{"exported_at":"2026-08-24T19:45:00.544Z","count":814,"iocs":[{"type":"cve","value":"CVE-2026-63520","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-remote-code-execution-cve-2026-63520","article_title":"Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)","article_url":"https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-remote-code-execution-cve-2026-63520","published_at":"2026-08-24T16:18:05.000Z","valid_from":"2026-08-24T16:18:05.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18963","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/critical-keycloak-password-reset-flaw.html","article_title":"Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account","article_url":"https://thehackernews.com/2026/08/critical-keycloak-password-reset-flaw.html","published_at":"2026-08-24T11:56:34.000Z","valid_from":"2026-08-24T11:56:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"GBHackers","source_url":"https://gbhackers.com/zimbra-collaboration-suite-flaw/","article_title":"Zimbra Collaboration Suite Flaw Actively Exploited to Execute Arbitrary Commands","article_url":"https://gbhackers.com/zimbra-collaboration-suite-flaw/","published_at":"2026-08-24T11:24:55.000Z","valid_from":"2026-08-24T11:24:55.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19598","source":"GBHackers","source_url":"https://gbhackers.com/critical-wordpress-pods-flaw/","article_title":"Critical WordPress Pods Flaw Lets Unauthenticated Attackers Gain Admin Access","article_url":"https://gbhackers.com/critical-wordpress-pods-flaw/","published_at":"2026-08-24T07:22:41.000Z","valid_from":"2026-08-24T07:22:41.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10064,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33276","article_title":"ISC Stormcast For Monday, August 24th, 2026 https://isc.sans.edu/podcastdetail/10064, (Mon, Aug 24th)","article_url":"https://isc.sans.edu/diary/rss/33276","published_at":"2026-08-24T02:00:03.000Z","valid_from":"2026-08-24T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"Security Affairs","source_url":"https://securityaffairs.com/197693/security/u-s-cisa-adds-zimbra-collaboration-suite-zcs-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197693/security/u-s-cisa-adds-zimbra-collaboration-suite-zcs-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-22T07:17:49.000Z","valid_from":"2026-08-22T07:17:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69836","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/21/microsoft-entra-id-vulnerability-cve-2026-69836/","article_title":"Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836)","article_url":"https://www.helpnetsecurity.com/2026/08/21/microsoft-entra-id-vulnerability-cve-2026-69836/","published_at":"2026-08-21T12:20:33.000Z","valid_from":"2026-08-21T12:20:33.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/21/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/21/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-08-21T12:00:00.000Z","valid_from":"2026-08-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15580","source":"GBHackers","source_url":"https://gbhackers.com/critical-n-able-passportal-extension-flaw/","article_title":"Critical N-Able PassPortal Extension Flaw Gives Attackers Full Password Vault Access","article_url":"https://gbhackers.com/critical-n-able-passportal-extension-flaw/","published_at":"2026-08-21T11:23:51.000Z","valid_from":"2026-08-21T11:23:51.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"Security Affairs","source_url":"https://securityaffairs.com/197622/uncategorized/gitlab-warns-of-active-exploitation-of-critical-graphql-flaw.html","article_title":"GitLab Warns of Active Exploitation of Critical GraphQL Flaw","article_url":"https://securityaffairs.com/197622/uncategorized/gitlab-warns-of-active-exploitation-of-critical-graphql-flaw.html","published_at":"2026-08-21T09:49:02.000Z","valid_from":"2026-08-21T09:49:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"Security Affairs","source_url":"https://securityaffairs.com/197622/hacking/gitlab-warns-of-active-exploitation-of-critical-graphql-flaw.html","article_title":"GitLab Warns of Active Exploitation of Critical GraphQL Flaw","article_url":"https://securityaffairs.com/197622/hacking/gitlab-warns-of-active-exploitation-of-critical-graphql-flaw.html","published_at":"2026-08-21T09:49:02.000Z","valid_from":"2026-08-21T09:49:02.000Z","origin":"rss"},{"type":"domain","value":"crates.io","source":"CSO Online","source_url":"https://www.csoonline.com/article/4212381/backdoored-rust-packages-hit-crates-io-exposing-developers-to-malware-at-build-time.html","article_title":"Backdoored Rust packages hit crates.io, exposing developers to malware at build time","article_url":"https://www.csoonline.com/article/4212381/backdoored-rust-packages-hit-crates-io-exposing-developers-to-malware-at-build-time.html","published_at":"2026-08-21T09:29:49.000Z","valid_from":"2026-08-21T09:29:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59270","source":"GBHackers","source_url":"https://gbhackers.com/critical-spring-security-ldap-flaw/","article_title":"Critical Spring Security LDAP Flaw Lets Remote Attackers Read and Modify Directory Data","article_url":"https://gbhackers.com/critical-spring-security-ldap-flaw/","published_at":"2026-08-21T09:27:56.000Z","valid_from":"2026-08-21T09:27:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"Security Affairs","source_url":"https://securityaffairs.com/197610/security/polands-cert-warns-of-active-exploitation-of-critical-zimbra-collaboration-suite-flaw.html","article_title":"Poland’s CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw","article_url":"https://securityaffairs.com/197610/security/polands-cert-warns-of-active-exploitation-of-critical-zimbra-collaboration-suite-flaw.html","published_at":"2026-08-21T09:14:02.000Z","valid_from":"2026-08-21T09:14:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19490","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/21/citrix-netscaler-gateway-cve-2026-19490/","article_title":"Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490)","article_url":"https://www.helpnetsecurity.com/2026/08/21/citrix-netscaler-gateway-cve-2026-19490/","published_at":"2026-08-21T07:55:43.000Z","valid_from":"2026-08-21T07:55:43.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html","article_title":"GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure","article_url":"https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html","published_at":"2026-08-21T07:04:25.000Z","valid_from":"2026-08-21T07:04:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69836","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/microsoft-entra-id-flaw-cvss-100.html","article_title":"Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution","article_url":"https://thehackernews.com/2026/08/microsoft-entra-id-flaw-cvss-100.html","published_at":"2026-08-21T06:06:11.000Z","valid_from":"2026-08-21T06:06:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69836","source":"GBHackers","source_url":"https://gbhackers.com/microsoft-entra-id-rce-flaw/","article_title":"Microsoft Entra ID RCE Flaw Lets Unauthorized Attackers Execute Code Remotely","article_url":"https://gbhackers.com/microsoft-entra-id-rce-flaw/","published_at":"2026-08-21T05:30:33.000Z","valid_from":"2026-08-21T05:30:33.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10062,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33270","article_title":"ISC Stormcast For Friday, August 21st, 2026 https://isc.sans.edu/podcastdetail/10062, (Fri, Aug 21st)","article_url":"https://isc.sans.edu/diary/rss/33270","published_at":"2026-08-21T02:00:03.000Z","valid_from":"2026-08-21T02:00:03.000Z","origin":"rss"},{"type":"domain","value":"crates.io","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/rust-supply-chain-attack-puts-build.html","article_title":"Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads","article_url":"https://thehackernews.com/2026/08/rust-supply-chain-attack-puts-build.html","published_at":"2026-08-20T20:22:35.000Z","valid_from":"2026-08-20T20:22:35.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"SecurityWeek","source_url":"https://www.securityweek.com/hackers-target-zimbra-servers-in-active-exploitation-campaign/","article_title":"Hackers Target Zimbra Servers in Active Exploitation Campaign","article_url":"https://www.securityweek.com/hackers-target-zimbra-servers-in-active-exploitation-campaign/","published_at":"2026-08-20T14:50:49.000Z","valid_from":"2026-08-20T14:50:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2021-33044","source":"SC Media","source_url":"https://www.scworld.com/brief/operation-cameraswarm-compromises-over-14500-dahua-devices","article_title":"Operation CameraSwarm compromises over 14,500 Dahua devices","article_url":"https://www.scworld.com/brief/operation-cameraswarm-compromises-over-14500-dahua-devices","published_at":"2026-08-20T14:46:00.000Z","valid_from":"2026-08-20T14:46:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2021-33045","source":"SC Media","source_url":"https://www.scworld.com/brief/operation-cameraswarm-compromises-over-14500-dahua-devices","article_title":"Operation CameraSwarm compromises over 14,500 Dahua devices","article_url":"https://www.scworld.com/brief/operation-cameraswarm-compromises-over-14500-dahua-devices","published_at":"2026-08-20T14:46:00.000Z","valid_from":"2026-08-20T14:46:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69414","source":"Qualys Blog","source_url":"https://blog.qualys.com/product-tech/2026/08/20/shieldbreak-the-windows-defender-zero-day-with-no-patch-detect-it-mitigate-it-with-qualys","article_title":"ShieldBreak: The Windows Defender Zero-Day With No Patch — Detect It, Mitigate It, With Qualys","article_url":"https://blog.qualys.com/product-tech/2026/08/20/shieldbreak-the-windows-defender-zero-day-with-no-patch-detect-it-mitigate-it-with-qualys","published_at":"2026-08-20T14:02:12.000Z","valid_from":"2026-08-20T14:02:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/attackers-exploit-zimbra-snmp-flaw-for.html","article_title":"Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution","article_url":"https://thehackernews.com/2026/08/attackers-exploit-zimbra-snmp-flaw-for.html","published_at":"2026-08-20T13:24:28.000Z","valid_from":"2026-08-20T13:24:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27875","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-232-01","article_title":"Johnson Controls Simplex Incident Manager","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-232-01","published_at":"2026-08-20T12:00:00.000Z","valid_from":"2026-08-20T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72529","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/20/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/20/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-08-20T12:00:00.000Z","valid_from":"2026-08-20T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72530","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/20/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/20/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-08-20T12:00:00.000Z","valid_from":"2026-08-20T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20320","source":"GBHackers","source_url":"https://gbhackers.com/cisco-broadworks-vulnerability/","article_title":"Cisco BroadWorks Vulnerability Allows Remote Attackers to Access Sensitive Files","article_url":"https://gbhackers.com/cisco-broadworks-vulnerability/","published_at":"2026-08-20T11:42:09.000Z","valid_from":"2026-08-20T11:42:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66794","source":"GBHackers","source_url":"https://gbhackers.com/red-hat-kubernetes-flaw-2/","article_title":"Red Hat Kubernetes Flaw Lets Unauthenticated Attackers Access Internal Cluster Services","article_url":"https://gbhackers.com/red-hat-kubernetes-flaw-2/","published_at":"2026-08-20T10:49:16.000Z","valid_from":"2026-08-20T10:49:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41473","source":"GBHackers","source_url":"https://gbhackers.com/cyberpanel-pre-auth-rce-flaws/","article_title":"CyberPanel Pre-Auth RCE Flaws Let Attackers Gain Remote Server Access","article_url":"https://gbhackers.com/cyberpanel-pre-auth-rce-flaws/","published_at":"2026-08-20T09:15:43.000Z","valid_from":"2026-08-20T09:15:43.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41472","source":"GBHackers","source_url":"https://gbhackers.com/cyberpanel-pre-auth-rce-flaws/","article_title":"CyberPanel Pre-Auth RCE Flaws Let Attackers Gain Remote Server Access","article_url":"https://gbhackers.com/cyberpanel-pre-auth-rce-flaws/","published_at":"2026-08-20T09:15:43.000Z","valid_from":"2026-08-20T09:15:43.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64849","source":"Security Affairs","source_url":"https://securityaffairs.com/197558/hacking/u-s-cisa-adds-a-mlflow-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197558/hacking/u-s-cisa-adds-a-mlflow-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-20T08:55:52.000Z","valid_from":"2026-08-20T08:55:52.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"GBHackers","source_url":"https://gbhackers.com/zimbra-rce-vulnerability/","article_title":"Zimbra RCE Vulnerability Lets Remote Attackers Execute System Commands","article_url":"https://gbhackers.com/zimbra-rce-vulnerability/","published_at":"2026-08-20T08:31:18.000Z","valid_from":"2026-08-20T08:31:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"SecurityWeek","source_url":"https://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/","article_title":"Critical GitLab Flaw Exploited Shortly After Disclosure","article_url":"https://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/","published_at":"2026-08-20T07:48:24.000Z","valid_from":"2026-08-20T07:48:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32475","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/elementor-pro-flaw-could-let.html","article_title":"Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code","article_url":"https://thehackernews.com/2026/08/elementor-pro-flaw-could-let.html","published_at":"2026-08-20T06:04:34.000Z","valid_from":"2026-08-20T06:04:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19490","source":"GBHackers","source_url":"https://gbhackers.com/critical-citrix-netscaler-flaw/","article_title":"Critical Citrix NetScaler Flaw Allows Attackers to Bypass Authentication","article_url":"https://gbhackers.com/critical-citrix-netscaler-flaw/","published_at":"2026-08-20T05:53:18.000Z","valid_from":"2026-08-20T05:53:18.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10060,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33262","article_title":"ISC Stormcast For Thursday, August 20th, 2026 https://isc.sans.edu/podcastdetail/10060, (Thu, Aug 20th)","article_url":"https://isc.sans.edu/diary/rss/33262","published_at":"2026-08-20T02:00:03.000Z","valid_from":"2026-08-20T02:00:03.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"Security Affairs","source_url":"https://securityaffairs.com/197527/iot/inside-operation-cameraswarm-how-one-actor-took-over-14000-dahua-cameras.html","article_title":"Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras","article_url":"https://securityaffairs.com/197527/iot/inside-operation-cameraswarm-how-one-actor-took-over-14000-dahua-cameras.html","published_at":"2026-08-19T17:35:26.000Z","valid_from":"2026-08-19T17:35:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19490","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-19490-critical-vulnerability-affecting-citrix-netscaler-adc-and-netscaler-gateway","article_title":"CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-19490-critical-vulnerability-affecting-citrix-netscaler-adc-and-netscaler-gateway","published_at":"2026-08-19T16:46:06.000Z","valid_from":"2026-08-19T16:46:06.000Z","origin":"rss"},{"type":"ipv4","value":"169.254.169.254","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33260","article_title":"Simple Scans for Cloud Metadata Service, (Wed, Aug 19th)","article_url":"https://isc.sans.edu/diary/rss/33260","published_at":"2026-08-19T14:24:58.000Z","valid_from":"2026-08-19T14:24:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-33824","source":"GBHackers","source_url":"https://gbhackers.com/cisa-warns-microsoft-internet-key-exchange-rce-flaw/","article_title":"CISA Warns Microsoft Internet Key Exchange RCE Flaw Is Actively Exploited","article_url":"https://gbhackers.com/cisa-warns-microsoft-internet-key-exchange-rce-flaw/","published_at":"2026-08-19T12:37:19.000Z","valid_from":"2026-08-19T12:37:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64849","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/19/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/19/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-08-19T12:00:00.000Z","valid_from":"2026-08-19T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/hackers-compromised-14500-dahua-devices.html","article_title":"Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P","article_url":"https://thehackernews.com/2026/08/hackers-compromised-14500-dahua-devices.html","published_at":"2026-08-19T11:34:28.000Z","valid_from":"2026-08-19T11:34:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65400","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html","article_title":"Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation","article_url":"https://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html","published_at":"2026-08-19T11:01:48.000Z","valid_from":"2026-08-19T11:01:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63093","source":"GBHackers","source_url":"https://gbhackers.com/cursor-0-day-lets-attackers-execute-malicious-code/","article_title":"Cursor 0-Day Lets Attackers Execute Malicious Code by Opening a Repository","article_url":"https://gbhackers.com/cursor-0-day-lets-attackers-execute-malicious-code/","published_at":"2026-08-19T10:16:57.000Z","valid_from":"2026-08-19T10:16:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-40144","source":"GBHackers","source_url":"https://gbhackers.com/beyondtrust-endpoint-privilege-management-flaws/","article_title":"BeyondTrust Endpoint Privilege Management Flaws Enable Local Privilege Escalation","article_url":"https://gbhackers.com/beyondtrust-endpoint-privilege-management-flaws/","published_at":"2026-08-19T10:01:40.000Z","valid_from":"2026-08-19T10:01:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-40145","source":"GBHackers","source_url":"https://gbhackers.com/beyondtrust-endpoint-privilege-management-flaws/","article_title":"BeyondTrust Endpoint Privilege Management Flaws Enable Local Privilege Escalation","article_url":"https://gbhackers.com/beyondtrust-endpoint-privilege-management-flaws/","published_at":"2026-08-19T10:01:40.000Z","valid_from":"2026-08-19T10:01:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71290","source":"GBHackers","source_url":"https://gbhackers.com/critical-apache-httpcomponents-client-flaw/","article_title":"Critical Apache HttpComponents Client Flaw Lets Attackers Impersonate Servers","article_url":"https://gbhackers.com/critical-apache-httpcomponents-client-flaw/","published_at":"2026-08-19T07:36:04.000Z","valid_from":"2026-08-19T07:36:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-33824","source":"Security Affairs","source_url":"https://securityaffairs.com/197490/hacking/u-s-cisa-adds-apple-macos-microsoft-sharepoint-broadcom-vmware-vcenter-and-microsoft-ike-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197490/hacking/u-s-cisa-adds-apple-macos-microsoft-sharepoint-broadcom-vmware-vcenter-and-microsoft-ike-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-19T07:19:31.000Z","valid_from":"2026-08-19T07:19:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"GBHackers","source_url":"https://gbhackers.com/cisa-warns-vmware-vcenter-path-traversal-flaw/","article_title":"CISA Warns Hackers Are Actively Exploiting VMware vCenter Path Traversal Flaw","article_url":"https://gbhackers.com/cisa-warns-vmware-vcenter-path-traversal-flaw/","published_at":"2026-08-19T06:27:32.000Z","valid_from":"2026-08-19T06:27:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12569","source":"GBHackers","source_url":"https://gbhackers.com/cl0p-exploits-windchill-vulnerability/","article_title":"Cl0p Hackers Exploit PTC Windchill Vulnerability to Deploy Custom Web Shell and Steal Data","article_url":"https://gbhackers.com/cl0p-exploits-windchill-vulnerability/","published_at":"2026-08-19T05:20:00.000Z","valid_from":"2026-08-19T05:20:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24301","source":"GBHackers","source_url":"https://gbhackers.com/critical-microsoft-copilot-cosnitch-flaw/","article_title":"Critical Microsoft Copilot CoSnitch Flaw Lets Hackers Steal Sensitive Data With One Click","article_url":"https://gbhackers.com/critical-microsoft-copilot-cosnitch-flaw/","published_at":"2026-08-19T04:55:10.000Z","valid_from":"2026-08-19T04:55:10.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10058,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33258","article_title":"ISC Stormcast For Wednesday, August 19th, 2026 https://isc.sans.edu/podcastdetail/10058, (Wed, Aug 19th)","article_url":"https://isc.sans.edu/diary/rss/33258","published_at":"2026-08-19T02:00:03.000Z","valid_from":"2026-08-19T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"CSO Online","source_url":"https://www.csoonline.com/article/4211140/critical-gitlab-flaw-allows-attackers-to-delete-and-modify-public-repos.html","article_title":"Critical GitLab flaw allows attackers to delete and modify public repos","article_url":"https://www.csoonline.com/article/4211140/critical-gitlab-flaw-allows-attackers-to-delete-and-modify-public-repos.html","published_at":"2026-08-18T19:33:31.000Z","valid_from":"2026-08-18T19:33:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"Qualys Blog","source_url":"https://blog.qualys.com/product-tech/2026/08/18/cve-2026-68820-kev-bod-26-04-requirements","article_title":"CVE-2026-68820 is in KEV. Here Is What CISA BOD 26-04 Actually Requires Now","article_url":"https://blog.qualys.com/product-tech/2026/08/18/cve-2026-68820-kev-bod-26-04-requirements","published_at":"2026-08-18T18:06:38.000Z","valid_from":"2026-08-18T18:06:38.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64849","source":"GBHackers","source_url":"https://gbhackers.com/critical-mlflow-ssrf-flaw-exploited-in-the-wild/","article_title":"Critical MLflow SSRF Flaw Exploited in the Wild","article_url":"https://gbhackers.com/critical-mlflow-ssrf-flaw-exploited-in-the-wild/","published_at":"2026-08-18T13:09:50.000Z","valid_from":"2026-08-18T13:09:50.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-33824","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-08-18T12:00:00.000Z","valid_from":"2026-08-18T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-08-18T12:00:00.000Z","valid_from":"2026-08-18T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-08-18T12:00:00.000Z","valid_from":"2026-08-18T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65400","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-08-18T12:00:00.000Z","valid_from":"2026-08-18T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/18/gitlab-critical-code-injection-flaw-cve-2026-19478/","article_title":"Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)","article_url":"https://www.helpnetsecurity.com/2026/08/18/gitlab-critical-code-injection-flaw-cve-2026-19478/","published_at":"2026-08-18T11:38:24.000Z","valid_from":"2026-08-18T11:38:24.000Z","origin":"rss"},{"type":"ipv4","value":"158.220.87.79","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/one-attacker-has-scraped-both.html","article_title":"One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025","article_url":"https://thehackernews.com/2026/08/one-attacker-has-scraped-both.html","published_at":"2026-08-18T11:30:00.000Z","valid_from":"2026-08-18T11:30:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-62593","source":"GBHackers","source_url":"https://gbhackers.com/ray-project-ray-code-injection-vulnerability/","article_title":"CISA Warns of Active Exploitation of Ray-Project Ray Code Injection Vulnerability","article_url":"https://gbhackers.com/ray-project-ray-code-injection-vulnerability/","published_at":"2026-08-18T10:49:01.000Z","valid_from":"2026-08-18T10:49:01.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15748","source":"SecurityWeek","source_url":"https://www.securityweek.com/300000-wordpress-sites-potentially-exposed-to-hacking-due-to-form-plugin-flaw/","article_title":"300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw","article_url":"https://www.securityweek.com/300000-wordpress-sites-potentially-exposed-to-hacking-due-to-form-plugin-flaw/","published_at":"2026-08-18T10:48:23.000Z","valid_from":"2026-08-18T10:48:23.000Z","origin":"rss"},{"type":"domain","value":"safepal.com","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/safepal-hardware-wallet-maker-says-flaw.html","article_title":"SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers","article_url":"https://thehackernews.com/2026/08/safepal-hardware-wallet-maker-says-flaw.html","published_at":"2026-08-18T09:10:45.000Z","valid_from":"2026-08-18T09:10:45.000Z","origin":"rss"},{"type":"email","value":"security@safepal.com","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/safepal-hardware-wallet-maker-says-flaw.html","article_title":"SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers","article_url":"https://thehackernews.com/2026/08/safepal-hardware-wallet-maker-says-flaw.html","published_at":"2026-08-18T09:10:45.000Z","valid_from":"2026-08-18T09:10:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"Security Affairs","source_url":"https://securityaffairs.com/197454/hacking/gitlab-patches-critical-unauthenticated-graphql-vulnerability.html","article_title":"GitLab Patches Critical Unauthenticated GraphQL Vulnerability","article_url":"https://securityaffairs.com/197454/hacking/gitlab-patches-critical-unauthenticated-graphql-vulnerability.html","published_at":"2026-08-18T08:44:19.000Z","valid_from":"2026-08-18T08:44:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-62593","source":"Security Affairs","source_url":"https://securityaffairs.com/197419/security/u-s-cisa-adds-a-ray-project-ray-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds a Ray-Project Ray flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197419/security/u-s-cisa-adds-a-ray-project-ray-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-18T08:02:44.000Z","valid_from":"2026-08-18T08:02:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"GBHackers","source_url":"https://gbhackers.com/vmware-vcenter-vulnerability/","article_title":"VMware vCenter RCE Gives Attackers a Path From One Appliance to Entire Virtual Infrastructure","article_url":"https://gbhackers.com/vmware-vcenter-vulnerability/","published_at":"2026-08-18T05:36:08.000Z","valid_from":"2026-08-18T05:36:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59309","source":"GBHackers","source_url":"https://gbhackers.com/vmware-vcenter-vulnerability/","article_title":"VMware vCenter RCE Gives Attackers a Path From One Appliance to Entire Virtual Infrastructure","article_url":"https://gbhackers.com/vmware-vcenter-vulnerability/","published_at":"2026-08-18T05:36:08.000Z","valid_from":"2026-08-18T05:36:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47301","source":"GBHackers","source_url":"https://gbhackers.com/poc-exploit-released-for-microsoft-sccm-vulnerability/","article_title":"PoC Exploit Released for Microsoft SCCM Vulnerability Enabling SYSTEM-Level Code Execution","article_url":"https://gbhackers.com/poc-exploit-released-for-microsoft-sccm-vulnerability/","published_at":"2026-08-18T05:23:35.000Z","valid_from":"2026-08-18T05:23:35.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10056,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33256","article_title":"ISC Stormcast For Tuesday, August 18th, 2026 https://isc.sans.edu/podcastdetail/10056, (Tue, Aug 18th)","article_url":"https://isc.sans.edu/diary/rss/33256","published_at":"2026-08-18T02:00:03.000Z","valid_from":"2026-08-18T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html","article_title":"Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects","article_url":"https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html","published_at":"2026-08-17T21:03:04.000Z","valid_from":"2026-08-17T21:03:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15748","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/forminator-wordpress-flaw-can-enable.html","article_title":"Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads","article_url":"https://thehackernews.com/2026/08/forminator-wordpress-flaw-can-enable.html","published_at":"2026-08-17T18:22:09.000Z","valid_from":"2026-08-17T18:22:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-54121","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/certighost-and-the-privilege-hiding-in-your-certificate-authority/","article_title":"Certighost and the Privilege Hiding in Your Certificate Authority","article_url":"https://www.bleepingcomputer.com/news/security/certighost-and-the-privilege-hiding-in-your-certificate-authority/","published_at":"2026-08-17T14:00:10.000Z","valid_from":"2026-08-17T14:00:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65400","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/17/apple-macos-screen-sharing-flaw/","article_title":"Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer","article_url":"https://www.helpnetsecurity.com/2026/08/17/apple-macos-screen-sharing-flaw/","published_at":"2026-08-17T12:23:15.000Z","valid_from":"2026-08-17T12:23:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-62593","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/17/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/17/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-08-17T12:00:00.000Z","valid_from":"2026-08-17T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69414","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/","article_title":"Microsoft working on Defender patch for ShieldBreak zero-day","article_url":"https://www.bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/","published_at":"2026-08-17T09:05:33.000Z","valid_from":"2026-08-17T09:05:33.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58231","source":"SecurityWeek","source_url":"https://www.securityweek.com/critical-sap-commerce-cloud-vulnerability-exploited-3-days-after-disclosure/","article_title":"Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure","article_url":"https://www.securityweek.com/critical-sap-commerce-cloud-vulnerability-exploited-3-days-after-disclosure/","published_at":"2026-08-17T08:13:07.000Z","valid_from":"2026-08-17T08:13:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html","article_title":"Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware","article_url":"https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html","published_at":"2026-08-17T07:36:19.000Z","valid_from":"2026-08-17T07:36:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58231","source":"GBHackers","source_url":"https://gbhackers.com/critical-sap-commerce-cloud-rce-vulnerability/","article_title":"Critical SAP Commerce Cloud RCE Vulnerability Actively Exploited in the Wild","article_url":"https://gbhackers.com/critical-sap-commerce-cloud-rce-vulnerability/","published_at":"2026-08-17T05:13:16.000Z","valid_from":"2026-08-17T05:13:16.