortios-and-fortiswitchmanager-code-execution-vulnerability-cve-2025-25249/): Fortinet Product Security Team discovered a security vulnerability impacting FortiOS and FortiSwitchManager. Tracked as CVE-2025-25249, the vulnerability is a high-severity issue with a CVSS score of 7.3. The heap-based buffer overflow vulnerability exists in FortiOS and FortiSwitchManager cw_acd daemon. The vulnerability may allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests. The brain of Fortinet Security Fabric is its network operating system, FortiOS. The Security Fabric’s operating system, or software, connects all its parts and ensures tight integration throughout the deployment of the Security Fabric across an enterprise. FortiSwitch Manager (FSWM) is an - [Microsoft Patch Tuesday, January 2026 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-january-2026-security-update-review/): Starting the year on a security-first note, Microsoft’s January 2026 Patch Tuesday resolves several vulnerabilities that could impact enterprise environments. Here’s a quick breakdown of what you need to know. This month’s release addresses 115 vulnerabilities, including eight critical and 106 important-severity vulnerabilities. In this month’s updates, Microsoft has addressed three zero-day vulnerabilities. One of them was exploited, and two are publicly disclosed. Microsoft addressed one vulnerability in Microsoft Edge (Chromium-based) that was patched earlier this month. Microsoft Patch Tuesday, January edition, includes updates for vulnerabilities in Windows Ancillary Function - [ZDI-26-044: Microsoft Windows Desktop Window Manager Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-044-microsoft-windows-desktop-window-manager-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-20871. - [ZDI-26-043: (0Day) npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-043-0day-npm-cli-incorrect-permission-assignment-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of npm cli. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2026-0775. - [ZDI-26-042: (0Day) Upsonic Cloudpickle Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-042-0day-upsonic-cloudpickle-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Upsonic. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-0773. - [ZDI-26-041: (0Day) (Pwn2Own) Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-041-0day-pwn2own-enel-x-juicebox-40-telnet-service-missing-authentication-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Enel X JuiceBox 40 charging stations. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-0778. - [ZDI-26-040: (0Day) Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-26-040-0day-discord-client-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Discord Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-0776. - [ZDI-26-039: (0Day) WatchYourLAN Configuration Page Argument Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-039-0day-watchyourlan-configuration-page-argument-injection-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WatchYourLAN. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-0774. - [ZDI-26-038: (0Day) Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-038-0day-langflow-disk-cache-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-0772. - [ZDI-26-037: (0Day) Langflow PythonFunction Code Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-037-0day-langflow-pythonfunction-code-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Attack vectors and exploitability will vary depending on the configuration of the product. The ZDI has assigned a CVSS rating of 7.1. The following CVEs are assigned: CVE-2026-0771. - [ZDI-26-036: (0Day) Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-036-0day-langflow-exec_globals-inclusion-of-functionality-from-untrusted-control-sphere-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-0770. - [ZDI-26-035: (0Day) Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-035-0day-langflow-eval_custom_component_code-eval-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-0769. - [ZDI-26-034: (0Day) Langflow code Code Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-034-0day-langflow-code-code-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-0768. - [ZDI-26-033: (0Day) Open WebUI Cleartext Transmission of Credentials Information Disclosure Vulnerability](https://securecybervm.com/zdi-26-033-0day-open-webui-cleartext-transmission-of-credentials-information-disclosure-vulnerability/): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Open WebUI. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.3. The following CVEs are assigned: CVE-2026-0767. - [ZDI-26-032: (0Day) Open WebUI load_tool_module_by_id Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-032-0day-open-webui-load_tool_module_by_id-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-0766. - [ZDI-26-031: (0Day) Open WebUI PIP install_frontmatter_requirements Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-031-0day-open-webui-pip-install_frontmatter_requirements-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-0765. - [ZDI-26-030: (0Day) GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-030-0day-gpt-academic-upload-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-0764. - [ZDI-26-029: (0Day) GPT Academic run_in_subprocess_wrapper_func Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-029-0day-gpt-academic-run_in_subprocess_wrapper_func-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-0763. - [ZDI-26-028: (0Day) GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-26-028-0day-gpt-academic-stream_daas-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Interaction with a malicious DAAS server is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2026-0762. - [Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability (CVE-2026-20029)](https://securecybervm.com/cisco-identity-services-engine-xml-external-entity-processing-information-disclosure-vulnerability-cve-2026-20029/): Cisco released a security advisory to address a medium-severity vulnerability impacting Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC. Tracked as CVE-2026-20029, the vulnerability may allow an authenticated, remote attacker with administrative privileges to gain access to sensitive information. Cisco mentioned in their advisory that “Cisco PSIRT is aware that proof-of-concept exploit code is available for the - [N8n Warns of Remote Code Execution Vulnerability (CVE-2026-21877)](https://securecybervm.com/n8n-warns-of-remote-code-execution-vulnerability-cve-2026-21877/): N8n is vulnerable to a maximum severity flaw that could allow an authenticated attacker to execute arbitrary code with the privileges of the n8n process. Tracked as CVE-2026-21877, the vulnerability has a CVSS score of 10. Under certain conditions, an authenticated user may cause untrusted code to be executed by the n8n service. This could - [N8n Critical Arbitrary Command Execution Vulnerability (CVE-2025-68668)](https://securecybervm.com/n8n-critical-arbitrary-command-execution-vulnerability-cve-2025-68668/): A new vulnerability has been discovered in n8n, an open-source workflow automation tool. Tracked as CVE-2025-68668, the vulnerability has a critical severity rating with a CVSS score of 9.9. Successful exploitation of the vulnerability may allow an attacker to execute arbitrary commands on the host system running n8n, using the same privileges as the n8n process. For successful exploitation of the vulnerability, an attacker must be authenticated and have permission to create or modify workflows. n8n - [ZDI-25-1202: (0Day) Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1202-0day-anritsu-vectorstar-chx-file-parsing-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Anritsu VectorStar. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-15351. - [ZDI-25-1201: (0Day) Anritsu VectorStar CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1201-0day-anritsu-vectorstar-chx-file-parsing-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Anritsu VectorStar. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-15350. - [ZDI-25-1200: (0Day) Anritsu ShockLine SCPI Race Condition Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1200-0day-anritsu-shockline-scpi-race-condition-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Anritsu ShockLine. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-15349. - [ZDI-25-1199: (0Day) Anritsu ShockLine CHX File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1199-0day-anritsu-shockline-chx-file-parsing-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Anritsu ShockLine. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-15348. - [ZDI-25-1198: Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1198-trimble-sketchup-skp-file-parsing-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-15062. - [ZDI-25-1197: Framelink Figma MCP Server fetchWithRetry Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1197-framelink-figma-mcp-server-fetchwithretry-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Framelink Figma MCP Server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-15061. - [ZDI-25-1196: GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1196-gimp-psp-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-15059. - [MongoDB Memory Disclosure Vulnerability Under Active Exploitation (CVE-2025-14847) (MongoBleed)](https://securecybervm.com/mongodb-memory-disclosure-vulnerability-under-active-exploitation-cve-2025-14847-mongobleed/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a MongoDB vulnerability to its Known Exploited Vulnerabilities Catalog, acknowledging the active exploitation of the vulnerability. CISA urges users to patch the vulnerability before January 19, 2026. Tracked as CVE-2025-14847, the vulnerability has a high severity rating with a CVSS score of 8.7. Successful exploitation of the vulnerability may allow a remote, unauthenticated attacker to disclose sensitive data from the MongoDB server memory. The vulnerability - [ZDI-25-1195: (0Day) FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1195-0day-fontforge-sfd-file-parsing-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-15269. - [ZDI-25-1194: (0Day) FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1194-0day-fontforge-sfd-file-parsing-improper-validation-of-array-index-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-15270. - [ZDI-25-1193: (0Day) FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1193-0day-fontforge-sfd-file-parsing-improper-validation-of-array-index-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-15271. - [ZDI-25-1192: (0Day) FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1192-0day-fontforge-sfd-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-15272. - [ZDI-25-1191: (0Day) FontForge PFB File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1191-0day-fontforge-pfb-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-15273. - [ZDI-25-1190: (0Day) FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1190-0day-fontforge-sfd-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-15274. - [ZDI-25-1189: (0Day) FontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1189-0day-fontforge-sfd-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-15275. - [ZDI-25-1188: (0Day) FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1188-0day-fontforge-sfd-file-parsing-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-15280. - [ZDI-25-1187: (0Day) FontForge SFD File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1187-0day-fontforge-sfd-file-parsing-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-15276. - [ZDI-25-1186: (0Day) FontForge GUtils SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1186-0day-fontforge-gutils-sgi-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-15277. - [ZDI-25-1185: (0Day) FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1185-0day-fontforge-gutils-xbm-file-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-15278. - [ZDI-25-1184: (0Day) FontForge GUtils BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1184-0day-fontforge-gutils-bmp-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-15279. - [ZDI-25-1183: Tencent FaceDetection-DSFD resnet Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1183-tencent-facedetection-dsfd-resnet-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent FaceDetection-DSFD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13715. - [ZDI-25-1182: LibreNMS Alert Rule API Cross-Site Scripting Vulnerability](https://securecybervm.com/zdi-25-1182-librenms-alert-rule-api-cross-site-scripting-vulnerability/): This vulnerability allows remote attackers to execute arbitrary script on affected installations of LibreNMS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.3. The following CVEs are assigned: CVE-2025-68614. - [ZDI-25-1181: Net-SNMP SnmpTrapd Agent Message Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1181-net-snmp-snmptrapd-agent-message-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Net-SNMP. