{"exported_at":"2026-10-09T05:36:16.667Z","count":1757,"iocs":[{"type":"domain","value":"hunt.io","source":"Security Affairs","source_url":"https://securityaffairs.com/200634/cyber-crime/hunt-io-finds-new-brazetsu-infrastructure-months-before-disclosure.html","article_title":"Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure","article_url":"https://securityaffairs.com/200634/cyber-crime/hunt-io-finds-new-brazetsu-infrastructure-months-before-disclosure.html","published_at":"2026-10-08T17:47:35.000Z","valid_from":"2026-10-08T17:47:35.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21589","source":"SecurityWeek","source_url":"https://www.securityweek.com/attackers-target-critical-atlassian-vulnerability-within-hours-of-poc-publication/","article_title":"Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication","article_url":"https://www.securityweek.com/attackers-target-critical-atlassian-vulnerability-within-hours-of-poc-publication/","published_at":"2026-10-08T14:04:44.000Z","valid_from":"2026-10-08T14:04:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-102489","source":"GBHackers","source_url":"https://gbhackers.com/poc-exploit-released-for-zammad-vulnerability/","article_title":"PoC Exploit Released for Zammad Vulnerability Enabling Session Hijacking and Remote Code Execution","article_url":"https://gbhackers.com/poc-exploit-released-for-zammad-vulnerability/","published_at":"2026-10-08T13:14:21.000Z","valid_from":"2026-10-08T13:14:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-105192","source":"GBHackers","source_url":"https://gbhackers.com/critical-lmcache-rce-vulnerability/","article_title":"Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available","article_url":"https://gbhackers.com/critical-lmcache-rce-vulnerability/","published_at":"2026-10-08T13:02:48.000Z","valid_from":"2026-10-08T13:02:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-104629","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-02","article_title":"Grid Protection Alliance openPDC and openHistorian","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-02","published_at":"2026-10-08T12:00:00.000Z","valid_from":"2026-10-08T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-100730","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-02","article_title":"Grid Protection Alliance openPDC and openHistorian","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-02","published_at":"2026-10-08T12:00:00.000Z","valid_from":"2026-10-08T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-105281","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-02","article_title":"Grid Protection Alliance openPDC and openHistorian","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-02","published_at":"2026-10-08T12:00:00.000Z","valid_from":"2026-10-08T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85479","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-02","article_title":"Grid Protection Alliance openPDC and openHistorian","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-02","published_at":"2026-10-08T12:00:00.000Z","valid_from":"2026-10-08T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-101022","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-02","article_title":"Grid Protection Alliance openPDC and openHistorian","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-02","published_at":"2026-10-08T12:00:00.000Z","valid_from":"2026-10-08T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-105278","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-02","article_title":"Grid Protection Alliance openPDC and openHistorian","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-02","published_at":"2026-10-08T12:00:00.000Z","valid_from":"2026-10-08T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16516","source":"GBHackers","source_url":"https://gbhackers.com/wolfssh-patches-5-security-vulnerabilities/","article_title":"wolfSSH Patches 5 Security Vulnerabilities, Including Critical SSH Authentication Bypass","article_url":"https://gbhackers.com/wolfssh-patches-5-security-vulnerabilities/","published_at":"2026-10-08T11:10:31.000Z","valid_from":"2026-10-08T11:10:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76485","source":"GBHackers","source_url":"https://gbhackers.com/critical-cisco-nexus-switch-vulnerabilities/","article_title":"Critical Cisco Nexus Switch Vulnerabilities Allow Unauthenticated Attackers to Execute Code as Root","article_url":"https://gbhackers.com/critical-cisco-nexus-switch-vulnerabilities/","published_at":"2026-10-08T10:19:06.000Z","valid_from":"2026-10-08T10:19:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76486","source":"GBHackers","source_url":"https://gbhackers.com/critical-cisco-nexus-switch-vulnerabilities/","article_title":"Critical Cisco Nexus Switch Vulnerabilities Allow Unauthenticated Attackers to Execute Code as Root","article_url":"https://gbhackers.com/critical-cisco-nexus-switch-vulnerabilities/","published_at":"2026-10-08T10:19:06.000Z","valid_from":"2026-10-08T10:19:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59346","source":"GBHackers","source_url":"https://gbhackers.com/poc-exploit-released-for-critical-vmware-vulnerability/","article_title":"PoC Exploit Released for Critical VMware Vulnerability Enabling Guest-to-Host Attacks","article_url":"https://gbhackers.com/poc-exploit-released-for-critical-vmware-vulnerability/","published_at":"2026-10-08T10:08:54.000Z","valid_from":"2026-10-08T10:08:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76268","source":"GBHackers","source_url":"https://gbhackers.com/critical-splunk-enterprise-vulnerability/","article_title":"Critical Splunk Enterprise Vulnerability Lets Unauthenticated Attackers Execute OS Commands","article_url":"https://gbhackers.com/critical-splunk-enterprise-vulnerability/","published_at":"2026-10-08T09:07:44.000Z","valid_from":"2026-10-08T09:07:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21589","source":"Security Affairs","source_url":"https://securityaffairs.com/200591/security/atlassian-vulnerability-comes-under-attack-hours-after-details-go-public.html","article_title":"Atlassian Vulnerability Comes Under Attack Hours After Details Go Public","article_url":"https://securityaffairs.com/200591/security/atlassian-vulnerability-comes-under-attack-hours-after-details-go-public.html","published_at":"2026-10-08T07:26:49.000Z","valid_from":"2026-10-08T07:26:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88771","source":"GBHackers","source_url":"https://gbhackers.com/citrix-netscaler-cve-2026-88771-exploited/","article_title":"Critical Citrix NetScaler CVE-2026-88771 Exploited for Reverse Shells and Persistent Access","article_url":"https://gbhackers.com/citrix-netscaler-cve-2026-88771-exploited/","published_at":"2026-10-08T07:00:54.000Z","valid_from":"2026-10-08T07:00:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-102255","source":"CSO Online","source_url":"https://www.csoonline.com/article/4232246/sonicwalls-latest-critical-flaw-indicates-a-security-pattern-not-another-one-off-bug.html","article_title":"SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug","article_url":"https://www.csoonline.com/article/4232246/sonicwalls-latest-critical-flaw-indicates-a-security-pattern-not-another-one-off-bug.html","published_at":"2026-10-08T03:19:05.000Z","valid_from":"2026-10-08T03:19:05.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10128,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33408","article_title":"ISC Stormcast For Thursday, October 8th, 2026 https://isc.sans.edu/podcastdetail/10128, (Thu, Oct 8th)","article_url":"https://isc.sans.edu/diary/rss/33408","published_at":"2026-10-08T02:00:02.000Z","valid_from":"2026-10-08T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-102255","source":"Security Affairs","source_url":"https://securityaffairs.com/200569/security/sonicwall-fixes-max-severity-pre-auth-flaw-in-sma1000-appliances.html","article_title":"SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances","article_url":"https://securityaffairs.com/200569/security/sonicwall-fixes-max-severity-pre-auth-flaw-in-sma1000-appliances.html","published_at":"2026-10-07T18:17:14.000Z","valid_from":"2026-10-07T18:17:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21589","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33406","article_title":"Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)","article_url":"https://isc.sans.edu/diary/rss/33406","published_at":"2026-10-07T14:59:33.000Z","valid_from":"2026-10-07T14:59:33.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21589","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/07/exploitation-critical-atlassian-flaw-cve-2026-21589/","article_title":"Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)","article_url":"https://www.helpnetsecurity.com/2026/10/07/exploitation-critical-atlassian-flaw-cve-2026-21589/","published_at":"2026-10-07T14:21:35.000Z","valid_from":"2026-10-07T14:21:35.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91140","source":"GBHackers","source_url":"https://gbhackers.com/critical-progress-datadirect-genai-flaw/","article_title":"Critical Progress DataDirect GenAI Flaw Lets Attackers Execute Arbitrary OS Commands","article_url":"https://gbhackers.com/critical-progress-datadirect-genai-flaw/","published_at":"2026-10-07T12:55:29.000Z","valid_from":"2026-10-07T12:55:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21589","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/","article_title":"Hackers exploit critical Atlassian flaw after public PoC release","article_url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-atlassian-flaw-after-public-poc-release/","published_at":"2026-10-07T12:49:01.000Z","valid_from":"2026-10-07T12:49:01.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21589","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-21589-critical-unauthenticated-arbitrary-file-access-in-atlassian-products","article_title":"CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-21589-critical-unauthenticated-arbitrary-file-access-in-atlassian-products","published_at":"2026-10-07T12:11:26.000Z","valid_from":"2026-10-07T12:11:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21589","source":"The Hacker News","source_url":"https://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html","article_title":"Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details","article_url":"https://thehackernews.com/2026/10/atlassian-data-center-flaw-draws.html","published_at":"2026-10-07T11:49:26.000Z","valid_from":"2026-10-07T11:49:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-102255","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/07/sonicwall-fixes-pre-auth-ssrf-flaw-in-sma-1000-appliances-cve-2026-102255/","article_title":"SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)","article_url":"https://www.helpnetsecurity.com/2026/10/07/sonicwall-fixes-pre-auth-ssrf-flaw-in-sma-1000-appliances-cve-2026-102255/","published_at":"2026-10-07T10:37:53.000Z","valid_from":"2026-10-07T10:37:53.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-64393","source":"GBHackers","source_url":"https://gbhackers.com/critical-veeam-backup-replication-flaw/","article_title":"Critical Veeam Backup & Replication Flaw Allows Low-Privileged Users to Execute Remote Code","article_url":"https://gbhackers.com/critical-veeam-backup-replication-flaw/","published_at":"2026-10-07T10:30:08.000Z","valid_from":"2026-10-07T10:30:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93524","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/07/x-org-server-fixed-vulnerabilities/","article_title":"Check your X.Org server version because a dozen vulnerabilities have been patched","article_url":"https://www.helpnetsecurity.com/2026/10/07/x-org-server-fixed-vulnerabilities/","published_at":"2026-10-07T03:58:02.000Z","valid_from":"2026-10-07T03:58:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93536","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/07/x-org-server-fixed-vulnerabilities/","article_title":"Check your X.Org server version because a dozen vulnerabilities have been patched","article_url":"https://www.helpnetsecurity.com/2026/10/07/x-org-server-fixed-vulnerabilities/","published_at":"2026-10-07T03:58:02.000Z","valid_from":"2026-10-07T03:58:02.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/07/x-org-server-fixed-vulnerabilities/","article_title":"Check your X.Org server version because a dozen vulnerabilities have been patched","article_url":"https://www.helpnetsecurity.com/2026/10/07/x-org-server-fixed-vulnerabilities/","published_at":"2026-10-07T03:58:02.000Z","valid_from":"2026-10-07T03:58:02.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10126,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33404","article_title":"ISC Stormcast For Wednesday, October 7th, 2026 https://isc.sans.edu/podcastdetail/10126, (Wed, Oct 7th)","article_url":"https://isc.sans.edu/diary/rss/33404","published_at":"2026-10-07T02:00:02.000Z","valid_from":"2026-10-07T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21589","source":"CSO Online","source_url":"https://www.csoonline.com/article/4231527/atlassians-critical-flaw-turns-eight-enterprise-products-into-one-big-security-problem.html","article_title":"Atlassian’s critical flaw turns eight enterprise products into one big security problem","article_url":"https://www.csoonline.com/article/4231527/atlassians-critical-flaw-turns-eight-enterprise-products-into-one-big-security-problem.html","published_at":"2026-10-07T01:51:40.000Z","valid_from":"2026-10-07T01:51:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21589","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/atlassian-warns-of-critical-file-access-flaw-in-jira-confluence/","article_title":"Atlassian warns of critical file-access flaw in Jira, Confluence","article_url":"https://www.bleepingcomputer.com/news/security/atlassian-warns-of-critical-file-access-flaw-in-jira-confluence/","published_at":"2026-10-06T17:34:59.000Z","valid_from":"2026-10-06T17:34:59.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-96940","source":"Security Affairs","source_url":"https://securityaffairs.com/200476/security/cve-2026-96940-microsoft-fixes-high-severity-exchange-server-flaw.html","article_title":"CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely","article_url":"https://securityaffairs.com/200476/security/cve-2026-96940-microsoft-fixes-high-severity-exchange-server-flaw.html","published_at":"2026-10-06T14:09:17.000Z","valid_from":"2026-10-06T14:09:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21589","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/06/atlassian-data-center-cve-2026-21589/","article_title":"Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)","article_url":"https://www.helpnetsecurity.com/2026/10/06/atlassian-data-center-cve-2026-21589/","published_at":"2026-10-06T12:26:30.000Z","valid_from":"2026-10-06T12:26:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2024-8176","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-05","article_title":"Hitachi Energy REB500","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-05","published_at":"2026-10-06T12:00:00.000Z","valid_from":"2026-10-06T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-59375","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-05","article_title":"Hitachi Energy REB500","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-05","published_at":"2026-10-06T12:00:00.000Z","valid_from":"2026-10-06T12:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"8.3.3.1","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-05","article_title":"Hitachi Energy REB500","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-05","published_at":"2026-10-06T12:00:00.000Z","valid_from":"2026-10-06T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27872","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-01","article_title":"Johnson Controls EasyIO FG","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-01","published_at":"2026-10-06T12:00:00.000Z","valid_from":"2026-10-06T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27873","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-01","article_title":"Johnson Controls EasyIO FG","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-01","published_at":"2026-10-06T12:00:00.000Z","valid_from":"2026-10-06T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15340","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-02","article_title":"Savannah lwIP SMTP client","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-279-02","published_at":"2026-10-06T12:00:00.000Z","valid_from":"2026-10-06T12:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10124,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33402","article_title":"ISC Stormcast For Tuesday, October 6th, 2026 https://isc.sans.edu/podcastdetail/10124, (Tue, Oct 6th)","article_url":"https://isc.sans.edu/diary/rss/33402","published_at":"2026-10-06T11:45:11.000Z","valid_from":"2026-10-06T11:45:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2021-35394","source":"GBHackers","source_url":"https://gbhackers.com/cling-iot-botnet/","article_title":"Cling Botnet Spoofs Google STUN Traffic to Hide Commands Sent to Infected IoT Devices","article_url":"https://gbhackers.com/cling-iot-botnet/","published_at":"2026-10-06T11:15:46.000Z","valid_from":"2026-10-06T11:15:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86360","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/06/dell-system-update-vulnerability-cve-2026-86360/","article_title":"Dell System Update flaw allows attackers to gain root privileges (CVE-2026-86360)","article_url":"https://www.helpnetsecurity.com/2026/10/06/dell-system-update-vulnerability-cve-2026-86360/","published_at":"2026-10-06T10:44:41.000Z","valid_from":"2026-10-06T10:44:41.000Z","origin":"rss"},{"type":"ipv4","value":"2.3.0.0","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/06/dell-system-update-vulnerability-cve-2026-86360/","article_title":"Dell System Update flaw allows attackers to gain root privileges (CVE-2026-86360)","article_url":"https://www.helpnetsecurity.com/2026/10/06/dell-system-update-vulnerability-cve-2026-86360/","published_at":"2026-10-06T10:44:41.000Z","valid_from":"2026-10-06T10:44:41.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13043","source":"GBHackers","source_url":"https://gbhackers.com/critical-watchguard-endpoint-security-flaw-exposes-kernel-and-process-memory/","article_title":"Critical WatchGuard Endpoint Security Flaw Exposes Kernel and Process Memory","article_url":"https://gbhackers.com/critical-watchguard-endpoint-security-flaw-exposes-kernel-and-process-memory/","published_at":"2026-10-06T07:43:40.000Z","valid_from":"2026-10-06T07:43:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21589","source":"GBHackers","source_url":"https://gbhackers.com/atlassian-cve-2026-21589-flaw/","article_title":"Atlassian CVE-2026-21589 Flaw Exposes Files in Jira and Confluence Data Center","article_url":"https://gbhackers.com/atlassian-cve-2026-21589-flaw/","published_at":"2026-10-06T07:29:01.000Z","valid_from":"2026-10-06T07:29:01.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86360","source":"Security Affairs","source_url":"https://securityaffairs.com/200458/security/dell-urges-customers-to-patch-critical-dsu-flaw-that-can-give-attackers-root-access.html","article_title":"Dell Urges Customers to Patch Critical DSU Flaw That Can Give Attackers Root Access","article_url":"https://securityaffairs.com/200458/security/dell-urges-customers-to-patch-critical-dsu-flaw-that-can-give-attackers-root-access.html","published_at":"2026-10-06T07:01:46.000Z","valid_from":"2026-10-06T07:01:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21589","source":"The Hacker News","source_url":"https://thehackernews.com/2026/10/critical-atlassian-flaw-lets.html","article_title":"Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products","article_url":"https://thehackernews.com/2026/10/critical-atlassian-flaw-lets.html","published_at":"2026-10-06T06:58:56.000Z","valid_from":"2026-10-06T06:58:56.000Z","origin":"rss"},{"type":"domain","value":"icloud.com","source":"SC Media","source_url":"https://www.scworld.com/brief/apple-icloud-mail-vulnerabilities-allowed-spoofed-sender-addresses","article_title":"Apple iCloud Mail vulnerabilities allowed spoofed sender addresses","article_url":"https://www.scworld.com/brief/apple-icloud-mail-vulnerabilities-allowed-spoofed-sender-addresses","published_at":"2026-10-05T22:04:55.000Z","valid_from":"2026-10-05T22:04:55.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61500","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw/","article_title":"Rejetto HFS servers now actively scanned for critical RCE flaw","article_url":"https://www.bleepingcomputer.com/news/security/rejetto-hfs-servers-now-actively-scanned-for-critical-rce-flaw/","published_at":"2026-10-05T20:20:05.000Z","valid_from":"2026-10-05T20:20:05.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61500","source":"Security Affairs","source_url":"https://securityaffairs.com/200444/ai/anthropic-mythos-found-a-bug-in-rejetto-hfs-attackers-are-now-exploiting-it.html","article_title":"Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It.","article_url":"https://securityaffairs.com/200444/ai/anthropic-mythos-found-a-bug-in-rejetto-hfs-attackers-are-now-exploiting-it.html","published_at":"2026-10-05T18:15:12.000Z","valid_from":"2026-10-05T18:15:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-96940","source":"The Hacker News","source_url":"https://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html","article_title":"Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes","article_url":"https://thehackernews.com/2026/10/microsoft-exchange-flaw-lets.html","published_at":"2026-10-05T16:21:52.000Z","valid_from":"2026-10-05T16:21:52.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88779","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/05/cisa-flags-new-exploited-netscaler-flaw-as-attackers-crash-appliances-cve-2026-88779/","article_title":"CISA flags new exploited NetScaler flaw as attackers crash appliances (CVE-2026-88779)","article_url":"https://www.helpnetsecurity.com/2026/10/05/cisa-flags-new-exploited-netscaler-flaw-as-attackers-crash-appliances-cve-2026-88779/","published_at":"2026-10-05T14:53:48.000Z","valid_from":"2026-10-05T14:53:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88779","source":"Security Affairs","source_url":"https://securityaffairs.com/200414/hacking/u-s-cisa-adds-citrix-netscaler-flaw-to-its-known-exploited-vulnerabilities-catalog-3.html","article_title":"U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/200414/hacking/u-s-cisa-adds-citrix-netscaler-flaw-to-its-known-exploited-vulnerabilities-catalog-3.html","published_at":"2026-10-05T13:10:28.000Z","valid_from":"2026-10-05T13:10:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88779","source":"Security Affairs","source_url":"https://securityaffairs.com/200414/security/u-s-cisa-adds-citrix-netscaler-flaw-to-its-known-exploited-vulnerabilities-catalog-3.html","article_title":"U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/200414/security/u-s-cisa-adds-citrix-netscaler-flaw-to-its-known-exploited-vulnerabilities-catalog-3.html","published_at":"2026-10-05T13:10:28.000Z","valid_from":"2026-10-05T13:10:28.000Z","origin":"rss"},{"type":"ipv4","value":"1.1.1.1","source":"Cloudflare Blog","source_url":"https://blog.cloudflare.com/one-year-later-1111-interns/","article_title":"One year later: the power of 1.1.1.1 interns","article_url":"https://blog.cloudflare.com/one-year-later-1111-interns/","published_at":"2026-10-05T13:00:00.000Z","valid_from":"2026-10-05T13:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88779","source":"CSO Online","source_url":"https://www.csoonline.com/article/4230642/citrix-warns-of-actively-exploited-netscaler-flaw-days-after-zero-day-patch-rush.html","article_title":"Citrix warns of actively exploited NetScaler flaw days after zero-day patch rush","article_url":"https://www.csoonline.com/article/4230642/citrix-warns-of-actively-exploited-netscaler-flaw-days-after-zero-day-patch-rush.html","published_at":"2026-10-05T12:14:09.000Z","valid_from":"2026-10-05T12:14:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61500","source":"SecurityWeek","source_url":"https://www.securityweek.com/exploitation-hits-rejetto-hfs-vulnerability-discovered-by-ai/","article_title":"Exploitation Hits Rejetto HFS Vulnerability Discovered by AI ","article_url":"https://www.securityweek.com/exploitation-hits-rejetto-hfs-vulnerability-discovered-by-ai/","published_at":"2026-10-05T11:00:05.000Z","valid_from":"2026-10-05T11:00:05.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88779","source":"GBHackers","source_url":"https://gbhackers.com/cisa-flags-citrix-netscaler-flaw/","article_title":"CISA Flags Citrix NetScaler Flaw Exploited in Ongoing Attacks","article_url":"https://gbhackers.com/cisa-flags-citrix-netscaler-flaw/","published_at":"2026-10-05T10:46:28.000Z","valid_from":"2026-10-05T10:46:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-96940","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/05/exchange-server-vulnerability-cve-2026-96940/","article_title":"Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)","article_url":"https://www.helpnetsecurity.com/2026/10/05/exchange-server-vulnerability-cve-2026-96940/","published_at":"2026-10-05T10:38:42.000Z","valid_from":"2026-10-05T10:38:42.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61500","source":"The Hacker News","source_url":"https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.html","article_title":"Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE","article_url":"https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.html","published_at":"2026-10-05T08:09:23.000Z","valid_from":"2026-10-05T08:09:23.000Z","origin":"rss"},{"type":"domain","value":"doxx.net","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/05/doxx-net-agentic-defined-networking-platform/","article_title":"doxx.net opens Agentic Defined Networking public beta, raises $38 million","article_url":"https://www.helpnetsecurity.com/2026/10/05/doxx-net-agentic-defined-networking-platform/","published_at":"2026-10-05T08:03:40.000Z","valid_from":"2026-10-05T08:03:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88779","source":"The Hacker News","source_url":"https://thehackernews.com/2026/10/new-netscaler-zero-day-exploited-in.html","article_title":"New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline","article_url":"https://thehackernews.com/2026/10/new-netscaler-zero-day-exploited-in.html","published_at":"2026-10-05T06:40:19.000Z","valid_from":"2026-10-05T06:40:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88779","source":"SecurityWeek","source_url":"https://www.securityweek.com/exploitation-of-citrix-netscaler-zero-day-hits-appliances-patched-days-earlier/","article_title":"Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier","article_url":"https://www.securityweek.com/exploitation-of-citrix-netscaler-zero-day-hits-appliances-patched-days-earlier/","published_at":"2026-10-05T05:14:48.000Z","valid_from":"2026-10-05T05:14:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-96940","source":"GBHackers","source_url":"https://gbhackers.com/microsoft-releases-emergency-exchange-server-update/","article_title":"Microsoft Releases Emergency Exchange Server Update to Fix CVE-2026-96940","article_url":"https://gbhackers.com/microsoft-releases-emergency-exchange-server-update/","published_at":"2026-10-05T05:06:27.000Z","valid_from":"2026-10-05T05:06:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88779","source":"GBHackers","source_url":"https://gbhackers.com/citrix-netscaler-saml-vulnerability/","article_title":"Citrix NetScaler SAML Vulnerability Enables Unauthenticated Remote DoS Attacks","article_url":"https://gbhackers.com/citrix-netscaler-saml-vulnerability/","published_at":"2026-10-05T04:46:41.000Z","valid_from":"2026-10-05T04:46:41.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10122,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33398","article_title":"ISC Stormcast For Monday, October 5th, 2026 https://isc.sans.edu/podcastdetail/10122, (Mon, Oct 5th)","article_url":"https://isc.sans.edu/diary/rss/33398","published_at":"2026-10-05T02:00:02.000Z","valid_from":"2026-10-05T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88779","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks/","article_title":"Citrix patches NetScaler SAML zero-day exploited in attacks","article_url":"https://www.bleepingcomputer.com/news/security/citrix-patches-netscaler-saml-zero-day-exploited-in-attacks/","published_at":"2026-10-04T21:58:01.000Z","valid_from":"2026-10-04T21:58:01.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88779","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/10/04/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/10/04/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-10-04T12:00:00.000Z","valid_from":"2026-10-04T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88771","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/04/week-in-review-researcher-breaks-into-microsoft-analytics-service-netscaler-rce-0-day-exploited/","article_title":"Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited","article_url":"https://www.helpnetsecurity.com/2026/10/04/week-in-review-researcher-breaks-into-microsoft-analytics-service-netscaler-rce-0-day-exploited/","published_at":"2026-10-04T08:00:19.000Z","valid_from":"2026-10-04T08:00:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/04/week-in-review-researcher-breaks-into-microsoft-analytics-service-netscaler-rce-0-day-exploited/","article_title":"Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited","article_url":"https://www.helpnetsecurity.com/2026/10/04/week-in-review-researcher-breaks-into-microsoft-analytics-service-netscaler-rce-0-day-exploited/","published_at":"2026-10-04T08:00:19.000Z","valid_from":"2026-10-04T08:00:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-90970","source":"Security Affairs","source_url":"https://securityaffairs.com/200326/breaking-news/security-affairs-newsletter-round-598-by-pierluigi-paganini-international-edition.html","article_title":"Security Affairs newsletter Round 598 by Pierluigi Paganini – INTERNATIONAL EDITION","article_url":"https://securityaffairs.com/200326/breaking-news/security-affairs-newsletter-round-598-by-pierluigi-paganini-international-edition.html","published_at":"2026-10-04T07:58:06.000Z","valid_from":"2026-10-04T07:58:06.000Z","origin":"rss"},{"type":"domain","value":"doxx.net","source":"SecurityWeek","source_url":"https://www.securityweek.com/doxx-net-raises-38-million-to-prevent-ai-agent-on-the-internet-misadventures/","article_title":"doxx.net Raises $38 Million to Prevent AI Agent-on-the-Internet Misadventures","article_url":"https://www.securityweek.com/doxx-net-raises-38-million-to-prevent-ai-agent-on-the-internet-misadventures/","published_at":"2026-10-03T11:45:00.000Z","valid_from":"2026-10-03T11:45:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-90970","source":"Security Affairs","source_url":"https://securityaffairs.com/200283/hacking/cve-2026-90970-critical-gitlab-ai-gateway-flaw-fixed.html","article_title":"CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed","article_url":"https://securityaffairs.com/200283/hacking/cve-2026-90970-critical-gitlab-ai-gateway-flaw-fixed.html","published_at":"2026-10-03T10:43:39.000Z","valid_from":"2026-10-03T10:43:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-90970","source":"GBHackers","source_url":"https://gbhackers.com/critical-gitlab-ai-gateway-flaw/","article_title":"Critical GitLab AI Gateway Flaw Lets Attackers Execute Arbitrary Commands","article_url":"https://gbhackers.com/critical-gitlab-ai-gateway-flaw/","published_at":"2026-10-03T06:14:55.000Z","valid_from":"2026-10-03T06:14:55.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-102489","source":"Security Affairs","source_url":"https://securityaffairs.com/200248/security/u-s-cisa-adds-zammad-gmbh-zammad-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/200248/security/u-s-cisa-adds-zammad-gmbh-zammad-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-10-02T22:46:18.000Z","valid_from":"2026-10-02T22:46:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63688","source":"The Hacker News","source_url":"https://thehackernews.com/2026/10/dell-csm-flaws-enable-unauthenticated.html","article_title":"Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes","article_url":"https://thehackernews.com/2026/10/dell-csm-flaws-enable-unauthenticated.html","published_at":"2026-10-02T17:02:12.000Z","valid_from":"2026-10-02T17:02:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-102489","source":"GBHackers","source_url":"https://gbhackers.com/zammad-vulnerabilities/","article_title":"Zammad Vulnerabilities Let Attackers Execute Code and Escalate Privileges to Root","article_url":"https://gbhackers.com/zammad-vulnerabilities/","published_at":"2026-10-02T12:44:08.000Z","valid_from":"2026-10-02T12:44:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-102490","source":"GBHackers","source_url":"https://gbhackers.com/zammad-vulnerabilities/","article_title":"Zammad Vulnerabilities Let Attackers Execute Code and Escalate Privileges to Root","article_url":"https://gbhackers.com/zammad-vulnerabilities/","published_at":"2026-10-02T12:44:08.000Z","valid_from":"2026-10-02T12:44:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-102489","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/10/02/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/10/02/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-10-02T12:00:00.000Z","valid_from":"2026-10-02T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-102490","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/10/02/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/10/02/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-10-02T12:00:00.000Z","valid_from":"2026-10-02T12:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"151.243.232.123","source":"GBHackers","source_url":"https://gbhackers.com/viva-aerobus-intrusion/","article_title":"Exposed Hacker Server Reveals Toolkit Used in Viva Aerobus-Linked Intrusion","article_url":"https://gbhackers.com/viva-aerobus-intrusion/","published_at":"2026-10-02T11:55:20.000Z","valid_from":"2026-10-02T11:55:20.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-103922","source":"GBHackers","source_url":"https://gbhackers.com/capacitor-vulnerability/","article_title":"Capacitor Vulnerability Lets Remote Content Run With Full App Origin Trust","article_url":"https://gbhackers.com/capacitor-vulnerability/","published_at":"2026-10-02T11:12:42.000Z","valid_from":"2026-10-02T11:12:42.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-104286","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/02/fortinet-fortimail-vulnerability-cve-2026-104286/","article_title":"Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)","article_url":"https://www.helpnetsecurity.com/2026/10/02/fortinet-fortimail-vulnerability-cve-2026-104286/","published_at":"2026-10-02T08:50:59.000Z","valid_from":"2026-10-02T08:50:59.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-104286","source":"SecurityWeek","source_url":"https://www.securityweek.com/exploited-fortinet-fortimail-zero-day-calls-for-urgent-action/","article_title":"Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action","article_url":"https://www.securityweek.com/exploited-fortinet-fortimail-zero-day-calls-for-urgent-action/","published_at":"2026-10-02T08:07:33.000Z","valid_from":"2026-10-02T08:07:33.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-104286","source":"Security Affairs","source_url":"https://securityaffairs.com/200224/security/u-s-cisa-adds-fortinet-fortimail-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/200224/security/u-s-cisa-adds-fortinet-fortimail-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-10-02T05:50:36.000Z","valid_from":"2026-10-02T05:50:36.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-104286","source":"The Hacker News","source_url":"https://thehackernews.com/2026/10/critical-fortimail-zero-day-flaw.html","article_title":"Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes","article_url":"https://thehackernews.com/2026/10/critical-fortimail-zero-day-flaw.html","published_at":"2026-10-02T05:49:50.000Z","valid_from":"2026-10-02T05:49:50.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-104286","source":"GBHackers","source_url":"https://gbhackers.com/fortinet-fortimail-path-traversal-flaw/","article_title":"Fortinet FortiMail Path Traversal Flaw Actively Exploited to Compromise Servers","article_url":"https://gbhackers.com/fortinet-fortimail-path-traversal-flaw/","published_at":"2026-10-02T05:14:47.000Z","valid_from":"2026-10-02T05:14:47.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10120,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33390","article_title":"ISC Stormcast For Friday, October 2nd, 2026 https://isc.sans.edu/podcastdetail/10120, (Fri, Oct 2nd)","article_url":"https://isc.sans.edu/diary/rss/33390","published_at":"2026-10-02T02:00:02.000Z","valid_from":"2026-10-02T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-104286","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks/","article_title":"Fortinet warns of critical FortiMail flaw exploited in zero-day attacks","article_url":"https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks/","published_at":"2026-10-01T22:42:49.000Z","valid_from":"2026-10-01T22:42:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"SecurityWeek","source_url":"https://www.securityweek.com/zimbra-vulnerability-exploited-in-the-wild-prior-to-public-disclosure/","article_title":"Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure","article_url":"https://www.securityweek.com/zimbra-vulnerability-exploited-in-the-wild-prior-to-public-disclosure/","published_at":"2026-10-01T12:55:57.000Z","valid_from":"2026-10-01T12:55:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86950","source":"Security Affairs","source_url":"https://securityaffairs.com/200175/hacking/public-poc-released-for-apple-coregraphics-zero-day-cve-2026-86950.html","article_title":"Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950","article_url":"https://securityaffairs.com/200175/hacking/public-poc-released-for-apple-coregraphics-zero-day-cve-2026-86950.html","published_at":"2026-10-01T12:08:19.000Z","valid_from":"2026-10-01T12:08:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2023-46604","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01","article_title":"Armatura LLC Armatura One","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-94591","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01","article_title":"Armatura LLC Armatura One","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-94592","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01","article_title":"Armatura LLC Armatura One","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-94593","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01","article_title":"Armatura LLC Armatura One","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-94594","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01","article_title":"Armatura LLC Armatura One","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-01","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-95102","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-02","article_title":"Monta monta.app","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-02","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-97363","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-02","article_title":"Monta monta.app","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-02","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-97212","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-02","article_title":"Monta monta.app","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-02","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93474","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-02","article_title":"Monta monta.app","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-02","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64892","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-04","article_title":"Johnson Controls EasyIO Neo Series EC and CW Controllers","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-04","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-101104","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06","article_title":"Meari IoT Cloud Platform OpenAPI Service","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-96613","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06","article_title":"Meari IoT Cloud Platform OpenAPI Service","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-06","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15952","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-03","article_title":"ABB Protection and Control IED Manager PCM600","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-03","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15953","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-03","article_title":"ABB Protection and Control IED Manager PCM600","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-03","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64893","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-05","article_title":"Johnson Controls EasyIO Neo Series EC and CW Controllers","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-274-05","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-104286","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/10/01/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/10/01/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-10-01T12:00:00.000Z","valid_from":"2026-10-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19743","source":"GBHackers","source_url":"https://gbhackers.com/multiple-teamviewer-vulnerabilities/","article_title":"Multiple TeamViewer Vulnerabilities Enable RCE, Access Control Bypass and Privilege Escalation","article_url":"https://gbhackers.com/multiple-teamviewer-vulnerabilities/","published_at":"2026-10-01T11:08:39.000Z","valid_from":"2026-10-01T11:08:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76504","source":"The Hacker News","source_url":"https://thehackernews.com/2026/10/cisa-adds-exploited-cisco-catalyst-sd.html","article_title":"CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV","article_url":"https://thehackernews.com/2026/10/cisa-adds-exploited-cisco-catalyst-sd.html","published_at":"2026-10-01T10:33:16.000Z","valid_from":"2026-10-01T10:33:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76504","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/10/01/new-cisco-sd-wan-zero-day-exploited-in-the-wild-cve-2026-76504/","article_title":"New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504)","article_url":"https://www.helpnetsecurity.com/2026/10/01/new-cisco-sd-wan-zero-day-exploited-in-the-wild-cve-2026-76504/","published_at":"2026-10-01T10:18:21.000Z","valid_from":"2026-10-01T10:18:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76504","source":"Security Affairs","source_url":"https://securityaffairs.com/200152/security/u-s-cisa-adds-cisco-catalyst-sd-wan-manager-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/200152/security/u-s-cisa-adds-cisco-catalyst-sd-wan-manager-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-10-01T08:35:37.000Z","valid_from":"2026-10-01T08:35:37.000Z","origin":"rss"},{"type":"ipv4","value":"3.4.1.0","source":"GBHackers","source_url":"https://gbhackers.com/hpe-instant-on-ap-flaws/","article_title":"HPE Instant On AP Flaws Let Unauthenticated Attackers Execute Arbitrary Commands","article_url":"https://gbhackers.com/hpe-instant-on-ap-flaws/","published_at":"2026-10-01T08:01:59.000Z","valid_from":"2026-10-01T08:01:59.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76504","source":"GBHackers","source_url":"https://gbhackers.com/critical-cisco-sd-wan-vulnerability/","article_title":"Critical Cisco SD-WAN Vulnerability Lets Remote Attackers Bypass Authentication as Admin","article_url":"https://gbhackers.com/critical-cisco-sd-wan-vulnerability/","published_at":"2026-10-01T07:45:48.000Z","valid_from":"2026-10-01T07:45:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86950","source":"The Hacker News","source_url":"https://thehackernews.com/2026/10/apple-coregraphics-poc-emerges-as.html","article_title":"Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path","article_url":"https://thehackernews.com/2026/10/apple-coregraphics-poc-emerges-as.html","published_at":"2026-10-01T05:54:41.000Z","valid_from":"2026-10-01T05:54:41.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"GBHackers","source_url":"https://gbhackers.com/zimbra-vulnerability-exploited/","article_title":"Zimbra Vulnerability Exploited to Gain Root Access and Steal Mailbox Authentication Secrets","article_url":"https://gbhackers.com/zimbra-vulnerability-exploited/","published_at":"2026-10-01T05:41:30.000Z","valid_from":"2026-10-01T05:41:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50375","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-751/","article_title":"ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-751/","published_at":"2026-10-01T05:00:00.000Z","valid_from":"2026-10-01T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10118,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33386","article_title":"ISC Stormcast For Thursday, October 1st, 2026 https://isc.sans.edu/podcastdetail/10118, (Thu, Oct 1st)","article_url":"https://isc.sans.edu/diary/rss/33386","published_at":"2026-10-01T02:00:02.000Z","valid_from":"2026-10-01T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86131","source":"Security Affairs","source_url":"https://securityaffairs.com/200108/security/watchguard-fixes-critical-fireware-os-flaw-allowing-remote-code-execution.html","article_title":"WatchGuard fixes critical Fireware OS flaw allowing remote code execution","article_url":"https://securityaffairs.com/200108/security/watchguard-fixes-critical-fireware-os-flaw-allowing-remote-code-execution.html","published_at":"2026-09-30T19:29:45.000Z","valid_from":"2026-09-30T19:29:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"SC Media","source_url":"https://www.scworld.com/news/2-new-forms-of-malware-exploited-citrix-netscaler-devices-one-month-before-patch","article_title":"2 new forms of malware exploited Citrix Netscaler devices one month before patch","article_url":"https://www.scworld.com/news/2-new-forms-of-malware-exploited-citrix-netscaler-devices-one-month-before-patch","published_at":"2026-09-30T19:11:09.000Z","valid_from":"2026-09-30T19:11:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/attackers-exploit-zimbra-flaw-to-deploy.html","article_title":"Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets","article_url":"https://thehackernews.com/2026/09/attackers-exploit-zimbra-flaw-to-deploy.html","published_at":"2026-09-30T16:46:29.000Z","valid_from":"2026-09-30T16:46:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76504","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/cisco-warns-of-attackers-exploiting.html","article_title":"Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager","article_url":"https://thehackernews.com/2026/09/cisco-warns-of-attackers-exploiting.html","published_at":"2026-09-30T15:24:54.000Z","valid_from":"2026-09-30T15:24:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76504","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-critical-cisco-catalyst-sd-wan-manager-api-authentication-bypass-exploited-in-the-wild-cve-2026-76504","article_title":"Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)","article_url":"https://www.rapid7.com/blog/post/etr-critical-cisco-catalyst-sd-wan-manager-api-authentication-bypass-exploited-in-the-wild-cve-2026-76504","published_at":"2026-09-30T15:09:22.000Z","valid_from":"2026-09-30T15:09:22.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76504","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/cisco-warns-of-new-sd-wan-authentication-bypass-zero-day-exploited-in-attacks/","article_title":"Cisco warns of new SD-WAN zero-day exploited in attacks","article_url":"https://www.bleepingcomputer.com/news/security/cisco-warns-of-new-sd-wan-authentication-bypass-zero-day-exploited-in-attacks/","published_at":"2026-09-30T14:46:40.000Z","valid_from":"2026-09-30T14:46:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"Microsoft Security Blog","source_url":"https://www.microsoft.com/en-us/security/blog/2026/09/30/unauthenticated-command-injection-on-internet-facing-mail-servers-tracking-cve-2026-73570/","article_title":"Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570","article_url":"https://www.microsoft.com/en-us/security/blog/2026/09/30/unauthenticated-command-injection-on-internet-facing-mail-servers-tracking-cve-2026-73570/","published_at":"2026-09-30T14:00:00.000Z","valid_from":"2026-09-30T14:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88771","source":"SecurityWeek","source_url":"https://www.securityweek.com/government-finance-orgs-targeted-in-weeks-long-netscaler-zero-day-attacks/","article_title":"Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks","article_url":"https://www.securityweek.com/government-finance-orgs-targeted-in-weeks-long-netscaler-zero-day-attacks/","published_at":"2026-09-30T12:48:20.000Z","valid_from":"2026-09-30T12:48:20.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"SecurityWeek","source_url":"https://www.securityweek.com/government-finance-orgs-targeted-in-weeks-long-netscaler-zero-day-attacks/","article_title":"Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks","article_url":"https://www.securityweek.com/government-finance-orgs-targeted-in-weeks-long-netscaler-zero-day-attacks/","published_at":"2026-09-30T12:48:20.000Z","valid_from":"2026-09-30T12:48:20.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-17106","source":"GBHackers","source_url":"https://gbhackers.com/docker-copyescape-cve-2026-17106/","article_title":"Docker CopyEscape CVE-2026-17106 Lets Malicious Containers Overwrite Host Files","article_url":"https://gbhackers.com/docker-copyescape-cve-2026-17106/","published_at":"2026-09-30T12:42:59.000Z","valid_from":"2026-09-30T12:42:59.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/30/cve-2026-88772-netscaler-exploitation-zero-day/","article_title":"Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772)","article_url":"https://www.helpnetsecurity.com/2026/09/30/cve-2026-88772-netscaler-exploitation-zero-day/","published_at":"2026-09-30T12:33:38.000Z","valid_from":"2026-09-30T12:33:38.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-84411","source":"GBHackers","source_url":"https://gbhackers.com/critical-mikrotik-routeros-vulnerability/","article_title":"Critical MikroTik RouterOS Vulnerability Exposes Devices to Remote Code Execution","article_url":"https://gbhackers.com/critical-mikrotik-routeros-vulnerability/","published_at":"2026-09-30T12:02:10.000Z","valid_from":"2026-09-30T12:02:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76504","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/30/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/30/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-09-30T12:00:00.000Z","valid_from":"2026-09-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-102331","source":"GBHackers","source_url":"https://gbhackers.com/google-chrome-154-update/","article_title":"Google Chrome 154 Update Fixes 32 Security Flaws Including Critical ANGLE Bug","article_url":"https://gbhackers.com/google-chrome-154-update/","published_at":"2026-09-30T11:43:52.000Z","valid_from":"2026-09-30T11:43:52.000Z","origin":"rss"},{"type":"domain","value":"artifactory.nordix.org","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/30/openinfra-jfrog-artifactory-instance-compromised/","article_title":"OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised","article_url":"https://www.helpnetsecurity.com/2026/09/30/openinfra-jfrog-artifactory-instance-compromised/","published_at":"2026-09-30T10:39:26.000Z","valid_from":"2026-09-30T10:39:26.000Z","origin":"rss"},{"type":"url","value":"https://artifactory.nordix.org/","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/30/openinfra-jfrog-artifactory-instance-compromised/","article_title":"OpenInfra Europe’s JFrog Artifactory instance breached, packages potentially compromised","article_url":"https://www.helpnetsecurity.com/2026/09/30/openinfra-jfrog-artifactory-instance-compromised/","published_at":"2026-09-30T10:39:26.000Z","valid_from":"2026-09-30T10:39:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-citrix-netscaler-zero-day/","article_title":"Hackers Exploit Citrix NetScaler Zero-Day to Gain Root Access and Deploy Web Shells","article_url":"https://gbhackers.com/hackers-exploit-citrix-netscaler-zero-day/","published_at":"2026-09-30T09:47:33.000Z","valid_from":"2026-09-30T09:47:33.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81578","source":"GBHackers","source_url":"https://gbhackers.com/papercut-rce-chain/","article_title":"Attackers Use PaperCut RCE Chain to Steal Tokens and Access Domain Controller","article_url":"https://gbhackers.com/papercut-rce-chain/","published_at":"2026-09-30T09:33:11.000Z","valid_from":"2026-09-30T09:33:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82078","source":"GBHackers","source_url":"https://gbhackers.com/papercut-rce-chain/","article_title":"Attackers Use PaperCut RCE Chain to Steal Tokens and Access Domain Controller","article_url":"https://gbhackers.com/papercut-rce-chain/","published_at":"2026-09-30T09:33:11.000Z","valid_from":"2026-09-30T09:33:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86950","source":"Infosecurity Magazine","source_url":"https://www.infosecurity-magazine.com/news/apple-patches-coregraphics-zero/","article_title":"Apple Patches CoreGraphics Zero Day Exploited in Attacks","article_url":"https://www.infosecurity-magazine.com/news/apple-patches-coregraphics-zero/","published_at":"2026-09-30T08:45:00.000Z","valid_from":"2026-09-30T08:45:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86950","source":"Security Affairs","source_url":"https://securityaffairs.com/200069/security/u-s-cisa-adds-apple-multiple-products-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/200069/security/u-s-cisa-adds-apple-multiple-products-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-09-30T08:04:32.000Z","valid_from":"2026-09-30T08:04:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72018","source":"GBHackers","source_url":"https://gbhackers.com/linux-kernel-cve-2026-72018-flaw/","article_title":"Linux Kernel CVE-2026-72018 Flaw Lets Local Attackers Gain Root Access","article_url":"https://gbhackers.com/linux-kernel-cve-2026-72018-flaw/","published_at":"2026-09-30T07:46:51.000Z","valid_from":"2026-09-30T07:46:51.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"Security Affairs","source_url":"https://securityaffairs.com/200046/security/whipshot-and-slapshot-the-tools-behind-an-active-citrix-netscaler-campaign.html","article_title":"WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign","article_url":"https://securityaffairs.com/200046/security/whipshot-and-slapshot-the-tools-behind-an-active-citrix-netscaler-campaign.html","published_at":"2026-09-30T07:25:36.000Z","valid_from":"2026-09-30T07:25:36.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/citrix-netscaler-cve-2026-88772-exploit.html","article_title":"Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution","article_url":"https://thehackernews.com/2026/09/citrix-netscaler-cve-2026-88772-exploit.html","published_at":"2026-09-30T05:30:30.000Z","valid_from":"2026-09-30T05:30:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-84782","source":"GBHackers","source_url":"https://gbhackers.com/openssl-high-severity-flaw/","article_title":"OpenSSL High-Severity Flaw Lets Attackers Leak Heap Memory in Plaintext","article_url":"https://gbhackers.com/openssl-high-severity-flaw/","published_at":"2026-09-30T05:14:11.000Z","valid_from":"2026-09-30T05:14:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18145","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-750/","article_title":"ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-750/","published_at":"2026-09-30T05:00:00.000Z","valid_from":"2026-09-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13046","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-749/","article_title":"ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-749/","published_at":"2026-09-30T05:00:00.000Z","valid_from":"2026-09-30T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10116,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33384","article_title":"ISC Stormcast For Wednesday, September 30th, 2026 https://isc.sans.edu/podcastdetail/10116, (Wed, Sep 30th)","article_url":"https://isc.sans.edu/diary/rss/33384","published_at":"2026-09-30T02:00:03.000Z","valid_from":"2026-09-30T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-citrix-netscaler-zero-day-to-deploy-web-shells/","article_title":"Hackers exploit Citrix NetScaler zero-day to deploy web shells","article_url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-citrix-netscaler-zero-day-to-deploy-web-shells/","published_at":"2026-09-29T18:37:12.000Z","valid_from":"2026-09-29T18:37:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88771","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/29/netscaler-zero-day-exploitation-escalates-into-mass-attacks-cve-2026-88771/","article_title":"NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)","article_url":"https://www.helpnetsecurity.com/2026/09/29/netscaler-zero-day-exploitation-escalates-into-mass-attacks-cve-2026-88771/","published_at":"2026-09-29T14:59:06.000Z","valid_from":"2026-09-29T14:59:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86950","source":"Security Affairs","source_url":"https://securityaffairs.com/200001/hacking/apple-patches-coregraphics-zero-day-linked-to-sophisticated-targeted-attacks.html","article_title":"Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks","article_url":"https://securityaffairs.com/200001/hacking/apple-patches-coregraphics-zero-day-linked-to-sophisticated-targeted-attacks.html","published_at":"2026-09-29T13:28:24.000Z","valid_from":"2026-09-29T13:28:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-101169","source":"GBHackers","source_url":"https://gbhackers.com/octopus-server-flaw/","article_title":"Octopus Server Flaw Lets Authenticated Attackers Execute Arbitrary Code","article_url":"https://gbhackers.com/octopus-server-flaw/","published_at":"2026-09-29T12:40:26.000Z","valid_from":"2026-09-29T12:40:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-96274","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-04","article_title":"Baicells Nova 430H","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-04","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-84411","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-06","article_title":"MikroTik RouterOS","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-06","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-22755","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-03","article_title":"VIVOTEK Camera Firmware","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-03","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-100291","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","article_title":"Anjvision YSSD-RTMP-H5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-100292","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","article_title":"Anjvision YSSD-RTMP-H5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-100293","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","article_title":"Anjvision YSSD-RTMP-H5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-100294","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","article_title":"Anjvision YSSD-RTMP-H5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-100295","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","article_title":"Anjvision YSSD-RTMP-H5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-100296","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","article_title":"Anjvision YSSD-RTMP-H5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-100297","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","article_title":"Anjvision YSSD-RTMP-H5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-100298","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","article_title":"Anjvision YSSD-RTMP-H5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-100299","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","article_title":"Anjvision YSSD-RTMP-H5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-05","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-94204","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-07","article_title":"Viidure Dashcam Android Application","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-07","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-96587","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-07","article_title":"Viidure Dashcam Android Application","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-07","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71379","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","article_title":"Toptech TMS7 and TopHAT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-70356","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","article_title":"Toptech TMS7 and TopHAT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72510","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","article_title":"Toptech TMS7 and TopHAT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63713","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","article_title":"Toptech TMS7 and TopHAT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68954","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","article_title":"Toptech TMS7 and TopHAT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68068","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","article_title":"Toptech TMS7 and TopHAT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72507","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","article_title":"Toptech TMS7 and TopHAT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71302","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","article_title":"Toptech TMS7 and TopHAT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69662","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","article_title":"Toptech TMS7 and TopHAT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71189","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","article_title":"Toptech TMS7 and TopHAT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-84409","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-01","article_title":"Lantronix G520 Series Cellular Gateway","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-01","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91191","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-01","article_title":"Lantronix G520 Series Cellular Gateway","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-01","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86950","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/29/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/29/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-09-29T12:00:00.000Z","valid_from":"2026-09-29T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"chatgpt.com","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/29/malicious-chatgpt-custom-gpt-malware-via-clickfix/","article_title":"Malicious Custom GPT on chatgpt.com lures users into installing a RAT","article_url":"https://www.helpnetsecurity.com/2026/09/29/malicious-chatgpt-custom-gpt-malware-via-clickfix/","published_at":"2026-09-29T11:55:25.000Z","valid_from":"2026-09-29T11:55:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93302","source":"GBHackers","source_url":"https://gbhackers.com/wolfssl-5-9-4-patches-11-security-flaws/","article_title":"wolfSSL 5.9.4 Patches 11 Security Flaws Affecting TLS and Certificate Validation","article_url":"https://gbhackers.com/wolfssl-5-9-4-patches-11-security-flaws/","published_at":"2026-09-29T10:18:04.000Z","valid_from":"2026-09-29T10:18:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86950","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/29/apple-core-graphics-zero-day-cve-2026-86950-fixed/","article_title":"Apple squashes zero-day bug exploited in “extremely sophisticated” attack (CVE-2026-86950)","article_url":"https://www.helpnetsecurity.com/2026/09/29/apple-core-graphics-zero-day-cve-2026-86950-fixed/","published_at":"2026-09-29T09:50:55.000Z","valid_from":"2026-09-29T09:50:55.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86950","source":"GBHackers","source_url":"https://gbhackers.com/apple-fixes-ios-zero-day/","article_title":"Apple Fixes iOS Zero-Day Exploited in Sophisticated Targeted Attacks","article_url":"https://gbhackers.com/apple-fixes-ios-zero-day/","published_at":"2026-09-29T08:12:20.000Z","valid_from":"2026-09-29T08:12:20.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86950","source":"SecurityWeek","source_url":"https://www.securityweek.com/apple-patches-meta-reported-zero-day-linked-to-extremely-sophisticated-attack/","article_title":"Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’ ","article_url":"https://www.securityweek.com/apple-patches-meta-reported-zero-day-linked-to-extremely-sophisticated-attack/","published_at":"2026-09-29T06:18:27.000Z","valid_from":"2026-09-29T06:18:27.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10114,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33378","article_title":"ISC Stormcast For Tuesday, September 29th, 2026 https://isc.sans.edu/podcastdetail/10114, (Tue, Sep 29th)","article_url":"https://isc.sans.edu/diary/rss/33378","published_at":"2026-09-29T02:00:02.000Z","valid_from":"2026-09-29T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86950","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33376","article_title":"Apple Emergency Patch for iOS 26/macOS26/macOS15 (CVE-2026-86950), (Mon, Sep 28th)","article_url":"https://isc.sans.edu/diary/rss/33376","published_at":"2026-09-28T22:04:14.000Z","valid_from":"2026-09-28T22:04:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86950","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/apple-patches-coregraphics-flaw.html","article_title":"Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks","article_url":"https://thehackernews.com/2026/09/apple-patches-coregraphics-flaw.html","published_at":"2026-09-28T19:18:01.000Z","valid_from":"2026-09-28T19:18:01.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88771","source":"Unit 42","source_url":"https://unit42.paloaltonetworks.com/netscaler-zero-days-exploited/","article_title":"Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild","article_url":"https://unit42.paloaltonetworks.com/netscaler-zero-days-exploited/","published_at":"2026-09-28T15:02:04.000Z","valid_from":"2026-09-28T15:02:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"Unit 42","source_url":"https://unit42.paloaltonetworks.com/netscaler-zero-days-exploited/","article_title":"Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild","article_url":"https://unit42.paloaltonetworks.com/netscaler-zero-days-exploited/","published_at":"2026-09-28T15:02:04.000Z","valid_from":"2026-09-28T15:02:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35273","source":"GBHackers","source_url":"https://gbhackers.com/oracle-peoplesoft-servers/","article_title":"Oracle PeopleSoft Servers Targeted Again as ShinyHunters Expands Extortion Operations","article_url":"https://gbhackers.com/oracle-peoplesoft-servers/","published_at":"2026-09-28T11:36:17.000Z","valid_from":"2026-09-28T11:36:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35273","source":"SecurityWeek","source_url":"https://www.securityweek.com/google-warns-of-shinyhunters-fresh-oracle-peoplesoft-campaign/","article_title":"Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign","article_url":"https://www.securityweek.com/google-warns-of-shinyhunters-fresh-oracle-peoplesoft-campaign/","published_at":"2026-09-28T10:56:46.000Z","valid_from":"2026-09-28T10:56:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88771","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-zero-day-exploitation-of-citrix-netscaler-adc-and-gateway-cve-2026-88771-and-cve-2026-88772","article_title":"Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772","article_url":"https://www.rapid7.com/blog/post/etr-zero-day-exploitation-of-citrix-netscaler-adc-and-gateway-cve-2026-88771-and-cve-2026-88772","published_at":"2026-09-28T10:05:00.000Z","valid_from":"2026-09-28T10:05:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-zero-day-exploitation-of-citrix-netscaler-adc-and-gateway-cve-2026-88771-and-cve-2026-88772","article_title":"Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772","article_url":"https://www.rapid7.com/blog/post/etr-zero-day-exploitation-of-citrix-netscaler-adc-and-gateway-cve-2026-88771-and-cve-2026-88772","published_at":"2026-09-28T10:05:00.000Z","valid_from":"2026-09-28T10:05:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88771","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/28/citrix-netscaler-rce-zero-days-exploited-for-weeks-cve-2026-88771-cve-2026-88772/","article_title":"Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)","article_url":"https://www.helpnetsecurity.com/2026/09/28/citrix-netscaler-rce-zero-days-exploited-for-weeks-cve-2026-88771-cve-2026-88772/","published_at":"2026-09-28T09:51:32.000Z","valid_from":"2026-09-28T09:51:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/28/citrix-netscaler-rce-zero-days-exploited-for-weeks-cve-2026-88771-cve-2026-88772/","article_title":"Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)","article_url":"https://www.helpnetsecurity.com/2026/09/28/citrix-netscaler-rce-zero-days-exploited-for-weeks-cve-2026-88771-cve-2026-88772/","published_at":"2026-09-28T09:51:32.000Z","valid_from":"2026-09-28T09:51:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88771","source":"Security Affairs","source_url":"https://securityaffairs.com/199891/hacking/u-s-cisa-adds-citrix-netscaler-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/199891/hacking/u-s-cisa-adds-citrix-netscaler-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-09-28T08:55:22.000Z","valid_from":"2026-09-28T08:55:22.