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10054,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33250","article_title":"ISC Stormcast For Monday, August 17th, 2026 https://isc.sans.edu/podcastdetail/10054, (Mon, Aug 17th)","article_url":"https://isc.sans.edu/diary/rss/33250","published_at":"2026-08-17T02:00:02.000Z","valid_from":"2026-08-17T02:00:02.000Z","origin":"rss"},{"type":"ipv4","value":"2.2.0.3","source":"Exploit Database","source_url":"https://www.exploit-db.com/exploits/52646","article_title":"[webapps] Duplicati 2.2.0.3 - JWT Signing Key Leak","article_url":"https://www.exploit-db.com/exploits/52646","published_at":"2026-08-17T00:00:00.000Z","valid_from":"2026-08-17T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58231","source":"Security Affairs","source_url":"https://securityaffairs.com/197288/breaking-news/security-affairs-newsletter-round-590-by-pierluigi-paganini-international-edition.html","article_title":"Security Affairs newsletter Round 590 by Pierluigi Paganini – INTERNATIONAL EDITION","article_url":"https://securityaffairs.com/197288/breaking-news/security-affairs-newsletter-round-590-by-pierluigi-paganini-international-edition.html","published_at":"2026-08-16T08:31:53.000Z","valid_from":"2026-08-16T08:31:53.000Z","origin":"rss"},{"type":"domain","value":"crates.io","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/16/week-in-review-salesforce-and-servicenow-portals-exposed-for-17-months-exploited-metabase-0-day/","article_title":"Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day","article_url":"https://www.helpnetsecurity.com/2026/08/16/week-in-review-salesforce-and-servicenow-portals-exposed-for-17-months-exploited-metabase-0-day/","published_at":"2026-08-16T08:00:56.000Z","valid_from":"2026-08-16T08:00:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58231","source":"Security Affairs","source_url":"https://securityaffairs.com/197244/security/sap-commerce-cloud-cve-2026-58231-exploited-in-the-wild.html","article_title":"SAP Commerce Cloud CVE-2026-58231 Exploited in the Wild","article_url":"https://securityaffairs.com/197244/security/sap-commerce-cloud-cve-2026-58231-exploited-in-the-wild.html","published_at":"2026-08-15T17:14:15.000Z","valid_from":"2026-08-15T17:14:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58231","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/sap-commerce-cloud-cve-2026-58231.html","article_title":"SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch","article_url":"https://thehackernews.com/2026/08/sap-commerce-cloud-cve-2026-58231.html","published_at":"2026-08-15T08:38:46.000Z","valid_from":"2026-08-15T08:38:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65400","source":"Security Affairs","source_url":"https://securityaffairs.com/197234/uncategorized/macos-screen-sharing-flaw-exploited-to-deploy-monero-miners.html","article_title":"macOS Screen Sharing Flaw Exploited to Deploy Monero Miners","article_url":"https://securityaffairs.com/197234/uncategorized/macos-screen-sharing-flaw-exploited-to-deploy-monero-miners.html","published_at":"2026-08-15T08:34:46.000Z","valid_from":"2026-08-15T08:34:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-23670","source":"GBHackers","source_url":"https://gbhackers.com/download-more-ram-attack-bypasses-windows-vbs/","article_title":"Download More RAM Attack Bypasses Windows VBS, HVCI and Disables Microsoft Defender","article_url":"https://gbhackers.com/download-more-ram-attack-bypasses-windows-vbs/","published_at":"2026-08-15T07:43:27.000Z","valid_from":"2026-08-15T07:43:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65400","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html","article_title":"Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner","article_url":"https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html","published_at":"2026-08-15T07:24:04.000Z","valid_from":"2026-08-15T07:24:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-46300","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-lot-of-summer-shells-and-fit-http-profiles","article_title":"Metasploit Wrap Up: Lot of summer shells and fit http profiles","article_url":"https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-lot-of-summer-shells-and-fit-http-profiles","published_at":"2026-08-14T21:27:45.000Z","valid_from":"2026-08-14T21:27:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65400","source":"SC Media","source_url":"https://www.scworld.com/brief/macos-screen-sharing-vulnerability-actively-exploited-for-crypto-mining","article_title":"MacOS screen sharing vulnerability actively exploited for crypto mining","article_url":"https://www.scworld.com/brief/macos-screen-sharing-vulnerability-actively-exploited-for-crypto-mining","published_at":"2026-08-14T21:27:25.000Z","valid_from":"2026-08-14T21:27:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20349","source":"SC Media","source_url":"https://www.scworld.com/brief/cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-exploited-vulnerabilities-list","article_title":"CISA adds Metabase, Windows and Cisco Secure Firewall flaws to exploited vulnerabilities list","article_url":"https://www.scworld.com/brief/cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-exploited-vulnerabilities-list","published_at":"2026-08-14T13:42:56.000Z","valid_from":"2026-08-14T13:42:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"SC Media","source_url":"https://www.scworld.com/brief/cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-exploited-vulnerabilities-list","article_title":"CISA adds Metabase, Windows and Cisco Secure Firewall flaws to exploited vulnerabilities list","article_url":"https://www.scworld.com/brief/cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-exploited-vulnerabilities-list","published_at":"2026-08-14T13:42:56.000Z","valid_from":"2026-08-14T13:42:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72898","source":"SC Media","source_url":"https://www.scworld.com/brief/cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-exploited-vulnerabilities-list","article_title":"CISA adds Metabase, Windows and Cisco Secure Firewall flaws to exploited vulnerabilities list","article_url":"https://www.scworld.com/brief/cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-exploited-vulnerabilities-list","published_at":"2026-08-14T13:42:56.000Z","valid_from":"2026-08-14T13:42:56.000Z","origin":"rss"},{"type":"domain","value":"chess.com","source":"Security Affairs","source_url":"https://securityaffairs.com/197174/breaking-news/chess-com-leak-exposes-7-3-million-users-evidence-points-to-scraping.html","article_title":"Chess.com Leak Exposes 7.3 Million Users – Evidence Points to Scraping","article_url":"https://securityaffairs.com/197174/breaking-news/chess-com-leak-exposes-7-3-million-users-evidence-points-to-scraping.html","published_at":"2026-08-14T08:24:21.000Z","valid_from":"2026-08-14T08:24:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-26035","source":"GBHackers","source_url":"https://gbhackers.com/fortinet-fortiweb-and-forticlient-flaws/","article_title":"Fortinet FortiWeb and FortiClient Flaws Let Unauthenticated Attackers Gain Access and Execute Arbitrary Code","article_url":"https://gbhackers.com/fortinet-fortiweb-and-forticlient-flaws/","published_at":"2026-08-14T05:54:40.000Z","valid_from":"2026-08-14T05:54:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-70465","source":"GBHackers","source_url":"https://gbhackers.com/fortinet-fortiweb-and-forticlient-flaws/","article_title":"Fortinet FortiWeb and FortiClient Flaws Let Unauthenticated Attackers Gain Access and Execute Arbitrary Code","article_url":"https://gbhackers.com/fortinet-fortiweb-and-forticlient-flaws/","published_at":"2026-08-14T05:54:40.000Z","valid_from":"2026-08-14T05:54:40.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10052,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33246","article_title":"ISC Stormcast For Friday, August 14th, 2026 https://isc.sans.edu/podcastdetail/10052, (Fri, Aug 14th)","article_url":"https://isc.sans.edu/diary/rss/33246","published_at":"2026-08-14T02:00:03.000Z","valid_from":"2026-08-14T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71362","source":"Security Affairs","source_url":"https://securityaffairs.com/197149/hacking/adobe-commerce-cve-2026-71362-comes-under-attack-shortly-after-public-disclosure.html","article_title":"Adobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public Disclosure","article_url":"https://securityaffairs.com/197149/hacking/adobe-commerce-cve-2026-71362-comes-under-attack-shortly-after-public-disclosure.html","published_at":"2026-08-13T17:48:54.000Z","valid_from":"2026-08-13T17:48:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20349","source":"Security Affairs","source_url":"https://securityaffairs.com/197110/uncategorized/u-s-cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197110/uncategorized/u-s-cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-13T17:12:45.000Z","valid_from":"2026-08-13T17:12:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20349","source":"Security Affairs","source_url":"https://securityaffairs.com/197110/hacking/u-s-cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197110/hacking/u-s-cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-13T17:12:45.000Z","valid_from":"2026-08-13T17:12:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/","article_title":"Critical VMware vCenter RCE flaw exploited for reverse SSH access","article_url":"https://www.bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/","published_at":"2026-08-13T16:40:23.000Z","valid_from":"2026-08-13T16:40:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71362","source":"SecurityWeek","source_url":"https://www.securityweek.com/adobe-commerce-bug-targeted-immediately-after-disclosure/","article_title":"Adobe Commerce Bug Targeted Immediately After Disclosure","article_url":"https://www.securityweek.com/adobe-commerce-bug-targeted-immediately-after-disclosure/","published_at":"2026-08-13T14:17:44.000Z","valid_from":"2026-08-13T14:17:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/13/microsoft-sharepoint-cve-2026-55040-poc-exploit/","article_title":"Attackers exploit critical SharePoint flaw after PoC goes public (CVE-2026-55040)","article_url":"https://www.helpnetsecurity.com/2026/08/13/microsoft-sharepoint-cve-2026-55040-poc-exploit/","published_at":"2026-08-13T13:05:08.000Z","valid_from":"2026-08-13T13:05:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62913","source":"GBHackers","source_url":"https://gbhackers.com/microsoft-exchange-server-vulnerabilities-2/","article_title":"Microsoft Exchange Server Vulnerabilities Allow DoS, Privilege Escalation, and RCE","article_url":"https://gbhackers.com/microsoft-exchange-server-vulnerabilities-2/","published_at":"2026-08-13T12:58:15.000Z","valid_from":"2026-08-13T12:58:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-67261","source":"GBHackers","source_url":"https://gbhackers.com/critical-dell-vmware-vsphere-client-flaw/","article_title":"Critical Dell VMware vSphere Client Flaw Lets Remote Attackers Execute Commands as Root","article_url":"https://gbhackers.com/critical-dell-vmware-vsphere-client-flaw/","published_at":"2026-08-13T12:39:03.000Z","valid_from":"2026-08-13T12:39:03.000Z","origin":"rss"},{"type":"ipv4","value":"10.11.1.0","source":"GBHackers","source_url":"https://gbhackers.com/critical-dell-vmware-vsphere-client-flaw/","article_title":"Critical Dell VMware vSphere Client Flaw Lets Remote Attackers Execute Commands as Root","article_url":"https://gbhackers.com/critical-dell-vmware-vsphere-client-flaw/","published_at":"2026-08-13T12:39:03.000Z","valid_from":"2026-08-13T12:39:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64629","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-10-0","article_title":"Siemens Parasolid","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-10-0","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69108","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-07","article_title":"Siemens License Server (SLS)","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-07","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69109","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-07","article_title":"Siemens License Server (SLS)","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-07","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64887","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-03","article_title":"Johnson Controls Inc. Airwall","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-03","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34492","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-03","article_title":"Johnson Controls Inc. Airwall","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-03","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34491","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-14","article_title":"Johnson Controls Metasys","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-14","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-3014","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-10","article_title":"Siemens Siveillance Video","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-10","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65309","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","article_title":"ANDRITZ HIPASE-250 and 250 SCALA","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65310","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","article_title":"ANDRITZ HIPASE-250 and 250 SCALA","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65311","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","article_title":"ANDRITZ HIPASE-250 and 250 SCALA","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65313","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","article_title":"ANDRITZ HIPASE-250 and 250 SCALA","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50058","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-12","article_title":"Siemens Solid Edge","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-12","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19188","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-02","article_title":"Haiwell IoT Cloud HMI Gateway","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-02","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"3.40.1.12","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-02","article_title":"Haiwell IoT Cloud HMI Gateway","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-02","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-7639","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-01","article_title":"AVEVA Enterprise SCADA","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-01","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43284","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-04","article_title":"Hitachi Energy APM Edge Product","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-04","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-3014","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-09","article_title":"Siemens Siveillance Video","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-09","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"GBHackers","source_url":"https://gbhackers.com/cisa-adds-actively-exploited-windows-winsock-vulnerability/","article_title":"CISA Adds Actively Exploited Windows WinSock Vulnerability to KEV Catalog","article_url":"https://gbhackers.com/cisa-adds-actively-exploited-windows-winsock-vulnerability/","published_at":"2026-08-13T11:08:27.000Z","valid_from":"2026-08-13T11:08:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"Security Affairs","source_url":"https://securityaffairs.com/197137/hacking/sharepoint-cve-2026-55040-comes-under-attack-following-public-exploit.html","article_title":"SharePoint CVE-2026-55040 Comes Under Attack Following Public Exploit","article_url":"https://securityaffairs.com/197137/hacking/sharepoint-cve-2026-55040-comes-under-attack-following-public-exploit.html","published_at":"2026-08-13T08:36:30.000Z","valid_from":"2026-08-13T08:36:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71362","source":"GBHackers","source_url":"https://gbhackers.com/critical-adobe-commerce-flaw/","article_title":"Critical Adobe Commerce Flaw Lets Unauthenticated Attackers Escalate Privileges","article_url":"https://gbhackers.com/critical-adobe-commerce-flaw/","published_at":"2026-08-13T08:36:18.000Z","valid_from":"2026-08-13T08:36:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20349","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/13/cve-2026-20349-cisco-firewalls-dos/","article_title":"Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349)","article_url":"https://www.helpnetsecurity.com/2026/08/13/cve-2026-20349-cisco-firewalls-dos/","published_at":"2026-08-13T07:30:53.000Z","valid_from":"2026-08-13T07:30:53.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/attackers-exploit-sharepoint.html","article_title":"Attackers Exploit SharePoint Authentication Bypass After Public PoC Release","article_url":"https://thehackernews.com/2026/08/attackers-exploit-sharepoint.html","published_at":"2026-08-13T06:09:48.000Z","valid_from":"2026-08-13T06:09:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65640","source":"GBHackers","source_url":"https://gbhackers.com/wordpress-rce-vulnerability/","article_title":"WordPress RCE Vulnerability Lets Authenticated Authors Execute Remote Code","article_url":"https://gbhackers.com/wordpress-rce-vulnerability/","published_at":"2026-08-13T05:00:24.000Z","valid_from":"2026-08-13T05:00:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2024-13962","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-567/","article_title":"ZDI-26-567: Norton Utilities Ultimate NortonUtilitiesSvc Link Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-567/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-40272","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-566/","article_title":"ZDI-26-566: BlackBerry QNX  KEV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-566/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12410","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-565/","article_title":"ZDI-26-565: Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-565/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24232","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-564/","article_title":"ZDI-26-564: NVIDIA Transformers4Rec load_model_trainer_states_from_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-564/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-4890","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-584/","article_title":"ZDI-26-584: dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-584/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20215","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-583/","article_title":"ZDI-26-583: Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-583/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20148","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-582/","article_title":"ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-582/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20147","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-581/","article_title":"ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-581/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20190","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-580/","article_title":"ZDI-26-580: Cisco Identity Services Engine Missing Authentication for Critical Function Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-580/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20181","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-579/","article_title":"ZDI-26-579: Cisco Identity Services Engine zipFiles Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-579/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27654","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-578/","article_title":"ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-578/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-67212","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-577/","article_title":"ZDI-26-577: Trend Micro VPN OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-577/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-46319","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-574/","article_title":"ZDI-26-574: Linux Kernel Net Scheduler Connection Tracking Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-574/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64530","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-571/","article_title":"ZDI-26-571: Linux Kernel Net Scheduler Packet Classifier API Use-After-Free Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-571/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10050,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33244","article_title":"ISC Stormcast For Thursday, August 13th, 2026 https://isc.sans.edu/podcastdetail/10050, (Thu, Aug 13th)","article_url":"https://isc.sans.edu/diary/rss/33244","published_at":"2026-08-13T02:00:03.000Z","valid_from":"2026-08-13T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71362","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts/","article_title":"Hackers exploit critical Adobe Commerce flaw to hijack customer accounts","article_url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts/","published_at":"2026-08-12T20:54:59.000Z","valid_from":"2026-08-12T20:54:59.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/lazarus-hackers-exploited-windows-zero-day-to-target-defense-firms/","article_title":"Lazarus hackers exploited Windows zero-day to target defense firms","article_url":"https://www.bleepingcomputer.com/news/security/lazarus-hackers-exploited-windows-zero-day-to-target-defense-firms/","published_at":"2026-08-12T15:38:08.000Z","valid_from":"2026-08-12T15:38:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50656","source":"GBHackers","source_url":"https://gbhackers.com/shieldbreak-windows-defender-0-day/","article_title":"ShieldBreak Windows Defender 0-Day Lets Attackers Bypass Microsoft Patch and Gain SYSTEM Privileges","article_url":"https://gbhackers.com/shieldbreak-windows-defender-0-day/","published_at":"2026-08-12T13:38:42.000Z","valid_from":"2026-08-12T13:38:42.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20337","source":"SC Media","source_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","article_title":"Cisco warns of 7 ClamAV flaws impacting Secure Endpoint Connector","article_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","published_at":"2026-08-12T13:15:25.000Z","valid_from":"2026-08-12T13:15:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20339","source":"SC Media","source_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","article_title":"Cisco warns of 7 ClamAV flaws impacting Secure Endpoint Connector","article_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","published_at":"2026-08-12T13:15:25.000Z","valid_from":"2026-08-12T13:15:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20345","source":"SC Media","source_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","article_title":"Cisco warns of 7 ClamAV flaws impacting Secure Endpoint Connector","article_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","published_at":"2026-08-12T13:15:25.000Z","valid_from":"2026-08-12T13:15:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20348","source":"SC Media","source_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","article_title":"Cisco warns of 7 ClamAV flaws impacting Secure Endpoint Connector","article_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","published_at":"2026-08-12T13:15:25.000Z","valid_from":"2026-08-12T13:15:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-critical-vmware-vcenter-flaw/","article_title":"Hackers Exploit Critical VMware vCenter Flaw to Deploy Reverse SSH Across 47 Countries","article_url":"https://gbhackers.com/hackers-exploit-critical-vmware-vcenter-flaw/","published_at":"2026-08-12T12:27:22.000Z","valid_from":"2026-08-12T12:27:22.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72898","source":"GBHackers","source_url":"https://gbhackers.com/cisa-warns-critical-metabase-sql-injection-flaw/","article_title":"CISA Warns Critical Metabase SQL Injection Flaw Lets Unauthenticated Attackers Gain Admin Access","article_url":"https://gbhackers.com/cisa-warns-critical-metabase-sql-injection-flaw/","published_at":"2026-08-12T12:02:03.000Z","valid_from":"2026-08-12T12:02:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-23573","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-06","article_title":"Siemens RUGGEDCOM APE1808","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-06","published_at":"2026-08-12T12:00:00.000Z","valid_from":"2026-08-12T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59839","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-06","article_title":"Siemens RUGGEDCOM APE1808","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-06","published_at":"2026-08-12T12:00:00.000Z","valid_from":"2026-08-12T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48362","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html","article_title":"Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws","article_url":"https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html","published_at":"2026-08-12T11:13:03.000Z","valid_from":"2026-08-12T11:13:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63520","source":"GBHackers","source_url":"https://gbhackers.com/microsoft-sharepoint-rce-vulnerability/","article_title":"Microsoft SharePoint RCE Vulnerability Lets Remote Attackers Execute Code","article_url":"https://gbhackers.com/microsoft-sharepoint-rce-vulnerability/","published_at":"2026-08-12T10:41:17.000Z","valid_from":"2026-08-12T10:41:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/12/august-2026-patch-tuesday-cve-2026-68820/","article_title":"Microsoft patches 400+ vulnerabilities, one zero-day under attack (CVE-2026-68820)","article_url":"https://www.helpnetsecurity.com/2026/08/12/august-2026-patch-tuesday-cve-2026-68820/","published_at":"2026-08-12T09:34:16.000Z","valid_from":"2026-08-12T09:34:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html","article_title":"Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access","article_url":"https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html","published_at":"2026-08-12T09:01:54.000Z","valid_from":"2026-08-12T09:01:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-70329","source":"GBHackers","source_url":"https://gbhackers.com/microsoft-outlook-rce-vulnerability/","article_title":"Microsoft Outlook RCE Vulnerability Lets Attackers Execute Code Remotely","article_url":"https://gbhackers.com/microsoft-outlook-rce-vulnerability/","published_at":"2026-08-12T08:24:28.000Z","valid_from":"2026-08-12T08:24:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50656","source":"Security Affairs","source_url":"https://securityaffairs.com/197063/hacking/shieldbreak-new-windows-zero-day-bypasses-microsofts-rogueplanet-patch.html","article_title":"ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch","article_url":"https://securityaffairs.com/197063/hacking/shieldbreak-new-windows-zero-day-bypasses-microsofts-rogueplanet-patch.html","published_at":"2026-08-12T08:07:15.000Z","valid_from":"2026-08-12T08:07:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"GBHackers","source_url":"https://gbhackers.com/windows-afd-sys-zero-day-exploited-by-lazarus-hackers/","article_title":"Windows AFD.sys Zero-Day Exploited by Lazarus Hackers to Gain SYSTEM Access","article_url":"https://gbhackers.com/windows-afd-sys-zero-day-exploited-by-lazarus-hackers/","published_at":"2026-08-12T07:38:58.000Z","valid_from":"2026-08-12T07:38:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58231","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.html","article_title":"SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code","article_url":"https://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.html","published_at":"2026-08-12T07:31:40.000Z","valid_from":"2026-08-12T07:31:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50656","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/shieldbreak-zero-day-poc-claims.html","article_title":"ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access","article_url":"https://thehackernews.com/2026/08/shieldbreak-zero-day-poc-claims.html","published_at":"2026-08-12T06:41:38.000Z","valid_from":"2026-08-12T06:41:38.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20349","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/cisco-asa-and-ftd-flaw-exploited-in.html","article_title":"Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS","article_url":"https://thehackernews.com/2026/08/cisco-asa-and-ftd-flaw-exploited-in.html","published_at":"2026-08-12T06:15:58.000Z","valid_from":"2026-08-12T06:15:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20349","source":"SecurityWeek","source_url":"https://www.securityweek.com/cisco-patches-firewall-zero-day-exploited-for-dos-attacks/","article_title":"Cisco Patches Firewall Zero-Day Exploited for DoS Attacks","article_url":"https://www.securityweek.com/cisco-patches-firewall-zero-day-exploited-for-dos-attacks/","published_at":"2026-08-12T05:10:47.000Z","valid_from":"2026-08-12T05:10:47.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53413","source":"GBHackers","source_url":"https://gbhackers.com/zoom-zero-click-zoomsday-flaw/","article_title":"Zoom Zero-Click ‘Zoomsday’ Flaw Lets Meeting Participants Execute Code on Other Users’ Devices","article_url":"https://gbhackers.com/zoom-zero-click-zoomsday-flaw/","published_at":"2026-08-12T05:04:51.000Z","valid_from":"2026-08-12T05:04:51.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-17106","source":"GBHackers","source_url":"https://gbhackers.com/docker-copyescape-vulnerability/","article_title":"Docker CopyEscape Vulnerability Enables Host File Overwrite and Root Code Execution","article_url":"https://gbhackers.com/docker-copyescape-vulnerability/","published_at":"2026-08-12T05:00:17.000Z","valid_from":"2026-08-12T05:00:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72898","source":"CSO Online","source_url":"https://www.csoonline.com/article/4208307/metabase-sqli-exploit-grants-attackers-total-access.html","article_title":"Metabase SQLi exploit grants attackers total access","article_url":"https://www.csoonline.com/article/4208307/metabase-sqli-exploit-grants-attackers-total-access.html","published_at":"2026-08-12T02:40:58.000Z","valid_from":"2026-08-12T02:40:58.