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-68615. - [ZDI-25-1180: Foxit PDF Reader PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1180-foxit-pdf-reader-pdf-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66499. - [ZDI-25-1179: Foxit PDF Reader U3D File Parsing Use-After-Free Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-1179-foxit-pdf-reader-u3d-file-parsing-use-after-free-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-66498. - [ZDI-25-1178: Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-1178-foxit-pdf-reader-u3d-file-parsing-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-66497. - [ZDI-25-1177: Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1177-foxit-pdf-reader-u3d-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66496. - [ZDI-25-1176: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1176-foxit-pdf-reader-annotation-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66495. - [ZDI-25-1175: Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1175-foxit-pdf-reader-pdf-file-parsing-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66494. - [ZDI-25-1174: Foxit PDF Reader AcroForm User-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1174-foxit-pdf-reader-acroform-user-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66493. - [ZDI-25-1173: Foxit PDF Reader Update Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1173-foxit-pdf-reader-update-service-incorrect-permission-assignment-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13941. - [ZDI-25-1172: RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1172-realdefense-superantispyware-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14492. - [ZDI-25-1171: RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1171-realdefense-superantispyware-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14496. - [ZDI-25-1170: RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1170-realdefense-superantispyware-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14493. - [ZDI-25-1169: RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1169-realdefense-superantispyware-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14495. - [ZDI-25-1168: RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1168-realdefense-superantispyware-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14497. - [ZDI-25-1167: RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1167-realdefense-superantispyware-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14488. - [ZDI-25-1166: RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1166-realdefense-superantispyware-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14490. - [ZDI-25-1165: RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1165-realdefense-superantispyware-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14489. - [ZDI-25-1164: RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1164-realdefense-superantispyware-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14491. - [ZDI-25-1163: RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1163-realdefense-superantispyware-exposed-dangerous-function-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14494. - [ZDI-25-1162: AzeoTech DAQFactory CTL File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1162-azeotech-daqfactory-ctl-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66590. - [ZDI-25-1161: AzeoTech DAQFactory CTL File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1161-azeotech-daqfactory-ctl-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66589. - [ZDI-25-1160: AzeoTech DAQFactory CTL File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1160-azeotech-daqfactory-ctl-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66589. - [ZDI-25-1159: AzeoTech DAQFactory CTL File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1159-azeotech-daqfactory-ctl-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66589. - [ZDI-25-1158: AzeoTech DAQFactory CTL File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1158-azeotech-daqfactory-ctl-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66589. - [ZDI-25-1155: (0Day) NSF Unidata NetCDF-C Attribute Name Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1155-0day-nsf-unidata-netcdf-c-attribute-name-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14936. - [ZDI-25-1154: (0Day) NSF Unidata NetCDF-C Dimension Name Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1154-0day-nsf-unidata-netcdf-c-dimension-name-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14935. - [ZDI-25-1153: (0Day) NSF Unidata NetCDF-C Time Unit Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1153-0day-nsf-unidata-netcdf-c-time-unit-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14932. - [ZDI-25-1152: (0Day) NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1152-0day-nsf-unidata-netcdf-c-variable-name-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14934. - [ZDI-25-1151: (0Day) NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1151-0day-nsf-unidata-netcdf-c-nc-variable-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14933. - [ZDI-25-1150: (0Day) Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1150-0day-hugging-face-transformers-perceiver-model-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14920. - [ZDI-25-1149: (0Day) Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1149-0day-hugging-face-transformers-transformer-xl-model-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14921. - [ZDI-25-1148: (0Day) Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1148-0day-hugging-face-transformers-sew-d-convert_config-code-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14927. - [ZDI-25-1147: (0Day) Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1147-0day-hugging-face-transformers-sew-convert_config-code-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14926. - [ZDI-25-1146: (0Day) Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1146-0day-hugging-face-transformers-hubert-convert_config-code-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14928. - [ZDI-25-1145: (0Day) Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1145-0day-hugging-face-transformers-glm4-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14930. - [ZDI-25-1144: (0Day) Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1144-0day-hugging-face-transformers-x-clip-checkpoint-conversion-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14929. - [ZDI-25-1143: (0Day) Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1143-0day-hugging-face-smolagents-remote-python-executor-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face smolagents. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 10.0. The following CVEs are assigned: CVE-2025-14931. - [ZDI-25-1142: (0Day) Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1142-0day-hugging-face-diffusers-cogview4-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Diffusers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14922. - [ZDI-25-1141: (0Day) Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1141-0day-hugging-face-transformers-megatron_gpt2-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14924. - [Cisco Releases Fix for Actively Exploited Zero-day Vulnerability (CVE-2025-20393)](https://securecybervm.com/cisco-releases-fix-for-actively-exploited-zero-day-vulnerability-cve-2025-20393/): Cisco Talos discovered a cyberattack campaign targeting Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager. Tracked as CVE-2025-20939, the vulnerability may allow an attacker to execute arbitrary commands with root privileges on the underlying operating system of targeted appliances. The vulnerability has a critical severity rating with a - [ZDI-25-1139: GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1139-gimp-jp2-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14425. - [ZDI-25-1138: GIMP XCF File Parsing Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1138-gimp-xcf-file-parsing-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14424. - [ZDI-25-1137: GIMP LBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1137-gimp-lbm-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14423. - [ZDI-25-1136: GIMP PNM File Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1136-gimp-pnm-file-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14422. - [ZDI-25-1135: Autodesk AutoCAD CATPRODUCT File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1135-autodesk-autocad-catproduct-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-10881. - [ZDI-25-1134: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1134-azeotech-daqfactory-ctl-file-parsing-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66586. - [ZDI-25-1133: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1133-azeotech-daqfactory-ctl-file-parsing-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66586. - [ZDI-25-1132: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1132-azeotech-daqfactory-ctl-file-parsing-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66586. - [ZDI-25-1131: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1131-azeotech-daqfactory-ctl-file-parsing-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66586. - [ZDI-25-1130: AzeoTech DAQFactory CTL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1130-azeotech-daqfactory-ctl-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66590. - [ZDI-25-1129: AzeoTech DAQFactory CTL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1129-azeotech-daqfactory-ctl-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66590. - [ZDI-25-1128: AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1128-azeotech-daqfactory-ctl-file-parsing-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AzeoTech DAQFactory. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-66585. - [ZDI-25-1127: Apple Safari JavaScriptCore FTL DataView byteLength Property Handling Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1127-apple-safari-javascriptcore-ftl-dataview-bytelength-property-handling-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-43541. - [ZDI-25-1126: Apple Safari JavaScriptCore HashTable Expansion Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1126-apple-safari-javascriptcore-hashtable-expansion-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-43501. - [ZDI-25-1125: Trend Micro Cleaner One Pro Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1125-trend-micro-cleaner-one-pro-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Cleaner One Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2025-53503. - [ZDI-25-1104: Sante PACS Server HTTP Content-Length Header Handling NULL Pointer Dereference Denial-of-Service Vulnerability](https://securecybervm.com/zdi-25-1104-sante-pacs-server-http-content-length-header-handling-null-pointer-dereference-denial-of-service-vulnerability/): This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-14501. - [ZDI-25-1103: Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1103-fuji-electric-monitouch-v-sft-v7-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-53524. - [ZDI-25-1102: Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1102-fuji-electric-monitouch-v-sft-v7-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-53524. - [ZDI-25-1101: Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1101-fuji-electric-monitouch-v-sft-v7-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-53524. - [ZDI-25-1100: Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1100-fuji-electric-monitouch-v-sft-v7-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-53524. - [ZDI-25-1099: Microsoft Edge Mark-Of-The-Web Removal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1099-microsoft-edge-mark-of-the-web-removal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-60711. - [ZDI-25-1098: Fortinet FortiSandbox hcproxy Cross-Site Scripting Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1098-fortinet-fortisandbox-hcproxy-cross-site-scripting-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiSandbox. Minimal user interaction is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2025-54353. - [ZDI-25-1097: Fortinet FortiSandbox name Parameter Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1097-fortinet-fortisandbox-name-parameter-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-53949. - [ZDI-25-1096: Fortinet FortiSandbox upload_vdi_file Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1096-fortinet-fortisandbox-upload_vdi_file-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-53949. - [ZDI-25-1095: Fortinet FortiSandbox names admindel_confirm Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1095-fortinet-fortisandbox-names-admindel_confirm-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-53949. - [ZDI-25-1094: Fortinet FortiWeb ApacheCookie_parse Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability](https://securecybervm.com/zdi-25-1094-fortinet-fortiweb-apachecookie_parse-improper-verification-of-cryptographic-signature-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on affected installations of Fortinet FortiWeb. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2025-64447. - [Apple Warns of Zero-day Vulnerability Exploited in Attack (CVE-2025-43529)](https://securecybervm.com/apple-warns-of-zero-day-vulnerability-exploited-in-attack-cve-2025-43529/): Apple issued security updates for iOS, iPadOS, macOS, and its Safari web browser to address a vulnerability being exploited in the wild. Tracked as CVE-2025-43529, the use-after-free vulnerability exists in WebKit. An attacker may exploit the vulnerability by processing maliciously crafted web content, leading to arbitrary code execution. The vulnerability was addressed with improved memory management. Apple is aware of an active exploitation of a vulnerability in a highly sophisticated attack targeting specific, high-profile individuals on iOS versions before iOS 26. CISA added the CVE-2025-43529 to its Known Exploited Vulnerabilities Catalog, urging users to patch the vulnerability before January - [React Server Components Multiple Vulnerabilities (CVE-2025-55184, CVE-2025-67779, & CVE-2025-55183)](https://securecybervm.com/react-server-components-multiple-vulnerabilities-cve-2025-55184-cve-2025-67779-cve-2025-55183/): React Server Components (RSC) are vulnerable to two high-severity and one medium-severity vulnerabilities, tracked as CVE-2025-55183, CVE-2025-55184, and CVE-2025-67779. CVE-2025-55184 and CVE-2025-67779 can lead to denial-of-service attacks, while CVE-2025-55183 exposes backend source code, potentially leaking API keys and other sensitive information. CVE-2025-55184 and CVE-2025-67779: Denial of Service Vulnerabilities Security researchers identified a flaw where a specially crafted HTTP request sent to any Server Functions endpoint triggers React’s deserialization process, leading to an - [CISA Warns Actively Exploited GeoServer Unauthenticated XML XXE Vulnerability (CVE-2025-58360)](https://securecybervm.com/cisa-warns-actively-exploited-geoserver-unauthenticated-xml-xxe-vulnerability-cve-2025-58360/): The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an OSGeo GeoServer vulnerability to its Known Exploited Vulnerabilities Catalog, acknowledging the active exploitation of the vulnerability. Tracked as CVE-2025-58360, the vulnerability has a high severity rating with a CVSS score of 8.2. Successful exploitation of the vulnerability may allow an attacker to retrieve arbitrary files from the server’s file system. GeoServer is an open-source server software written - [ZDI-25-1093: (0Day) PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1093-0day-pdfsam-enhanced-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows phyiscally-present attackers to escalate privileges on affected installations of PDFsam Enhanced. An attacker must first obtain the ability to mount a malicious drive onto the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.6. The following CVEs are assigned: CVE-2025-14405. - [ZDI-25-1092: (0Day) PDFsam Enhanced XLS File Insufficient UI Warning Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1092-0day-pdfsam-enhanced-xls-file-insufficient-ui-warning-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDFsam Enhanced. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2025-14404. - [ZDI-25-1091: (0Day) PDFsam Enhanced Launch Insufficient UI Warning Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1091-0day-pdfsam-enhanced-launch-insufficient-ui-warning-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDFsam Enhanced. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14403. - [ZDI-25-1090: (0Day) PDFsam Enhanced DOC File Insufficient UI Warning Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1090-0day-pdfsam-enhanced-doc-file-insufficient-ui-warning-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDFsam Enhanced. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2025-14402. - [ZDI-25-1089: (0Day) PDFsam Enhanced App Out-Of-Bounds Read Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1089-0day-pdfsam-enhanced-app-out-of-bounds-read-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDFsam Enhanced. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14401. - [ZDI-25-1088: (0Day) Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1088-0day-soda-pdf-desktop-launch-insufficient-ui-warning-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2025-14415. - [ZDI-25-1087: (0Day) Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1087-0day-soda-pdf-desktop-word-file-insufficient-ui-warning-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14414. - [ZDI-25-1086: (0Day) Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1086-0day-soda-pdf-desktop-cbz-file-parsing-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14413. - [ZDI-25-1085: (0Day) Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1085-0day-soda-pdf-desktop-xls-file-insufficient-ui-warning-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14412. - [ZDI-25-1084: (0Day) Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-1084-0day-soda-pdf-desktop-pdf-file-parsing-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-14411. - [ZDI-25-1083: (0Day) Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-1083-0day-soda-pdf-desktop-pdf-file-parsing-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-14410. - [ZDI-25-1082: (0Day) Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1082-0day-soda-pdf-desktop-pdf-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14409. - [ZDI-25-1081: (0Day) Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-1081-0day-soda-pdf-desktop-pdf-file-parsing-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-14408. - [ZDI-25-1080: (0Day) Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-1080-0day-soda-pdf-desktop-pdf-file-parsing-memory-corruption-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-14407. - [ZDI-25-1079: (0Day) Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1079-0day-soda-pdf-desktop-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Soda PDF Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14406. - [Google Patches Zero-day Vulnerability Exploited in Attack](https://securecybervm.com/google-patches-zero-day-vulnerability-exploited-in-attack/): Google has issued urgent updates to address another Chrome zero-day vulnerability that is actively being exploited in the wild, making it the eighth security flaw fixed since the beginning of the year. The previous are mentioned below: CVE-2025-13223 CVE-2025-10585 CVE-2025-6558 CVE-2025-6554 CVE-2025-5419 CVE-2025-2783 CVE-2025-4664 Tracked as 466192044, Google has not provided any information regarding the vulnerability. The advisory - [Ivanti Endpoint Manager (EPM) Multiple Vulnerabilities (CVE-2025-10573, CVE-2025-13659, CVE-2025-13661, & CVE-2025-13662)](https://securecybervm.com/ivanti-endpoint-manager-epm-multiple-vulnerabilities-cve-2025-10573-cve-2025-13659-cve-2025-13661-cve-2025-13662/): Ivanti released a security advisory to address three high-severity vulnerabilities and one critical-severity vulnerability impacting EPM core and remote consoles. Ivanti mentioned in their advisory that they are unaware of any customers being exploited by these vulnerabilities at the time of disclosure. Ivanti Endpoint Manager (EPM) is a tool that helps IT administrators manage and secure devices and data across networks. It can manage - [ZDI-25-1072: IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1072-icewarp14-x-file-operation-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of IceWarp. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-14500. - [ZDI-25-1071: IceWarp gmaps Cross-Site Scripting Authentication Bypass Vulnerability](https://securecybervm.com/zdi-25-1071-icewarp-gmaps-cross-site-scripting-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on affected installations of IceWarp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-14499. - [ZDI-25-1070: TradingView Desktop Electron Uncontrolled Search Path Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1070-tradingview-desktop-electron-uncontrolled-search-path-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of TradingView Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14498. - [ZDI-25-1069: (Pwn2Own) oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability](https://securecybervm.com/zdi-25-1069-pwn2own-ofono-cusd-stack-based-buffer-overflow-code-execution-vulnerability/): This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-7539. - [ZDI-25-1068: Fuji Electric Monitouch V-SFT V7 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1068-fuji-electric-monitouch-v-sft-v7-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-54496. - [ZDI-25-1067: Fuji Electric Monitouch V-SFT V7 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1067-fuji-electric-monitouch-v-sft-v7-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-54526. - [ZDI-25-1066: Fuji Electric Monitouch V-SFT V7 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1066-fuji-electric-monitouch-v-sft-v7-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-54526. - [ZDI-25-1065: Fuji Electric Monitouch V-SFT V7 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1065-fuji-electric-monitouch-v-sft-v7-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-54496. - [ZDI-25-1064: Fuji Electric Monitouch V-SFT V7 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1064-fuji-electric-monitouch-v-sft-v7-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-54526. - [ZDI-25-1063: Fuji Electric Monitouch V-SFT V7 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1063-fuji-electric-monitouch-v-sft-v7-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-54526. - [ZDI-25-1062: Fuji Electric Monitouch V-SFT V7 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1062-fuji-electric-monitouch-v-sft-v7-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-54496. - [ZDI-25-1061: Windscribe Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1061-windscribe-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-14400. - [ZDI-25-1060: Senstar Symphony FetchStoredLicense Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-1060-senstar-symphony-fetchstoredlicense-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Senstar Symphony. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-12491. - [ZDI-25-1059: Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1059-vim-for-windows-uncontrolled-search-path-element-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vim for Windows. User interaction is required to exploit this vulnerability in that the target must open a malicious file and perform one of a set of specific actions in the editor. The ZDI has assigned a CVSS rating of 7.8. The - [ZDI-25-1058: (0Day) Microsoft Windows TAR File UI Misrepresentation Vulnerability](https://securecybervm.com/zdi-25-1058-0day-microsoft-windows-tar-file-ui-misrepresentation-vulnerability/): This vulnerability allows remote attackers to disguise hard links on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. - [ZDI-25-1057: (0Day) Microsoft Visual Studio VsDevCmd Uncontrolled Search Path Element Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1057-0day-microsoft-visual-studio-vsdevcmd-uncontrolled-search-path-element-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. - [ZDI-25-1056: (0Day) Microsoft ASP.NET SOAP Execution Restriction Bypass Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1056-0day-microsoft-asp-net-soap-execution-restriction-bypass-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft ASP.NET. Authentication may be required to exploit this vulnerability depending upon configuration. Additionally, specific configuration is required. The ZDI has assigned a CVSS rating of 5.0. - [ZDI-25-1055: (0Day) Microsoft Windows MP4 File Parsing Null Pointer Dereference Denial-of-Service Vulnerability](https://securecybervm.com/zdi-25-1055-0day-microsoft-windows-mp4-file-parsing-null-pointer-dereference-denial-of-service-vulnerability/): This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 4.3. - [ZDI-25-1054: (0Day) Microsoft Windows dir Command Improper Character Neutralization Vulnerability](https://securecybervm.com/zdi-25-1054-0day-microsoft-windows-dir-command-improper-character-neutralization-vulnerability/): This vulnerability allows remote attackers to display misleading terminal output on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. - [ZDI-25-1053: (0Day) Microsoft SharePoint Calendar Overlay Hyperlink Injection Vulnerability](https://securecybervm.com/zdi-25-1053-0day-microsoft-sharepoint-calendar-overlay-hyperlink-injection-vulnerability/): This vulnerability allows remote attackers to inject unexpected hyperlinks on affected installations of Microsoft SharePoint. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.5. - [ZDI-25-1052: Ivanti Endpoint Manager CAB File Parsing Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1052-ivanti-endpoint-manager-cab-file-parsing-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.1. The following CVEs are assigned: CVE-2025-13661. - [ZDI-25-1051: Ivanti Endpoint Manager HIIDriver Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1051-ivanti-endpoint-manager-hiidriver-improper-verification-of-cryptographic-signature-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Alternatively, no user interaction is required if the attacker has administrative credentials to the application. The ZDI - [ZDI-25-1050: Microsoft Azure Virtual Desktop Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1050-microsoft-azure-virtual-desktop-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Azure Virtual Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. - [ZDI-25-1049: Microsoft Windows win32kfull Out-Of-Bounds Write Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1049-microsoft-windows-win32kfull-out-of-bounds-write-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-62458. - [ZDI-25-1048: Microsoft Windows win32kfull Out-Of-Bounds Write Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1048-microsoft-windows-win32kfull-out-of-bounds-write-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-62458. - [ZDI-25-1047: Microsoft Windows win32kbase Out-Of-Bounds Access Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1047-microsoft-windows-win32kbase-out-of-bounds-access-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-62458. - [ZDI-25-1046: Microsoft Windows win32kfull Type Confusion Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1046-microsoft-windows-win32kfull-type-confusion-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-62458. - [Fortinet Addresses Critical Vulnerabilities Impacting Multiple Fortinet Products (CVE-2025-59718 & CVE-2025-59719)](https://securecybervm.com/fortinet-addresses-critical-vulnerabilities-impacting-multiple-fortinet-products-cve-2025-59718-cve-2025-59719/): Fortinet releases fixes to address two critical vulnerabilities affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager. Tracked as CVE-2025-59718 and CVE-2025-59719, both vulnerabilities have a CVSS score of 9.1. Successful exploitation of the vulnerabilities could lead to improper access control. An improper verification of cryptographic signatures vulnerability in FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager may allow an unauthenticated - [Microsoft Patch Tuesday, December 2025 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-december-2025-security-update-review/): As the year winds down, Microsoft Patch Tuesday in December arrives with essential fixes and enhancements to close vulnerabilities and boost performance. Here’s a quick breakdown of what you need to know. This month’s release addresses 72 vulnerabilities, including three critical and 55 important-severity vulnerabilities. In this month’s updates, Microsoft has addressed three zero-day vulnerabilities. One of them was exploited, and two were publicly disclosed. Microsoft has addressed 15 vulnerabilities in Microsoft Edge (Chromium-based) in this month’s updates. Microsoft Patch Tuesday, December edition, includes updates - [ZDI-25-1041: NVIDIA Isaac-GR00T TorchSerializer Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1041-nvidia-isaac-gr00t-torchserializer-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Isaac-GR00T. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-33183. - [React Server Components (RSC) Remote Code Execution Vulnerabilities](https://securecybervm.com/react-server-components-rsc-remote-code-execution-vulnerabilities/): On December 3rd, 2025, React disclosed a critical remote code execution (RCE) vulnerability in React Server Components (RSC), tracked as CVE‑2025‑55182. Shortly after, a related vulnerability was confirmed in Next.js App Router, registered as CVE‑2025‑66478. Both issues were assigned a CVSS score of 10.0, indicating the highest severity level. These flaws exploit the ‘React Flight’ - [ZDI-25-1040: (Pwn2Own) Synology DiskStation DS925+ samlAuth Authentication Bypass Vulnerability](https://securecybervm.com/zdi-25-1040-pwn2own-synology-diskstation-ds925-samlauth-authentication-bypass-vulnerability/): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Synology DiskStation DS925+ devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2025-13392. - [ZDI-25-1039: (Pwn2Own) Synology BeeStation Plus auth_info Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1039-pwn2own-synology-beestation-plus-auth_info-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Synology BeeStation Plus. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-12686. - [ZDI-25-1038: NVIDIA Megatron load_common Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1038-nvidia-megatron-load_common-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-23357. - [ZDI-25-1037: Emerson Movicon RTUSERS File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1037-emerson-movicon-rtusers-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Emerson Movicon. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-3871. - [ZDI-25-1036: Tencent TFace restore_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1036-tencent-tface-restore_checkpoint-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent TFace. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13709. - [ZDI-25-1035: Tencent TFace eval Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1035-tencent-tface-eval-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent TFace. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13711. - [ZDI-25-1034: Tencent PatrickStar merge_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1034-tencent-patrickstar-merge_checkpoint-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent PatrickStar. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13706. - [ZDI-25-1033: Tencent NeuralNLP-NeuralClassifier _load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1033-tencent-neuralnlp-neuralclassifier-_load_checkpoint-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent NeuralNLP-NeuralClassifier. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13708. - [ZDI-25-1032: Tencent MimicMotion create_pipeline Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1032-tencent-mimicmotion-create_pipeline-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent MimicMotion. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13716. - [ZDI-25-1031: Tencent MedicalNet generate_model Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1031-tencent-medicalnet-generate_model-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent MedicalNet. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13714. - [ZDI-25-1030: Tencent HunyuanVideo load_vae Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1030-tencent-hunyuanvideo-load_vae-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent HunyuanVideo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13710. - [ZDI-25-1029: Tencent HunyuanDiT model_resume Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1029-tencent-hunyuandit-model_resume-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent HunyuanDiT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13707. - [ZDI-25-1028: Tencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1028-tencent-hunyuandit-merge-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent HunyuanDiT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13712. - [ZDI-25-1027: Tencent Hunyuan3D-1 load_pretrained Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1027-tencent-hunyuan3d-1-load_pretrained-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent Hunyuan3D-1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13713. - [ZDI-25-1026: Appleton UPSMON-PRO UPSMONProService Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1026-appleton-upsmon-pro-upsmonproservice-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Appleton UPSMON-PRO. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2024-3871. - [ZDI-25-1025: MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1025-mariadb-mariadb-dump-utility-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2025-13699. - [Shai-Hulud 2.0 Supply Chain Attack Compromised Major Packages](https://securecybervm.com/shai-hulud-2-0-supply-chain-attack-compromised-major-packages/): A renewed and intensified npm supply chain attack campaign linked to the original Shai-Hulud malware is making headlines. This campaign, active from November 21 to 23, 2025, comprises popular npm packages from major publishers, including Maven, Zapier, ENS Domains, PostHog, and Postman. The attackers insert malicious code that executes during the npm package preinstall phase, - [ZDI-25-1024: DreamFactory saveZipFile Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1024-dreamfactory-savezipfile-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of DreamFactory. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2025-13700. - [ZDI-25-1023: VIPRE Advanced Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1023-vipre-advanced-security-incorrect-permission-assignment-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security for PC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-13703. - [ZDI-25-1022: Deciso OPNsense diag_backup.php filename Directory Traversal Arbitrary File Creation Vulnerability](https://securecybervm.com/zdi-25-1022-deciso-opnsense-diag_backup-php-filename-directory-traversal-arbitrary-file-creation-vulnerability/): This vulnerability allows network-adjacent attackers to create arbitrary files on affected installations of Deciso OPNsense. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.5. The following CVEs are assigned: CVE-2025-13698. - [ZDI-25-1021: Siemens SINEC NMS getTotalAndFilterCounts SQL Injection Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1021-siemens-sinec-nms-gettotalandfiltercounts-sql-injection-privilege-escalation-vulnerability/): This vulnerability allows remote attackers to escalate privileges on affected installations of Siemens SINEC NMS. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-40755. - [ZDI-25-1020: Arista NG Firewall runTroubleshooting Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1020-arista-ng-firewall-runtroubleshooting-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2025-6978. - [ZDI-25-1019: Arista NG Firewall replace_marker Exposed Dangerous Function Authentication Bypass Vulnerability](https://securecybervm.com/zdi-25-1019-arista-ng-firewall-replace_marker-exposed-dangerous-function-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to to bypass authentication on affected installations of Arista NG Firewall. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-6979. - [ZDI-25-1018: Arista NG Firewall load_capture_settings Exposed Dangerous Function Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-1018-arista-ng-firewall-load_capture_settings-exposed-dangerous-function-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Arista NG Firewall. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-6980. - [ZDI-25-1017: ASUS MyASUS Incorrect Permission Assignment Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1017-asus-myasus-incorrect-permission-assignment-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of ASUS MyASUS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-59373. - [ZDI-25-1016: Wibu-Systems WibuKey Runtime Untrusted Pointer Dereference Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1016-wibu-systems-wibukey-runtime-untrusted-pointer-dereference-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Wibu-Systems WibuKey Runtime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. - [ZDI-25-1015: Parallels Toolbox CleanDrive Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-1015-parallels-toolbox-cleandrive-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Toolbox. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. Additional user interaction is required in that an administrator must begin a cleanup of temporary files on the system. - [ZDI-25-1014: Fortinet FortiWeb policy_scripting_post_handler Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1014-fortinet-fortiweb-policy_scripting_post_handler-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiWeb. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2025-58034. - [Fortinet FortiWeb Zero-day Vulnerability Exploited in the Wild (CVE-2025-64446)](https://securecybervm.com/fortinet-fortiweb-zero-day-vulnerability-exploited-in-the-wild-cve-2025-64446/): Threat actors are exploiting a zero-day vulnerability, CVE-2025-64446, that has been discovered in Fortinet’s FortiWeb web application firewall product. Successful exploitation of this new vulnerability allows an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests. FortiGuard mentioned in the advisory that they are aware of the active exploitation - [ZDI-25-1013: NVIDIA AIStore AuthN Hard-coded Credentials Authentication Bypass Vulnerability](https://securecybervm.com/zdi-25-1013-nvidia-aistore-authn-hard-coded-credentials-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on affected installations of NVIDIA AIStore. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-33186. - [ZDI-25-1012: NVIDIA AIStore AuthN users Missing Authentication for Critical Function Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-1012-nvidia-aistore-authn-users-missing-authentication-for-critical-function-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of NVIDIA AIStore. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-33185. - [ZDI-25-1011: Apple Safari JavaScriptCore Wasm Function Parsing Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1011-apple-safari-javascriptcore-wasm-function-parsing-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-43432. - [ZDI-25-1010: Apple Safari JavaScriptCore DFG CSE Phase Graph Node Substitution Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1010-apple-safari-javascriptcore-dfg-cse-phase-graph-node-substitution-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-43457. - [ZDI-25-1009: Apple macOS USD readAccessorData Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1009-apple-macos-usd-readaccessordata-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-43384. - [ZDI-25-1008: Apple macOS ICC Profile Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1008-apple-macos-icc-profile-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-43380. - [ZDI-25-1007: Apple Safari JavaScriptCore operationMapIteratorNext Type Confusion Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-1007-apple-safari-javascriptcore-operationmapiteratornext-type-confusion-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 4.3. The following CVEs are assigned: CVE-2025-43438. - [ZDI-25-1006: Apple macOS CoreText Font Glyph Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1006-apple-macos-coretext-font-glyph-parsing-out-of-bounds-read-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2025-43445. - [ZDI-25-1005: Apple macOS WindowServer Excessive Iteration Denial-of-Service Vulnerability](https://securecybervm.com/zdi-25-1005-apple-macos-windowserver-excessive-iteration-denial-of-service-vulnerability/): This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Apple macOS. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.3. The following CVEs are assigned: CVE-2025-43401. - [ZDI-25-1004: Apple macOS USD importMeshJointWeights Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1004-apple-macos-usd-importmeshjointweights-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-43386. - [ZDI-25-1003: Apple macOS USD importNodeAnimations Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1003-apple-macos-usd-importnodeanimations-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-43383. - [ZDI-25-1002: Apple macOS USD importMeshes Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-1002-apple-macos-usd-importmeshes-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-43385. - [ZDI-25-1001: Microsoft Windows Common Log File System Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-1001-microsoft-windows-common-log-file-system-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-60709. - [ZDI-25-1000: Adobe USD-Fileformat-plugins usdGltf Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-1000-adobe-usd-fileformat-plugins-usdgltf-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe USD-Fileformat-plugins. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-61844. - [ZDI-25-999: Adobe USD-Fileformat-plugins usdGltf Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-999-adobe-usd-fileformat-plugins-usdgltf-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe USD-Fileformat-plugins. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-61845. - [ZDI-25-998: Adobe USD-Fileformat-plugins usdGltf Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-998-adobe-usd-fileformat-plugins-usdgltf-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe USD-Fileformat-plugins. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-61843. - [ZDI-25-997: Adobe USD-Fileformat-plugins usdGltf Use-After-Free Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-997-adobe-usd-fileformat-plugins-usdgltf-use-after-free-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe USD-Fileformat-plugins. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-61842. - [Microsoft Patch Tuesday, November 2025 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-november-2025-security-update-review/): Microsoft released its November Patch Tuesday Security Updates. Here’s a quick breakdown of what you need to know. This month’s release addresses 68 vulnerabilities, including five critical and 59 important-severity vulnerabilities. In this month’s updates, Microsoft has addressed a zero-day vulnerability that was being exploited in the wild. Microsoft has addressed five vulnerabilities in Microsoft - [ZDI-25-991: Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-991-academy-software-foundation-openexr-exr-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-12840. - [ZDI-25-990: Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-990-academy-software-foundation-openexr-exr-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-12839. - [ZDI-25-989: Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-989-academy-software-foundation-openexr-exr-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-12495. - [ZDI-25-988: MSP360 Free Backup Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-988-msp360-free-backup-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of MSP360 Free Backup. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. User interaction on the part of an administrator is needed additionally. The ZDI has assigned a CVSS rating of - [ZDI-25-987: Autodesk AutoCAD PRT File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-987-autodesk-autocad-prt-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9458. - [ZDI-25-986: Autodesk On-Demand Install Services adsk_IPCUpdaterChannel Origin Validation Error Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-986-autodesk-on-demand-install-services-adsk_ipcupdaterchannel-origin-validation-error-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Autodesk On-Demand Install Services. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-10885. - [ZDI-25-985: Delta Electronics CNCSoft-G2 DOPSoft DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-985-delta-electronics-cncsoft-g2-dopsoft-dpax-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-47728. - [Cisco Addresses Remote Code Execution Vulnerabilities in Unified Contact Center Express (CVE-2025-20354 & CVE-2025-20358)](https://securecybervm.com/cisco-addresses-remote-code-execution-vulnerabilities-in-unified-contact-center-express-cve-2025-20354-cve-2025-20358/): Cisco Unified CCX is vulnerable to two security vulnerabilities that could allow an unauthenticated, remote attacker to upload arbitrary files, bypass authentication, execute arbitrary commands, and elevate privileges to root. Tracked as CVE-2025-20354 & CVE-2025-20358, both vulnerabilities have critical severity ratings. Cisco Unified Contact Center Express (UCCX) is a software solution designed for small to medium-sized contact centers, - [ZDI-25-984: Alibaba Cloud Workspace Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-984-alibaba-cloud-workspace-client-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Alibaba Cloud Workspace Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. - [ZDI-25-983: evernote-mcp-server openBrowser Command Injection Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-983-evernote-mcp-server-openbrowser-command-injection-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of evernote-mcp-server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-12489. - [ZDI-25-982: oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-982-oobabooga-text-generation-webui-trust_remote_code-reliance-on-untrusted-inputs-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-12487. - [ZDI-25-981: oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-981-oobabooga-text-generation-webui-trust_remote_code-reliance-on-untrusted-inputs-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-12488. - [ZDI-25-980: Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-980-heimdall-data-database-proxy-cross-site-scripting-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Minimal user interaction is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-12486. - [ZDI-25-979: Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-979-netgate-pfsense-ce-suricata-path-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to create arbitrary files on affected installations of Netgate pfSense. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-12490. - [ZDI-25-978: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-978-gimp-xwd-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-10934. - [ZDI-25-977: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-977-delta-electronics-asda-soft-par-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ASDA-Soft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-62579. - [ZDI-25-976: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-976-delta-electronics-asda-soft-par-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ASDA-Soft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-62580. - [ZDI-25-975: X.Org Server XkbSetCompatMap Numeric Truncation Error Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-975-x-org-server-xkbsetcompatmap-numeric-truncation-error-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-62231. - [ZDI-25-974: X.Org Server XkbRemoveResourceClient Use-After-Free Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-974-x-org-server-xkbremoveresourceclient-use-after-free-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-62230. - [ZDI-25-973: X.Org Server present_create_notifies Use-After-Free Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-973-x-org-server-present_create_notifies-use-after-free-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-62229. - [ZDI-25-972: Krita TGA File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-972-krita-tga-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Krita. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-59820. - [ZDI-25-971: Delta Electronics DIAScreen DPA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-971-delta-electronics-diascreen-dpa-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAScreen. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-59298. - [ZDI-25-970: Delta Electronics DIAScreen DPA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-970-delta-electronics-diascreen-dpa-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAScreen. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-59299. - [ZDI-25-969: Delta Electronics DIAScreen DPA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-969-delta-electronics-diascreen-dpa-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAScreen. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-59297. - [ZDI-25-968: Delta Electronics DIAScreen DPA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-968-delta-electronics-diascreen-dpa-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAScreen. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-59300. - [ZDI-25-967: Delta Electronics CNCSoft-G2 DPAX File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-967-delta-electronics-cncsoft-g2-dpax-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-58319. - [ZDI-25-966: Cisco Snort process_mime_body Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-966-cisco-snort-process_mime_body-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Snort. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2025-20359. - [ZDI-25-965: DataChain data_storage Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-965-datachain-data_storage-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of DataChain. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-61677. - [ZDI-25-964: Microsoft Windows LNK File Parsing Improper Input Validation NTLM Relay Vulnerability](https://securecybervm.com/zdi-25-964-microsoft-windows-lnk-file-parsing-improper-input-validation-ntlm-relay-vulnerability/): This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-50154. - [ZDI-25-963: Veeam Agent for Microsoft Windows Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-963-veeam-agent-for-microsoft-windows-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Veeam Agent for Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. User interaction on the part of an administrator is needed additionally. The ZDI has assigned a CVSS - [ZDI-25-962: Oracle VirtualBox VMSVGA Integer Overflow Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-962-oracle-virtualbox-vmsvga-integer-overflow-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2025-62589. - [ZDI-25-961: Oracle VirtualBox USB Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-961-oracle-virtualbox-usb-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2025-62641. - [ZDI-25-960: Oracle VirtualBox VMSVGA Stack-based Buffer Overflow Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-960-oracle-virtualbox-vmsvga-stack-based-buffer-overflow-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2025-62590. - [ZDI-25-959: Oracle VirtualBox VMSVGA Integer Underflow Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-959-oracle-virtualbox-vmsvga-integer-underflow-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.2. The following CVEs are assigned: CVE-2025-62588. - [ZDI-25-958: Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-958-oracle-virtualbox-vmsvga-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.0. The following CVEs are assigned: CVE-2025-62591. - [Adobe Magento Improper Input Validation Vulnerability Exploited in Attack (CVE-2025-54236)](https://securecybervm.com/adobe-magento-improper-input-validation-vulnerability-exploited-in-attack-cve-2025-54236/): Security experts from e-commerce security firm Sansec have discovered that threat attackers are actively exploiting a vulnerability in Adobe Commerce and Magento Open-Source platforms. Tracked as CVE-2025-54236, the vulnerability has a critical severity rating with a CVSS score of 9.1. The vulnerability originates from an improper input validation and could allow attackers to hijack customer accounts - [Oracle Critical Patch Update, October 2025 Security Update Review](https://securecybervm.com/oracle-critical-patch-update-october-2025-security-update-review/): Oracle released its third quarterly edition of this year’s Critical Patch Update. The update received patches for 374 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products. In this quarterly Oracle Critical Patch Update, Oracle - [F5 BIG-IP Source Code Leaked in State-Linked Cyberattack (BRICKSTORM Malware)](https://securecybervm.com/f5-big-ip-source-code-leaked-in-state-linked-cyberattack-brickstorm-malware/): F5 Networks warned its users about a widespread cyberattack that compromised its systems and led to the theft of BIG-IP source code and details of unpatched security vulnerabilities. In the article, F5 describes becoming aware of the breach in August 2025. A highly sophisticated nation-state threat actor maintained long-term, persistent access to, and downloaded files - [ZDI-25-956: (0Day) Ashlar-Vellum Cobalt CO File Parsing Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-956-0day-ashlar-vellum-cobalt-co-file-parsing-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-11465. - [ZDI-25-955: (0Day) Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-955-0day-ashlar-vellum-cobalt-co-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-11464. - [ZDI-25-954: (0Day) Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-954-0day-ashlar-vellum-cobalt-xe-file-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-11463. - [Veeam Addressed Critical Vulnerabilities Impacting Backup and Replication (CVE-2025-48983 & CVE-2025-48984)](https://securecybervm.com/veeam-addressed-critical-vulnerabilities-impacting-backup-and-replication-cve-2025-48983-cve-2025-48984/): Veeam released a security advisory to address three vulnerabilities impacting its Backup and Replication application. Successful exploitation of the vulnerabilities could allow an authenticated domain user to gain complete control of the backup environment, leading to loss of backup integrity, data theft, and potential compromise of production systems. Veeam Backup & Replication is one of - [Microsoft Patch Tuesday, October 2025 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-october-2025-security-update-review/): As cybersecurity threats evolve, Microsoft’s October 2025 Patch Tuesday delivers one of the most comprehensive security updates of the year. Here’s a quick breakdown of what you need to know. This month’s release addresses a staggering 193 vulnerabilities, including nine critical and 123 important-severity vulnerabilities. In this month’s updates, Microsoft has addressed six zero-day vulnerabilities. - [ZDI-25-953: Microsoft Windows TAR File Parsing NTLM Relay Vulnerability](https://securecybervm.com/zdi-25-953-microsoft-windows-tar-file-parsing-ntlm-relay-vulnerability/): This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-59284. - [Oracle Addresses a New Vulnerability Impacting E-Business Suite (CVE-2025-61884)](https://securecybervm.com/oracle-addresses-a-new-vulnerability-impacting-e-business-suite-cve-2025-61884/): On Saturday, Oracle released a security advisory addressing a high-severity vulnerability impacting E-Business Suite. Tracked as CVE-2025-61884, the vulnerability may allow an unauthenticated remote attacker to access sensitive resources. Oracle has not mentioned the vulnerability’s exploitation. However, Rob Duhart, the chief security officer of Oracle Security, described in his blog that “this vulnerability affects some - [ZDI-25-952: Ivanti Endpoint Manager UniqueFilename Unrestricted File Upload Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-952-ivanti-endpoint-manager-uniquefilename-unrestricted-file-upload-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Alternatively, no user interaction is required if the attacker has administrative credentials to the application. The ZDI - [ZDI-25-951: Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-951-allegra-databasebackupbl-directory-traversal-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are assigned: CVE-2025-11466. - [Oracle E-Business Suite Remote Code Execution Vulnerability Exploited in the Wild (CVE-2025-61882)](https://securecybervm.com/oracle-e-business-suite-remote-code-execution-vulnerability-exploited-in-the-wild-cve-2025-61882/): Oracle released a security advisory to address a critical zero-day vulnerability impacting the E-Business Suite. Tracked as CVE-2025-61882, the vulnerability has a CVSS score of 9.8. Successful exploitation of the vulnerability may allow an attacker to achieve remote code execution. Security reports suggest the vulnerability is actively exploited in Clop data theft attacks. CISA acknowledged - [ZDI-25-950: 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-950-7-zip-zip-file-parsing-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2025-11002. - [ZDI-25-949: 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-949-7-zip-zip-file-parsing-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.0. The following CVEs are assigned: CVE-2025-11001. - [ZDI-25-948: Jaspersoft Jasper Reports JRLoader Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-948-jaspersoft-jasper-reports-jrloader-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Jaspersoft Jasper Reports. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2025-10492. - [ZDI-25-947: (0Day) Ivanti Endpoint Manager AgentPortal Deserialization of Untrusted Data Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-947-0day-ivanti-endpoint-manager-agentportal-deserialization-of-untrusted-data-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Ivanti Endpoint Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. - [ZDI-25-946: (0Day) Ivanti Endpoint Manager Report_RunPatch SQL Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-946-0day-ivanti-endpoint-manager-report_runpatch-sql-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. - [ZDI-25-945: (0Day) Ivanti Endpoint Manager MP_Report_Run2 SQL Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-945-0day-ivanti-endpoint-manager-mp_report_run2-sql-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. - [ZDI-25-944: (0Day) Ivanti Endpoint Manager DBDR SQL Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-944-0day-ivanti-endpoint-manager-dbdr-sql-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. - [ZDI-25-943: (0Day) Ivanti Endpoint Manager PatchHistory SQL Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-943-0day-ivanti-endpoint-manager-patchhistory-sql-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. - [ZDI-25-942: (0Day) Ivanti Endpoint Manager MP_QueryDetail2 SQL Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-942-0day-ivanti-endpoint-manager-mp_querydetail2-sql-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. - [ZDI-25-941: (0Day) Ivanti Endpoint Manager GetCountForQuery SQL Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-941-0day-ivanti-endpoint-manager-getcountforquery-sql-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. - [ZDI-25-940: (0Day) Ivanti Endpoint Manager MP_QueryDetail SQL Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-940-0day-ivanti-endpoint-manager-mp_querydetail-sql-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. - [ZDI-25-939: (0Day) Ivanti Endpoint Manager MP_VistaReport SQL Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-939-0day-ivanti-endpoint-manager-mp_vistareport-sql-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. - [ZDI-25-938: (0Day) Ivanti Endpoint Manager Report_RunPatch SQL Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-938-0day-ivanti-endpoint-manager-report_runpatch-sql-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. - [ZDI-25-937: (0Day) Ivanti Endpoint Manager Report_Run SQL Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-937-0day-ivanti-endpoint-manager-report_run-sql-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. - [ZDI-25-936: (0Day) Ivanti Endpoint Manager Report_Run2 SQL Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-936-0day-ivanti-endpoint-manager-report_run2-sql-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. - [ZDI-25-934: MindManager Attachment Insufficient UI Warning Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-934-mindmanager-attachment-insufficient-ui-warning-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of MindManager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. - [Oracle E-Business Suite Zero-day Vulnerability Exploited in the Wild (CVE-2025-61882)](https://securecybervm.com/oracle-e-business-suite-zero-day-vulnerability-exploited-in-the-wild-cve-2025-61882/): Oracle released a security advisory to address a critical zero-day vulnerability impacting the E-Business Suite. Tracked as CVE-2025-61882, the vulnerability has a CVSS score of 9.8. Successful exploitation of the vulnerability may allow an attacker to achieve remote code execution. Security reports suggest the vulnerability is actively exploited in Clop data theft attacks. Oracle E-Business - [ZDI-25-933: (Pwn2Own) Redis Lua Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-933-pwn2own-redis-lua-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Redis. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-49844. - [ZDI-25-932: MLflow Weak Password Requirements Authentication Bypass Vulnerability](https://securecybervm.com/zdi-25-932-mlflow-weak-password-requirements-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2025-11200. - [ZDI-25-931: MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-931-mlflow-tracking-server-model-creation-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2025-11201. - [ZDI-25-930: win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-930-win-cli-mcp-server-resolvecommandpath-command-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of win-cli-mcp-server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-11202. - [ZDI-25-929: LiteLLM Information health API_KEY Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-929-litellm-information-health-api_key-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of LiteLLM. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 3.5. The following CVEs are assigned: CVE-2025-11203. - [ZDI-25-928: Delta Electronics EIP Builder EIP File Parsing XML External Entity Processing Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-928-delta-electronics-eip-builder-eip-file-parsing-xml-external-entity-processing-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta Electronics EIP Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 5.5. The following CVEs are assigned: CVE-2025-57704. - [ZDI-25-927: Delta Electronics DIALink Directory Traversal Authentication Bypass Vulnerability](https://securecybervm.com/zdi-25-927-delta-electronics-dialink-directory-traversal-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to overwrite configuration files on affected installations of Delta Electronics DIALink. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2025-58320. - [ZDI-25-926: Delta Electronics DIALink Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-926-delta-electronics-dialink-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIALink. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 10.0. The following CVEs are assigned: CVE-2025-58321. - [ZDI-25-925: Viessmann Vitogate 300 BN/MB vitogate.cgi form-0-2 Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-925-viessmann-vitogate-300-bn-mb-vitogate-cgi-form-0-2-command-injection-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Viessmann Vitogate 300 BN/MB devices. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.8. The following CVEs are assigned: CVE-2025-9494. - [ZDI-25-924: Fuji Electric FRENIC-Loader 4 EXTBM File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-924-fuji-electric-frenic-loader-4-extbm-file-parsing-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric FRENIC-Loader 4. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9365. - [ZDI-25-923: Fuji Electric FRENIC-Loader 4 EXRTM File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-923-fuji-electric-frenic-loader-4-exrtm-file-parsing-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric FRENIC-Loader 4. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9365. - [Broadcom Addresses Actively Exploited Vulnerability in VMware Aria Operations and VMware Tools (CVE-2025-41244)](https://securecybervm.com/broadcom-addresses-actively-exploited-vulnerability-in-vmware-aria-operations-and-vmware-tools-cve-2025-41244/): Broadcom disclosed a local privilege escalation vulnerability affecting VMware’s guest service discovery features. Tracked as CVE-2025-41244, successful exploitation of the vulnerability may allow an unprivileged user to escalate privileges. Maxime Thiebaut from NVISO Labs discovered and reported the vulnerability to Broadcom. The security researcher at NVISO Labs claims that the vulnerability has been exploited in - [ZDI-25-922: Ivanti Endpoint Manager EFile Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-922-ivanti-endpoint-manager-efile-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Alternatively, no user interaction is required if the attacker has administrative credentials to the application. The ZDI - [ZDI-25-921: Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-921-razer-synapse-3-razerphilipshueuninstall-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9870. - [ZDI-25-920: Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-920-razer-synapse-3-chroma-connect-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9871. - [ZDI-25-919: Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-919-razer-synapse-3-macro-module-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9869. - [Malicious MCP Server on npm postmark-mcp Exploited in Attack](https://securecybervm.com/malicious-mcp-server-on-npm-postmark-mcp-exploited-in-attack/): Security researchers discovered a significant vulnerability in the Model Context Protocol (MCP) server that was exploited in the wild. The reports described this as the first-ever instance of an MCP server being exploited in the wild, which can lead to software supply chain risks. The flaw exists in the npm package postmark-mcp, an MCP server - [ZDI-25-918: Fortinet FortiWeb _cmf_get_config_file_path Directory Traversal Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-918-fortinet-fortiweb-_cmf_get_config_file_path-directory-traversal-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fortinet FortiWeb. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are assigned: CVE-2025-53609. - [Cisco Addresses Zero-day Vulnerabilities in Cisco ASA and FTD Software (CVE-2025-20362 & CVE-2025-20333)](https://securecybervm.com/cisco-addresses-zero-day-vulnerabilities-in-cisco-asa-and-ftd-software-cve-2025-20362-cve-2025-20333/): Cisco warns its users to patch two actively exploited vulnerabilities impacting the VPN web server of Cisco Secure Firewall Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense Software. Tracked as CVE-2025-20362 and CVE-2025-20333, the vulnerabilities can lead to remote code execution and unauthorized access of the affected device. Cisco mentioned in the advisory that - [Cisco IOS and IOS XE Software Vulnerability Exploited in the Wild (CVE-2025-20352)](https://securecybervm.com/cisco-ios-and-ios-xe-software-vulnerability-exploited-in-the-wild-cve-2025-20352/): Cisco released a security advisory to address an actively exploited vulnerability, tracked as CVE-2025-20352, impacting Cisco IOS and IOS XE Software. Successful exploitation of the vulnerability may allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition. A high-privileged attacker may execute arbitrary code as the root user and - [ZDI-25-917: Linux Kernel ksmbd generate_key context.iov_base Null Pointer Dereference Denial-of-Service Vulnerability](https://securecybervm.com/zdi-25-917-linux-kernel-ksmbd-generate_key-context-iov_base-null-pointer-dereference-denial-of-service-vulnerability/): This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of the Linux Kernel. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.3. The following CVEs are assigned: CVE-2025-38562. - [ZDI-25-916: Linux Kernel ksmbd smb2_sess_setup Preauth_HashValue Race Condition Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-916-linux-kernel-ksmbd-smb2_sess_setup-preauth_hashvalue-race-condition-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Kernel. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.5. The following CVEs are assigned: CVE-2025-38561. - [ZDI-25-915: Linux Kernel io_uring Futex Request Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-915-linux-kernel-io_uring-futex-request-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-39698. - [ZDI-25-914: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-914-gimp-ilbm-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-10925. - [ZDI-25-913: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-913-gimp-ff-file-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-10924. - [ZDI-25-912: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-912-gimp-wbmp-file-parsing-integer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-10923. - [ZDI-25-911: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-911-gimp-dcm-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-10922. - [ZDI-25-910: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-910-gimp-hdr-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-10921. - [ZDI-25-909: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-909-gimp-icns-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-10920. - [ZDI-25-908: Autodesk AutoCAD PRT File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-908-autodesk-autocad-prt-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-8892. - [ZDI-25-907: Autodesk Revit RFA File Parsing Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-907-autodesk-revit-rfa-file-parsing-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Revit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-8354. - [ZDI-25-906: SolarWinds Web Help Desk AjaxProxy Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-906-solarwinds-web-help-desk-ajaxproxy-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Web Help Desk. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-26399. - [ZDI-25-905: Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-905-gen-digital-ccleaner-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Gen Digital CCleaner. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Some interaction on the part of an administrator is additionally required. The ZDI has assigned a CVSS rating of - [SolarWinds Web Help Desk Remote Code Execution Vulnerability (CVE-2025-26399)](https://securecybervm.com/solarwinds-web-help-desk-remote-code-execution-vulnerability-cve-2025-26399/): SolarWinds released a security advisory to address a critical severity vulnerability impacting its Web Help Desk software. Tracked as CVE-2025-26399, the vulnerability has a CVSS score of 9.8. Successful exploitation of this vulnerability may allow an unauthenticated attacker to execute arbitrary code on the target system. Security researchers working with Trend Micro’s Zero Day Initiative discovered and - [GoAnywhere Managed File Transfer (MFT) Deserialization Vulnerability (CVE-2025-10035)](https://securecybervm.com/goanywhere-managed-file-transfer-mft-deserialization-vulnerability-cve-2025-10035/): Fortra released security updates for a critical severity vulnerability impacting GoAnywhere MFT’s License Servlet. Tracked as CVE-2025-10035, the vulnerability has a CVSS score of 10. Successful exploitation of the vulnerability may allow an attacker to achieve unauthenticated remote code execution. GoAnywhere MFT is a secure managed file transfer solution that provides smooth data sharing between - [ZDI-25-904: Dassault Systèmes eDrawings Viewer PAR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-904-dassault-systemes-edrawings-viewer-par-file-parsing-out-of-bounds-read-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9447. - [ZDI-25-903: Dassault Systèmes eDrawings Viewer PAR File Parsing Use-After-Free Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-903-dassault-systemes-edrawings-viewer-par-file-parsing-use-after-free-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9449. - [ZDI-25-902: Dassault Systèmes eDrawings Viewer JT File Parsing Uninitialized Variable Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-902-dassault-systemes-edrawings-viewer-jt-file-parsing-uninitialized-variable-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9450. - [ZDI-25-901: Apple Safari IPC Connection Invalidation Use-After-Free Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-901-apple-safari-ipc-connection-invalidation-use-after-free-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 4.3. The following CVEs are assigned: CVE-2025-43368. - [ZDI-25-900: Apple macOS OGG Audio File Header Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-900-apple-macos-ogg-audio-file-header-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-43346. - [ZDI-25-899: Apple macOS Audio APAC Frame Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-899-apple-macos-audio-apac-frame-decoding-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-43349. - [ZDI-25-898: Delta Electronics COMMGR Stack-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-898-delta-electronics-commgr-stack-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics COMMGR. An attacker must first obtain the ability to compromise a PLC in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-53418. - [ZDI-25-897: Avira Prime Link Following Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-897-avira-prime-link-following-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-13759. - [Another Zero-day Vulnerability impacting Google Chrome (CVE-2025-10585)](https://securecybervm.com/another-zero-day-vulnerability-impacting-google-chrome-cve-2025-10585/): On Wednesday, Google rolled out security updates for a Chrome vulnerability actively exploited in the wild. Tracked as CVE-2025-10585, the vulnerability is a type confusion flaw in the V8 JavaScript and WebAssembly engine. Google Threat Analysis Group discovered and reported the vulnerability. This is the sixth zero-day vulnerability Google has patched since the start of the year. - [ZDI-25-896: Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability](https://securecybervm.com/zdi-25-896-wondershare-repairit-sas-token-incorrect-permission-assignment-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on Wondershare Repairit. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.4. The following CVEs are assigned: CVE-2025-10644. - [ZDI-25-895: Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability](https://securecybervm.com/zdi-25-895-wondershare-repairit-incorrect-permission-assignment-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on affected installations of Wondershare Repairit. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.1. The following CVEs are assigned: CVE-2025-10643. - [ZDI-25-894: Digilent WaveForms DWF3WORK File Parsing Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-894-digilent-waveforms-dwf3work-file-parsing-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent WaveForms. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-10203. - [More than 400 npm Packages affected by the Ongoing Supply Chain Attack](https://securecybervm.com/more-than-400-npm-packages-affected-by-the-ongoing-supply-chain-attack/): A malicious update to ctrl/tinycolor (2.2M weekly downloads) triggered the supply chain attack, impacting over 400 packages spanning multiple maintainers. The malware campaign (part of the “Shai-Hulud” attack) has compromised npm packages in a worm-like manner. The malware affects various packages from different maintainers. Some are public; others belong to popular vendors like CrowdStrike. Altogether, - [ZDI-25-893: Siemens Simcenter Femap STP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-893-siemens-simcenter-femap-stp-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-40762. - [Ivanti September Security Updates Address Multiple Vulnerabilities in Popular Products](https://securecybervm.com/ivanti-september-security-updates-address-multiple-vulnerabilities-in-popular-products/): Ivanti released its security bulletin for September, addressing 13 vulnerabilities. The vulnerabilities impact Ivanti Endpoint Manager, Ivanti Connect Secure, Policy Secure, ZTA Gateways, and Neurons for Secure Access. As per the Ivanti advisory, no proof exists for any of the vulnerabilities being exploited in the wild. CVE-2025-9712 & CVE-2025-9872 Both vulnerabilities have high severity ratings - [Ivanti February Security Updates Address Multiple Vulnerabilities in Popular Products](https://securecybervm.com/ivanti-february-security-updates-address-multiple-vulnerabilities-in-popular-products/): Ivanti released its security bulletin for September, addressing 13 vulnerabilities. The vulnerabilities impact Ivanti Endpoint Manager, Ivanti Connect Secure, Policy Secure, ZTA Gateways, and Neurons for Secure Access. As per the Ivanti advisory, no proof exists for any of the vulnerabilities being exploited in the wild. CVE-2025-9712 & CVE-2025-9872 Both vulnerabilities have high severity ratings - [Microsoft Patch Tuesday, September 2025 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-september-2025-security-update-review/): It’s the second Tuesday of September, and Microsoft has rolled out its latest security updates. Microsoft’s September 2025 Patch Tuesday has arrived, bringing a fresh wave of security fixes to help organizations stay ahead of evolving threats. Here’s a quick breakdown of what you need to know. In this month’s Patch Tuesday, the September 2025 - [ZDI-25-892: Microsoft .NET IsTypeAuthorized Deserialization of Untrusted Data Denial-of-Service Vulnerability](https://securecybervm.com/zdi-25-892-microsoft-net-istypeauthorized-deserialization-of-untrusted-data-denial-of-service-vulnerability/): Details are unavailable at the moment The ZDI has assigned a CVSS rating of 7.5. - [ZDI-25-891: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-891-digilent-dasylab-dsb-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-57778. - [ZDI-25-890: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-890-digilent-dasylab-dsb-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-57777. - [ZDI-25-889: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-889-digilent-dasylab-dsb-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-57776. - [ZDI-25-888: Digilent DASYLab DSB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-888-digilent-dasylab-dsb-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-57775. - [ZDI-25-887: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-887-digilent-dasylab-dsb-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-57774. - [ZDI-25-886: Digilent DASYLab DSB File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-886-digilent-dasylab-dsb-file-parsing-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9189. - [ZDI-25-885: Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-885-digilent-dasylab-dsb-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent DASYLab. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9188. - [ZDI-25-884: QEMU uefi-vars Uninitialized Memory Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-884-qemu-uefi-vars-uninitialized-memory-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of QEMU. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.3. The following CVEs are assigned: CVE-2025-8860. - [CISA Warns of Sitecore Experience Platform Zero-day Vulnerability (CVE-2025-53690)](https://securecybervm.com/cisa-warns-of-sitecore-experience-platform-zero-day-vulnerability-cve-2025-53690/): Threat attackers exploit a zero-day vulnerability in Sitecore Experience Manager (XM) and Sitecore Experience Platform (XP) tracked as CVE-2025-53690. The vulnerability has a critical severity rating with a CVSS score of 9.0. Successful exploitation of the vulnerability may lead to remote code execution and unauthorized access to information. Mandiant Threat Defense identified active exploitation of - [ZDI-25-883: Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-883-realtek-rtl81xx-sdk-wi-fi-driver-rtwlanu-heap-based-buffer-overflow-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-8300. - [ZDI-25-882: Realtek rtl81xx SDK Wi-Fi Driver MgntActSet_TEREDO_SET_RS_PACKET Heap-based Buffer Overflow Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-882-realtek-rtl81xx-sdk-wi-fi-driver-mgntactset_teredo_set_rs_packet-heap-based-buffer-overflow-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-8299. - [ZDI-25-881: Realtek RTL8811AU rtwlanu.sys N6CQueryInformationHandleCustomized11nOids Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-881-realtek-rtl8811au-rtwlanu-sys-n6cqueryinformationhandlecustomized11noids-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Realtek RTL8811AU drivers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 3.8. The following CVEs are assigned: CVE-2025-8298. - [ZDI-25-880: Realtek RTL8811AU rtwlanu.sys N6CSet_DOT11_CIPHER_DEFAULT_KEY Heap-based Buffer Overflow Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-880-realtek-rtl8811au-rtwlanu-sys-n6cset_dot11_cipher_default_key-heap-based-buffer-overflow-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Realtek RTL8811AU drivers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-8301. - [ZDI-25-879: Realtek rtl81xx SDK Wi-Fi Driver rtwlanu Heap-based Buffer Overflow Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-879-realtek-rtl81xx-sdk-wi-fi-driver-rtwlanu-heap-based-buffer-overflow-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Realtek rtl81xx SDK Wi-Fi driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-8302. - [ZDI-25-878: Apple macOS AppleIntelKBLGraphics Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-878-apple-macos-appleintelkblgraphics-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2025-43284. - [ZDI-25-877: Delta Electronics ISPSoft ISP File Parsing Improper Control of Dynamically-Managed Code Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-877-delta-electronics-ispsoft-isp-file-parsing-improper-control-of-dynamically-managed-code-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ISPSoft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-53419. - [ZDI-25-876: Siemens Simcenter Femap NEU File Parsing Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-876-siemens-simcenter-femap-neu-file-parsing-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-25175. - [ZDI-25-875: Siemens Simcenter Femap NEU File Parsing Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-875-siemens-simcenter-femap-neu-file-parsing-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-25175. - [ZDI-25-874: Siemens Simcenter Femap NEU File Parsing Type Confusion Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-874-siemens-simcenter-femap-neu-file-parsing-type-confusion-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-25175. - [ZDI-25-873: Linux Kernel perf Subsystem AUX Buffers Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-873-linux-kernel-perf-subsystem-aux-buffers-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-25-872: TeamViewer Link Following Denial-of-Service Vulnerability](https://securecybervm.com/zdi-25-872-teamviewer-link-following-denial-of-service-vulnerability/): This vulnerability allows local attackers to create a denial-of-service condition on affected installations of TeamViewer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.1. The following CVEs are assigned: CVE-2025-44002. - [ZDI-25-871: (Pwn2Own) QNAP QHora-322 miro_webserver_lib_RunExecBash Command Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-871-pwn2own-qnap-qhora-322-miro_webserver_lib_runexecbash-command-injection-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP QHora-322 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 7.1. The following CVEs are assigned: CVE-2024-13087. - [Citrix Warns of Active Exploitation: CVE-2025-7775 in NetScaler ADC/Gateway](https://securecybervm.com/citrix-warns-of-active-exploitation-cve-2025-7775-in-netscaler-adc-gateway/): A critical memory overflow bug in NetScaler ADC/Gateway is being exploited in the wild. It can lead to remote code execution (RCE) or denial of service. Since there are no workarounds, it is highly recommended to patch immediately. CISA added CVE-2025-7775 to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Citrix shipped - [ZDI-25-870: Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-870-foxit-pdf-reader-update-service-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9330. - [ZDI-25-869: Foxit PDF Reader JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-869-foxit-pdf-reader-jp2-file-parsing-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-9323. - [ZDI-25-868: Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-868-foxit-pdf-reader-prc-file-parsing-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-9324. - [ZDI-25-867: Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-867-foxit-pdf-reader-prc-file-parsing-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-9325. - [ZDI-25-866: Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-866-foxit-pdf-reader-prc-file-parsing-out-of-bounds-read-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9326. - [ZDI-25-865: Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-865-foxit-pdf-reader-prc-file-parsing-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-9327. - [ZDI-25-864: Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-864-foxit-pdf-reader-prc-file-parsing-out-of-bounds-read-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9328. - [ZDI-25-863: Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-863-foxit-pdf-reader-prc-file-parsing-out-of-bounds-read-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9329. - [ZDI-25-862: Autodesk AutoCAD DGN File Parsing Memory Corruption Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-862-autodesk-autocad-dgn-file-parsing-memory-corruption-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-5048. - [ZDI-25-861: Autodesk AutoCAD DGN File Parsing Uninitialized Variable Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-861-autodesk-autocad-dgn-file-parsing-uninitialized-variable-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-5047. - [ZDI-25-860: Autodesk AutoCAD DGN File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-860-autodesk-autocad-dgn-file-parsing-out-of-bounds-read-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-5046. - [ZDI-25-859: Firebird SQL Database Server XDR Message Parsing NULL Pointer Dereference Denial-of-Service Vulnerability](https://securecybervm.com/zdi-25-859-firebird-sql-database-server-xdr-message-parsing-null-pointer-dereference-denial-of-service-vulnerability/): This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Firebird SQL. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-54989. - [ZDI-25-858: Axis Communications Autodesk Plugin AzureBlobRestAPI axiscontentfiles Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-858-axis-communications-autodesk-plugin-azureblobrestapi-axiscontentfiles-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Axis Communications Autodesk Plugin. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. - [Apple Addressed Zero-day Vulnerability Impacting iOS, iPadOS, and macOS (CVE-2025-43300)](https://securecybervm.com/apple-addressed-zero-day-vulnerability-impacting-ios-ipados-and-macos-cve-2025-43300/): Apple has released updates to address a vulnerability that is being exploited in the wild. Tracked as CVE-2025-43300, the vulnerability impacts macOS Sequoia, macOS Ventura, macOS Sonoma, iOS, and iPadOS. CVE-2025-43300 is an out-of-bounds write flaw in the ImageIO framework used by Apple. An attacker may exploit the vulnerability by processing a malicious image file that - [ZDI-25-857: Ivanti Avalanche FileStoreConfig Arbitrary File Upload Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-857-ivanti-avalanche-filestoreconfig-arbitrary-file-upload-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.6. The following CVEs are assigned: CVE-2025-8297. - [ZDI-25-856: Ivanti Avalanche getCountMuStatDevicePropResultsFromMuListAgentIds SQL Injection Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-856-ivanti-avalanche-getcountmustatdevicepropresultsfrommulistagentids-sql-injection-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.6. The following CVEs are assigned: CVE-2025-8296. - [ZDI-25-855: (0Day) Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability](https://securecybervm.com/zdi-25-855-0day-cockroach-labs-cockroach-k8s-request-cert-empty-root-password-authentication-bypass-vulnerability/): This vulnerability could allow remote attackers to bypass authentication on systems that use the affected version of the Cockroach Labs cockroach-k8s-request-cert container image. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-9276. - [ZDI-25-854: (0Day) Oxford Instruments Imaris Viewer IMS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-854-0day-oxford-instruments-imaris-viewer-ims-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oxford Instruments Imaris Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9275. - [ZDI-25-853: (0Day) Oxford Instruments Imaris Viewer IMS File Parsing Uninitialized Pointer Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-853-0day-oxford-instruments-imaris-viewer-ims-file-parsing-uninitialized-pointer-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oxford Instruments Imaris Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-9274. - [ZDI-25-852: (0Day) CData API Server MySQL Misconfiguration Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-852-0day-cdata-api-server-mysql-misconfiguration-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of CData API Server. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.3. The following CVEs are assigned: CVE-2025-9273. - [ZDI-25-851: (Pwn2Own) NVIDIA Triton Inference Server IPC Push Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-851-pwn2own-nvidia-triton-inference-server-ipc-push-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Triton Inference Server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2025-23318. - [ZDI-25-850: (Pwn2Own) NVIDIA Triton Inference Server LoadFromSharedMemory Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-850-pwn2own-nvidia-triton-inference-server-loadfromsharedmemory-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of NVIDIA Triton Inference Server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.9. The following CVEs are assigned: CVE-2025-23333. - [ZDI-25-849: (Pwn2Own) NVIDIA Triton Inference Server SharedMemoryManager Error Message Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-849-pwn2own-nvidia-triton-inference-server-sharedmemorymanager-error-message-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of NVIDIA Triton Inference Server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-23320. - [ZDI-25-848: NVIDIA Isaac-GR00T secure_server Authentication Bypass Vulnerability](https://securecybervm.com/zdi-25-848-nvidia-isaac-gr00t-secure_server-authentication-bypass-vulnerability/): This vulnerability allows remote attackers to bypass authentication on affected installations of NVIDIA Isaac-GR00T. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2025-23296. - [ZDI-25-847: NVIDIA Isaac-GR00T TorchSerializer Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-847-nvidia-isaac-gr00t-torchserializer-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Isaac-GR00T. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-23296. - [Cisco Secure Firewall Management Center Software RADIUS Remote Code Execution Vulnerability (CVE-2025-20265)](https://securecybervm.com/cisco-secure-firewall-management-center-software-radius-remote-code-execution-vulnerability-cve-2025-20265/): Cisco addressed a critical severity vulnerability impacting its Secure Firewall Management Center Software. Tracked as CVE-2025-20265, the vulnerability has a critical severity rating with a CVSS score of 10. Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to inject arbitrary shell commands executed by the device. Cisco Firewall Management Center analyzes network - [ZDI-25-846: Apple macOS USD importMeshJointWeights Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-846-apple-macos-usd-importmeshjointweights-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2025-31281. - [ZDI-25-845: (Pwn2Own) Microsoft Windows win32kfull Race Condition Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-845-pwn2own-microsoft-windows-win32kfull-race-condition-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-53132. - [ZDI-25-844: Microsoft Windows Subsystem for Linux WslCoreVm::Initialize Incorrect Privilege Management Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-844-microsoft-windows-subsystem-for-linux-wslcorevminitialize-incorrect-privilege-management-information-disclosure-vulnerability/): This vulnerability allows local attackers to read arbitrary files on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.7. The following CVEs are assigned: CVE-2025-53788. - [ZDI-25-843: (Pwn2Own) Microsoft Windows win32kbase Type Confusion Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-843-pwn2own-microsoft-windows-win32kbase-type-confusion-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-50168. - [ZDI-25-842: (Pwn2Own) Microsoft Windows Exposed Dangerous Function Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-842-pwn2own-microsoft-windows-exposed-dangerous-function-information-disclosure-vulnerability/): This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 3.8. The following CVEs are assigned: CVE-2025-53156. - [ZDI-25-841: (Pwn2Own) Microsoft Windows 11 vhdmp Integer Overflow Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-841-pwn2own-microsoft-windows-11-vhdmp-integer-overflow-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-53723. - [ZDI-25-840: (Pwn2Own) Microsoft Windows 11 vhdmp Improper Validation of Array Index Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-840-pwn2own-microsoft-windows-11-vhdmp-improper-validation-of-array-index-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-53155. - [ZDI-25-839: Microsoft Teams Real Time Media Manager Integer Underflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-839-microsoft-teams-real-time-media-manager-integer-underflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Teams. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-53783. - [ZDI-25-838: (Pwn2Own) Microsoft Windows 11 vhdmp Use-After-Free Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-838-pwn2own-microsoft-windows-11-vhdmp-use-after-free-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-50167. - [ZDI-25-837: Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-837-rockwell-automation-arena-simulation-doe-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-6377. - [ZDI-25-836: Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-836-rockwell-automation-arena-simulation-doe-file-parsing-out-of-bounds-write-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Rockwell Automation Arena Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-6376. - [ZDI-25-835: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://securecybervm.com/zdi-25-835-nomachine-uncontrolled-search-path-element-local-privilege-escalation-vulnerability/): This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-8614. - [ZDI-25-834: Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-834-academy-software-foundation-openexr-exr-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-48071. - [ZDI-25-833: NVIDIA Transformers4Rec load_model_trainer_states_from_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-833-nvidia-transformers4rec-load_model_trainer_states_from_checkpoint-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Transformers4Rec. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-23266. - [ZDI-25-832: Delta Electronics DIAView Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-832-delta-electronics-diaview-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DIAView. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-53417. - [ZDI-25-831: Delta Electronics DIAView Directory Traversal Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-831-delta-electronics-diaview-directory-traversal-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta Electronics DIAView. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-53417. - [Microsoft Patch Tuesday, August 2025 Security Update Review](https://securecybervm.com/microsoft-patch-tuesday-august-2025-security-update-review/): It’s the second Tuesday of August, and Microsoft has rolled out its latest security updates. Microsoft’s August 2025 Patch Tuesday has arrived, bringing a fresh wave of security fixes to help organizations stay ahead of evolving threats. Here’s a quick breakdown of what you need to know. In this month’s Patch Tuesday, the August 2025 - [ZDI-25-830: (0Day) Schneider Electric EcoStruxure Power Monitoring Expert GetPagesAsImages Server-Side Request Forgery Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-830-0day-schneider-electric-ecostruxure-power-monitoring-expert-getpagesasimages-server-side-request-forgery-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Schneider Electric EcoStruxure Power Monitoring Expert. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-54924. - [ZDI-25-829: (0Day) Schneider Electric EcoStruxure Power Monitoring Expert GetFilteredSinkProvider Deserialization of Untrusted Data Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-829-0day-schneider-electric-ecostruxure-power-monitoring-expert-getfilteredsinkprovider-deserialization-of-untrusted-data-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Monitoring Expert. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-54923. - [ZDI-25-828: (0Day) Schneider Electric EcoStruxure Power Monitoring Expert HttpPostedFile Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-828-0day-schneider-electric-ecostruxure-power-monitoring-expert-httppostedfile-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric EcoStruxure Power Monitoring Expert. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2025-54927. - [ZDI-25-827: (0Day) Schneider Electric EcoStruxure Power Monitoring Expert GetTgmlContent Directory Traversal Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-827-0day-schneider-electric-ecostruxure-power-monitoring-expert-gettgmlcontent-directory-traversal-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Schneider Electric EcoStruxure Power Monitoring Expert. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are assigned: CVE-2025-54926. - [ZDI-25-826: (0Day) Schneider Electric EcoStruxure Power Monitoring Expert ExportDataAsXML Server-Side Request Forgery Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-826-0day-schneider-electric-ecostruxure-power-monitoring-expert-exportdataasxml-server-side-request-forgery-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Schneider Electric EcoStruxure Power Monitoring Expert. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-54925. - [ZDI-25-825: Apple macOS AudioToolboxCore Audio Conversion Out-Of-Bounds Read Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-825-apple-macos-audiotoolboxcore-audio-conversion-out-of-bounds-read-information-disclosure-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the AudioToolboxCore framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 3.3. - [WinRAR Path Traversal Vulnerability Exploited in the Wild (CVE-2025-8088)](https://securecybervm.com/winrar-path-traversal-vulnerability-exploited-in-the-wild-cve-2025-8088/): WinRAR released a security patch to address a vulnerability allowing attackers to hijack user extraction processes and plant malicious files in unintended system locations. Tracked as CVE-2025-8088, the vulnerability has a high severity rating with a CVSS score of 8.4. Anton Cherepanov, Peter Kosinar, and Peter Strycek from ESET discovered and reported the vulnerability to - [Trend Micro Apex One (On-Prem) Zero-day Vulnerabilities Exploited in the Wild (CVE-2025-54948 & CVE-2025-54987)](https://securecybervm.com/trend-micro-apex-one-on-prem-zero-day-vulnerabilities-exploited-in-the-wild-cve-2025-54948-cve-2025-54987/): Threat actors are exploiting two vulnerabilities impacting Trend Micro Apex One (on-prem) devices. Tracked as CVE-2025-54948 & CVE-2025-54987, the vulnerabilities may allow attackers to achieve remote code execution upon successful exploitation. Both vulnerabilities have a critical severity rating with a CVSS score of 9.4. Trend Micro mentioned in the advisory that they had observed at least - [ZDI-25-824: (0Day) Microsoft Windows Theme File Parsing Improper Input Validation NTLM Relay Vulnerability](https://securecybervm.com/zdi-25-824-0day-microsoft-windows-theme-file-parsing-improper-input-validation-ntlm-relay-vulnerability/): This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. - [ZDI-25-823: (0Day) Microsoft Windows Theme File Parsing Improper Input Validation NTLM Relay Vulnerability](https://securecybervm.com/zdi-25-823-0day-microsoft-windows-theme-file-parsing-improper-input-validation-ntlm-relay-vulnerability/): This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. - [ZDI-25-822: (0Day) Microsoft SharePoint GetTransformer Unsafe Reflection Denial-of-Service Vulnerability](https://securecybervm.com/zdi-25-822-0day-microsoft-sharepoint-gettransformer-unsafe-reflection-denial-of-service-vulnerability/): This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. - [ZDI-25-821: (0Day) Microsoft Windows Internet Explorer Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-821-0day-microsoft-windows-internet-explorer-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-25-820: (0Day) Microsoft SharePoint IsAuthorizedType Deserialization of Untrusted Data Information Disclosure and Denial-of-Service Vulnerability](https://securecybervm.com/zdi-25-820-0day-microsoft-sharepoint-isauthorizedtype-deserialization-of-untrusted-data-information-disclosure-and-denial-of-service-vulnerability/): This vulnerability allows remote attackers to disclose sensitive information or create a denial-of-service condition on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. - [ZDI-25-819: (0Day) Microsoft Windows NetBIOS Hostname SmartScreen Bypass Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-819-0day-microsoft-windows-netbios-hostname-smartscreen-bypass-remote-code-execution-vulnerability/): This vulnerability allows network-adjacent attackers to bypass the SmartScreen security feature on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.1. - [ZDI-25-818: (0Day) Microsoft Windows OneDrive SmartScreen Bypass Vulnerability](https://securecybervm.com/zdi-25-818-0day-microsoft-windows-onedrive-smartscreen-bypass-vulnerability/): This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-25-817: (0Day) Microsoft Edge PDF NTLM Response Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-817-0day-microsoft-edge-pdf-ntlm-response-information-disclosure-vulnerability/): This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 6.5. - [ZDI-25-816: (0Day) Microsoft Azure AP5GC gNB-ID Use of Multiple Resources with Duplicate Identifier Denial-Of-Service Vulnerability](https://securecybervm.com/zdi-25-816-0day-microsoft-azure-ap5gc-gnb-id-use-of-multiple-resources-with-duplicate-identifier-denial-of-service-vulnerability/): This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 5.3. - [ZDI-25-815: (0Day) Microsoft Windows CAB File SmartScreen Bypass Vulnerability](https://securecybervm.com/zdi-25-815-0day-microsoft-windows-cab-file-smartscreen-bypass-vulnerability/): This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. - [ZDI-25-814: (0Day) Microsoft Windows MonikerLink Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-814-0day-microsoft-windows-monikerlink-information-disclosure-vulnerability/): This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 6.5. - [ZDI-25-813: (0Day) Microsoft PowerShell TryModuleAutoLoading Directory Traversal Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-813-0day-microsoft-powershell-trymoduleautoloading-directory-traversal-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft PowerShell. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.5. - [ZDI-25-812: (0Day) Microsoft Windows SmartScreen Bypass Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-812-0day-microsoft-windows-smartscreen-bypass-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to bypass the SmartScreen security feature on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. - [ZDI-25-811: (0Day) Microsoft Office OfficeApps Unintended Proxy Information Disclosure Vulnerability](https://securecybervm.com/zdi-25-811-0day-microsoft-office-officeapps-unintended-proxy-information-disclosure-vulnerability/): This vulnerability allows remote attackers to host arbitrary documents on a trusted domain used by Microsoft Office. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 4.3. - [ZDI-25-810: (0Day) Microsoft Windows ZIP File Insufficient UI Warning Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-810-0day-microsoft-windows-zip-file-insufficient-ui-warning-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to bypass the SmartScreen security feature on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. - [ZDI-25-808: (0Day) AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-808-0day-aomei-cyber-backup-missing-authentication-for-critical-function-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AOMEI Cyber Backup. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-8610. - [ZDI-25-807: (0Day) AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability](https://securecybervm.com/zdi-25-807-0day-aomei-cyber-backup-missing-authentication-for-critical-function-remote-code-execution-vulnerability/): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AOMEI Cyber Backup. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-8611. ## Pages - [Privacy Policy](https://securecybervm.com/privacy-policy/): Who we are Welcome to SecureCyberVM.com. We are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website, subscribe to our updates, or use our cybersecurity services. By accessing or using our Website, you agree to this Privacy Policy. If you do - [Our Services](https://securecybervm.com/services/): At Secure Cyber Vulnerability Management, we specialize in helping organizations identify, assess, and mitigate security risks through a comprehensive set of cybersecurity services. Whether you’re a growing business or a mature enterprise, our solutions are designed to strengthen your security posture and support continuous compliance. 🔍 Vulnerability Management & Threat Intelligence Stay ahead of threats - [About Us](https://securecybervm.com/about/): Welcome to Secure Cyber Vulnerability Management — your trusted resource for threat intelligence, vulnerability advisories, and strategic security consultation tailored for today’s cybersecurity professionals. I’m Deepanshu Jha, a dedicated security consultant with over six years of hands-on experience in the cybersecurity domain. Throughout my career, I’ve had the opportunity to work with a wide range ## Categories - [Qualys-Threat-Protect](https://securecybervm.com/category/qualys-threat-protect/): Category Added in a WPeMatico Campaign - [Zero-Day Initiative](https://securecybervm.com/category/zero-day-initiative/)