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0257","source":"GBHackers","source_url":"https://gbhackers.com/adaptixc2-deployment/","article_title":"Operation Master Exploits GlobalProtect CVE-2026-0257 and Deploys AdaptixC2 Across Enterprise Networks","article_url":"https://gbhackers.com/adaptixc2-deployment/","published_at":"2026-09-28T08:33:08.000Z","valid_from":"2026-09-28T08:33:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88771","source":"SecurityWeek","source_url":"https://www.securityweek.com/citrix-confirms-2-netscaler-zero-days-after-admins-pulled-the-plug/","article_title":"Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug","article_url":"https://www.securityweek.com/citrix-confirms-2-netscaler-zero-days-after-admins-pulled-the-plug/","published_at":"2026-09-28T07:29:51.000Z","valid_from":"2026-09-28T07:29:51.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"SecurityWeek","source_url":"https://www.securityweek.com/citrix-confirms-2-netscaler-zero-days-after-admins-pulled-the-plug/","article_title":"Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug","article_url":"https://www.securityweek.com/citrix-confirms-2-netscaler-zero-days-after-admins-pulled-the-plug/","published_at":"2026-09-28T07:29:51.000Z","valid_from":"2026-09-28T07:29:51.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88771","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/cisa-says-attackers-are-exploiting-two.html","article_title":"CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally","article_url":"https://thehackernews.com/2026/09/cisa-says-attackers-are-exploiting-two.html","published_at":"2026-09-28T07:21:49.000Z","valid_from":"2026-09-28T07:21:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48842","source":"Security Affairs","source_url":"https://securityaffairs.com/199882/security/roundcube-sql-injection-cve-2026-48842-is-now-being-exploited-in-the-wild.html","article_title":"Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild","article_url":"https://securityaffairs.com/199882/security/roundcube-sql-injection-cve-2026-48842-is-now-being-exploited-in-the-wild.html","published_at":"2026-09-28T05:50:32.000Z","valid_from":"2026-09-28T05:50:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88771","source":"GBHackers","source_url":"https://gbhackers.com/citrix-confirms-netscaler-zero-day-rce-flaws/","article_title":"Citrix Confirms NetScaler Zero-Day RCE Flaws Actively Exploited in Attacks","article_url":"https://gbhackers.com/citrix-confirms-netscaler-zero-day-rce-flaws/","published_at":"2026-09-28T05:03:19.000Z","valid_from":"2026-09-28T05:03:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"GBHackers","source_url":"https://gbhackers.com/citrix-confirms-netscaler-zero-day-rce-flaws/","article_title":"Citrix Confirms NetScaler Zero-Day RCE Flaws Actively Exploited in Attacks","article_url":"https://gbhackers.com/citrix-confirms-netscaler-zero-day-rce-flaws/","published_at":"2026-09-28T05:03:19.000Z","valid_from":"2026-09-28T05:03:19.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10112,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33374","article_title":"ISC Stormcast For Monday, September 28th, 2026 https://isc.sans.edu/podcastdetail/10112, (Mon, Sep 28th)","article_url":"https://isc.sans.edu/diary/rss/33374","published_at":"2026-09-28T02:00:02.000Z","valid_from":"2026-09-28T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88771","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-09-27T12:00:00.000Z","valid_from":"2026-09-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-09-27T12:00:00.000Z","valid_from":"2026-09-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88771","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","article_title":"Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","published_at":"2026-09-27T12:00:00.000Z","valid_from":"2026-09-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88772","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","article_title":"Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","published_at":"2026-09-27T12:00:00.000Z","valid_from":"2026-09-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88773","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","article_title":"Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","published_at":"2026-09-27T12:00:00.000Z","valid_from":"2026-09-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88774","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","article_title":"Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","published_at":"2026-09-27T12:00:00.000Z","valid_from":"2026-09-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88775","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","article_title":"Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","published_at":"2026-09-27T12:00:00.000Z","valid_from":"2026-09-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88776","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","article_title":"Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","published_at":"2026-09-27T12:00:00.000Z","valid_from":"2026-09-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88777","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","article_title":"Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","published_at":"2026-09-27T12:00:00.000Z","valid_from":"2026-09-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88778","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","article_title":"Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/27/critical-zero-day-vulnerabilities-exploited-citrix-netscaler-adc-gateway","published_at":"2026-09-27T12:00:00.000Z","valid_from":"2026-09-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65660","source":"SecurityWeek","source_url":"https://www.securityweek.com/microsoft-sharepoint-flaw-cve-2026-65660-now-exploited-in-attacks/","article_title":"Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks","article_url":"https://www.securityweek.com/microsoft-sharepoint-flaw-cve-2026-65660-now-exploited-in-attacks/","published_at":"2026-09-27T09:23:09.000Z","valid_from":"2026-09-27T09:23:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35273","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/","article_title":"ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks","article_url":"https://www.bleepingcomputer.com/news/security/shinyhunters-uses-waf-bypass-trick-in-oracle-peoplesoft-attacks/","published_at":"2026-09-26T19:03:34.000Z","valid_from":"2026-09-26T19:03:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35273","source":"HackRead","source_url":"https://hackread.com/shinyhunters-bypass-waf-rules-oracle-peoplesoft-attacks/","article_title":"ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks","article_url":"https://hackread.com/shinyhunters-bypass-waf-rules-oracle-peoplesoft-attacks/","published_at":"2026-09-26T13:36:11.000Z","valid_from":"2026-09-26T13:36:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35273","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/attackers-bypass-wafs-to-exploit-oracle.html","article_title":"Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells","article_url":"https://thehackernews.com/2026/09/attackers-bypass-wafs-to-exploit-oracle.html","published_at":"2026-09-26T11:46:40.000Z","valid_from":"2026-09-26T11:46:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65660","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html","article_title":"SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild","article_url":"https://thehackernews.com/2026/09/sharepoint-rce-and-mikrotik-routeros.html","published_at":"2026-09-26T08:49:53.000Z","valid_from":"2026-09-26T08:49:53.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60004","source":"GBHackers","source_url":"https://gbhackers.com/red-heron-exploits-critical-gitea-flaw/","article_title":"Red Heron Exploits Critical Gitea Flaw to Steal Repositories and Deploy Linux Rootkit","article_url":"https://gbhackers.com/red-heron-exploits-critical-gitea-flaw/","published_at":"2026-09-26T08:15:11.000Z","valid_from":"2026-09-26T08:15:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87902","source":"Security Affairs","source_url":"https://securityaffairs.com/199790/security/u-s-cisa-adds-wordpress-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds WordPress flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/199790/security/u-s-cisa-adds-wordpress-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-09-26T07:42:26.000Z","valid_from":"2026-09-26T07:42:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65660","source":"Security Affairs","source_url":"https://securityaffairs.com/199777/hacking/u-s-cisa-adds-microsoft-sharepoint-and-mikrotik-routeros-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Microsoft SharePoint and Mikrotik RouterOS flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/199777/hacking/u-s-cisa-adds-microsoft-sharepoint-and-mikrotik-routeros-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-09-25T21:03:44.000Z","valid_from":"2026-09-25T21:03:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5430","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/cisa-warns-of-sharepoint-wso2-adobe-commerce-flaws-exploited-in-attacks/","article_title":"CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks","article_url":"https://www.bleepingcomputer.com/news/security/cisa-warns-of-sharepoint-wso2-adobe-commerce-flaws-exploited-in-attacks/","published_at":"2026-09-25T17:24:20.000Z","valid_from":"2026-09-25T17:24:20.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-39964","source":"GBHackers","source_url":"https://gbhackers.com/14-year-old-linux-kernel-vulnerability/","article_title":"14-Year-Old Linux Kernel Vulnerability Enables Root Access and Docker Escape","article_url":"https://gbhackers.com/14-year-old-linux-kernel-vulnerability/","published_at":"2026-09-25T12:48:13.000Z","valid_from":"2026-09-25T12:48:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65660","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/25/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/25/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-09-25T12:00:00.000Z","valid_from":"2026-09-25T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-67279","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/25/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/25/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-09-25T12:00:00.000Z","valid_from":"2026-09-25T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87902","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/25/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/25/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-09-25T12:00:00.000Z","valid_from":"2026-09-25T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86857","source":"GBHackers","source_url":"https://gbhackers.com/servicenow-security-flaws/","article_title":"ServiceNow Security Flaws Allow Attackers to Execute SQL and Modify Instance Data","article_url":"https://gbhackers.com/servicenow-security-flaws/","published_at":"2026-09-25T10:58:04.000Z","valid_from":"2026-09-25T10:58:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86858","source":"GBHackers","source_url":"https://gbhackers.com/servicenow-security-flaws/","article_title":"ServiceNow Security Flaws Allow Attackers to Execute SQL and Modify Instance Data","article_url":"https://gbhackers.com/servicenow-security-flaws/","published_at":"2026-09-25T10:58:04.000Z","valid_from":"2026-09-25T10:58:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13016","source":"GBHackers","source_url":"https://gbhackers.com/servicenow-security-flaws/","article_title":"ServiceNow Security Flaws Allow Attackers to Execute SQL and Modify Instance Data","article_url":"https://gbhackers.com/servicenow-security-flaws/","published_at":"2026-09-25T10:58:04.000Z","valid_from":"2026-09-25T10:58:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86859","source":"GBHackers","source_url":"https://gbhackers.com/servicenow-security-flaws/","article_title":"ServiceNow Security Flaws Allow Attackers to Execute SQL and Modify Instance Data","article_url":"https://gbhackers.com/servicenow-security-flaws/","published_at":"2026-09-25T10:58:04.000Z","valid_from":"2026-09-25T10:58:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5430","source":"GBHackers","source_url":"https://gbhackers.com/cisa-flags-wso2-security-flaw/","article_title":"CISA Flags WSO2 Security Flaw Under Active Exploitation","article_url":"https://gbhackers.com/cisa-flags-wso2-security-flaw/","published_at":"2026-09-25T10:14:50.000Z","valid_from":"2026-09-25T10:14:50.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48842","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/roundcube-pre-auth-sql-injection-flaw.html","article_title":"Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild","article_url":"https://thehackernews.com/2026/09/roundcube-pre-auth-sql-injection-flaw.html","published_at":"2026-09-25T10:14:02.000Z","valid_from":"2026-09-25T10:14:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5430","source":"Security Affairs","source_url":"https://securityaffairs.com/199704/hacking/u-s-cisa-adds-adobe-and-wso2-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/199704/hacking/u-s-cisa-adds-adobe-and-wso2-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-09-25T08:22:47.000Z","valid_from":"2026-09-25T08:22:47.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-96512","source":"GBHackers","source_url":"https://gbhackers.com/sudo-vulnerability/","article_title":"Sudo Vulnerability Lets Attackers Bypass Time-Based Authorization Controls","article_url":"https://gbhackers.com/sudo-vulnerability/","published_at":"2026-09-25T07:26:40.000Z","valid_from":"2026-09-25T07:26:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48842","source":"SecurityWeek","source_url":"https://www.securityweek.com/roundcube-webmail-vulnerability-in-attackers-crosshairs/","article_title":"Roundcube Webmail Vulnerability in Attackers’ Crosshairs","article_url":"https://www.securityweek.com/roundcube-webmail-vulnerability-in-attackers-crosshairs/","published_at":"2026-09-25T06:57:40.000Z","valid_from":"2026-09-25T06:57:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5430","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/wso2-and-adobe-commerce-flaws-exploited.html","article_title":"WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV","article_url":"https://thehackernews.com/2026/09/wso2-and-adobe-commerce-flaws-exploited.html","published_at":"2026-09-25T04:46:34.000Z","valid_from":"2026-09-25T04:46:34.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10110,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33370","article_title":"ISC Stormcast For Friday, September 25th, 2026 https://isc.sans.edu/podcastdetail/10110, (Fri, Sep 25th)","article_url":"https://isc.sans.edu/diary/rss/33370","published_at":"2026-09-25T03:45:12.000Z","valid_from":"2026-09-25T03:45:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-94127","source":"SC Media","source_url":"https://www.scworld.com/brief/f5-patches-critical-zero-day-flaw-exploited-in-big-ip-apm","article_title":"F5 patches critical zero-day flaw exploited in BIG-IP APM","article_url":"https://www.scworld.com/brief/f5-patches-critical-zero-day-flaw-exploited-in-big-ip-apm","published_at":"2026-09-24T23:21:59.000Z","valid_from":"2026-09-24T23:21:59.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87902","source":"CSO Online","source_url":"https://www.csoonline.com/article/4226330/wordpress-patches-a-critical-severity-security-vulnerability.html","article_title":"WordPress patches a critical severity security vulnerability","article_url":"https://www.csoonline.com/article/4226330/wordpress-patches-a-critical-severity-security-vulnerability.html","published_at":"2026-09-24T20:26:22.000Z","valid_from":"2026-09-24T20:26:22.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-84399","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","article_title":"Botslab G980H Dashcams","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","published_at":"2026-09-24T12:00:00.000Z","valid_from":"2026-09-24T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82566","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","article_title":"Botslab G980H Dashcams","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","published_at":"2026-09-24T12:00:00.000Z","valid_from":"2026-09-24T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85496","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","article_title":"Botslab G980H Dashcams","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","published_at":"2026-09-24T12:00:00.000Z","valid_from":"2026-09-24T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-77967","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","article_title":"Botslab G980H Dashcams","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","published_at":"2026-09-24T12:00:00.000Z","valid_from":"2026-09-24T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88761","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","article_title":"Botslab G980H Dashcams","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","published_at":"2026-09-24T12:00:00.000Z","valid_from":"2026-09-24T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82716","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","article_title":"Botslab G980H Dashcams","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","published_at":"2026-09-24T12:00:00.000Z","valid_from":"2026-09-24T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-84403","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","article_title":"Botslab G980H Dashcams","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","published_at":"2026-09-24T12:00:00.000Z","valid_from":"2026-09-24T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75558","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","article_title":"Botslab G980H Dashcams","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-01","published_at":"2026-09-24T12:00:00.000Z","valid_from":"2026-09-24T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93289","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-02","article_title":"Eufy Omni C20, Omni X10 Pro","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-02","published_at":"2026-09-24T12:00:00.000Z","valid_from":"2026-09-24T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93290","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-02","article_title":"Eufy Omni C20, Omni X10 Pro","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-02","published_at":"2026-09-24T12:00:00.000Z","valid_from":"2026-09-24T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93291","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-02","article_title":"Eufy Omni C20, Omni X10 Pro","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-267-02","published_at":"2026-09-24T12:00:00.000Z","valid_from":"2026-09-24T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5430","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/24/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog     ","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/24/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-09-24T12:00:00.000Z","valid_from":"2026-09-24T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71362","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/24/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog     ","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/24/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-09-24T12:00:00.000Z","valid_from":"2026-09-24T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28324","source":"SecurityWeek","source_url":"https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/","article_title":"SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted","article_url":"https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/","published_at":"2026-09-24T10:40:40.000Z","valid_from":"2026-09-24T10:40:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28325","source":"SecurityWeek","source_url":"https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/","article_title":"SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted","article_url":"https://www.securityweek.com/solarwinds-patches-critical-rce-flaws-in-observability-self-hosted/","published_at":"2026-09-24T10:40:40.000Z","valid_from":"2026-09-24T10:40:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48842","source":"GBHackers","source_url":"https://gbhackers.com/roundcube-webmail-flaw/","article_title":"Roundcube Webmail Flaw Lets Attackers Trigger SQL Injection Without Authentication","article_url":"https://gbhackers.com/roundcube-webmail-flaw/","published_at":"2026-09-24T09:56:01.000Z","valid_from":"2026-09-24T09:56:01.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85102","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-check-point-vpn-rce-and-management-zero-day/","article_title":"Hackers Exploit Check Point VPN RCE and Management Zero-Day in Attacks","article_url":"https://gbhackers.com/hackers-exploit-check-point-vpn-rce-and-management-zero-day/","published_at":"2026-09-24T09:41:25.000Z","valid_from":"2026-09-24T09:41:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93616","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-check-point-vpn-rce-and-management-zero-day/","article_title":"Hackers Exploit Check Point VPN RCE and Management Zero-Day in Attacks","article_url":"https://gbhackers.com/hackers-exploit-check-point-vpn-rce-and-management-zero-day/","published_at":"2026-09-24T09:41:25.000Z","valid_from":"2026-09-24T09:41:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87902","source":"SecurityWeek","source_url":"https://www.securityweek.com/critical-wordpress-vulnerability-exploited-immediately-after-disclosure/","article_title":"Critical WordPress Vulnerability Exploited Immediately After Disclosure","article_url":"https://www.securityweek.com/critical-wordpress-vulnerability-exploited-immediately-after-disclosure/","published_at":"2026-09-24T07:12:26.000Z","valid_from":"2026-09-24T07:12:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68490","source":"GBHackers","source_url":"https://gbhackers.com/cpanel-permissions-flaw/","article_title":"cPanel Permissions Flaw Allows Local Users to Read Other Accounts’ Calendar Data","article_url":"https://gbhackers.com/cpanel-permissions-flaw/","published_at":"2026-09-24T07:08:28.000Z","valid_from":"2026-09-24T07:08:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87902","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/attackers-exploit-wordpress-cve-2026.html","article_title":"Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure","article_url":"https://thehackernews.com/2026/09/attackers-exploit-wordpress-cve-2026.html","published_at":"2026-09-24T05:36:18.000Z","valid_from":"2026-09-24T05:36:18.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10108,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33364","article_title":"ISC Stormcast For Thursday, September 24th, 2026 https://isc.sans.edu/podcastdetail/10108, (Thu, Sep 24th)","article_url":"https://isc.sans.edu/diary/rss/33364","published_at":"2026-09-24T03:50:11.000Z","valid_from":"2026-09-24T03:50:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85102","source":"CSO Online","source_url":"https://www.csoonline.com/article/4225812/check-point-hacked-the-security-software-protecting-your-network-has-become-a-prime-attack-target.html","article_title":"Check Point hacked: The security software protecting your network has become a prime attack target","article_url":"https://www.csoonline.com/article/4225812/check-point-hacked-the-security-software-protecting-your-network-has-become-a-prime-attack-target.html","published_at":"2026-09-24T02:05:30.000Z","valid_from":"2026-09-24T02:05:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86296","source":"SC Media","source_url":"https://www.scworld.com/brief/d-link-warns-of-critical-vulnerabilities-in-legacy-dir-822a-routers-with-public-exploit-code","article_title":"D-Link warns of critical vulnerabilities in legacy DIR-822A routers with public exploit code","article_url":"https://www.scworld.com/brief/d-link-warns-of-critical-vulnerabilities-in-legacy-dir-822a-routers-with-public-exploit-code","published_at":"2026-09-23T23:33:59.000Z","valid_from":"2026-09-23T23:33:59.000Z","origin":"rss"},{"type":"domain","value":"third-party.com","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/placeholder-domain-used-in-dev-docs-now-serves-clickfix-attacks/","article_title":"Placeholder domain used in dev docs now serves ClickFix attacks","article_url":"https://www.bleepingcomputer.com/news/security/placeholder-domain-used-in-dev-docs-now-serves-clickfix-attacks/","published_at":"2026-09-23T22:46:01.000Z","valid_from":"2026-09-23T22:46:01.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86553","source":"SC Media","source_url":"https://www.scworld.com/brief/zte-smartlife-platform-vulnerabilities-allow-account-takeover","article_title":"ZTE SmartLife platform vulnerabilities allow account takeover","article_url":"https://www.scworld.com/brief/zte-smartlife-platform-vulnerabilities-allow-account-takeover","published_at":"2026-09-23T22:44:38.000Z","valid_from":"2026-09-23T22:44:38.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85102","source":"Security Affairs","source_url":"https://securityaffairs.com/199631/hacking/u-s-cisa-adds-check-point-arista-velocloud-orchestrator-and-f5-big-ip-apm-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/199631/hacking/u-s-cisa-adds-check-point-arista-velocloud-orchestrator-and-f5-big-ip-apm-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-09-23T20:37:18.000Z","valid_from":"2026-09-23T20:37:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85102","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/check-point-warns-of-hackers-exploiting-security-gateway-vpn-rce-flaw/","article_title":"Check Point warns of hackers exploiting Security Gateway VPN RCE flaw","article_url":"https://www.bleepingcomputer.com/news/security/check-point-warns-of-hackers-exploiting-security-gateway-vpn-rce-flaw/","published_at":"2026-09-23T19:53:54.000Z","valid_from":"2026-09-23T19:53:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87902","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/hackers-start-exploiting-critical-wordpress-flaw-for-code-execution/","article_title":"Hackers start exploiting critical WordPress flaw for code execution","article_url":"https://www.bleepingcomputer.com/news/security/hackers-start-exploiting-critical-wordpress-flaw-for-code-execution/","published_at":"2026-09-23T18:31:22.000Z","valid_from":"2026-09-23T18:31:22.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-94127","source":"Security Affairs","source_url":"https://securityaffairs.com/199619/security/f5-big-ip-apm-zero-day-exploited-in-zero-day-rce-attacks.html","article_title":"F5 BIG-IP APM Zero-Day Exploited in Zero-Day RCE Attacks","article_url":"https://securityaffairs.com/199619/security/f5-big-ip-apm-zero-day-exploited-in-zero-day-rce-attacks.html","published_at":"2026-09-23T18:12:15.000Z","valid_from":"2026-09-23T18:12:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-67279","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/mikrotrick-chain-let-attackers-take.html","article_title":"MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key","article_url":"https://thehackernews.com/2026/09/mikrotrick-chain-let-attackers-take.html","published_at":"2026-09-23T16:06:41.000Z","valid_from":"2026-09-23T16:06:41.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86060","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/mikrotrick-chain-let-attackers-take.html","article_title":"MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key","article_url":"https://thehackernews.com/2026/09/mikrotrick-chain-let-attackers-take.html","published_at":"2026-09-23T16:06:41.000Z","valid_from":"2026-09-23T16:06:41.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-39682","source":"Qualys Blog","source_url":"https://blog.qualys.com/product-tech/2026/09/23/cisa-bod-26-04-timelines-for-three-linux-kernel-cves","article_title":"CISA BOD 26-04 Timelines for Three Linux Kernel CVEs","article_url":"https://blog.qualys.com/product-tech/2026/09/23/cisa-bod-26-04-timelines-for-three-linux-kernel-cves","published_at":"2026-09-23T15:00:00.000Z","valid_from":"2026-09-23T15:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53266","source":"Qualys Blog","source_url":"https://blog.qualys.com/product-tech/2026/09/23/cisa-bod-26-04-timelines-for-three-linux-kernel-cves","article_title":"CISA BOD 26-04 Timelines for Three Linux Kernel CVEs","article_url":"https://blog.qualys.com/product-tech/2026/09/23/cisa-bod-26-04-timelines-for-three-linux-kernel-cves","published_at":"2026-09-23T15:00:00.000Z","valid_from":"2026-09-23T15:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-39964","source":"Qualys Blog","source_url":"https://blog.qualys.com/product-tech/2026/09/23/cisa-bod-26-04-timelines-for-three-linux-kernel-cves","article_title":"CISA BOD 26-04 Timelines for Three Linux Kernel CVEs","article_url":"https://blog.qualys.com/product-tech/2026/09/23/cisa-bod-26-04-timelines-for-three-linux-kernel-cves","published_at":"2026-09-23T15:00:00.000Z","valid_from":"2026-09-23T15:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76708","source":"GBHackers","source_url":"https://gbhackers.com/hpe-networking-analytics-engine-flaws-let-attackers-gain-root-access/","article_title":"HPE Networking Analytics Engine Flaws Let Attackers Gain Root Access","article_url":"https://gbhackers.com/hpe-networking-analytics-engine-flaws-let-attackers-gain-root-access/","published_at":"2026-09-23T11:47:34.000Z","valid_from":"2026-09-23T11:47:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76709","source":"GBHackers","source_url":"https://gbhackers.com/hpe-networking-analytics-engine-flaws-let-attackers-gain-root-access/","article_title":"HPE Networking Analytics Engine Flaws Let Attackers Gain Root Access","article_url":"https://gbhackers.com/hpe-networking-analytics-engine-flaws-let-attackers-gain-root-access/","published_at":"2026-09-23T11:47:34.000Z","valid_from":"2026-09-23T11:47:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28324","source":"GBHackers","source_url":"https://gbhackers.com/solarwinds-observability-flaws/","article_title":"SolarWinds Observability Flaws Let Unauthenticated Attackers Execute Remote Code","article_url":"https://gbhackers.com/solarwinds-observability-flaws/","published_at":"2026-09-23T11:32:55.000Z","valid_from":"2026-09-23T11:32:55.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28325","source":"GBHackers","source_url":"https://gbhackers.com/solarwinds-observability-flaws/","article_title":"SolarWinds Observability Flaws Let Unauthenticated Attackers Execute Remote Code","article_url":"https://gbhackers.com/solarwinds-observability-flaws/","published_at":"2026-09-23T11:32:55.000Z","valid_from":"2026-09-23T11:32:55.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-80521","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/exploit-released-for-unpatched-ubuntu.html","article_title":"Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape","article_url":"https://thehackernews.com/2026/09/exploit-released-for-unpatched-ubuntu.html","published_at":"2026-09-23T11:12:18.000Z","valid_from":"2026-09-23T11:12:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93616","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/23/check-point-f5-big-ip-apm-zero-days-targeted/","article_title":"Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances","article_url":"https://www.helpnetsecurity.com/2026/09/23/check-point-f5-big-ip-apm-zero-days-targeted/","published_at":"2026-09-23T10:22:52.000Z","valid_from":"2026-09-23T10:22:52.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85102","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/23/check-point-f5-big-ip-apm-zero-days-targeted/","article_title":"Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances","article_url":"https://www.helpnetsecurity.com/2026/09/23/check-point-f5-big-ip-apm-zero-days-targeted/","published_at":"2026-09-23T10:22:52.000Z","valid_from":"2026-09-23T10:22:52.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-74849","source":"GBHackers","source_url":"https://gbhackers.com/manageengine-rce-flaw/","article_title":"ManageEngine RCE Flaw Enables SYSTEM Code Execution From Windows Login Screen","article_url":"https://gbhackers.com/manageengine-rce-flaw/","published_at":"2026-09-23T09:17:33.000Z","valid_from":"2026-09-23T09:17:33.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87902","source":"GBHackers","source_url":"https://gbhackers.com/critical-wordpress-flaw/","article_title":"Critical WordPress Flaw Lets Unauthenticated Attackers Execute Remote Code","article_url":"https://gbhackers.com/critical-wordpress-flaw/","published_at":"2026-09-23T09:10:16.000Z","valid_from":"2026-09-23T09:10:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87902","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/23/cve-2026-87902-wordpress-7-1-2-security-release/","article_title":"WordPress 7.1.2 fixes critical unauthenticated path traversal vulnerability (CVE-2026-87902)","article_url":"https://www.helpnetsecurity.com/2026/09/23/cve-2026-87902-wordpress-7-1-2-security-release/","published_at":"2026-09-23T09:01:45.000Z","valid_from":"2026-09-23T09:01:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65660","source":"GBHackers","source_url":"https://gbhackers.com/microsoft-sharepoint-flaw/","article_title":"Microsoft SharePoint Flaw Lets Low-Privilege Attackers Execute Remote Code","article_url":"https://gbhackers.com/microsoft-sharepoint-flaw/","published_at":"2026-09-23T08:53:20.000Z","valid_from":"2026-09-23T08:53:20.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-94127","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-94127-critical-unauthenticated-rce-in-f5-big-ip-apm","article_title":"CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-94127-critical-unauthenticated-rce-in-f5-big-ip-apm","published_at":"2026-09-23T08:43:39.000Z","valid_from":"2026-09-23T08:43:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-94127","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/f5-patches-critical-big-ip-apm-zero-day.html","article_title":"F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers","article_url":"https://thehackernews.com/2026/09/f5-patches-critical-big-ip-apm-zero-day.html","published_at":"2026-09-23T08:29:48.000Z","valid_from":"2026-09-23T08:29:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85046","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html","article_title":"Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware","article_url":"https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html","published_at":"2026-09-23T08:29:24.000Z","valid_from":"2026-09-23T08:29:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87491","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html","article_title":"Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware","article_url":"https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html","published_at":"2026-09-23T08:29:24.000Z","valid_from":"2026-09-23T08:29:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85880","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html","article_title":"Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware","article_url":"https://thehackernews.com/2026/09/chinese-hackers-exploit-chrome-windows.html","published_at":"2026-09-23T08:29:24.000Z","valid_from":"2026-09-23T08:29:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87902","source":"Security Affairs","source_url":"https://securityaffairs.com/199564/hacking/cve-2026-87902-how-close-is-your-wordpress-to-remote-code-execution.html","article_title":"CVE-2026-87902: how close is your WordPress to remote code execution?","article_url":"https://securityaffairs.com/199564/hacking/cve-2026-87902-how-close-is-your-wordpress-to-remote-code-execution.html","published_at":"2026-09-23T07:36:14.000Z","valid_from":"2026-09-23T07:36:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93616","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-check-point-0-day-flaw/","article_title":"Hackers Exploit Check Point 0-Day Flaw to Execute Code on Management Servers","article_url":"https://gbhackers.com/hackers-exploit-check-point-0-day-flaw/","published_at":"2026-09-23T05:17:22.000Z","valid_from":"2026-09-23T05:17:22.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91801","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-734/","article_title":"ZDI-26-734: Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-734/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91797","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-733/","article_title":"ZDI-26-733: Foxit PDF Reader Portfolio Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-733/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91796","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-732/","article_title":"ZDI-26-732: Foxit PDF Reader importIcon NTLM Response Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-732/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91795","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-731/","article_title":"ZDI-26-731: Foxit PDF Reader FileOpen Uninitialized Variable Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-731/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91794","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-730/","article_title":"ZDI-26-730: Foxit PDF Reader DeviceN Colorspace Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-730/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91793","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-729/","article_title":"ZDI-26-729: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-729/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57238","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-728/","article_title":"ZDI-26-728: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-728/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13128","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-727/","article_title":"ZDI-26-727: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-727/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13129","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-726/","article_title":"ZDI-26-726: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-726/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57256","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-725/","article_title":"ZDI-26-725: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-725/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91792","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-724/","article_title":"ZDI-26-724: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-724/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91790","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-723/","article_title":"ZDI-26-723: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-723/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91791","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-722/","article_title":"ZDI-26-722: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-722/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91789","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-721/","article_title":"ZDI-26-721: Foxit PDF Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-721/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91788","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-720/","article_title":"ZDI-26-720: Foxit PDF Reader activeDocs Missing Authorization Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-720/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-92202","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-748/","article_title":"ZDI-26-748: Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-748/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-96417","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-747/","article_title":"ZDI-26-747: Wireshark RF4CE Packet Parsing Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-747/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91818","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-746/","article_title":"ZDI-26-746: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-746/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91817","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-745/","article_title":"ZDI-26-745: Foxit PDF Reader AcroForm Out-of-Bounds Read Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-745/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91816","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-744/","article_title":"ZDI-26-744: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-744/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91815","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-743/","article_title":"ZDI-26-743: Foxit PDF Reader JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-743/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91813","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-742/","article_title":"ZDI-26-742: Foxit PDF Reader FoxitUpdater Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-742/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91812","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-741/","article_title":"ZDI-26-741: Foxit PDF Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-741/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91811","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-740/","article_title":"ZDI-26-740: Foxit PDF Reader PRC Stream Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-740/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91810","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-739/","article_title":"ZDI-26-739: Foxit PDF Reader Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-739/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91809","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-738/","article_title":"ZDI-26-738: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-738/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91808","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-737/","article_title":"ZDI-26-737: Foxit PDF Reader JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-737/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91807","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-736/","article_title":"ZDI-26-736: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-736/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91806","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-735/","article_title":"ZDI-26-735: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-735/","published_at":"2026-09-23T05:00:00.000Z","valid_from":"2026-09-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-94127","source":"GBHackers","source_url":"https://gbhackers.com/critical-f5-big-ip-apm-flaw/","article_title":"Critical F5 BIG-IP APM Flaw Actively Exploited for Remote Code Execution","article_url":"https://gbhackers.com/critical-f5-big-ip-apm-flaw/","published_at":"2026-09-23T04:52:42.000Z","valid_from":"2026-09-23T04:52:42.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10106,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33362","article_title":"ISC Stormcast For Wednesday, September 23rd, 2026 https://isc.sans.edu/podcastdetail/10106, (Wed, Sep 23rd)","article_url":"https://isc.sans.edu/diary/rss/33362","published_at":"2026-09-23T02:40:13.000Z","valid_from":"2026-09-23T02:40:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93616","source":"Security Affairs","source_url":"https://securityaffairs.com/199549/security/check-point-fixes-a-new-actively-exploited-critical-security-flaw.html","article_title":"Check Point Fixes a New Actively Exploited Critical Security Flaw","article_url":"https://securityaffairs.com/199549/security/check-point-fixes-a-new-actively-exploited-critical-security-flaw.html","published_at":"2026-09-22T19:31:40.000Z","valid_from":"2026-09-22T19:31:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93616","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/check-point-warns-of-management-server.html","article_title":"Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks","article_url":"https://thehackernews.com/2026/09/check-point-warns-of-management-server.html","published_at":"2026-09-22T18:29:39.000Z","valid_from":"2026-09-22T18:29:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-90898","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/critical-bifrost-ai-gateway-flaw-lets.html","article_title":"Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials","article_url":"https://thehackernews.com/2026/09/critical-bifrost-ai-gateway-flaw-lets.html","published_at":"2026-09-22T16:41:12.000Z","valid_from":"2026-09-22T16:41:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86296","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/d-link-warns-of-max-severity-zero-day-bug-in-dir-822a-routers/","article_title":"D-Link warns of max severity zero-day bug in DIR-822A routers","article_url":"https://www.bleepingcomputer.com/news/security/d-link-warns-of-max-severity-zero-day-bug-in-dir-822a-routers/","published_at":"2026-09-22T12:48:06.000Z","valid_from":"2026-09-22T12:48:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93952","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/new-cvss-100-velocloud-orchestrator.html","article_title":"New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups","article_url":"https://thehackernews.com/2026/09/new-cvss-100-velocloud-orchestrator.html","published_at":"2026-09-22T12:29:00.000Z","valid_from":"2026-09-22T12:29:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-89775","source":"GBHackers","source_url":"https://gbhackers.com/critical-linux-kvm-flaw/","article_title":"Critical Linux KVM Flaw Enables Guest-to-Host Escape on ARM64 Systems","article_url":"https://gbhackers.com/critical-linux-kvm-flaw/","published_at":"2026-09-22T12:26:58.000Z","valid_from":"2026-09-22T12:26:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18963","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-06","article_title":"Siemens Industrial Edge Management","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-06","published_at":"2026-09-22T12:00:00.000Z","valid_from":"2026-09-22T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-88020","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-09","article_title":"OpenPLC Runtime v3","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-09","published_at":"2026-09-22T12:00:00.000Z","valid_from":"2026-09-22T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"cgit.git.savannah.gnu.org","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-02","article_title":"lwIP (Lightweight IP)","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-02","published_at":"2026-09-22T12:00:00.000Z","valid_from":"2026-09-22T12:00:00.000Z","origin":"rss"},{"type":"url","value":"https://cgit.git.savannah.gnu.org/cgit/lwip.git.","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-02","article_title":"lwIP (Lightweight IP)","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-02","published_at":"2026-09-22T12:00:00.000Z","valid_from":"2026-09-22T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-89207","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-08","article_title":"Siemens WTV676 and WTV776","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-08","published_at":"2026-09-22T12:00:00.000Z","valid_from":"2026-09-22T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-31431","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-04","article_title":"Siemens SIPLUS and SIMATIC Products","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-04","published_at":"2026-09-22T12:00:00.000Z","valid_from":"2026-09-22T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-67367","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-07","article_title":"Siemens SIMOVE Fleetmanager and SIPLANT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-07","published_at":"2026-09-22T12:00:00.000Z","valid_from":"2026-09-22T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"savannah.nongnu.org","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-01","article_title":"lwIP TCP/IP Stack MQTT Client Application","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-01","published_at":"2026-09-22T12:00:00.000Z","valid_from":"2026-09-22T12:00:00.000Z","origin":"rss"},{"type":"url","value":"https://savannah.nongnu.org/projects/lwip.","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-01","article_title":"lwIP TCP/IP Stack MQTT Client Application","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-265-01","published_at":"2026-09-22T12:00:00.000Z","valid_from":"2026-09-22T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85102","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/22/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/22/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-09-22T12:00:00.000Z","valid_from":"2026-09-22T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93616","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/22/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/22/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-09-22T12:00:00.000Z","valid_from":"2026-09-22T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93952","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/22/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/22/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-09-22T12:00:00.000Z","valid_from":"2026-09-22T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-94127","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/22/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/22/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-09-22T12:00:00.000Z","valid_from":"2026-09-22T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-89775","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/new-linux-kernel-flaw-gives-arm64-kvm.html","article_title":"New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory","article_url":"https://thehackernews.com/2026/09/new-linux-kernel-flaw-gives-arm64-kvm.html","published_at":"2026-09-22T11:38:40.000Z","valid_from":"2026-09-22T11:38:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32996","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-veeam-agent-vulnerability/","article_title":"Hackers Exploit Veeam Agent Vulnerability to Gain SYSTEM-Level Access on Windows","article_url":"https://gbhackers.com/hackers-exploit-veeam-agent-vulnerability/","published_at":"2026-09-22T11:22:39.000Z","valid_from":"2026-09-22T11:22:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65660","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/sharepoint-flaw-initially-listed-as.html","article_title":"SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE","article_url":"https://thehackernews.com/2026/09/sharepoint-flaw-initially-listed-as.html","published_at":"2026-09-22T11:17:41.000Z","valid_from":"2026-09-22T11:17:41.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75939","source":"GBHackers","source_url":"https://gbhackers.com/red-hat-openshift-flaw/","article_title":"Red Hat OpenShift Flaw Lets Attackers Poison Disconnected Registries With Malicious Releases","article_url":"https://gbhackers.com/red-hat-openshift-flaw/","published_at":"2026-09-22T11:10:07.000Z","valid_from":"2026-09-22T11:10:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-77521","source":"GBHackers","source_url":"https://gbhackers.com/critical-maxkb-ai-agent-flaw/","article_title":"Critical MaxKB AI Agent Flaw Lets Prompt Injection Execute System Commands","article_url":"https://gbhackers.com/critical-maxkb-ai-agent-flaw/","published_at":"2026-09-22T10:43:40.000Z","valid_from":"2026-09-22T10:43:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-7273","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/22/zyxel-switches-cve-2026-7273-vulnerability-exploited/","article_title":"Attacker compromised nearly 1000 Zyxel switches since August (CVE-2026-7273)","article_url":"https://www.helpnetsecurity.com/2026/09/22/zyxel-switches-cve-2026-7273-vulnerability-exploited/","published_at":"2026-09-22T10:42:54.000Z","valid_from":"2026-09-22T10:42:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-7273","source":"Security Affairs","source_url":"https://securityaffairs.com/199518/hacking/u-s-cisa-adds-zyxel-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/199518/hacking/u-s-cisa-adds-zyxel-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-09-22T09:13:54.000Z","valid_from":"2026-09-22T09:13:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86296","source":"GBHackers","source_url":"https://gbhackers.com/d-link-dir-822a-router-vulnerability/","article_title":"D-Link DIR-822A Router Vulnerability Scores CVSS 10.0 With Public PoC Available","article_url":"https://gbhackers.com/d-link-dir-822a-router-vulnerability/","published_at":"2026-09-22T08:58:31.000Z","valid_from":"2026-09-22T08:58:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-7273","source":"GBHackers","source_url":"https://gbhackers.com/cisa-flags-actively-exploited-flaw/","article_title":"CISA Flags Actively Exploited Flaw in Zyxel GS1900 Switches","article_url":"https://gbhackers.com/cisa-flags-actively-exploited-flaw/","published_at":"2026-09-22T08:37:34.000Z","valid_from":"2026-09-22T08:37:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63030","source":"GBHackers","source_url":"https://gbhackers.com/wordpress-vulnerability-exploitation/","article_title":"Hackers Exploit WordPress CVE-2026-63030 and CVE-2026-60137 to Steal Government Data","article_url":"https://gbhackers.com/wordpress-vulnerability-exploitation/","published_at":"2026-09-22T06:40:37.000Z","valid_from":"2026-09-22T06:40:37.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60137","source":"GBHackers","source_url":"https://gbhackers.com/wordpress-vulnerability-exploitation/","article_title":"Hackers Exploit WordPress CVE-2026-63030 and CVE-2026-60137 to Steal Government Data","article_url":"https://gbhackers.com/wordpress-vulnerability-exploitation/","published_at":"2026-09-22T06:40:37.000Z","valid_from":"2026-09-22T06:40:37.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-93485","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/wordpress-comment2shell-flaw-can-turn.html","article_title":"WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session","article_url":"https://thehackernews.com/2026/09/wordpress-comment2shell-flaw-can-turn.html","published_at":"2026-09-22T06:03:14.000Z","valid_from":"2026-09-22T06:03:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-7273","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/zyxel-and-veeam-flaws-under-active.html","article_title":"Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access","article_url":"https://thehackernews.com/2026/09/zyxel-and-veeam-flaws-under-active.html","published_at":"2026-09-22T05:31:59.000Z","valid_from":"2026-09-22T05:31:59.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20350","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-719/","article_title":"ZDI-26-719: Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-719/","published_at":"2026-09-22T05:00:00.000Z","valid_from":"2026-09-22T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10104,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33356","article_title":"ISC Stormcast For Tuesday, September 22nd, 2026 https://isc.sans.edu/podcastdetail/10104, (Tue, Sep 22nd)","article_url":"https://isc.sans.edu/diary/rss/33356","published_at":"2026-09-22T03:50:10.000Z","valid_from":"2026-09-22T03:50:10.000Z","origin":"rss"},{"type":"domain","value":"crates.io","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/21/north-korean-hackers-contagious-interview-defenses/","article_title":"North Korea’s job interview scam runs both ways","article_url":"https://www.helpnetsecurity.com/2026/09/21/north-korean-hackers-contagious-interview-defenses/","published_at":"2026-09-21T12:27:05.000Z","valid_from":"2026-09-21T12:27:05.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-7273","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/21/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/21/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-09-21T12:00:00.000Z","valid_from":"2026-09-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66804","source":"Google Project Zero","source_url":"https://projectzero.google/2026/09/windows-dangling-com.html","article_title":"Windows Exploitation Techniques: Dangling COM Object Registrations","article_url":"https://projectzero.google/2026/09/windows-dangling-com.html","published_at":"2026-09-21T07:00:00.000Z","valid_from":"2026-09-21T07:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50343","source":"Google Project Zero","source_url":"https://projectzero.google/2026/09/windows-dangling-com.html","article_title":"Windows Exploitation Techniques: Dangling COM Object Registrations","article_url":"https://projectzero.google/2026/09/windows-dangling-com.html","published_at":"2026-09-21T07:00:00.000Z","valid_from":"2026-09-21T07:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10102,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33354","article_title":"ISC Stormcast For Monday, September 21st, 2026 https://isc.sans.edu/podcastdetail/10102, (Mon, Sep 21st)","article_url":"https://isc.sans.edu/diary/rss/33354","published_at":"2026-09-21T05:15:12.000Z","valid_from":"2026-09-21T05:15:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41940","source":"GBHackers","source_url":"https://gbhackers.com/cpanel-authentication-exploited/","article_title":"Hackers Abuse Critical cPanel Authentication Bypass to Compromise Hosting Servers","article_url":"https://gbhackers.com/cpanel-authentication-exploited/","published_at":"2026-09-21T05:06:37.000Z","valid_from":"2026-09-21T05:06:37.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28326","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html","article_title":"SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE","article_url":"https://thehackernews.com/2026/09/solarwinds-patches-arm-hard-coded-key.html","published_at":"2026-09-19T09:31:17.000Z","valid_from":"2026-09-19T09:31:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58138","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.html","article_title":"Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild","article_url":"https://thehackernews.com/2026/09/critical-pre-auth-rce-in-orkes.html","published_at":"2026-09-19T08:18:54.000Z","valid_from":"2026-09-19T08:18:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-39682","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/cisa-flags-three-linux-kernel.html","article_title":"CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild","article_url":"https://thehackernews.com/2026/09/cisa-flags-three-linux-kernel.html","published_at":"2026-09-19T06:24:10.000Z","valid_from":"2026-09-19T06:24:10.000Z","origin":"rss"},{"type":"domain","value":"wordpress.org","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/new-wordpress-click2shell-flaw-forces.html","article_title":"New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution","article_url":"https://thehackernews.com/2026/09/new-wordpress-click2shell-flaw-forces.html","published_at":"2026-09-18T16:56:19.000Z","valid_from":"2026-09-18T16:56:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85889","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html","article_title":"Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation","article_url":"https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html","published_at":"2026-09-18T12:47:04.000Z","valid_from":"2026-09-18T12:47:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-39964","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/18/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog    ","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/18/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-09-18T12:00:00.000Z","valid_from":"2026-09-18T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53266","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/18/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog    ","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/18/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-09-18T12:00:00.000Z","valid_from":"2026-09-18T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-39682","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/18/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/18/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-09-18T12:00:00.000Z","valid_from":"2026-09-18T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-80844","source":"GBHackers","source_url":"https://gbhackers.com/linux-kernel-hit-by-4-lpe-flaws/","article_title":"Linux Kernel Hit by 4 LPE Flaws Enabling Attackers to Gain Root Shell","article_url":"https://gbhackers.com/linux-kernel-hit-by-4-lpe-flaws/","published_at":"2026-09-18T10:22:48.000Z","valid_from":"2026-09-18T10:22:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81000","source":"GBHackers","source_url":"https://gbhackers.com/linux-kernel-hit-by-4-lpe-flaws/","article_title":"Linux Kernel Hit by 4 LPE Flaws Enabling Attackers to Gain Root Shell","article_url":"https://gbhackers.com/linux-kernel-hit-by-4-lpe-flaws/","published_at":"2026-09-18T10:22:48.000Z","valid_from":"2026-09-18T10:22:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68121","source":"GBHackers","source_url":"https://gbhackers.com/linux-kernel-hit-by-4-lpe-flaws/","article_title":"Linux Kernel Hit by 4 LPE Flaws Enabling Attackers to Gain Root Shell","article_url":"https://gbhackers.com/linux-kernel-hit-by-4-lpe-flaws/","published_at":"2026-09-18T10:22:48.000Z","valid_from":"2026-09-18T10:22:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-74469","source":"GBHackers","source_url":"https://gbhackers.com/linux-kernel-hit-by-4-lpe-flaws/","article_title":"Linux Kernel Hit by 4 LPE Flaws Enabling Attackers to Gain Root Shell","article_url":"https://gbhackers.com/linux-kernel-hit-by-4-lpe-flaws/","published_at":"2026-09-18T10:22:48.000Z","valid_from":"2026-09-18T10:22:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86863","source":"GBHackers","source_url":"https://gbhackers.com/critical-pgadmin-authentication-bypass/","article_title":"Critical pgAdmin Authentication Bypass Lets Attackers Login as Administrator Without Credentials","article_url":"https://gbhackers.com/critical-pgadmin-authentication-bypass/","published_at":"2026-09-18T09:31:53.000Z","valid_from":"2026-09-18T09:31:53.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58138","source":"SecurityWeek","source_url":"https://www.securityweek.com/critical-orkes-conductor-vulnerability-exploited-in-attacks/","article_title":"Critical Orkes Conductor Vulnerability Exploited in Attacks","article_url":"https://www.securityweek.com/critical-orkes-conductor-vulnerability-exploited-in-attacks/","published_at":"2026-09-18T08:42:18.000Z","valid_from":"2026-09-18T08:42:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91843","source":"Security Affairs","source_url":"https://securityaffairs.com/199279/security/check-point-fixes-critical-cve-2026-91843-allowing-root-code-execution.html","article_title":"Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution","article_url":"https://securityaffairs.com/199279/security/check-point-fixes-critical-cve-2026-91843-allowing-root-code-execution.html","published_at":"2026-09-18T07:52:41.000Z","valid_from":"2026-09-18T07:52:41.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20235","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-718/","article_title":"ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-718/","published_at":"2026-09-18T05:00:00.000Z","valid_from":"2026-09-18T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20211","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-717/","article_title":"ZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-717/","published_at":"2026-09-18T05:00:00.000Z","valid_from":"2026-09-18T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20176","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-716/","article_title":"ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-716/","published_at":"2026-09-18T05:00:00.000Z","valid_from":"2026-09-18T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19772","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-715/","article_title":"ZDI-26-715: Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-715/","published_at":"2026-09-18T05:00:00.000Z","valid_from":"2026-09-18T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10100,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33350","article_title":"ISC Stormcast For Friday, September 18th, 2026 https://isc.sans.edu/podcastdetail/10100, (Fri, Sep 18th)","article_url":"https://isc.sans.edu/diary/rss/33350","published_at":"2026-09-18T02:00:02.000Z","valid_from":"2026-09-18T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76460","source":"CSO Online","source_url":"https://www.csoonline.com/article/4223535/cisco-patches-max-severity-ise-flaw-the-second-critical-zero-day-this-week.html","article_title":"Cisco patches max-severity ISE flaw, the second critical zero-day this week","article_url":"https://www.csoonline.com/article/4223535/cisco-patches-max-severity-ise-flaw-the-second-critical-zero-day-this-week.html","published_at":"2026-09-17T21:03:58.000Z","valid_from":"2026-09-17T21:03:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-77179","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/critical-docker-sandboxes-flaw-lets.html","article_title":"Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files","article_url":"https://thehackernews.com/2026/09/critical-docker-sandboxes-flaw-lets.html","published_at":"2026-09-17T15:37:56.000Z","valid_from":"2026-09-17T15:37:56.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"Security Affairs","source_url":"https://securityaffairs.com/199267/apt/silkparasite-infrastructure-links-spicerat-to-central-asian-targets.html","article_title":"SilkParasite Infrastructure Links SpiceRAT to Central Asian Targets","article_url":"https://securityaffairs.com/199267/apt/silkparasite-infrastructure-links-spicerat-to-central-asian-targets.html","published_at":"2026-09-17T14:16:18.000Z","valid_from":"2026-09-17T14:16:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81642","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.html","article_title":"Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone","article_url":"https://thehackernews.com/2026/09/critical-unbound-dnssec-validator-flaw.html","published_at":"2026-09-17T12:30:00.000Z","valid_from":"2026-09-17T12:30:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15688","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-260-02","article_title":"Mitsubishi Electric GX Works3 and Motion Control Settings","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-260-02","published_at":"2026-09-17T12:00:00.000Z","valid_from":"2026-09-17T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"www.se.com","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-260-04","article_title":"Schneider Electric Modicon M340 Controller and Communication Modules","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-260-04","published_at":"2026-09-17T12:00:00.000Z","valid_from":"2026-09-17T12:00:00.000Z","origin":"rss"},{"type":"url","value":"https://www.se.com/ww/en/product-range/1468-modicon-m340-pac/,","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-260-04","article_title":"Schneider Electric Modicon M340 Controller and Communication Modules","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-260-04","published_at":"2026-09-17T12:00:00.000Z","valid_from":"2026-09-17T12:00:00.000Z","origin":"rss"},{"type":"url","value":"https://www.se.com/us/en/product/BMXNOR0200H/communication-module-modicon-m340-iec-608705101-104-dnp3-for-severe-environments/:","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-260-04","article_title":"Schneider Electric Modicon M340 Controller and Communication Modules","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-260-04","published_at":"2026-09-17T12:00:00.000Z","valid_from":"2026-09-17T12:00:00.000Z","origin":"rss"},{"type":"url","value":"https://www.se.com/us/en/product/BMXNGD0100/communication-module-modicon-m580-global-data-service/:","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-260-04","article_title":"Schneider Electric Modicon M340 Controller and Communication Modules","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-260-04","published_at":"2026-09-17T12:00:00.000Z","valid_from":"2026-09-17T12:00:00.000Z","origin":"rss"},{"type":"url","value":"https://www.se.c","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-260-04","article_title":"Schneider Electric Modicon M340 Controller and Communication Modules","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-260-04","published_at":"2026-09-17T12:00:00.000Z","valid_from":"2026-09-17T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76460","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/17/cisco-ise-vulnerability-exploited-cve-2026-76460/","article_title":"Unauthenticated attackers are bypassing Cisco ISE’s management interface (CVE-2026-76460)","article_url":"https://www.helpnetsecurity.com/2026/09/17/cisco-ise-vulnerability-exploited-cve-2026-76460/","published_at":"2026-09-17T10:24:08.000Z","valid_from":"2026-09-17T10:24:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76460","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-critical-cisco-ise-flaw/","article_title":"Hackers Exploit Critical Cisco ISE Flaw to Bypass Authentication and Gain Root Access","article_url":"https://gbhackers.com/hackers-exploit-critical-cisco-ise-flaw/","published_at":"2026-09-17T10:06:08.000Z","valid_from":"2026-09-17T10:06:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76460","source":"Security Affairs","source_url":"https://securityaffairs.com/199239/security/u-s-cisa-adds-acronis-backup-cisco-ise-and-google-pixel-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Acronis Backup, Cisco ISE, and Google Pixel flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/199239/security/u-s-cisa-adds-acronis-backup-cisco-ise-and-google-pixel-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-09-17T09:26:14.000Z","valid_from":"2026-09-17T09:26:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-77179","source":"GBHackers","source_url":"https://gbhackers.com/docker-sandboxes-vulnerabilities/","article_title":"Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Files","article_url":"https://gbhackers.com/docker-sandboxes-vulnerabilities/","published_at":"2026-09-17T07:17:56.000Z","valid_from":"2026-09-17T07:17:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-79994","source":"GBHackers","source_url":"https://gbhackers.com/docker-sandboxes-vulnerabilities/","article_title":"Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Files","article_url":"https://gbhackers.com/docker-sandboxes-vulnerabilities/","published_at":"2026-09-17T07:17:56.000Z","valid_from":"2026-09-17T07:17:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76460","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/cisco-warns-of-new-zero-day-ise-auth.html","article_title":"Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks","article_url":"https://thehackernews.com/2026/09/cisco-warns-of-new-zero-day-ise-auth.html","published_at":"2026-09-17T06:39:40.000Z","valid_from":"2026-09-17T06:39:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91843","source":"GBHackers","source_url":"https://gbhackers.com/critical-check-point-vulnerability/","article_title":"Critical Check Point Vulnerability Allows Remote Root Code Execution Without Authentication","article_url":"https://gbhackers.com/critical-check-point-vulnerability/","published_at":"2026-09-17T05:23:21.000Z","valid_from":"2026-09-17T05:23:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-91826","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-714/","article_title":"ZDI-26-714: Samsung rlottie Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-714/","published_at":"2026-09-17T05:00:00.000Z","valid_from":"2026-09-17T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10098,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33346","article_title":"ISC Stormcast For Thursday, September 17th, 2026 https://isc.sans.edu/podcastdetail/10098, (Thu, Sep 17th)","article_url":"https://isc.sans.edu/diary/rss/33346","published_at":"2026-09-17T02:00:03.000Z","valid_from":"2026-09-17T02:00:03.000Z","origin":"rss"},{"type":"domain","value":"radaris.com","source":"Krebs on Security","source_url":"https://krebsonsecurity.com/2026/09/data-broker-radaris-loses-domains-in-privacy-fight/","article_title":"Data Broker Radaris Loses Domains in Privacy Fight","article_url":"https://krebsonsecurity.com/2026/09/data-broker-radaris-loses-domains-in-privacy-fight/","published_at":"2026-09-16T18:14:22.000Z","valid_from":"2026-09-16T18:14:22.