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10048,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33238","article_title":"ISC Stormcast For Wednesday, August 12th, 2026 https://isc.sans.edu/podcastdetail/10048, (Wed, Aug 12th)","article_url":"https://isc.sans.edu/diary/rss/33238","published_at":"2026-08-12T02:00:03.000Z","valid_from":"2026-08-12T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"CSO Online","source_url":"https://www.csoonline.com/article/4208185/patch-tuesday-august-2026-a-zero-day-winsock-driver-hole-under-exploit-and-a-maximum-severity-sap-vulnerability.html","article_title":"Patch Tuesday August 2026: A zero-day WinSock driver hole under exploit, and a maximum severity SAP vulnerability","article_url":"https://www.csoonline.com/article/4208185/patch-tuesday-august-2026-a-zero-day-winsock-driver-hole-under-exploit-and-a-maximum-severity-sap-vulnerability.html","published_at":"2026-08-12T00:45:42.000Z","valid_from":"2026-08-12T00:45:42.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/microsoft-patches-398-flaws-including.html","article_title":"Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack","article_url":"https://thehackernews.com/2026/08/microsoft-patches-398-flaws-including.html","published_at":"2026-08-11T20:10:55.000Z","valid_from":"2026-08-11T20:10:55.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/microsofts-august-2026-patch-tuesday-addresses-398-cves-cve-2026-68820","article_title":"Microsoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)","article_url":"https://www.tenable.com/blog/microsofts-august-2026-patch-tuesday-addresses-398-cves-cve-2026-68820","published_at":"2026-08-11T18:04:04.000Z","valid_from":"2026-08-11T18:04:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6726","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/microsofts-august-2026-patch-tuesday-addresses-398-cves-cve-2026-68820","article_title":"Microsoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)","article_url":"https://www.tenable.com/blog/microsofts-august-2026-patch-tuesday-addresses-398-cves-cve-2026-68820","published_at":"2026-08-11T18:04:04.000Z","valid_from":"2026-08-11T18:04:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6727","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/microsofts-august-2026-patch-tuesday-addresses-398-cves-cve-2026-68820","article_title":"Microsoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)","article_url":"https://www.tenable.com/blog/microsofts-august-2026-patch-tuesday-addresses-398-cves-cve-2026-68820","published_at":"2026-08-11T18:04:04.000Z","valid_from":"2026-08-11T18:04:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53413","source":"Security Affairs","source_url":"https://securityaffairs.com/197042/hacking/zoom-patches-zoomsday-zero-click-flaw-enabling-remote-code-execution.html","article_title":"Zoom Patches “Zoomsday” Zero-Click Flaw Enabling Remote Code Execution","article_url":"https://securityaffairs.com/197042/hacking/zoom-patches-zoomsday-zero-click-flaw-enabling-remote-code-execution.html","published_at":"2026-08-11T17:48:01.000Z","valid_from":"2026-08-11T17:48:01.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/researchers-disclose-ai-assisted.html","article_title":"Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE","article_url":"https://thehackernews.com/2026/08/researchers-disclose-ai-assisted.html","published_at":"2026-08-11T16:47:44.000Z","valid_from":"2026-08-11T16:47:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-jwt-token-authentication-bypass-cve-2026-55040","article_title":"Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)","article_url":"https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-jwt-token-authentication-bypass-cve-2026-55040","published_at":"2026-08-11T13:00:00.000Z","valid_from":"2026-08-11T13:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63520","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63520-microsoft-sharepoint-remote-code-execution-fixed","article_title":"CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63520-microsoft-sharepoint-remote-code-execution-fixed","published_at":"2026-08-11T13:00:00.000Z","valid_from":"2026-08-11T13:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63520-microsoft-sharepoint-remote-code-execution-fixed","article_title":"CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63520-microsoft-sharepoint-remote-code-execution-fixed","published_at":"2026-08-11T13:00:00.000Z","valid_from":"2026-08-11T13:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18844","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-02","article_title":"Pulsetto Vagus Nerve Stimulator","article_url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-02","published_at":"2026-08-11T12:00:00.000Z","valid_from":"2026-08-11T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20349","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-11T12:00:00.000Z","valid_from":"2026-08-11T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-11T12:00:00.000Z","valid_from":"2026-08-11T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72898","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-11T12:00:00.000Z","valid_from":"2026-08-11T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44945","source":"GBHackers","source_url":"https://gbhackers.com/critical-rancher-flaw/","article_title":"Critical Rancher Flaw Lets Authenticated Users Gain Full Admin Access to All Managed Clusters","article_url":"https://gbhackers.com/critical-rancher-flaw/","published_at":"2026-08-11T10:32:45.000Z","valid_from":"2026-08-11T10:32:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15409","source":"GBHackers","source_url":"https://gbhackers.com/cisa-warns-sonicwall-sma1000-flaws/","article_title":"CISA Warns SonicWall SMA1000 Flaws Are Exploited in Ransomware Attacks","article_url":"https://gbhackers.com/cisa-warns-sonicwall-sma1000-flaws/","published_at":"2026-08-11T09:48:45.000Z","valid_from":"2026-08-11T09:48:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20337","source":"GBHackers","source_url":"https://gbhackers.com/clamav-vulnerabilities/","article_title":"CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files","article_url":"https://gbhackers.com/clamav-vulnerabilities/","published_at":"2026-08-11T07:15:18.000Z","valid_from":"2026-08-11T07:15:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20338","source":"GBHackers","source_url":"https://gbhackers.com/clamav-vulnerabilities/","article_title":"CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files","article_url":"https://gbhackers.com/clamav-vulnerabilities/","published_at":"2026-08-11T07:15:18.000Z","valid_from":"2026-08-11T07:15:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20339","source":"GBHackers","source_url":"https://gbhackers.com/clamav-vulnerabilities/","article_title":"CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files","article_url":"https://gbhackers.com/clamav-vulnerabilities/","published_at":"2026-08-11T07:15:18.000Z","valid_from":"2026-08-11T07:15:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20345","source":"GBHackers","source_url":"https://gbhackers.com/clamav-vulnerabilities/","article_title":"CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files","article_url":"https://gbhackers.com/clamav-vulnerabilities/","published_at":"2026-08-11T07:15:18.000Z","valid_from":"2026-08-11T07:15:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20346","source":"GBHackers","source_url":"https://gbhackers.com/clamav-vulnerabilities/","article_title":"CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files","article_url":"https://gbhackers.com/clamav-vulnerabilities/","published_at":"2026-08-11T07:15:18.000Z","valid_from":"2026-08-11T07:15:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20347","source":"GBHackers","source_url":"https://gbhackers.com/clamav-vulnerabilities/","article_title":"CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files","article_url":"https://gbhackers.com/clamav-vulnerabilities/","published_at":"2026-08-11T07:15:18.000Z","valid_from":"2026-08-11T07:15:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20348","source":"GBHackers","source_url":"https://gbhackers.com/clamav-vulnerabilities/","article_title":"CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files","article_url":"https://gbhackers.com/clamav-vulnerabilities/","published_at":"2026-08-11T07:15:18.000Z","valid_from":"2026-08-11T07:15:18.000Z","origin":"rss"},{"type":"domain","value":"wordpress.org","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/bdthemes-supply-chain-attack-poisons.html","article_title":"BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins","article_url":"https://thehackernews.com/2026/08/bdthemes-supply-chain-attack-poisons.html","published_at":"2026-08-11T05:48:44.000Z","valid_from":"2026-08-11T05:48:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-10090","source":"GBHackers","source_url":"https://gbhackers.com/red-hat-kubernetes-flaw/","article_title":"Red Hat Kubernetes Flaw Allows Attackers to Escalate Privileges to Cluster-Admin","article_url":"https://gbhackers.com/red-hat-kubernetes-flaw/","published_at":"2026-08-11T05:43:27.000Z","valid_from":"2026-08-11T05:43:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65775","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-541/","article_title":"ZDI-26-541: (Pwn2Own) Microsoft Windows win32kfull Use-After-Free Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-541/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65776","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-540/","article_title":"ZDI-26-540: (Pwn2Own) Microsoft Windows win32kfull Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-540/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65773","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-539/","article_title":"ZDI-26-539: (Pwn2Own) Microsoft Windows ipt.sys Incorrect Permission Assignment Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-539/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62911","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-538/","article_title":"ZDI-26-538: (Pwn2Own) Microsoft Exchange Improper Authorization Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-538/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65814","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-537/","article_title":"ZDI-26-537: (Pwn2Own) Microsoft Windows storport Integer Overflow Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-537/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62735","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-536/","article_title":"ZDI-26-536: (Pwn2Own) Microsoft Windows http.sys Integer Overflow Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-536/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62911","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-535/","article_title":"ZDI-26-535: (Pwn2Own) Microsoft Exchange External Control of File Path Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-535/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62911","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-534/","article_title":"ZDI-26-534: (Pwn2Own) Microsoft Exchange Capture-Replay Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-534/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-533/","article_title":"ZDI-26-533: Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-533/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66149","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-532/","article_title":"ZDI-26-532: SonicWall Email Security updateNetIf Command Injection Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-532/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66148","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-531/","article_title":"ZDI-26-531: SonicWall GMS Virtual Appliance interface Command Injection Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-531/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66150","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-530/","article_title":"ZDI-26-530: SonicWall Email Security snmp Command Injection Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-530/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21045","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-529/","article_title":"ZDI-26-529: Samsung Galaxy S25 TIFF File Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-529/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28220","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-528/","article_title":"ZDI-26-528: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-528/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44901","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-527/","article_title":"ZDI-26-527: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-527/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18263","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-556/","article_title":"ZDI-26-556: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-556/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18262","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-555/","article_title":"ZDI-26-555: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-555/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13121","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-554/","article_title":"ZDI-26-554: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-554/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18294","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-553/","article_title":"ZDI-26-553: OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-553/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18293","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-552/","article_title":"ZDI-26-552: OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-552/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18292","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-551/","article_title":"ZDI-26-551: OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-551/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18291","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-550/","article_title":"ZDI-26-550: OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-550/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18290","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-549/","article_title":"ZDI-26-549: OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-549/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18289","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-548/","article_title":"ZDI-26-548: OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-548/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18288","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-547/","article_title":"ZDI-26-547: OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-547/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69264","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-546/","article_title":"ZDI-26-546: Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-546/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69256","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-545/","article_title":"ZDI-26-545: Flowise CSV_Agent customReadCSV Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-545/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62893","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-544/","article_title":"ZDI-26-544: Microsoft Windows Deployment Services Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-544/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-54984","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-543/","article_title":"ZDI-26-543: Microsoft Windows ICC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-543/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62712","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-542/","article_title":"ZDI-26-542: Microsoft Windows UMPDDrvBitBlt Improper Object Management Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-542/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10046,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33232","article_title":"ISC Stormcast For Tuesday, August 11th, 2026 https://isc.sans.edu/podcastdetail/10046, (Tue, Aug 11th)","article_url":"https://isc.sans.edu/diary/rss/33232","published_at":"2026-08-11T02:00:03.000Z","valid_from":"2026-08-11T02:00:03.000Z","origin":"rss"},{"type":"domain","value":"noreply.net","source":"SC Media","source_url":"https://www.scworld.com/brief/security-researchers-accidentally-receive-vast-amounts-of-sensitive-data-through-misconfigured-email-domains","article_title":"Security researchers accidentally receive sensitive data through misconfigured email domains","article_url":"https://www.scworld.com/brief/security-researchers-accidentally-receive-vast-amounts-of-sensitive-data-through-misconfigured-email-domains","published_at":"2026-08-10T23:25:00.000Z","valid_from":"2026-08-10T23:25:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"SC Media","source_url":"https://www.scworld.com/brief/storm-1175-actor-deploys-new-stormencryptor-ransomware-after-n-central-vulnerability-exploitation","article_title":"Storm-1175 actor deploys new StormEncryptor ransomware after N-central vulnerability exploitation","article_url":"https://www.scworld.com/brief/storm-1175-actor-deploys-new-stormencryptor-ransomware-after-n-central-vulnerability-exploitation","published_at":"2026-08-10T23:17:00.000Z","valid_from":"2026-08-10T23:17:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"GBHackers","source_url":"https://gbhackers.com/cisa-flags-progress-loadmaster-command-injection-vulnerability/","article_title":"CISA Flags Progress LoadMaster Command Injection Vulnerability Exploited in the Wild","article_url":"https://gbhackers.com/cisa-flags-progress-loadmaster-command-injection-vulnerability/","published_at":"2026-08-10T12:32:35.000Z","valid_from":"2026-08-10T12:32:35.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/10/cve-2026-18577-n-central-hotfix-2-msps/","article_title":"N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577","article_url":"https://www.helpnetsecurity.com/2026/08/10/cve-2026-18577-n-central-hotfix-2-msps/","published_at":"2026-08-10T11:34:55.000Z","valid_from":"2026-08-10T11:34:55.000Z","origin":"rss"},{"type":"domain","value":"crates.io","source":"GBHackers","source_url":"https://gbhackers.com/github-expands-dependabot-malware-alerts/","article_title":"GitHub Expands Dependabot Malware Alerts to Detect Malicious Packages Across 8 Ecosystems","article_url":"https://gbhackers.com/github-expands-dependabot-malware-alerts/","published_at":"2026-08-10T11:29:29.000Z","valid_from":"2026-08-10T11:29:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20685","source":"GBHackers","source_url":"https://gbhackers.com/apple-private-cloud-compute-path-traversal-flaw/","article_title":"Apple Private Cloud Compute Path Traversal Flaw Lets Attackers Write Files as Root","article_url":"https://gbhackers.com/apple-private-cloud-compute-path-traversal-flaw/","published_at":"2026-08-10T09:36:32.000Z","valid_from":"2026-08-10T09:36:32.000Z","origin":"rss"},{"type":"domain","value":"crates.io","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/10/github-dependabot-malware-alerts/","article_title":"GitHub Dependabot malware alerts now cover eight ecosystems","article_url":"https://www.helpnetsecurity.com/2026/08/10/github-dependabot-malware-alerts/","published_at":"2026-08-10T07:01:11.000Z","valid_from":"2026-08-10T07:01:11.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10044,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33228","article_title":"ISC Stormcast For Monday, August 10th, 2026 https://isc.sans.edu/podcastdetail/10044, (Mon, Aug 10th)","article_url":"https://isc.sans.edu/diary/rss/33228","published_at":"2026-08-10T02:00:03.000Z","valid_from":"2026-08-10T02:00:03.000Z","origin":"rss"},{"type":"ipv4","value":"2.9.99.4","source":"Exploit Database","source_url":"https://www.exploit-db.com/exploits/52630","article_title":"[webapps] Joomla 2.9.99.4 - Unauthenticated Remote Code Execution","article_url":"https://www.exploit-db.com/exploits/52630","published_at":"2026-08-10T00:00:00.000Z","valid_from":"2026-08-10T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"Security Affairs","source_url":"https://securityaffairs.com/196863/hacking/u-s-cisa-adds-a-progress-loadmaster-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds a Progress LoadMaster flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/196863/hacking/u-s-cisa-adds-a-progress-loadmaster-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-08T11:00:08.000Z","valid_from":"2026-08-08T11:00:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64638","source":"GBHackers","source_url":"https://gbhackers.com/critical-wordpress-vulnerability/","article_title":"WordPress XSS2Shell Flaw Enables Attackers to Achieve Remote Code Execution","article_url":"https://gbhackers.com/critical-wordpress-vulnerability/","published_at":"2026-08-08T08:27:58.000Z","valid_from":"2026-08-08T08:27:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64564","source":"GBHackers","source_url":"https://gbhackers.com/18-year-old-linux-kernel-sctp-vulnerability/","article_title":"18-Year-Old Linux Kernel SCTP Vulnerability Lets Attackers Gain Root and Escape Containers","article_url":"https://gbhackers.com/18-year-old-linux-kernel-sctp-vulnerability/","published_at":"2026-08-08T08:02:13.000Z","valid_from":"2026-08-08T08:02:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65400","source":"GBHackers","source_url":"https://gbhackers.com/critical-macos-rce-vulnerability/","article_title":"Critical macOS RCE Vulnerability Allows Attackers to Gain Root Access Without Password","article_url":"https://gbhackers.com/critical-macos-rce-vulnerability/","published_at":"2026-08-08T07:12:02.000Z","valid_from":"2026-08-08T07:12:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.html","article_title":"Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts","article_url":"https://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.html","published_at":"2026-08-08T06:52:16.000Z","valid_from":"2026-08-08T06:52:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077","article_title":"Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)","article_url":"https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077","published_at":"2026-08-07T14:32:47.000Z","valid_from":"2026-08-07T14:32:47.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64638","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/new-wordpress-pre-auth-xss-could-lead.html","article_title":"New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP","article_url":"https://thehackernews.com/2026/08/new-wordpress-pre-auth-xss-could-lead.html","published_at":"2026-08-07T12:56:23.000Z","valid_from":"2026-08-07T12:56:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/07/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/07/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-08-07T12:00:00.000Z","valid_from":"2026-08-07T12:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10042,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33224","article_title":"ISC Stormcast For Friday, August 7th, 2026 https://isc.sans.edu/podcastdetail/10042, (Fri, Aug 7th)","article_url":"https://isc.sans.edu/diary/rss/33224","published_at":"2026-08-07T02:00:02.000Z","valid_from":"2026-08-07T02:00:02.000Z","origin":"rss"},{"type":"domain","value":"portswigger.net","source":"PortSwigger Research","source_url":"https://portswigger.net/research/css-the-bomb-inside-your-inbox","article_title":"CSS:the bomb inside your inbox","article_url":"https://portswigger.net/research/css-the-bomb-inside-your-inbox","published_at":"2026-08-06T22:00:00.000Z","valid_from":"2026-08-06T22:00:00.000Z","origin":"rss"},{"type":"email","value":"gareth.heyes@portswigger.net","source":"PortSwigger Research","source_url":"https://portswigger.net/research/css-the-bomb-inside-your-inbox","article_title":"CSS:the bomb inside your inbox","article_url":"https://portswigger.net/research/css-the-bomb-inside-your-inbox","published_at":"2026-08-06T22:00:00.000Z","valid_from":"2026-08-06T22:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64561","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.html","article_title":"New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts","article_url":"https://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.html","published_at":"2026-08-06T17:58:30.000Z","valid_from":"2026-08-06T17:58:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-70426","source":"GBHackers","source_url":"https://gbhackers.com/critical-jenkins-deserialization-flaw/","article_title":"Critical Jenkins Deserialization Flaw Allows Attackers to Execute Code on Controllers","article_url":"https://gbhackers.com/critical-jenkins-deserialization-flaw/","published_at":"2026-08-06T11:12:56.000Z","valid_from":"2026-08-06T11:12:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20200","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/06/cisco-imc-cve-2026-20200-public-poc-exploit/","article_title":"Critical Cisco IMC bug gives attackers root, PoC is out (CVE-2026-20200)","article_url":"https://www.helpnetsecurity.com/2026/08/06/cisco-imc-cve-2026-20200-public-poc-exploit/","published_at":"2026-08-06T10:38:43.000Z","valid_from":"2026-08-06T10:38:43.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"Security Affairs","source_url":"https://securityaffairs.com/196725/security/u-s-cisa-adds-a-jetbrains-teamcity-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds a JetBrains TeamCity flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/196725/security/u-s-cisa-adds-a-jetbrains-teamcity-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-06T08:22:27.000Z","valid_from":"2026-08-06T08:22:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20272","source":"GBHackers","source_url":"https://gbhackers.com/cisco-patches-7-ios-xe-vulnerability/","article_title":"Cisco Patches 7 IOS XE Vulnerability Classes, Including Critical Command Injection Flaws","article_url":"https://gbhackers.com/cisco-patches-7-ios-xe-vulnerability/","published_at":"2026-08-06T08:02:56.000Z","valid_from":"2026-08-06T08:02:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"GBHackers","source_url":"https://gbhackers.com/cisa-alerts-issues-on-actively-exploited-teamcity/","article_title":"CISA Alerts Issues on Actively Exploited TeamCity Remote Code Execution Vulnerability","article_url":"https://gbhackers.com/cisa-alerts-issues-on-actively-exploited-teamcity/","published_at":"2026-08-06T07:53:45.000Z","valid_from":"2026-08-06T07:53:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/cisa-flags-teamcity-cve-2026-63077-rce.html","article_title":"CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild","article_url":"https://thehackernews.com/2026/08/cisa-flags-teamcity-cve-2026-63077-rce.html","published_at":"2026-08-06T06:51:43.000Z","valid_from":"2026-08-06T06:51:43.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"SecurityWeek","source_url":"https://www.securityweek.com/hackers-start-exploiting-recent-jetbrains-teamcity-vulnerability/","article_title":"Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability","article_url":"https://www.securityweek.com/hackers-start-exploiting-recent-jetbrains-teamcity-vulnerability/","published_at":"2026-08-06T06:37:44.000Z","valid_from":"2026-08-06T06:37:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20303","source":"GBHackers","source_url":"https://gbhackers.com/critical-cisco-sd-wan-flaws-expose-systems/","article_title":"Critical Cisco SD-WAN Flaws Expose Systems to Access Control Bypass Attacks","article_url":"https://gbhackers.com/critical-cisco-sd-wan-flaws-expose-systems/","published_at":"2026-08-06T04:57:48.000Z","valid_from":"2026-08-06T04:57:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20304","source":"GBHackers","source_url":"https://gbhackers.com/critical-cisco-sd-wan-flaws-expose-systems/","article_title":"Critical Cisco SD-WAN Flaws Expose Systems to Access Control Bypass Attacks","article_url":"https://gbhackers.com/critical-cisco-sd-wan-flaws-expose-systems/","published_at":"2026-08-06T04:57:48.000Z","valid_from":"2026-08-06T04:57:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20310","source":"GBHackers","source_url":"https://gbhackers.com/critical-cisco-sd-wan-flaws-expose-systems/","article_title":"Critical Cisco SD-WAN Flaws Expose Systems to Access Control Bypass Attacks","article_url":"https://gbhackers.com/critical-cisco-sd-wan-flaws-expose-systems/","published_at":"2026-08-06T04:57:48.000Z","valid_from":"2026-08-06T04:57:48.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10040,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33222","article_title":"ISC Stormcast For Thursday, August 6th, 2026 https://isc.sans.edu/podcastdetail/10040, (Thu, Aug 6th)","article_url":"https://isc.sans.edu/diary/rss/33222","published_at":"2026-08-06T02:00:02.000Z","valid_from":"2026-08-06T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9198","source":"Security Affairs","source_url":"https://securityaffairs.com/196667/hacking/u-s-cisa-adds-langflow-apache-tomcat-and-n-able-n-central-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/196667/hacking/u-s-cisa-adds-langflow-apache-tomcat-and-n-able-n-central-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-05T15:25:18.000Z","valid_from":"2026-08-05T15:25:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64531","source":"Security Affairs","source_url":"https://securityaffairs.com/196657/hacking/ovswrap-13-year-old-linux-kernel-flaw-lets-local-users-become-root.html","article_title":"OVSwrap: 13-Year-Old Linux Kernel Flaw Lets Local Users Become Root","article_url":"https://securityaffairs.com/196657/hacking/ovswrap-13-year-old-linux-kernel-flaw-lets-local-users-become-root.html","published_at":"2026-08-05T14:24:08.000Z","valid_from":"2026-08-05T14:24:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64531","source":"GBHackers","source_url":"https://gbhackers.com/ovswrap-open-vswitch-flaw/","article_title":"OVSwrap Open vSwitch Flaw Lets Unprivileged Linux Users Gain Root Access","article_url":"https://gbhackers.com/ovswrap-open-vswitch-flaw/","published_at":"2026-08-05T13:29:31.000Z","valid_from":"2026-08-05T13:29:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/05/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/05/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-08-05T12:00:00.000Z","valid_from":"2026-08-05T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64531","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/new-ovswrap-linux-kernel-flaw-lets.html","article_title":"New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch","article_url":"https://thehackernews.com/2026/08/new-ovswrap-linux-kernel-flaw-lets.html","published_at":"2026-08-05T11:43:27.000Z","valid_from":"2026-08-05T11:43:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59774","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/critical-gitea-flaw-let-unauthenticated.html","article_title":"Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup","article_url":"https://thehackernews.com/2026/08/critical-gitea-flaw-let-unauthenticated.html","published_at":"2026-08-05T11:04:23.000Z","valid_from":"2026-08-05T11:04:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64633","source":"GBHackers","source_url":"https://gbhackers.com/critical-veeam-one-flaw/","article_title":"Critical Veeam ONE Flaw Lets Unauthenticated Attackers Execute Code Remotely","article_url":"https://gbhackers.com/critical-veeam-one-flaw/","published_at":"2026-08-05T08:38:15.000Z","valid_from":"2026-08-05T08:38:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9198","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/cisa-flags-langflow-rce-tomcat-and-n.html","article_title":"CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited","article_url":"https://thehackernews.com/2026/08/cisa-flags-langflow-rce-tomcat-and-n.html","published_at":"2026-08-05T07:40:39.000Z","valid_from":"2026-08-05T07:40:39.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10038,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33216","article_title":"ISC Stormcast For Wednesday, August 5th, 2026 https://isc.sans.edu/podcastdetail/10038, (Wed, Aug 5th)","article_url":"https://isc.sans.edu/diary/rss/33216","published_at":"2026-08-05T02:00:02.000Z","valid_from":"2026-08-05T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"CSO Online","source_url":"https://www.csoonline.com/article/4205383/ruby-on-rails-critical-bug-puts-every-image-upload-under-scrutiny.html","article_title":"Ruby on Rails critical bug puts every image upload under scrutiny","article_url":"https://www.csoonline.com/article/4205383/ruby-on-rails-critical-bug-puts-every-image-upload-under-scrutiny.html","published_at":"2026-08-05T01:56:18.000Z","valid_from":"2026-08-05T01:56:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58048","source":"Security Affairs","source_url":"https://securityaffairs.com/196595/security/cve-2026-58048-cpanel-bug-enables-full-database-administrator-access.html","article_title":"CVE-2026-58048: cPanel Bug Enables Full Database Administrator Access","article_url":"https://securityaffairs.com/196595/security/cve-2026-58048-cpanel-bug-enables-full-database-administrator-access.html","published_at":"2026-08-04T12:29:41.000Z","valid_from":"2026-08-04T12:29:41.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"GBHackers","source_url":"https://gbhackers.com/cisa-adds-exploited-n-able-n-central-flaw/","article_title":"CISA Adds Exploited N-able N-central Flaw Enabling Remote Admin Takeover to KEV","article_url":"https://gbhackers.com/cisa-adds-exploited-n-able-n-central-flaw/","published_at":"2026-08-04T12:22:35.000Z","valid_from":"2026-08-04T12:22:35.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9198","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/04/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/04/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-04T12:00:00.000Z","valid_from":"2026-08-04T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18556","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/04/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/04/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-04T12:00:00.000Z","valid_from":"2026-08-04T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34486","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/04/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/04/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-04T12:00:00.000Z","valid_from":"2026-08-04T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-17583","source":"HackRead","source_url":"https://hackread.com/thermo-fisher-forensic-dna-file-tampering-flaw/","article_title":"Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software","article_url":"https://hackread.com/thermo-fisher-forensic-dna-file-tampering-flaw/","published_at":"2026-08-04T11:34:47.000Z","valid_from":"2026-08-04T11:34:47.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-18577-n-able-n-central-authentication-bypass-exploited-in-the-wild","article_title":"CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-18577-n-able-n-central-authentication-bypass-exploited-in-the-wild","published_at":"2026-08-04T11:11:54.000Z","valid_from":"2026-08-04T11:11:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18556","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-18577-n-able-n-central-authentication-bypass-exploited-in-the-wild","article_title":"CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-18577-n-able-n-central-authentication-bypass-exploited-in-the-wild","published_at":"2026-08-04T11:11:54.000Z","valid_from":"2026-08-04T11:11:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"Security Affairs","source_url":"https://securityaffairs.com/196585/security/u-s-cisa-adds-a-n-able-n-central-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds a N-able N-central flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/196585/security/u-s-cisa-adds-a-n-able-n-central-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-04T11:02:44.000Z","valid_from":"2026-08-04T11:02:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58048","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/new-cpanel-critical-flaw-could-let.html","article_title":"New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root","article_url":"https://thehackernews.com/2026/08/new-cpanel-critical-flaw-could-let.html","published_at":"2026-08-04T10:36:27.000Z","valid_from":"2026-08-04T10:36:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59774","source":"GBHackers","source_url":"https://gbhackers.com/critical-gitea-flaw/","article_title":"Critical Gitea Flaw Lets Unauthenticated Attackers Read Server Files and Execute Code","article_url":"https://gbhackers.com/critical-gitea-flaw/","published_at":"2026-08-04T09:40:58.000Z","valid_from":"2026-08-04T09:40:58.000Z","origin":"rss"},{"type":"ipv4","value":"1.22.11.22","source":"GBHackers","source_url":"https://gbhackers.com/critical-gitea-flaw/","article_title":"Critical Gitea Flaw Lets Unauthenticated Attackers Read Server Files and Execute Code","article_url":"https://gbhackers.com/critical-gitea-flaw/","published_at":"2026-08-04T09:40:58.000Z","valid_from":"2026-08-04T09:40:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-39875","source":"GBHackers","source_url":"https://gbhackers.com/macos-cups-flaw/","article_title":"macOS CUPS Flaw Lets Local Attackers Write Arbitrary Files as Root","article_url":"https://gbhackers.com/macos-cups-flaw/","published_at":"2026-08-04T09:31:38.000Z","valid_from":"2026-08-04T09:31:38.000Z","origin":"rss"},{"type":"domain","value":"nuget.org","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/04/microsoft-reducing-nuget-api-keys-lifetime/","article_title":"Microsoft shortens NuGet API key lifetime to improve supply chain security","article_url":"https://www.helpnetsecurity.com/2026/08/04/microsoft-reducing-nuget-api-keys-lifetime/","published_at":"2026-08-04T08:30:15.000Z","valid_from":"2026-08-04T08:30:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18574","source":"GBHackers","source_url":"https://gbhackers.com/critical-check-point-flaw/","article_title":"Critical Check Point Flaw Lets Unauthenticated Attackers Execute Commands on Management Servers","article_url":"https://gbhackers.com/critical-check-point-flaw/","published_at":"2026-08-04T07:04:59.000Z","valid_from":"2026-08-04T07:04:59.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html","article_title":"CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises","article_url":"https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html","published_at":"2026-08-04T07:00:13.000Z","valid_from":"2026-08-04T07:00:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18556","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html","article_title":"CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises","article_url":"https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html","published_at":"2026-08-04T07:00:13.000Z","valid_from":"2026-08-04T07:00:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58048","source":"GBHackers","source_url":"https://gbhackers.com/cpanel-database-privilege-escalation-flaw/","article_title":"cPanel Database Privilege Escalation Flaw Enables Full Administrative Access","article_url":"https://gbhackers.com/cpanel-database-privilege-escalation-flaw/","published_at":"2026-08-04T06:54:23.000Z","valid_from":"2026-08-04T06:54:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-17583","source":"GBHackers","source_url":"https://gbhackers.com/thermo-fisher-dna-analysis-software-flaw/","article_title":"Thermo Fisher DNA Analysis Software Flaw Lets Attackers Secretly Alter Test Data","article_url":"https://gbhackers.com/thermo-fisher-dna-analysis-software-flaw/","published_at":"2026-08-04T05:12:26.000Z","valid_from":"2026-08-04T05:12:26.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10036,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33212","article_title":"ISC Stormcast For Tuesday, August 4th, 2026 https://isc.sans.edu/podcastdetail/10036, (Tue, Aug 4th)","article_url":"https://isc.sans.edu/diary/rss/33212","published_at":"2026-08-04T02:00:03.000Z","valid_from":"2026-08-04T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18556","source":"SC Media","source_url":"https://www.scworld.com/brief/n-able-addresses-critical-n-central-vulnerabilities-exploited-by-attackers","article_title":"N-able addresses critical N-central vulnerabilities exploited by attackers","article_url":"https://www.scworld.com/brief/n-able-addresses-critical-n-central-vulnerabilities-exploited-by-attackers","published_at":"2026-08-03T19:34:57.000Z","valid_from":"2026-08-03T19:34:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"SC Media","source_url":"https://www.scworld.com/brief/n-able-addresses-critical-n-central-vulnerabilities-exploited-by-attackers","article_title":"N-able addresses critical N-central vulnerabilities exploited by attackers","article_url":"https://www.scworld.com/brief/n-able-addresses-critical-n-central-vulnerabilities-exploited-by-attackers","published_at":"2026-08-03T19:34:57.000Z","valid_from":"2026-08-03T19:34:57.000Z","origin":"rss"},{"type":"ipv4","value":"7.2.3.2","source":"SC Media","source_url":"https://www.scworld.com/brief/critical-vulnerability-in-rails-active-storage-could-lead-to-rce","article_title":"Critical vulnerability in Rails Active Storage could lead to RCE","article_url":"https://www.scworld.com/brief/critical-vulnerability-in-rails-active-storage-could-lead-to-rce","published_at":"2026-08-03T19:03:13.000Z","valid_from":"2026-08-03T19:03:13.000Z","origin":"rss"},{"type":"ipv4","value":"8.0.5.1","source":"SC Media","source_url":"https://www.scworld.com/brief/critical-vulnerability-in-rails-active-storage-could-lead-to-rce","article_title":"Critical vulnerability in Rails Active Storage could lead to RCE","article_url":"https://www.scworld.com/brief/critical-vulnerability-in-rails-active-storage-could-lead-to-rce","published_at":"2026-08-03T19:03:13.000Z","valid_from":"2026-08-03T19:03:13.000Z","origin":"rss"},{"type":"ipv4","value":"8.1.3.1","source":"SC Media","source_url":"https://www.scworld.com/brief/critical-vulnerability-in-rails-active-storage-could-lead-to-rce","article_title":"Critical vulnerability in Rails Active Storage could lead to RCE","article_url":"https://www.scworld.com/brief/critical-vulnerability-in-rails-active-storage-could-lead-to-rce","published_at":"2026-08-03T19:03:13.000Z","valid_from":"2026-08-03T19:03:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ra-kindarails2shell-technical-analysis-cve-2026-66066","article_title":"Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)","article_url":"https://www.rapid7.com/blog/post/ra-kindarails2shell-technical-analysis-cve-2026-66066","published_at":"2026-08-03T17:11:25.000Z","valid_from":"2026-08-03T17:11:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48449","source":"SC Media","source_url":"https://www.scworld.com/brief/adobe-fixes-critical-vulnerabilities-in-campaign-classic-and-bridge","article_title":"Adobe fixes critical vulnerabilities in Campaign Classic and Bridge","article_url":"https://www.scworld.com/brief/adobe-fixes-critical-vulnerabilities-in-campaign-classic-and-bridge","published_at":"2026-08-03T17:03:15.000Z","valid_from":"2026-08-03T17:03:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/","article_title":"N-able warns of N-central auth bypass flaw exploited in attacks","article_url":"https://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/","published_at":"2026-08-03T17:00:56.000Z","valid_from":"2026-08-03T17:00:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/03/cve-2026-18577-n-able-n-central-vulnerability/","article_title":"Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)","article_url":"https://www.helpnetsecurity.com/2026/08/03/cve-2026-18577-n-able-n-central-vulnerability/","published_at":"2026-08-03T14:33:10.000Z","valid_from":"2026-08-03T14:33:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12935","source":"GBHackers","source_url":"https://gbhackers.com/tp-link-tl-wr940n-router-flaw/","article_title":"TP-Link TL-WR940N Router Flaw Lets Unauthenticated Attackers Execute Code Remotely","article_url":"https://gbhackers.com/tp-link-tl-wr940n-router-flaw/","published_at":"2026-08-03T13:18:29.000Z","valid_from":"2026-08-03T13:18:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"SecurityWeek","source_url":"https://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/","article_title":"N‑able Patches Vulnerability Exploited to Hack N-central Servers","article_url":"https://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/","published_at":"2026-08-03T12:34:06.000Z","valid_from":"2026-08-03T12:34:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/03/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/03/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-08-03T12:00:00.000Z","valid_from":"2026-08-03T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/03/kindarails2shell-cve-2026-66066-vulnerability/","article_title":"KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066)","article_url":"https://www.helpnetsecurity.com/2026/08/03/kindarails2shell-cve-2026-66066-vulnerability/","published_at":"2026-08-03T11:42:08.000Z","valid_from":"2026-08-03T11:42:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-17583","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/thermo-fisher-patches-flaw-that-could.html","article_title":"Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable","article_url":"https://thehackernews.com/2026/08/thermo-fisher-patches-flaw-that-could.html","published_at":"2026-08-03T08:05:30.000Z","valid_from":"2026-08-03T08:05:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"GBHackers","source_url":"https://gbhackers.com/critical-n-able-n-central-flaw-actively-exploited/","article_title":"Critical N-able N-central Flaw Actively Exploited to Gain God-Mode Access to MSP Networks","article_url":"https://gbhackers.com/critical-n-able-n-central-flaw-actively-exploited/","published_at":"2026-08-03T06:55:29.000Z","valid_from":"2026-08-03T06:55:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html","article_title":"N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete","article_url":"https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html","published_at":"2026-08-03T06:41:46.000Z","valid_from":"2026-08-03T06:41:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"GBHackers","source_url":"https://gbhackers.com/metasploit-exploit-targets-critical-ruby-on-rails/","article_title":"Metasploit Exploit Targets Critical Ruby on Rails Active Storage RCE Flaw","article_url":"https://gbhackers.com/metasploit-exploit-targets-critical-ruby-on-rails/","published_at":"2026-08-03T06:26:49.000Z","valid_from":"2026-08-03T06:26:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"Security Affairs","source_url":"https://securityaffairs.com/196486/security/ruby-on-rails-patches-critical-active-storage-vulnerability-affecting-image-processing.html","article_title":"Ruby on Rails Patches Critical Active Storage Vulnerability Affecting Image Processing","article_url":"https://securityaffairs.com/196486/security/ruby-on-rails-patches-critical-active-storage-vulnerability-affecting-image-processing.html","published_at":"2026-08-03T06:22:23.000Z","valid_from":"2026-08-03T06:22:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16812","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-critical-arista-velocloud-flaw/","article_title":"Hackers Exploit Critical Arista VeloCloud Flaw to Execute OS Commands","article_url":"https://gbhackers.com/hackers-exploit-critical-arista-velocloud-flaw/","published_at":"2026-08-03T05:37:19.000Z","valid_from":"2026-08-03T05:37:19.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10034,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33210","article_title":"ISC Stormcast For Monday, August 3rd, 2026 https://isc.sans.edu/podcastdetail/10034, (Mon, Aug 3rd)","article_url":"https://isc.sans.edu/diary/rss/33210","published_at":"2026-08-03T02:00:02.000Z","valid_from":"2026-08-03T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48449","source":"Security Affairs","source_url":"https://securityaffairs.com/196429/security/adobe-fixed-a-maximum-severity-vulnerability-flaw-in-campaign-classic.html","article_title":"Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic","article_url":"https://securityaffairs.com/196429/security/adobe-fixed-a-maximum-severity-vulnerability-flaw-in-campaign-classic.html","published_at":"2026-08-01T12:31:34.000Z","valid_from":"2026-08-01T12:31:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48449","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/adobe-campaign-classic-cvss-100-flaw.html","article_title":"Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction","article_url":"https://thehackernews.com/2026/08/adobe-campaign-classic-cvss-100-flaw.html","published_at":"2026-08-01T07:12:42.000Z","valid_from":"2026-08-01T07:12:42.000Z","origin":"rss"},{"type":"domain","value":"wordpress.org","source":"HackRead","source_url":"https://hackread.com/wordfence-critical-backdoor-arve-wordpress-plugin/","article_title":"Wordfence Finds Critical Backdoor in ARVE WordPress Plugin","article_url":"https://hackread.com/wordfence-critical-backdoor-arve-wordpress-plugin/","published_at":"2026-07-31T13:07:14.000Z","valid_from":"2026-07-31T13:07:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-17059","source":"GBHackers","source_url":"https://gbhackers.com/keycloak-flaw-exposes-users-personal-data/","article_title":"Keycloak Flaw Exposes Users’ Personal Data to Restricted Admins","article_url":"https://gbhackers.com/keycloak-flaw-exposes-users-personal-data/","published_at":"2026-07-31T13:00:00.000Z","valid_from":"2026-07-31T13:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"GBHackers","source_url":"https://gbhackers.com/critical-jetbrains-teamcity-flaw/","article_title":"Critical JetBrains TeamCity Flaw Enables Unauthenticated Remote Code Execution","article_url":"https://gbhackers.com/critical-jetbrains-teamcity-flaw/","published_at":"2026-07-31T10:47:38.000Z","valid_from":"2026-07-31T10:47:38.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"CSO Online","source_url":"https://www.csoonline.com/article/4203872/jetbrains-says-a-crafted-http-request-could-break-teamcity.html","article_title":"JetBrains says a crafted HTTP request could break TeamCity","article_url":"https://www.csoonline.com/article/4203872/jetbrains-says-a-crafted-http-request-could-break-teamcity.html","published_at":"2026-07-31T10:46:30.000Z","valid_from":"2026-07-31T10:46:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28323","source":"GBHackers","source_url":"https://gbhackers.com/critical-solarwinds-web-help-desk-flaw/","article_title":"Critical SolarWinds Web Help Desk Flaw Lets Attackers Bypass SAML Authentication","article_url":"https://gbhackers.com/critical-solarwinds-web-help-desk-flaw/","published_at":"2026-07-31T08:10:06.000Z","valid_from":"2026-07-31T08:10:06.000Z","origin":"rss"},{"type":"ipv4","value":"91.92.40.13","source":"GBHackers","source_url":"https://gbhackers.com/recon-only-ssh-attack/","article_title":"Recon-Only SSH Attack Leaves No Malware but Signals a Second-Stage Intrusion","article_url":"https://gbhackers.com/recon-only-ssh-attack/","published_at":"2026-07-31T07:35:43.000Z","valid_from":"2026-07-31T07:35:43.000Z","origin":"rss"},{"type":"ipv4","value":"8.4.248.4","source":"GBHackers","source_url":"https://gbhackers.com/php-patches-3-security-flaws-enabling-sql-injection/","article_title":"PHP Patches 3 Security Flaws Enabling SQL Injection, Memory Corruption and DoS Attacks","article_url":"https://gbhackers.com/php-patches-3-security-flaws-enabling-sql-injection/","published_at":"2026-07-31T06:53:39.000Z","valid_from":"2026-07-31T06:53:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"SecurityWeek","source_url":"https://www.securityweek.com/critical-code-execution-vulnerability-patched-in-teamcity/","article_title":"Critical Code Execution Vulnerability Patched in TeamCity ","article_url":"https://www.securityweek.com/critical-code-execution-vulnerability-patched-in-teamcity/","published_at":"2026-07-31T06:50:30.000Z","valid_from":"2026-07-31T06:50:30.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10032,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33204","article_title":"ISC Stormcast For Friday, July 31st, 2026 https://isc.sans.edu/podcastdetail/10032, (Fri, Jul 31st)","article_url":"https://isc.sans.edu/diary/rss/33204","published_at":"2026-07-31T02:00:03.000Z","valid_from":"2026-07-31T02:00:03.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"Security Affairs","source_url":"https://securityaffairs.com/196369/malware/researchers-expose-flying-eagle-criminal-ecosystem-behind-fake-chinese-police-app.html","article_title":"Researchers Expose Flying Eagle Criminal Ecosystem Behind Fake Chinese Police App","article_url":"https://securityaffairs.com/196369/malware/researchers-expose-flying-eagle-criminal-ecosystem-behind-fake-chinese-police-app.html","published_at":"2026-07-30T22:41:51.000Z","valid_from":"2026-07-30T22:41:51.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-kindarails2shell-cve-2026-66066-critical-arbitrary-file-read-and-possible-remote-code-execution-in-ruby-on-rails","article_title":"KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails","article_url":"https://www.rapid7.com/blog/post/etr-kindarails2shell-cve-2026-66066-critical-arbitrary-file-read-and-possible-remote-code-execution-in-ruby-on-rails","published_at":"2026-07-30T16:11:10.000Z","valid_from":"2026-07-30T16:11:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42897","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/30/cve-2026-42897-microsoft-exchange-email-attack/","article_title":"Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897)","article_url":"https://www.helpnetsecurity.com/2026/07/30/cve-2026-42897-microsoft-exchange-email-attack/","published_at":"2026-07-30T14:23:34.000Z","valid_from":"2026-07-30T14:23:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59726","source":"CSO Online","source_url":"https://www.csoonline.com/article/4203408/critical-ruflo-flaw-lets-attackers-hijack-ai-agents-through-exposed-mcp-bridge.html","article_title":"Critical Ruflo flaw lets attackers hijack AI agents through exposed MCP bridge","article_url":"https://www.csoonline.com/article/4203408/critical-ruflo-flaw-lets-attackers-hijack-ai-agents-through-exposed-mcp-bridge.html","published_at":"2026-07-30T12:29:58.000Z","valid_from":"2026-07-30T12:29:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18064","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-06","article_title":"NASA Core Flight System (cFS) Health & Safety (HS) Application","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-06","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"igss.schneider-electric.com","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-04","article_title":"Schneider Electric IGSS","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-04","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"url","value":"https://igss.schneider-electric.com/)","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-04","article_title":"Schneider Electric IGSS","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-04","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-14227","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-01","article_title":"MikroTik RouterOS","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-01","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12562","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-03","article_title":"Toptech Systems RCU II+ and Multiload II+","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-03","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5846","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-09","article_title":"Watchfire Controller Software","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-09","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21662","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","article_title":"Johnson Controls OpenBlue Employee","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34495","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","article_title":"Johnson Controls OpenBlue Employee","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34497","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","article_title":"Johnson Controls OpenBlue Employee","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66720","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66369","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63550","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65421","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66364","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66349","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56758","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66360","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61893","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-11","article_title":"MZ Automation lib60870","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-11","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63033","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-11","article_title":"MZ Automation lib60870","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-11","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"GBHackers","source_url":"https://gbhackers.com/cisa-adds-cisco-secure-firewall-management-flaw/","article_title":"CISA Adds Cisco Secure Firewall Management Flaw to Exploited Vulnerabilities List","article_url":"https://gbhackers.com/cisa-adds-cisco-secure-firewall-management-flaw/","published_at":"2026-07-30T11:45:20.000Z","valid_from":"2026-07-30T11:45:20.