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20282","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-mult-vul-ymSsTLCc?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Authenticated%20Remote%20Code%20Execution%20and%20API%20Vulnerabilities%26vs_k=1","article_title":"Cisco Identity Services Engine Authenticated Remote Code Execution and API Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-mult-vul-ymSsTLCc?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Authenticated%20Remote%20Code%20Execution%20and%20API%20Vulnerabilities%26vs_k=1","published_at":"2026-09-16T16:00:00.000Z","valid_from":"2026-09-16T16:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20283","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-mult-vul-ymSsTLCc?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Authenticated%20Remote%20Code%20Execution%20and%20API%20Vulnerabilities%26vs_k=1","article_title":"Cisco Identity Services Engine Authenticated Remote Code Execution and API Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-mult-vul-ymSsTLCc?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Authenticated%20Remote%20Code%20Execution%20and%20API%20Vulnerabilities%26vs_k=1","published_at":"2026-09-16T16:00:00.000Z","valid_from":"2026-09-16T16:00:00.000Z","origin":"rss"},{"type":"domain","value":"sec.cloudapps.cisco.com","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-vuln-kWLeNnRD?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20802.1X%20Session%20Hijack%20and%20Information%20Disclosure%20Vulnerabilities%26vs_k=1","article_title":"Cisco Identity Services Engine 802.1X Session Hijack and Information Disclosure Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-vuln-kWLeNnRD?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20802.1X%20Session%20Hijack%20and%20Information%20Disclosure%20Vulnerabilities%26vs_k=1","published_at":"2026-09-16T16:00:00.000Z","valid_from":"2026-09-16T16:00:00.000Z","origin":"rss"},{"type":"url","value":"https://sec.cloudapps.cisco.com/sec","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-vuln-kWLeNnRD?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20802.1X%20Session%20Hijack%20and%20Information%20Disclosure%20Vulnerabilities%26vs_k=1","article_title":"Cisco Identity Services Engine 802.1X Session Hijack and Information Disclosure Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-vuln-kWLeNnRD?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20802.1X%20Session%20Hijack%20and%20Information%20Disclosure%20Vulnerabilities%26vs_k=1","published_at":"2026-09-16T16:00:00.000Z","valid_from":"2026-09-16T16:00:00.000Z","origin":"rss"},{"type":"url","value":"https://sec.cloudapps.","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-traversal-WDTgYCdn?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Multiple%20Path%20Traversal%20Vulnerabilities%26vs_k=1","article_title":"Cisco Identity Services Engine Multiple Path Traversal Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-traversal-WDTgYCdn?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20Multiple%20Path%20Traversal%20Vulnerabilities%26vs_k=1","published_at":"2026-09-16T16:00:00.000Z","valid_from":"2026-09-16T16:00:00.000Z","origin":"rss"},{"type":"domain","value":"sec.cloudapps.cisco.com","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc2-multivulns-HXgcqRG?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Firewall%20Management%20Center%20Software%20Vulnerabilities%26vs_k=1","article_title":"Cisco Secure Firewall Management Center Software Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc2-multivulns-HXgcqRG?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Firewall%20Management%20Center%20Software%20Vulnerabilities%26vs_k=1","published_at":"2026-09-16T16:00:00.000Z","valid_from":"2026-09-16T16:00:00.000Z","origin":"rss"},{"type":"url","value":"https://sec.cloudapps.cisco.com/securi","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc2-multivulns-HXgcqRG?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Firewall%20Management%20Center%20Software%20Vulnerabilities%26vs_k=1","article_title":"Cisco Secure Firewall Management Center Software Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc2-multivulns-HXgcqRG?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Secure%20Firewall%20Management%20Center%20Software%20Vulnerabilities%26vs_k=1","published_at":"2026-09-16T16:00:00.000Z","valid_from":"2026-09-16T16:00:00.000Z","origin":"rss"},{"type":"domain","value":"sec.cloudapps.cisco.com","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-sql-inj-3QTKR947?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20SQL%20Injection%20Vulnerabilities%26vs_k=1","article_title":"Cisco Identity Services Engine SQL Injection Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-sql-inj-3QTKR947?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20SQL%20Injection%20Vulnerabilities%26vs_k=1","published_at":"2026-09-16T16:00:00.000Z","valid_from":"2026-09-16T16:00:00.000Z","origin":"rss"},{"type":"url","value":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvis","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-sql-inj-3QTKR947?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20SQL%20Injection%20Vulnerabilities%26vs_k=1","article_title":"Cisco Identity Services Engine SQL Injection Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-sql-inj-3QTKR947?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Identity%20Services%20Engine%20SQL%20Injection%20Vulnerabilities%26vs_k=1","published_at":"2026-09-16T16:00:00.000Z","valid_from":"2026-09-16T16:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-89026","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/attackers-exploit-issabel-framework.html","article_title":"Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution","article_url":"https://thehackernews.com/2026/09/attackers-exploit-issabel-framework.html","published_at":"2026-09-16T15:50:59.000Z","valid_from":"2026-09-16T15:50:59.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58704","source":"Security Affairs","source_url":"https://securityaffairs.com/199193/hacking/google-patches-pixel-modem-zero-day-exploited-in-targeted-attacks.html","article_title":"Google Patches Pixel Modem Zero-Day Exploited in Targeted Attacks","article_url":"https://securityaffairs.com/199193/hacking/google-patches-pixel-modem-zero-day-exploited-in-targeted-attacks.html","published_at":"2026-09-16T13:43:53.000Z","valid_from":"2026-09-16T13:43:53.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58704","source":"SecurityWeek","source_url":"https://www.securityweek.com/pixel-modem-zero-day-exploited-in-targeted-attacks/","article_title":"Pixel Modem Zero-Day Exploited in Targeted Attacks","article_url":"https://www.securityweek.com/pixel-modem-zero-day-exploited-in-targeted-attacks/","published_at":"2026-09-16T13:10:54.000Z","valid_from":"2026-09-16T13:10:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-90894","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/16/parallels-desktop-cve-2026-90894-parashells-vulnerability/","article_title":"Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)","article_url":"https://www.helpnetsecurity.com/2026/09/16/parallels-desktop-cve-2026-90894-parashells-vulnerability/","published_at":"2026-09-16T12:36:30.000Z","valid_from":"2026-09-16T12:36:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15315","source":"GBHackers","source_url":"https://gbhackers.com/tp-link-tapo-camera-flaw/","article_title":"TP-Link Tapo Camera Flaw Lets Attackers Gain Admin Access Without Password","article_url":"https://gbhackers.com/tp-link-tapo-camera-flaw/","published_at":"2026-09-16T12:33:57.000Z","valid_from":"2026-09-16T12:33:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15316","source":"GBHackers","source_url":"https://gbhackers.com/tp-link-tapo-camera-flaw/","article_title":"TP-Link Tapo Camera Flaw Lets Attackers Gain Admin Access Without Password","article_url":"https://gbhackers.com/tp-link-tapo-camera-flaw/","published_at":"2026-09-16T12:33:57.000Z","valid_from":"2026-09-16T12:33:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58704","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/16/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/16/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-09-16T12:00:00.000Z","valid_from":"2026-09-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76460","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/16/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/16/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-09-16T12:00:00.000Z","valid_from":"2026-09-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87886","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/16/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/16/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-09-16T12:00:00.000Z","valid_from":"2026-09-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-90894","source":"GBHackers","source_url":"https://gbhackers.com/parallels-desktop-flaw/","article_title":"Parallels Desktop Flaw Lets Unprivileged Mac Users Gain Root Access","article_url":"https://gbhackers.com/parallels-desktop-flaw/","published_at":"2026-09-16T11:29:45.000Z","valid_from":"2026-09-16T11:29:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58704","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.html","article_title":"Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation","article_url":"https://thehackernews.com/2026/09/google-patches-pixel-modem-flaw-amid.html","published_at":"2026-09-16T11:15:58.000Z","valid_from":"2026-09-16T11:15:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87886","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html","article_title":"Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks","article_url":"https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html","published_at":"2026-09-16T11:08:54.000Z","valid_from":"2026-09-16T11:08:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87886","source":"GBHackers","source_url":"https://gbhackers.com/acronis-backup-plugin-vulnerability/","article_title":"Acronis Backup Plugin Vulnerability Exploited in the Wild to Gain Elevated Linux Privileges","article_url":"https://gbhackers.com/acronis-backup-plugin-vulnerability/","published_at":"2026-09-16T09:57:44.000Z","valid_from":"2026-09-16T09:57:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87886","source":"SecurityWeek","source_url":"https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/","article_title":"Acronis Patches Exploited Vulnerability in cPanel Backup Plugin","article_url":"https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/","published_at":"2026-09-16T09:52:31.000Z","valid_from":"2026-09-16T09:52:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87886","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/16/acronis-backup-plugin-vulnerability-exploited-cve-2026-87886/","article_title":"Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)","article_url":"https://www.helpnetsecurity.com/2026/09/16/acronis-backup-plugin-vulnerability-exploited-cve-2026-87886/","published_at":"2026-09-16T09:33:34.000Z","valid_from":"2026-09-16T09:33:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-23980","source":"GBHackers","source_url":"https://gbhackers.com/apache-superset-sql-injection-flaw/","article_title":"Apache Superset SQL Injection Flaw Gets Public PoC Exploit","article_url":"https://gbhackers.com/apache-superset-sql-injection-flaw/","published_at":"2026-09-16T09:23:31.000Z","valid_from":"2026-09-16T09:23:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5430","source":"SecurityWeek","source_url":"https://www.securityweek.com/enterprises-warned-of-attacks-exploiting-wso2-vulnerability/","article_title":"Enterprises Warned of Attacks Exploiting WSO2 Vulnerability","article_url":"https://www.securityweek.com/enterprises-warned-of-attacks-exploiting-wso2-vulnerability/","published_at":"2026-09-16T08:39:05.000Z","valid_from":"2026-09-16T08:39:05.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5430","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/active-exploitation-attempts-target.html","article_title":"Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens","article_url":"https://thehackernews.com/2026/09/active-exploitation-attempts-target.html","published_at":"2026-09-16T05:18:06.000Z","valid_from":"2026-09-16T05:18:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-92207","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-707/","article_title":"ZDI-26-707: (0Day) MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-707/","published_at":"2026-09-16T05:00:00.000Z","valid_from":"2026-09-16T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-92206","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-706/","article_title":"ZDI-26-706: (0Day) CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-706/","published_at":"2026-09-16T05:00:00.000Z","valid_from":"2026-09-16T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-92205","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-705/","article_title":"ZDI-26-705: (0Day) BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-705/","published_at":"2026-09-16T05:00:00.000Z","valid_from":"2026-09-16T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-92204","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-704/","article_title":"ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-704/","published_at":"2026-09-16T05:00:00.000Z","valid_from":"2026-09-16T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-92203","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-703/","article_title":"ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-703/","published_at":"2026-09-16T05:00:00.000Z","valid_from":"2026-09-16T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-92183","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-713/","article_title":"ZDI-26-713: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-713/","published_at":"2026-09-16T05:00:00.000Z","valid_from":"2026-09-16T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-92210","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-712/","article_title":"ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-712/","published_at":"2026-09-16T05:00:00.000Z","valid_from":"2026-09-16T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-92209","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-711/","article_title":"ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-711/","published_at":"2026-09-16T05:00:00.000Z","valid_from":"2026-09-16T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-92208","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-710/","article_title":"ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-710/","published_at":"2026-09-16T05:00:00.000Z","valid_from":"2026-09-16T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20242","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-709/","article_title":"ZDI-26-709: Cisco Secure Firewall Management Center CommandSinkRmi Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-709/","published_at":"2026-09-16T05:00:00.000Z","valid_from":"2026-09-16T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10096,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33342","article_title":"ISC Stormcast For Wednesday, September 16th, 2026 https://isc.sans.edu/podcastdetail/10096, (Wed, Sep 16th)","article_url":"https://isc.sans.edu/diary/rss/33342","published_at":"2026-09-16T02:00:02.000Z","valid_from":"2026-09-16T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76461","source":"Security Affairs","source_url":"https://securityaffairs.com/199156/security/u-s-cisa-adds-cisco-secure-email-gateway-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Cisco Secure Email Gateway flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/199156/security/u-s-cisa-adds-cisco-secure-email-gateway-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-09-15T20:46:41.000Z","valid_from":"2026-09-15T20:46:41.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76461","source":"CSO Online","source_url":"https://www.csoonline.com/article/4222391/critical-cisco-secure-email-gateway-zero-day-gives-attackers-root-access.html","article_title":"Critical Cisco Secure Email Gateway zero-day gives attackers root access","article_url":"https://www.csoonline.com/article/4222391/critical-cisco-secure-email-gateway-zero-day-gives-attackers-root-access.html","published_at":"2026-09-15T19:56:58.000Z","valid_from":"2026-09-15T19:56:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-39364","source":"SC Media","source_url":"https://www.scworld.com/brief/mass-scanning-campaign-targets-vite-development-servers-for-cloud-credentials","article_title":"Mass scanning campaign targets Vite development servers for cloud credentials","article_url":"https://www.scworld.com/brief/mass-scanning-campaign-targets-vite-development-servers-for-cloud-credentials","published_at":"2026-09-15T15:29:00.000Z","valid_from":"2026-09-15T15:29:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82079","source":"SC Media","source_url":"https://www.scworld.com/brief/nintendo-patches-critical-nintendo-switch-vulnerability","article_title":"Nintendo patches critical Nintendo Switch vulnerability","article_url":"https://www.scworld.com/brief/nintendo-patches-critical-nintendo-switch-vulnerability","published_at":"2026-09-15T15:23:00.000Z","valid_from":"2026-09-15T15:23:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76461","source":"Security Affairs","source_url":"https://securityaffairs.com/199137/hacking/cisco-warns-of-ongoing-exploitation-of-critical-email-gateway-zero-day.html","article_title":"Cisco Warns of Ongoing Exploitation of Critical Email Gateway Zero-Day","article_url":"https://securityaffairs.com/199137/hacking/cisco-warns-of-ongoing-exploitation-of-critical-email-gateway-zero-day.html","published_at":"2026-09-15T13:00:32.000Z","valid_from":"2026-09-15T13:00:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76461","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-76461-critical-cisco-secure-email-gateway-vulnerability-exploited-in-the-wild","article_title":"CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-76461-critical-cisco-secure-email-gateway-vulnerability-exploited-in-the-wild","published_at":"2026-09-15T12:22:50.000Z","valid_from":"2026-09-15T12:22:50.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27540","source":"GBHackers","source_url":"https://gbhackers.com/woocommerce-plugin-vulnerability/","article_title":"Hackers Actively Exploit Critical WooCommerce Plugin Vulnerability to Upload PHP Backdoors","article_url":"https://gbhackers.com/woocommerce-plugin-vulnerability/","published_at":"2026-09-15T12:05:55.000Z","valid_from":"2026-09-15T12:05:55.000Z","origin":"rss"},{"type":"ipv4","value":"2.0.3.1","source":"GBHackers","source_url":"https://gbhackers.com/woocommerce-plugin-vulnerability/","article_title":"Hackers Actively Exploit Critical WooCommerce Plugin Vulnerability to Upload PHP Backdoors","article_url":"https://gbhackers.com/woocommerce-plugin-vulnerability/","published_at":"2026-09-15T12:05:55.000Z","valid_from":"2026-09-15T12:05:55.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68953","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01","article_title":"Digital Watchdog VMAX DVR and NVR Product Lineups","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66890","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01","article_title":"Digital Watchdog VMAX DVR and NVR Product Lineups","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68070","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01","article_title":"Digital Watchdog VMAX DVR and NVR Product Lineups","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68950","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01","article_title":"Digital Watchdog VMAX DVR and NVR Product Lineups","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66887","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01","article_title":"Digital Watchdog VMAX DVR and NVR Product Lineups","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66372","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01","article_title":"Digital Watchdog VMAX DVR and NVR Product Lineups","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-01","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73807","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-03","article_title":"mySCADA myPRO Manager","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-03","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82567","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-03","article_title":"mySCADA myPRO Manager","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-03","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-80465","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-06","article_title":"Siemens Mendix SAML","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-06","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-78225","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-02","article_title":"Wärtsilä FOS-Onboard","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-02","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81855","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-02","article_title":"Wärtsilä FOS-Onboard","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-02","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2024-42384","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","article_title":"Siemens Reyrolle 7SR5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2024-42385","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","article_title":"Siemens Reyrolle 7SR5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2024-42386","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","article_title":"Siemens Reyrolle 7SR5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2024-42391","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","article_title":"Siemens Reyrolle 7SR5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2024-42392","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","article_title":"Siemens Reyrolle 7SR5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62645","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","article_title":"Siemens Reyrolle 7SR5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62646","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","article_title":"Siemens Reyrolle 7SR5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62647","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","article_title":"Siemens Reyrolle 7SR5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62648","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","article_title":"Siemens Reyrolle 7SR5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62649","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","article_title":"Siemens Reyrolle 7SR5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62650","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","article_title":"Siemens Reyrolle 7SR5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62652","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","article_title":"Siemens Reyrolle 7SR5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62653","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","article_title":"Siemens Reyrolle 7SR5","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05","published_at":"2026-09-15T12:00:00.000Z","valid_from":"2026-09-15T12:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"6.17.4.1","source":"GBHackers","source_url":"https://gbhackers.com/wordpress-events-calendar-vulnerabilities/","article_title":"WordPress Events Calendar Vulnerabilities Let Hackers Take Over 600,000 Websites","article_url":"https://gbhackers.com/wordpress-events-calendar-vulnerabilities/","published_at":"2026-09-15T11:24:16.000Z","valid_from":"2026-09-15T11:24:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76461","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/15/cve-2026-76461-cisco-email-gateway-zero-day-exploited/","article_title":"Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)","article_url":"https://www.helpnetsecurity.com/2026/09/15/cve-2026-76461-cisco-email-gateway-zero-day-exploited/","published_at":"2026-09-15T11:09:48.000Z","valid_from":"2026-09-15T11:09:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-39987","source":"GBHackers","source_url":"https://gbhackers.com/marimo-rce-flaw/","article_title":"Marimo RCE Flaw Lets Hackers Steal AWS Credentials and Pivot to Bastion Host in 8 Seconds","article_url":"https://gbhackers.com/marimo-rce-flaw/","published_at":"2026-09-15T09:58:24.000Z","valid_from":"2026-09-15T09:58:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43502","source":"GBHackers","source_url":"https://gbhackers.com/linux-kernel-zcopyreaper-vulnerability/","article_title":"Linux Kernel ZcopyReaper Vulnerability Lets Local Attackers Gain Root Privileges","article_url":"https://gbhackers.com/linux-kernel-zcopyreaper-vulnerability/","published_at":"2026-09-15T08:18:47.000Z","valid_from":"2026-09-15T08:18:47.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82079","source":"GBHackers","source_url":"https://gbhackers.com/nintendo-switch-qr-code-vulnerability/","article_title":"Nintendo Switch QR Code Vulnerability Lets Nearby Attackers Execute Unauthorized Code","article_url":"https://gbhackers.com/nintendo-switch-qr-code-vulnerability/","published_at":"2026-09-15T06:19:11.000Z","valid_from":"2026-09-15T06:19:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76461","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/cisco-secure-email-gateway-flaw.html","article_title":"Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution","article_url":"https://thehackernews.com/2026/09/cisco-secure-email-gateway-flaw.html","published_at":"2026-09-15T06:11:11.000Z","valid_from":"2026-09-15T06:11:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-39364","source":"GBHackers","source_url":"https://gbhackers.com/mass-scanning-targets-exposed-vite-servers-to-steal-aws-keys/","article_title":"Mass Scanning Targets Exposed Vite Servers to Steal AWS Keys and Azure Tokens","article_url":"https://gbhackers.com/mass-scanning-targets-exposed-vite-servers-to-steal-aws-keys/","published_at":"2026-09-15T05:35:50.000Z","valid_from":"2026-09-15T05:35:50.000Z","origin":"rss"},{"type":"cve","value":"CVE-2024-21762","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-fortigate-ssl-vpn-flaw/","article_title":"Hackers Exploit FortiGate SSL-VPN Flaw to Breach Thai ISP and Deploy MeshCentral Backdoor","article_url":"https://gbhackers.com/hackers-exploit-fortigate-ssl-vpn-flaw/","published_at":"2026-09-15T05:20:47.000Z","valid_from":"2026-09-15T05:20:47.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-fortigate-ssl-vpn-flaw/","article_title":"Hackers Exploit FortiGate SSL-VPN Flaw to Breach Thai ISP and Deploy MeshCentral Backdoor","article_url":"https://gbhackers.com/hackers-exploit-fortigate-ssl-vpn-flaw/","published_at":"2026-09-15T05:20:47.000Z","valid_from":"2026-09-15T05:20:47.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76461","source":"SecurityWeek","source_url":"https://www.securityweek.com/root-rce-zero-day-in-cisco-secure-email-gateway-under-active-exploitation/","article_title":"Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation","article_url":"https://www.securityweek.com/root-rce-zero-day-in-cisco-secure-email-gateway-under-active-exploitation/","published_at":"2026-09-15T05:18:51.000Z","valid_from":"2026-09-15T05:18:51.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76461","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-critical-cisco-secure-email-gateway-flaw/","article_title":"Hackers Exploit Critical Cisco Secure Email Gateway Flaw to Execute Commands as Root","article_url":"https://gbhackers.com/hackers-exploit-critical-cisco-secure-email-gateway-flaw/","published_at":"2026-09-15T05:01:35.000Z","valid_from":"2026-09-15T05:01:35.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10094,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33338","article_title":"ISC Stormcast For Tuesday, September 15th, 2026 https://isc.sans.edu/podcastdetail/10094, (Tue, Sep 15th)","article_url":"https://isc.sans.edu/diary/rss/33338","published_at":"2026-09-15T02:25:12.000Z","valid_from":"2026-09-15T02:25:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85706","source":"CSO Online","source_url":"https://www.csoonline.com/article/4221934/a-maximum-severity-gitlab-flaw-could-turn-your-ci-cd-server-into-an-attackers-treasure-trove.html","article_title":"A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove","article_url":"https://www.csoonline.com/article/4221934/a-maximum-severity-gitlab-flaw-could-turn-your-ci-cd-server-into-an-attackers-treasure-trove.html","published_at":"2026-09-15T00:52:55.000Z","valid_from":"2026-09-15T00:52:55.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/3bb-attacker-used-meshcentral-backdoor.html","article_title":"3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials","article_url":"https://thehackernews.com/2026/09/3bb-attacker-used-meshcentral-backdoor.html","published_at":"2026-09-14T18:01:49.000Z","valid_from":"2026-09-14T18:01:49.000Z","origin":"rss"},{"type":"domain","value":"wordpress.org","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/wordpress-adds-automated-plugin-reviews.html","article_title":"WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution","article_url":"https://thehackernews.com/2026/09/wordpress-adds-automated-plugin-reviews.html","published_at":"2026-09-14T16:00:04.000Z","valid_from":"2026-09-14T16:00:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42016","source":"Security Affairs","source_url":"https://securityaffairs.com/199032/security/u-s-cisa-adds-gitlab-jfrog-artifactory-and-connectwise-screenconnect-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/199032/security/u-s-cisa-adds-gitlab-jfrog-artifactory-and-connectwise-screenconnect-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-09-14T14:08:02.000Z","valid_from":"2026-09-14T14:08:02.000Z","origin":"rss"},{"type":"ipv4","value":"1.1.1.1","source":"SC Media","source_url":"https://www.scworld.com/brief/cloudflare-adds-post-quantum-dnssec-validation-to-1-1-1-1","article_title":"Cloudflare adds post-quantum DNSSEC validation to 1.1.1.1","article_url":"https://www.scworld.com/brief/cloudflare-adds-post-quantum-dnssec-validation-to-1-1-1-1","published_at":"2026-09-14T13:27:00.000Z","valid_from":"2026-09-14T13:27:00.000Z","origin":"rss"},{"type":"domain","value":"idscan.net","source":"Check Point Research","source_url":"https://research.checkpoint.com/2026/14th-september-threat-intelligence-report/","article_title":"14th September – Threat Intelligence Report","article_url":"https://research.checkpoint.com/2026/14th-september-threat-intelligence-report/","published_at":"2026-09-14T12:22:06.000Z","valid_from":"2026-09-14T12:22:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76461","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/14/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/14/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-09-14T12:00:00.000Z","valid_from":"2026-09-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85706","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-85706-critical-gitlab-path-traversal-exploited-in-the-wild","article_title":"CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-85706-critical-gitlab-path-traversal-exploited-in-the-wild","published_at":"2026-09-14T10:02:57.000Z","valid_from":"2026-09-14T10:02:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-51990","source":"GBHackers","source_url":"https://gbhackers.com/grayrabbit-backdoor/","article_title":"China-Linked Hackers Exploit Sogou One-Click RCE to Deploy GRAYRABBIT Backdoor","article_url":"https://gbhackers.com/grayrabbit-backdoor/","published_at":"2026-09-14T08:09:26.000Z","valid_from":"2026-09-14T08:09:26.000Z","origin":"rss"},{"type":"ipv4","value":"2.26.36.5","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/14/whatsapp-restricted-chat-feature/","article_title":"WhatsApp Restricted Chat locks a conversation to your primary phone","article_url":"https://www.helpnetsecurity.com/2026/09/14/whatsapp-restricted-chat-feature/","published_at":"2026-09-14T08:08:04.000Z","valid_from":"2026-09-14T08:08:04.000Z","origin":"rss"},{"type":"domain","value":"jeetbot.cc","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/malicious-twitch-browser-extension.html","article_title":"Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users","article_url":"https://thehackernews.com/2026/09/malicious-twitch-browser-extension.html","published_at":"2026-09-14T07:24:39.000Z","valid_from":"2026-09-14T07:24:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-74565","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-686/","article_title":"ZDI-26-686: Linux Kernel nftables Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-686/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-38416","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-685/","article_title":"ZDI-26-685: Linux Kernel NFC NCI UART Driver Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-685/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64397","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-684/","article_title":"ZDI-26-684: Linux Kernel KSMBD Query Directory Request Race Condition Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-684/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72463","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-683/","article_title":"ZDI-26-683: Linux Kernel IPv6 VTI Subsystem Use-After-Free Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-683/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43040","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-682/","article_title":"ZDI-26-682: Linux Kernel IPv6 Neighbour Discovery Uninitialized Memory Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-682/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64265","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-681/","article_title":"ZDI-26-681: Linux Kernel FUSE Subsystem Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-681/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-31719","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-680/","article_title":"ZDI-26-680: Linux Kernel Crypto Subsystem Use-After-Free Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-680/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-22050","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-702/","article_title":"ZDI-26-702: Linux Kernel usbnet Driver Race Condition Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-702/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64046","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-701/","article_title":"ZDI-26-701: Linux Kernel TLS Protocol Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-701/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-22999","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-700/","article_title":"ZDI-26-700: Linux Kernel QFQ Plus Scheduler Use-After-Free Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-700/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72196","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-696/","article_title":"ZDI-26-696: Linux Kernel NTFS3 Journal Heap-based Buffer Overflow Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-696/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-89688","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-695/","article_title":"ZDI-26-695: Linux Kernel NFSv4 Server Race Condition Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-695/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-23413","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-694/","article_title":"ZDI-26-694: Linux Kernel Net Scheduler Clsact Qdisc Use-After-Free Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-694/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-31583","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-692/","article_title":"ZDI-26-692: Linux Kernel eMPIA USB Device Driver Race Condition Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-692/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53182","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-691/","article_title":"ZDI-26-691: Linux Kernel Netlink-based Wireless Configuration Integer Overflow Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-691/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45930","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-690/","article_title":"ZDI-26-690: Linux Kernel MCTP Routing Uninitialized Memory Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-690/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-46227","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-689/","article_title":"ZDI-26-689: Linux Kernel SCTP Subsystem Race Condition Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-689/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-74465","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-688/","article_title":"ZDI-26-688: Linux Kernel OpenvSwitch Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-688/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-80994","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-687/","article_title":"ZDI-26-687: Linux Kernel Open vSwitch Flow Delete Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-687/","published_at":"2026-09-14T05:00:00.000Z","valid_from":"2026-09-14T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10092,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33334","article_title":"ISC Stormcast For Monday, September 14th, 2026 https://isc.sans.edu/podcastdetail/10092, (Mon, Sep 14th)","article_url":"https://isc.sans.edu/diary/rss/33334","published_at":"2026-09-14T02:00:03.000Z","valid_from":"2026-09-14T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-51990","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/","article_title":"Hackers exploit Tencent app flaw to deploy GrayRabbit malware","article_url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/","published_at":"2026-09-13T14:26:32.000Z","valid_from":"2026-09-13T14:26:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85706","source":"Security Affairs","source_url":"https://securityaffairs.com/198945/hacking/gitlab-cve-2026-85706-one-http-request-no-authentication-full-file-read-exploited-within-24-hours.html","article_title":"GitLab CVE-2026-85706: One HTTP Request, No Authentication, Full File Read – Exploited Within 24 Hours","article_url":"https://securityaffairs.com/198945/hacking/gitlab-cve-2026-85706-one-http-request-no-authentication-full-file-read-exploited-within-24-hours.html","published_at":"2026-09-13T12:26:54.000Z","valid_from":"2026-09-13T12:26:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42016","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html","article_title":"CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV","article_url":"https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html","published_at":"2026-09-12T15:54:45.000Z","valid_from":"2026-09-12T15:54:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85102","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent/","article_title":"Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent","article_url":"https://www.bleepingcomputer.com/news/security/dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent/","published_at":"2026-09-12T14:14:32.000Z","valid_from":"2026-09-12T14:14:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85103","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent/","article_title":"Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent","article_url":"https://www.bleepingcomputer.com/news/security/dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent/","published_at":"2026-09-12T14:14:32.000Z","valid_from":"2026-09-12T14:14:32.000Z","origin":"rss"},{"type":"domain","value":"mend.io","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/openai-agents-linked-to-rubygems.html","article_title":"OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers","article_url":"https://thehackernews.com/2026/09/openai-agents-linked-to-rubygems.html","published_at":"2026-09-12T09:07:56.000Z","valid_from":"2026-09-12T09:07:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85706","source":"GBHackers","source_url":"https://gbhackers.com/cisa-warns-of-critical-gitlab-vulnerability-exploited-in-attacks/","article_title":"CISA Warns of Critical GitLab Vulnerability Exploited in Attacks","article_url":"https://gbhackers.com/cisa-warns-of-critical-gitlab-vulnerability-exploited-in-attacks/","published_at":"2026-09-12T05:17:40.000Z","valid_from":"2026-09-12T05:17:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85706","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/gitlab-cvss-10-file-read-flaw-draws-in.html","article_title":"GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure","article_url":"https://thehackernews.com/2026/09/gitlab-cvss-10-file-read-flaw-draws-in.html","published_at":"2026-09-11T16:30:18.000Z","valid_from":"2026-09-11T16:30:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-84869","source":"CSO Online","source_url":"https://www.csoonline.com/article/4221263/connectwise-patches-critical-screenconnect-authentication-failure-after-five-days-2.html","article_title":"ConnectWise patches critical ScreenConnect authentication failure after five days","article_url":"https://www.csoonline.com/article/4221263/connectwise-patches-critical-screenconnect-authentication-failure-after-five-days-2.html","published_at":"2026-09-11T16:17:07.000Z","valid_from":"2026-09-11T16:17:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56711","source":"GBHackers","source_url":"https://gbhackers.com/vlc-media-player-flaws/","article_title":"VLC Media Player Flaws Let Attackers Corrupt Memory and Leak Sensitive Data","article_url":"https://gbhackers.com/vlc-media-player-flaws/","published_at":"2026-09-11T12:03:52.000Z","valid_from":"2026-09-11T12:03:52.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42016","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-09-11T12:00:00.000Z","valid_from":"2026-09-11T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42018","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-09-11T12:00:00.000Z","valid_from":"2026-09-11T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-84869","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-09-11T12:00:00.000Z","valid_from":"2026-09-11T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85706","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/11/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/11/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-09-11T12:00:00.000Z","valid_from":"2026-09-11T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-67277","source":"GBHackers","source_url":"https://gbhackers.com/cisa-adds-exploited-mikrotik-routeros-flaws/","article_title":"CISA Adds Exploited MikroTik RouterOS Flaws to Security Alert","article_url":"https://gbhackers.com/cisa-adds-exploited-mikrotik-routeros-flaws/","published_at":"2026-09-11T11:57:40.000Z","valid_from":"2026-09-11T11:57:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86060","source":"GBHackers","source_url":"https://gbhackers.com/cisa-adds-exploited-mikrotik-routeros-flaws/","article_title":"CISA Adds Exploited MikroTik RouterOS Flaws to Security Alert","article_url":"https://gbhackers.com/cisa-adds-exploited-mikrotik-routeros-flaws/","published_at":"2026-09-11T11:57:40.000Z","valid_from":"2026-09-11T11:57:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65638","source":"GBHackers","source_url":"https://gbhackers.com/cpanel-urges-users-to-patch-configserver-firewall/","article_title":"cPanel Urges Users to Patch ConfigServer Firewall Remote Code Execution Flaw","article_url":"https://gbhackers.com/cpanel-urges-users-to-patch-configserver-firewall/","published_at":"2026-09-11T11:20:03.000Z","valid_from":"2026-09-11T11:20:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2023-2825","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/gitlab-urges-users-to-patch-max-severity-path-traversal-flaw/","article_title":"GitLab urges users to patch max severity path traversal flaw","article_url":"https://www.bleepingcomputer.com/news/security/gitlab-urges-users-to-patch-max-severity-path-traversal-flaw/","published_at":"2026-09-11T11:15:22.000Z","valid_from":"2026-09-11T11:15:22.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85102","source":"SecurityWeek","source_url":"https://www.securityweek.com/check-point-patches-critical-vpn-vulnerabilities/","article_title":"Check Point Patches Critical VPN Vulnerabilities","article_url":"https://www.securityweek.com/check-point-patches-critical-vpn-vulnerabilities/","published_at":"2026-09-11T11:10:02.000Z","valid_from":"2026-09-11T11:10:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85103","source":"SecurityWeek","source_url":"https://www.securityweek.com/check-point-patches-critical-vpn-vulnerabilities/","article_title":"Check Point Patches Critical VPN Vulnerabilities","article_url":"https://www.securityweek.com/check-point-patches-critical-vpn-vulnerabilities/","published_at":"2026-09-11T11:10:02.000Z","valid_from":"2026-09-11T11:10:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20079","source":"Security Affairs","source_url":"https://securityaffairs.com/198884/cyber-crime/attackers-exploit-critical-cisco-fmc-flaw-to-deploy-qilin-ransomware.html","article_title":"Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware","article_url":"https://securityaffairs.com/198884/cyber-crime/attackers-exploit-critical-cisco-fmc-flaw-to-deploy-qilin-ransomware.html","published_at":"2026-09-11T10:14:46.000Z","valid_from":"2026-09-11T10:14:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42016","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-jfrog-artifactory-flaws/","article_title":"Hackers Exploit JFrog Artifactory Flaws to Bypass Authentication and Gain Admin Access","article_url":"https://gbhackers.com/hackers-exploit-jfrog-artifactory-flaws/","published_at":"2026-09-11T09:59:29.000Z","valid_from":"2026-09-11T09:59:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42018","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-jfrog-artifactory-flaws/","article_title":"Hackers Exploit JFrog Artifactory Flaws to Bypass Authentication and Gain Admin Access","article_url":"https://gbhackers.com/hackers-exploit-jfrog-artifactory-flaws/","published_at":"2026-09-11T09:59:29.000Z","valid_from":"2026-09-11T09:59:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82329","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-jfrog-artifactory-flaws/","article_title":"Hackers Exploit JFrog Artifactory Flaws to Bypass Authentication and Gain Admin Access","article_url":"https://gbhackers.com/hackers-exploit-jfrog-artifactory-flaws/","published_at":"2026-09-11T09:59:29.000Z","valid_from":"2026-09-11T09:59:29.000Z","origin":"rss"},{"type":"domain","value":"idscan.net","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/11/idscan-net-data-breach-153-million-drivers-licenses/","article_title":"IDScan confirms breach after 153 million driver’s licenses leak on dark web","article_url":"https://www.helpnetsecurity.com/2026/09/11/idscan-net-data-breach-153-million-drivers-licenses/","published_at":"2026-09-11T08:39:33.000Z","valid_from":"2026-09-11T08:39:33.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"Security Affairs","source_url":"https://securityaffairs.com/198864/hacking/uk-council-attack-linked-to-mass-exploitation-of-sonicwall-flaw.html","article_title":"UK Council Attack Linked to Mass Exploitation of SonicWall Flaw","article_url":"https://securityaffairs.com/198864/hacking/uk-council-attack-linked-to-mass-exploitation-of-sonicwall-flaw.html","published_at":"2026-09-11T07:11:14.000Z","valid_from":"2026-09-11T07:11:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20079","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html","article_title":"Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware","article_url":"https://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html","published_at":"2026-09-11T06:19:59.000Z","valid_from":"2026-09-11T06:19:59.000Z","origin":"rss"},{"type":"domain","value":"wordpress.org","source":"GBHackers","source_url":"https://gbhackers.com/wordpress-blocks-high-risk-plugin-releases/","article_title":"WordPress Blocks High-Risk Plugin Releases With New AI-Powered Automated Security Review","article_url":"https://gbhackers.com/wordpress-blocks-high-risk-plugin-releases/","published_at":"2026-09-11T05:49:09.000Z","valid_from":"2026-09-11T05:49:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20079","source":"GBHackers","source_url":"https://gbhackers.com/critical-cisco-fmc-flaws-actively-exploited/","article_title":"Critical Cisco FMC Flaws Actively Exploited to Gain Root Access and Deploy Malware","article_url":"https://gbhackers.com/critical-cisco-fmc-flaws-actively-exploited/","published_at":"2026-09-11T05:30:08.000Z","valid_from":"2026-09-11T05:30:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85102","source":"GBHackers","source_url":"https://gbhackers.com/critical-check-point-vpn-flaws/","article_title":"Critical Check Point VPN Flaws Let Unauthenticated Attackers Execute Remote Code","article_url":"https://gbhackers.com/critical-check-point-vpn-flaws/","published_at":"2026-09-11T05:23:12.000Z","valid_from":"2026-09-11T05:23:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85103","source":"GBHackers","source_url":"https://gbhackers.com/critical-check-point-vpn-flaws/","article_title":"Critical Check Point VPN Flaws Let Unauthenticated Attackers Execute Remote Code","article_url":"https://gbhackers.com/critical-check-point-vpn-flaws/","published_at":"2026-09-11T05:23:12.000Z","valid_from":"2026-09-11T05:23:12.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10090,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33330","article_title":"ISC Stormcast For Friday, September 11th, 2026 https://isc.sans.edu/podcastdetail/10090, (Fri, Sep 11th)","article_url":"https://isc.sans.edu/diary/rss/33330","published_at":"2026-09-11T02:00:02.000Z","valid_from":"2026-09-11T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-80428","source":"Exploit Database","source_url":"https://www.exploit-db.com/exploits/52682","article_title":"[remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE","article_url":"https://www.exploit-db.com/exploits/52682","published_at":"2026-09-11T00:00:00.000Z","valid_from":"2026-09-11T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20079","source":"Security Affairs","source_url":"https://securityaffairs.com/198850/uncategorized/u-s-cisa-adds-cisco-google-chromium-v8-fortinet-and-citrix-netscaler-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/198850/uncategorized/u-s-cisa-adds-cisco-google-chromium-v8-fortinet-and-citrix-netscaler-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-09-10T18:57:21.000Z","valid_from":"2026-09-10T18:57:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20079","source":"Security Affairs","source_url":"https://securityaffairs.com/198850/security/u-s-cisa-adds-cisco-google-chromium-v8-fortinet-and-citrix-netscaler-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Cisco, Google Chromium V8, Fortinet, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/198850/security/u-s-cisa-adds-cisco-google-chromium-v8-fortinet-and-citrix-netscaler-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-09-10T18:57:21.000Z","valid_from":"2026-09-10T18:57:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-20701","source":"SC Media","source_url":"https://www.scworld.com/brief/skullcandy-dime-3-earbuds-vulnerable-to-bluetooth-hijacking","article_title":"Skullcandy Dime 3 earbuds vulnerable to Bluetooth hijacking","article_url":"https://www.scworld.com/brief/skullcandy-dime-3-earbuds-vulnerable-to-bluetooth-hijacking","published_at":"2026-09-10T13:38:44.000Z","valid_from":"2026-09-10T13:38:44.000Z","origin":"rss"},{"type":"ipv4","value":"1.0.0.28","source":"SC Media","source_url":"https://www.scworld.com/brief/skullcandy-dime-3-earbuds-vulnerable-to-bluetooth-hijacking","article_title":"Skullcandy Dime 3 earbuds vulnerable to Bluetooth hijacking","article_url":"https://www.scworld.com/brief/skullcandy-dime-3-earbuds-vulnerable-to-bluetooth-hijacking","published_at":"2026-09-10T13:38:44.000Z","valid_from":"2026-09-10T13:38:44.000Z","origin":"rss"},{"type":"ipv4","value":"1.1.1.1","source":"Cloudflare Blog","source_url":"https://blog.cloudflare.com/post-quantum-dnssec-1111/","article_title":"1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it","article_url":"https://blog.cloudflare.com/post-quantum-dnssec-1111/","published_at":"2026-09-10T13:00:00.000Z","valid_from":"2026-09-10T13:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19490","source":"SecurityWeek","source_url":"https://www.securityweek.com/critical-netscaler-vulnerability-exploited-in-attacks/","article_title":"Critical NetScaler Vulnerability Exploited in Attacks","article_url":"https://www.securityweek.com/critical-netscaler-vulnerability-exploited-in-attacks/","published_at":"2026-09-10T12:20:21.000Z","valid_from":"2026-09-10T12:20:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87020","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-02","article_title":"Orthanc DICOM Server","article_url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-02","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82583","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01","article_title":"NextGen Healthcare Mirth Connect","article_url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-78224","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01","article_title":"NextGen Healthcare Mirth Connect","article_url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82578","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01","article_title":"NextGen Healthcare Mirth Connect","article_url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-38059","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01","article_title":"ST Engineering iDirect iQ-Series Terminals (Update A)","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-38057","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01","article_title":"ST Engineering iDirect iQ-Series Terminals (Update A)","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-38056","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01","article_title":"ST Engineering iDirect iQ-Series Terminals (Update A)","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-38058","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01","article_title":"ST Engineering iDirect iQ-Series Terminals (Update A)","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"4.5.2.1","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01","article_title":"ST Engineering iDirect iQ-Series Terminals (Update A)","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81821","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01","article_title":"AVEVA Pipeline Integrity Monitor","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81822","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01","article_title":"AVEVA Pipeline Integrity Monitor","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81823","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01","article_title":"AVEVA Pipeline Integrity Monitor","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81824","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01","article_title":"AVEVA Pipeline Integrity Monitor","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-67277","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/10/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/10/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86060","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/10/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/10/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-09-10T12:00:00.000Z","valid_from":"2026-09-10T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0310","source":"GBHackers","source_url":"https://gbhackers.com/palo-alto-pan-os-buffer-overflow/","article_title":"Palo Alto PAN-OS Buffer Overflow Lets Attackers Execute Arbitrary Code as Root","article_url":"https://gbhackers.com/palo-alto-pan-os-buffer-overflow/","published_at":"2026-09-10T11:39:18.000Z","valid_from":"2026-09-10T11:39:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20079","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/10/cisco-fmc-exploited-cve-2026-20079-cve-2026-20316/","article_title":"Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)","article_url":"https://www.helpnetsecurity.com/2026/09/10/cisco-fmc-exploited-cve-2026-20079-cve-2026-20316/","published_at":"2026-09-10T11:22:38.000Z","valid_from":"2026-09-10T11:22:38.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/10/cisco-fmc-exploited-cve-2026-20079-cve-2026-20316/","article_title":"Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)","article_url":"https://www.helpnetsecurity.com/2026/09/10/cisco-fmc-exploited-cve-2026-20079-cve-2026-20316/","published_at":"2026-09-10T11:22:38.000Z","valid_from":"2026-09-10T11:22:38.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20079","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/cisa-flags-exploited-cisco-citrix.html","article_title":"CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline","article_url":"https://thehackernews.com/2026/09/cisa-flags-exploited-cisco-citrix.html","published_at":"2026-09-10T10:36:46.000Z","valid_from":"2026-09-10T10:36:46.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10088,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33328","article_title":"ISC Stormcast For Thursday, September 10th, 2026 https://isc.sans.edu/podcastdetail/10088, (Thu, Sep 10th)","article_url":"https://isc.sans.edu/diary/rss/33328","published_at":"2026-09-10T10:10:11.000Z","valid_from":"2026-09-10T10:10:11.000Z","origin":"rss"},{"type":"domain","value":"wordpress.org","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/10/wordpress-automated-plugin-security-review/","article_title":"WordPress adds automated security checks to block risky plugin releases","article_url":"https://www.helpnetsecurity.com/2026/09/10/wordpress-automated-plugin-security-review/","published_at":"2026-09-10T10:06:31.000Z","valid_from":"2026-09-10T10:06:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20079","source":"SecurityWeek","source_url":"https://www.securityweek.com/organizations-warned-of-cisco-secure-fmc-exploitation/","article_title":"Organizations Warned of Cisco Secure FMC Exploitation","article_url":"https://www.securityweek.com/organizations-warned-of-cisco-secure-fmc-exploitation/","published_at":"2026-09-10T10:06:20.000Z","valid_from":"2026-09-10T10:06:20.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75650","source":"Security Affairs","source_url":"https://securityaffairs.com/198802/hacking/u-s-cisa-adds-microsoft-windows-n-able-n-central-and-adobe-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/198802/hacking/u-s-cisa-adds-microsoft-windows-n-able-n-central-and-adobe-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-09-10T08:06:19.000Z","valid_from":"2026-09-10T08:06:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-25249","source":"SecurityWeek","source_url":"https://www.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/","article_title":"Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks","article_url":"https://www.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/","published_at":"2026-09-10T06:33:36.000Z","valid_from":"2026-09-10T06:33:36.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81578","source":"GBHackers","source_url":"https://gbhackers.com/hackers-deploy-hundreds-of-ai-agents/","article_title":"Hackers Deploy Hundreds of AI Agents to Compromise 440 PaperCut Servers","article_url":"https://gbhackers.com/hackers-deploy-hundreds-of-ai-agents/","published_at":"2026-09-10T05:20:30.000Z","valid_from":"2026-09-10T05:20:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82078","source":"GBHackers","source_url":"https://gbhackers.com/hackers-deploy-hundreds-of-ai-agents/","article_title":"Hackers Deploy Hundreds of AI Agents to Compromise 440 PaperCut Servers","article_url":"https://gbhackers.com/hackers-deploy-hundreds-of-ai-agents/","published_at":"2026-09-10T05:20:30.000Z","valid_from":"2026-09-10T05:20:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75862","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-679/","article_title":"ZDI-26-679: Adobe Photoshop DCM JPEG Image Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-679/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75863","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-678/","article_title":"ZDI-26-678: Adobe Photoshop DCM File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-678/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75771","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-677/","article_title":"ZDI-26-677: Adobe Photoshop DCM JPEG-LS Image Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-677/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81973","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-676/","article_title":"ZDI-26-676: Adobe Acrobat Reader DC DigSig Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-676/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81976","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-675/","article_title":"ZDI-26-675: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-675/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81981","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-674/","article_title":"ZDI-26-674: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-674/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81988","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-673/","article_title":"ZDI-26-673: Adobe Acrobat Pro DC Doc Object Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-673/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81977","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-672/","article_title":"ZDI-26-672: Adobe Acrobat Reader DC PDF File Parsing Integer Underflow Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-672/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-80161","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-671/","article_title":"ZDI-26-671: Adobe Acrobat Reader DC Dialog Object Type Confusion Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-671/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81991","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-670/","article_title":"ZDI-26-670: Adobe Acrobat Pro DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-670/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81978","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-669/","article_title":"ZDI-26-669: Adobe Acrobat Reader DC JBIG2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-669/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81984","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-668/","article_title":"ZDI-26-668: Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-668/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81975","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-667/","article_title":"ZDI-26-667: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-667/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-79910","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-666/","article_title":"ZDI-26-666: Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-666/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-79909","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-665/","article_title":"ZDI-26-665: Adobe Acrobat Reader DC Annots Report Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-665/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81986","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-664/","article_title":"ZDI-26-664: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-664/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81989","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-663/","article_title":"ZDI-26-663: Adobe Acrobat Pro DC Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-663/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81990","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-662/","article_title":"ZDI-26-662: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-662/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81985","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-661/","article_title":"ZDI-26-661: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-661/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-80162","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-660/","article_title":"ZDI-26-660: Adobe Acrobat Reader DC Font Parsing Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-660/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-80160","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-659/","article_title":"ZDI-26-659: Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-659/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81987","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-658/","article_title":"ZDI-26-658: Adobe Acrobat Pro DC JPEG Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-658/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19397","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-657/","article_title":"ZDI-26-657: ASUS Control Center Express Agent Missing Authentication Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-657/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-71414","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-654/","article_title":"ZDI-26-654: TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-654/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-71415","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-653/","article_title":"ZDI-26-653: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-653/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-71416","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-652/","article_title":"ZDI-26-652: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-652/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19593","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-651/","article_title":"ZDI-26-651: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-651/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19592","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-650/","article_title":"ZDI-26-650: (Pwn2Own) OpenAI Codex External Control of Configuration Setting Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-650/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19591","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-649/","article_title":"ZDI-26-649: (Pwn2Own) OpenAI Codex Improper Neutralization of Control Sequences Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-649/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19590","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-648/","article_title":"ZDI-26-648: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-648/","published_at":"2026-09-10T05:00:00.000Z","valid_from":"2026-09-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20079","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/","article_title":"Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks","article_url":"https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/","published_at":"2026-09-09T21:40:44.000Z","valid_from":"2026-09-09T21:40:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87491","source":"Security Affairs","source_url":"https://securityaffairs.com/198757/security/google-fixes-the-seventh-actively-exploited-chrome-zero-day-of-2026.html","article_title":"Google fixes the seventh actively exploited Chrome zero-day of 2026","article_url":"https://securityaffairs.com/198757/security/google-fixes-the-seventh-actively-exploited-chrome-zero-day-of-2026.html","published_at":"2026-09-09T13:47:16.000Z","valid_from":"2026-09-09T13:47:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-84388","source":"GBHackers","source_url":"https://gbhackers.com/fortipam-chrome-extension-vulnerability/","article_title":"FortiPAM Chrome Extension Vulnerability Lets Malicious Sites Control Browser Proxy and Record Tabs","article_url":"https://gbhackers.com/fortipam-chrome-extension-vulnerability/","published_at":"2026-09-09T13:18:50.000Z","valid_from":"2026-09-09T13:18:50.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-25249","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/09/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/09/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-09-09T12:00:00.000Z","valid_from":"2026-09-09T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19490","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/09/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/09/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-09-09T12:00:00.000Z","valid_from":"2026-09-09T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87491","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/09/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/09/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-09-09T12:00:00.000Z","valid_from":"2026-09-09T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20079","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/09/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/09/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-09-09T12:00:00.000Z","valid_from":"2026-09-09T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85061","source":"GBHackers","source_url":"https://gbhackers.com/critical-maplibre-gl-js-vulnerability/","article_title":"Critical MapLibre GL JS Vulnerability Enables Zero-Click XSS Attacks","article_url":"https://gbhackers.com/critical-maplibre-gl-js-vulnerability/","published_at":"2026-09-09T11:34:34.000Z","valid_from":"2026-09-09T11:34:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69449","source":"GBHackers","source_url":"https://gbhackers.com/windows-bitlocker-flaw-2/","article_title":"Windows BitLocker Flaw Lets Attackers Execute Code on Vulnerable Systems","article_url":"https://gbhackers.com/windows-bitlocker-flaw-2/","published_at":"2026-09-09T10:28:35.000Z","valid_from":"2026-09-09T10:28:35.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87491","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html","article_title":"Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox","article_url":"https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html","published_at":"2026-09-09T09:11:03.000Z","valid_from":"2026-09-09T09:11:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69414","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/09/september-2026-patch-tuesday-zero-days-sigred-successor/","article_title":"September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor","article_url":"https://www.helpnetsecurity.com/2026/09/09/september-2026-patch-tuesday-zero-days-sigred-successor/","published_at":"2026-09-09T09:04:18.000Z","valid_from":"2026-09-09T09:04:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69414","source":"GBHackers","source_url":"https://gbhackers.com/windows-defender-shieldcrash-0-day/","article_title":"Windows Defender ShieldCrash 0-Day Lets Attackers Read Arbitrary Files as SYSTEM","article_url":"https://gbhackers.com/windows-defender-shieldcrash-0-day/","published_at":"2026-09-09T08:40:41.000Z","valid_from":"2026-09-09T08:40:41.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87491","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/09/google-chrome-cve-2026-87491-zero-day-flaw/","article_title":"Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)","article_url":"https://www.helpnetsecurity.com/2026/09/09/google-chrome-cve-2026-87491-zero-day-flaw/","published_at":"2026-09-09T07:53:57.000Z","valid_from":"2026-09-09T07:53:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-67401","source":"GBHackers","source_url":"https://gbhackers.com/cpanel-emailtrack-sql-injection-flaw/","article_title":"cPanel EmailTrack SQL Injection Flaw Lets Attackers Execute Code as Root","article_url":"https://gbhackers.com/cpanel-emailtrack-sql-injection-flaw/","published_at":"2026-09-09T07:27:09.000Z","valid_from":"2026-09-09T07:27:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-26084","source":"GBHackers","source_url":"https://gbhackers.com/fortinet-fortisandbox-vulnerability-3/","article_title":"Fortinet FortiSandbox Vulnerability Allows Unauthenticated Attackers to Access Sensitive Information","article_url":"https://gbhackers.com/fortinet-fortisandbox-vulnerability-3/","published_at":"2026-09-09T07:15:40.000Z","valid_from":"2026-09-09T07:15:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69414","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/researcher-drops-new-microsoft-defender.html","article_title":"Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed","article_url":"https://thehackernews.com/2026/09/researcher-drops-new-microsoft-defender.html","published_at":"2026-09-09T06:47:27.000Z","valid_from":"2026-09-09T06:47:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44756","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/sap-patches-cvss-100-kernel-flaw.html","article_title":"SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution","article_url":"https://thehackernews.com/2026/09/sap-patches-cvss-100-kernel-flaw.html","published_at":"2026-09-09T06:25:45.000Z","valid_from":"2026-09-09T06:25:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-87491","source":"GBHackers","source_url":"https://gbhackers.com/google-chrome-153-released-with-230-security-fixes/","article_title":"Google Chrome 153 Released With 230 Security Fixes and Zero-Day Exploited in the Wild","article_url":"https://gbhackers.com/google-chrome-153-released-with-230-security-fixes/","published_at":"2026-09-09T06:17:14.000Z","valid_from":"2026-09-09T06:17:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19820","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-628/","article_title":"ZDI-26-628: Backblaze Personal Computer Backup bzreports Link Following Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-628/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19820","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-627/","article_title":"ZDI-26-627: Backblaze Personal Computer Backup bztransmit Link Following Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-627/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19820","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-626/","article_title":"ZDI-26-626: Backblaze Personal Computer Backup bzfilelist Link Following Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-626/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19820","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-625/","article_title":"ZDI-26-625: Backblaze Personal Computer Backup bzserv Link Following Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-625/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19820","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-624/","article_title":"ZDI-26-624: Backblaze Personal Computer Backup bzbackup Link Following Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-624/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60392","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-635/","article_title":"ZDI-26-635: Oracle Outside In Technology PDF File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-635/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-70477","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-634/","article_title":"ZDI-26-634: Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-634/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-4153","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-633/","article_title":"ZDI-26-633: GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-633/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13086","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-632/","article_title":"ZDI-26-632: WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-632/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18444","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-631/","article_title":"ZDI-26-631: NI LabVIEW VI File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-631/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18445","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-630/","article_title":"ZDI-26-630: NI LabVIEW VI File Parsing Integer Overflow Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-630/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59346","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-647/","article_title":"ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-647/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-646/","article_title":"ZDI-26-646: Progress Software Kemp LoadMaster escape_quotes Uninitialized Memory Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-646/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-84387","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-645/","article_title":"ZDI-26-645: Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-645/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60155","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-644/","article_title":"ZDI-26-644: Oracle VirtualBox VMSVGA Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-644/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60162","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-643/","article_title":"ZDI-26-643: Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-643/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60159","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-642/","article_title":"ZDI-26-642: Oracle VirtualBox IDisplay Out-Of-Bounds Read Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-642/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71114","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-641/","article_title":"ZDI-26-641: Oracle VirtualBox VirtioSCSI Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-641/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71132","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-640/","article_title":"ZDI-26-640: Oracle VirtualBox VirtioSCSI Uninitialized Memory Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-640/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71116","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-639/","article_title":"ZDI-26-639: Oracle VirtualBox VMSVGA Heap-based Buffer Overflow Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-639/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60414","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-638/","article_title":"ZDI-26-638: Oracle Outside In Technology WPS File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-638/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60413","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-637/","article_title":"ZDI-26-637: Oracle Outside In Technology GEM File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-637/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60412","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-636/","article_title":"ZDI-26-636: Oracle Outside In Technology PostScript File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-636/","published_at":"2026-09-09T05:00:00.000Z","valid_from":"2026-09-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86218","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/n-able-n-central-pre-auth-rce-flaw.html","article_title":"N-able N-central Pre-Auth RCE Flaw Exploited in the Wild","article_url":"https://thehackernews.com/2026/09/n-able-n-central-pre-auth-rce-flaw.html","published_at":"2026-09-09T04:27:51.000Z","valid_from":"2026-09-09T04:27:51.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10086,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33322","article_title":"ISC Stormcast For Wednesday, September 9th, 2026 https://isc.sans.edu/podcastdetail/10086, (Wed, Sep 9th)","article_url":"https://isc.sans.edu/diary/rss/33322","published_at":"2026-09-09T02:00:02.000Z","valid_from":"2026-09-09T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-67276","source":"SC Media","source_url":"https://www.scworld.com/brief/mikrotik-routers-targeted-by-active-ssh-zero-day-exploitation","article_title":"MikroTik routers targeted by active SSH zero-day exploitation","article_url":"https://www.scworld.com/brief/mikrotik-routers-targeted-by-active-ssh-zero-day-exploitation","published_at":"2026-09-08T22:53:23.000Z","valid_from":"2026-09-08T22:53:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86060","source":"SC Media","source_url":"https://www.scworld.com/brief/mikrotik-routers-targeted-by-active-ssh-zero-day-exploitation","article_title":"MikroTik routers targeted by active SSH zero-day exploitation","article_url":"https://www.scworld.com/brief/mikrotik-routers-targeted-by-active-ssh-zero-day-exploitation","published_at":"2026-09-08T22:53:23.000Z","valid_from":"2026-09-08T22:53:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59346","source":"SC Media","source_url":"https://www.scworld.com/brief/broadcom-patches-critical-vmware-workstation-and-fusion-vm-escape-vulnerabilities","article_title":"Broadcom patches critical VMware Workstation and Fusion VM escape vulnerabilities","article_url":"https://www.scworld.com/brief/broadcom-patches-critical-vmware-workstation-and-fusion-vm-escape-vulnerabilities","published_at":"2026-09-08T22:50:19.000Z","valid_from":"2026-09-08T22:50:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75650","source":"SecurityWeek","source_url":"https://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/","article_title":"Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day","article_url":"https://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/","published_at":"2026-09-08T18:37:17.000Z","valid_from":"2026-09-08T18:37:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81963","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/microsofts-september-2026-patch-tuesday-addresses-964-cves-cve-2026-81963-cve-2026-85880","article_title":"Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)","article_url":"https://www.tenable.com/blog/microsofts-september-2026-patch-tuesday-addresses-964-cves-cve-2026-81963-cve-2026-85880","published_at":"2026-09-08T18:07:55.000Z","valid_from":"2026-09-08T18:07:55.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85880","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/microsofts-september-2026-patch-tuesday-addresses-964-cves-cve-2026-81963-cve-2026-85880","article_title":"Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)","article_url":"https://www.tenable.com/blog/microsofts-september-2026-patch-tuesday-addresses-964-cves-cve-2026-81963-cve-2026-85880","published_at":"2026-09-08T18:07:55.000Z","valid_from":"2026-09-08T18:07:55.000Z","origin":"rss"},{"type":"domain","value":"asp.net","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/microsofts-september-2026-patch-tuesday-addresses-964-cves-cve-2026-81963-cve-2026-85880","article_title":"Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)","article_url":"https://www.tenable.com/blog/microsofts-september-2026-patch-tuesday-addresses-964-cves-cve-2026-81963-cve-2026-85880","published_at":"2026-09-08T18:07:55.000Z","valid_from":"2026-09-08T18:07:55.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75650","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/stylesmuggler-cve-2026-75650-frequently-asked-questions-about-adobe-commerce-and-magento-zero","article_title":"StyleSmuggler (CVE-2026-75650): Frequently asked questions about Adobe Commerce and Magento zero-day","article_url":"https://www.tenable.com/blog/stylesmuggler-cve-2026-75650-frequently-asked-questions-about-adobe-commerce-and-magento-zero","published_at":"2026-09-08T14:00:43.000Z","valid_from":"2026-09-08T14:00:43.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75650","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/adobe-fixes-critical-magento-zero-day-exploited-to-backdoor-servers/","article_title":"Adobe fixes critical Magento zero-day exploited to backdoor servers","article_url":"https://www.bleepingcomputer.com/news/security/adobe-fixes-critical-magento-zero-day-exploited-to-backdoor-servers/","published_at":"2026-09-08T13:34:47.000Z","valid_from":"2026-09-08T13:34:47.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85083","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-251-01","article_title":"CareCam Pro IP Cameras","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-251-01","published_at":"2026-09-08T12:00:00.000Z","valid_from":"2026-09-08T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75650","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/08/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog    ","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/08/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-09-08T12:00:00.000Z","valid_from":"2026-09-08T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81963","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/08/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog    ","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/08/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-09-08T12:00:00.000Z","valid_from":"2026-09-08T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85880","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/08/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog    ","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/08/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-09-08T12:00:00.000Z","valid_from":"2026-09-08T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86218","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/08/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog    ","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/08/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-09-08T12:00:00.000Z","valid_from":"2026-09-08T12:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"99.84.67.186","source":"CSO Online","source_url":"https://www.csoonline.com/article/4219626/adobe-commerce-max-severity-bug-comes-under-active-attack.html","article_title":"Adobe Commerce max-severity bug comes under active attack","article_url":"https://www.csoonline.com/article/4219626/adobe-commerce-max-severity-bug-comes-under-active-attack.html","published_at":"2026-09-08T11:36:48.000Z","valid_from":"2026-09-08T11:36:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86206","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ve-cve-2026-86206-cve-2026-86207-n-able-n-central-authentication-bypass-fixed","article_title":"CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)","article_url":"https://www.rapid7.com/blog/post/ve-cve-2026-86206-cve-2026-86207-n-able-n-central-authentication-bypass-fixed","published_at":"2026-09-08T11:01:27.000Z","valid_from":"2026-09-08T11:01:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86207","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ve-cve-2026-86206-cve-2026-86207-n-able-n-central-authentication-bypass-fixed","article_title":"CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)","article_url":"https://www.rapid7.com/blog/post/ve-cve-2026-86206-cve-2026-86207-n-able-n-central-authentication-bypass-fixed","published_at":"2026-09-08T11:01:27.000Z","valid_from":"2026-09-08T11:01:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ve-cve-2026-86206-cve-2026-86207-n-able-n-central-authentication-bypass-fixed","article_title":"CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)","article_url":"https://www.rapid7.com/blog/post/ve-cve-2026-86206-cve-2026-86207-n-able-n-central-authentication-bypass-fixed","published_at":"2026-09-08T11:01:27.000Z","valid_from":"2026-09-08T11:01:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19397","source":"GBHackers","source_url":"https://gbhackers.com/asus-control-center-critical-flaw/","article_title":"ASUS Control Center Critical Flaw Allows Unauthenticated Attackers to Gain Root Access","article_url":"https://gbhackers.com/asus-control-center-critical-flaw/","published_at":"2026-09-08T10:37:47.000Z","valid_from":"2026-09-08T10:37:47.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44756","source":"GBHackers","source_url":"https://gbhackers.com/sap-september-2026-security-update/","article_title":"SAP September 2026 Security Update Fixes 4 Critical Vulnerabilities and 15 Other Flaws","article_url":"https://gbhackers.com/sap-september-2026-security-update/","published_at":"2026-09-08T10:24:18.000Z","valid_from":"2026-09-08T10:24:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75650","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/adobe-patches-magento-zero-day.html","article_title":"Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell","article_url":"https://thehackernews.com/2026/09/adobe-patches-magento-zero-day.html","published_at":"2026-09-08T09:13:47.000Z","valid_from":"2026-09-08T09:13:47.000Z","origin":"rss"},{"type":"domain","value":"registry.coder.com","source":"GBHackers","source_url":"https://gbhackers.com/hackers-hijack-coder-module-registry/","article_title":"Hackers Hijack Coder Module Registry to Distribute Credential-Stealing Malicious Packages","article_url":"https://gbhackers.com/hackers-hijack-coder-module-registry/","published_at":"2026-09-08T07:07:30.000Z","valid_from":"2026-09-08T07:07:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50696","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-622/","article_title":"ZDI-26-622: Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-622/","published_at":"2026-09-08T05:00:00.000Z","valid_from":"2026-09-08T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62712","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-621/","article_title":"ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-621/","published_at":"2026-09-08T05:00:00.000Z","valid_from":"2026-09-08T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62712","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-620/","article_title":"ZDI-26-620: Microsoft Windows UMPDDrvPlgBlt Improper Object Management Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-620/","published_at":"2026-09-08T05:00:00.000Z","valid_from":"2026-09-08T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62712","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-619/","article_title":"ZDI-26-619: Microsoft Windows UMPDDrvStretchBltROP Improper Object Management Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-619/","published_at":"2026-09-08T05:00:00.000Z","valid_from":"2026-09-08T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62712","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-618/","article_title":"ZDI-26-618: Microsoft Windows UMPDDrvStretchBlt Improper Object Management Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-618/","published_at":"2026-09-08T05:00:00.000Z","valid_from":"2026-09-08T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66804","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-617/","article_title":"ZDI-26-617: Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-617/","published_at":"2026-09-08T05:00:00.000Z","valid_from":"2026-09-08T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19780","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-616/","article_title":"ZDI-26-616: Koha Eval Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-616/","published_at":"2026-09-08T05:00:00.000Z","valid_from":"2026-09-08T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10084,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33316","article_title":"ISC Stormcast For Tuesday, September 8th, 2026 https://isc.sans.edu/podcastdetail/10084, (Tue, Sep 8th)","article_url":"https://isc.sans.edu/diary/rss/33316","published_at":"2026-09-08T02:00:03.000Z","valid_from":"2026-09-08T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-53521","source":"GBHackers","source_url":"https://gbhackers.com/poisonedrefresh-malware/","article_title":"PoisonedRefresh Malware Backdoors F5 BIG-IP Servers With Memory-Only PHP Web Shells","article_url":"https://gbhackers.com/poisonedrefresh-malware/","published_at":"2026-09-07T13:14:17.000Z","valid_from":"2026-09-07T13:14:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86218","source":"Infosecurity Magazine","source_url":"https://www.infosecurity-magazine.com/news/nable-hotfix-critical-rce/","article_title":"N-able Releases Hotfix for Critical Remote Code Execution Vulnerability","article_url":"https://www.infosecurity-magazine.com/news/nable-hotfix-critical-rce/","published_at":"2026-09-07T12:45:00.000Z","valid_from":"2026-09-07T12:45:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86218","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/07/n-able-n-central-hotfix-cve-2026-86218/","article_title":"N-able patches critical N-central zero-day exploited in the wild (CVE-2026-86218)","article_url":"https://www.helpnetsecurity.com/2026/09/07/n-able-n-central-hotfix-cve-2026-86218/","published_at":"2026-09-07T11:55:57.000Z","valid_from":"2026-09-07T11:55:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86218","source":"CSO Online","source_url":"https://www.csoonline.com/article/4219242/back-to-back-n-able-bugs-send-admins-on-a-patching-spree.html","article_title":"Back-to-back N-able bugs send admins on a patching spree","article_url":"https://www.csoonline.com/article/4219242/back-to-back-n-able-bugs-send-admins-on-a-patching-spree.html","published_at":"2026-09-07T11:53:54.000Z","valid_from":"2026-09-07T11:53:54.000Z","origin":"rss"},{"type":"domain","value":"asp.net","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/telerik-ui-padding-oracle-bug-chained.html","article_title":"Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released","article_url":"https://thehackernews.com/2026/09/telerik-ui-padding-oracle-bug-chained.html","published_at":"2026-09-07T11:20:14.000Z","valid_from":"2026-09-07T11:20:14.000Z","origin":"rss"},{"type":"domain","value":"asp.net","source":"GBHackers","source_url":"https://gbhackers.com/telerik-ui-flaws-let-attackers-chain-aes-cbc-padding-oracle-to-unauthenticated-rce/","article_title":"Telerik UI Flaws Let Attackers Chain AES-CBC Padding Oracle to Unauthenticated RCE","article_url":"https://gbhackers.com/telerik-ui-flaws-let-attackers-chain-aes-cbc-padding-oracle-to-unauthenticated-rce/","published_at":"2026-09-07T08:40:19.000Z","valid_from":"2026-09-07T08:40:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-86218","source":"GBHackers","source_url":"https://gbhackers.com/critical-n-able-n-central-flaw/","article_title":"Critical N-able N-central Flaw Enables Pre-Auth Remote Code Execution","article_url":"https://gbhackers.com/critical-n-able-n-central-flaw/","published_at":"2026-09-07T08:21:30.000Z","valid_from":"2026-09-07T08:21:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81578","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-papercut-ng-mf-flaws/","article_title":"Hackers Exploit PaperCut NG/MF Flaws to Steal Credentials and Deploy Meterpreter","article_url":"https://gbhackers.com/hackers-exploit-papercut-ng-mf-flaws/","published_at":"2026-09-07T07:44:36.000Z","valid_from":"2026-09-07T07:44:36.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82078","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-papercut-ng-mf-flaws/","article_title":"Hackers Exploit PaperCut NG/MF Flaws to Steal Credentials and Deploy Meterpreter","article_url":"https://gbhackers.com/hackers-exploit-papercut-ng-mf-flaws/","published_at":"2026-09-07T07:44:36.000Z","valid_from":"2026-09-07T07:44:36.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75754","source":"GBHackers","source_url":"https://gbhackers.com/critical-asus-control-center-cve-2026-75754-flaw/","article_title":"Critical ASUS Control Center CVE-2026-75754 Flaw Allows Unauthenticated Root Access","article_url":"https://gbhackers.com/critical-asus-control-center-cve-2026-75754-flaw/","published_at":"2026-09-07T04:52:11.000Z","valid_from":"2026-09-07T04:52:11.000Z","origin":"rss"},{"type":"ipv4","value":"4.0.0.2","source":"GBHackers","source_url":"https://gbhackers.com/critical-asus-control-center-cve-2026-75754-flaw/","article_title":"Critical ASUS Control Center CVE-2026-75754 Flaw Allows Unauthenticated Root Access","article_url":"https://gbhackers.com/critical-asus-control-center-cve-2026-75754-flaw/","published_at":"2026-09-07T04:52:11.000Z","valid_from":"2026-09-07T04:52:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81578","source":"Security Affairs","source_url":"https://securityaffairs.com/198476/hacking/papercut-flaws-exploited-in-attacks-on-u-s-and-european-schools.html","article_title":"PaperCut Flaws Exploited in Attacks on U.S. and European Schools","article_url":"https://securityaffairs.com/198476/hacking/papercut-flaws-exploited-in-attacks-on-u-s-and-european-schools.html","published_at":"2026-09-05T18:47:14.000Z","valid_from":"2026-09-05T18:47:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82078","source":"Security Affairs","source_url":"https://securityaffairs.com/198476/hacking/papercut-flaws-exploited-in-attacks-on-u-s-and-european-schools.html","article_title":"PaperCut Flaws Exploited in Attacks on U.S. and European Schools","article_url":"https://securityaffairs.com/198476/hacking/papercut-flaws-exploited-in-attacks-on-u-s-and-european-schools.html","published_at":"2026-09-05T18:47:14.000Z","valid_from":"2026-09-05T18:47:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59346","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.html","article_title":"Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code","article_url":"https://thehackernews.com/2026/09/critical-vmware-workstation-and-fusion.html","published_at":"2026-09-05T16:05:08.000Z","valid_from":"2026-09-05T16:05:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32475","source":"SecurityWeek","source_url":"https://www.securityweek.com/elementor-pro-wordpress-plugin-vulnerability-exploited-to-hack-sites/","article_title":"Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites","article_url":"https://www.securityweek.com/elementor-pro-wordpress-plugin-vulnerability-exploited-to-hack-sites/","published_at":"2026-09-05T13:00:28.000Z","valid_from":"2026-09-05T13:00:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6471","source":"GBHackers","source_url":"https://gbhackers.com/12-year-old-postgresql-flaw/","article_title":"12-Year-Old PostgreSQL Flaw Lets Attackers Execute Code and Take Over Database Servers","article_url":"https://gbhackers.com/12-year-old-postgresql-flaw/","published_at":"2026-09-05T07:34:32.000Z","valid_from":"2026-09-05T07:34:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81578","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.html","article_title":"Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities","article_url":"https://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.html","published_at":"2026-09-05T07:31:53.000Z","valid_from":"2026-09-05T07:31:53.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82078","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.html","article_title":"Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities","article_url":"https://thehackernews.com/2026/09/attackers-exploit-papercut-flaws-to.html","published_at":"2026-09-05T07:31:53.000Z","valid_from":"2026-09-05T07:31:53.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85046","source":"Security Affairs","source_url":"https://securityaffairs.com/198455/security/u-s-cisa-adds-google-chromium-v8-flaw-to-its-known-exploited-vulnerabilities-catalog-2.html","article_title":"U.S. CISA adds Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/198455/security/u-s-cisa-adds-google-chromium-v8-flaw-to-its-known-exploited-vulnerabilities-catalog-2.html","published_at":"2026-09-04T22:50:15.000Z","valid_from":"2026-09-04T22:50:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20212","source":"SC Media","source_url":"https://www.scworld.com/brief/cisco-addresses-critical-vulnerabilities-in-nexus-9000-switches-and-ios-xr","article_title":"Cisco addresses critical vulnerabilities in Nexus 9000 switches and IOS XR","article_url":"https://www.scworld.com/brief/cisco-addresses-critical-vulnerabilities-in-nexus-9000-switches-and-ios-xr","published_at":"2026-09-04T20:35:42.000Z","valid_from":"2026-09-04T20:35:42.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73749","source":"SecurityWeek","source_url":"https://www.securityweek.com/hpe-patches-critical-rce-vulnerabilities-in-aos-cx/","article_title":"HPE Patches Critical RCE Vulnerabilities in AOS-CX","article_url":"https://www.securityweek.com/hpe-patches-critical-rce-vulnerabilities-in-aos-cx/","published_at":"2026-09-04T16:11:06.000Z","valid_from":"2026-09-04T16:11:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19490","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/hackers-target-critical-citrix-netscaler-auth-bypass-in-attacks/","article_title":"Critical Citrix NetScaler auth bypass now leveraged in attacks","article_url":"https://www.bleepingcomputer.com/news/security/hackers-target-critical-citrix-netscaler-auth-bypass-in-attacks/","published_at":"2026-09-04T15:25:59.000Z","valid_from":"2026-09-04T15:25:59.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6471","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/postgresql-fixes-12-year-old-logical.html","article_title":"PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution","article_url":"https://thehackernews.com/2026/09/postgresql-fixes-12-year-old-logical.html","published_at":"2026-09-04T15:20:19.000Z","valid_from":"2026-09-04T15:20:19.000Z","origin":"rss"},{"type":"domain","value":"idscan.net","source":"CSO Online","source_url":"https://www.csoonline.com/article/4218789/fbi-investigates-breach-of-153-million-driving-license-records-at-idscan-net.html","article_title":"FBI investigates breach of 153 million driving license records at IDscan.net","article_url":"https://www.csoonline.com/article/4218789/fbi-investigates-breach-of-153-million-driving-license-records-at-idscan-net.html","published_at":"2026-09-04T13:47:47.000Z","valid_from":"2026-09-04T13:47:47.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6471","source":"Security Affairs","source_url":"https://securityaffairs.com/198433/security/postgresql-hit-by-12-year-old-vulnerability-allowing-server-takeover.html","article_title":"PostgreSQL Hit by 12-Year-Old Vulnerability Allowing Server Takeover","article_url":"https://securityaffairs.com/198433/security/postgresql-hit-by-12-year-old-vulnerability-allowing-server-takeover.html","published_at":"2026-09-04T13:41:39.000Z","valid_from":"2026-09-04T13:41:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9586","source":"SecurityWeek","source_url":"https://www.securityweek.com/sangoma-switchvox-vulnerabilities-exploited-in-the-wild/","article_title":"Sangoma Switchvox Vulnerabilities Exploited in the Wild","article_url":"https://www.securityweek.com/sangoma-switchvox-vulnerabilities-exploited-in-the-wild/","published_at":"2026-09-04T13:23:12.000Z","valid_from":"2026-09-04T13:23:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85046","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/04/google-chrome-zero-day-cve-2026-85046/","article_title":"Google patches actively exploited Chrome zero-day (CVE-2026-85046)","article_url":"https://www.helpnetsecurity.com/2026/09/04/google-chrome-zero-day-cve-2026-85046/","published_at":"2026-09-04T12:09:13.000Z","valid_from":"2026-09-04T12:09:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6471","source":"SecurityWeek","source_url":"https://www.securityweek.com/12-year-old-postgresql-vulnerability-enables-database-server-takeover/","article_title":"12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover","article_url":"https://www.securityweek.com/12-year-old-postgresql-vulnerability-enables-database-server-takeover/","published_at":"2026-09-04T12:06:13.000Z","valid_from":"2026-09-04T12:06:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85046","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/04/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/04/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-09-04T12:00:00.000Z","valid_from":"2026-09-04T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"Security Affairs","source_url":"https://securityaffairs.com/198417/ai/chinese-hackers-use-ai-agents-in-multi-country-cyber-campaign.html","article_title":"Chinese Hackers Use AI Agents in Multi-Country Cyber Campaign","article_url":"https://securityaffairs.com/198417/ai/chinese-hackers-use-ai-agents-in-multi-country-cyber-campaign.html","published_at":"2026-09-04T11:00:15.000Z","valid_from":"2026-09-04T11:00:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-14894","source":"GBHackers","source_url":"https://gbhackers.com/critical-super-forms-wordpress-flaw-actively-exploited/","article_title":"Critical Super Forms WordPress Flaw Actively Exploited to Achieve Remote Code Execution","article_url":"https://gbhackers.com/critical-super-forms-wordpress-flaw-actively-exploited/","published_at":"2026-09-04T10:50:38.000Z","valid_from":"2026-09-04T10:50:38.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18167","source":"GBHackers","source_url":"https://gbhackers.com/tp-link-archer-ax55-flaws/","article_title":"TP-Link Archer AX55 Flaws Enable Remote Code Execution and Admin Password Theft","article_url":"https://gbhackers.com/tp-link-archer-ax55-flaws/","published_at":"2026-09-04T08:56:28.000Z","valid_from":"2026-09-04T08:56:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18330","source":"GBHackers","source_url":"https://gbhackers.com/tp-link-archer-ax55-flaws/","article_title":"TP-Link Archer AX55 Flaws Enable Remote Code Execution and Admin Password Theft","article_url":"https://gbhackers.com/tp-link-archer-ax55-flaws/","published_at":"2026-09-04T08:56:28.000Z","valid_from":"2026-09-04T08:56:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-14894","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/over-440000-exploit-attempts-target.html","article_title":"Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws","article_url":"https://thehackernews.com/2026/09/over-440000-exploit-attempts-target.html","published_at":"2026-09-04T08:48:45.000Z","valid_from":"2026-09-04T08:48:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85046","source":"Security Affairs","source_url":"https://securityaffairs.com/198405/security/google-fixes-the-sixth-actively-exploited-chrome-zero-day-of-2026.html","article_title":"Google fixes the sixth actively exploited Chrome zero-day of 2026","article_url":"https://securityaffairs.com/198405/security/google-fixes-the-sixth-actively-exploited-chrome-zero-day-of-2026.html","published_at":"2026-09-04T08:24:42.000Z","valid_from":"2026-09-04T08:24:42.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85046","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/google-releases-chrome-update-to-patch.html","article_title":"Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day","article_url":"https://thehackernews.com/2026/09/google-releases-chrome-update-to-patch.html","published_at":"2026-09-04T07:18:47.000Z","valid_from":"2026-09-04T07:18:47.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-85046","source":"GBHackers","source_url":"https://gbhackers.com/google-chrome-v8-flaw/","article_title":"Google Chrome V8 Flaw Actively Exploited in the Wild, Update Released","article_url":"https://gbhackers.com/google-chrome-v8-flaw/","published_at":"2026-09-04T07:18:17.000Z","valid_from":"2026-09-04T07:18:17.000Z","origin":"rss"},{"type":"domain","value":"idscan.net","source":"Security Affairs","source_url":"https://securityaffairs.com/198388/security/dark-web-service-nexus-sells-153m-drivers-licenses.html","article_title":"Dark Web Service Nexus Sells 153M+ Driver’s Licenses","article_url":"https://securityaffairs.com/198388/security/dark-web-service-nexus-sells-153m-drivers-licenses.html","published_at":"2026-09-04T07:02:00.000Z","valid_from":"2026-09-04T07:02:00.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"GBHackers","source_url":"https://gbhackers.com/dahua-security-cameras/","article_title":"Hackers Compromise More Than 14,500 Dahua Security Cameras in Massive Campaign","article_url":"https://gbhackers.com/dahua-security-cameras/","published_at":"2026-09-04T06:20:35.000Z","valid_from":"2026-09-04T06:20:35.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10082,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33310","article_title":"ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th)","article_url":"https://isc.sans.edu/diary/rss/33310","published_at":"2026-09-04T02:00:02.000Z","valid_from":"2026-09-04T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20212","source":"Security Affairs","source_url":"https://securityaffairs.com/198366/security/cisco-fixed-critical-rce-in-nexus-9000-series-switches.html","article_title":"Cisco Fixed Critical RCE in Nexus 9000 Series Switches","article_url":"https://securityaffairs.com/198366/security/cisco-fixed-critical-rce-in-nexus-9000-series-switches.html","published_at":"2026-09-03T19:47:40.000Z","valid_from":"2026-09-03T19:47:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20212","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/critical-cisco-nexus-9000-flaw-lets.html","article_title":"Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root","article_url":"https://thehackernews.com/2026/09/critical-cisco-nexus-9000-flaw-lets.html","published_at":"2026-09-03T15:52:07.000Z","valid_from":"2026-09-03T15:52:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32475","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/critical-elementor-pro-flaw-exploited-to-take-over-wordpress-sites/","article_title":"Critical Elementor Pro flaw exploited to take over WordPress sites","article_url":"https://www.bleepingcomputer.com/news/security/critical-elementor-pro-flaw-exploited-to-take-over-wordpress-sites/","published_at":"2026-09-03T14:52:20.000Z","valid_from":"2026-09-03T14:52:20.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19949","source":"SC Media","source_url":"https://www.scworld.com/brief/sql-injection-vulnerability-in-wordpress-plugin-affects-millions-of-sites","article_title":"SQL injection vulnerability in WordPress plugin affects millions of sites","article_url":"https://www.scworld.com/brief/sql-injection-vulnerability-in-wordpress-plugin-affects-millions-of-sites","published_at":"2026-09-03T14:10:00.000Z","valid_from":"2026-09-03T14:10:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75925","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-02","article_title":"IXON VPN Client","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-02","published_at":"2026-09-03T12:00:00.000Z","valid_from":"2026-09-03T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-10478","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-05","article_title":"Rockwell Automation 1756-ENBT Module","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-05","published_at":"2026-09-03T12:00:00.000Z","valid_from":"2026-09-03T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-77477","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-01","article_title":"OPCFoundation OPC UA LocalDiscoveryServer (LDS)","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-01","published_at":"2026-09-03T12:00:00.000Z","valid_from":"2026-09-03T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-77393","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-06","article_title":"Inductive Automation Ignition","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-06","published_at":"2026-09-03T12:00:00.000Z","valid_from":"2026-09-03T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-77847","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-08","article_title":"Tycon Systems TPDIN-Monitor-WEB3","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-08","published_at":"2026-09-03T12:00:00.000Z","valid_from":"2026-09-03T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82712","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-08","article_title":"Tycon Systems TPDIN-Monitor-WEB3","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-08","published_at":"2026-09-03T12:00:00.000Z","valid_from":"2026-09-03T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82684","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-08","article_title":"Tycon Systems TPDIN-Monitor-WEB3","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-08","published_at":"2026-09-03T12:00:00.000Z","valid_from":"2026-09-03T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19471","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-04","article_title":"Rockwell Automation ArmorStart LT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-04","published_at":"2026-09-03T12:00:00.000Z","valid_from":"2026-09-03T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19472","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-04","article_title":"Rockwell Automation ArmorStart LT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-04","published_at":"2026-09-03T12:00:00.000Z","valid_from":"2026-09-03T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12663","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-03","article_title":"Rockwell Automation ControlFLASH","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-246-03","published_at":"2026-09-03T12:00:00.000Z","valid_from":"2026-09-03T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"idscan.net","source":"SecurityWeek","source_url":"https://www.securityweek.com/153-million-driver-license-images-offered-on-dark-web/","article_title":"153 Million Driver License Images Offered on Dark Web","article_url":"https://www.securityweek.com/153-million-driver-license-images-offered-on-dark-web/","published_at":"2026-09-03T10:54:18.000Z","valid_from":"2026-09-03T10:54:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19949","source":"SecurityWeek","source_url":"https://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/","article_title":"Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability","article_url":"https://www.securityweek.com/over-3-million-wordpress-sites-affected-by-migration-plugin-vulnerability/","published_at":"2026-09-03T10:40:00.000Z","valid_from":"2026-09-03T10:40:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19949","source":"GBHackers","source_url":"https://gbhackers.com/wordpress-plugin-flaw-5/","article_title":"WordPress Plugin Flaw Lets Attackers Turn SQL Injection Into Complete Site Takeover","article_url":"https://gbhackers.com/wordpress-plugin-flaw-5/","published_at":"2026-09-03T09:19:04.000Z","valid_from":"2026-09-03T09:19:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9586","source":"GBHackers","source_url":"https://gbhackers.com/sangoma-switchvox-rce-flaw/","article_title":"Sangoma Switchvox RCE Flaw Actively Exploited in Wild via Unauthenticated SQL Injection","article_url":"https://gbhackers.com/sangoma-switchvox-rce-flaw/","published_at":"2026-09-03T09:04:13.000Z","valid_from":"2026-09-03T09:04:13.000Z","origin":"rss"},{"type":"ipv4","value":"8.4.0.2","source":"GBHackers","source_url":"https://gbhackers.com/sangoma-switchvox-rce-flaw/","article_title":"Sangoma Switchvox RCE Flaw Actively Exploited in Wild via Unauthenticated SQL Injection","article_url":"https://gbhackers.com/sangoma-switchvox-rce-flaw/","published_at":"2026-09-03T09:04:13.000Z","valid_from":"2026-09-03T09:04:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12554","source":"GBHackers","source_url":"https://gbhackers.com/three-hp-easy-start-flaws/","article_title":"Three HP Easy Start Flaws Let Attackers Gain Root Privileges on macOS","article_url":"https://gbhackers.com/three-hp-easy-start-flaws/","published_at":"2026-09-03T08:48:10.000Z","valid_from":"2026-09-03T08:48:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12555","source":"GBHackers","source_url":"https://gbhackers.com/three-hp-easy-start-flaws/","article_title":"Three HP Easy Start Flaws Let Attackers Gain Root Privileges on macOS","article_url":"https://gbhackers.com/three-hp-easy-start-flaws/","published_at":"2026-09-03T08:48:10.000Z","valid_from":"2026-09-03T08:48:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12556","source":"GBHackers","source_url":"https://gbhackers.com/three-hp-easy-start-flaws/","article_title":"Three HP Easy Start Flaws Let Attackers Gain Root Privileges on macOS","article_url":"https://gbhackers.com/three-hp-easy-start-flaws/","published_at":"2026-09-03T08:48:10.000Z","valid_from":"2026-09-03T08:48:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20212","source":"GBHackers","source_url":"https://gbhackers.com/critical-cisco-nexus-9000-flaw/","article_title":"Critical Cisco Nexus 9000 Flaw Lets Remote Attackers Execute Code as Root Without Authentication","article_url":"https://gbhackers.com/critical-cisco-nexus-9000-flaw/","published_at":"2026-09-03T08:30:03.000Z","valid_from":"2026-09-03T08:30:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-83548","source":"GBHackers","source_url":"https://gbhackers.com/cisa-warns-sonicwall-sma1000-flaws-2/","article_title":"CISA Warns SonicWall SMA1000 Flaws Are Actively Exploited in Attacks","article_url":"https://gbhackers.com/cisa-warns-sonicwall-sma1000-flaws-2/","published_at":"2026-09-03T07:33:13.000Z","valid_from":"2026-09-03T07:33:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-83549","source":"GBHackers","source_url":"https://gbhackers.com/cisa-warns-sonicwall-sma1000-flaws-2/","article_title":"CISA Warns SonicWall SMA1000 Flaws Are Actively Exploited in Attacks","article_url":"https://gbhackers.com/cisa-warns-sonicwall-sma1000-flaws-2/","published_at":"2026-09-03T07:33:13.000Z","valid_from":"2026-09-03T07:33:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-83548","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.html","article_title":"CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners","article_url":"https://thehackernews.com/2026/09/cisa-adds-seven-exploited-flaws-as.html","published_at":"2026-09-03T05:19:04.000Z","valid_from":"2026-09-03T05:19:04.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10080,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33308","article_title":"ISC Stormcast For Thursday, September 3rd, 2026 https://isc.sans.edu/podcastdetail/10080, (Thu, Sep 3rd)","article_url":"https://isc.sans.edu/diary/rss/33308","published_at":"2026-09-03T02:00:03.000Z","valid_from":"2026-09-03T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-83548","source":"CSO Online","source_url":"https://www.csoonline.com/article/4217682/sonicwall-reports-two-major-security-holes-under-active-exploit-2.html","article_title":"SonicWall reports two major security holes under active exploit","article_url":"https://www.csoonline.com/article/4217682/sonicwall-reports-two-major-security-holes-under-active-exploit-2.html","published_at":"2026-09-02T23:22:10.000Z","valid_from":"2026-09-02T23:22:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9586","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-sangoma-switchvox-flaw-to-deploy-reverse-shells/","article_title":"Hackers exploit Sangoma Switchvox flaw to deploy reverse shells","article_url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-sangoma-switchvox-flaw-to-deploy-reverse-shells/","published_at":"2026-09-02T21:00:13.000Z","valid_from":"2026-09-02T21:00:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-83548","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-critical-sonicwall-sma1000-vulnerabilities-cve-2026-83548-cve-2026-83549-exploited-in-the-wild","article_title":"Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild","article_url":"https://www.rapid7.com/blog/post/etr-critical-sonicwall-sma1000-vulnerabilities-cve-2026-83548-cve-2026-83549-exploited-in-the-wild","published_at":"2026-09-02T16:58:45.000Z","valid_from":"2026-09-02T16:58:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-83549","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-critical-sonicwall-sma1000-vulnerabilities-cve-2026-83548-cve-2026-83549-exploited-in-the-wild","article_title":"Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild","article_url":"https://www.rapid7.com/blog/post/etr-critical-sonicwall-sma1000-vulnerabilities-cve-2026-83548-cve-2026-83549-exploited-in-the-wild","published_at":"2026-09-02T16:58:45.000Z","valid_from":"2026-09-02T16:58:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82329","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-jfrog-artifactory-flaw-to-forge-admin-tokens/","article_title":"Hackers exploit critical JFrog Artifactory flaw to forge admin tokens","article_url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-jfrog-artifactory-flaw-to-forge-admin-tokens/","published_at":"2026-09-02T15:47:08.000Z","valid_from":"2026-09-02T15:47:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62911","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/02/microsoft-exchange-cve-2026-62911-critical-authentication-bypass-flaw/","article_title":"Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911)","article_url":"https://www.helpnetsecurity.com/2026/09/02/microsoft-exchange-cve-2026-62911-critical-authentication-bypass-flaw/","published_at":"2026-09-02T13:24:09.000Z","valid_from":"2026-09-02T13:24:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2021-31886","source":"GBHackers","source_url":"https://gbhackers.com/claude-ai-develops-working-rce-exploit/","article_title":"Claude AI Develops Working RCE Exploit Against WAGO PLC With Researcher Assistance","article_url":"https://gbhackers.com/claude-ai-develops-working-rce-exploit/","published_at":"2026-09-02T12:51:11.000Z","valid_from":"2026-09-02T12:51:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9586","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/02/exploitation-of-sangoma-switchvox-flaw-underway-cve-2026-9586/","article_title":"Exploitation of Sangoma Switchvox flaw is underway (CVE-2026-9586)","article_url":"https://www.helpnetsecurity.com/2026/09/02/exploitation-of-sangoma-switchvox-flaw-underway-cve-2026-9586/","published_at":"2026-09-02T12:42:26.000Z","valid_from":"2026-09-02T12:42:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82329","source":"CSO Online","source_url":"https://www.csoonline.com/article/4217534/exploited-jfrog-artifactory-bug-puts-software-supply-chain-on-alert.html","article_title":"Exploited JFrog Artifactory bug puts software supply chain on alert","article_url":"https://www.csoonline.com/article/4217534/exploited-jfrog-artifactory-bug-puts-software-supply-chain-on-alert.html","published_at":"2026-09-02T12:24:40.000Z","valid_from":"2026-09-02T12:24:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9586","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Seven Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog","published_at":"2026-09-02T12:00:00.000Z","valid_from":"2026-09-02T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48710","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Seven Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog","published_at":"2026-09-02T12:00:00.000Z","valid_from":"2026-09-02T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-49869","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Seven Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog","published_at":"2026-09-02T12:00:00.000Z","valid_from":"2026-09-02T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59822","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Seven Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog","published_at":"2026-09-02T12:00:00.000Z","valid_from":"2026-09-02T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82329","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Seven Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog","published_at":"2026-09-02T12:00:00.000Z","valid_from":"2026-09-02T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-83548","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Seven Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/09/02/cisa-adds-seven-known-exploited-vulnerabilities-catalog","published_at":"2026-09-02T12:00:00.000Z","valid_from":"2026-09-02T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-83548","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/attackers-exploit-two-sonicwall-sma.html","article_title":"Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain","article_url":"https://thehackernews.com/2026/09/attackers-exploit-two-sonicwall-sma.html","published_at":"2026-09-02T10:53:49.000Z","valid_from":"2026-09-02T10:53:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-83548","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/02/sonicwall-sma-1000-cve-2026-83548-cve-2026-83549-zero-day-attacks/","article_title":"SonicWall SMA 1000 appliances under attack via zero-day flaws","article_url":"https://www.helpnetsecurity.com/2026/09/02/sonicwall-sma-1000-cve-2026-83548-cve-2026-83549-zero-day-attacks/","published_at":"2026-09-02T10:13:16.000Z","valid_from":"2026-09-02T10:13:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-83549","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/09/02/sonicwall-sma-1000-cve-2026-83548-cve-2026-83549-zero-day-attacks/","article_title":"SonicWall SMA 1000 appliances under attack via zero-day flaws","article_url":"https://www.helpnetsecurity.com/2026/09/02/sonicwall-sma-1000-cve-2026-83548-cve-2026-83549-zero-day-attacks/","published_at":"2026-09-02T10:13:16.000Z","valid_from":"2026-09-02T10:13:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-83548","source":"GBHackers","source_url":"https://gbhackers.com/critical-sonicwall-sma-1000-vulnerabilities/","article_title":"Critical SonicWall SMA 1000 Vulnerabilities Actively Exploited in the Wild","article_url":"https://gbhackers.com/critical-sonicwall-sma-1000-vulnerabilities/","published_at":"2026-09-02T09:57:29.000Z","valid_from":"2026-09-02T09:57:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-83549","source":"GBHackers","source_url":"https://gbhackers.com/critical-sonicwall-sma-1000-vulnerabilities/","article_title":"Critical SonicWall SMA 1000 Vulnerabilities Actively Exploited in the Wild","article_url":"https://gbhackers.com/critical-sonicwall-sma-1000-vulnerabilities/","published_at":"2026-09-02T09:57:29.000Z","valid_from":"2026-09-02T09:57:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-80047","source":"GBHackers","source_url":"https://gbhackers.com/hugging-face-transformers-flaw/","article_title":"Hugging Face Transformers Flaw Writes Malicious Python Code to Disk Before User Consent","article_url":"https://gbhackers.com/hugging-face-transformers-flaw/","published_at":"2026-09-02T08:25:23.000Z","valid_from":"2026-09-02T08:25:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0768","source":"Security Affairs","source_url":"https://securityaffairs.com/198270/hacking/hackers-target-langflow-in-cve-2026-0768-attacks.html","article_title":"Hackers Target Langflow in CVE-2026-0768 Attacks","article_url":"https://securityaffairs.com/198270/hacking/hackers-target-langflow-in-cve-2026-0768-attacks.html","published_at":"2026-09-02T07:58:46.000Z","valid_from":"2026-09-02T07:58:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2021-31886","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/researchers-use-claude-to-port-pre-auth.html","article_title":"Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another","article_url":"https://thehackernews.com/2026/09/researchers-use-claude-to-port-pre-auth.html","published_at":"2026-09-02T07:47:13.000Z","valid_from":"2026-09-02T07:47:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9586","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/attackers-exploit-critical-switchvox.html","article_title":"Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials","article_url":"https://thehackernews.com/2026/09/attackers-exploit-critical-switchvox.html","published_at":"2026-09-02T07:08:50.000Z","valid_from":"2026-09-02T07:08:50.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-83549","source":"SecurityWeek","source_url":"https://www.securityweek.com/sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks/","article_title":"SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks","article_url":"https://www.securityweek.com/sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks/","published_at":"2026-09-02T05:04:52.000Z","valid_from":"2026-09-02T05:04:52.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-83548","source":"SecurityWeek","source_url":"https://www.securityweek.com/sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks/","article_title":"SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks","article_url":"https://www.securityweek.com/sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks/","published_at":"2026-09-02T05:04:52.000Z","valid_from":"2026-09-02T05:04:52.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10078,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33304","article_title":"ISC Stormcast For Wednesday, September 2nd, 2026 https://isc.sans.edu/podcastdetail/10078, (Wed, Sep 2nd)","article_url":"https://isc.sans.edu/diary/rss/33304","published_at":"2026-09-02T02:00:02.000Z","valid_from":"2026-09-02T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0768","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/critical-langflow-flaw-exploited-to-steal-openai-and-aws-keys/","article_title":"Critical Langflow flaw exploited to steal OpenAI and AWS keys","article_url":"https://www.bleepingcomputer.com/news/security/critical-langflow-flaw-exploited-to-steal-openai-and-aws-keys/","published_at":"2026-09-01T17:54:22.000Z","valid_from":"2026-09-01T17:54:22.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82329","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/attackers-exploit-critical-jfrog.html","article_title":"Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure","article_url":"https://thehackernews.com/2026/09/attackers-exploit-critical-jfrog.html","published_at":"2026-09-01T17:53:11.000Z","valid_from":"2026-09-01T17:53:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0768","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-langflow-rce-flaw/","article_title":"Hackers Exploit Langflow RCE Flaw to Harvest OpenAI and AWS Credentials","article_url":"https://gbhackers.com/hackers-exploit-langflow-rce-flaw/","published_at":"2026-09-01T13:08:17.000Z","valid_from":"2026-09-01T13:08:17.000Z","origin":"rss"},{"type":"domain","value":"chatgpt.com","source":"GBHackers","source_url":"https://gbhackers.com/chatgpt-links-abused/","article_title":"Hackers Abuse Legitimate ChatGPT Shared Links to Deploy NetSupport RAT","article_url":"https://gbhackers.com/chatgpt-links-abused/","published_at":"2026-09-01T12:44:00.000Z","valid_from":"2026-09-01T12:44:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0768","source":"SecurityWeek","source_url":"https://www.securityweek.com/hackers-start-exploiting-critical-langflow-vulnerability/","article_title":"Hackers Start Exploiting Critical Langflow Vulnerability","article_url":"https://www.securityweek.com/hackers-start-exploiting-critical-langflow-vulnerability/","published_at":"2026-09-01T12:07:54.000Z","valid_from":"2026-09-01T12:07:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82329","source":"GBHackers","source_url":"https://gbhackers.com/critical-jfrog-artifactory-authentication-bypass-exploited/","article_title":"Critical JFrog Artifactory Authentication Bypass Exploited in the Wild","article_url":"https://gbhackers.com/critical-jfrog-artifactory-authentication-bypass-exploited/","published_at":"2026-09-01T12:03:38.000Z","valid_from":"2026-09-01T12:03:38.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9621","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-01","article_title":"Rockwell Automation RSLinx Classic","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-01","published_at":"2026-09-01T12:00:00.000Z","valid_from":"2026-09-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9622","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-01","article_title":"Rockwell Automation RSLinx Classic","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-01","published_at":"2026-09-01T12:00:00.000Z","valid_from":"2026-09-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9624","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-01","article_title":"Rockwell Automation RSLinx Classic","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-01","published_at":"2026-09-01T12:00:00.000Z","valid_from":"2026-09-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9625","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-01","article_title":"Rockwell Automation RSLinx Classic","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-01","published_at":"2026-09-01T12:00:00.000Z","valid_from":"2026-09-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-12768","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-06","article_title":"Rockwell Automation Historian ME","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-06","published_at":"2026-09-01T12:00:00.000Z","valid_from":"2026-09-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12661","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-06","article_title":"Rockwell Automation Historian ME","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-06","published_at":"2026-09-01T12:00:00.000Z","valid_from":"2026-09-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2021-42260","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-05","article_title":"Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-05","published_at":"2026-09-01T12:00:00.000Z","valid_from":"2026-09-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9637","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-03","article_title":"Rockwell Automation Logix Platform","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-03","published_at":"2026-09-01T12:00:00.000Z","valid_from":"2026-09-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9633","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-02","article_title":"Rockwell Automation Redundancy Module Configuration Tool","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-02","published_at":"2026-09-01T12:00:00.000Z","valid_from":"2026-09-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16675","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-04","article_title":"Rockwell Automation FactoryTalk Activation Manager","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-244-04","published_at":"2026-09-01T12:00:00.000Z","valid_from":"2026-09-01T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82329","source":"SecurityWeek","source_url":"https://www.securityweek.com/critical-jfrog-artifactory-vulnerability-reportedly-exploited-in-the-wild/","article_title":"Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild","article_url":"https://www.securityweek.com/critical-jfrog-artifactory-vulnerability-reportedly-exploited-in-the-wild/","published_at":"2026-09-01T09:59:44.000Z","valid_from":"2026-09-01T09:59:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81578","source":"Security Affairs","source_url":"https://securityaffairs.com/198200/security/u-s-cisa-adds-papercut-ng-mf-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/198200/security/u-s-cisa-adds-papercut-ng-mf-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-09-01T08:13:38.000Z","valid_from":"2026-09-01T08:13:38.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0768","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/attackers-exploit-critical-langflow-and.html","article_title":"Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity","article_url":"https://thehackernews.com/2026/09/attackers-exploit-critical-langflow-and.html","published_at":"2026-09-01T07:22:30.000Z","valid_from":"2026-09-01T07:22:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"The Hacker News","source_url":"https://thehackernews.com/2026/09/attackers-exploit-critical-langflow-and.html","article_title":"Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity","article_url":"https://thehackernews.com/2026/09/attackers-exploit-critical-langflow-and.html","published_at":"2026-09-01T07:22:30.000Z","valid_from":"2026-09-01T07:22:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62911","source":"GBHackers","source_url":"https://gbhackers.com/poc-released-for-microsoft-exchange-cve-2026-62911/","article_title":"PoC Released for Microsoft Exchange CVE-2026-62911 Pre-Auth RCE Attack Chain","article_url":"https://gbhackers.com/poc-released-for-microsoft-exchange-cve-2026-62911/","published_at":"2026-09-01T06:24:56.000Z","valid_from":"2026-09-01T06:24:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82078","source":"SecurityWeek","source_url":"https://www.securityweek.com/papercut-exploitation-escalates-to-active-intrusions/","article_title":"PaperCut Exploitation Escalates to Active Intrusions","article_url":"https://www.securityweek.com/papercut-exploitation-escalates-to-active-intrusions/","published_at":"2026-09-01T05:27:18.000Z","valid_from":"2026-09-01T05:27:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81578","source":"SecurityWeek","source_url":"https://www.securityweek.com/papercut-exploitation-escalates-to-active-intrusions/","article_title":"PaperCut Exploitation Escalates to Active Intrusions","article_url":"https://www.securityweek.com/papercut-exploitation-escalates-to-active-intrusions/","published_at":"2026-09-01T05:27:18.000Z","valid_from":"2026-09-01T05:27:18.000Z","origin":"rss"},{"type":"ipv4","value":"162.55.80.0","source":"GBHackers","source_url":"https://gbhackers.com/bgp-hijacking-attack-delivers-malicious-virtualizor-updates/","article_title":"BGP Hijacking Attack Delivers Malicious Virtualizor Updates to Servers","article_url":"https://gbhackers.com/bgp-hijacking-attack-delivers-malicious-virtualizor-updates/","published_at":"2026-09-01T05:13:19.000Z","valid_from":"2026-09-01T05:13:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81578","source":"GBHackers","source_url":"https://gbhackers.com/cisa-flags-multiple-papercut-ng-mf-flaws/","article_title":"CISA Flags Multiple PaperCut NG/MF Flaws Exploited in the Wild","article_url":"https://gbhackers.com/cisa-flags-multiple-papercut-ng-mf-flaws/","published_at":"2026-09-01T04:47:27.000Z","valid_from":"2026-09-01T04:47:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82078","source":"GBHackers","source_url":"https://gbhackers.com/cisa-flags-multiple-papercut-ng-mf-flaws/","article_title":"CISA Flags Multiple PaperCut NG/MF Flaws Exploited in the Wild","article_url":"https://gbhackers.com/cisa-flags-multiple-papercut-ng-mf-flaws/","published_at":"2026-09-01T04:47:27.000Z","valid_from":"2026-09-01T04:47:27.