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/30/cisco-fmc-cve-2026-20316-exploited/","article_title":"Cisco FMC static credentials exploited by attackers (CVE-2026-20316)","article_url":"https://www.helpnetsecurity.com/2026/07/30/cisco-fmc-cve-2026-20316-exploited/","published_at":"2026-07-30T10:44:09.000Z","valid_from":"2026-07-30T10:44:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59309","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-critical-vmware-vcenter-vulnerabilities-allow-authentication-bypass-and-remote-code-execution-cve-2026-59309-cve-2026-59310","article_title":"Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)","article_url":"https://www.rapid7.com/blog/post/etr-critical-vmware-vcenter-vulnerabilities-allow-authentication-bypass-and-remote-code-execution-cve-2026-59309-cve-2026-59310","published_at":"2026-07-30T10:35:21.000Z","valid_from":"2026-07-30T10:35:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-critical-vmware-vcenter-vulnerabilities-allow-authentication-bypass-and-remote-code-execution-cve-2026-59309-cve-2026-59310","article_title":"Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)","article_url":"https://www.rapid7.com/blog/post/etr-critical-vmware-vcenter-vulnerabilities-allow-authentication-bypass-and-remote-code-execution-cve-2026-59309-cve-2026-59310","published_at":"2026-07-30T10:35:21.000Z","valid_from":"2026-07-30T10:35:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"Security Affairs","source_url":"https://securityaffairs.com/196289/security/u-s-cisa-adds-a-cisco-secure-firewall-management-center-fmc-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/196289/security/u-s-cisa-adds-a-cisco-secure-firewall-management-center-fmc-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-07-30T09:06:54.000Z","valid_from":"2026-07-30T09:06:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"SecurityWeek","source_url":"https://www.securityweek.com/cisco-secure-fmc-zero-day-exploited-in-the-wild/","article_title":"Cisco Secure FMC Zero-Day Exploited in the Wild","article_url":"https://www.securityweek.com/cisco-secure-fmc-zero-day-exploited-in-the-wild/","published_at":"2026-07-30T06:31:31.000Z","valid_from":"2026-07-30T06:31:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/cisco-fmc-zero-day-actively-exploited.html","article_title":"Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data","article_url":"https://thehackernews.com/2026/07/cisco-fmc-zero-day-actively-exploited.html","published_at":"2026-07-30T05:08:39.000Z","valid_from":"2026-07-30T05:08:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15679","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-523/","article_title":"ZDI-26-523: Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-523/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41032","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-522/","article_title":"ZDI-26-522: Phoenix Contact CHARX SEC-3000 Insertion of Sensitive Information into Log File Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-522/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44095","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-521/","article_title":"ZDI-26-521: Phoenix Contact CHARX SEC-3000 Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-521/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44103","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-520/","article_title":"ZDI-26-520: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Jupicore External Control of Path Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-520/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44099","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-519/","article_title":"ZDI-26-519: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-519/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44091","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-518/","article_title":"ZDI-26-518: (Pwn2Own) Phoenix Contact CHARX SEC-3150 MQTT Service Server-Side Request Forgery Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-518/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44098","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-517/","article_title":"ZDI-26-517: (Pwn2Own) Phoenix Contact CHARX SEC-3150 BackendURL WebSocket Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-517/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44090","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-516/","article_title":"ZDI-26-516: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-516/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44100","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-515/","article_title":"ZDI-26-515: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-jupicore Missing Authentication Configuration Modification Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-515/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44094","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-514/","article_title":"ZDI-26-514: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Failing Open Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-514/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44097","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-513/","article_title":"ZDI-26-513: (Pwn2Own) Phoenix Contact CHARX SEC-3150 update2-upload Arbitrary File Upload Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-513/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44107","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-512/","article_title":"ZDI-26-512: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-512/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44093","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-511/","article_title":"ZDI-26-511: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Symlink Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-511/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44104","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-510/","article_title":"ZDI-26-510: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Missing Cryptographic Signature Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-510/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44101","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-509/","article_title":"ZDI-26-509: (Pwn2Own) Phoenix Contact CHARX SEC-3150 OCPP Missing Authentication for Critical Function Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-509/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44095","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-508/","article_title":"ZDI-26-508: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx_set_ip_address Improper Input Validation Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-508/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44096","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-507/","article_title":"ZDI-26-507: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Privilege Defined With Unsafe Actions Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-507/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44105","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-506/","article_title":"ZDI-26-506: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Insertion of Sensitive Information into Log File Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-506/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44092","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-505/","article_title":"ZDI-26-505: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-system-config-manager Service CRLF Injection Firewall Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-505/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-7849","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-504/","article_title":"ZDI-26-504: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-504/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44108","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-503/","article_title":"ZDI-26-503: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Race Condition Firewall Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-503/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44106","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-502/","article_title":"ZDI-26-502: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Link Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-502/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"api.anthropic.com","source":"GBHackers","source_url":"https://gbhackers.com/claude-global-outage-hits-users/","article_title":"Claude Global Outage Hits Users With “529 Overloaded” Error Messages","article_url":"https://gbhackers.com/claude-global-outage-hits-users/","published_at":"2026-07-30T04:58:26.000Z","valid_from":"2026-07-30T04:58:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-10702","source":"GBHackers","source_url":"https://gbhackers.com/hackers-can-compromise-tor-browser-users/","article_title":"Hackers Can Compromise Tor Browser Users by Exploiting Firefox JIT Flaw","article_url":"https://gbhackers.com/hackers-can-compromise-tor-browser-users/","published_at":"2026-07-30T04:31:12.000Z","valid_from":"2026-07-30T04:31:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"GBHackers","source_url":"https://gbhackers.com/critical-rails-flaw/","article_title":"Critical Rails Flaw Lets Unauthenticated Attackers Read Server Files and Execute Code","article_url":"https://gbhackers.com/critical-rails-flaw/","published_at":"2026-07-30T04:03:53.000Z","valid_from":"2026-07-30T04:03:53.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10030,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33200","article_title":"ISC Stormcast For Thursday, July 30th, 2026 https://isc.sans.edu/podcastdetail/10030, (Thu, Jul 30th)","article_url":"https://isc.sans.edu/diary/rss/33200","published_at":"2026-07-30T02:00:03.000Z","valid_from":"2026-07-30T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/cisco-warns-of-fmc-static-credential-flaw-exploited-in-zero-day-attacks/","article_title":"Cisco warns of FMC static credential flaw exploited in zero-day attacks","article_url":"https://www.bleepingcomputer.com/news/security/cisco-warns-of-fmc-static-credential-flaw-exploited-in-zero-day-attacks/","published_at":"2026-07-29T21:35:40.000Z","valid_from":"2026-07-29T21:35:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-rails-flaw-could-let.html","article_title":"Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads","article_url":"https://thehackernews.com/2026/07/critical-rails-flaw-could-let.html","published_at":"2026-07-29T18:10:00.000Z","valid_from":"2026-07-29T18:10:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63077-critical-unauthenticated-remote-code-execution-in-jetbrains-teamcity","article_title":"CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63077-critical-unauthenticated-remote-code-execution-in-jetbrains-teamcity","published_at":"2026-07-29T16:16:48.000Z","valid_from":"2026-07-29T16:16:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59726","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/ruflo-mcp-flaw-lets-unauthenticated.html","article_title":"Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory","article_url":"https://thehackernews.com/2026/07/ruflo-mcp-flaw-lets-unauthenticated.html","published_at":"2026-07-29T15:39:30.000Z","valid_from":"2026-07-29T15:39:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59309","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/three-critical-vmware-flaws-allow-auth.html","article_title":"Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape","article_url":"https://thehackernews.com/2026/07/three-critical-vmware-flaws-allow-auth.html","published_at":"2026-07-29T15:31:15.000Z","valid_from":"2026-07-29T15:31:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53921","source":"SC Media","source_url":"https://www.scworld.com/brief/openwrt-releases-security-updates-for-critical-dhcpv6-flaw-and-other-vulnerabilities","article_title":"OpenWrt releases security updates for critical DHCPv6 flaw and other vulnerabilities","article_url":"https://www.scworld.com/brief/openwrt-releases-security-updates-for-critical-dhcpv6-flaw-and-other-vulnerabilities","published_at":"2026-07-29T14:33:58.000Z","valid_from":"2026-07-29T14:33:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"SC Media","source_url":"https://www.scworld.com/brief/jetbrains-patches-critical-teamcity-flaw-enabling-unauthenticated-code-execution","article_title":"JetBrains patches critical TeamCity flaw enabling unauthenticated code execution","article_url":"https://www.scworld.com/brief/jetbrains-patches-critical-teamcity-flaw-enabling-unauthenticated-code-execution","published_at":"2026-07-29T14:30:48.000Z","valid_from":"2026-07-29T14:30:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59726","source":"GBHackers","source_url":"https://gbhackers.com/critical-ruflo-mcp-bridge-flaw/","article_title":"Critical Ruflo MCP Bridge Flaw Allows Full AI Agent Platform Takeover","article_url":"https://gbhackers.com/critical-ruflo-mcp-bridge-flaw/","published_at":"2026-07-29T13:51:23.000Z","valid_from":"2026-07-29T13:51:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47876","source":"Security Affairs","source_url":"https://securityaffairs.com/196231/security/broadcom-patches-critical-vmware-esxi-vulnerability-enabling-host-code-execution.html","article_title":"Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code Execution","article_url":"https://securityaffairs.com/196231/security/broadcom-patches-critical-vmware-esxi-vulnerability-enabling-host-code-execution.html","published_at":"2026-07-29T13:02:49.000Z","valid_from":"2026-07-29T13:02:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/29/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/29/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-07-29T12:00:00.000Z","valid_from":"2026-07-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-10702","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/researchers-show-single-malicious.html","article_title":"Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser","article_url":"https://thehackernews.com/2026/07/researchers-show-single-malicious.html","published_at":"2026-07-29T11:57:00.000Z","valid_from":"2026-07-29T11:57:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65094","source":"GBHackers","source_url":"https://gbhackers.com/nvidia-bluefield-flaw/","article_title":"NVIDIA BlueField Flaw Lets VM Users Execute Code via Crafted Messages","article_url":"https://gbhackers.com/nvidia-bluefield-flaw/","published_at":"2026-07-29T11:41:30.000Z","valid_from":"2026-07-29T11:41:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"GBHackers","source_url":"https://gbhackers.com/check-point-smartconsole-zero-day/","article_title":"Check Point SmartConsole Zero-Day Lets Unauthenticated Attackers Gain Full Admin Access","article_url":"https://gbhackers.com/check-point-smartconsole-zero-day/","published_at":"2026-07-29T09:21:21.000Z","valid_from":"2026-07-29T09:21:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/rapid7-releases-poc-for-exploited-check.html","article_title":"Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass","article_url":"https://thehackernews.com/2026/07/rapid7-releases-poc-for-exploited-check.html","published_at":"2026-07-29T08:58:27.000Z","valid_from":"2026-07-29T08:58:27.000Z","origin":"rss"},{"type":"domain","value":"mend.io","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/29/mend-io-runtime-protection/","article_title":"Mend.io enhances application security with AI runtime protection and faster zero-day response","article_url":"https://www.helpnetsecurity.com/2026/07/29/mend-io-runtime-protection/","published_at":"2026-07-29T07:49:10.000Z","valid_from":"2026-07-29T07:49:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60004","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html","article_title":"New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands","article_url":"https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html","published_at":"2026-07-29T07:47:19.000Z","valid_from":"2026-07-29T07:47:19.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/flying-eagle-android-rat-traces-found.html","article_title":"Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates","article_url":"https://thehackernews.com/2026/07/flying-eagle-android-rat-traces-found.html","published_at":"2026-07-29T07:07:23.000Z","valid_from":"2026-07-29T07:07:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18299","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-467/","article_title":"ZDI-26-467: GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-467/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18298","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-466/","article_title":"ZDI-26-466: GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-466/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18297","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-465/","article_title":"ZDI-26-465: GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-465/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18296","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-464/","article_title":"ZDI-26-464: GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-464/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18295","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-463/","article_title":"ZDI-26-463: GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-463/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18309","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-462/","article_title":"ZDI-26-462: GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-462/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18308","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-461/","article_title":"ZDI-26-461: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-461/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18307","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-460/","article_title":"ZDI-26-460: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-460/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18306","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-459/","article_title":"ZDI-26-459: GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-459/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18305","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-458/","article_title":"ZDI-26-458: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-458/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18304","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-457/","article_title":"ZDI-26-457: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-457/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18303","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-456/","article_title":"ZDI-26-456: GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-456/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18302","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-455/","article_title":"ZDI-26-455: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-455/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18301","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-454/","article_title":"ZDI-26-454: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-454/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18300","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-453/","article_title":"ZDI-26-453: GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-453/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18269","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-486/","article_title":"ZDI-26-486: (Pwn2Own) Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-486/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18268","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-485/","article_title":"ZDI-26-485: (Pwn2Own) Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-485/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18267","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-484/","article_title":"ZDI-26-484: (Pwn2Own) Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-484/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18264","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-483/","article_title":"ZDI-26-483: NoMachine getstat Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-483/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59689","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-482/","article_title":"ZDI-26-482: Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-482/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59690","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-481/","article_title":"ZDI-26-481: Progress Software Kemp LoadMaster access Missing Authorization Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-481/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18265","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-480/","article_title":"ZDI-26-480: OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-480/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18274","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-479/","article_title":"ZDI-26-479: Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-479/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15686","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-478/","article_title":"ZDI-26-478: Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-478/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18284","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-477/","article_title":"ZDI-26-477: (Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-477/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18283","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-476/","article_title":"ZDI-26-476: (Pwn2Own) Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-476/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18282","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-475/","article_title":"ZDI-26-475: (Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-475/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18281","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-474/","article_title":"ZDI-26-474: (Pwn2Own) Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-474/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18280","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-473/","article_title":"ZDI-26-473: (Pwn2Own) Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-473/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18279","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-472/","article_title":"ZDI-26-472: (Pwn2Own) Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-472/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18278","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-471/","article_title":"ZDI-26-471: (Pwn2Own) Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-471/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18287","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-470/","article_title":"ZDI-26-470: Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-470/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18286","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-469/","article_title":"ZDI-26-469: Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-469/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18285","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-468/","article_title":"ZDI-26-468: Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-468/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18273","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-490/","article_title":"ZDI-26-490: (Pwn2Own) Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-490/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18272","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-489/","article_title":"ZDI-26-489: (Pwn2Own) Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-489/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18271","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-488/","article_title":"ZDI-26-488: (Pwn2Own) Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-488/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18270","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-487/","article_title":"ZDI-26-487: (Pwn2Own) Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-487/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13054","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-501/","article_title":"ZDI-26-501: WatchGuard FireWare OS sigd comp_start_cb Directory Traversal Arbitrary File Creation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-501/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13050","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-500/","article_title":"ZDI-26-500: WatchGuard FireWare OS networkd network_wireless_kick_off_user_cb Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-500/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13053","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-499/","article_title":"ZDI-26-499: WatchGuard FireWare OS cli Token Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-499/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-71387","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-498/","article_title":"ZDI-26-498: TrendAI Vision One Incorrect Privilege Assignment Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-498/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-71386","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-497/","article_title":"ZDI-26-497: TrendAI Vision One Service Gateway Logs Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-497/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62660","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-496/","article_title":"ZDI-26-496: Trend AI Cleaner One Pro Link Following Arbitrary File Deletion Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-496/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47876","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-495/","article_title":"ZDI-26-495: (Pwn2Own) VMware ESXi VMXNET3 espQueueMask Out-Of-Bounds Write Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-495/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43729","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-494/","article_title":"ZDI-26-494: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-494/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43733","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-493/","article_title":"ZDI-26-493: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-493/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43780","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-492/","article_title":"ZDI-26-492: Apple macOS ImageIO Numeric Truncation Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-492/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43673","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-491/","article_title":"ZDI-26-491: Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-491/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"email","value":"layouts@0.1.2-2773.beta","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/two-compromised-joyfill-npm-packages.html","article_title":"Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js","article_url":"https://thehackernews.com/2026/07/two-compromised-joyfill-npm-packages.html","published_at":"2026-07-29T04:20:57.000Z","valid_from":"2026-07-29T04:20:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42533","source":"GBHackers","source_url":"https://gbhackers.com/nginx-heap-overflow-flaw/","article_title":"NGINX Heap Overflow Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code","article_url":"https://gbhackers.com/nginx-heap-overflow-flaw/","published_at":"2026-07-29T03:53:17.000Z","valid_from":"2026-07-29T03:53:17.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10028,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33194","article_title":"ISC Stormcast For Wednesday, July 29th, 2026 https://isc.sans.edu/podcastdetail/10028, (Wed, Jul 29th)","article_url":"https://isc.sans.edu/diary/rss/33194","published_at":"2026-07-29T02:00:02.000Z","valid_from":"2026-07-29T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ra-check-point-smartconsole-authentication-bypass-technical-analysis-cve-2026-16232","article_title":"Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)","article_url":"https://www.rapid7.com/blog/post/ra-check-point-smartconsole-authentication-bypass-technical-analysis-cve-2026-16232","published_at":"2026-07-28T18:32:03.000Z","valid_from":"2026-07-28T18:32:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53921","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-openwrt-dhcpv6-flaw-could-let.html","article_title":"Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root","article_url":"https://thehackernews.com/2026/07/critical-openwrt-dhcpv6-flaw-could-let.html","published_at":"2026-07-28T12:56:14.000Z","valid_from":"2026-07-28T12:56:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16347","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-05","article_title":"MikroTik RouterOS and Cloud Hosted Router","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-05","published_at":"2026-07-28T12:00:00.000Z","valid_from":"2026-07-28T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-54429","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-03","article_title":"Siemens SIMATIC S7-PLCSIM Advanced","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-03","published_at":"2026-07-28T12:00:00.000Z","valid_from":"2026-07-28T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16581","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06","article_title":"igloohome Smart Lock Mobile Application","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06","published_at":"2026-07-28T12:00:00.000Z","valid_from":"2026-07-28T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"Security Affairs","source_url":"https://securityaffairs.com/196169/security/jetbrains-patches-cvss-9-8-teamcity-flaw-allowing-server-takeover.html","article_title":"JetBrains Patches Critical TeamCity Flaw Allowing Server Takeover","article_url":"https://securityaffairs.com/196169/security/jetbrains-patches-cvss-9-8-teamcity-flaw-allowing-server-takeover.html","published_at":"2026-07-28T11:17:06.000Z","valid_from":"2026-07-28T11:17:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/28/teamcity-rce-cve-2026-63077-fixed/","article_title":"JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)","article_url":"https://www.helpnetsecurity.com/2026/07/28/teamcity-rce-cve-2026-63077-fixed/","published_at":"2026-07-28T11:04:12.000Z","valid_from":"2026-07-28T11:04:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"GBHackers","source_url":"https://gbhackers.com/critical-teamcity-flaw/","article_title":"Critical TeamCity Flaw Lets Unauthenticated Attackers Execute System Commands","article_url":"https://gbhackers.com/critical-teamcity-flaw/","published_at":"2026-07-28T10:58:50.000Z","valid_from":"2026-07-28T10:58:50.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53264","source":"GBHackers","source_url":"https://gbhackers.com/ai-discovered-linux-kernel-zero-day/","article_title":"AI-Discovered Linux Kernel Zero-Day Enables Root Privilege Escalation","article_url":"https://gbhackers.com/ai-discovered-linux-kernel-zero-day/","published_at":"2026-07-28T10:34:07.000Z","valid_from":"2026-07-28T10:34:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-68686","source":"Security Affairs","source_url":"https://securityaffairs.com/196130/security/u-s-cisa-adds-arista-velocloud-orchestrator-and-fortinet-fortios-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/196130/security/u-s-cisa-adds-arista-velocloud-orchestrator-and-fortinet-fortios-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-07-28T08:19:29.000Z","valid_from":"2026-07-28T08:19:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html","article_title":"Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In","article_url":"https://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html","published_at":"2026-07-28T08:11:22.000Z","valid_from":"2026-07-28T08:11:22.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53264","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/researcher-says-ai-helped-develop-linux.html","article_title":"Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit","article_url":"https://thehackernews.com/2026/07/researcher-says-ai-helped-develop-linux.html","published_at":"2026-07-28T08:04:44.000Z","valid_from":"2026-07-28T08:04:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16812","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/attackers-exploit-arista-velocloud.html","article_title":"Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw","article_url":"https://thehackernews.com/2026/07/attackers-exploit-arista-velocloud.html","published_at":"2026-07-28T04:43:53.000Z","valid_from":"2026-07-28T04:43:53.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10026,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33190","article_title":"ISC Stormcast For Tuesday, July 28th, 2026 https://isc.sans.edu/podcastdetail/10026, (Tue, Jul 28th)","article_url":"https://isc.sans.edu/diary/rss/33190","published_at":"2026-07-28T02:00:03.000Z","valid_from":"2026-07-28T02:00:03.000Z","origin":"rss"},{"type":"domain","value":"media.io","source":"HackRead","source_url":"https://hackread.com/ai-tools-create-story-videos-workflow-wondershare-media-io/","article_title":"Too Many AI Tools? Here’s How to Create Story Videos In One Workflow With Wondershare Media.io","article_url":"https://hackread.com/ai-tools-create-story-videos-workflow-wondershare-media-io/","published_at":"2026-07-27T22:56:11.000Z","valid_from":"2026-07-27T22:56:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27577","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/n8n-sandbox-escape-lets-workflow.html","article_title":"n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process","article_url":"https://thehackernews.com/2026/07/n8n-sandbox-escape-lets-workflow.html","published_at":"2026-07-27T13:05:15.000Z","valid_from":"2026-07-27T13:05:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-54121","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/27/certighost-cve-2026-54121-poc-exploit-released/","article_title":"PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)","article_url":"https://www.helpnetsecurity.com/2026/07/27/certighost-cve-2026-54121-poc-exploit-released/","published_at":"2026-07-27T12:04:09.000Z","valid_from":"2026-07-27T12:04:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-68686","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-07-27T12:00:00.000Z","valid_from":"2026-07-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16812","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-07-27T12:00:00.000Z","valid_from":"2026-07-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61511","source":"GBHackers","source_url":"https://gbhackers.com/vbulletin-pre-auth-rce-flaw/","article_title":"vBulletin Pre-Auth RCE Flaw Allows Remote PHP Code Execution","article_url":"https://gbhackers.com/vbulletin-pre-auth-rce-flaw/","published_at":"2026-07-27T11:11:46.000Z","valid_from":"2026-07-27T11:11:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-49176","source":"GBHackers","source_url":"https://gbhackers.com/windows-walletservice-flaw/","article_title":"Windows WalletService Flaw Lets Standard Users Gain SYSTEM Privileges","article_url":"https://gbhackers.com/windows-walletservice-flaw/","published_at":"2026-07-27T08:31:46.000Z","valid_from":"2026-07-27T08:31:46.