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10076,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33302","article_title":"ISC Stormcast For Tuesday, September 1st, 2026 https://isc.sans.edu/podcastdetail/10076, (Tue, Sep 1st)","article_url":"https://isc.sans.edu/diary/rss/33302","published_at":"2026-09-01T02:00:03.000Z","valid_from":"2026-09-01T02:00:03.000Z","origin":"rss"},{"type":"ipv4","value":"0.8.3.1","source":"Exploit Database","source_url":"https://www.exploit-db.com/exploits/52672","article_title":"[webapps] Wolf CMS 0.8.3.1 - RCE v","article_url":"https://www.exploit-db.com/exploits/52672","published_at":"2026-09-01T00:00:00.000Z","valid_from":"2026-09-01T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2023-49105","source":"SC Media","source_url":"https://www.scworld.com/brief/suspected-chinese-actor-targets-philippine-nuclear-and-naval-entities-using-known-vulnerabilities","article_title":"Suspected Chinese actor targets Philippine nuclear and naval entities using known vulnerabilities","article_url":"https://www.scworld.com/brief/suspected-chinese-actor-targets-philippine-nuclear-and-naval-entities-using-known-vulnerabilities","published_at":"2026-08-31T13:36:07.000Z","valid_from":"2026-08-31T13:36:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81578","source":"GBHackers","source_url":"https://gbhackers.com/metasploit-adds-exploit-for-papercut-mf-ng-zero-day/","article_title":"Metasploit Adds Exploit for PaperCut MF/NG Zero-Day RCE Vulnerabilities","article_url":"https://gbhackers.com/metasploit-adds-exploit-for-papercut-mf-ng-zero-day/","published_at":"2026-08-31T12:06:08.000Z","valid_from":"2026-08-31T12:06:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82078","source":"GBHackers","source_url":"https://gbhackers.com/metasploit-adds-exploit-for-papercut-mf-ng-zero-day/","article_title":"Metasploit Adds Exploit for PaperCut MF/NG Zero-Day RCE Vulnerabilities","article_url":"https://gbhackers.com/metasploit-adds-exploit-for-papercut-mf-ng-zero-day/","published_at":"2026-08-31T12:06:08.000Z","valid_from":"2026-08-31T12:06:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81578","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/31/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/31/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-08-31T12:00:00.000Z","valid_from":"2026-08-31T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82078","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/31/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/31/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-08-31T12:00:00.000Z","valid_from":"2026-08-31T12:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"4.16.7.2","source":"Security Affairs","source_url":"https://securityaffairs.com/198156/security/critical-givewp-flaw-lets-attackers-run-commands-on-wordpress-servers.html","article_title":"Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers","article_url":"https://securityaffairs.com/198156/security/critical-givewp-flaw-lets-attackers-run-commands-on-wordpress-servers.html","published_at":"2026-08-31T07:41:24.000Z","valid_from":"2026-08-31T07:41:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59944","source":"GBHackers","source_url":"https://gbhackers.com/composer-path-traversal-flaw/","article_title":"Composer Path Traversal Flaw Lets Malicious Packages Expose Sensitive Files","article_url":"https://gbhackers.com/composer-path-traversal-flaw/","published_at":"2026-08-31T07:00:20.000Z","valid_from":"2026-08-31T07:00:20.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-82078","source":"SecurityWeek","source_url":"https://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/","article_title":"More Details Emerge on Exploited PaperCut Vulnerabilities","article_url":"https://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/","published_at":"2026-08-31T06:51:31.000Z","valid_from":"2026-08-31T06:51:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-81578","source":"SecurityWeek","source_url":"https://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/","article_title":"More Details Emerge on Exploited PaperCut Vulnerabilities","article_url":"https://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/","published_at":"2026-08-31T06:51:31.000Z","valid_from":"2026-08-31T06:51:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73296","source":"GBHackers","source_url":"https://gbhackers.com/critical-microsoft-ufo-mcp-flaw/","article_title":"Critical Microsoft UFO MCP Flaw Lets Attackers Remotely Control Android Devices Without Authentication","article_url":"https://gbhackers.com/critical-microsoft-ufo-mcp-flaw/","published_at":"2026-08-31T06:13:19.000Z","valid_from":"2026-08-31T06:13:19.000Z","origin":"rss"},{"type":"ipv4","value":"1.1.1.2","source":"GBHackers","source_url":"https://gbhackers.com/simple-router-dns-tweak-blocks-malware-and-phishing/","article_title":"Simple Router DNS Tweak Blocks Malware and Phishing Across All Connected Devices","article_url":"https://gbhackers.com/simple-router-dns-tweak-blocks-malware-and-phishing/","published_at":"2026-08-31T05:18:56.000Z","valid_from":"2026-08-31T05:18:56.000Z","origin":"rss"},{"type":"ipv4","value":"1.0.0.2","source":"GBHackers","source_url":"https://gbhackers.com/simple-router-dns-tweak-blocks-malware-and-phishing/","article_title":"Simple Router DNS Tweak Blocks Malware and Phishing Across All Connected Devices","article_url":"https://gbhackers.com/simple-router-dns-tweak-blocks-malware-and-phishing/","published_at":"2026-08-31T05:18:56.000Z","valid_from":"2026-08-31T05:18:56.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10074,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33296","article_title":"ISC Stormcast For Monday, August 31st, 2026 https://isc.sans.edu/podcastdetail/10074, (Mon, Aug 31st)","article_url":"https://isc.sans.edu/diary/rss/33296","published_at":"2026-08-31T02:00:03.000Z","valid_from":"2026-08-31T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/30/week-in-review-compromised-zimbra-servers-previously-patched-citrix-netscaler-flaw-exploited/","article_title":"Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited","article_url":"https://www.helpnetsecurity.com/2026/08/30/week-in-review-compromised-zimbra-servers-previously-patched-citrix-netscaler-flaw-exploited/","published_at":"2026-08-30T08:00:48.000Z","valid_from":"2026-08-30T08:00:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76581","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html","article_title":"Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE","article_url":"https://thehackernews.com/2026/08/five-critical-wordpress-plugin-and.html","published_at":"2026-08-29T16:25:03.000Z","valid_from":"2026-08-29T16:25:03.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"Security Affairs","source_url":"https://securityaffairs.com/198041/intelligence/philippine-nuclear-and-naval-targets-hit-by-suspected-chinese-operator.html","article_title":"Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator","article_url":"https://securityaffairs.com/198041/intelligence/philippine-nuclear-and-naval-targets-hit-by-suspected-chinese-operator.html","published_at":"2026-08-29T09:16:52.000Z","valid_from":"2026-08-29T09:16:52.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-52813","source":"GBHackers","source_url":"https://gbhackers.com/critical-gogs-flaw-enables-remote-code-execution/","article_title":"Critical Gogs Flaw Enables Remote Code Execution Through Path Traversal","article_url":"https://gbhackers.com/critical-gogs-flaw-enables-remote-code-execution/","published_at":"2026-08-29T08:03:29.000Z","valid_from":"2026-08-29T08:03:29.000Z","origin":"rss"},{"type":"ipv4","value":"4.16.7.1","source":"SC Media","source_url":"https://www.scworld.com/brief/critical-vulnerability-in-givewp-plugin-allows-remote-code-execution","article_title":"Critical vulnerability in GiveWP plugin allows remote code execution","article_url":"https://www.scworld.com/brief/critical-vulnerability-in-givewp-plugin-allows-remote-code-execution","published_at":"2026-08-28T21:37:46.000Z","valid_from":"2026-08-28T21:37:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2023-49105","source":"SC Media","source_url":"https://www.scworld.com/brief/cisa-adds-owncloud-linux-kernel-and-jfrog-artifactory-flaws-to-exploited-vulnerabilities-list","article_title":"CISA adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to exploited vulnerabilities list","article_url":"https://www.scworld.com/brief/cisa-adds-owncloud-linux-kernel-and-jfrog-artifactory-flaws-to-exploited-vulnerabilities-list","published_at":"2026-08-28T21:35:17.000Z","valid_from":"2026-08-28T21:35:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76639","source":"SC Media","source_url":"https://www.scworld.com/brief/two-root-remote-code-execution-flaws-found-in-unitree-g1-edu-robot","article_title":"Two root remote code execution flaws found in Unitree G1 EDU robot","article_url":"https://www.scworld.com/brief/two-root-remote-code-execution-flaws-found-in-unitree-g1-edu-robot","published_at":"2026-08-28T21:31:39.000Z","valid_from":"2026-08-28T21:31:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76640","source":"SC Media","source_url":"https://www.scworld.com/brief/two-root-remote-code-execution-flaws-found-in-unitree-g1-edu-robot","article_title":"Two root remote code execution flaws found in Unitree G1 EDU robot","article_url":"https://www.scworld.com/brief/two-root-remote-code-execution-flaws-found-in-unitree-g1-edu-robot","published_at":"2026-08-28T21:31:39.000Z","valid_from":"2026-08-28T21:31:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2023-49105","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets.html","article_title":"ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body","article_url":"https://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets.html","published_at":"2026-08-28T15:56:55.000Z","valid_from":"2026-08-28T15:56:55.000Z","origin":"rss"},{"type":"cve","value":"CVE-2023-49105","source":"Security Affairs","source_url":"https://securityaffairs.com/198014/hacking/u-s-cisa-adds-owncloud-linux-kernel-and-jfrog-artifactory-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/198014/hacking/u-s-cisa-adds-owncloud-linux-kernel-and-jfrog-artifactory-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-28T13:54:50.000Z","valid_from":"2026-08-28T13:54:50.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53362","source":"SecurityWeek","source_url":"https://www.securityweek.com/openai-agents-exploited-linux-kernel-flaw-on-companys-own-systems/","article_title":"OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems","article_url":"https://www.securityweek.com/openai-agents-exploited-linux-kernel-flaw-on-companys-own-systems/","published_at":"2026-08-28T12:36:53.000Z","valid_from":"2026-08-28T12:36:53.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76639","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.html","article_title":"Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth","article_url":"https://thehackernews.com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.html","published_at":"2026-08-28T12:07:24.000Z","valid_from":"2026-08-28T12:07:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76640","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.html","article_title":"Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth","article_url":"https://thehackernews.com/2026/08/two-unitree-g1-edu-humanoid-robot-flaws.html","published_at":"2026-08-28T12:07:24.000Z","valid_from":"2026-08-28T12:07:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76581","source":"GBHackers","source_url":"https://gbhackers.com/critical-wordpress-plugin-flaw-2/","article_title":"Critical WordPress Plugin Flaw Allows Unauthenticated Administrator Account Takeover","article_url":"https://gbhackers.com/critical-wordpress-plugin-flaw-2/","published_at":"2026-08-28T11:31:13.000Z","valid_from":"2026-08-28T11:31:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6876","source":"GBHackers","source_url":"https://gbhackers.com/servicenow-patches-critical-flaws/","article_title":"ServiceNow Patches Critical Flaws Enabling Unauthenticated RCE and SQL Injection","article_url":"https://gbhackers.com/servicenow-patches-critical-flaws/","published_at":"2026-08-28T11:19:49.000Z","valid_from":"2026-08-28T11:19:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18885","source":"GBHackers","source_url":"https://gbhackers.com/servicenow-patches-critical-flaws/","article_title":"ServiceNow Patches Critical Flaws Enabling Unauthenticated RCE and SQL Injection","article_url":"https://gbhackers.com/servicenow-patches-critical-flaws/","published_at":"2026-08-28T11:19:49.000Z","valid_from":"2026-08-28T11:19:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18886","source":"GBHackers","source_url":"https://gbhackers.com/servicenow-patches-critical-flaws/","article_title":"ServiceNow Patches Critical Flaws Enabling Unauthenticated RCE and SQL Injection","article_url":"https://gbhackers.com/servicenow-patches-critical-flaws/","published_at":"2026-08-28T11:19:49.000Z","valid_from":"2026-08-28T11:19:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-74820","source":"GBHackers","source_url":"https://gbhackers.com/servicenow-patches-critical-flaws/","article_title":"ServiceNow Patches Critical Flaws Enabling Unauthenticated RCE and SQL Injection","article_url":"https://gbhackers.com/servicenow-patches-critical-flaws/","published_at":"2026-08-28T11:19:49.000Z","valid_from":"2026-08-28T11:19:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-74232","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/china-made-zbt-routers-ship-with-two.html","article_title":"China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access","article_url":"https://thehackernews.com/2026/08/china-made-zbt-routers-ship-with-two.html","published_at":"2026-08-28T10:58:29.000Z","valid_from":"2026-08-28T10:58:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-74233","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/china-made-zbt-routers-ship-with-two.html","article_title":"China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access","article_url":"https://thehackernews.com/2026/08/china-made-zbt-routers-ship-with-two.html","published_at":"2026-08-28T10:58:29.000Z","valid_from":"2026-08-28T10:58:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65643","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/critical-cpanel-flaw-could-let-one.html","article_title":"Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server","article_url":"https://thehackernews.com/2026/08/critical-cpanel-flaw-could-let-one.html","published_at":"2026-08-28T09:45:15.000Z","valid_from":"2026-08-28T09:45:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2015-3246","source":"Security Affairs","source_url":"https://securityaffairs.com/197975/hacking/u-s-cisa-adds-red-hat-linux-kernel-ajax-net-professional-microsoft-sql-server-and-citrix-netscaler-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197975/hacking/u-s-cisa-adds-red-hat-linux-kernel-ajax-net-professional-microsoft-sql-server-and-citrix-netscaler-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-28T09:07:41.000Z","valid_from":"2026-08-28T09:07:41.000Z","origin":"rss"},{"type":"domain","value":"ajax.net","source":"Security Affairs","source_url":"https://securityaffairs.com/197975/hacking/u-s-cisa-adds-red-hat-linux-kernel-ajax-net-professional-microsoft-sql-server-and-citrix-netscaler-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197975/hacking/u-s-cisa-adds-red-hat-linux-kernel-ajax-net-professional-microsoft-sql-server-and-citrix-netscaler-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-28T09:07:41.000Z","valid_from":"2026-08-28T09:07:41.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65643","source":"GBHackers","source_url":"https://gbhackers.com/critical-cpanel-vulnerability/","article_title":"Critical cPanel Vulnerability Allows Attackers to Gain Full Root Control of Servers","article_url":"https://gbhackers.com/critical-cpanel-vulnerability/","published_at":"2026-08-28T04:59:15.000Z","valid_from":"2026-08-28T04:59:15.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10072,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33294","article_title":"ISC Stormcast For Friday, August 28th, 2026 https://isc.sans.edu/podcastdetail/10072, (Fri, Aug 28th)","article_url":"https://isc.sans.edu/diary/rss/33294","published_at":"2026-08-28T02:00:02.000Z","valid_from":"2026-08-28T02:00:02.000Z","origin":"rss"},{"type":"ipv4","value":"1.1.1.1","source":"Cloudflare Blog","source_url":"https://blog.cloudflare.com/dns-cache-memory-optimization-1111/","article_title":"How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache","article_url":"https://blog.cloudflare.com/dns-cache-memory-optimization-1111/","published_at":"2026-08-27T17:02:35.000Z","valid_from":"2026-08-27T17:02:35.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75604","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html","article_title":"Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE","article_url":"https://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html","published_at":"2026-08-27T15:13:00.000Z","valid_from":"2026-08-27T15:13:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2023-49105","source":"GBHackers","source_url":"https://gbhackers.com/cve-2023-49105-flaw-exploited/","article_title":"Hackers Exploit CVE-2023-49105 to Steal Nuclear Records From Philippine Research Agency","article_url":"https://gbhackers.com/cve-2023-49105-flaw-exploited/","published_at":"2026-08-27T12:55:19.000Z","valid_from":"2026-08-27T12:55:19.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"GBHackers","source_url":"https://gbhackers.com/cve-2023-49105-flaw-exploited/","article_title":"Hackers Exploit CVE-2023-49105 to Steal Nuclear Records From Philippine Research Agency","article_url":"https://gbhackers.com/cve-2023-49105-flaw-exploited/","published_at":"2026-08-27T12:55:19.000Z","valid_from":"2026-08-27T12:55:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-3511","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-03","article_title":"Mitsubishi Electric Multiple FA Products (Update D)","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-03","published_at":"2026-08-27T12:00:00.000Z","valid_from":"2026-08-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75112","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-03","article_title":"Rockwell Automation OTTO Fleet Manager","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-03","published_at":"2026-08-27T12:00:00.000Z","valid_from":"2026-08-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-78037","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01","article_title":"Xiiaozet LK100W","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01","published_at":"2026-08-27T12:00:00.000Z","valid_from":"2026-08-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-78239","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01","article_title":"Xiiaozet LK100W","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01","published_at":"2026-08-27T12:00:00.000Z","valid_from":"2026-08-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76943","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01","article_title":"Xiiaozet LK100W","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-01","published_at":"2026-08-27T12:00:00.000Z","valid_from":"2026-08-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-2399","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-078-05","article_title":"Mitsubishi Electric CNC Series (Update A)","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-078-05","published_at":"2026-08-27T12:00:00.000Z","valid_from":"2026-08-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2023-49105","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/27/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/27/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-27T12:00:00.000Z","valid_from":"2026-08-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53362","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/27/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/27/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-27T12:00:00.000Z","valid_from":"2026-08-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66384","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/27/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/27/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-27T12:00:00.000Z","valid_from":"2026-08-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8452","source":"GBHackers","source_url":"https://gbhackers.com/cisa-warns-citrix-netscaler-adc-and-gateway-vulnerability/","article_title":"CISA Warns of Actively Exploited Citrix NetScaler ADC and Gateway Vulnerability","article_url":"https://gbhackers.com/cisa-warns-citrix-netscaler-adc-and-gateway-vulnerability/","published_at":"2026-08-27T11:07:32.000Z","valid_from":"2026-08-27T11:07:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-76784","source":"GBHackers","source_url":"https://gbhackers.com/tp-link-kasa-smart-home-flaw/","article_title":"TP-Link Kasa Smart Home Flaw Lets Attackers Forge Control Messages and Take Control of Devices","article_url":"https://gbhackers.com/tp-link-kasa-smart-home-flaw/","published_at":"2026-08-27T10:52:45.000Z","valid_from":"2026-08-27T10:52:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8452","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/27/netscaler-adc-gateway-cve-2026-8452/","article_title":"Previously patched Citrix NetScaler flaw exploited in the wild (CVE-2026-8452)","article_url":"https://www.helpnetsecurity.com/2026/08/27/netscaler-adc-gateway-cve-2026-8452/","published_at":"2026-08-27T09:58:24.000Z","valid_from":"2026-08-27T09:58:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2019-1068","source":"GBHackers","source_url":"https://gbhackers.com/microsoft-sql-server-rce-vulnerability/","article_title":"CISA Warns of Actively Exploited Microsoft SQL Server RCE Vulnerability","article_url":"https://gbhackers.com/microsoft-sql-server-rce-vulnerability/","published_at":"2026-08-27T09:49:47.000Z","valid_from":"2026-08-27T09:49:47.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65641","source":"GBHackers","source_url":"https://gbhackers.com/critical-veeam-one-flaw-2/","article_title":"Critical Veeam ONE Flaw Lets Unauthenticated Attackers Coerce SMB Authentication From Service Accounts","article_url":"https://gbhackers.com/critical-veeam-one-flaw-2/","published_at":"2026-08-27T09:30:34.000Z","valid_from":"2026-08-27T09:30:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18252","source":"GBHackers","source_url":"https://gbhackers.com/gitlab-duo-claude-ai-agent-flaw/","article_title":"GitLab Duo Claude AI Agent Flaw Lets Attackers Execute Arbitrary Commands in CI Pipelines","article_url":"https://gbhackers.com/gitlab-duo-claude-ai-agent-flaw/","published_at":"2026-08-27T09:24:53.000Z","valid_from":"2026-08-27T09:24:53.000Z","origin":"rss"},{"type":"cve","value":"CVE-2019-1068","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/cisa-adds-six-exploited-flaws-to-kev.html","article_title":"CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs","article_url":"https://thehackernews.com/2026/08/cisa-adds-six-exploited-flaws-to-kev.html","published_at":"2026-08-27T07:05:28.000Z","valid_from":"2026-08-27T07:05:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8452","source":"SecurityWeek","source_url":"https://www.securityweek.com/recent-citrix-netscaler-vulnerability-exploited-in-the-wild/","article_title":"Recent Citrix NetScaler Vulnerability Exploited in the Wild","article_url":"https://www.securityweek.com/recent-citrix-netscaler-vulnerability-exploited-in-the-wild/","published_at":"2026-08-27T04:39:19.000Z","valid_from":"2026-08-27T04:39:19.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10070,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33286","article_title":"ISC Stormcast For Thursday, August 27th, 2026 https://isc.sans.edu/podcastdetail/10070, (Thu, Aug 27th)","article_url":"https://isc.sans.edu/diary/rss/33286","published_at":"2026-08-27T02:00:03.000Z","valid_from":"2026-08-27T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-77537","source":"SC Media","source_url":"https://www.scworld.com/brief/ubiquiti-patches-three-critical-remote-code-execution-vulnerabilities","article_title":"Ubiquiti patches 3 critical remote code execution vulnerabilities","article_url":"https://www.scworld.com/brief/ubiquiti-patches-three-critical-remote-code-execution-vulnerabilities","published_at":"2026-08-26T22:31:49.000Z","valid_from":"2026-08-26T22:31:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-77550","source":"SC Media","source_url":"https://www.scworld.com/brief/ubiquiti-patches-three-critical-remote-code-execution-vulnerabilities","article_title":"Ubiquiti patches 3 critical remote code execution vulnerabilities","article_url":"https://www.scworld.com/brief/ubiquiti-patches-three-critical-remote-code-execution-vulnerabilities","published_at":"2026-08-26T22:31:49.000Z","valid_from":"2026-08-26T22:31:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-77554","source":"SC Media","source_url":"https://www.scworld.com/brief/ubiquiti-patches-three-critical-remote-code-execution-vulnerabilities","article_title":"Ubiquiti patches 3 critical remote code execution vulnerabilities","article_url":"https://www.scworld.com/brief/ubiquiti-patches-three-critical-remote-code-execution-vulnerabilities","published_at":"2026-08-26T22:31:49.000Z","valid_from":"2026-08-26T22:31:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65105","source":"SC Media","source_url":"https://www.scworld.com/brief/nvidia-nemoclaw-vulnerability-allows-full-control-of-ai-agents-local-model-server","article_title":"Nvidia NemoClaw vulnerability allows full control of AI agent's local model server","article_url":"https://www.scworld.com/brief/nvidia-nemoclaw-vulnerability-allows-full-control-of-ai-agents-local-model-server","published_at":"2026-08-26T14:22:54.000Z","valid_from":"2026-08-26T14:22:54.000Z","origin":"rss"},{"type":"domain","value":"private.icloud.com","source":"SC Media","source_url":"https://www.scworld.com/brief/apple-reverses-hide-my-email-domain-change-after-user-backlash","article_title":"Apple reverses Hide My Email domain change after user backlash","article_url":"https://www.scworld.com/brief/apple-reverses-hide-my-email-domain-change-after-user-backlash","published_at":"2026-08-26T14:18:21.000Z","valid_from":"2026-08-26T14:18:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57910","source":"GBHackers","source_url":"https://gbhackers.com/critical-watchguard-agent-flaws/","article_title":"Critical WatchGuard Agent Flaws Let Unauthenticated Attackers Execute Remote Code","article_url":"https://gbhackers.com/critical-watchguard-agent-flaws/","published_at":"2026-08-26T12:28:30.000Z","valid_from":"2026-08-26T12:28:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57909","source":"GBHackers","source_url":"https://gbhackers.com/critical-watchguard-agent-flaws/","article_title":"Critical WatchGuard Agent Flaws Let Unauthenticated Attackers Execute Remote Code","article_url":"https://gbhackers.com/critical-watchguard-agent-flaws/","published_at":"2026-08-26T12:28:30.000Z","valid_from":"2026-08-26T12:28:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66152","source":"GBHackers","source_url":"https://gbhackers.com/sonicwall-netextender-flaw/","article_title":"SonicWall NetExtender Flaw Lets Attackers Write Arbitrary Files as Root","article_url":"https://gbhackers.com/sonicwall-netextender-flaw/","published_at":"2026-08-26T12:18:33.000Z","valid_from":"2026-08-26T12:18:33.000Z","origin":"rss"},{"type":"cve","value":"CVE-2015-3246","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Six Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog","published_at":"2026-08-26T12:00:00.000Z","valid_from":"2026-08-26T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2015-5287","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Six Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog","published_at":"2026-08-26T12:00:00.000Z","valid_from":"2026-08-26T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2019-1068","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Six Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog","published_at":"2026-08-26T12:00:00.000Z","valid_from":"2026-08-26T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2021-23758","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Six Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog","published_at":"2026-08-26T12:00:00.000Z","valid_from":"2026-08-26T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2022-0995","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Six Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog","published_at":"2026-08-26T12:00:00.000Z","valid_from":"2026-08-26T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"ajax.net","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Six Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog","published_at":"2026-08-26T12:00:00.000Z","valid_from":"2026-08-26T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19913","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.html","article_title":"Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code","article_url":"https://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.html","published_at":"2026-08-26T11:55:00.000Z","valid_from":"2026-08-26T11:55:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19912","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.html","article_title":"Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code","article_url":"https://thehackernews.com/2026/08/unpatched-kaltura-mwembed-flaws-could.html","published_at":"2026-08-26T11:55:00.000Z","valid_from":"2026-08-26T11:55:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60004","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/26/gitea-cve-2026-60004-exploited-in-the-wild/","article_title":"Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)","article_url":"https://www.helpnetsecurity.com/2026/08/26/gitea-cve-2026-60004-exploited-in-the-wild/","published_at":"2026-08-26T10:59:58.000Z","valid_from":"2026-08-26T10:59:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19632","source":"GBHackers","source_url":"https://gbhackers.com/critical-wordpress-translatepress-flaw/","article_title":"Critical WordPress TranslatePress Flaw Lets Attackers Take Over Admin Accounts","article_url":"https://gbhackers.com/critical-wordpress-translatepress-flaw/","published_at":"2026-08-26T10:18:20.000Z","valid_from":"2026-08-26T10:18:20.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65105","source":"GBHackers","source_url":"https://gbhackers.com/nvidia-nemoclaw-vulnerability/","article_title":"NVIDIA NemoClaw Vulnerability Lets Attackers Hijack AI Agents via DNS Rebinding","article_url":"https://gbhackers.com/nvidia-nemoclaw-vulnerability/","published_at":"2026-08-26T09:30:26.000Z","valid_from":"2026-08-26T09:30:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"GBHackers","source_url":"https://gbhackers.com/microsoft-sharepoint-flaws/","article_title":"Microsoft SharePoint Flaws Let Unauthenticated Attackers Execute Remote Code","article_url":"https://gbhackers.com/microsoft-sharepoint-flaws/","published_at":"2026-08-26T09:04:28.000Z","valid_from":"2026-08-26T09:04:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63520","source":"GBHackers","source_url":"https://gbhackers.com/microsoft-sharepoint-flaws/","article_title":"Microsoft SharePoint Flaws Let Unauthenticated Attackers Execute Remote Code","article_url":"https://gbhackers.com/microsoft-sharepoint-flaws/","published_at":"2026-08-26T09:04:28.000Z","valid_from":"2026-08-26T09:04:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60004","source":"Security Affairs","source_url":"https://securityaffairs.com/197854/security/u-s-cisa-adds-gitea-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197854/security/u-s-cisa-adds-gitea-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-26T08:44:12.000Z","valid_from":"2026-08-26T08:44:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60004","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html","article_title":"Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload","article_url":"https://thehackernews.com/2026/08/critical-gitea-rce-actively-exploited.html","published_at":"2026-08-26T06:27:07.000Z","valid_from":"2026-08-26T06:27:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60004","source":"SecurityWeek","source_url":"https://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/","article_title":"CISA Warns of Exploited Gitea Vulnerability","article_url":"https://www.securityweek.com/cisa-warns-of-exploited-gitea-vulnerability/","published_at":"2026-08-26T05:17:28.000Z","valid_from":"2026-08-26T05:17:28.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10068,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33282","article_title":"ISC Stormcast For Wednesday, August 26th, 2026 https://isc.sans.edu/podcastdetail/10068, (Wed, Aug 26th)","article_url":"https://isc.sans.edu/diary/rss/33282","published_at":"2026-08-26T02:40:13.000Z","valid_from":"2026-08-26T02:40:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61979","source":"Security Affairs","source_url":"https://securityaffairs.com/197815/security/two-cvss-9-8-auth-bypasses-in-miniorange-saml-wordpress-plugin-were-exploited-before-any-database-even-listed-the-paid-editions-as-vulnerable.html","article_title":"Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable","article_url":"https://securityaffairs.com/197815/security/two-cvss-9-8-auth-bypasses-in-miniorange-saml-wordpress-plugin-were-exploited-before-any-database-even-listed-the-paid-editions-as-vulnerable.html","published_at":"2026-08-25T16:43:53.000Z","valid_from":"2026-08-25T16:43:53.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15981","source":"Security Affairs","source_url":"https://securityaffairs.com/197815/security/two-cvss-9-8-auth-bypasses-in-miniorange-saml-wordpress-plugin-were-exploited-before-any-database-even-listed-the-paid-editions-as-vulnerable.html","article_title":"Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable","article_url":"https://securityaffairs.com/197815/security/two-cvss-9-8-auth-bypasses-in-miniorange-saml-wordpress-plugin-were-exploited-before-any-database-even-listed-the-paid-editions-as-vulnerable.html","published_at":"2026-08-25T16:43:53.000Z","valid_from":"2026-08-25T16:43:53.000Z","origin":"rss"},{"type":"ipv4","value":"169.254.169.254","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33280","article_title":"Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th)","article_url":"https://isc.sans.edu/diary/rss/33280","published_at":"2026-08-25T15:03:33.000Z","valid_from":"2026-08-25T15:03:33.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61979","source":"SecurityWeek","source_url":"https://www.securityweek.com/wordpress-websites-targeted-via-miniorange-plugin-vulnerabilities/","article_title":"WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities","article_url":"https://www.securityweek.com/wordpress-websites-targeted-via-miniorange-plugin-vulnerabilities/","published_at":"2026-08-25T13:33:12.000Z","valid_from":"2026-08-25T13:33:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15981","source":"SecurityWeek","source_url":"https://www.securityweek.com/wordpress-websites-targeted-via-miniorange-plugin-vulnerabilities/","article_title":"WordPress Websites Targeted via MiniOrange Plugin Vulnerabilities","article_url":"https://www.securityweek.com/wordpress-websites-targeted-via-miniorange-plugin-vulnerabilities/","published_at":"2026-08-25T13:33:12.000Z","valid_from":"2026-08-25T13:33:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-75501","source":"SC Media","source_url":"https://www.scworld.com/brief/unpatched-calix-router-vulnerability-allows-remote-attackers-to-expose-home-networks","article_title":"Unpatched Calix router vulnerability allows remote attackers to expose home networks","article_url":"https://www.scworld.com/brief/unpatched-calix-router-vulnerability-allows-remote-attackers-to-expose-home-networks","published_at":"2026-08-25T13:28:56.000Z","valid_from":"2026-08-25T13:28:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60004","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/25/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/25/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-08-25T12:00:00.000Z","valid_from":"2026-08-25T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59568","source":"GBHackers","source_url":"https://gbhackers.com/multiple-zscaler-client-connector-flaws/","article_title":"Multiple Zscaler Client Connector Flaws Enable Remote Code Execution","article_url":"https://gbhackers.com/multiple-zscaler-client-connector-flaws/","published_at":"2026-08-25T11:13:03.000Z","valid_from":"2026-08-25T11:13:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/25/zimbra-cve-2026-73570-compromised/","article_title":"Unpatched Zimbra servers are falling to CVE-2026-73570 attacks","article_url":"https://www.helpnetsecurity.com/2026/08/25/zimbra-cve-2026-73570-compromised/","published_at":"2026-08-25T10:03:28.000Z","valid_from":"2026-08-25T10:03:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21962","source":"Security Affairs","source_url":"https://securityaffairs.com/197801/security/u-s-cisa-adds-maximum-severity-oracle-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197801/security/u-s-cisa-adds-maximum-severity-oracle-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-25T08:48:51.000Z","valid_from":"2026-08-25T08:48:51.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61979","source":"GBHackers","source_url":"https://gbhackers.com/critical-miniorange-saml-sso-flaws/","article_title":"Critical miniOrange SAML SSO Flaws Let Attackers Take Over WordPress Admin Accounts","article_url":"https://gbhackers.com/critical-miniorange-saml-sso-flaws/","published_at":"2026-08-25T08:36:37.000Z","valid_from":"2026-08-25T08:36:37.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15981","source":"GBHackers","source_url":"https://gbhackers.com/critical-miniorange-saml-sso-flaws/","article_title":"Critical miniOrange SAML SSO Flaws Let Attackers Take Over WordPress Admin Accounts","article_url":"https://gbhackers.com/critical-miniorange-saml-sso-flaws/","published_at":"2026-08-25T08:36:37.000Z","valid_from":"2026-08-25T08:36:37.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61979","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/attackers-target-miniorange-saml-flaws.html","article_title":"Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access","article_url":"https://thehackernews.com/2026/08/attackers-target-miniorange-saml-flaws.html","published_at":"2026-08-25T08:34:07.000Z","valid_from":"2026-08-25T08:34:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18963","source":"GBHackers","source_url":"https://gbhackers.com/critical-red-hat-keycloak-password-reset-flaw/","article_title":"Critical Red Hat Keycloak Password Reset Flaw Enables Unauthenticated Account Takeover","article_url":"https://gbhackers.com/critical-red-hat-keycloak-password-reset-flaw/","published_at":"2026-08-25T08:23:26.000Z","valid_from":"2026-08-25T08:23:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21962","source":"SecurityWeek","source_url":"https://www.securityweek.com/cisa-warns-of-exploited-oracle-weblogic-vulnerability/","article_title":"CISA Warns of Exploited Oracle WebLogic Vulnerability","article_url":"https://www.securityweek.com/cisa-warns-of-exploited-oracle-weblogic-vulnerability/","published_at":"2026-08-25T07:46:34.000Z","valid_from":"2026-08-25T07:46:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21962","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/actively-exploited-oracle-weblogic-flaw.html","article_title":"Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data","article_url":"https://thehackernews.com/2026/08/actively-exploited-oracle-weblogic-flaw.html","published_at":"2026-08-25T06:12:35.000Z","valid_from":"2026-08-25T06:12:35.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21962","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-critical-oracle-http-server-flaw/","article_title":"Hackers Exploit Critical Oracle HTTP Server Flaw to Access and Modify Sensitive Data","article_url":"https://gbhackers.com/hackers-exploit-critical-oracle-http-server-flaw/","published_at":"2026-08-25T05:09:18.000Z","valid_from":"2026-08-25T05:09:18.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10066,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33278","article_title":"ISC Stormcast For Tuesday, August 25th, 2026 https://isc.sans.edu/podcastdetail/10066, (Tue, Aug 25th)","article_url":"https://isc.sans.edu/diary/rss/33278","published_at":"2026-08-25T02:00:03.000Z","valid_from":"2026-08-25T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69414","source":"Qualys Blog","source_url":"https://blog.qualys.com/product-tech/2026/08/24/shieldbreak-the-windows-defender-zero-day-with-no-patch-detect-it-mitigate-it-with-qualys","article_title":"CVE-2026-69414 ShieldBreak Zero-Day: No Patch, and CISA BOD 26-04 Gives You 14 Days","article_url":"https://blog.qualys.com/product-tech/2026/08/24/shieldbreak-the-windows-defender-zero-day-with-no-patch-detect-it-mitigate-it-with-qualys","published_at":"2026-08-25T00:48:03.000Z","valid_from":"2026-08-25T00:48:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42167","source":"Exploit Database","source_url":"https://www.exploit-db.com/exploits/52658","article_title":"[remote] CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE","article_url":"https://www.exploit-db.com/exploits/52658","published_at":"2026-08-25T00:00:00.000Z","valid_from":"2026-08-25T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61979","source":"SC Media","source_url":"https://www.scworld.com/brief/wordpress-plugin-vulnerabilities-allow-admin-account-takeover","article_title":"WordPress plugin vulnerabilities allow admin account takeover","article_url":"https://www.scworld.com/brief/wordpress-plugin-vulnerabilities-allow-admin-account-takeover","published_at":"2026-08-24T22:20:18.000Z","valid_from":"2026-08-24T22:20:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15981","source":"SC Media","source_url":"https://www.scworld.com/brief/wordpress-plugin-vulnerabilities-allow-admin-account-takeover","article_title":"WordPress plugin vulnerabilities allow admin account takeover","article_url":"https://www.scworld.com/brief/wordpress-plugin-vulnerabilities-allow-admin-account-takeover","published_at":"2026-08-24T22:20:18.000Z","valid_from":"2026-08-24T22:20:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63520","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-remote-code-execution-cve-2026-63520","article_title":"Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)","article_url":"https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-remote-code-execution-cve-2026-63520","published_at":"2026-08-24T16:18:05.000Z","valid_from":"2026-08-24T16:18:05.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21962","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/24/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/24/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-08-24T12:00:00.000Z","valid_from":"2026-08-24T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18963","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/critical-keycloak-password-reset-flaw.html","article_title":"Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account","article_url":"https://thehackernews.com/2026/08/critical-keycloak-password-reset-flaw.html","published_at":"2026-08-24T11:56:34.000Z","valid_from":"2026-08-24T11:56:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"GBHackers","source_url":"https://gbhackers.com/zimbra-collaboration-suite-flaw/","article_title":"Zimbra Collaboration Suite Flaw Actively Exploited to Execute Arbitrary Commands","article_url":"https://gbhackers.com/zimbra-collaboration-suite-flaw/","published_at":"2026-08-24T11:24:55.000Z","valid_from":"2026-08-24T11:24:55.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19598","source":"GBHackers","source_url":"https://gbhackers.com/critical-wordpress-pods-flaw/","article_title":"Critical WordPress Pods Flaw Lets Unauthenticated Attackers Gain Admin Access","article_url":"https://gbhackers.com/critical-wordpress-pods-flaw/","published_at":"2026-08-24T07:22:41.000Z","valid_from":"2026-08-24T07:22:41.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19504","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-588/","article_title":"ZDI-26-588: Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-588/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19781","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-587/","article_title":"ZDI-26-587: Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-587/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19886","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-586/","article_title":"ZDI-26-586: OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-586/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19885","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-585/","article_title":"ZDI-26-585: OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-585/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50508","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-605/","article_title":"ZDI-26-605: Microsoft Windows Localized Filenames Improper Input Validation NTLM Response Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-605/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13126","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-604/","article_title":"ZDI-26-604: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-604/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13127","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-603/","article_title":"ZDI-26-603: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-603/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13128","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-602/","article_title":"ZDI-26-602: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-602/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13129","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-601/","article_title":"ZDI-26-601: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-601/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57237","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-600/","article_title":"ZDI-26-600: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-600/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57238","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-599/","article_title":"ZDI-26-599: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-599/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57242","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-598/","article_title":"ZDI-26-598: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-598/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57252","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-597/","article_title":"ZDI-26-597: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-597/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57253","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-596/","article_title":"ZDI-26-596: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-596/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57254","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-595/","article_title":"ZDI-26-595: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-595/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24251","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-594/","article_title":"ZDI-26-594: NVIDIA Megatron Bridge load_model_config Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-594/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24268","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-593/","article_title":"ZDI-26-593: NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-593/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24238","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-592/","article_title":"ZDI-26-592: NVIDIA TensorRT ONNX File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-592/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24272","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-591/","article_title":"ZDI-26-591: NVIDIA TensorRT ONNX File Parsing  Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-591/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19773","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-590/","article_title":"ZDI-26-590: libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-590/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19774","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-589/","article_title":"ZDI-26-589: BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-589/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64715","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-610/","article_title":"ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-610/","published_at":"2026-08-24T05:00:00.000Z","valid_from":"2026-08-24T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10064,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33276","article_title":"ISC Stormcast For Monday, August 24th, 2026 https://isc.sans.edu/podcastdetail/10064, (Mon, Aug 24th)","article_url":"https://isc.sans.edu/diary/rss/33276","published_at":"2026-08-24T02:00:03.000Z","valid_from":"2026-08-24T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"Security Affairs","source_url":"https://securityaffairs.com/197693/security/u-s-cisa-adds-zimbra-collaboration-suite-zcs-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197693/security/u-s-cisa-adds-zimbra-collaboration-suite-zcs-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-22T07:17:49.000Z","valid_from":"2026-08-22T07:17:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69836","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/21/microsoft-entra-id-vulnerability-cve-2026-69836/","article_title":"Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836)","article_url":"https://www.helpnetsecurity.com/2026/08/21/microsoft-entra-id-vulnerability-cve-2026-69836/","published_at":"2026-08-21T12:20:33.000Z","valid_from":"2026-08-21T12:20:33.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/21/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/21/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-08-21T12:00:00.000Z","valid_from":"2026-08-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15580","source":"GBHackers","source_url":"https://gbhackers.com/critical-n-able-passportal-extension-flaw/","article_title":"Critical N-Able PassPortal Extension Flaw Gives Attackers Full Password Vault Access","article_url":"https://gbhackers.com/critical-n-able-passportal-extension-flaw/","published_at":"2026-08-21T11:23:51.000Z","valid_from":"2026-08-21T11:23:51.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"Security Affairs","source_url":"https://securityaffairs.com/197622/uncategorized/gitlab-warns-of-active-exploitation-of-critical-graphql-flaw.html","article_title":"GitLab Warns of Active Exploitation of Critical GraphQL Flaw","article_url":"https://securityaffairs.com/197622/uncategorized/gitlab-warns-of-active-exploitation-of-critical-graphql-flaw.html","published_at":"2026-08-21T09:49:02.000Z","valid_from":"2026-08-21T09:49:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"Security Affairs","source_url":"https://securityaffairs.com/197622/hacking/gitlab-warns-of-active-exploitation-of-critical-graphql-flaw.html","article_title":"GitLab Warns of Active Exploitation of Critical GraphQL Flaw","article_url":"https://securityaffairs.com/197622/hacking/gitlab-warns-of-active-exploitation-of-critical-graphql-flaw.html","published_at":"2026-08-21T09:49:02.000Z","valid_from":"2026-08-21T09:49:02.000Z","origin":"rss"},{"type":"domain","value":"crates.io","source":"CSO Online","source_url":"https://www.csoonline.com/article/4212381/backdoored-rust-packages-hit-crates-io-exposing-developers-to-malware-at-build-time.html","article_title":"Backdoored Rust packages hit crates.io, exposing developers to malware at build time","article_url":"https://www.csoonline.com/article/4212381/backdoored-rust-packages-hit-crates-io-exposing-developers-to-malware-at-build-time.html","published_at":"2026-08-21T09:29:49.000Z","valid_from":"2026-08-21T09:29:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59270","source":"GBHackers","source_url":"https://gbhackers.com/critical-spring-security-ldap-flaw/","article_title":"Critical Spring Security LDAP Flaw Lets Remote Attackers Read and Modify Directory Data","article_url":"https://gbhackers.com/critical-spring-security-ldap-flaw/","published_at":"2026-08-21T09:27:56.000Z","valid_from":"2026-08-21T09:27:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"Security Affairs","source_url":"https://securityaffairs.com/197610/security/polands-cert-warns-of-active-exploitation-of-critical-zimbra-collaboration-suite-flaw.html","article_title":"Poland’s CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw","article_url":"https://securityaffairs.com/197610/security/polands-cert-warns-of-active-exploitation-of-critical-zimbra-collaboration-suite-flaw.html","published_at":"2026-08-21T09:14:02.000Z","valid_from":"2026-08-21T09:14:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19490","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/21/citrix-netscaler-gateway-cve-2026-19490/","article_title":"Citrix urges customers to fix critical NetScaler authentication bypass (CVE-2026-19490)","article_url":"https://www.helpnetsecurity.com/2026/08/21/citrix-netscaler-gateway-cve-2026-19490/","published_at":"2026-08-21T07:55:43.000Z","valid_from":"2026-08-21T07:55:43.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html","article_title":"GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure","article_url":"https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html","published_at":"2026-08-21T07:04:25.000Z","valid_from":"2026-08-21T07:04:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69836","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/microsoft-entra-id-flaw-cvss-100.html","article_title":"Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution","article_url":"https://thehackernews.com/2026/08/microsoft-entra-id-flaw-cvss-100.html","published_at":"2026-08-21T06:06:11.000Z","valid_from":"2026-08-21T06:06:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69836","source":"GBHackers","source_url":"https://gbhackers.com/microsoft-entra-id-rce-flaw/","article_title":"Microsoft Entra ID RCE Flaw Lets Unauthorized Attackers Execute Code Remotely","article_url":"https://gbhackers.com/microsoft-entra-id-rce-flaw/","published_at":"2026-08-21T05:30:33.000Z","valid_from":"2026-08-21T05:30:33.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10062,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33270","article_title":"ISC Stormcast For Friday, August 21st, 2026 https://isc.sans.edu/podcastdetail/10062, (Fri, Aug 21st)","article_url":"https://isc.sans.edu/diary/rss/33270","published_at":"2026-08-21T02:00:03.000Z","valid_from":"2026-08-21T02:00:03.000Z","origin":"rss"},{"type":"domain","value":"crates.io","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/rust-supply-chain-attack-puts-build.html","article_title":"Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads","article_url":"https://thehackernews.com/2026/08/rust-supply-chain-attack-puts-build.html","published_at":"2026-08-20T20:22:35.000Z","valid_from":"2026-08-20T20:22:35.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"SecurityWeek","source_url":"https://www.securityweek.com/hackers-target-zimbra-servers-in-active-exploitation-campaign/","article_title":"Hackers Target Zimbra Servers in Active Exploitation Campaign","article_url":"https://www.securityweek.com/hackers-target-zimbra-servers-in-active-exploitation-campaign/","published_at":"2026-08-20T14:50:49.000Z","valid_from":"2026-08-20T14:50:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2021-33044","source":"SC Media","source_url":"https://www.scworld.com/brief/operation-cameraswarm-compromises-over-14500-dahua-devices","article_title":"Operation CameraSwarm compromises over 14,500 Dahua devices","article_url":"https://www.scworld.com/brief/operation-cameraswarm-compromises-over-14500-dahua-devices","published_at":"2026-08-20T14:46:00.000Z","valid_from":"2026-08-20T14:46:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2021-33045","source":"SC Media","source_url":"https://www.scworld.com/brief/operation-cameraswarm-compromises-over-14500-dahua-devices","article_title":"Operation CameraSwarm compromises over 14,500 Dahua devices","article_url":"https://www.scworld.com/brief/operation-cameraswarm-compromises-over-14500-dahua-devices","published_at":"2026-08-20T14:46:00.000Z","valid_from":"2026-08-20T14:46:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69414","source":"Qualys Blog","source_url":"https://blog.qualys.com/product-tech/2026/08/20/shieldbreak-the-windows-defender-zero-day-with-no-patch-detect-it-mitigate-it-with-qualys","article_title":"ShieldBreak: The Windows Defender Zero-Day With No Patch — Detect It, Mitigate It, With Qualys","article_url":"https://blog.qualys.com/product-tech/2026/08/20/shieldbreak-the-windows-defender-zero-day-with-no-patch-detect-it-mitigate-it-with-qualys","published_at":"2026-08-20T14:02:12.000Z","valid_from":"2026-08-20T14:02:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/attackers-exploit-zimbra-snmp-flaw-for.html","article_title":"Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution","article_url":"https://thehackernews.com/2026/08/attackers-exploit-zimbra-snmp-flaw-for.html","published_at":"2026-08-20T13:24:28.000Z","valid_from":"2026-08-20T13:24:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27875","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-232-01","article_title":"Johnson Controls Simplex Incident Manager","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-232-01","published_at":"2026-08-20T12:00:00.000Z","valid_from":"2026-08-20T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72529","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/20/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/20/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-08-20T12:00:00.000Z","valid_from":"2026-08-20T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72530","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/20/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/20/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-08-20T12:00:00.000Z","valid_from":"2026-08-20T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20320","source":"GBHackers","source_url":"https://gbhackers.com/cisco-broadworks-vulnerability/","article_title":"Cisco BroadWorks Vulnerability Allows Remote Attackers to Access Sensitive Files","article_url":"https://gbhackers.com/cisco-broadworks-vulnerability/","published_at":"2026-08-20T11:42:09.000Z","valid_from":"2026-08-20T11:42:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66794","source":"GBHackers","source_url":"https://gbhackers.com/red-hat-kubernetes-flaw-2/","article_title":"Red Hat Kubernetes Flaw Lets Unauthenticated Attackers Access Internal Cluster Services","article_url":"https://gbhackers.com/red-hat-kubernetes-flaw-2/","published_at":"2026-08-20T10:49:16.000Z","valid_from":"2026-08-20T10:49:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41473","source":"GBHackers","source_url":"https://gbhackers.com/cyberpanel-pre-auth-rce-flaws/","article_title":"CyberPanel Pre-Auth RCE Flaws Let Attackers Gain Remote Server Access","article_url":"https://gbhackers.com/cyberpanel-pre-auth-rce-flaws/","published_at":"2026-08-20T09:15:43.000Z","valid_from":"2026-08-20T09:15:43.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41472","source":"GBHackers","source_url":"https://gbhackers.com/cyberpanel-pre-auth-rce-flaws/","article_title":"CyberPanel Pre-Auth RCE Flaws Let Attackers Gain Remote Server Access","article_url":"https://gbhackers.com/cyberpanel-pre-auth-rce-flaws/","published_at":"2026-08-20T09:15:43.000Z","valid_from":"2026-08-20T09:15:43.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64849","source":"Security Affairs","source_url":"https://securityaffairs.com/197558/hacking/u-s-cisa-adds-a-mlflow-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds an MLflow flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197558/hacking/u-s-cisa-adds-a-mlflow-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-20T08:55:52.000Z","valid_from":"2026-08-20T08:55:52.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-73570","source":"GBHackers","source_url":"https://gbhackers.com/zimbra-rce-vulnerability/","article_title":"Zimbra RCE Vulnerability Lets Remote Attackers Execute System Commands","article_url":"https://gbhackers.com/zimbra-rce-vulnerability/","published_at":"2026-08-20T08:31:18.000Z","valid_from":"2026-08-20T08:31:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"SecurityWeek","source_url":"https://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/","article_title":"Critical GitLab Flaw Exploited Shortly After Disclosure","article_url":"https://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/","published_at":"2026-08-20T07:48:24.000Z","valid_from":"2026-08-20T07:48:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32475","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/elementor-pro-flaw-could-let.html","article_title":"Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code","article_url":"https://thehackernews.com/2026/08/elementor-pro-flaw-could-let.html","published_at":"2026-08-20T06:04:34.000Z","valid_from":"2026-08-20T06:04:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19490","source":"GBHackers","source_url":"https://gbhackers.com/critical-citrix-netscaler-flaw/","article_title":"Critical Citrix NetScaler Flaw Allows Attackers to Bypass Authentication","article_url":"https://gbhackers.com/critical-citrix-netscaler-flaw/","published_at":"2026-08-20T05:53:18.000Z","valid_from":"2026-08-20T05:53:18.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10060,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33262","article_title":"ISC Stormcast For Thursday, August 20th, 2026 https://isc.sans.edu/podcastdetail/10060, (Thu, Aug 20th)","article_url":"https://isc.sans.edu/diary/rss/33262","published_at":"2026-08-20T02:00:03.000Z","valid_from":"2026-08-20T02:00:03.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"Security Affairs","source_url":"https://securityaffairs.com/197527/iot/inside-operation-cameraswarm-how-one-actor-took-over-14000-dahua-cameras.html","article_title":"Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras","article_url":"https://securityaffairs.com/197527/iot/inside-operation-cameraswarm-how-one-actor-took-over-14000-dahua-cameras.html","published_at":"2026-08-19T17:35:26.000Z","valid_from":"2026-08-19T17:35:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19490","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-19490-critical-vulnerability-affecting-citrix-netscaler-adc-and-netscaler-gateway","article_title":"CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-19490-critical-vulnerability-affecting-citrix-netscaler-adc-and-netscaler-gateway","published_at":"2026-08-19T16:46:06.000Z","valid_from":"2026-08-19T16:46:06.000Z","origin":"rss"},{"type":"ipv4","value":"169.254.169.254","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33260","article_title":"Simple Scans for Cloud Metadata Service, (Wed, Aug 19th)","article_url":"https://isc.sans.edu/diary/rss/33260","published_at":"2026-08-19T14:24:58.000Z","valid_from":"2026-08-19T14:24:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-33824","source":"GBHackers","source_url":"https://gbhackers.com/cisa-warns-microsoft-internet-key-exchange-rce-flaw/","article_title":"CISA Warns Microsoft Internet Key Exchange RCE Flaw Is Actively Exploited","article_url":"https://gbhackers.com/cisa-warns-microsoft-internet-key-exchange-rce-flaw/","published_at":"2026-08-19T12:37:19.000Z","valid_from":"2026-08-19T12:37:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64849","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/19/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/19/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-08-19T12:00:00.000Z","valid_from":"2026-08-19T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/hackers-compromised-14500-dahua-devices.html","article_title":"Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P","article_url":"https://thehackernews.com/2026/08/hackers-compromised-14500-dahua-devices.html","published_at":"2026-08-19T11:34:28.000Z","valid_from":"2026-08-19T11:34:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65400","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html","article_title":"Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation","article_url":"https://thehackernews.com/2026/08/critical-macos-sharepoint-vcenter-and.html","published_at":"2026-08-19T11:01:48.000Z","valid_from":"2026-08-19T11:01:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63093","source":"GBHackers","source_url":"https://gbhackers.com/cursor-0-day-lets-attackers-execute-malicious-code/","article_title":"Cursor 0-Day Lets Attackers Execute Malicious Code by Opening a Repository","article_url":"https://gbhackers.com/cursor-0-day-lets-attackers-execute-malicious-code/","published_at":"2026-08-19T10:16:57.000Z","valid_from":"2026-08-19T10:16:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-40144","source":"GBHackers","source_url":"https://gbhackers.com/beyondtrust-endpoint-privilege-management-flaws/","article_title":"BeyondTrust Endpoint Privilege Management Flaws Enable Local Privilege Escalation","article_url":"https://gbhackers.com/beyondtrust-endpoint-privilege-management-flaws/","published_at":"2026-08-19T10:01:40.000Z","valid_from":"2026-08-19T10:01:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-40145","source":"GBHackers","source_url":"https://gbhackers.com/beyondtrust-endpoint-privilege-management-flaws/","article_title":"BeyondTrust Endpoint Privilege Management Flaws Enable Local Privilege Escalation","article_url":"https://gbhackers.com/beyondtrust-endpoint-privilege-management-flaws/","published_at":"2026-08-19T10:01:40.000Z","valid_from":"2026-08-19T10:01:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71290","source":"GBHackers","source_url":"https://gbhackers.com/critical-apache-httpcomponents-client-flaw/","article_title":"Critical Apache HttpComponents Client Flaw Lets Attackers Impersonate Servers","article_url":"https://gbhackers.com/critical-apache-httpcomponents-client-flaw/","published_at":"2026-08-19T07:36:04.000Z","valid_from":"2026-08-19T07:36:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-33824","source":"Security Affairs","source_url":"https://securityaffairs.com/197490/hacking/u-s-cisa-adds-apple-macos-microsoft-sharepoint-broadcom-vmware-vcenter-and-microsoft-ike-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197490/hacking/u-s-cisa-adds-apple-macos-microsoft-sharepoint-broadcom-vmware-vcenter-and-microsoft-ike-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-19T07:19:31.000Z","valid_from":"2026-08-19T07:19:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"GBHackers","source_url":"https://gbhackers.com/cisa-warns-vmware-vcenter-path-traversal-flaw/","article_title":"CISA Warns Hackers Are Actively Exploiting VMware vCenter Path Traversal Flaw","article_url":"https://gbhackers.com/cisa-warns-vmware-vcenter-path-traversal-flaw/","published_at":"2026-08-19T06:27:32.000Z","valid_from":"2026-08-19T06:27:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12569","source":"GBHackers","source_url":"https://gbhackers.com/cl0p-exploits-windchill-vulnerability/","article_title":"Cl0p Hackers Exploit PTC Windchill Vulnerability to Deploy Custom Web Shell and Steal Data","article_url":"https://gbhackers.com/cl0p-exploits-windchill-vulnerability/","published_at":"2026-08-19T05:20:00.000Z","valid_from":"2026-08-19T05:20:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24301","source":"GBHackers","source_url":"https://gbhackers.com/critical-microsoft-copilot-cosnitch-flaw/","article_title":"Critical Microsoft Copilot CoSnitch Flaw Lets Hackers Steal Sensitive Data With One Click","article_url":"https://gbhackers.com/critical-microsoft-copilot-cosnitch-flaw/","published_at":"2026-08-19T04:55:10.000Z","valid_from":"2026-08-19T04:55:10.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10058,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33258","article_title":"ISC Stormcast For Wednesday, August 19th, 2026 https://isc.sans.edu/podcastdetail/10058, (Wed, Aug 19th)","article_url":"https://isc.sans.edu/diary/rss/33258","published_at":"2026-08-19T02:00:03.000Z","valid_from":"2026-08-19T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"CSO Online","source_url":"https://www.csoonline.com/article/4211140/critical-gitlab-flaw-allows-attackers-to-delete-and-modify-public-repos.html","article_title":"Critical GitLab flaw allows attackers to delete and modify public repos","article_url":"https://www.csoonline.com/article/4211140/critical-gitlab-flaw-allows-attackers-to-delete-and-modify-public-repos.html","published_at":"2026-08-18T19:33:31.000Z","valid_from":"2026-08-18T19:33:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"Qualys Blog","source_url":"https://blog.qualys.com/product-tech/2026/08/18/cve-2026-68820-kev-bod-26-04-requirements","article_title":"CVE-2026-68820 is in KEV. Here Is What CISA BOD 26-04 Actually Requires Now","article_url":"https://blog.qualys.com/product-tech/2026/08/18/cve-2026-68820-kev-bod-26-04-requirements","published_at":"2026-08-18T18:06:38.000Z","valid_from":"2026-08-18T18:06:38.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64849","source":"GBHackers","source_url":"https://gbhackers.com/critical-mlflow-ssrf-flaw-exploited-in-the-wild/","article_title":"Critical MLflow SSRF Flaw Exploited in the Wild","article_url":"https://gbhackers.com/critical-mlflow-ssrf-flaw-exploited-in-the-wild/","published_at":"2026-08-18T13:09:50.000Z","valid_from":"2026-08-18T13:09:50.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-33824","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-08-18T12:00:00.000Z","valid_from":"2026-08-18T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-08-18T12:00:00.000Z","valid_from":"2026-08-18T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-08-18T12:00:00.000Z","valid_from":"2026-08-18T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65400","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog   ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/18/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-08-18T12:00:00.000Z","valid_from":"2026-08-18T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/18/gitlab-critical-code-injection-flaw-cve-2026-19478/","article_title":"Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)","article_url":"https://www.helpnetsecurity.com/2026/08/18/gitlab-critical-code-injection-flaw-cve-2026-19478/","published_at":"2026-08-18T11:38:24.000Z","valid_from":"2026-08-18T11:38:24.000Z","origin":"rss"},{"type":"ipv4","value":"158.220.87.79","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/one-attacker-has-scraped-both.html","article_title":"One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025","article_url":"https://thehackernews.com/2026/08/one-attacker-has-scraped-both.html","published_at":"2026-08-18T11:30:00.000Z","valid_from":"2026-08-18T11:30:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-62593","source":"GBHackers","source_url":"https://gbhackers.com/ray-project-ray-code-injection-vulnerability/","article_title":"CISA Warns of Active Exploitation of Ray-Project Ray Code Injection Vulnerability","article_url":"https://gbhackers.com/ray-project-ray-code-injection-vulnerability/","published_at":"2026-08-18T10:49:01.000Z","valid_from":"2026-08-18T10:49:01.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15748","source":"SecurityWeek","source_url":"https://www.securityweek.com/300000-wordpress-sites-potentially-exposed-to-hacking-due-to-form-plugin-flaw/","article_title":"300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw","article_url":"https://www.securityweek.com/300000-wordpress-sites-potentially-exposed-to-hacking-due-to-form-plugin-flaw/","published_at":"2026-08-18T10:48:23.000Z","valid_from":"2026-08-18T10:48:23.000Z","origin":"rss"},{"type":"domain","value":"safepal.com","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/safepal-hardware-wallet-maker-says-flaw.html","article_title":"SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers","article_url":"https://thehackernews.com/2026/08/safepal-hardware-wallet-maker-says-flaw.html","published_at":"2026-08-18T09:10:45.000Z","valid_from":"2026-08-18T09:10:45.000Z","origin":"rss"},{"type":"email","value":"security@safepal.com","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/safepal-hardware-wallet-maker-says-flaw.html","article_title":"SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers","article_url":"https://thehackernews.com/2026/08/safepal-hardware-wallet-maker-says-flaw.html","published_at":"2026-08-18T09:10:45.000Z","valid_from":"2026-08-18T09:10:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"Security Affairs","source_url":"https://securityaffairs.com/197454/hacking/gitlab-patches-critical-unauthenticated-graphql-vulnerability.html","article_title":"GitLab Patches Critical Unauthenticated GraphQL Vulnerability","article_url":"https://securityaffairs.com/197454/hacking/gitlab-patches-critical-unauthenticated-graphql-vulnerability.html","published_at":"2026-08-18T08:44:19.000Z","valid_from":"2026-08-18T08:44:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-62593","source":"Security Affairs","source_url":"https://securityaffairs.com/197419/security/u-s-cisa-adds-a-ray-project-ray-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds a Ray-Project Ray flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197419/security/u-s-cisa-adds-a-ray-project-ray-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-18T08:02:44.000Z","valid_from":"2026-08-18T08:02:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"GBHackers","source_url":"https://gbhackers.com/vmware-vcenter-vulnerability/","article_title":"VMware vCenter RCE Gives Attackers a Path From One Appliance to Entire Virtual Infrastructure","article_url":"https://gbhackers.com/vmware-vcenter-vulnerability/","published_at":"2026-08-18T05:36:08.000Z","valid_from":"2026-08-18T05:36:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59309","source":"GBHackers","source_url":"https://gbhackers.com/vmware-vcenter-vulnerability/","article_title":"VMware vCenter RCE Gives Attackers a Path From One Appliance to Entire Virtual Infrastructure","article_url":"https://gbhackers.com/vmware-vcenter-vulnerability/","published_at":"2026-08-18T05:36:08.000Z","valid_from":"2026-08-18T05:36:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47301","source":"GBHackers","source_url":"https://gbhackers.com/poc-exploit-released-for-microsoft-sccm-vulnerability/","article_title":"PoC Exploit Released for Microsoft SCCM Vulnerability Enabling SYSTEM-Level Code Execution","article_url":"https://gbhackers.com/poc-exploit-released-for-microsoft-sccm-vulnerability/","published_at":"2026-08-18T05:23:35.000Z","valid_from":"2026-08-18T05:23:35.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10056,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33256","article_title":"ISC Stormcast For Tuesday, August 18th, 2026 https://isc.sans.edu/podcastdetail/10056, (Tue, Aug 18th)","article_url":"https://isc.sans.edu/diary/rss/33256","published_at":"2026-08-18T02:00:03.000Z","valid_from":"2026-08-18T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19478","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html","article_title":"Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects","article_url":"https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html","published_at":"2026-08-17T21:03:04.000Z","valid_from":"2026-08-17T21:03:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15748","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/forminator-wordpress-flaw-can-enable.html","article_title":"Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads","article_url":"https://thehackernews.com/2026/08/forminator-wordpress-flaw-can-enable.html","published_at":"2026-08-17T18:22:09.000Z","valid_from":"2026-08-17T18:22:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-54121","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/certighost-and-the-privilege-hiding-in-your-certificate-authority/","article_title":"Certighost and the Privilege Hiding in Your Certificate Authority","article_url":"https://www.bleepingcomputer.com/news/security/certighost-and-the-privilege-hiding-in-your-certificate-authority/","published_at":"2026-08-17T14:00:10.000Z","valid_from":"2026-08-17T14:00:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65400","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/17/apple-macos-screen-sharing-flaw/","article_title":"Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer","article_url":"https://www.helpnetsecurity.com/2026/08/17/apple-macos-screen-sharing-flaw/","published_at":"2026-08-17T12:23:15.000Z","valid_from":"2026-08-17T12:23:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-62593","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/17/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/17/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-08-17T12:00:00.000Z","valid_from":"2026-08-17T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69414","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/","article_title":"Microsoft working on Defender patch for ShieldBreak zero-day","article_url":"https://www.bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/","published_at":"2026-08-17T09:05:33.000Z","valid_from":"2026-08-17T09:05:33.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58231","source":"SecurityWeek","source_url":"https://www.securityweek.com/critical-sap-commerce-cloud-vulnerability-exploited-3-days-after-disclosure/","article_title":"Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure","article_url":"https://www.securityweek.com/critical-sap-commerce-cloud-vulnerability-exploited-3-days-after-disclosure/","published_at":"2026-08-17T08:13:07.000Z","valid_from":"2026-08-17T08:13:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html","article_title":"Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware","article_url":"https://thehackernews.com/2026/08/suspected-china-nexus-actor-exploits.html","published_at":"2026-08-17T07:36:19.000Z","valid_from":"2026-08-17T07:36:19.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58231","source":"GBHackers","source_url":"https://gbhackers.com/critical-sap-commerce-cloud-rce-vulnerability/","article_title":"Critical SAP Commerce Cloud RCE Vulnerability Actively Exploited in the Wild","article_url":"https://gbhackers.com/critical-sap-commerce-cloud-rce-vulnerability/","published_at":"2026-08-17T05:13:16.000Z","valid_from":"2026-08-17T05:13:16.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10054,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33250","article_title":"ISC Stormcast For Monday, August 17th, 2026 https://isc.sans.edu/podcastdetail/10054, (Mon, Aug 17th)","article_url":"https://isc.sans.edu/diary/rss/33250","published_at":"2026-08-17T02:00:02.000Z","valid_from":"2026-08-17T02:00:02.000Z","origin":"rss"},{"type":"ipv4","value":"2.2.0.3","source":"Exploit Database","source_url":"https://www.exploit-db.com/exploits/52646","article_title":"[webapps] Duplicati 2.2.0.3 - JWT Signing Key Leak","article_url":"https://www.exploit-db.com/exploits/52646","published_at":"2026-08-17T00:00:00.000Z","valid_from":"2026-08-17T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58231","source":"Security Affairs","source_url":"https://securityaffairs.com/197288/breaking-news/security-affairs-newsletter-round-590-by-pierluigi-paganini-international-edition.html","article_title":"Security Affairs newsletter Round 590 by Pierluigi Paganini – INTERNATIONAL EDITION","article_url":"https://securityaffairs.com/197288/breaking-news/security-affairs-newsletter-round-590-by-pierluigi-paganini-international-edition.html","published_at":"2026-08-16T08:31:53.000Z","valid_from":"2026-08-16T08:31:53.000Z","origin":"rss"},{"type":"domain","value":"crates.io","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/16/week-in-review-salesforce-and-servicenow-portals-exposed-for-17-months-exploited-metabase-0-day/","article_title":"Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day","article_url":"https://www.helpnetsecurity.com/2026/08/16/week-in-review-salesforce-and-servicenow-portals-exposed-for-17-months-exploited-metabase-0-day/","published_at":"2026-08-16T08:00:56.000Z","valid_from":"2026-08-16T08:00:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58231","source":"Security Affairs","source_url":"https://securityaffairs.com/197244/security/sap-commerce-cloud-cve-2026-58231-exploited-in-the-wild.html","article_title":"SAP Commerce Cloud CVE-2026-58231 Exploited in the Wild","article_url":"https://securityaffairs.com/197244/security/sap-commerce-cloud-cve-2026-58231-exploited-in-the-wild.html","published_at":"2026-08-15T17:14:15.000Z","valid_from":"2026-08-15T17:14:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58231","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/sap-commerce-cloud-cve-2026-58231.html","article_title":"SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch","article_url":"https://thehackernews.com/2026/08/sap-commerce-cloud-cve-2026-58231.html","published_at":"2026-08-15T08:38:46.000Z","valid_from":"2026-08-15T08:38:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65400","source":"Security Affairs","source_url":"https://securityaffairs.com/197234/uncategorized/macos-screen-sharing-flaw-exploited-to-deploy-monero-miners.html","article_title":"macOS Screen Sharing Flaw Exploited to Deploy Monero Miners","article_url":"https://securityaffairs.com/197234/uncategorized/macos-screen-sharing-flaw-exploited-to-deploy-monero-miners.html","published_at":"2026-08-15T08:34:46.000Z","valid_from":"2026-08-15T08:34:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-23670","source":"GBHackers","source_url":"https://gbhackers.com/download-more-ram-attack-bypasses-windows-vbs/","article_title":"Download More RAM Attack Bypasses Windows VBS, HVCI and Disables Microsoft Defender","article_url":"https://gbhackers.com/download-more-ram-attack-bypasses-windows-vbs/","published_at":"2026-08-15T07:43:27.000Z","valid_from":"2026-08-15T07:43:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65400","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html","article_title":"Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner","article_url":"https://thehackernews.com/2026/08/apple-macos-screen-sharing-flaw.html","published_at":"2026-08-15T07:24:04.000Z","valid_from":"2026-08-15T07:24:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-46300","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-lot-of-summer-shells-and-fit-http-profiles","article_title":"Metasploit Wrap Up: Lot of summer shells and fit http profiles","article_url":"https://www.rapid7.com/blog/post/pt-metasploit-wrap-up-lot-of-summer-shells-and-fit-http-profiles","published_at":"2026-08-14T21:27:45.000Z","valid_from":"2026-08-14T21:27:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65400","source":"SC Media","source_url":"https://www.scworld.com/brief/macos-screen-sharing-vulnerability-actively-exploited-for-crypto-mining","article_title":"MacOS screen sharing vulnerability actively exploited for crypto mining","article_url":"https://www.scworld.com/brief/macos-screen-sharing-vulnerability-actively-exploited-for-crypto-mining","published_at":"2026-08-14T21:27:25.000Z","valid_from":"2026-08-14T21:27:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20349","source":"SC Media","source_url":"https://www.scworld.com/brief/cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-exploited-vulnerabilities-list","article_title":"CISA adds Metabase, Windows and Cisco Secure Firewall flaws to exploited vulnerabilities list","article_url":"https://www.scworld.com/brief/cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-exploited-vulnerabilities-list","published_at":"2026-08-14T13:42:56.000Z","valid_from":"2026-08-14T13:42:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"SC Media","source_url":"https://www.scworld.com/brief/cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-exploited-vulnerabilities-list","article_title":"CISA adds Metabase, Windows and Cisco Secure Firewall flaws to exploited vulnerabilities list","article_url":"https://www.scworld.com/brief/cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-exploited-vulnerabilities-list","published_at":"2026-08-14T13:42:56.000Z","valid_from":"2026-08-14T13:42:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72898","source":"SC Media","source_url":"https://www.scworld.com/brief/cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-exploited-vulnerabilities-list","article_title":"CISA adds Metabase, Windows and Cisco Secure Firewall flaws to exploited vulnerabilities list","article_url":"https://www.scworld.com/brief/cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-exploited-vulnerabilities-list","published_at":"2026-08-14T13:42:56.000Z","valid_from":"2026-08-14T13:42:56.000Z","origin":"rss"},{"type":"domain","value":"chess.com","source":"Security Affairs","source_url":"https://securityaffairs.com/197174/breaking-news/chess-com-leak-exposes-7-3-million-users-evidence-points-to-scraping.html","article_title":"Chess.com Leak Exposes 7.3 Million Users – Evidence Points to Scraping","article_url":"https://securityaffairs.com/197174/breaking-news/chess-com-leak-exposes-7-3-million-users-evidence-points-to-scraping.html","published_at":"2026-08-14T08:24:21.000Z","valid_from":"2026-08-14T08:24:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-26035","source":"GBHackers","source_url":"https://gbhackers.com/fortinet-fortiweb-and-forticlient-flaws/","article_title":"Fortinet FortiWeb and FortiClient Flaws Let Unauthenticated Attackers Gain Access and Execute Arbitrary Code","article_url":"https://gbhackers.com/fortinet-fortiweb-and-forticlient-flaws/","published_at":"2026-08-14T05:54:40.000Z","valid_from":"2026-08-14T05:54:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-70465","source":"GBHackers","source_url":"https://gbhackers.com/fortinet-fortiweb-and-forticlient-flaws/","article_title":"Fortinet FortiWeb and FortiClient Flaws Let Unauthenticated Attackers Gain Access and Execute Arbitrary Code","article_url":"https://gbhackers.com/fortinet-fortiweb-and-forticlient-flaws/","published_at":"2026-08-14T05:54:40.000Z","valid_from":"2026-08-14T05:54:40.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10052,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33246","article_title":"ISC Stormcast For Friday, August 14th, 2026 https://isc.sans.edu/podcastdetail/10052, (Fri, Aug 14th)","article_url":"https://isc.sans.edu/diary/rss/33246","published_at":"2026-08-14T02:00:03.000Z","valid_from":"2026-08-14T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71362","source":"Security Affairs","source_url":"https://securityaffairs.com/197149/hacking/adobe-commerce-cve-2026-71362-comes-under-attack-shortly-after-public-disclosure.html","article_title":"Adobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public Disclosure","article_url":"https://securityaffairs.com/197149/hacking/adobe-commerce-cve-2026-71362-comes-under-attack-shortly-after-public-disclosure.html","published_at":"2026-08-13T17:48:54.000Z","valid_from":"2026-08-13T17:48:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20349","source":"Security Affairs","source_url":"https://securityaffairs.com/197110/uncategorized/u-s-cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197110/uncategorized/u-s-cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-13T17:12:45.000Z","valid_from":"2026-08-13T17:12:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20349","source":"Security Affairs","source_url":"https://securityaffairs.com/197110/hacking/u-s-cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/197110/hacking/u-s-cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-13T17:12:45.000Z","valid_from":"2026-08-13T17:12:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/","article_title":"Critical VMware vCenter RCE flaw exploited for reverse SSH access","article_url":"https://www.bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/","published_at":"2026-08-13T16:40:23.000Z","valid_from":"2026-08-13T16:40:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71362","source":"SecurityWeek","source_url":"https://www.securityweek.com/adobe-commerce-bug-targeted-immediately-after-disclosure/","article_title":"Adobe Commerce Bug Targeted Immediately After Disclosure","article_url":"https://www.securityweek.com/adobe-commerce-bug-targeted-immediately-after-disclosure/","published_at":"2026-08-13T14:17:44.000Z","valid_from":"2026-08-13T14:17:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/13/microsoft-sharepoint-cve-2026-55040-poc-exploit/","article_title":"Attackers exploit critical SharePoint flaw after PoC goes public (CVE-2026-55040)","article_url":"https://www.helpnetsecurity.com/2026/08/13/microsoft-sharepoint-cve-2026-55040-poc-exploit/","published_at":"2026-08-13T13:05:08.000Z","valid_from":"2026-08-13T13:05:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62913","source":"GBHackers","source_url":"https://gbhackers.com/microsoft-exchange-server-vulnerabilities-2/","article_title":"Microsoft Exchange Server Vulnerabilities Allow DoS, Privilege Escalation, and RCE","article_url":"https://gbhackers.com/microsoft-exchange-server-vulnerabilities-2/","published_at":"2026-08-13T12:58:15.000Z","valid_from":"2026-08-13T12:58:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-67261","source":"GBHackers","source_url":"https://gbhackers.com/critical-dell-vmware-vsphere-client-flaw/","article_title":"Critical Dell VMware vSphere Client Flaw Lets Remote Attackers Execute Commands as Root","article_url":"https://gbhackers.com/critical-dell-vmware-vsphere-client-flaw/","published_at":"2026-08-13T12:39:03.000Z","valid_from":"2026-08-13T12:39:03.000Z","origin":"rss"},{"type":"ipv4","value":"10.11.1.0","source":"GBHackers","source_url":"https://gbhackers.com/critical-dell-vmware-vsphere-client-flaw/","article_title":"Critical Dell VMware vSphere Client Flaw Lets Remote Attackers Execute Commands as Root","article_url":"https://gbhackers.com/critical-dell-vmware-vsphere-client-flaw/","published_at":"2026-08-13T12:39:03.000Z","valid_from":"2026-08-13T12:39:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64629","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-10-0","article_title":"Siemens Parasolid","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-10-0","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69108","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-07","article_title":"Siemens License Server (SLS)","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-07","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69109","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-07","article_title":"Siemens License Server (SLS)","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-07","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64887","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-03","article_title":"Johnson Controls Inc. Airwall","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-03","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34492","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-03","article_title":"Johnson Controls Inc. Airwall","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-03","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34491","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-14","article_title":"Johnson Controls Metasys","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-14","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-3014","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-10","article_title":"Siemens Siveillance Video","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-10","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65309","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","article_title":"ANDRITZ HIPASE-250 and 250 SCALA","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65310","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","article_title":"ANDRITZ HIPASE-250 and 250 SCALA","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65311","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","article_title":"ANDRITZ HIPASE-250 and 250 SCALA","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65313","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","article_title":"ANDRITZ HIPASE-250 and 250 SCALA","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-05","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50058","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-12","article_title":"Siemens Solid Edge","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-12","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-19188","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-02","article_title":"Haiwell IoT Cloud HMI Gateway","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-02","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"3.40.1.12","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-02","article_title":"Haiwell IoT Cloud HMI Gateway","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-02","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-7639","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-01","article_title":"AVEVA Enterprise SCADA","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-01","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43284","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-04","article_title":"Hitachi Energy APM Edge Product","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-04","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-3014","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-09","article_title":"Siemens Siveillance Video","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-09","published_at":"2026-08-13T12:00:00.000Z","valid_from":"2026-08-13T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"GBHackers","source_url":"https://gbhackers.com/cisa-adds-actively-exploited-windows-winsock-vulnerability/","article_title":"CISA Adds Actively Exploited Windows WinSock Vulnerability to KEV Catalog","article_url":"https://gbhackers.com/cisa-adds-actively-exploited-windows-winsock-vulnerability/","published_at":"2026-08-13T11:08:27.000Z","valid_from":"2026-08-13T11:08:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"Security Affairs","source_url":"https://securityaffairs.com/197137/hacking/sharepoint-cve-2026-55040-comes-under-attack-following-public-exploit.html","article_title":"SharePoint CVE-2026-55040 Comes Under Attack Following Public Exploit","article_url":"https://securityaffairs.com/197137/hacking/sharepoint-cve-2026-55040-comes-under-attack-following-public-exploit.html","published_at":"2026-08-13T08:36:30.000Z","valid_from":"2026-08-13T08:36:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71362","source":"GBHackers","source_url":"https://gbhackers.com/critical-adobe-commerce-flaw/","article_title":"Critical Adobe Commerce Flaw Lets Unauthenticated Attackers Escalate Privileges","article_url":"https://gbhackers.com/critical-adobe-commerce-flaw/","published_at":"2026-08-13T08:36:18.000Z","valid_from":"2026-08-13T08:36:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20349","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/13/cve-2026-20349-cisco-firewalls-dos/","article_title":"Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349)","article_url":"https://www.helpnetsecurity.com/2026/08/13/cve-2026-20349-cisco-firewalls-dos/","published_at":"2026-08-13T07:30:53.000Z","valid_from":"2026-08-13T07:30:53.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/attackers-exploit-sharepoint.html","article_title":"Attackers Exploit SharePoint Authentication Bypass After Public PoC Release","article_url":"https://thehackernews.com/2026/08/attackers-exploit-sharepoint.html","published_at":"2026-08-13T06:09:48.000Z","valid_from":"2026-08-13T06:09:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65640","source":"GBHackers","source_url":"https://gbhackers.com/wordpress-rce-vulnerability/","article_title":"WordPress RCE Vulnerability Lets Authenticated Authors Execute Remote Code","article_url":"https://gbhackers.com/wordpress-rce-vulnerability/","published_at":"2026-08-13T05:00:24.000Z","valid_from":"2026-08-13T05:00:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2024-13962","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-567/","article_title":"ZDI-26-567: Norton Utilities Ultimate NortonUtilitiesSvc Link Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-567/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-40272","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-566/","article_title":"ZDI-26-566: BlackBerry QNX  KEV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-566/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12410","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-565/","article_title":"ZDI-26-565: Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-565/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24232","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-564/","article_title":"ZDI-26-564: NVIDIA Transformers4Rec load_model_trainer_states_from_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-564/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-4890","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-584/","article_title":"ZDI-26-584: dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-584/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20215","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-583/","article_title":"ZDI-26-583: Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-583/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20148","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-582/","article_title":"ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-582/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20147","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-581/","article_title":"ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-581/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20190","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-580/","article_title":"ZDI-26-580: Cisco Identity Services Engine Missing Authentication for Critical Function Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-580/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20181","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-579/","article_title":"ZDI-26-579: Cisco Identity Services Engine zipFiles Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-579/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27654","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-578/","article_title":"ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-578/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-67212","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-577/","article_title":"ZDI-26-577: Trend Micro VPN OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-577/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-46319","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-574/","article_title":"ZDI-26-574: Linux Kernel Net Scheduler Connection Tracking Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-574/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64530","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-571/","article_title":"ZDI-26-571: Linux Kernel Net Scheduler Packet Classifier API Use-After-Free Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-571/","published_at":"2026-08-13T05:00:00.000Z","valid_from":"2026-08-13T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10050,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33244","article_title":"ISC Stormcast For Thursday, August 13th, 2026 https://isc.sans.edu/podcastdetail/10050, (Thu, Aug 13th)","article_url":"https://isc.sans.edu/diary/rss/33244","published_at":"2026-08-13T02:00:03.000Z","valid_from":"2026-08-13T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-71362","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts/","article_title":"Hackers exploit critical Adobe Commerce flaw to hijack customer accounts","article_url":"https://www.bleepingcomputer.com/news/security/hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts/","published_at":"2026-08-12T20:54:59.000Z","valid_from":"2026-08-12T20:54:59.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/lazarus-hackers-exploited-windows-zero-day-to-target-defense-firms/","article_title":"Lazarus hackers exploited Windows zero-day to target defense firms","article_url":"https://www.bleepingcomputer.com/news/security/lazarus-hackers-exploited-windows-zero-day-to-target-defense-firms/","published_at":"2026-08-12T15:38:08.000Z","valid_from":"2026-08-12T15:38:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50656","source":"GBHackers","source_url":"https://gbhackers.com/shieldbreak-windows-defender-0-day/","article_title":"ShieldBreak Windows Defender 0-Day Lets Attackers Bypass Microsoft Patch and Gain SYSTEM Privileges","article_url":"https://gbhackers.com/shieldbreak-windows-defender-0-day/","published_at":"2026-08-12T13:38:42.000Z","valid_from":"2026-08-12T13:38:42.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20337","source":"SC Media","source_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","article_title":"Cisco warns of 7 ClamAV flaws impacting Secure Endpoint Connector","article_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","published_at":"2026-08-12T13:15:25.000Z","valid_from":"2026-08-12T13:15:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20339","source":"SC Media","source_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","article_title":"Cisco warns of 7 ClamAV flaws impacting Secure Endpoint Connector","article_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","published_at":"2026-08-12T13:15:25.000Z","valid_from":"2026-08-12T13:15:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20345","source":"SC Media","source_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","article_title":"Cisco warns of 7 ClamAV flaws impacting Secure Endpoint Connector","article_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","published_at":"2026-08-12T13:15:25.000Z","valid_from":"2026-08-12T13:15:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20348","source":"SC Media","source_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","article_title":"Cisco warns of 7 ClamAV flaws impacting Secure Endpoint Connector","article_url":"https://www.scworld.com/brief/cisco-warns-of-7-clamav-flaws-impacting-secure-endpoint-connector","published_at":"2026-08-12T13:15:25.000Z","valid_from":"2026-08-12T13:15:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-critical-vmware-vcenter-flaw/","article_title":"Hackers Exploit Critical VMware vCenter Flaw to Deploy Reverse SSH Across 47 Countries","article_url":"https://gbhackers.com/hackers-exploit-critical-vmware-vcenter-flaw/","published_at":"2026-08-12T12:27:22.000Z","valid_from":"2026-08-12T12:27:22.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72898","source":"GBHackers","source_url":"https://gbhackers.com/cisa-warns-critical-metabase-sql-injection-flaw/","article_title":"CISA Warns Critical Metabase SQL Injection Flaw Lets Unauthenticated Attackers Gain Admin Access","article_url":"https://gbhackers.com/cisa-warns-critical-metabase-sql-injection-flaw/","published_at":"2026-08-12T12:02:03.000Z","valid_from":"2026-08-12T12:02:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-23573","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-06","article_title":"Siemens RUGGEDCOM APE1808","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-06","published_at":"2026-08-12T12:00:00.000Z","valid_from":"2026-08-12T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59839","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-06","article_title":"Siemens RUGGEDCOM APE1808","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-225-06","published_at":"2026-08-12T12:00:00.000Z","valid_from":"2026-08-12T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48362","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html","article_title":"Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws","article_url":"https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html","published_at":"2026-08-12T11:13:03.000Z","valid_from":"2026-08-12T11:13:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63520","source":"GBHackers","source_url":"https://gbhackers.com/microsoft-sharepoint-rce-vulnerability/","article_title":"Microsoft SharePoint RCE Vulnerability Lets Remote Attackers Execute Code","article_url":"https://gbhackers.com/microsoft-sharepoint-rce-vulnerability/","published_at":"2026-08-12T10:41:17.000Z","valid_from":"2026-08-12T10:41:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/12/august-2026-patch-tuesday-cve-2026-68820/","article_title":"Microsoft patches 400+ vulnerabilities, one zero-day under attack (CVE-2026-68820)","article_url":"https://www.helpnetsecurity.com/2026/08/12/august-2026-patch-tuesday-cve-2026-68820/","published_at":"2026-08-12T09:34:16.000Z","valid_from":"2026-08-12T09:34:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html","article_title":"Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access","article_url":"https://thehackernews.com/2026/08/attackers-exploit-vmware-vcenter.html","published_at":"2026-08-12T09:01:54.000Z","valid_from":"2026-08-12T09:01:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-70329","source":"GBHackers","source_url":"https://gbhackers.com/microsoft-outlook-rce-vulnerability/","article_title":"Microsoft Outlook RCE Vulnerability Lets Attackers Execute Code Remotely","article_url":"https://gbhackers.com/microsoft-outlook-rce-vulnerability/","published_at":"2026-08-12T08:24:28.000Z","valid_from":"2026-08-12T08:24:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50656","source":"Security Affairs","source_url":"https://securityaffairs.com/197063/hacking/shieldbreak-new-windows-zero-day-bypasses-microsofts-rogueplanet-patch.html","article_title":"ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch","article_url":"https://securityaffairs.com/197063/hacking/shieldbreak-new-windows-zero-day-bypasses-microsofts-rogueplanet-patch.html","published_at":"2026-08-12T08:07:15.000Z","valid_from":"2026-08-12T08:07:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"GBHackers","source_url":"https://gbhackers.com/windows-afd-sys-zero-day-exploited-by-lazarus-hackers/","article_title":"Windows AFD.sys Zero-Day Exploited by Lazarus Hackers to Gain SYSTEM Access","article_url":"https://gbhackers.com/windows-afd-sys-zero-day-exploited-by-lazarus-hackers/","published_at":"2026-08-12T07:38:58.000Z","valid_from":"2026-08-12T07:38:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58231","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.html","article_title":"SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code","article_url":"https://thehackernews.com/2026/08/sap-commerce-cloud-flaw-could-let.html","published_at":"2026-08-12T07:31:40.000Z","valid_from":"2026-08-12T07:31:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50656","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/shieldbreak-zero-day-poc-claims.html","article_title":"ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access","article_url":"https://thehackernews.com/2026/08/shieldbreak-zero-day-poc-claims.html","published_at":"2026-08-12T06:41:38.000Z","valid_from":"2026-08-12T06:41:38.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20349","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/cisco-asa-and-ftd-flaw-exploited-in.html","article_title":"Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS","article_url":"https://thehackernews.com/2026/08/cisco-asa-and-ftd-flaw-exploited-in.html","published_at":"2026-08-12T06:15:58.000Z","valid_from":"2026-08-12T06:15:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20349","source":"SecurityWeek","source_url":"https://www.securityweek.com/cisco-patches-firewall-zero-day-exploited-for-dos-attacks/","article_title":"Cisco Patches Firewall Zero-Day Exploited for DoS Attacks","article_url":"https://www.securityweek.com/cisco-patches-firewall-zero-day-exploited-for-dos-attacks/","published_at":"2026-08-12T05:10:47.000Z","valid_from":"2026-08-12T05:10:47.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53413","source":"GBHackers","source_url":"https://gbhackers.com/zoom-zero-click-zoomsday-flaw/","article_title":"Zoom Zero-Click ‘Zoomsday’ Flaw Lets Meeting Participants Execute Code on Other Users’ Devices","article_url":"https://gbhackers.com/zoom-zero-click-zoomsday-flaw/","published_at":"2026-08-12T05:04:51.000Z","valid_from":"2026-08-12T05:04:51.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-17106","source":"GBHackers","source_url":"https://gbhackers.com/docker-copyescape-vulnerability/","article_title":"Docker CopyEscape Vulnerability Enables Host File Overwrite and Root Code Execution","article_url":"https://gbhackers.com/docker-copyescape-vulnerability/","published_at":"2026-08-12T05:00:17.000Z","valid_from":"2026-08-12T05:00:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72898","source":"CSO Online","source_url":"https://www.csoonline.com/article/4208307/metabase-sqli-exploit-grants-attackers-total-access.html","article_title":"Metabase SQLi exploit grants attackers total access","article_url":"https://www.csoonline.com/article/4208307/metabase-sqli-exploit-grants-attackers-total-access.html","published_at":"2026-08-12T02:40:58.000Z","valid_from":"2026-08-12T02:40:58.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10048,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33238","article_title":"ISC Stormcast For Wednesday, August 12th, 2026 https://isc.sans.edu/podcastdetail/10048, (Wed, Aug 12th)","article_url":"https://isc.sans.edu/diary/rss/33238","published_at":"2026-08-12T02:00:03.000Z","valid_from":"2026-08-12T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"CSO Online","source_url":"https://www.csoonline.com/article/4208185/patch-tuesday-august-2026-a-zero-day-winsock-driver-hole-under-exploit-and-a-maximum-severity-sap-vulnerability.html","article_title":"Patch Tuesday August 2026: A zero-day WinSock driver hole under exploit, and a maximum severity SAP vulnerability","article_url":"https://www.csoonline.com/article/4208185/patch-tuesday-august-2026-a-zero-day-winsock-driver-hole-under-exploit-and-a-maximum-severity-sap-vulnerability.html","published_at":"2026-08-12T00:45:42.000Z","valid_from":"2026-08-12T00:45:42.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/microsoft-patches-398-flaws-including.html","article_title":"Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack","article_url":"https://thehackernews.com/2026/08/microsoft-patches-398-flaws-including.html","published_at":"2026-08-11T20:10:55.000Z","valid_from":"2026-08-11T20:10:55.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/microsofts-august-2026-patch-tuesday-addresses-398-cves-cve-2026-68820","article_title":"Microsoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)","article_url":"https://www.tenable.com/blog/microsofts-august-2026-patch-tuesday-addresses-398-cves-cve-2026-68820","published_at":"2026-08-11T18:04:04.000Z","valid_from":"2026-08-11T18:04:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6726","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/microsofts-august-2026-patch-tuesday-addresses-398-cves-cve-2026-68820","article_title":"Microsoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)","article_url":"https://www.tenable.com/blog/microsofts-august-2026-patch-tuesday-addresses-398-cves-cve-2026-68820","published_at":"2026-08-11T18:04:04.000Z","valid_from":"2026-08-11T18:04:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6727","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/microsofts-august-2026-patch-tuesday-addresses-398-cves-cve-2026-68820","article_title":"Microsoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)","article_url":"https://www.tenable.com/blog/microsofts-august-2026-patch-tuesday-addresses-398-cves-cve-2026-68820","published_at":"2026-08-11T18:04:04.000Z","valid_from":"2026-08-11T18:04:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53413","source":"Security Affairs","source_url":"https://securityaffairs.com/197042/hacking/zoom-patches-zoomsday-zero-click-flaw-enabling-remote-code-execution.html","article_title":"Zoom Patches “Zoomsday” Zero-Click Flaw Enabling Remote Code Execution","article_url":"https://securityaffairs.com/197042/hacking/zoom-patches-zoomsday-zero-click-flaw-enabling-remote-code-execution.html","published_at":"2026-08-11T17:48:01.000Z","valid_from":"2026-08-11T17:48:01.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/researchers-disclose-ai-assisted.html","article_title":"Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE","article_url":"https://thehackernews.com/2026/08/researchers-disclose-ai-assisted.html","published_at":"2026-08-11T16:47:44.000Z","valid_from":"2026-08-11T16:47:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-jwt-token-authentication-bypass-cve-2026-55040","article_title":"Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)","article_url":"https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-jwt-token-authentication-bypass-cve-2026-55040","published_at":"2026-08-11T13:00:00.000Z","valid_from":"2026-08-11T13:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63520","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63520-microsoft-sharepoint-remote-code-execution-fixed","article_title":"CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63520-microsoft-sharepoint-remote-code-execution-fixed","published_at":"2026-08-11T13:00:00.000Z","valid_from":"2026-08-11T13:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63520-microsoft-sharepoint-remote-code-execution-fixed","article_title":"CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63520-microsoft-sharepoint-remote-code-execution-fixed","published_at":"2026-08-11T13:00:00.000Z","valid_from":"2026-08-11T13:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18844","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-02","article_title":"Pulsetto Vagus Nerve Stimulator","article_url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-02","published_at":"2026-08-11T12:00:00.000Z","valid_from":"2026-08-11T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20349","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-11T12:00:00.000Z","valid_from":"2026-08-11T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-68820","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-11T12:00:00.000Z","valid_from":"2026-08-11T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-72898","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-11T12:00:00.000Z","valid_from":"2026-08-11T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44945","source":"GBHackers","source_url":"https://gbhackers.com/critical-rancher-flaw/","article_title":"Critical Rancher Flaw Lets Authenticated Users Gain Full Admin Access to All Managed Clusters","article_url":"https://gbhackers.com/critical-rancher-flaw/","published_at":"2026-08-11T10:32:45.000Z","valid_from":"2026-08-11T10:32:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15409","source":"GBHackers","source_url":"https://gbhackers.com/cisa-warns-sonicwall-sma1000-flaws/","article_title":"CISA Warns SonicWall SMA1000 Flaws Are Exploited in Ransomware Attacks","article_url":"https://gbhackers.com/cisa-warns-sonicwall-sma1000-flaws/","published_at":"2026-08-11T09:48:45.000Z","valid_from":"2026-08-11T09:48:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20337","source":"GBHackers","source_url":"https://gbhackers.com/clamav-vulnerabilities/","article_title":"CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files","article_url":"https://gbhackers.com/clamav-vulnerabilities/","published_at":"2026-08-11T07:15:18.000Z","valid_from":"2026-08-11T07:15:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20338","source":"GBHackers","source_url":"https://gbhackers.com/clamav-vulnerabilities/","article_title":"CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files","article_url":"https://gbhackers.com/clamav-vulnerabilities/","published_at":"2026-08-11T07:15:18.000Z","valid_from":"2026-08-11T07:15:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20339","source":"GBHackers","source_url":"https://gbhackers.com/clamav-vulnerabilities/","article_title":"CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files","article_url":"https://gbhackers.com/clamav-vulnerabilities/","published_at":"2026-08-11T07:15:18.000Z","valid_from":"2026-08-11T07:15:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20345","source":"GBHackers","source_url":"https://gbhackers.com/clamav-vulnerabilities/","article_title":"CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files","article_url":"https://gbhackers.com/clamav-vulnerabilities/","published_at":"2026-08-11T07:15:18.000Z","valid_from":"2026-08-11T07:15:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20346","source":"GBHackers","source_url":"https://gbhackers.com/clamav-vulnerabilities/","article_title":"CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files","article_url":"https://gbhackers.com/clamav-vulnerabilities/","published_at":"2026-08-11T07:15:18.000Z","valid_from":"2026-08-11T07:15:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20347","source":"GBHackers","source_url":"https://gbhackers.com/clamav-vulnerabilities/","article_title":"CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files","article_url":"https://gbhackers.com/clamav-vulnerabilities/","published_at":"2026-08-11T07:15:18.000Z","valid_from":"2026-08-11T07:15:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20348","source":"GBHackers","source_url":"https://gbhackers.com/clamav-vulnerabilities/","article_title":"CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files","article_url":"https://gbhackers.com/clamav-vulnerabilities/","published_at":"2026-08-11T07:15:18.000Z","valid_from":"2026-08-11T07:15:18.000Z","origin":"rss"},{"type":"domain","value":"wordpress.org","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/bdthemes-supply-chain-attack-poisons.html","article_title":"BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins","article_url":"https://thehackernews.com/2026/08/bdthemes-supply-chain-attack-poisons.html","published_at":"2026-08-11T05:48:44.000Z","valid_from":"2026-08-11T05:48:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-10090","source":"GBHackers","source_url":"https://gbhackers.com/red-hat-kubernetes-flaw/","article_title":"Red Hat Kubernetes Flaw Allows Attackers to Escalate Privileges to Cluster-Admin","article_url":"https://gbhackers.com/red-hat-kubernetes-flaw/","published_at":"2026-08-11T05:43:27.000Z","valid_from":"2026-08-11T05:43:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65775","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-541/","article_title":"ZDI-26-541: (Pwn2Own) Microsoft Windows win32kfull Use-After-Free Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-541/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65776","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-540/","article_title":"ZDI-26-540: (Pwn2Own) Microsoft Windows win32kfull Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-540/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65773","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-539/","article_title":"ZDI-26-539: (Pwn2Own) Microsoft Windows ipt.sys Incorrect Permission Assignment Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-539/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62911","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-538/","article_title":"ZDI-26-538: (Pwn2Own) Microsoft Exchange Improper Authorization Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-538/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65814","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-537/","article_title":"ZDI-26-537: (Pwn2Own) Microsoft Windows storport Integer Overflow Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-537/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62735","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-536/","article_title":"ZDI-26-536: (Pwn2Own) Microsoft Windows http.sys Integer Overflow Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-536/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62911","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-535/","article_title":"ZDI-26-535: (Pwn2Own) Microsoft Exchange External Control of File Path Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-535/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62911","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-534/","article_title":"ZDI-26-534: (Pwn2Own) Microsoft Exchange Capture-Replay Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-534/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-533/","article_title":"ZDI-26-533: Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-533/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66149","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-532/","article_title":"ZDI-26-532: SonicWall Email Security updateNetIf Command Injection Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-532/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66148","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-531/","article_title":"ZDI-26-531: SonicWall GMS Virtual Appliance interface Command Injection Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-531/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66150","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-530/","article_title":"ZDI-26-530: SonicWall Email Security snmp Command Injection Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-530/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21045","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-529/","article_title":"ZDI-26-529: Samsung Galaxy S25 TIFF File Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-529/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28220","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-528/","article_title":"ZDI-26-528: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-528/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44901","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-527/","article_title":"ZDI-26-527: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-527/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18263","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-556/","article_title":"ZDI-26-556: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-556/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18262","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-555/","article_title":"ZDI-26-555: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-555/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13121","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-554/","article_title":"ZDI-26-554: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-554/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18294","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-553/","article_title":"ZDI-26-553: OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-553/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18293","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-552/","article_title":"ZDI-26-552: OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-552/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18292","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-551/","article_title":"ZDI-26-551: OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-551/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18291","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-550/","article_title":"ZDI-26-550: OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-550/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18290","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-549/","article_title":"ZDI-26-549: OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-549/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18289","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-548/","article_title":"ZDI-26-548: OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-548/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18288","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-547/","article_title":"ZDI-26-547: OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-547/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69264","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-546/","article_title":"ZDI-26-546: Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-546/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-69256","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-545/","article_title":"ZDI-26-545: Flowise CSV_Agent customReadCSV Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-545/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62893","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-544/","article_title":"ZDI-26-544: Microsoft Windows Deployment Services Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-544/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-54984","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-543/","article_title":"ZDI-26-543: Microsoft Windows ICC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-543/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62712","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-542/","article_title":"ZDI-26-542: Microsoft Windows UMPDDrvBitBlt Improper Object Management Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-542/","published_at":"2026-08-11T05:00:00.000Z","valid_from":"2026-08-11T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10046,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33232","article_title":"ISC Stormcast For Tuesday, August 11th, 2026 https://isc.sans.edu/podcastdetail/10046, (Tue, Aug 11th)","article_url":"https://isc.sans.edu/diary/rss/33232","published_at":"2026-08-11T02:00:03.000Z","valid_from":"2026-08-11T02:00:03.000Z","origin":"rss"},{"type":"domain","value":"noreply.net","source":"SC Media","source_url":"https://www.scworld.com/brief/security-researchers-accidentally-receive-vast-amounts-of-sensitive-data-through-misconfigured-email-domains","article_title":"Security researchers accidentally receive sensitive data through misconfigured email domains","article_url":"https://www.scworld.com/brief/security-researchers-accidentally-receive-vast-amounts-of-sensitive-data-through-misconfigured-email-domains","published_at":"2026-08-10T23:25:00.000Z","valid_from":"2026-08-10T23:25:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"SC Media","source_url":"https://www.scworld.com/brief/storm-1175-actor-deploys-new-stormencryptor-ransomware-after-n-central-vulnerability-exploitation","article_title":"Storm-1175 actor deploys new StormEncryptor ransomware after N-central vulnerability exploitation","article_url":"https://www.scworld.com/brief/storm-1175-actor-deploys-new-stormencryptor-ransomware-after-n-central-vulnerability-exploitation","published_at":"2026-08-10T23:17:00.000Z","valid_from":"2026-08-10T23:17:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"GBHackers","source_url":"https://gbhackers.com/cisa-flags-progress-loadmaster-command-injection-vulnerability/","article_title":"CISA Flags Progress LoadMaster Command Injection Vulnerability Exploited in the Wild","article_url":"https://gbhackers.com/cisa-flags-progress-loadmaster-command-injection-vulnerability/","published_at":"2026-08-10T12:32:35.000Z","valid_from":"2026-08-10T12:32:35.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/10/cve-2026-18577-n-central-hotfix-2-msps/","article_title":"N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577","article_url":"https://www.helpnetsecurity.com/2026/08/10/cve-2026-18577-n-central-hotfix-2-msps/","published_at":"2026-08-10T11:34:55.000Z","valid_from":"2026-08-10T11:34:55.000Z","origin":"rss"},{"type":"domain","value":"crates.io","source":"GBHackers","source_url":"https://gbhackers.com/github-expands-dependabot-malware-alerts/","article_title":"GitHub Expands Dependabot Malware Alerts to Detect Malicious Packages Across 8 Ecosystems","article_url":"https://gbhackers.com/github-expands-dependabot-malware-alerts/","published_at":"2026-08-10T11:29:29.000Z","valid_from":"2026-08-10T11:29:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20685","source":"GBHackers","source_url":"https://gbhackers.com/apple-private-cloud-compute-path-traversal-flaw/","article_title":"Apple Private Cloud Compute Path Traversal Flaw Lets Attackers Write Files as Root","article_url":"https://gbhackers.com/apple-private-cloud-compute-path-traversal-flaw/","published_at":"2026-08-10T09:36:32.000Z","valid_from":"2026-08-10T09:36:32.000Z","origin":"rss"},{"type":"domain","value":"crates.io","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/10/github-dependabot-malware-alerts/","article_title":"GitHub Dependabot malware alerts now cover eight ecosystems","article_url":"https://www.helpnetsecurity.com/2026/08/10/github-dependabot-malware-alerts/","published_at":"2026-08-10T07:01:11.000Z","valid_from":"2026-08-10T07:01:11.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10044,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33228","article_title":"ISC Stormcast For Monday, August 10th, 2026 https://isc.sans.edu/podcastdetail/10044, (Mon, Aug 10th)","article_url":"https://isc.sans.edu/diary/rss/33228","published_at":"2026-08-10T02:00:03.000Z","valid_from":"2026-08-10T02:00:03.000Z","origin":"rss"},{"type":"ipv4","value":"2.9.99.4","source":"Exploit Database","source_url":"https://www.exploit-db.com/exploits/52630","article_title":"[webapps] Joomla 2.9.99.4 - Unauthenticated Remote Code Execution","article_url":"https://www.exploit-db.com/exploits/52630","published_at":"2026-08-10T00:00:00.000Z","valid_from":"2026-08-10T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"Security Affairs","source_url":"https://securityaffairs.com/196863/hacking/u-s-cisa-adds-a-progress-loadmaster-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds a Progress LoadMaster flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/196863/hacking/u-s-cisa-adds-a-progress-loadmaster-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-08T11:00:08.000Z","valid_from":"2026-08-08T11:00:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64638","source":"GBHackers","source_url":"https://gbhackers.com/critical-wordpress-vulnerability/","article_title":"WordPress XSS2Shell Flaw Enables Attackers to Achieve Remote Code Execution","article_url":"https://gbhackers.com/critical-wordpress-vulnerability/","published_at":"2026-08-08T08:27:58.000Z","valid_from":"2026-08-08T08:27:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64564","source":"GBHackers","source_url":"https://gbhackers.com/18-year-old-linux-kernel-sctp-vulnerability/","article_title":"18-Year-Old Linux Kernel SCTP Vulnerability Lets Attackers Gain Root and Escape Containers","article_url":"https://gbhackers.com/18-year-old-linux-kernel-sctp-vulnerability/","published_at":"2026-08-08T08:02:13.000Z","valid_from":"2026-08-08T08:02:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65400","source":"GBHackers","source_url":"https://gbhackers.com/critical-macos-rce-vulnerability/","article_title":"Critical macOS RCE Vulnerability Allows Attackers to Gain Root Access Without Password","article_url":"https://gbhackers.com/critical-macos-rce-vulnerability/","published_at":"2026-08-08T07:12:02.000Z","valid_from":"2026-08-08T07:12:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.html","article_title":"Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts","article_url":"https://thehackernews.com/2026/08/progress-kemp-loadmaster-flaw-hits-cisa.html","published_at":"2026-08-08T06:52:16.000Z","valid_from":"2026-08-08T06:52:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077","article_title":"Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)","article_url":"https://www.rapid7.com/blog/post/ra-unauthenticated-rce-in-jetbrains-teamcity-cve-2026-63077","published_at":"2026-08-07T14:32:47.000Z","valid_from":"2026-08-07T14:32:47.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64638","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/new-wordpress-pre-auth-xss-could-lead.html","article_title":"New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP","article_url":"https://thehackernews.com/2026/08/new-wordpress-pre-auth-xss-could-lead.html","published_at":"2026-08-07T12:56:23.000Z","valid_from":"2026-08-07T12:56:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/07/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/07/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-08-07T12:00:00.000Z","valid_from":"2026-08-07T12:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10042,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33224","article_title":"ISC Stormcast For Friday, August 7th, 2026 https://isc.sans.edu/podcastdetail/10042, (Fri, Aug 7th)","article_url":"https://isc.sans.edu/diary/rss/33224","published_at":"2026-08-07T02:00:02.000Z","valid_from":"2026-08-07T02:00:02.000Z","origin":"rss"},{"type":"domain","value":"portswigger.net","source":"PortSwigger Research","source_url":"https://portswigger.net/research/css-the-bomb-inside-your-inbox","article_title":"CSS:the bomb inside your inbox","article_url":"https://portswigger.net/research/css-the-bomb-inside-your-inbox","published_at":"2026-08-06T22:00:00.000Z","valid_from":"2026-08-06T22:00:00.000Z","origin":"rss"},{"type":"email","value":"gareth.heyes@portswigger.net","source":"PortSwigger Research","source_url":"https://portswigger.net/research/css-the-bomb-inside-your-inbox","article_title":"CSS:the bomb inside your inbox","article_url":"https://portswigger.net/research/css-the-bomb-inside-your-inbox","published_at":"2026-08-06T22:00:00.000Z","valid_from":"2026-08-06T22:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64561","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.html","article_title":"New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts","article_url":"https://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.html","published_at":"2026-08-06T17:58:30.000Z","valid_from":"2026-08-06T17:58:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-70426","source":"GBHackers","source_url":"https://gbhackers.com/critical-jenkins-deserialization-flaw/","article_title":"Critical Jenkins Deserialization Flaw Allows Attackers to Execute Code on Controllers","article_url":"https://gbhackers.com/critical-jenkins-deserialization-flaw/","published_at":"2026-08-06T11:12:56.000Z","valid_from":"2026-08-06T11:12:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20200","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/06/cisco-imc-cve-2026-20200-public-poc-exploit/","article_title":"Critical Cisco IMC bug gives attackers root, PoC is out (CVE-2026-20200)","article_url":"https://www.helpnetsecurity.com/2026/08/06/cisco-imc-cve-2026-20200-public-poc-exploit/","published_at":"2026-08-06T10:38:43.000Z","valid_from":"2026-08-06T10:38:43.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"Security Affairs","source_url":"https://securityaffairs.com/196725/security/u-s-cisa-adds-a-jetbrains-teamcity-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds a JetBrains TeamCity flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/196725/security/u-s-cisa-adds-a-jetbrains-teamcity-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-06T08:22:27.000Z","valid_from":"2026-08-06T08:22:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20272","source":"GBHackers","source_url":"https://gbhackers.com/cisco-patches-7-ios-xe-vulnerability/","article_title":"Cisco Patches 7 IOS XE Vulnerability Classes, Including Critical Command Injection Flaws","article_url":"https://gbhackers.com/cisco-patches-7-ios-xe-vulnerability/","published_at":"2026-08-06T08:02:56.000Z","valid_from":"2026-08-06T08:02:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"GBHackers","source_url":"https://gbhackers.com/cisa-alerts-issues-on-actively-exploited-teamcity/","article_title":"CISA Alerts Issues on Actively Exploited TeamCity Remote Code Execution Vulnerability","article_url":"https://gbhackers.com/cisa-alerts-issues-on-actively-exploited-teamcity/","published_at":"2026-08-06T07:53:45.000Z","valid_from":"2026-08-06T07:53:45.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/cisa-flags-teamcity-cve-2026-63077-rce.html","article_title":"CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild","article_url":"https://thehackernews.com/2026/08/cisa-flags-teamcity-cve-2026-63077-rce.html","published_at":"2026-08-06T06:51:43.000Z","valid_from":"2026-08-06T06:51:43.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"SecurityWeek","source_url":"https://www.securityweek.com/hackers-start-exploiting-recent-jetbrains-teamcity-vulnerability/","article_title":"Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability","article_url":"https://www.securityweek.com/hackers-start-exploiting-recent-jetbrains-teamcity-vulnerability/","published_at":"2026-08-06T06:37:44.000Z","valid_from":"2026-08-06T06:37:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20303","source":"GBHackers","source_url":"https://gbhackers.com/critical-cisco-sd-wan-flaws-expose-systems/","article_title":"Critical Cisco SD-WAN Flaws Expose Systems to Access Control Bypass Attacks","article_url":"https://gbhackers.com/critical-cisco-sd-wan-flaws-expose-systems/","published_at":"2026-08-06T04:57:48.000Z","valid_from":"2026-08-06T04:57:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20304","source":"GBHackers","source_url":"https://gbhackers.com/critical-cisco-sd-wan-flaws-expose-systems/","article_title":"Critical Cisco SD-WAN Flaws Expose Systems to Access Control Bypass Attacks","article_url":"https://gbhackers.com/critical-cisco-sd-wan-flaws-expose-systems/","published_at":"2026-08-06T04:57:48.000Z","valid_from":"2026-08-06T04:57:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20310","source":"GBHackers","source_url":"https://gbhackers.com/critical-cisco-sd-wan-flaws-expose-systems/","article_title":"Critical Cisco SD-WAN Flaws Expose Systems to Access Control Bypass Attacks","article_url":"https://gbhackers.com/critical-cisco-sd-wan-flaws-expose-systems/","published_at":"2026-08-06T04:57:48.000Z","valid_from":"2026-08-06T04:57:48.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10040,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33222","article_title":"ISC Stormcast For Thursday, August 6th, 2026 https://isc.sans.edu/podcastdetail/10040, (Thu, Aug 6th)","article_url":"https://isc.sans.edu/diary/rss/33222","published_at":"2026-08-06T02:00:02.000Z","valid_from":"2026-08-06T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9198","source":"Security Affairs","source_url":"https://securityaffairs.com/196667/hacking/u-s-cisa-adds-langflow-apache-tomcat-and-n-able-n-central-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Langflow, Apache Tomcat, and N-able N-central flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/196667/hacking/u-s-cisa-adds-langflow-apache-tomcat-and-n-able-n-central-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-05T15:25:18.000Z","valid_from":"2026-08-05T15:25:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64531","source":"Security Affairs","source_url":"https://securityaffairs.com/196657/hacking/ovswrap-13-year-old-linux-kernel-flaw-lets-local-users-become-root.html","article_title":"OVSwrap: 13-Year-Old Linux Kernel Flaw Lets Local Users Become Root","article_url":"https://securityaffairs.com/196657/hacking/ovswrap-13-year-old-linux-kernel-flaw-lets-local-users-become-root.html","published_at":"2026-08-05T14:24:08.000Z","valid_from":"2026-08-05T14:24:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64531","source":"GBHackers","source_url":"https://gbhackers.com/ovswrap-open-vswitch-flaw/","article_title":"OVSwrap Open vSwitch Flaw Lets Unprivileged Linux Users Gain Root Access","article_url":"https://gbhackers.com/ovswrap-open-vswitch-flaw/","published_at":"2026-08-05T13:29:31.000Z","valid_from":"2026-08-05T13:29:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/05/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/05/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-08-05T12:00:00.000Z","valid_from":"2026-08-05T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64531","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/new-ovswrap-linux-kernel-flaw-lets.html","article_title":"New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch","article_url":"https://thehackernews.com/2026/08/new-ovswrap-linux-kernel-flaw-lets.html","published_at":"2026-08-05T11:43:27.000Z","valid_from":"2026-08-05T11:43:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59774","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/critical-gitea-flaw-let-unauthenticated.html","article_title":"Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup","article_url":"https://thehackernews.com/2026/08/critical-gitea-flaw-let-unauthenticated.html","published_at":"2026-08-05T11:04:23.000Z","valid_from":"2026-08-05T11:04:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64633","source":"GBHackers","source_url":"https://gbhackers.com/critical-veeam-one-flaw/","article_title":"Critical Veeam ONE Flaw Lets Unauthenticated Attackers Execute Code Remotely","article_url":"https://gbhackers.com/critical-veeam-one-flaw/","published_at":"2026-08-05T08:38:15.000Z","valid_from":"2026-08-05T08:38:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9198","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/cisa-flags-langflow-rce-tomcat-and-n.html","article_title":"CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited","article_url":"https://thehackernews.com/2026/08/cisa-flags-langflow-rce-tomcat-and-n.html","published_at":"2026-08-05T07:40:39.000Z","valid_from":"2026-08-05T07:40:39.