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10024,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33186","article_title":"ISC Stormcast For Monday, July 27th, 2026 https://isc.sans.edu/podcastdetail/10024, (Mon, Jul 27th)","article_url":"https://isc.sans.edu/diary/rss/33186","published_at":"2026-07-27T02:00:02.000Z","valid_from":"2026-07-27T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16723","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html","article_title":"Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available","article_url":"https://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html","published_at":"2026-07-25T12:52:43.000Z","valid_from":"2026-07-25T12:52:43.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57239","source":"GBHackers","source_url":"https://gbhackers.com/foxit-pdf-reader-flaw/","article_title":"Foxit PDF Reader Flaw Lets Local Attackers Gain SYSTEM Privileges via DLL Sideloading","article_url":"https://gbhackers.com/foxit-pdf-reader-flaw/","published_at":"2026-07-24T13:15:56.000Z","valid_from":"2026-07-24T13:15:56.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"Security Affairs","source_url":"https://securityaffairs.com/195941/hacking/thailands-ministry-of-finance-targeted-with-hermes-ai-agent-running-unattended-hades-implant-staged.html","article_title":"Thailand’s Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged","article_url":"https://securityaffairs.com/195941/hacking/thailands-ministry-of-finance-targeted-with-hermes-ai-agent-running-unattended-hades-implant-staged.html","published_at":"2026-07-24T12:10:28.000Z","valid_from":"2026-07-24T12:10:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32194","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/bing-images-flaws-let-crafted-svgs-run.html","article_title":"Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers","article_url":"https://thehackernews.com/2026/07/bing-images-flaws-let-crafted-svgs-run.html","published_at":"2026-07-24T11:45:17.000Z","valid_from":"2026-07-24T11:45:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62183","source":"GBHackers","source_url":"https://gbhackers.com/apache-syncope-flaws/","article_title":"Apache Syncope Flaws Let Users Gain Admin Roles and Execute Remote Code","article_url":"https://gbhackers.com/apache-syncope-flaws/","published_at":"2026-07-24T08:54:04.000Z","valid_from":"2026-07-24T08:54:04.000Z","origin":"rss"},{"type":"ipv4","value":"4.1.24.1","source":"GBHackers","source_url":"https://gbhackers.com/apache-syncope-flaws/","article_title":"Apache Syncope Flaws Let Users Gain Admin Roles and Execute Remote Code","article_url":"https://gbhackers.com/apache-syncope-flaws/","published_at":"2026-07-24T08:54:04.000Z","valid_from":"2026-07-24T08:54:04.000Z","origin":"rss"},{"type":"ipv4","value":"4.0.74.0","source":"GBHackers","source_url":"https://gbhackers.com/apache-syncope-flaws/","article_title":"Apache Syncope Flaws Let Users Gain Admin Roles and Execute Remote Code","article_url":"https://gbhackers.com/apache-syncope-flaws/","published_at":"2026-07-24T08:54:04.000Z","valid_from":"2026-07-24T08:54:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0257","source":"CSO Online","source_url":"https://www.csoonline.com/article/4201019/ransomware-groups-are-hammering-your-vulnerable-vpns.html","article_title":"Ransomware groups are hammering your vulnerable VPNs","article_url":"https://www.csoonline.com/article/4201019/ransomware-groups-are-hammering-your-vulnerable-vpns.html","published_at":"2026-07-24T07:00:00.000Z","valid_from":"2026-07-24T07:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10022,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33182","article_title":"ISC Stormcast For Friday, July 24th, 2026 https://isc.sans.edu/podcastdetail/10022, (Fri, Jul 24th)","article_url":"https://isc.sans.edu/diary/rss/33182","published_at":"2026-07-24T02:00:02.000Z","valid_from":"2026-07-24T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"CSO Online","source_url":"https://www.csoonline.com/article/4200913/check-point-hole-grants-unauthenticated-attackers-full-smartconsole-admin-privileges.html","article_title":"Check Point hole grants unauthenticated attackers full SmartConsole admin privileges","article_url":"https://www.csoonline.com/article/4200913/check-point-hole-grants-unauthenticated-attackers-full-smartconsole-admin-privileges.html","published_at":"2026-07-23T20:14:58.000Z","valid_from":"2026-07-23T20:14:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-16232-critical-check-point-smartconsole-authentication-bypass-exploited-in-the-wild","article_title":"CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-16232-critical-check-point-smartconsole-authentication-bypass-exploited-in-the-wild","published_at":"2026-07-23T11:57:30.000Z","valid_from":"2026-07-23T11:57:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64600","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/linux/new-refluxfs-linux-flaw-lets-attackers-gain-root-privileges/","article_title":"New RefluXFS Linux flaw lets attackers gain root privileges","article_url":"https://www.bleepingcomputer.com/news/linux/new-refluxfs-linux-flaw-lets-attackers-gain-root-privileges/","published_at":"2026-07-23T11:40:16.000Z","valid_from":"2026-07-23T11:40:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/23/check-point-vulnerability-cve-2026-16232/","article_title":"Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232)","article_url":"https://www.helpnetsecurity.com/2026/07/23/check-point-vulnerability-cve-2026-16232/","published_at":"2026-07-23T10:42:06.000Z","valid_from":"2026-07-23T10:42:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"GBHackers","source_url":"https://gbhackers.com/critical-check-point-smartconsole-flaw/","article_title":"Critical Check Point SmartConsole Flaw Exploited in the Wild to Bypass Authentication","article_url":"https://gbhackers.com/critical-check-point-smartconsole-flaw/","published_at":"2026-07-23T09:54:06.000Z","valid_from":"2026-07-23T09:54:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8933","source":"GBHackers","source_url":"https://gbhackers.com/ubuntu-snap-confine-vulnerability/","article_title":"Ubuntu Snap-Confine Vulnerability Allows Unprivileged Users to Execute Code as Root","article_url":"https://gbhackers.com/ubuntu-snap-confine-vulnerability/","published_at":"2026-07-23T09:35:59.000Z","valid_from":"2026-07-23T09:35:59.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"SecurityWeek","source_url":"https://www.securityweek.com/new-check-point-zero-day-vulnerability-exploited-in-the-wild/","article_title":"New Check Point Zero-Day Vulnerability Exploited in the Wild","article_url":"https://www.securityweek.com/new-check-point-zero-day-vulnerability-exploited-in-the-wild/","published_at":"2026-07-23T09:06:04.000Z","valid_from":"2026-07-23T09:06:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"Security Affairs","source_url":"https://securityaffairs.com/195848/hacking/check-point-patches-actively-exploited-smartconsole-authentication-bypass-flaw.html","article_title":"Check Point patches actively exploited SmartConsole authentication bypass flaw","article_url":"https://securityaffairs.com/195848/hacking/check-point-patches-actively-exploited-smartconsole-authentication-bypass-flaw.html","published_at":"2026-07-23T08:33:06.000Z","valid_from":"2026-07-23T08:33:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64600","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html","article_title":"Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs","article_url":"https://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html","published_at":"2026-07-23T08:04:35.000Z","valid_from":"2026-07-23T08:04:35.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/check-point-patches-exploited.html","article_title":"Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access","article_url":"https://thehackernews.com/2026/07/check-point-patches-exploited.html","published_at":"2026-07-23T06:34:36.000Z","valid_from":"2026-07-23T06:34:36.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12921","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-450/","article_title":"ZDI-26-450: AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-450/","published_at":"2026-07-23T05:00:00.000Z","valid_from":"2026-07-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12390","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-449/","article_title":"ZDI-26-449: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-449/","published_at":"2026-07-23T05:00:00.000Z","valid_from":"2026-07-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6851","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-448/","article_title":"ZDI-26-448: Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-448/","published_at":"2026-07-23T05:00:00.000Z","valid_from":"2026-07-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12357","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-447/","article_title":"ZDI-26-447: Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-447/","published_at":"2026-07-23T05:00:00.000Z","valid_from":"2026-07-23T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10020,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33178","article_title":"ISC Stormcast For Thursday, July 23rd, 2026 https://isc.sans.edu/podcastdetail/10020, (Thu, Jul 23rd)","article_url":"https://isc.sans.edu/diary/rss/33178","published_at":"2026-07-23T02:00:03.000Z","valid_from":"2026-07-23T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48294","source":"SC Media","source_url":"https://www.scworld.com/brief/adobe-acrobat-extension-vulnerability-allowed-whatsapp-data-theft","article_title":"Adobe Acrobat extension vulnerability allowed WhatsApp data theft","article_url":"https://www.scworld.com/brief/adobe-acrobat-extension-vulnerability-allowed-whatsapp-data-theft","published_at":"2026-07-22T23:24:11.000Z","valid_from":"2026-07-22T23:24:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8933","source":"Security Affairs","source_url":"https://securityaffairs.com/195833/security/cve-2026-8933-ubuntu-security-flaw-breaks-snap-sandbox-protections.html","article_title":"CVE-2026-8933: Ubuntu security flaw breaks Snap sandbox protections","article_url":"https://securityaffairs.com/195833/security/cve-2026-8933-ubuntu-security-flaw-breaks-snap-sandbox-protections.html","published_at":"2026-07-22T22:25:57.000Z","valid_from":"2026-07-22T22:25:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48294","source":"Security Affairs","source_url":"https://securityaffairs.com/195805/hacking/adobe-acrobat-chrome-extension-bug-enabled-silent-whatsapp-data-theft.html","article_title":"Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theft","article_url":"https://securityaffairs.com/195805/hacking/adobe-acrobat-chrome-extension-bug-enabled-silent-whatsapp-data-theft.html","published_at":"2026-07-22T21:19:29.000Z","valid_from":"2026-07-22T21:19:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8933","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/ubuntu-snap-confine-flaw-could-give.html","article_title":"Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs","article_url":"https://thehackernews.com/2026/07/ubuntu-snap-confine-flaw-could-give.html","published_at":"2026-07-22T18:07:16.000Z","valid_from":"2026-07-22T18:07:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64600","source":"Qualys Blog","source_url":"https://blog.qualys.com/vulnerabilities-threat-research/2026/07/22/refluxfs-a-linux-kernel-local-privilege-escalation-to-root-in-xfs-cve-2026-64600","article_title":"RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) ","article_url":"https://blog.qualys.com/vulnerabilities-threat-research/2026/07/22/refluxfs-a-linux-kernel-local-privilege-escalation-to-root-in-xfs-cve-2026-64600","published_at":"2026-07-22T16:23:46.000Z","valid_from":"2026-07-22T16:23:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48294","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html","article_title":"Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data","article_url":"https://thehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html","published_at":"2026-07-22T15:01:21.000Z","valid_from":"2026-07-22T15:01:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-29059","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html","article_title":"Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication","article_url":"https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html","published_at":"2026-07-22T12:36:36.000Z","valid_from":"2026-07-22T12:36:36.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/22/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/22/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-07-22T12:00:00.000Z","valid_from":"2026-07-22T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50522","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/22/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/22/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-07-22T12:00:00.000Z","valid_from":"2026-07-22T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"newtonsoftt.json.net","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/trojanized-newtonsoftjson-fork-hides.html","article_title":"Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library","article_url":"https://thehackernews.com/2026/07/trojanized-newtonsoftjson-fork-hides.html","published_at":"2026-07-22T06:00:06.000Z","valid_from":"2026-07-22T06:00:06.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10018,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33174","article_title":"ISC Stormcast For Wednesday, July 22nd, 2026 https://isc.sans.edu/podcastdetail/10018, (Wed, Jul 22nd)","article_url":"https://isc.sans.edu/diary/rss/33174","published_at":"2026-07-22T02:00:02.000Z","valid_from":"2026-07-22T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50522","source":"Security Affairs","source_url":"https://securityaffairs.com/195760/security/public-poc-triggers-active-exploitation-of-critical-sharepoint-rce-vulnerability-cve-2026-50522.html","article_title":"Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522","article_url":"https://securityaffairs.com/195760/security/public-poc-triggers-active-exploitation-of-critical-sharepoint-rce-vulnerability-cve-2026-50522.html","published_at":"2026-07-21T21:38:37.000Z","valid_from":"2026-07-21T21:38:37.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0257","source":"Security Affairs","source_url":"https://securityaffairs.com/195730/cyber-crime/qilin-ransomware-affiliates-abuse-cve-2026-0257-to-gain-unauthorized-vpn-access.html","article_title":"Qilin Ransomware Affiliates Abuse CVE-2026-0257 to Gain Unauthorized VPN Access","article_url":"https://securityaffairs.com/195730/cyber-crime/qilin-ransomware-affiliates-abuse-cve-2026-0257-to-gain-unauthorized-vpn-access.html","published_at":"2026-07-21T16:08:28.000Z","valid_from":"2026-07-21T16:08:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8933","source":"Qualys Blog","source_url":"https://blog.qualys.com/vulnerabilities-threat-research/2026/07/21/cve-2026-8933-snap-confine-local-privilege-escalation","article_title":"CVE-2026-8933: Local Privilege Escalation in Set-Capabilities snap-confine","article_url":"https://blog.qualys.com/vulnerabilities-threat-research/2026/07/21/cve-2026-8933-snap-confine-local-privilege-escalation","published_at":"2026-07-21T15:02:12.000Z","valid_from":"2026-07-21T15:02:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50522","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-sharepoint-rce-cve-2026-50522.html","article_title":"Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC","article_url":"https://thehackernews.com/2026/07/critical-sharepoint-rce-cve-2026-50522.html","published_at":"2026-07-21T14:57:51.000Z","valid_from":"2026-07-21T14:57:51.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0257","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/qilin-ransomware-attackers-exploit-pan.html","article_title":"Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access","article_url":"https://thehackernews.com/2026/07/qilin-ransomware-attackers-exploit-pan.html","published_at":"2026-07-21T14:04:57.000Z","valid_from":"2026-07-21T14:04:57.000Z","origin":"rss"},{"type":"url","value":"http://detectportal.firefox.co","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33172","article_title":"Captive Portal Detection, (Tue, Jul 21st)","article_url":"https://isc.sans.edu/diary/rss/33172","published_at":"2026-07-21T13:44:56.000Z","valid_from":"2026-07-21T13:44:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2021-27137","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0770","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63030","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60137","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"security.paloaltonetworks.com","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-02","article_title":"Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-02","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"url","value":"https://security.paloaltonetworks.com/","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-02","article_title":"Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-02","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9108","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-10","article_title":"Rockwell Automation Studio 5000 Logix Designer","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-10","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9127","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-10","article_title":"Rockwell Automation Studio 5000 Logix Designer","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-10","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9128","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-10","article_title":"Rockwell Automation Studio 5000 Logix Designer","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-10","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63030","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/wordpress-wp2shell-exploitation-grows.html","article_title":"WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning","article_url":"https://thehackernews.com/2026/07/wordpress-wp2shell-exploitation-grows.html","published_at":"2026-07-21T08:59:30.000Z","valid_from":"2026-07-21T08:59:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60137","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/wordpress-wp2shell-exploitation-grows.html","article_title":"WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning","article_url":"https://thehackernews.com/2026/07/wordpress-wp2shell-exploitation-grows.html","published_at":"2026-07-21T08:59:30.000Z","valid_from":"2026-07-21T08:59:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6875","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-servicenow-ai-platform-flaw.html","article_title":"Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution","article_url":"https://thehackernews.com/2026/07/critical-servicenow-ai-platform-flaw.html","published_at":"2026-07-21T06:29:26.000Z","valid_from":"2026-07-21T06:29:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6875","source":"Security Affairs","source_url":"https://securityaffairs.com/195723/ai/attackers-exploit-critical-servicenow-rce-flaw-cve-2026-6875.html","article_title":"Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875","article_url":"https://securityaffairs.com/195723/ai/attackers-exploit-critical-servicenow-rce-flaw-cve-2026-6875.html","published_at":"2026-07-21T06:08:17.000Z","valid_from":"2026-07-21T06:08:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50297","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-446/","article_title":"ZDI-26-446: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-446/","published_at":"2026-07-21T05:00:00.000Z","valid_from":"2026-07-21T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50325","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-445/","article_title":"ZDI-26-445: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-445/","published_at":"2026-07-21T05:00:00.000Z","valid_from":"2026-07-21T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10016,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33170","article_title":"ISC Stormcast For Tuesday, July 21st, 2026 https://isc.sans.edu/podcastdetail/10016, (Tue, Jul 21st)","article_url":"https://isc.sans.edu/diary/rss/33170","published_at":"2026-07-21T02:00:02.000Z","valid_from":"2026-07-21T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6875","source":"CSO Online","source_url":"https://www.csoonline.com/article/4198993/servicenows-sandbox-escape-rce-hole-now-exploited-in-the-wild.html","article_title":"ServiceNow’s sandbox escape RCE hole now exploited in the wild","article_url":"https://www.csoonline.com/article/4198993/servicenows-sandbox-escape-rce-hole-now-exploited-in-the-wild.html","published_at":"2026-07-20T20:24:54.000Z","valid_from":"2026-07-20T20:24:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63030","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33168","article_title":"WordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th)","article_url":"https://isc.sans.edu/diary/rss/33168","published_at":"2026-07-20T18:41:24.000Z","valid_from":"2026-07-20T18:41:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63030","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution","article_title":"wp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Core","article_url":"https://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution","published_at":"2026-07-20T13:36:32.000Z","valid_from":"2026-07-20T13:36:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60137","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution","article_title":"wp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Core","article_url":"https://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution","published_at":"2026-07-20T13:36:32.000Z","valid_from":"2026-07-20T13:36:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-14266","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.html","article_title":"New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction","article_url":"https://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.html","published_at":"2026-07-20T09:10:56.000Z","valid_from":"2026-07-20T09:10:56.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10014,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33166","article_title":"ISC Stormcast For Monday, July 20th, 2026 https://isc.sans.edu/podcastdetail/10014, (Mon, Jul 20th)","article_url":"https://isc.sans.edu/diary/rss/33166","published_at":"2026-07-20T02:00:02.000Z","valid_from":"2026-07-20T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42533","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html","article_title":"Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution","article_url":"https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html","published_at":"2026-07-19T20:42:49.000Z","valid_from":"2026-07-19T20:42:49.000Z","origin":"rss"},{"type":"ipv4","value":"37.0.3.1","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html","article_title":"Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution","article_url":"https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html","published_at":"2026-07-19T20:42:49.000Z","valid_from":"2026-07-19T20:42:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60137","source":"Wordfence Blog","source_url":"https://www.wordfence.com/blog/2026/07/psa-wordpress-core-patched-unauthenticated-remote-code-execution-vulnerability-chain/","article_title":"PSA: WordPress Core Patched Unauthenticated Remote Code Execution Vulnerability Chain","article_url":"https://www.wordfence.com/blog/2026/07/psa-wordpress-core-patched-unauthenticated-remote-code-execution-vulnerability-chain/","published_at":"2026-07-17T23:03:48.000Z","valid_from":"2026-07-17T23:03:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63030","source":"Wordfence Blog","source_url":"https://www.wordfence.com/blog/2026/07/psa-wordpress-core-patched-unauthenticated-remote-code-execution-vulnerability-chain/","article_title":"PSA: WordPress Core Patched Unauthenticated Remote Code Execution Vulnerability Chain","article_url":"https://www.wordfence.com/blog/2026/07/psa-wordpress-core-patched-unauthenticated-remote-code-execution-vulnerability-chain/","published_at":"2026-07-17T23:03:48.000Z","valid_from":"2026-07-17T23:03:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63030","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63030-wp2shell-a-critical-remote-code-execution-vulnerability-in-wordpress-core","article_title":"CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63030-wp2shell-a-critical-remote-code-execution-vulnerability-in-wordpress-core","published_at":"2026-07-17T22:23:03.000Z","valid_from":"2026-07-17T22:23:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58644","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-58644-microsoft-sharepoint-server-unauthenticated-remote-code-execution-vulnerability-exploited-in-the-wild","article_title":"CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-58644-microsoft-sharepoint-server-unauthenticated-remote-code-execution-vulnerability-exploited-in-the-wild","published_at":"2026-07-17T18:18:53.000Z","valid_from":"2026-07-17T18:18:53.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10012,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33162","article_title":"ISC Stormcast For Friday, July 17th, 2026 https://isc.sans.edu/podcastdetail/10012, (Fri, Jul 17th)","article_url":"https://isc.sans.edu/diary/rss/33162","published_at":"2026-07-17T02:00:02.000Z","valid_from":"2026-07-17T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32201","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation","article_title":"CVE-2026-32201, CVE-2026-45659, CVE-2026-56164: Frequently Asked Questions About Active Exploitation of Microsoft SharePoint Server Vulnerabilities","article_url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation","published_at":"2026-07-16T16:00:26.000Z","valid_from":"2026-07-16T16:00:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45659","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation","article_title":"CVE-2026-32201, CVE-2026-45659, CVE-2026-56164: Frequently Asked Questions About Active Exploitation of Microsoft SharePoint Server Vulnerabilities","article_url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation","published_at":"2026-07-16T16:00:26.000Z","valid_from":"2026-07-16T16:00:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56164","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation","article_title":"CVE-2026-32201, CVE-2026-45659, CVE-2026-56164: Frequently Asked Questions About Active Exploitation of Microsoft SharePoint Server Vulnerabilities","article_url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation","published_at":"2026-07-16T16:00:26.000Z","valid_from":"2026-07-16T16:00:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60063","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","article_title":"AutomationDirect Productivity Suite","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61389","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","article_title":"AutomationDirect Productivity Suite","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60140","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","article_title":"AutomationDirect Productivity Suite","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57896","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","article_title":"AutomationDirect Productivity Suite","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60073","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","article_title":"AutomationDirect Productivity Suite","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61378","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","article_title":"AutomationDirect Productivity Suite","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8085","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","article_title":"Rockwell Automation Arena","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8312","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","article_title":"Rockwell Automation Arena","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8313","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","article_title":"Rockwell Automation Arena","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8314","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","article_title":"Rockwell Automation Arena","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-25089","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/16/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/16/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-39808","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/16/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/16/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58644","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/16/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/16/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12659","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-08","article_title":"Rockwell Automation Flex 5000 Adapter","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-08","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9653","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-02","article_title":"Rockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-02","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9292","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-09","article_title":"Rockwell Automation FactoryTalk DataMosaix","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-09","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-12011","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-06","article_title":"Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-06","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-12012","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-06","article_title":"Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-06","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-11698","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-06","article_title":"Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-06","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-11889","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-07","article_title":"SALTO ProAccess Space","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-07","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15409","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/cve-2026-15409-cve-2026-15410-sonicwall-sma-1000-zero-day-vulnerabilities-exploited-in-the","article_title":"CVE-2026-15409, CVE-2026-15410: SonicWall SMA 1000 zero-day vulnerabilities exploited in the wild","article_url":"https://www.tenable.com/blog/cve-2026-15409-cve-2026-15410-sonicwall-sma-1000-zero-day-vulnerabilities-exploited-in-the","published_at":"2026-07-15T17:14:09.000Z","valid_from":"2026-07-15T17:14:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15410","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/cve-2026-15409-cve-2026-15410-sonicwall-sma-1000-zero-day-vulnerabilities-exploited-in-the","article_title":"CVE-2026-15409, CVE-2026-15410: SonicWall SMA 1000 zero-day vulnerabilities exploited in the wild","article_url":"https://www.tenable.com/blog/cve-2026-15409-cve-2026-15410-sonicwall-sma-1000-zero-day-vulnerabilities-exploited-in-the","published_at":"2026-07-15T17:14:09.000Z","valid_from":"2026-07-15T17:14:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15409","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-rapid7-mdr-team-discovers-new-sonicwall-sma1000-zero-days-being-actively-exploited-cve-2026-15409-cve-2026-15410","article_title":"Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)","article_url":"https://www.rapid7.com/blog/post/etr-rapid7-mdr-team-discovers-new-sonicwall-sma1000-zero-days-being-actively-exploited-cve-2026-15409-cve-2026-15410","published_at":"2026-07-15T16:19:26.000Z","valid_from":"2026-07-15T16:19:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15410","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-rapid7-mdr-team-discovers-new-sonicwall-sma1000-zero-days-being-actively-exploited-cve-2026-15409-cve-2026-15410","article_title":"Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)","article_url":"https://www.rapid7.com/blog/post/etr-rapid7-mdr-team-discovers-new-sonicwall-sma1000-zero-days-being-actively-exploited-cve-2026-15409-cve-2026-15410","published_at":"2026-07-15T16:19:26.000Z","valid_from":"2026-07-15T16:19:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20150","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-15T16:01:10.000Z","valid_from":"2026-07-15T16:01:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20153","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-15T16:01:10.000Z","valid_from":"2026-07-15T16:01:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20156","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-15T16:01:10.000Z","valid_from":"2026-07-15T16:01:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20157","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-15T16:01:10.000Z","valid_from":"2026-07-15T16:01:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20158","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-15T16:01:10.000Z","valid_from":"2026-07-15T16:01:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20187","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-15T16:01:10.000Z","valid_from":"2026-07-15T16:01:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20146","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-15T16:01:10.000Z","valid_from":"2026-07-15T16:01:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2023-4346","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/15/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/15/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-07-15T12:00:00.000Z","valid_from":"2026-07-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-46817","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/15/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/15/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-07-15T12:00:00.000Z","valid_from":"2026-07-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-14266","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-444/","article_title":"ZDI-26-444: 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-444/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-2291","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-441/","article_title":"ZDI-26-441: dnsmasq DNS Response Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-441/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8108","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-440/","article_title":"ZDI-26-440: Fuji Electric Tellus pcid64 Driver Untrusted Pointer Dereference Denial of Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-440/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8108","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-439/","article_title":"ZDI-26-439: Fuji Electric Tellus pcid64 Driver Exposed Dangerous Method Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-439/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6071","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-438/","article_title":"ZDI-26-438: Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-438/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13308","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-437/","article_title":"ZDI-26-437: (Pwn2Own) Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-437/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13307","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-436/","article_title":"ZDI-26-436: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-436/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13309","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-435/","article_title":"ZDI-26-435: (Pwn2Own) Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-435/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13306","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-434/","article_title":"ZDI-26-434: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-434/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13305","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-433/","article_title":"ZDI-26-433: (Pwn2Own) Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-433/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13268","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-432/","article_title":"ZDI-26-432: G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-432/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8921","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-431/","article_title":"ZDI-26-431: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-431/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6102","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-430/","article_title":"ZDI-26-430: MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-430/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24157","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-429/","article_title":"ZDI-26-429: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-429/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8247","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-428/","article_title":"ZDI-26-428: WatchGuard FireWare OS admd Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-428/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13084","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-427/","article_title":"ZDI-26-427: WatchGuard FireWare OS iked ike2_hmac Null Pointer Dereference Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-427/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42771","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-426/","article_title":"ZDI-26-426: OpenSSL X.509 Email Validation Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-426/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35188","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-425/","article_title":"ZDI-26-425: OpenSSL OCSP Stapling Verification Double Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-425/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13135","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-424/","article_title":"ZDI-26-424: Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-424/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-15660","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-423/","article_title":"ZDI-26-423: Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-423/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15551","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-422/","article_title":"ZDI-26-422: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-422/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20146","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-421/","article_title":"ZDI-26-421: Cisco Identity Services Engine validFileNameOrPath Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-421/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48344","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-420/","article_title":"ZDI-26-420: Adobe Creative Cloud AGSService Incorrect Permission Assignment Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-420/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48272","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-419/","article_title":"ZDI-26-419: Adobe Creative Cloud AdobeUpdateService Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-419/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55126","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-418/","article_title":"ZDI-26-418: Microsoft SharePoint SPFieldMultiLineText Cross-Site Scripting Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-418/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50311","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-417/","article_title":"ZDI-26-417: Microsoft Windows ServerManager Exposed Dangerous Method Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-417/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-54129","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-416/","article_title":"ZDI-26-416: Microsoft Hyper-V netvsc Out-Of-Bounds Read Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-416/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-49805","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-415/","article_title":"ZDI-26-415: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-415/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-40400","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-414/","article_title":"ZDI-26-414: Microsoft PowerShell Help Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-414/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50522","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-413/","article_title":"ZDI-26-413: (Pwn2Own) Microsoft SharePoint Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-413/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50522","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-412/","article_title":"ZDI-26-412: (Pwn2Own) Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-412/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24237","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-411/","article_title":"ZDI-26-411: NVIDIA NVTabular Pickle File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-411/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24228","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-410/","article_title":"ZDI-26-410: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-410/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55999","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-409/","article_title":"ZDI-26-409: X.Org Server Glamor Font Heap-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-409/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-409/","article_title":"ZDI-26-409: X.Org Server Glamor Font Heap-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-409/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56003","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-408/","article_title":"ZDI-26-408: X.Org Server ComputeScaledProperties Heap-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-408/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-408/","article_title":"ZDI-26-408: X.Org Server ComputeScaledProperties Heap-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-408/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56002","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-407/","article_title":"ZDI-26-407: X.Org Server PCF Font Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-407/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-407/","article_title":"ZDI-26-407: X.Org Server PCF Font Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-407/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56001","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-406/","article_title":"ZDI-26-406: X.Org Server BitmapScaleBitmaps Integer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-406/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-406/","article_title":"ZDI-26-406: X.Org Server BitmapScaleBitmaps Integer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-406/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56000","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-405/","article_title":"ZDI-26-405: X.Org Server GLX Extension Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-405/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-405/","article_title":"ZDI-26-405: X.Org Server GLX Extension Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-405/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12578","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-404/","article_title":"ZDI-26-404: Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-404/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56155","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/microsofts-july-2026-patch-tuesday-addresses-569-cves-cve-2026-56155-cve-2026-56164","article_title":"Microsoft’s July 2026 Patch Tuesday Addresses 569 CVEs (CVE-2026-56155, CVE-2026-56164)","article_url":"https://www.tenable.com/blog/microsofts-july-2026-patch-tuesday-addresses-569-cves-cve-2026-56155-cve-2026-56164","published_at":"2026-07-14T18:23:36.000Z","valid_from":"2026-07-14T18:23:36.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56164","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/microsofts-july-2026-patch-tuesday-addresses-569-cves-cve-2026-56155-cve-2026-56164","article_title":"Microsoft’s July 2026 Patch Tuesday Addresses 569 CVEs (CVE-2026-56155, CVE-2026-56164)","article_url":"https://www.tenable.com/blog/microsofts-july-2026-patch-tuesday-addresses-569-cves-cve-2026-56155-cve-2026-56164","published_at":"2026-07-14T18:23:36.000Z","valid_from":"2026-07-14T18:23:36.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ve-cve-2026-55040-microsoft-sharepoint-jwt-token-authentication-bypass-fixed","article_title":"CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)","article_url":"https://www.rapid7.com/blog/post/ve-cve-2026-55040-microsoft-sharepoint-jwt-token-authentication-bypass-fixed","published_at":"2026-07-14T13:00:00.000Z","valid_from":"2026-07-14T13:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"1.1.1.1","source":"Cloudflare Blog","source_url":"https://blog.cloudflare.com/dnssec-nta-ede-33/","article_title":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","article_url":"https://blog.cloudflare.com/dnssec-nta-ede-33/","published_at":"2026-07-14T13:00:00.000Z","valid_from":"2026-07-14T13:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-13162","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-195-01","article_title":"ABB Advant Master Online Builder","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-195-01","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-10577","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-195-04","article_title":"Rockwell Automation 1715-AENTR EtherNet/IP Adapter","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-195-04","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58644","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","article_title":"CISA Urges SharePoint Hardening After New Exploitations","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32201","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","article_title":"CISA Urges SharePoint Hardening After New Exploitations","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45659","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","article_title":"CISA Urges SharePoint Hardening After New Exploitations","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56164","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","article_title":"CISA Urges SharePoint Hardening After New Exploitations","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15409","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15410","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56155","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56164","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15681","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-400/","article_title":"ZDI-26-400: (0Day) AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-400/","published_at":"2026-07-13T05:00:00.000Z","valid_from":"2026-07-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15685","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-403/","article_title":"ZDI-26-403: (0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-403/","published_at":"2026-07-08T05:00:00.000Z","valid_from":"2026-07-08T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15684","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-402/","article_title":"ZDI-26-402: (0Day) Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-402/","published_at":"2026-07-08T05:00:00.000Z","valid_from":"2026-07-08T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15682","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-401/","article_title":"ZDI-26-401: (0Day) AnyDesk Support Information Link Following Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-401/","published_at":"2026-07-08T05:00:00.000Z","valid_from":"2026-07-08T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15683","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-399/","article_title":"ZDI-26-399: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-399/","published_at":"2026-07-08T05:00:00.000Z","valid_from":"2026-07-08T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15680","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-398/","article_title":"ZDI-26-398: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-398/","published_at":"2026-07-08T05:00:00.000Z","valid_from":"2026-07-08T05:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"9.2.7.0","source":"Exploit Database","source_url":"https://www.exploit-db.com/exploits/52615","article_title":"[local] MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation","article_url":"https://www.exploit-db.com/exploits/52615","published_at":"2026-07-06T00:00:00.000Z","valid_from":"2026-07-06T00:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"0.8.4.2","source":"Exploit Database","source_url":"https://www.exploit-db.com/exploits/52614","article_title":"[webapps] KeepInMind 0.8.4.2 -  Stored XSS","article_url":"https://www.exploit-db.com/exploits/52614","published_at":"2026-07-06T00:00:00.000Z","valid_from":"2026-07-06T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20191","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20216","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20213","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20214","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20215","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20217","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20243","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20244","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"domain","value":"booking.com","source":"Infosecurity Magazine","source_url":"https://www.infosecurity-magazine.com/news/hackers-blockchain-japan-hotels/","article_title":"Hackers Leverage Blockchain to Hit Japan's Hotels Through Booking.com Phishing","article_url":"https://www.infosecurity-magazine.com/news/hackers-blockchain-japan-hotels/","published_at":"2026-06-30T10:30:00.000Z","valid_from":"2026-06-30T10:30:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50263","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-397/","article_title":"ZDI-26-397: X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-397/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-397/","article_title":"ZDI-26-397: X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-397/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50262","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-396/","article_title":"ZDI-26-396: X.Org Server ChangeDrawableAttributes Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-396/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-396/","article_title":"ZDI-26-396: X.Org Server ChangeDrawableAttributes Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-396/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50261","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-395/","article_title":"ZDI-26-395: X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-395/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-395/","article_title":"ZDI-26-395: X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-395/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50260","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-394/","article_title":"ZDI-26-394: X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-394/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-394/","article_title":"ZDI-26-394: X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-394/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50259","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-393/","article_title":"ZDI-26-393: X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-393/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-393/","article_title":"ZDI-26-393: X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-393/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50258","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-392/","article_title":"ZDI-26-392: X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-392/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-392/","article_title":"ZDI-26-392: X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-392/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50257","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-391/","article_title":"ZDI-26-391: X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-391/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-391/","article_title":"ZDI-26-391: X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-391/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50256","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-390/","article_title":"ZDI-26-390: X.Org Server Font Alias Stack-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-390/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-390/","article_title":"ZDI-26-390: X.Org Server Font Alias Stack-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-390/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35273","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-389/","article_title":"ZDI-26-389: Oracle PeopleSoft ExecuteProcessActivityCommand External Control of File Path Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-389/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35273","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-388/","article_title":"ZDI-26-388: Oracle PeopleSoft HubMBeanPersistance Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-388/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35273","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-387/","article_title":"ZDI-26-387: Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-387/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9773","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-386/","article_title":"ZDI-26-386: Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-386/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9772","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-385/","article_title":"ZDI-26-385: Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-385/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-10043","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-384/","article_title":"ZDI-26-384: MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-384/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9779","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-383/","article_title":"ZDI-26-383: ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-383/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9778","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-382/","article_title":"ZDI-26-382: ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-382/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9777","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-381/","article_title":"ZDI-26-381: ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-381/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9776","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-380/","article_title":"ZDI-26-380: ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-380/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9775","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-379/","article_title":"ZDI-26-379: ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-379/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9774","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-378/","article_title":"ZDI-26-378: ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-378/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-7569","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-377/","article_title":"ZDI-26-377: Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-377/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9787","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-376/","article_title":"ZDI-26-376: Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-376/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9786","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-375/","article_title":"ZDI-26-375: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-375/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9785","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-374/","article_title":"ZDI-26-374: Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-374/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9784","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-373/","article_title":"ZDI-26-373: Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-373/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9783","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-372/","article_title":"ZDI-26-372: Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-372/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9782","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-371/","article_title":"ZDI-26-371: Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-371/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9781","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-370/","article_title":"ZDI-26-370: Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-370/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9780","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-369/","article_title":"ZDI-26-369: Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-369/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-7570","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-368/","article_title":"ZDI-26-368: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-368/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8108","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-367/","article_title":"ZDI-26-367: Fuji Electric Tellus pcid64 Driver Registry APIs Exposed Dangerous Method Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-367/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8108","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-366/","article_title":"ZDI-26-366: Fuji Electric Tellus pcid64 Driver File APIs Exposed Dangerous Method Arbitrary File Deletion Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-366/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41137","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-365/","article_title":"ZDI-26-365: FlowiseAI Flowise CSV Agent customReadCSV Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-365/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41264","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-364/","article_title":"ZDI-26-364: FlowiseAI Flowise CSV Agent  Prompt Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-364/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55887","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-363/","article_title":"ZDI-26-363: Docker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-363/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-46873","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-362/","article_title":"ZDI-26-362: Oracle VirtualBox VMSVGA Stack-based Buffer Overflow Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-362/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27278","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-361/","article_title":"ZDI-26-361: Adobe Acrobat Reader DC Field signatureInfo Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-361/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35273","source":"Information Security Buzz","source_url":"https://informationsecuritybuzz.com/shinyhunters-targets-oracle-peoplesoft-customers/","article_title":"ShinyHunters targets Oracle PeopleSoft customers through critical zero-day","article_url":"https://informationsecuritybuzz.com/shinyhunters-targets-oracle-peoplesoft-customers/","published_at":"2026-06-19T18:48:27.000Z","valid_from":"2026-06-19T18:48:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-52849","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-360/","article_title":"ZDI-26-360: MATE Desktop Atril Document Viewer EPUB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-360/","published_at":"2026-06-11T05:00:00.000Z","valid_from":"2026-06-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8916","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-359/","article_title":"ZDI-26-359: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-359/","published_at":"2026-06-11T05:00:00.000Z","valid_from":"2026-06-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-11443","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-358/","article_title":"ZDI-26-358: Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-358/","published_at":"2026-06-11T05:00:00.000Z","valid_from":"2026-06-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-11442","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-357/","article_title":"ZDI-26-357: Allegra exportReport Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-357/","published_at":"2026-06-11T05:00:00.000Z","valid_from":"2026-06-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34032","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-356/","article_title":"ZDI-26-356: Apache HTTP Server mod_proxy_ajp Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-356/","published_at":"2026-06-11T05:00:00.000Z","valid_from":"2026-06-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27220","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-355/","article_title":"ZDI-26-355: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-355/","published_at":"2026-06-10T05:00:00.000Z","valid_from":"2026-06-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-7480","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-328/","article_title":"ZDI-26-328: ASUS MyASUS Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-328/","published_at":"2026-06-10T05:00:00.000Z","valid_from":"2026-06-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-11645","source":"Infosecurity Magazine","source_url":"https://www.infosecurity-magazine.com/news/google-patch-chrome-vulnerability/","article_title":"Google Releases Patch for Chrome Vulnerability Exploited in the Wild","article_url":"https://www.infosecurity-magazine.com/news/google-patch-chrome-vulnerability/","published_at":"2026-06-09T10:15:00.000Z","valid_from":"2026-06-09T10:15:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47919","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-354/","article_title":"ZDI-26-354: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-354/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47918","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-353/","article_title":"ZDI-26-353: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-353/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47917","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-352/","article_title":"ZDI-26-352: Adobe Acrobat Pro DC AcroForm Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-352/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48292","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-351/","article_title":"ZDI-26-351: Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-351/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48291","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-350/","article_title":"ZDI-26-350: Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-350/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47915","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-349/","article_title":"ZDI-26-349: Adobe Acrobat Pro DC Annots.api Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-349/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47914","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-348/","article_title":"ZDI-26-348: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-348/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47913","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-347/","article_title":"ZDI-26-347: Adobe Acrobat Reader DC Multimedia Rendition Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-347/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47924","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-346/","article_title":"ZDI-26-346: Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-346/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47912","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-345/","article_title":"ZDI-26-345: Adobe Acrobat Reader DC Font Handling Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-345/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47923","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-344/","article_title":"ZDI-26-344: Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-344/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47911","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-343/","article_title":"ZDI-26-343: Adobe Acrobat Reader DC TIF File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-343/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-342/","article_title":"ZDI-26-342: Progress Software Kemp LoadMaster apiuser Uninitialized Memory Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-342/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-341/","article_title":"ZDI-26-341: Progress Software Kemp LoadMaster dolistapikeys Uninitialized Memory Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-341/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-340/","article_title":"ZDI-26-340: Progress Software Kemp LoadMaster dodelapikey Uninitialized Memory Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-340/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48565","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-339/","article_title":"ZDI-26-339: Microsoft Windows Narrator Braille Support brlapi Exposed Dangerous Function Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-339/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24162","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-338/","article_title":"ZDI-26-338: NVIDIA Transformers4Rec Model.load Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-338/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34003","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-337/","article_title":"ZDI-26-337: X.Org Server CheckKeyTypes Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-337/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-337/","article_title":"ZDI-26-337: X.Org Server CheckKeyTypes Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-337/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34002","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-336/","article_title":"ZDI-26-336: X.Org Server CheckKeyActions Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-336/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-336/","article_title":"ZDI-26-336: X.Org Server CheckKeyActions Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-336/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34001","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-335/","article_title":"ZDI-26-335: X.Org Server SyncAwaitFence Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-335/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-335/","article_title":"ZDI-26-335: X.Org Server SyncAwaitFence Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-335/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34000","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-334/","article_title":"ZDI-26-334: X.Org Server CheckSetGeom Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-334/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-334/","article_title":"ZDI-26-334: X.Org Server CheckSetGeom Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-334/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-33999","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-333/","article_title":"ZDI-26-333: X.Org Server XkbSetCompatMap Integer Underflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-333/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-333/","article_title":"ZDI-26-333: X.Org Server XkbSetCompatMap Integer Underflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-333/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-3886","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-332/","article_title":"ZDI-26-332: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-332/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45495","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-331/","article_title":"ZDI-26-331: (Pwn2Own) Microsoft Edge Feedback Log File Handling Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-331/","published_at":"2026-06-04T05:00:00.000Z","valid_from":"2026-06-04T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45494","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-330/","article_title":"ZDI-26-330: (Pwn2Own) Microsoft Edge Navigation Handling Universal Cross-Site Scripting Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-330/","published_at":"2026-06-04T05:00:00.000Z","valid_from":"2026-06-04T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45492","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-329/","article_title":"ZDI-26-329: (Pwn2Own) Microsoft Edge Origin Validation Error Security Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-329/","published_at":"2026-06-04T05:00:00.000Z","valid_from":"2026-06-04T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8936","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-327/","article_title":"ZDI-26-327: Docker Desktop grpcfuse Kernel Module Uncontrolled Recursion Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-327/","published_at":"2026-06-03T05:00:00.000Z","valid_from":"2026-06-03T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"chatgpt.com","source":"Infosecurity Magazine","source_url":"https://www.infosecurity-magazine.com/news/attackers-shared-content-chatgpt/","article_title":"Attackers Abuse Shared Content for ChatGPT Phishing Campaign","article_url":"https://www.infosecurity-magazine.com/news/attackers-shared-content-chatgpt/","published_at":"2026-06-01T09:30:00.000Z","valid_from":"2026-06-01T09:30:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45208","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-326/","article_title":"ZDI-26-326: TrendAI Vision One Security Agent Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-326/","published_at":"2026-05-28T05:00:00.000Z","valid_from":"2026-05-28T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45207","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-325/","article_title":"ZDI-26-325: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-325/","published_at":"2026-05-28T05:00:00.000Z","valid_from":"2026-05-28T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45206","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-324/","article_title":"ZDI-26-324: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-324/","published_at":"2026-05-28T05:00:00.000Z","valid_from":"2026-05-28T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34930","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-323/","article_title":"ZDI-26-323: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-323/","published_at":"2026-05-28T05:00:00.000Z","valid_from":"2026-05-28T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34929","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-322/","article_title":"ZDI-26-322: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-322/","published_at":"2026-05-28T05:00:00.000Z","valid_from":"2026-05-28T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34928","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-321/","article_title":"ZDI-26-321: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-321/","published_at":"2026-05-28T05:00:00.000Z","valid_from":"2026-05-28T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34927","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-320/","article_title":"ZDI-26-320: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-320/","published_at":"2026-05-28T05:00:00.000Z","valid_from":"2026-05-28T05:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"0.9.7.4","source":"Exploit Database","source_url":"https://www.exploit-db.com/exploits/52579","article_title":"[webapps] OpenCATS 0.9.7.4 - SQL Injection","article_url":"https://www.exploit-db.com/exploits/52579","published_at":"2026-05-27T00:00:00.000Z","valid_from":"2026-05-27T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-3517","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-319/","article_title":"ZDI-26-319: Progress Software Kemp LoadMaster addcountry Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-319/","published_at":"2026-05-21T05:00:00.000Z","valid_from":"2026-05-21T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-3518","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-318/","article_title":"ZDI-26-318: Progress Software Kemp LoadMaster ssodomain_killsession Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-318/","published_at":"2026-05-21T05:00:00.000Z","valid_from":"2026-05-21T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-54957","source":"Google Project Zero","source_url":"https://projectzero.google/2026/05/pixel-10-exploit.html","article_title":"A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens","article_url":"https://projectzero.google/2026/05/pixel-10-exploit.html","published_at":"2026-05-13T07:00:00.000Z","valid_from":"2026-05-13T07:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-12659","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-317/","article_title":"ZDI-26-317: Siemens Simcenter Femap IPT File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-317/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-12659","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-316/","article_title":"ZDI-26-316: Siemens Simcenter Femap IPT File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-316/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28941","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-315/","article_title":"ZDI-26-315: Apple macOS USD Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-315/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28940","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-314/","article_title":"ZDI-26-314: Apple macOS USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-314/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28847","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-313/","article_title":"ZDI-26-313: Apple Safari Regular Expression Duplicate Named Groups Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-313/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28955","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-312/","article_title":"ZDI-26-312: Apple Safari Web Inspector WebCore Style Resolver Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-312/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28918","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-311/","article_title":"ZDI-26-311: Apple macOS CoreSymbolication Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-311/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34342","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-310/","article_title":"ZDI-26-310: Microsoft Windows splwow64 Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-310/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-33838","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-309/","article_title":"ZDI-26-309: Microsoft Windows Message Queueing Double Free Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-309/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8109","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-308/","article_title":"ZDI-26-308: Ivanti Endpoint Manager RemoteControlAuth Exposed Dangerous Method Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-308/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"sec.cloudapps.cisco.com","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-rce-ssrf-hENhuASy?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Remote%20Code%20Execution%20and%20Server-Side%20Request%20Forgery%20Vulnerabilities%26vs_k=1","article_title":"Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-rce-ssrf-hENhuASy?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Remote%20Code%20Execution%20and%20Server-Side%20Request%20Forgery%20Vulnerabilities%26vs_k=1","published_at":"2026-05-06T16:00:00.000Z","valid_from":"2026-05-06T16:00:00.000Z","origin":"rss"},{"type":"url","value":"https://sec.cloudapps.cisco.com/s","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-rce-ssrf-hENhuASy?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Remote%20Code%20Execution%20and%20Server-Side%20Request%20Forgery%20Vulnerabilities%26vs_k=1","article_title":"Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-rce-ssrf-hENhuASy?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Remote%20Code%20Execution%20and%20Server-Side%20Request%20Forgery%20Vulnerabilities%26vs_k=1","published_at":"2026-05-06T16:00:00.000Z","valid_from":"2026-05-06T16:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41265","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-307/","article_title":"ZDI-26-307: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-307/","published_at":"2026-05-01T05:00:00.000Z","valid_from":"2026-05-01T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35230","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-306/","article_title":"ZDI-26-306: Oracle VirtualBox SoundBlaster 16 Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-306/","published_at":"2026-04-28T05:00:00.000Z","valid_from":"2026-04-28T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5943","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-304/","article_title":"ZDI-26-304: Foxit PDF Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-304/","published_at":"2026-04-27T05:00:00.000Z","valid_from":"2026-04-27T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5942","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-303/","article_title":"ZDI-26-303: Foxit PDF Reader AcroForm Signature Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-303/","published_at":"2026-04-27T05:00:00.000Z","valid_from":"2026-04-27T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5941","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-302/","article_title":"ZDI-26-302: Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-302/","published_at":"2026-04-27T05:00:00.000Z","valid_from":"2026-04-27T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5940","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-301/","article_title":"ZDI-26-301: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-301/","published_at":"2026-04-27T05:00:00.000Z","valid_from":"2026-04-27T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41276","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-300/","article_title":"ZDI-26-300: Flowise AccountService resetPassword Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-300/","published_at":"2026-04-27T05:00:00.000Z","valid_from":"2026-04-27T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6406","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-299/","article_title":"ZDI-26-299: Docker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-299/","published_at":"2026-04-23T05:00:00.000Z","valid_from":"2026-04-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24032","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-298/","article_title":"ZDI-26-298: Siemens SINEC NMS Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-298/","published_at":"2026-04-23T05:00:00.000Z","valid_from":"2026-04-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-25654","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-297/","article_title":"ZDI-26-297: Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-297/","published_at":"2026-04-23T05:00:00.000Z","valid_from":"2026-04-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5726","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-296/","article_title":"ZDI-26-296: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-296/","published_at":"2026-04-23T05:00:00.000Z","valid_from":"2026-04-23T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"sec.cloudapps.cisco.com","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-vulns-n2EJSbbw?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Cross-Site%20Scripting,%20Open%20Redirect,%20and%20SQL%20Injection%20Vulnerabilities%26vs_k=1","article_title":"Cisco Unity Connection Cross-Site Scripting, Open Redirect, and SQL Injection Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-vulns-n2EJSbbw?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Cross-Site%20Scripting,%20Open%20Redirect,%20and%20SQL%20Injection%20Vulnerabilities%26vs_k=1","published_at":"2026-04-15T16:00:00.000Z","valid_from":"2026-04-15T16:00:00.000Z","origin":"rss"},{"type":"url","value":"https://sec.cloudapps.cisco.com/security/c","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-vulns-n2EJSbbw?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Cross-Site%20Scripting,%20Open%20Redirect,%20and%20SQL%20Injection%20Vulnerabilities%26vs_k=1","article_title":"Cisco Unity Connection Cross-Site Scripting, Open Redirect, and SQL Injection Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-vulns-n2EJSbbw?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Cross-Site%20Scripting,%20Open%20Redirect,%20and%20SQL%20Injection%20Vulnerabilities%26vs_k=1","published_at":"2026-04-15T16:00:00.000Z","valid_from":"2026-04-15T16:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-22898","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-292/","article_title":"ZDI-26-292: QNAP TS-453E QVRPro excpostgres  Exposed Dangerous Method Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-292/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32861","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-291/","article_title":"ZDI-26-291: NI LabVIEW LVCLASS File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-291/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32860","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-290/","article_title":"ZDI-26-290: NI LabVIEW LVLIB File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-290/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-71066","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-289/","article_title":"ZDI-26-289: Linux Kernel ETS Scheduler Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-289/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5492","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-288/","article_title":"ZDI-26-288: DriveLock Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-288/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5491","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-287/","article_title":"ZDI-26-287: DriveLock Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-287/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5490","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-286/","article_title":"ZDI-26-286: DriveLock SQL Injection Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-286/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5489","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-285/","article_title":"ZDI-26-285: DriveLock Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-285/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5487","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-284/","article_title":"ZDI-26-284: DriveLock Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-284/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5056","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-283/","article_title":"ZDI-26-283: GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-283/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-2050","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-282/","article_title":"ZDI-26-282: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-282/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34054","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-281/","article_title":"ZDI-26-281: Microsoft vcpkg OpenSSL Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-281/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-4682","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-280/","article_title":"ZDI-26-280: (Pwn2Own) HP DeskJet 2855e JobStatusEvent Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-280/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32183","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-279/","article_title":"ZDI-26-279: Microsoft Windows Snipping Tool Improper Input Validation Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-279/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-33104","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-278/","article_title":"ZDI-26-278: Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-278/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32073","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-277/","article_title":"ZDI-26-277: Microsoft Windows afd.sys Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-277/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-26179","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-276/","article_title":"ZDI-26-276: Microsoft Windows Secure Kernel Double Free Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-276/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5057","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-272/","article_title":"ZDI-26-272: ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-272/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5424","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-271/","article_title":"ZDI-26-271: Avast Premium Security Gen Self Protection Driver Exposed Dangerous Function Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-271/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-54987","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-270/","article_title":"ZDI-26-270: TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-270/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-54948","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-269/","article_title":"ZDI-26-269: TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-269/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-25203","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-268/","article_title":"ZDI-26-268: Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-268/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-40688","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-266/","article_title":"ZDI-26-266: Fortinet FortiWeb cat_cgi_paths Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-266/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-39811","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-265/","article_title":"ZDI-26-265: Fortinet FortiWeb cgi_buf_alloc Integer Overflow Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-265/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27305","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-264/","article_title":"ZDI-26-264: Adobe ColdFusion fetchCFSettingFile Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-264/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27282","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-263/","article_title":"ZDI-26-263: Adobe ColdFusion subscribeToEndpoints Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-263/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34619","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-262/","article_title":"ZDI-26-262: Adobe ColdFusion deleteVersion Directory Traversal Arbitrary File Deletion Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-262/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5495","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-257/","article_title":"ZDI-26-257: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-257/","published_at":"2026-04-06T05:00:00.000Z","valid_from":"2026-04-06T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5494","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-256/","article_title":"ZDI-26-256: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-256/","published_at":"2026-04-06T05:00:00.000Z","valid_from":"2026-04-06T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5493","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-255/","article_title":"ZDI-26-255: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-255/","published_at":"2026-04-06T05:00:00.000Z","valid_from":"2026-04-06T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5496","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-254/","article_title":"ZDI-26-254: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-254/","published_at":"2026-04-06T05:00:00.000Z","valid_from":"2026-04-06T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21518","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-253/","article_title":"ZDI-26-253: Microsoft Visual Studio Code mcp.json Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-253/","published_at":"2026-04-02T05:00:00.000Z","valid_from":"2026-04-02T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-4698","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-252/","article_title":"ZDI-26-252: Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-252/","published_at":"2026-04-02T05:00:00.000Z","valid_from":"2026-04-02T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-3775","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-251/","article_title":"ZDI-26-251: Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-251/","published_at":"2026-04-02T05:00:00.000Z","valid_from":"2026-04-02T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-23092","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-250/","article_title":"ZDI-26-250: Linux Kernel Analog Device Driver Improper Validation of Array Index Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-250/","published_at":"2026-03-31T05:00:00.000Z","valid_from":"2026-03-31T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5055","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-249/","article_title":"ZDI-26-249: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-249/","published_at":"2026-03-30T05:00:00.000Z","valid_from":"2026-03-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5054","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-248/","article_title":"ZDI-26-248: NoMachine External Control of File Path Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-248/","published_at":"2026-03-30T05:00:00.000Z","valid_from":"2026-03-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5053","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-247/","article_title":"ZDI-26-247: NoMachine External Control of File Path Arbitrary File Deletion Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-247/","published_at":"2026-03-30T05:00:00.000Z","valid_from":"2026-03-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2024-54529","source":"Google Project Zero","source_url":"https://projectzero.google/2026/01/sound-barrier-2.html","article_title":"Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529","article_url":"https://projectzero.google/2026/01/sound-barrier-2.html","published_at":"2026-01-30T08:00:00.000Z","valid_from":"2026-01-30T08:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-31235","source":"Google Project Zero","source_url":"https://projectzero.google/2026/01/sound-barrier-2.html","article_title":"Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529","article_url":"https://projectzero.google/2026/01/sound-barrier-2.html","published_at":"2026-01-30T08:00:00.000Z","valid_from":"2026-01-30T08:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-50165","source":"WeLiveSecurity","source_url":"https://www.welivesecurity.com/en/eset-research/revisiting-cve-2025-50165-critical-flaw-windows-imaging-component/","article_title":"Revisiting CVE-2025-50165: A critical flaw in Windows Imaging Component","article_url":"https://www.welivesecurity.com/en/eset-research/revisiting-cve-2025-50165-critical-flaw-windows-imaging-component/","published_at":"2025-12-22T09:55:00.000Z","valid_from":"2025-12-22T09:55:00.000Z","origin":"rss"}]}