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10038,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33216","article_title":"ISC Stormcast For Wednesday, August 5th, 2026 https://isc.sans.edu/podcastdetail/10038, (Wed, Aug 5th)","article_url":"https://isc.sans.edu/diary/rss/33216","published_at":"2026-08-05T02:00:02.000Z","valid_from":"2026-08-05T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"CSO Online","source_url":"https://www.csoonline.com/article/4205383/ruby-on-rails-critical-bug-puts-every-image-upload-under-scrutiny.html","article_title":"Ruby on Rails critical bug puts every image upload under scrutiny","article_url":"https://www.csoonline.com/article/4205383/ruby-on-rails-critical-bug-puts-every-image-upload-under-scrutiny.html","published_at":"2026-08-05T01:56:18.000Z","valid_from":"2026-08-05T01:56:18.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58048","source":"Security Affairs","source_url":"https://securityaffairs.com/196595/security/cve-2026-58048-cpanel-bug-enables-full-database-administrator-access.html","article_title":"CVE-2026-58048: cPanel Bug Enables Full Database Administrator Access","article_url":"https://securityaffairs.com/196595/security/cve-2026-58048-cpanel-bug-enables-full-database-administrator-access.html","published_at":"2026-08-04T12:29:41.000Z","valid_from":"2026-08-04T12:29:41.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"GBHackers","source_url":"https://gbhackers.com/cisa-adds-exploited-n-able-n-central-flaw/","article_title":"CISA Adds Exploited N-able N-central Flaw Enabling Remote Admin Takeover to KEV","article_url":"https://gbhackers.com/cisa-adds-exploited-n-able-n-central-flaw/","published_at":"2026-08-04T12:22:35.000Z","valid_from":"2026-08-04T12:22:35.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9198","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/04/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/04/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-04T12:00:00.000Z","valid_from":"2026-08-04T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18556","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/04/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/04/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-04T12:00:00.000Z","valid_from":"2026-08-04T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34486","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/04/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/04/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-08-04T12:00:00.000Z","valid_from":"2026-08-04T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-17583","source":"HackRead","source_url":"https://hackread.com/thermo-fisher-forensic-dna-file-tampering-flaw/","article_title":"Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software","article_url":"https://hackread.com/thermo-fisher-forensic-dna-file-tampering-flaw/","published_at":"2026-08-04T11:34:47.000Z","valid_from":"2026-08-04T11:34:47.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-18577-n-able-n-central-authentication-bypass-exploited-in-the-wild","article_title":"CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-18577-n-able-n-central-authentication-bypass-exploited-in-the-wild","published_at":"2026-08-04T11:11:54.000Z","valid_from":"2026-08-04T11:11:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18556","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-18577-n-able-n-central-authentication-bypass-exploited-in-the-wild","article_title":"CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-18577-n-able-n-central-authentication-bypass-exploited-in-the-wild","published_at":"2026-08-04T11:11:54.000Z","valid_from":"2026-08-04T11:11:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"Security Affairs","source_url":"https://securityaffairs.com/196585/security/u-s-cisa-adds-a-n-able-n-central-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds a N-able N-central flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/196585/security/u-s-cisa-adds-a-n-able-n-central-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-08-04T11:02:44.000Z","valid_from":"2026-08-04T11:02:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58048","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/new-cpanel-critical-flaw-could-let.html","article_title":"New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root","article_url":"https://thehackernews.com/2026/08/new-cpanel-critical-flaw-could-let.html","published_at":"2026-08-04T10:36:27.000Z","valid_from":"2026-08-04T10:36:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59774","source":"GBHackers","source_url":"https://gbhackers.com/critical-gitea-flaw/","article_title":"Critical Gitea Flaw Lets Unauthenticated Attackers Read Server Files and Execute Code","article_url":"https://gbhackers.com/critical-gitea-flaw/","published_at":"2026-08-04T09:40:58.000Z","valid_from":"2026-08-04T09:40:58.000Z","origin":"rss"},{"type":"ipv4","value":"1.22.11.22","source":"GBHackers","source_url":"https://gbhackers.com/critical-gitea-flaw/","article_title":"Critical Gitea Flaw Lets Unauthenticated Attackers Read Server Files and Execute Code","article_url":"https://gbhackers.com/critical-gitea-flaw/","published_at":"2026-08-04T09:40:58.000Z","valid_from":"2026-08-04T09:40:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-39875","source":"GBHackers","source_url":"https://gbhackers.com/macos-cups-flaw/","article_title":"macOS CUPS Flaw Lets Local Attackers Write Arbitrary Files as Root","article_url":"https://gbhackers.com/macos-cups-flaw/","published_at":"2026-08-04T09:31:38.000Z","valid_from":"2026-08-04T09:31:38.000Z","origin":"rss"},{"type":"domain","value":"nuget.org","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/04/microsoft-reducing-nuget-api-keys-lifetime/","article_title":"Microsoft shortens NuGet API key lifetime to improve supply chain security","article_url":"https://www.helpnetsecurity.com/2026/08/04/microsoft-reducing-nuget-api-keys-lifetime/","published_at":"2026-08-04T08:30:15.000Z","valid_from":"2026-08-04T08:30:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18574","source":"GBHackers","source_url":"https://gbhackers.com/critical-check-point-flaw/","article_title":"Critical Check Point Flaw Lets Unauthenticated Attackers Execute Commands on Management Servers","article_url":"https://gbhackers.com/critical-check-point-flaw/","published_at":"2026-08-04T07:04:59.000Z","valid_from":"2026-08-04T07:04:59.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html","article_title":"CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises","article_url":"https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html","published_at":"2026-08-04T07:00:13.000Z","valid_from":"2026-08-04T07:00:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18556","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html","article_title":"CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises","article_url":"https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html","published_at":"2026-08-04T07:00:13.000Z","valid_from":"2026-08-04T07:00:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58048","source":"GBHackers","source_url":"https://gbhackers.com/cpanel-database-privilege-escalation-flaw/","article_title":"cPanel Database Privilege Escalation Flaw Enables Full Administrative Access","article_url":"https://gbhackers.com/cpanel-database-privilege-escalation-flaw/","published_at":"2026-08-04T06:54:23.000Z","valid_from":"2026-08-04T06:54:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-17583","source":"GBHackers","source_url":"https://gbhackers.com/thermo-fisher-dna-analysis-software-flaw/","article_title":"Thermo Fisher DNA Analysis Software Flaw Lets Attackers Secretly Alter Test Data","article_url":"https://gbhackers.com/thermo-fisher-dna-analysis-software-flaw/","published_at":"2026-08-04T05:12:26.000Z","valid_from":"2026-08-04T05:12:26.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10036,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33212","article_title":"ISC Stormcast For Tuesday, August 4th, 2026 https://isc.sans.edu/podcastdetail/10036, (Tue, Aug 4th)","article_url":"https://isc.sans.edu/diary/rss/33212","published_at":"2026-08-04T02:00:03.000Z","valid_from":"2026-08-04T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18556","source":"SC Media","source_url":"https://www.scworld.com/brief/n-able-addresses-critical-n-central-vulnerabilities-exploited-by-attackers","article_title":"N-able addresses critical N-central vulnerabilities exploited by attackers","article_url":"https://www.scworld.com/brief/n-able-addresses-critical-n-central-vulnerabilities-exploited-by-attackers","published_at":"2026-08-03T19:34:57.000Z","valid_from":"2026-08-03T19:34:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"SC Media","source_url":"https://www.scworld.com/brief/n-able-addresses-critical-n-central-vulnerabilities-exploited-by-attackers","article_title":"N-able addresses critical N-central vulnerabilities exploited by attackers","article_url":"https://www.scworld.com/brief/n-able-addresses-critical-n-central-vulnerabilities-exploited-by-attackers","published_at":"2026-08-03T19:34:57.000Z","valid_from":"2026-08-03T19:34:57.000Z","origin":"rss"},{"type":"ipv4","value":"7.2.3.2","source":"SC Media","source_url":"https://www.scworld.com/brief/critical-vulnerability-in-rails-active-storage-could-lead-to-rce","article_title":"Critical vulnerability in Rails Active Storage could lead to RCE","article_url":"https://www.scworld.com/brief/critical-vulnerability-in-rails-active-storage-could-lead-to-rce","published_at":"2026-08-03T19:03:13.000Z","valid_from":"2026-08-03T19:03:13.000Z","origin":"rss"},{"type":"ipv4","value":"8.0.5.1","source":"SC Media","source_url":"https://www.scworld.com/brief/critical-vulnerability-in-rails-active-storage-could-lead-to-rce","article_title":"Critical vulnerability in Rails Active Storage could lead to RCE","article_url":"https://www.scworld.com/brief/critical-vulnerability-in-rails-active-storage-could-lead-to-rce","published_at":"2026-08-03T19:03:13.000Z","valid_from":"2026-08-03T19:03:13.000Z","origin":"rss"},{"type":"ipv4","value":"8.1.3.1","source":"SC Media","source_url":"https://www.scworld.com/brief/critical-vulnerability-in-rails-active-storage-could-lead-to-rce","article_title":"Critical vulnerability in Rails Active Storage could lead to RCE","article_url":"https://www.scworld.com/brief/critical-vulnerability-in-rails-active-storage-could-lead-to-rce","published_at":"2026-08-03T19:03:13.000Z","valid_from":"2026-08-03T19:03:13.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ra-kindarails2shell-technical-analysis-cve-2026-66066","article_title":"Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)","article_url":"https://www.rapid7.com/blog/post/ra-kindarails2shell-technical-analysis-cve-2026-66066","published_at":"2026-08-03T17:11:25.000Z","valid_from":"2026-08-03T17:11:25.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48449","source":"SC Media","source_url":"https://www.scworld.com/brief/adobe-fixes-critical-vulnerabilities-in-campaign-classic-and-bridge","article_title":"Adobe fixes critical vulnerabilities in Campaign Classic and Bridge","article_url":"https://www.scworld.com/brief/adobe-fixes-critical-vulnerabilities-in-campaign-classic-and-bridge","published_at":"2026-08-03T17:03:15.000Z","valid_from":"2026-08-03T17:03:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/","article_title":"N-able warns of N-central auth bypass flaw exploited in attacks","article_url":"https://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/","published_at":"2026-08-03T17:00:56.000Z","valid_from":"2026-08-03T17:00:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/03/cve-2026-18577-n-able-n-central-vulnerability/","article_title":"Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)","article_url":"https://www.helpnetsecurity.com/2026/08/03/cve-2026-18577-n-able-n-central-vulnerability/","published_at":"2026-08-03T14:33:10.000Z","valid_from":"2026-08-03T14:33:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12935","source":"GBHackers","source_url":"https://gbhackers.com/tp-link-tl-wr940n-router-flaw/","article_title":"TP-Link TL-WR940N Router Flaw Lets Unauthenticated Attackers Execute Code Remotely","article_url":"https://gbhackers.com/tp-link-tl-wr940n-router-flaw/","published_at":"2026-08-03T13:18:29.000Z","valid_from":"2026-08-03T13:18:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"SecurityWeek","source_url":"https://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/","article_title":"N‑able Patches Vulnerability Exploited to Hack N-central Servers","article_url":"https://www.securityweek.com/n-able-patches-vulnerability-exploited-to-hack-n-central-servers/","published_at":"2026-08-03T12:34:06.000Z","valid_from":"2026-08-03T12:34:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/08/03/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog  ","article_url":"https://www.cisa.gov/news-events/alerts/2026/08/03/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-08-03T12:00:00.000Z","valid_from":"2026-08-03T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/08/03/kindarails2shell-cve-2026-66066-vulnerability/","article_title":"KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066)","article_url":"https://www.helpnetsecurity.com/2026/08/03/kindarails2shell-cve-2026-66066-vulnerability/","published_at":"2026-08-03T11:42:08.000Z","valid_from":"2026-08-03T11:42:08.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-17583","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/thermo-fisher-patches-flaw-that-could.html","article_title":"Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable","article_url":"https://thehackernews.com/2026/08/thermo-fisher-patches-flaw-that-could.html","published_at":"2026-08-03T08:05:30.000Z","valid_from":"2026-08-03T08:05:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"GBHackers","source_url":"https://gbhackers.com/critical-n-able-n-central-flaw-actively-exploited/","article_title":"Critical N-able N-central Flaw Actively Exploited to Gain God-Mode Access to MSP Networks","article_url":"https://gbhackers.com/critical-n-able-n-central-flaw-actively-exploited/","published_at":"2026-08-03T06:55:29.000Z","valid_from":"2026-08-03T06:55:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18577","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html","article_title":"N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete","article_url":"https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html","published_at":"2026-08-03T06:41:46.000Z","valid_from":"2026-08-03T06:41:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"GBHackers","source_url":"https://gbhackers.com/metasploit-exploit-targets-critical-ruby-on-rails/","article_title":"Metasploit Exploit Targets Critical Ruby on Rails Active Storage RCE Flaw","article_url":"https://gbhackers.com/metasploit-exploit-targets-critical-ruby-on-rails/","published_at":"2026-08-03T06:26:49.000Z","valid_from":"2026-08-03T06:26:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"Security Affairs","source_url":"https://securityaffairs.com/196486/security/ruby-on-rails-patches-critical-active-storage-vulnerability-affecting-image-processing.html","article_title":"Ruby on Rails Patches Critical Active Storage Vulnerability Affecting Image Processing","article_url":"https://securityaffairs.com/196486/security/ruby-on-rails-patches-critical-active-storage-vulnerability-affecting-image-processing.html","published_at":"2026-08-03T06:22:23.000Z","valid_from":"2026-08-03T06:22:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16812","source":"GBHackers","source_url":"https://gbhackers.com/hackers-exploit-critical-arista-velocloud-flaw/","article_title":"Hackers Exploit Critical Arista VeloCloud Flaw to Execute OS Commands","article_url":"https://gbhackers.com/hackers-exploit-critical-arista-velocloud-flaw/","published_at":"2026-08-03T05:37:19.000Z","valid_from":"2026-08-03T05:37:19.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10034,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33210","article_title":"ISC Stormcast For Monday, August 3rd, 2026 https://isc.sans.edu/podcastdetail/10034, (Mon, Aug 3rd)","article_url":"https://isc.sans.edu/diary/rss/33210","published_at":"2026-08-03T02:00:02.000Z","valid_from":"2026-08-03T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48449","source":"Security Affairs","source_url":"https://securityaffairs.com/196429/security/adobe-fixed-a-maximum-severity-vulnerability-flaw-in-campaign-classic.html","article_title":"Adobe fixed a maximum-severity vulnerability flaw in Campaign Classic","article_url":"https://securityaffairs.com/196429/security/adobe-fixed-a-maximum-severity-vulnerability-flaw-in-campaign-classic.html","published_at":"2026-08-01T12:31:34.000Z","valid_from":"2026-08-01T12:31:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48449","source":"The Hacker News","source_url":"https://thehackernews.com/2026/08/adobe-campaign-classic-cvss-100-flaw.html","article_title":"Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction","article_url":"https://thehackernews.com/2026/08/adobe-campaign-classic-cvss-100-flaw.html","published_at":"2026-08-01T07:12:42.000Z","valid_from":"2026-08-01T07:12:42.000Z","origin":"rss"},{"type":"domain","value":"wordpress.org","source":"HackRead","source_url":"https://hackread.com/wordfence-critical-backdoor-arve-wordpress-plugin/","article_title":"Wordfence Finds Critical Backdoor in ARVE WordPress Plugin","article_url":"https://hackread.com/wordfence-critical-backdoor-arve-wordpress-plugin/","published_at":"2026-07-31T13:07:14.000Z","valid_from":"2026-07-31T13:07:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-17059","source":"GBHackers","source_url":"https://gbhackers.com/keycloak-flaw-exposes-users-personal-data/","article_title":"Keycloak Flaw Exposes Users’ Personal Data to Restricted Admins","article_url":"https://gbhackers.com/keycloak-flaw-exposes-users-personal-data/","published_at":"2026-07-31T13:00:00.000Z","valid_from":"2026-07-31T13:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"GBHackers","source_url":"https://gbhackers.com/critical-jetbrains-teamcity-flaw/","article_title":"Critical JetBrains TeamCity Flaw Enables Unauthenticated Remote Code Execution","article_url":"https://gbhackers.com/critical-jetbrains-teamcity-flaw/","published_at":"2026-07-31T10:47:38.000Z","valid_from":"2026-07-31T10:47:38.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"CSO Online","source_url":"https://www.csoonline.com/article/4203872/jetbrains-says-a-crafted-http-request-could-break-teamcity.html","article_title":"JetBrains says a crafted HTTP request could break TeamCity","article_url":"https://www.csoonline.com/article/4203872/jetbrains-says-a-crafted-http-request-could-break-teamcity.html","published_at":"2026-07-31T10:46:30.000Z","valid_from":"2026-07-31T10:46:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28323","source":"GBHackers","source_url":"https://gbhackers.com/critical-solarwinds-web-help-desk-flaw/","article_title":"Critical SolarWinds Web Help Desk Flaw Lets Attackers Bypass SAML Authentication","article_url":"https://gbhackers.com/critical-solarwinds-web-help-desk-flaw/","published_at":"2026-07-31T08:10:06.000Z","valid_from":"2026-07-31T08:10:06.000Z","origin":"rss"},{"type":"ipv4","value":"91.92.40.13","source":"GBHackers","source_url":"https://gbhackers.com/recon-only-ssh-attack/","article_title":"Recon-Only SSH Attack Leaves No Malware but Signals a Second-Stage Intrusion","article_url":"https://gbhackers.com/recon-only-ssh-attack/","published_at":"2026-07-31T07:35:43.000Z","valid_from":"2026-07-31T07:35:43.000Z","origin":"rss"},{"type":"ipv4","value":"8.4.248.4","source":"GBHackers","source_url":"https://gbhackers.com/php-patches-3-security-flaws-enabling-sql-injection/","article_title":"PHP Patches 3 Security Flaws Enabling SQL Injection, Memory Corruption and DoS Attacks","article_url":"https://gbhackers.com/php-patches-3-security-flaws-enabling-sql-injection/","published_at":"2026-07-31T06:53:39.000Z","valid_from":"2026-07-31T06:53:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"SecurityWeek","source_url":"https://www.securityweek.com/critical-code-execution-vulnerability-patched-in-teamcity/","article_title":"Critical Code Execution Vulnerability Patched in TeamCity ","article_url":"https://www.securityweek.com/critical-code-execution-vulnerability-patched-in-teamcity/","published_at":"2026-07-31T06:50:30.000Z","valid_from":"2026-07-31T06:50:30.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10032,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33204","article_title":"ISC Stormcast For Friday, July 31st, 2026 https://isc.sans.edu/podcastdetail/10032, (Fri, Jul 31st)","article_url":"https://isc.sans.edu/diary/rss/33204","published_at":"2026-07-31T02:00:03.000Z","valid_from":"2026-07-31T02:00:03.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"Security Affairs","source_url":"https://securityaffairs.com/196369/malware/researchers-expose-flying-eagle-criminal-ecosystem-behind-fake-chinese-police-app.html","article_title":"Researchers Expose Flying Eagle Criminal Ecosystem Behind Fake Chinese Police App","article_url":"https://securityaffairs.com/196369/malware/researchers-expose-flying-eagle-criminal-ecosystem-behind-fake-chinese-police-app.html","published_at":"2026-07-30T22:41:51.000Z","valid_from":"2026-07-30T22:41:51.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-kindarails2shell-cve-2026-66066-critical-arbitrary-file-read-and-possible-remote-code-execution-in-ruby-on-rails","article_title":"KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails","article_url":"https://www.rapid7.com/blog/post/etr-kindarails2shell-cve-2026-66066-critical-arbitrary-file-read-and-possible-remote-code-execution-in-ruby-on-rails","published_at":"2026-07-30T16:11:10.000Z","valid_from":"2026-07-30T16:11:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42897","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/30/cve-2026-42897-microsoft-exchange-email-attack/","article_title":"Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897)","article_url":"https://www.helpnetsecurity.com/2026/07/30/cve-2026-42897-microsoft-exchange-email-attack/","published_at":"2026-07-30T14:23:34.000Z","valid_from":"2026-07-30T14:23:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59726","source":"CSO Online","source_url":"https://www.csoonline.com/article/4203408/critical-ruflo-flaw-lets-attackers-hijack-ai-agents-through-exposed-mcp-bridge.html","article_title":"Critical Ruflo flaw lets attackers hijack AI agents through exposed MCP bridge","article_url":"https://www.csoonline.com/article/4203408/critical-ruflo-flaw-lets-attackers-hijack-ai-agents-through-exposed-mcp-bridge.html","published_at":"2026-07-30T12:29:58.000Z","valid_from":"2026-07-30T12:29:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18064","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-06","article_title":"NASA Core Flight System (cFS) Health & Safety (HS) Application","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-06","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"igss.schneider-electric.com","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-04","article_title":"Schneider Electric IGSS","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-04","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"url","value":"https://igss.schneider-electric.com/)","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-04","article_title":"Schneider Electric IGSS","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-04","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-14227","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-01","article_title":"MikroTik RouterOS","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-01","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12562","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-03","article_title":"Toptech Systems RCU II+ and Multiload II+","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-03","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5846","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-09","article_title":"Watchfire Controller Software","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-09","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21662","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","article_title":"Johnson Controls OpenBlue Employee","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34495","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","article_title":"Johnson Controls OpenBlue Employee","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34497","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","article_title":"Johnson Controls OpenBlue Employee","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66720","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66369","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63550","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65421","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66364","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66349","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56758","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66360","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61893","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-11","article_title":"MZ Automation lib60870","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-11","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63033","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-11","article_title":"MZ Automation lib60870","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-11","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"GBHackers","source_url":"https://gbhackers.com/cisa-adds-cisco-secure-firewall-management-flaw/","article_title":"CISA Adds Cisco Secure Firewall Management Flaw to Exploited Vulnerabilities List","article_url":"https://gbhackers.com/cisa-adds-cisco-secure-firewall-management-flaw/","published_at":"2026-07-30T11:45:20.000Z","valid_from":"2026-07-30T11:45:20.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/30/cisco-fmc-cve-2026-20316-exploited/","article_title":"Cisco FMC static credentials exploited by attackers (CVE-2026-20316)","article_url":"https://www.helpnetsecurity.com/2026/07/30/cisco-fmc-cve-2026-20316-exploited/","published_at":"2026-07-30T10:44:09.000Z","valid_from":"2026-07-30T10:44:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59309","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-critical-vmware-vcenter-vulnerabilities-allow-authentication-bypass-and-remote-code-execution-cve-2026-59309-cve-2026-59310","article_title":"Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)","article_url":"https://www.rapid7.com/blog/post/etr-critical-vmware-vcenter-vulnerabilities-allow-authentication-bypass-and-remote-code-execution-cve-2026-59309-cve-2026-59310","published_at":"2026-07-30T10:35:21.000Z","valid_from":"2026-07-30T10:35:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-critical-vmware-vcenter-vulnerabilities-allow-authentication-bypass-and-remote-code-execution-cve-2026-59309-cve-2026-59310","article_title":"Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)","article_url":"https://www.rapid7.com/blog/post/etr-critical-vmware-vcenter-vulnerabilities-allow-authentication-bypass-and-remote-code-execution-cve-2026-59309-cve-2026-59310","published_at":"2026-07-30T10:35:21.000Z","valid_from":"2026-07-30T10:35:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"Security Affairs","source_url":"https://securityaffairs.com/196289/security/u-s-cisa-adds-a-cisco-secure-firewall-management-center-fmc-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/196289/security/u-s-cisa-adds-a-cisco-secure-firewall-management-center-fmc-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-07-30T09:06:54.000Z","valid_from":"2026-07-30T09:06:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"SecurityWeek","source_url":"https://www.securityweek.com/cisco-secure-fmc-zero-day-exploited-in-the-wild/","article_title":"Cisco Secure FMC Zero-Day Exploited in the Wild","article_url":"https://www.securityweek.com/cisco-secure-fmc-zero-day-exploited-in-the-wild/","published_at":"2026-07-30T06:31:31.000Z","valid_from":"2026-07-30T06:31:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/cisco-fmc-zero-day-actively-exploited.html","article_title":"Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data","article_url":"https://thehackernews.com/2026/07/cisco-fmc-zero-day-actively-exploited.html","published_at":"2026-07-30T05:08:39.000Z","valid_from":"2026-07-30T05:08:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15679","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-523/","article_title":"ZDI-26-523: Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-523/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41032","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-522/","article_title":"ZDI-26-522: Phoenix Contact CHARX SEC-3000 Insertion of Sensitive Information into Log File Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-522/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44095","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-521/","article_title":"ZDI-26-521: Phoenix Contact CHARX SEC-3000 Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-521/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44103","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-520/","article_title":"ZDI-26-520: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Jupicore External Control of Path Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-520/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44099","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-519/","article_title":"ZDI-26-519: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-519/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44091","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-518/","article_title":"ZDI-26-518: (Pwn2Own) Phoenix Contact CHARX SEC-3150 MQTT Service Server-Side Request Forgery Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-518/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44098","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-517/","article_title":"ZDI-26-517: (Pwn2Own) Phoenix Contact CHARX SEC-3150 BackendURL WebSocket Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-517/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44090","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-516/","article_title":"ZDI-26-516: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-516/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44100","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-515/","article_title":"ZDI-26-515: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-jupicore Missing Authentication Configuration Modification Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-515/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44094","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-514/","article_title":"ZDI-26-514: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Failing Open Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-514/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44097","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-513/","article_title":"ZDI-26-513: (Pwn2Own) Phoenix Contact CHARX SEC-3150 update2-upload Arbitrary File Upload Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-513/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44107","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-512/","article_title":"ZDI-26-512: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-512/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44093","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-511/","article_title":"ZDI-26-511: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Symlink Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-511/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44104","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-510/","article_title":"ZDI-26-510: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Missing Cryptographic Signature Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-510/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44101","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-509/","article_title":"ZDI-26-509: (Pwn2Own) Phoenix Contact CHARX SEC-3150 OCPP Missing Authentication for Critical Function Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-509/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44095","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-508/","article_title":"ZDI-26-508: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx_set_ip_address Improper Input Validation Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-508/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44096","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-507/","article_title":"ZDI-26-507: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Privilege Defined With Unsafe Actions Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-507/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44105","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-506/","article_title":"ZDI-26-506: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Insertion of Sensitive Information into Log File Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-506/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44092","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-505/","article_title":"ZDI-26-505: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-system-config-manager Service CRLF Injection Firewall Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-505/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-7849","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-504/","article_title":"ZDI-26-504: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-504/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44108","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-503/","article_title":"ZDI-26-503: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Race Condition Firewall Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-503/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44106","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-502/","article_title":"ZDI-26-502: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Link Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-502/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"api.anthropic.com","source":"GBHackers","source_url":"https://gbhackers.com/claude-global-outage-hits-users/","article_title":"Claude Global Outage Hits Users With “529 Overloaded” Error Messages","article_url":"https://gbhackers.com/claude-global-outage-hits-users/","published_at":"2026-07-30T04:58:26.000Z","valid_from":"2026-07-30T04:58:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-10702","source":"GBHackers","source_url":"https://gbhackers.com/hackers-can-compromise-tor-browser-users/","article_title":"Hackers Can Compromise Tor Browser Users by Exploiting Firefox JIT Flaw","article_url":"https://gbhackers.com/hackers-can-compromise-tor-browser-users/","published_at":"2026-07-30T04:31:12.000Z","valid_from":"2026-07-30T04:31:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"GBHackers","source_url":"https://gbhackers.com/critical-rails-flaw/","article_title":"Critical Rails Flaw Lets Unauthenticated Attackers Read Server Files and Execute Code","article_url":"https://gbhackers.com/critical-rails-flaw/","published_at":"2026-07-30T04:03:53.000Z","valid_from":"2026-07-30T04:03:53.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10030,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33200","article_title":"ISC Stormcast For Thursday, July 30th, 2026 https://isc.sans.edu/podcastdetail/10030, (Thu, Jul 30th)","article_url":"https://isc.sans.edu/diary/rss/33200","published_at":"2026-07-30T02:00:03.000Z","valid_from":"2026-07-30T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/cisco-warns-of-fmc-static-credential-flaw-exploited-in-zero-day-attacks/","article_title":"Cisco warns of FMC static credential flaw exploited in zero-day attacks","article_url":"https://www.bleepingcomputer.com/news/security/cisco-warns-of-fmc-static-credential-flaw-exploited-in-zero-day-attacks/","published_at":"2026-07-29T21:35:40.000Z","valid_from":"2026-07-29T21:35:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-rails-flaw-could-let.html","article_title":"Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads","article_url":"https://thehackernews.com/2026/07/critical-rails-flaw-could-let.html","published_at":"2026-07-29T18:10:00.000Z","valid_from":"2026-07-29T18:10:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63077-critical-unauthenticated-remote-code-execution-in-jetbrains-teamcity","article_title":"CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63077-critical-unauthenticated-remote-code-execution-in-jetbrains-teamcity","published_at":"2026-07-29T16:16:48.000Z","valid_from":"2026-07-29T16:16:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59726","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/ruflo-mcp-flaw-lets-unauthenticated.html","article_title":"Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory","article_url":"https://thehackernews.com/2026/07/ruflo-mcp-flaw-lets-unauthenticated.html","published_at":"2026-07-29T15:39:30.000Z","valid_from":"2026-07-29T15:39:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59309","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/three-critical-vmware-flaws-allow-auth.html","article_title":"Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape","article_url":"https://thehackernews.com/2026/07/three-critical-vmware-flaws-allow-auth.html","published_at":"2026-07-29T15:31:15.000Z","valid_from":"2026-07-29T15:31:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53921","source":"SC Media","source_url":"https://www.scworld.com/brief/openwrt-releases-security-updates-for-critical-dhcpv6-flaw-and-other-vulnerabilities","article_title":"OpenWrt releases security updates for critical DHCPv6 flaw and other vulnerabilities","article_url":"https://www.scworld.com/brief/openwrt-releases-security-updates-for-critical-dhcpv6-flaw-and-other-vulnerabilities","published_at":"2026-07-29T14:33:58.000Z","valid_from":"2026-07-29T14:33:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"SC Media","source_url":"https://www.scworld.com/brief/jetbrains-patches-critical-teamcity-flaw-enabling-unauthenticated-code-execution","article_title":"JetBrains patches critical TeamCity flaw enabling unauthenticated code execution","article_url":"https://www.scworld.com/brief/jetbrains-patches-critical-teamcity-flaw-enabling-unauthenticated-code-execution","published_at":"2026-07-29T14:30:48.000Z","valid_from":"2026-07-29T14:30:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59726","source":"GBHackers","source_url":"https://gbhackers.com/critical-ruflo-mcp-bridge-flaw/","article_title":"Critical Ruflo MCP Bridge Flaw Allows Full AI Agent Platform Takeover","article_url":"https://gbhackers.com/critical-ruflo-mcp-bridge-flaw/","published_at":"2026-07-29T13:51:23.000Z","valid_from":"2026-07-29T13:51:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47876","source":"Security Affairs","source_url":"https://securityaffairs.com/196231/security/broadcom-patches-critical-vmware-esxi-vulnerability-enabling-host-code-execution.html","article_title":"Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code Execution","article_url":"https://securityaffairs.com/196231/security/broadcom-patches-critical-vmware-esxi-vulnerability-enabling-host-code-execution.html","published_at":"2026-07-29T13:02:49.000Z","valid_from":"2026-07-29T13:02:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/29/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/29/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-07-29T12:00:00.000Z","valid_from":"2026-07-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-10702","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/researchers-show-single-malicious.html","article_title":"Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser","article_url":"https://thehackernews.com/2026/07/researchers-show-single-malicious.html","published_at":"2026-07-29T11:57:00.000Z","valid_from":"2026-07-29T11:57:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65094","source":"GBHackers","source_url":"https://gbhackers.com/nvidia-bluefield-flaw/","article_title":"NVIDIA BlueField Flaw Lets VM Users Execute Code via Crafted Messages","article_url":"https://gbhackers.com/nvidia-bluefield-flaw/","published_at":"2026-07-29T11:41:30.000Z","valid_from":"2026-07-29T11:41:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"GBHackers","source_url":"https://gbhackers.com/check-point-smartconsole-zero-day/","article_title":"Check Point SmartConsole Zero-Day Lets Unauthenticated Attackers Gain Full Admin Access","article_url":"https://gbhackers.com/check-point-smartconsole-zero-day/","published_at":"2026-07-29T09:21:21.000Z","valid_from":"2026-07-29T09:21:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/rapid7-releases-poc-for-exploited-check.html","article_title":"Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass","article_url":"https://thehackernews.com/2026/07/rapid7-releases-poc-for-exploited-check.html","published_at":"2026-07-29T08:58:27.000Z","valid_from":"2026-07-29T08:58:27.000Z","origin":"rss"},{"type":"domain","value":"mend.io","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/29/mend-io-runtime-protection/","article_title":"Mend.io enhances application security with AI runtime protection and faster zero-day response","article_url":"https://www.helpnetsecurity.com/2026/07/29/mend-io-runtime-protection/","published_at":"2026-07-29T07:49:10.000Z","valid_from":"2026-07-29T07:49:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60004","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html","article_title":"New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands","article_url":"https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html","published_at":"2026-07-29T07:47:19.000Z","valid_from":"2026-07-29T07:47:19.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/flying-eagle-android-rat-traces-found.html","article_title":"Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates","article_url":"https://thehackernews.com/2026/07/flying-eagle-android-rat-traces-found.html","published_at":"2026-07-29T07:07:23.000Z","valid_from":"2026-07-29T07:07:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18299","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-467/","article_title":"ZDI-26-467: GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-467/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18298","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-466/","article_title":"ZDI-26-466: GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-466/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18297","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-465/","article_title":"ZDI-26-465: GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-465/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18296","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-464/","article_title":"ZDI-26-464: GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-464/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18295","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-463/","article_title":"ZDI-26-463: GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-463/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18309","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-462/","article_title":"ZDI-26-462: GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-462/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18308","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-461/","article_title":"ZDI-26-461: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-461/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18307","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-460/","article_title":"ZDI-26-460: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-460/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18306","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-459/","article_title":"ZDI-26-459: GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-459/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18305","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-458/","article_title":"ZDI-26-458: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-458/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18304","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-457/","article_title":"ZDI-26-457: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-457/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18303","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-456/","article_title":"ZDI-26-456: GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-456/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18302","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-455/","article_title":"ZDI-26-455: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-455/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18301","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-454/","article_title":"ZDI-26-454: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-454/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18300","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-453/","article_title":"ZDI-26-453: GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-453/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18269","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-486/","article_title":"ZDI-26-486: (Pwn2Own) Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-486/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18268","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-485/","article_title":"ZDI-26-485: (Pwn2Own) Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-485/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18267","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-484/","article_title":"ZDI-26-484: (Pwn2Own) Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-484/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18264","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-483/","article_title":"ZDI-26-483: NoMachine getstat Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-483/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59689","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-482/","article_title":"ZDI-26-482: Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-482/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59690","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-481/","article_title":"ZDI-26-481: Progress Software Kemp LoadMaster access Missing Authorization Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-481/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18265","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-480/","article_title":"ZDI-26-480: OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-480/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18274","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-479/","article_title":"ZDI-26-479: Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-479/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15686","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-478/","article_title":"ZDI-26-478: Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-478/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18284","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-477/","article_title":"ZDI-26-477: (Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-477/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18283","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-476/","article_title":"ZDI-26-476: (Pwn2Own) Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-476/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18282","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-475/","article_title":"ZDI-26-475: (Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-475/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18281","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-474/","article_title":"ZDI-26-474: (Pwn2Own) Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-474/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18280","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-473/","article_title":"ZDI-26-473: (Pwn2Own) Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-473/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18279","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-472/","article_title":"ZDI-26-472: (Pwn2Own) Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-472/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18278","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-471/","article_title":"ZDI-26-471: (Pwn2Own) Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-471/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18287","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-470/","article_title":"ZDI-26-470: Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-470/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18286","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-469/","article_title":"ZDI-26-469: Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-469/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18285","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-468/","article_title":"ZDI-26-468: Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-468/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18273","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-490/","article_title":"ZDI-26-490: (Pwn2Own) Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-490/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18272","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-489/","article_title":"ZDI-26-489: (Pwn2Own) Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-489/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18271","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-488/","article_title":"ZDI-26-488: (Pwn2Own) Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-488/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18270","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-487/","article_title":"ZDI-26-487: (Pwn2Own) Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-487/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13054","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-501/","article_title":"ZDI-26-501: WatchGuard FireWare OS sigd comp_start_cb Directory Traversal Arbitrary File Creation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-501/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13050","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-500/","article_title":"ZDI-26-500: WatchGuard FireWare OS networkd network_wireless_kick_off_user_cb Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-500/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13053","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-499/","article_title":"ZDI-26-499: WatchGuard FireWare OS cli Token Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-499/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-71387","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-498/","article_title":"ZDI-26-498: TrendAI Vision One Incorrect Privilege Assignment Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-498/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-71386","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-497/","article_title":"ZDI-26-497: TrendAI Vision One Service Gateway Logs Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-497/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62660","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-496/","article_title":"ZDI-26-496: Trend AI Cleaner One Pro Link Following Arbitrary File Deletion Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-496/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47876","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-495/","article_title":"ZDI-26-495: (Pwn2Own) VMware ESXi VMXNET3 espQueueMask Out-Of-Bounds Write Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-495/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43729","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-494/","article_title":"ZDI-26-494: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-494/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43733","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-493/","article_title":"ZDI-26-493: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-493/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43780","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-492/","article_title":"ZDI-26-492: Apple macOS ImageIO Numeric Truncation Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-492/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43673","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-491/","article_title":"ZDI-26-491: Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-491/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"email","value":"layouts@0.1.2-2773.beta","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/two-compromised-joyfill-npm-packages.html","article_title":"Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js","article_url":"https://thehackernews.com/2026/07/two-compromised-joyfill-npm-packages.html","published_at":"2026-07-29T04:20:57.000Z","valid_from":"2026-07-29T04:20:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42533","source":"GBHackers","source_url":"https://gbhackers.com/nginx-heap-overflow-flaw/","article_title":"NGINX Heap Overflow Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code","article_url":"https://gbhackers.com/nginx-heap-overflow-flaw/","published_at":"2026-07-29T03:53:17.000Z","valid_from":"2026-07-29T03:53:17.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10028,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33194","article_title":"ISC Stormcast For Wednesday, July 29th, 2026 https://isc.sans.edu/podcastdetail/10028, (Wed, Jul 29th)","article_url":"https://isc.sans.edu/diary/rss/33194","published_at":"2026-07-29T02:00:02.000Z","valid_from":"2026-07-29T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ra-check-point-smartconsole-authentication-bypass-technical-analysis-cve-2026-16232","article_title":"Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)","article_url":"https://www.rapid7.com/blog/post/ra-check-point-smartconsole-authentication-bypass-technical-analysis-cve-2026-16232","published_at":"2026-07-28T18:32:03.000Z","valid_from":"2026-07-28T18:32:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53921","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-openwrt-dhcpv6-flaw-could-let.html","article_title":"Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root","article_url":"https://thehackernews.com/2026/07/critical-openwrt-dhcpv6-flaw-could-let.html","published_at":"2026-07-28T12:56:14.000Z","valid_from":"2026-07-28T12:56:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16347","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-05","article_title":"MikroTik RouterOS and Cloud Hosted Router","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-05","published_at":"2026-07-28T12:00:00.000Z","valid_from":"2026-07-28T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-54429","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-03","article_title":"Siemens SIMATIC S7-PLCSIM Advanced","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-03","published_at":"2026-07-28T12:00:00.000Z","valid_from":"2026-07-28T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16581","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06","article_title":"igloohome Smart Lock Mobile Application","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06","published_at":"2026-07-28T12:00:00.000Z","valid_from":"2026-07-28T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"Security Affairs","source_url":"https://securityaffairs.com/196169/security/jetbrains-patches-cvss-9-8-teamcity-flaw-allowing-server-takeover.html","article_title":"JetBrains Patches Critical TeamCity Flaw Allowing Server Takeover","article_url":"https://securityaffairs.com/196169/security/jetbrains-patches-cvss-9-8-teamcity-flaw-allowing-server-takeover.html","published_at":"2026-07-28T11:17:06.000Z","valid_from":"2026-07-28T11:17:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/28/teamcity-rce-cve-2026-63077-fixed/","article_title":"JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)","article_url":"https://www.helpnetsecurity.com/2026/07/28/teamcity-rce-cve-2026-63077-fixed/","published_at":"2026-07-28T11:04:12.000Z","valid_from":"2026-07-28T11:04:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"GBHackers","source_url":"https://gbhackers.com/critical-teamcity-flaw/","article_title":"Critical TeamCity Flaw Lets Unauthenticated Attackers Execute System Commands","article_url":"https://gbhackers.com/critical-teamcity-flaw/","published_at":"2026-07-28T10:58:50.000Z","valid_from":"2026-07-28T10:58:50.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53264","source":"GBHackers","source_url":"https://gbhackers.com/ai-discovered-linux-kernel-zero-day/","article_title":"AI-Discovered Linux Kernel Zero-Day Enables Root Privilege Escalation","article_url":"https://gbhackers.com/ai-discovered-linux-kernel-zero-day/","published_at":"2026-07-28T10:34:07.000Z","valid_from":"2026-07-28T10:34:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-68686","source":"Security Affairs","source_url":"https://securityaffairs.com/196130/security/u-s-cisa-adds-arista-velocloud-orchestrator-and-fortinet-fortios-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/196130/security/u-s-cisa-adds-arista-velocloud-orchestrator-and-fortinet-fortios-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-07-28T08:19:29.000Z","valid_from":"2026-07-28T08:19:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html","article_title":"Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In","article_url":"https://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html","published_at":"2026-07-28T08:11:22.000Z","valid_from":"2026-07-28T08:11:22.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53264","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/researcher-says-ai-helped-develop-linux.html","article_title":"Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit","article_url":"https://thehackernews.com/2026/07/researcher-says-ai-helped-develop-linux.html","published_at":"2026-07-28T08:04:44.000Z","valid_from":"2026-07-28T08:04:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16812","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/attackers-exploit-arista-velocloud.html","article_title":"Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw","article_url":"https://thehackernews.com/2026/07/attackers-exploit-arista-velocloud.html","published_at":"2026-07-28T04:43:53.000Z","valid_from":"2026-07-28T04:43:53.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10026,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33190","article_title":"ISC Stormcast For Tuesday, July 28th, 2026 https://isc.sans.edu/podcastdetail/10026, (Tue, Jul 28th)","article_url":"https://isc.sans.edu/diary/rss/33190","published_at":"2026-07-28T02:00:03.000Z","valid_from":"2026-07-28T02:00:03.000Z","origin":"rss"},{"type":"domain","value":"media.io","source":"HackRead","source_url":"https://hackread.com/ai-tools-create-story-videos-workflow-wondershare-media-io/","article_title":"Too Many AI Tools? Here’s How to Create Story Videos In One Workflow With Wondershare Media.io","article_url":"https://hackread.com/ai-tools-create-story-videos-workflow-wondershare-media-io/","published_at":"2026-07-27T22:56:11.000Z","valid_from":"2026-07-27T22:56:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27577","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/n8n-sandbox-escape-lets-workflow.html","article_title":"n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process","article_url":"https://thehackernews.com/2026/07/n8n-sandbox-escape-lets-workflow.html","published_at":"2026-07-27T13:05:15.000Z","valid_from":"2026-07-27T13:05:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-54121","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/27/certighost-cve-2026-54121-poc-exploit-released/","article_title":"PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)","article_url":"https://www.helpnetsecurity.com/2026/07/27/certighost-cve-2026-54121-poc-exploit-released/","published_at":"2026-07-27T12:04:09.000Z","valid_from":"2026-07-27T12:04:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-68686","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-07-27T12:00:00.000Z","valid_from":"2026-07-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16812","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-07-27T12:00:00.000Z","valid_from":"2026-07-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61511","source":"GBHackers","source_url":"https://gbhackers.com/vbulletin-pre-auth-rce-flaw/","article_title":"vBulletin Pre-Auth RCE Flaw Allows Remote PHP Code Execution","article_url":"https://gbhackers.com/vbulletin-pre-auth-rce-flaw/","published_at":"2026-07-27T11:11:46.000Z","valid_from":"2026-07-27T11:11:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-49176","source":"GBHackers","source_url":"https://gbhackers.com/windows-walletservice-flaw/","article_title":"Windows WalletService Flaw Lets Standard Users Gain SYSTEM Privileges","article_url":"https://gbhackers.com/windows-walletservice-flaw/","published_at":"2026-07-27T08:31:46.000Z","valid_from":"2026-07-27T08:31:46.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10024,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33186","article_title":"ISC Stormcast For Monday, July 27th, 2026 https://isc.sans.edu/podcastdetail/10024, (Mon, Jul 27th)","article_url":"https://isc.sans.edu/diary/rss/33186","published_at":"2026-07-27T02:00:02.000Z","valid_from":"2026-07-27T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16723","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html","article_title":"Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available","article_url":"https://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html","published_at":"2026-07-25T12:52:43.000Z","valid_from":"2026-07-25T12:52:43.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57239","source":"GBHackers","source_url":"https://gbhackers.com/foxit-pdf-reader-flaw/","article_title":"Foxit PDF Reader Flaw Lets Local Attackers Gain SYSTEM Privileges via DLL Sideloading","article_url":"https://gbhackers.com/foxit-pdf-reader-flaw/","published_at":"2026-07-24T13:15:56.000Z","valid_from":"2026-07-24T13:15:56.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"Security Affairs","source_url":"https://securityaffairs.com/195941/hacking/thailands-ministry-of-finance-targeted-with-hermes-ai-agent-running-unattended-hades-implant-staged.html","article_title":"Thailand’s Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged","article_url":"https://securityaffairs.com/195941/hacking/thailands-ministry-of-finance-targeted-with-hermes-ai-agent-running-unattended-hades-implant-staged.html","published_at":"2026-07-24T12:10:28.000Z","valid_from":"2026-07-24T12:10:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32194","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/bing-images-flaws-let-crafted-svgs-run.html","article_title":"Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers","article_url":"https://thehackernews.com/2026/07/bing-images-flaws-let-crafted-svgs-run.html","published_at":"2026-07-24T11:45:17.000Z","valid_from":"2026-07-24T11:45:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62183","source":"GBHackers","source_url":"https://gbhackers.com/apache-syncope-flaws/","article_title":"Apache Syncope Flaws Let Users Gain Admin Roles and Execute Remote Code","article_url":"https://gbhackers.com/apache-syncope-flaws/","published_at":"2026-07-24T08:54:04.000Z","valid_from":"2026-07-24T08:54:04.000Z","origin":"rss"},{"type":"ipv4","value":"4.1.24.1","source":"GBHackers","source_url":"https://gbhackers.com/apache-syncope-flaws/","article_title":"Apache Syncope Flaws Let Users Gain Admin Roles and Execute Remote Code","article_url":"https://gbhackers.com/apache-syncope-flaws/","published_at":"2026-07-24T08:54:04.000Z","valid_from":"2026-07-24T08:54:04.000Z","origin":"rss"},{"type":"ipv4","value":"4.0.74.0","source":"GBHackers","source_url":"https://gbhackers.com/apache-syncope-flaws/","article_title":"Apache Syncope Flaws Let Users Gain Admin Roles and Execute Remote Code","article_url":"https://gbhackers.com/apache-syncope-flaws/","published_at":"2026-07-24T08:54:04.000Z","valid_from":"2026-07-24T08:54:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0257","source":"CSO Online","source_url":"https://www.csoonline.com/article/4201019/ransomware-groups-are-hammering-your-vulnerable-vpns.html","article_title":"Ransomware groups are hammering your vulnerable VPNs","article_url":"https://www.csoonline.com/article/4201019/ransomware-groups-are-hammering-your-vulnerable-vpns.html","published_at":"2026-07-24T07:00:00.000Z","valid_from":"2026-07-24T07:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10022,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33182","article_title":"ISC Stormcast For Friday, July 24th, 2026 https://isc.sans.edu/podcastdetail/10022, (Fri, Jul 24th)","article_url":"https://isc.sans.edu/diary/rss/33182","published_at":"2026-07-24T02:00:02.000Z","valid_from":"2026-07-24T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"CSO Online","source_url":"https://www.csoonline.com/article/4200913/check-point-hole-grants-unauthenticated-attackers-full-smartconsole-admin-privileges.html","article_title":"Check Point hole grants unauthenticated attackers full SmartConsole admin privileges","article_url":"https://www.csoonline.com/article/4200913/check-point-hole-grants-unauthenticated-attackers-full-smartconsole-admin-privileges.html","published_at":"2026-07-23T20:14:58.000Z","valid_from":"2026-07-23T20:14:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-16232-critical-check-point-smartconsole-authentication-bypass-exploited-in-the-wild","article_title":"CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-16232-critical-check-point-smartconsole-authentication-bypass-exploited-in-the-wild","published_at":"2026-07-23T11:57:30.000Z","valid_from":"2026-07-23T11:57:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64600","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/linux/new-refluxfs-linux-flaw-lets-attackers-gain-root-privileges/","article_title":"New RefluXFS Linux flaw lets attackers gain root privileges","article_url":"https://www.bleepingcomputer.com/news/linux/new-refluxfs-linux-flaw-lets-attackers-gain-root-privileges/","published_at":"2026-07-23T11:40:16.000Z","valid_from":"2026-07-23T11:40:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/23/check-point-vulnerability-cve-2026-16232/","article_title":"Attackers exploit critical Check Point flaw to take over firewall management (CVE-2026-16232)","article_url":"https://www.helpnetsecurity.com/2026/07/23/check-point-vulnerability-cve-2026-16232/","published_at":"2026-07-23T10:42:06.000Z","valid_from":"2026-07-23T10:42:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"GBHackers","source_url":"https://gbhackers.com/critical-check-point-smartconsole-flaw/","article_title":"Critical Check Point SmartConsole Flaw Exploited in the Wild to Bypass Authentication","article_url":"https://gbhackers.com/critical-check-point-smartconsole-flaw/","published_at":"2026-07-23T09:54:06.000Z","valid_from":"2026-07-23T09:54:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8933","source":"GBHackers","source_url":"https://gbhackers.com/ubuntu-snap-confine-vulnerability/","article_title":"Ubuntu Snap-Confine Vulnerability Allows Unprivileged Users to Execute Code as Root","article_url":"https://gbhackers.com/ubuntu-snap-confine-vulnerability/","published_at":"2026-07-23T09:35:59.000Z","valid_from":"2026-07-23T09:35:59.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"SecurityWeek","source_url":"https://www.securityweek.com/new-check-point-zero-day-vulnerability-exploited-in-the-wild/","article_title":"New Check Point Zero-Day Vulnerability Exploited in the Wild","article_url":"https://www.securityweek.com/new-check-point-zero-day-vulnerability-exploited-in-the-wild/","published_at":"2026-07-23T09:06:04.000Z","valid_from":"2026-07-23T09:06:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"Security Affairs","source_url":"https://securityaffairs.com/195848/hacking/check-point-patches-actively-exploited-smartconsole-authentication-bypass-flaw.html","article_title":"Check Point patches actively exploited SmartConsole authentication bypass flaw","article_url":"https://securityaffairs.com/195848/hacking/check-point-patches-actively-exploited-smartconsole-authentication-bypass-flaw.html","published_at":"2026-07-23T08:33:06.000Z","valid_from":"2026-07-23T08:33:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64600","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html","article_title":"Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs","article_url":"https://thehackernews.com/2026/07/nine-year-old-refluxfs-linux-flaw-gives.html","published_at":"2026-07-23T08:04:35.000Z","valid_from":"2026-07-23T08:04:35.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/check-point-patches-exploited.html","article_title":"Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access","article_url":"https://thehackernews.com/2026/07/check-point-patches-exploited.html","published_at":"2026-07-23T06:34:36.000Z","valid_from":"2026-07-23T06:34:36.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12921","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-450/","article_title":"ZDI-26-450: AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-450/","published_at":"2026-07-23T05:00:00.000Z","valid_from":"2026-07-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12390","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-449/","article_title":"ZDI-26-449: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-449/","published_at":"2026-07-23T05:00:00.000Z","valid_from":"2026-07-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6851","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-448/","article_title":"ZDI-26-448: Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-448/","published_at":"2026-07-23T05:00:00.000Z","valid_from":"2026-07-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12357","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-447/","article_title":"ZDI-26-447: Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-447/","published_at":"2026-07-23T05:00:00.000Z","valid_from":"2026-07-23T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10020,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33178","article_title":"ISC Stormcast For Thursday, July 23rd, 2026 https://isc.sans.edu/podcastdetail/10020, (Thu, Jul 23rd)","article_url":"https://isc.sans.edu/diary/rss/33178","published_at":"2026-07-23T02:00:03.000Z","valid_from":"2026-07-23T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48294","source":"SC Media","source_url":"https://www.scworld.com/brief/adobe-acrobat-extension-vulnerability-allowed-whatsapp-data-theft","article_title":"Adobe Acrobat extension vulnerability allowed WhatsApp data theft","article_url":"https://www.scworld.com/brief/adobe-acrobat-extension-vulnerability-allowed-whatsapp-data-theft","published_at":"2026-07-22T23:24:11.000Z","valid_from":"2026-07-22T23:24:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8933","source":"Security Affairs","source_url":"https://securityaffairs.com/195833/security/cve-2026-8933-ubuntu-security-flaw-breaks-snap-sandbox-protections.html","article_title":"CVE-2026-8933: Ubuntu security flaw breaks Snap sandbox protections","article_url":"https://securityaffairs.com/195833/security/cve-2026-8933-ubuntu-security-flaw-breaks-snap-sandbox-protections.html","published_at":"2026-07-22T22:25:57.000Z","valid_from":"2026-07-22T22:25:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48294","source":"Security Affairs","source_url":"https://securityaffairs.com/195805/hacking/adobe-acrobat-chrome-extension-bug-enabled-silent-whatsapp-data-theft.html","article_title":"Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theft","article_url":"https://securityaffairs.com/195805/hacking/adobe-acrobat-chrome-extension-bug-enabled-silent-whatsapp-data-theft.html","published_at":"2026-07-22T21:19:29.000Z","valid_from":"2026-07-22T21:19:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8933","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/ubuntu-snap-confine-flaw-could-give.html","article_title":"Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs","article_url":"https://thehackernews.com/2026/07/ubuntu-snap-confine-flaw-could-give.html","published_at":"2026-07-22T18:07:16.000Z","valid_from":"2026-07-22T18:07:16.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-64600","source":"Qualys Blog","source_url":"https://blog.qualys.com/vulnerabilities-threat-research/2026/07/22/refluxfs-a-linux-kernel-local-privilege-escalation-to-root-in-xfs-cve-2026-64600","article_title":"RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600) ","article_url":"https://blog.qualys.com/vulnerabilities-threat-research/2026/07/22/refluxfs-a-linux-kernel-local-privilege-escalation-to-root-in-xfs-cve-2026-64600","published_at":"2026-07-22T16:23:46.000Z","valid_from":"2026-07-22T16:23:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48294","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html","article_title":"Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data","article_url":"https://thehackernews.com/2026/07/adobe-acrobat-extension-flaw-let.html","published_at":"2026-07-22T15:01:21.000Z","valid_from":"2026-07-22T15:01:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-29059","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html","article_title":"Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication","article_url":"https://thehackernews.com/2026/07/hackers-exploit-windmill-flaw-to-read.html","published_at":"2026-07-22T12:36:36.000Z","valid_from":"2026-07-22T12:36:36.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/22/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/22/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-07-22T12:00:00.000Z","valid_from":"2026-07-22T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50522","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/22/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/22/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-07-22T12:00:00.000Z","valid_from":"2026-07-22T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"newtonsoftt.json.net","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/trojanized-newtonsoftjson-fork-hides.html","article_title":"Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library","article_url":"https://thehackernews.com/2026/07/trojanized-newtonsoftjson-fork-hides.html","published_at":"2026-07-22T06:00:06.000Z","valid_from":"2026-07-22T06:00:06.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10018,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33174","article_title":"ISC Stormcast For Wednesday, July 22nd, 2026 https://isc.sans.edu/podcastdetail/10018, (Wed, Jul 22nd)","article_url":"https://isc.sans.edu/diary/rss/33174","published_at":"2026-07-22T02:00:02.000Z","valid_from":"2026-07-22T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50522","source":"Security Affairs","source_url":"https://securityaffairs.com/195760/security/public-poc-triggers-active-exploitation-of-critical-sharepoint-rce-vulnerability-cve-2026-50522.html","article_title":"Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522","article_url":"https://securityaffairs.com/195760/security/public-poc-triggers-active-exploitation-of-critical-sharepoint-rce-vulnerability-cve-2026-50522.html","published_at":"2026-07-21T21:38:37.000Z","valid_from":"2026-07-21T21:38:37.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0257","source":"Security Affairs","source_url":"https://securityaffairs.com/195730/cyber-crime/qilin-ransomware-affiliates-abuse-cve-2026-0257-to-gain-unauthorized-vpn-access.html","article_title":"Qilin Ransomware Affiliates Abuse CVE-2026-0257 to Gain Unauthorized VPN Access","article_url":"https://securityaffairs.com/195730/cyber-crime/qilin-ransomware-affiliates-abuse-cve-2026-0257-to-gain-unauthorized-vpn-access.html","published_at":"2026-07-21T16:08:28.000Z","valid_from":"2026-07-21T16:08:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8933","source":"Qualys Blog","source_url":"https://blog.qualys.com/vulnerabilities-threat-research/2026/07/21/cve-2026-8933-snap-confine-local-privilege-escalation","article_title":"CVE-2026-8933: Local Privilege Escalation in Set-Capabilities snap-confine","article_url":"https://blog.qualys.com/vulnerabilities-threat-research/2026/07/21/cve-2026-8933-snap-confine-local-privilege-escalation","published_at":"2026-07-21T15:02:12.000Z","valid_from":"2026-07-21T15:02:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50522","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-sharepoint-rce-cve-2026-50522.html","article_title":"Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC","article_url":"https://thehackernews.com/2026/07/critical-sharepoint-rce-cve-2026-50522.html","published_at":"2026-07-21T14:57:51.000Z","valid_from":"2026-07-21T14:57:51.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0257","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/qilin-ransomware-attackers-exploit-pan.html","article_title":"Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access","article_url":"https://thehackernews.com/2026/07/qilin-ransomware-attackers-exploit-pan.html","published_at":"2026-07-21T14:04:57.000Z","valid_from":"2026-07-21T14:04:57.000Z","origin":"rss"},{"type":"url","value":"http://detectportal.firefox.co","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33172","article_title":"Captive Portal Detection, (Tue, Jul 21st)","article_url":"https://isc.sans.edu/diary/rss/33172","published_at":"2026-07-21T13:44:56.000Z","valid_from":"2026-07-21T13:44:56.000Z","origin":"rss"},{"type":"cve","value":"CVE-2021-27137","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0770","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63030","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60137","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/21/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"security.paloaltonetworks.com","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-02","article_title":"Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-02","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"url","value":"https://security.paloaltonetworks.com/","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-02","article_title":"Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-02","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9108","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-10","article_title":"Rockwell Automation Studio 5000 Logix Designer","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-10","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9127","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-10","article_title":"Rockwell Automation Studio 5000 Logix Designer","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-10","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9128","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-10","article_title":"Rockwell Automation Studio 5000 Logix Designer","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-202-10","published_at":"2026-07-21T12:00:00.000Z","valid_from":"2026-07-21T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63030","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/wordpress-wp2shell-exploitation-grows.html","article_title":"WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning","article_url":"https://thehackernews.com/2026/07/wordpress-wp2shell-exploitation-grows.html","published_at":"2026-07-21T08:59:30.000Z","valid_from":"2026-07-21T08:59:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60137","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/wordpress-wp2shell-exploitation-grows.html","article_title":"WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning","article_url":"https://thehackernews.com/2026/07/wordpress-wp2shell-exploitation-grows.html","published_at":"2026-07-21T08:59:30.000Z","valid_from":"2026-07-21T08:59:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6875","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-servicenow-ai-platform-flaw.html","article_title":"Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution","article_url":"https://thehackernews.com/2026/07/critical-servicenow-ai-platform-flaw.html","published_at":"2026-07-21T06:29:26.000Z","valid_from":"2026-07-21T06:29:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6875","source":"Security Affairs","source_url":"https://securityaffairs.com/195723/ai/attackers-exploit-critical-servicenow-rce-flaw-cve-2026-6875.html","article_title":"Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875","article_url":"https://securityaffairs.com/195723/ai/attackers-exploit-critical-servicenow-rce-flaw-cve-2026-6875.html","published_at":"2026-07-21T06:08:17.000Z","valid_from":"2026-07-21T06:08:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50297","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-446/","article_title":"ZDI-26-446: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-446/","published_at":"2026-07-21T05:00:00.000Z","valid_from":"2026-07-21T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50325","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-445/","article_title":"ZDI-26-445: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-445/","published_at":"2026-07-21T05:00:00.000Z","valid_from":"2026-07-21T05:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10016,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33170","article_title":"ISC Stormcast For Tuesday, July 21st, 2026 https://isc.sans.edu/podcastdetail/10016, (Tue, Jul 21st)","article_url":"https://isc.sans.edu/diary/rss/33170","published_at":"2026-07-21T02:00:02.000Z","valid_from":"2026-07-21T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6875","source":"CSO Online","source_url":"https://www.csoonline.com/article/4198993/servicenows-sandbox-escape-rce-hole-now-exploited-in-the-wild.html","article_title":"ServiceNow’s sandbox escape RCE hole now exploited in the wild","article_url":"https://www.csoonline.com/article/4198993/servicenows-sandbox-escape-rce-hole-now-exploited-in-the-wild.html","published_at":"2026-07-20T20:24:54.000Z","valid_from":"2026-07-20T20:24:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63030","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33168","article_title":"WordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th)","article_url":"https://isc.sans.edu/diary/rss/33168","published_at":"2026-07-20T18:41:24.000Z","valid_from":"2026-07-20T18:41:24.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63030","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution","article_title":"wp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Core","article_url":"https://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution","published_at":"2026-07-20T13:36:32.000Z","valid_from":"2026-07-20T13:36:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60137","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution","article_title":"wp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Core","article_url":"https://www.tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-execution","published_at":"2026-07-20T13:36:32.000Z","valid_from":"2026-07-20T13:36:32.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-14266","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.html","article_title":"New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction","article_url":"https://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.html","published_at":"2026-07-20T09:10:56.000Z","valid_from":"2026-07-20T09:10:56.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10014,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33166","article_title":"ISC Stormcast For Monday, July 20th, 2026 https://isc.sans.edu/podcastdetail/10014, (Mon, Jul 20th)","article_url":"https://isc.sans.edu/diary/rss/33166","published_at":"2026-07-20T02:00:02.000Z","valid_from":"2026-07-20T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42533","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html","article_title":"Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution","article_url":"https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html","published_at":"2026-07-19T20:42:49.000Z","valid_from":"2026-07-19T20:42:49.000Z","origin":"rss"},{"type":"ipv4","value":"37.0.3.1","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html","article_title":"Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution","article_url":"https://thehackernews.com/2026/07/critical-nginx-vulnerability-can-crash.html","published_at":"2026-07-19T20:42:49.000Z","valid_from":"2026-07-19T20:42:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60137","source":"Wordfence Blog","source_url":"https://www.wordfence.com/blog/2026/07/psa-wordpress-core-patched-unauthenticated-remote-code-execution-vulnerability-chain/","article_title":"PSA: WordPress Core Patched Unauthenticated Remote Code Execution Vulnerability Chain","article_url":"https://www.wordfence.com/blog/2026/07/psa-wordpress-core-patched-unauthenticated-remote-code-execution-vulnerability-chain/","published_at":"2026-07-17T23:03:48.000Z","valid_from":"2026-07-17T23:03:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63030","source":"Wordfence Blog","source_url":"https://www.wordfence.com/blog/2026/07/psa-wordpress-core-patched-unauthenticated-remote-code-execution-vulnerability-chain/","article_title":"PSA: WordPress Core Patched Unauthenticated Remote Code Execution Vulnerability Chain","article_url":"https://www.wordfence.com/blog/2026/07/psa-wordpress-core-patched-unauthenticated-remote-code-execution-vulnerability-chain/","published_at":"2026-07-17T23:03:48.000Z","valid_from":"2026-07-17T23:03:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63030","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63030-wp2shell-a-critical-remote-code-execution-vulnerability-in-wordpress-core","article_title":"CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63030-wp2shell-a-critical-remote-code-execution-vulnerability-in-wordpress-core","published_at":"2026-07-17T22:23:03.000Z","valid_from":"2026-07-17T22:23:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58644","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-58644-microsoft-sharepoint-server-unauthenticated-remote-code-execution-vulnerability-exploited-in-the-wild","article_title":"CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-58644-microsoft-sharepoint-server-unauthenticated-remote-code-execution-vulnerability-exploited-in-the-wild","published_at":"2026-07-17T18:18:53.000Z","valid_from":"2026-07-17T18:18:53.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10012,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33162","article_title":"ISC Stormcast For Friday, July 17th, 2026 https://isc.sans.edu/podcastdetail/10012, (Fri, Jul 17th)","article_url":"https://isc.sans.edu/diary/rss/33162","published_at":"2026-07-17T02:00:02.000Z","valid_from":"2026-07-17T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32201","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation","article_title":"CVE-2026-32201, CVE-2026-45659, CVE-2026-56164: Frequently Asked Questions About Active Exploitation of Microsoft SharePoint Server Vulnerabilities","article_url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation","published_at":"2026-07-16T16:00:26.000Z","valid_from":"2026-07-16T16:00:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45659","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation","article_title":"CVE-2026-32201, CVE-2026-45659, CVE-2026-56164: Frequently Asked Questions About Active Exploitation of Microsoft SharePoint Server Vulnerabilities","article_url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation","published_at":"2026-07-16T16:00:26.000Z","valid_from":"2026-07-16T16:00:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56164","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation","article_title":"CVE-2026-32201, CVE-2026-45659, CVE-2026-56164: Frequently Asked Questions About Active Exploitation of Microsoft SharePoint Server Vulnerabilities","article_url":"https://www.tenable.com/blog/cve-2026-32201-cve-2026-45659-cve-2026-56164-faq-sharepoint-server-exploitation","published_at":"2026-07-16T16:00:26.000Z","valid_from":"2026-07-16T16:00:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60063","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","article_title":"AutomationDirect Productivity Suite","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61389","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","article_title":"AutomationDirect Productivity Suite","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60140","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","article_title":"AutomationDirect Productivity Suite","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57896","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","article_title":"AutomationDirect Productivity Suite","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60073","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","article_title":"AutomationDirect Productivity Suite","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61378","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","article_title":"AutomationDirect Productivity Suite","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-04","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8085","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","article_title":"Rockwell Automation Arena","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8312","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","article_title":"Rockwell Automation Arena","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8313","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","article_title":"Rockwell Automation Arena","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8314","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","article_title":"Rockwell Automation Arena","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-01","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-25089","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/16/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/16/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-39808","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/16/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/16/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58644","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/16/cisa-adds-three-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Three Known Exploited Vulnerabilities to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/16/cisa-adds-three-known-exploited-vulnerabilities-catalog","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12659","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-08","article_title":"Rockwell Automation Flex 5000 Adapter","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-08","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9653","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-02","article_title":"Rockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBT","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-02","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9292","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-09","article_title":"Rockwell Automation FactoryTalk DataMosaix","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-09","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-12011","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-06","article_title":"Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-06","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-12012","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-06","article_title":"Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-06","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-11698","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-06","article_title":"Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-06","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-11889","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-07","article_title":"SALTO ProAccess Space","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-07","published_at":"2026-07-16T12:00:00.000Z","valid_from":"2026-07-16T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15409","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/cve-2026-15409-cve-2026-15410-sonicwall-sma-1000-zero-day-vulnerabilities-exploited-in-the","article_title":"CVE-2026-15409, CVE-2026-15410: SonicWall SMA 1000 zero-day vulnerabilities exploited in the wild","article_url":"https://www.tenable.com/blog/cve-2026-15409-cve-2026-15410-sonicwall-sma-1000-zero-day-vulnerabilities-exploited-in-the","published_at":"2026-07-15T17:14:09.000Z","valid_from":"2026-07-15T17:14:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15410","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/cve-2026-15409-cve-2026-15410-sonicwall-sma-1000-zero-day-vulnerabilities-exploited-in-the","article_title":"CVE-2026-15409, CVE-2026-15410: SonicWall SMA 1000 zero-day vulnerabilities exploited in the wild","article_url":"https://www.tenable.com/blog/cve-2026-15409-cve-2026-15410-sonicwall-sma-1000-zero-day-vulnerabilities-exploited-in-the","published_at":"2026-07-15T17:14:09.000Z","valid_from":"2026-07-15T17:14:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15409","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-rapid7-mdr-team-discovers-new-sonicwall-sma1000-zero-days-being-actively-exploited-cve-2026-15409-cve-2026-15410","article_title":"Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)","article_url":"https://www.rapid7.com/blog/post/etr-rapid7-mdr-team-discovers-new-sonicwall-sma1000-zero-days-being-actively-exploited-cve-2026-15409-cve-2026-15410","published_at":"2026-07-15T16:19:26.000Z","valid_from":"2026-07-15T16:19:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15410","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-rapid7-mdr-team-discovers-new-sonicwall-sma1000-zero-days-being-actively-exploited-cve-2026-15409-cve-2026-15410","article_title":"Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)","article_url":"https://www.rapid7.com/blog/post/etr-rapid7-mdr-team-discovers-new-sonicwall-sma1000-zero-days-being-actively-exploited-cve-2026-15409-cve-2026-15410","published_at":"2026-07-15T16:19:26.000Z","valid_from":"2026-07-15T16:19:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20150","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-15T16:01:10.000Z","valid_from":"2026-07-15T16:01:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20153","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-15T16:01:10.000Z","valid_from":"2026-07-15T16:01:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20156","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-15T16:01:10.000Z","valid_from":"2026-07-15T16:01:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20157","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-15T16:01:10.000Z","valid_from":"2026-07-15T16:01:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20158","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-15T16:01:10.000Z","valid_from":"2026-07-15T16:01:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20187","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-15T16:01:10.000Z","valid_from":"2026-07-15T16:01:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20146","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 15, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-ILh3ZrP5?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%2015,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-15T16:01:10.000Z","valid_from":"2026-07-15T16:01:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2023-4346","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/15/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/15/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-07-15T12:00:00.000Z","valid_from":"2026-07-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-46817","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/15/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/15/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-07-15T12:00:00.000Z","valid_from":"2026-07-15T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-14266","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-444/","article_title":"ZDI-26-444: 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-444/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-2291","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-441/","article_title":"ZDI-26-441: dnsmasq DNS Response Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-441/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8108","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-440/","article_title":"ZDI-26-440: Fuji Electric Tellus pcid64 Driver Untrusted Pointer Dereference Denial of Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-440/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8108","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-439/","article_title":"ZDI-26-439: Fuji Electric Tellus pcid64 Driver Exposed Dangerous Method Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-439/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6071","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-438/","article_title":"ZDI-26-438: Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-438/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13308","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-437/","article_title":"ZDI-26-437: (Pwn2Own) Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-437/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13307","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-436/","article_title":"ZDI-26-436: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-436/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13309","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-435/","article_title":"ZDI-26-435: (Pwn2Own) Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-435/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13306","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-434/","article_title":"ZDI-26-434: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-434/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13305","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-433/","article_title":"ZDI-26-433: (Pwn2Own) Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-433/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13268","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-432/","article_title":"ZDI-26-432: G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-432/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8921","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-431/","article_title":"ZDI-26-431: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-431/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6102","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-430/","article_title":"ZDI-26-430: MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-430/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24157","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-429/","article_title":"ZDI-26-429: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-429/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8247","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-428/","article_title":"ZDI-26-428: WatchGuard FireWare OS admd Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-428/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13084","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-427/","article_title":"ZDI-26-427: WatchGuard FireWare OS iked ike2_hmac Null Pointer Dereference Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-427/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42771","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-426/","article_title":"ZDI-26-426: OpenSSL X.509 Email Validation Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-426/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35188","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-425/","article_title":"ZDI-26-425: OpenSSL OCSP Stapling Verification Double Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-425/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13135","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-424/","article_title":"ZDI-26-424: Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-424/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-15660","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-423/","article_title":"ZDI-26-423: Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-423/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15551","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-422/","article_title":"ZDI-26-422: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-422/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20146","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-421/","article_title":"ZDI-26-421: Cisco Identity Services Engine validFileNameOrPath Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-421/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48344","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-420/","article_title":"ZDI-26-420: Adobe Creative Cloud AGSService Incorrect Permission Assignment Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-420/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48272","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-419/","article_title":"ZDI-26-419: Adobe Creative Cloud AdobeUpdateService Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-419/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55126","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-418/","article_title":"ZDI-26-418: Microsoft SharePoint SPFieldMultiLineText Cross-Site Scripting Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-418/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50311","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-417/","article_title":"ZDI-26-417: Microsoft Windows ServerManager Exposed Dangerous Method Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-417/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-54129","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-416/","article_title":"ZDI-26-416: Microsoft Hyper-V netvsc Out-Of-Bounds Read Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-416/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-49805","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-415/","article_title":"ZDI-26-415: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-415/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-40400","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-414/","article_title":"ZDI-26-414: Microsoft PowerShell Help Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-414/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50522","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-413/","article_title":"ZDI-26-413: (Pwn2Own) Microsoft SharePoint Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-413/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50522","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-412/","article_title":"ZDI-26-412: (Pwn2Own) Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-412/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24237","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-411/","article_title":"ZDI-26-411: NVIDIA NVTabular Pickle File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-411/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24228","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-410/","article_title":"ZDI-26-410: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-410/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55999","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-409/","article_title":"ZDI-26-409: X.Org Server Glamor Font Heap-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-409/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-409/","article_title":"ZDI-26-409: X.Org Server Glamor Font Heap-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-409/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56003","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-408/","article_title":"ZDI-26-408: X.Org Server ComputeScaledProperties Heap-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-408/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-408/","article_title":"ZDI-26-408: X.Org Server ComputeScaledProperties Heap-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-408/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56002","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-407/","article_title":"ZDI-26-407: X.Org Server PCF Font Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-407/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-407/","article_title":"ZDI-26-407: X.Org Server PCF Font Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-407/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56001","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-406/","article_title":"ZDI-26-406: X.Org Server BitmapScaleBitmaps Integer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-406/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-406/","article_title":"ZDI-26-406: X.Org Server BitmapScaleBitmaps Integer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-406/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56000","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-405/","article_title":"ZDI-26-405: X.Org Server GLX Extension Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-405/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-405/","article_title":"ZDI-26-405: X.Org Server GLX Extension Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-405/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12578","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-404/","article_title":"ZDI-26-404: Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-404/","published_at":"2026-07-15T05:00:00.000Z","valid_from":"2026-07-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56155","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/microsofts-july-2026-patch-tuesday-addresses-569-cves-cve-2026-56155-cve-2026-56164","article_title":"Microsoft’s July 2026 Patch Tuesday Addresses 569 CVEs (CVE-2026-56155, CVE-2026-56164)","article_url":"https://www.tenable.com/blog/microsofts-july-2026-patch-tuesday-addresses-569-cves-cve-2026-56155-cve-2026-56164","published_at":"2026-07-14T18:23:36.000Z","valid_from":"2026-07-14T18:23:36.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56164","source":"Tenable Blog","source_url":"https://www.tenable.com/blog/microsofts-july-2026-patch-tuesday-addresses-569-cves-cve-2026-56155-cve-2026-56164","article_title":"Microsoft’s July 2026 Patch Tuesday Addresses 569 CVEs (CVE-2026-56155, CVE-2026-56164)","article_url":"https://www.tenable.com/blog/microsofts-july-2026-patch-tuesday-addresses-569-cves-cve-2026-56155-cve-2026-56164","published_at":"2026-07-14T18:23:36.000Z","valid_from":"2026-07-14T18:23:36.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55040","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ve-cve-2026-55040-microsoft-sharepoint-jwt-token-authentication-bypass-fixed","article_title":"CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)","article_url":"https://www.rapid7.com/blog/post/ve-cve-2026-55040-microsoft-sharepoint-jwt-token-authentication-bypass-fixed","published_at":"2026-07-14T13:00:00.000Z","valid_from":"2026-07-14T13:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"1.1.1.1","source":"Cloudflare Blog","source_url":"https://blog.cloudflare.com/dnssec-nta-ede-33/","article_title":"A broken DNSSEC rollover took down .al. Now 1.1.1.1 tells you when validation is bypassed","article_url":"https://blog.cloudflare.com/dnssec-nta-ede-33/","published_at":"2026-07-14T13:00:00.000Z","valid_from":"2026-07-14T13:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-13162","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-195-01","article_title":"ABB Advant Master Online Builder","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-195-01","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-10577","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-195-04","article_title":"Rockwell Automation 1715-AENTR EtherNet/IP Adapter","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-195-04","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-58644","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","article_title":"CISA Urges SharePoint Hardening After New Exploitations","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32201","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","article_title":"CISA Urges SharePoint Hardening After New Exploitations","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45659","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","article_title":"CISA Urges SharePoint Hardening After New Exploitations","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56164","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","article_title":"CISA Urges SharePoint Hardening After New Exploitations","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15409","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15410","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56155","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56164","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Four Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-adds-four-known-exploited-vulnerabilities-catalog","published_at":"2026-07-14T12:00:00.000Z","valid_from":"2026-07-14T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15681","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-400/","article_title":"ZDI-26-400: (0Day) AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-400/","published_at":"2026-07-13T05:00:00.000Z","valid_from":"2026-07-13T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15685","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-403/","article_title":"ZDI-26-403: (0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-403/","published_at":"2026-07-08T05:00:00.000Z","valid_from":"2026-07-08T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15684","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-402/","article_title":"ZDI-26-402: (0Day) Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-402/","published_at":"2026-07-08T05:00:00.000Z","valid_from":"2026-07-08T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15682","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-401/","article_title":"ZDI-26-401: (0Day) AnyDesk Support Information Link Following Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-401/","published_at":"2026-07-08T05:00:00.000Z","valid_from":"2026-07-08T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15683","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-399/","article_title":"ZDI-26-399: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-399/","published_at":"2026-07-08T05:00:00.000Z","valid_from":"2026-07-08T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15680","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-398/","article_title":"ZDI-26-398: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-398/","published_at":"2026-07-08T05:00:00.000Z","valid_from":"2026-07-08T05:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"9.2.7.0","source":"Exploit Database","source_url":"https://www.exploit-db.com/exploits/52615","article_title":"[local] MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation","article_url":"https://www.exploit-db.com/exploits/52615","published_at":"2026-07-06T00:00:00.000Z","valid_from":"2026-07-06T00:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"0.8.4.2","source":"Exploit Database","source_url":"https://www.exploit-db.com/exploits/52614","article_title":"[webapps] KeepInMind 0.8.4.2 -  Stored XSS","article_url":"https://www.exploit-db.com/exploits/52614","published_at":"2026-07-06T00:00:00.000Z","valid_from":"2026-07-06T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20191","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20216","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20213","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20214","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20215","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20217","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20243","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20244","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","article_title":"Cisco Advance Notification for Publication of July 1, 2026, Security Advisories","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Advance%20Notification%20for%20Publication%20of%20July%201,%202026,%20Security%20Advisories%26vs_k=1","published_at":"2026-07-01T16:01:07.000Z","valid_from":"2026-07-01T16:01:07.000Z","origin":"rss"},{"type":"domain","value":"booking.com","source":"Infosecurity Magazine","source_url":"https://www.infosecurity-magazine.com/news/hackers-blockchain-japan-hotels/","article_title":"Hackers Leverage Blockchain to Hit Japan's Hotels Through Booking.com Phishing","article_url":"https://www.infosecurity-magazine.com/news/hackers-blockchain-japan-hotels/","published_at":"2026-06-30T10:30:00.000Z","valid_from":"2026-06-30T10:30:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50263","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-397/","article_title":"ZDI-26-397: X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-397/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-397/","article_title":"ZDI-26-397: X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-397/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50262","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-396/","article_title":"ZDI-26-396: X.Org Server ChangeDrawableAttributes Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-396/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-396/","article_title":"ZDI-26-396: X.Org Server ChangeDrawableAttributes Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-396/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50261","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-395/","article_title":"ZDI-26-395: X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-395/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-395/","article_title":"ZDI-26-395: X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-395/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50260","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-394/","article_title":"ZDI-26-394: X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-394/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-394/","article_title":"ZDI-26-394: X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-394/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50259","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-393/","article_title":"ZDI-26-393: X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-393/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-393/","article_title":"ZDI-26-393: X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-393/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50258","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-392/","article_title":"ZDI-26-392: X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-392/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-392/","article_title":"ZDI-26-392: X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-392/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50257","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-391/","article_title":"ZDI-26-391: X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-391/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-391/","article_title":"ZDI-26-391: X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-391/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-50256","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-390/","article_title":"ZDI-26-390: X.Org Server Font Alias Stack-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-390/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-390/","article_title":"ZDI-26-390: X.Org Server Font Alias Stack-based Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-390/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35273","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-389/","article_title":"ZDI-26-389: Oracle PeopleSoft ExecuteProcessActivityCommand External Control of File Path Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-389/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35273","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-388/","article_title":"ZDI-26-388: Oracle PeopleSoft HubMBeanPersistance Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-388/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35273","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-387/","article_title":"ZDI-26-387: Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-387/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9773","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-386/","article_title":"ZDI-26-386: Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-386/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9772","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-385/","article_title":"ZDI-26-385: Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-385/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-10043","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-384/","article_title":"ZDI-26-384: MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-384/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9779","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-383/","article_title":"ZDI-26-383: ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-383/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9778","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-382/","article_title":"ZDI-26-382: ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-382/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9777","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-381/","article_title":"ZDI-26-381: ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-381/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9776","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-380/","article_title":"ZDI-26-380: ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-380/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9775","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-379/","article_title":"ZDI-26-379: ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-379/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9774","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-378/","article_title":"ZDI-26-378: ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-378/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-7569","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-377/","article_title":"ZDI-26-377: Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-377/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9787","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-376/","article_title":"ZDI-26-376: Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-376/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9786","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-375/","article_title":"ZDI-26-375: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-375/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9785","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-374/","article_title":"ZDI-26-374: Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-374/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9784","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-373/","article_title":"ZDI-26-373: Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-373/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9783","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-372/","article_title":"ZDI-26-372: Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-372/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9782","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-371/","article_title":"ZDI-26-371: Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-371/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9781","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-370/","article_title":"ZDI-26-370: Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-370/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-9780","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-369/","article_title":"ZDI-26-369: Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-369/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-7570","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-368/","article_title":"ZDI-26-368: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-368/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8108","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-367/","article_title":"ZDI-26-367: Fuji Electric Tellus pcid64 Driver Registry APIs Exposed Dangerous Method Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-367/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8108","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-366/","article_title":"ZDI-26-366: Fuji Electric Tellus pcid64 Driver File APIs Exposed Dangerous Method Arbitrary File Deletion Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-366/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41137","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-365/","article_title":"ZDI-26-365: FlowiseAI Flowise CSV Agent customReadCSV Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-365/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41264","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-364/","article_title":"ZDI-26-364: FlowiseAI Flowise CSV Agent  Prompt Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-364/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-55887","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-363/","article_title":"ZDI-26-363: Docker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-363/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-46873","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-362/","article_title":"ZDI-26-362: Oracle VirtualBox VMSVGA Stack-based Buffer Overflow Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-362/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27278","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-361/","article_title":"ZDI-26-361: Adobe Acrobat Reader DC Field signatureInfo Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-361/","published_at":"2026-06-24T05:00:00.000Z","valid_from":"2026-06-24T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35273","source":"Information Security Buzz","source_url":"https://informationsecuritybuzz.com/shinyhunters-targets-oracle-peoplesoft-customers/","article_title":"ShinyHunters targets Oracle PeopleSoft customers through critical zero-day","article_url":"https://informationsecuritybuzz.com/shinyhunters-targets-oracle-peoplesoft-customers/","published_at":"2026-06-19T18:48:27.000Z","valid_from":"2026-06-19T18:48:27.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-52849","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-360/","article_title":"ZDI-26-360: MATE Desktop Atril Document Viewer EPUB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-360/","published_at":"2026-06-11T05:00:00.000Z","valid_from":"2026-06-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8916","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-359/","article_title":"ZDI-26-359: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-359/","published_at":"2026-06-11T05:00:00.000Z","valid_from":"2026-06-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-11443","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-358/","article_title":"ZDI-26-358: Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-358/","published_at":"2026-06-11T05:00:00.000Z","valid_from":"2026-06-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-11442","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-357/","article_title":"ZDI-26-357: Allegra exportReport Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-357/","published_at":"2026-06-11T05:00:00.000Z","valid_from":"2026-06-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34032","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-356/","article_title":"ZDI-26-356: Apache HTTP Server mod_proxy_ajp Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-356/","published_at":"2026-06-11T05:00:00.000Z","valid_from":"2026-06-11T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27220","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-355/","article_title":"ZDI-26-355: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-355/","published_at":"2026-06-10T05:00:00.000Z","valid_from":"2026-06-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-7480","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-328/","article_title":"ZDI-26-328: ASUS MyASUS Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-328/","published_at":"2026-06-10T05:00:00.000Z","valid_from":"2026-06-10T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-11645","source":"Infosecurity Magazine","source_url":"https://www.infosecurity-magazine.com/news/google-patch-chrome-vulnerability/","article_title":"Google Releases Patch for Chrome Vulnerability Exploited in the Wild","article_url":"https://www.infosecurity-magazine.com/news/google-patch-chrome-vulnerability/","published_at":"2026-06-09T10:15:00.000Z","valid_from":"2026-06-09T10:15:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47919","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-354/","article_title":"ZDI-26-354: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-354/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47918","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-353/","article_title":"ZDI-26-353: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-353/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47917","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-352/","article_title":"ZDI-26-352: Adobe Acrobat Pro DC AcroForm Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-352/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48292","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-351/","article_title":"ZDI-26-351: Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-351/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48291","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-350/","article_title":"ZDI-26-350: Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-350/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47915","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-349/","article_title":"ZDI-26-349: Adobe Acrobat Pro DC Annots.api Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-349/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47914","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-348/","article_title":"ZDI-26-348: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-348/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47913","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-347/","article_title":"ZDI-26-347: Adobe Acrobat Reader DC Multimedia Rendition Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-347/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47924","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-346/","article_title":"ZDI-26-346: Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-346/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47912","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-345/","article_title":"ZDI-26-345: Adobe Acrobat Reader DC Font Handling Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-345/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47923","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-344/","article_title":"ZDI-26-344: Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-344/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47911","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-343/","article_title":"ZDI-26-343: Adobe Acrobat Reader DC TIF File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-343/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-342/","article_title":"ZDI-26-342: Progress Software Kemp LoadMaster apiuser Uninitialized Memory Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-342/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-341/","article_title":"ZDI-26-341: Progress Software Kemp LoadMaster dolistapikeys Uninitialized Memory Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-341/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8037","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-340/","article_title":"ZDI-26-340: Progress Software Kemp LoadMaster dodelapikey Uninitialized Memory Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-340/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-48565","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-339/","article_title":"ZDI-26-339: Microsoft Windows Narrator Braille Support brlapi Exposed Dangerous Function Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-339/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24162","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-338/","article_title":"ZDI-26-338: NVIDIA Transformers4Rec Model.load Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-338/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34003","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-337/","article_title":"ZDI-26-337: X.Org Server CheckKeyTypes Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-337/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-337/","article_title":"ZDI-26-337: X.Org Server CheckKeyTypes Buffer Overflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-337/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34002","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-336/","article_title":"ZDI-26-336: X.Org Server CheckKeyActions Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-336/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-336/","article_title":"ZDI-26-336: X.Org Server CheckKeyActions Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-336/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34001","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-335/","article_title":"ZDI-26-335: X.Org Server SyncAwaitFence Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-335/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-335/","article_title":"ZDI-26-335: X.Org Server SyncAwaitFence Use-After-Free Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-335/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34000","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-334/","article_title":"ZDI-26-334: X.Org Server CheckSetGeom Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-334/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-334/","article_title":"ZDI-26-334: X.Org Server CheckSetGeom Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-334/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-33999","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-333/","article_title":"ZDI-26-333: X.Org Server XkbSetCompatMap Integer Underflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-333/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"x.org","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-333/","article_title":"ZDI-26-333: X.Org Server XkbSetCompatMap Integer Underflow Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-333/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-3886","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-332/","article_title":"ZDI-26-332: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-332/","published_at":"2026-06-09T05:00:00.000Z","valid_from":"2026-06-09T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45495","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-331/","article_title":"ZDI-26-331: (Pwn2Own) Microsoft Edge Feedback Log File Handling Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-331/","published_at":"2026-06-04T05:00:00.000Z","valid_from":"2026-06-04T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45494","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-330/","article_title":"ZDI-26-330: (Pwn2Own) Microsoft Edge Navigation Handling Universal Cross-Site Scripting Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-330/","published_at":"2026-06-04T05:00:00.000Z","valid_from":"2026-06-04T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45492","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-329/","article_title":"ZDI-26-329: (Pwn2Own) Microsoft Edge Origin Validation Error Security Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-329/","published_at":"2026-06-04T05:00:00.000Z","valid_from":"2026-06-04T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8936","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-327/","article_title":"ZDI-26-327: Docker Desktop grpcfuse Kernel Module Uncontrolled Recursion Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-327/","published_at":"2026-06-03T05:00:00.000Z","valid_from":"2026-06-03T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"chatgpt.com","source":"Infosecurity Magazine","source_url":"https://www.infosecurity-magazine.com/news/attackers-shared-content-chatgpt/","article_title":"Attackers Abuse Shared Content for ChatGPT Phishing Campaign","article_url":"https://www.infosecurity-magazine.com/news/attackers-shared-content-chatgpt/","published_at":"2026-06-01T09:30:00.000Z","valid_from":"2026-06-01T09:30:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45208","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-326/","article_title":"ZDI-26-326: TrendAI Vision One Security Agent Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-326/","published_at":"2026-05-28T05:00:00.000Z","valid_from":"2026-05-28T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45207","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-325/","article_title":"ZDI-26-325: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-325/","published_at":"2026-05-28T05:00:00.000Z","valid_from":"2026-05-28T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-45206","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-324/","article_title":"ZDI-26-324: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-324/","published_at":"2026-05-28T05:00:00.000Z","valid_from":"2026-05-28T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34930","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-323/","article_title":"ZDI-26-323: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-323/","published_at":"2026-05-28T05:00:00.000Z","valid_from":"2026-05-28T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34929","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-322/","article_title":"ZDI-26-322: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-322/","published_at":"2026-05-28T05:00:00.000Z","valid_from":"2026-05-28T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34928","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-321/","article_title":"ZDI-26-321: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-321/","published_at":"2026-05-28T05:00:00.000Z","valid_from":"2026-05-28T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34927","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-320/","article_title":"ZDI-26-320: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-320/","published_at":"2026-05-28T05:00:00.000Z","valid_from":"2026-05-28T05:00:00.000Z","origin":"rss"},{"type":"ipv4","value":"0.9.7.4","source":"Exploit Database","source_url":"https://www.exploit-db.com/exploits/52579","article_title":"[webapps] OpenCATS 0.9.7.4 - SQL Injection","article_url":"https://www.exploit-db.com/exploits/52579","published_at":"2026-05-27T00:00:00.000Z","valid_from":"2026-05-27T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-3517","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-319/","article_title":"ZDI-26-319: Progress Software Kemp LoadMaster addcountry Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-319/","published_at":"2026-05-21T05:00:00.000Z","valid_from":"2026-05-21T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-3518","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-318/","article_title":"ZDI-26-318: Progress Software Kemp LoadMaster ssodomain_killsession Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-318/","published_at":"2026-05-21T05:00:00.000Z","valid_from":"2026-05-21T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-54957","source":"Google Project Zero","source_url":"https://projectzero.google/2026/05/pixel-10-exploit.html","article_title":"A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens","article_url":"https://projectzero.google/2026/05/pixel-10-exploit.html","published_at":"2026-05-13T07:00:00.000Z","valid_from":"2026-05-13T07:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-12659","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-317/","article_title":"ZDI-26-317: Siemens Simcenter Femap IPT File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-317/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-12659","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-316/","article_title":"ZDI-26-316: Siemens Simcenter Femap IPT File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-316/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28941","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-315/","article_title":"ZDI-26-315: Apple macOS USD Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-315/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28940","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-314/","article_title":"ZDI-26-314: Apple macOS USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-314/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28847","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-313/","article_title":"ZDI-26-313: Apple Safari Regular Expression Duplicate Named Groups Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-313/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28955","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-312/","article_title":"ZDI-26-312: Apple Safari Web Inspector WebCore Style Resolver Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-312/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28918","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-311/","article_title":"ZDI-26-311: Apple macOS CoreSymbolication Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-311/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34342","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-310/","article_title":"ZDI-26-310: Microsoft Windows splwow64 Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-310/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-33838","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-309/","article_title":"ZDI-26-309: Microsoft Windows Message Queueing Double Free Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-309/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-8109","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-308/","article_title":"ZDI-26-308: Ivanti Endpoint Manager RemoteControlAuth Exposed Dangerous Method Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-308/","published_at":"2026-05-12T05:00:00.000Z","valid_from":"2026-05-12T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"sec.cloudapps.cisco.com","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-rce-ssrf-hENhuASy?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Remote%20Code%20Execution%20and%20Server-Side%20Request%20Forgery%20Vulnerabilities%26vs_k=1","article_title":"Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-rce-ssrf-hENhuASy?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Remote%20Code%20Execution%20and%20Server-Side%20Request%20Forgery%20Vulnerabilities%26vs_k=1","published_at":"2026-05-06T16:00:00.000Z","valid_from":"2026-05-06T16:00:00.000Z","origin":"rss"},{"type":"url","value":"https://sec.cloudapps.cisco.com/s","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-rce-ssrf-hENhuASy?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Remote%20Code%20Execution%20and%20Server-Side%20Request%20Forgery%20Vulnerabilities%26vs_k=1","article_title":"Cisco Unity Connection Remote Code Execution and Server-Side Request Forgery Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-rce-ssrf-hENhuASy?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Remote%20Code%20Execution%20and%20Server-Side%20Request%20Forgery%20Vulnerabilities%26vs_k=1","published_at":"2026-05-06T16:00:00.000Z","valid_from":"2026-05-06T16:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41265","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-307/","article_title":"ZDI-26-307: FlowiseAI Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-307/","published_at":"2026-05-01T05:00:00.000Z","valid_from":"2026-05-01T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-35230","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-306/","article_title":"ZDI-26-306: Oracle VirtualBox SoundBlaster 16 Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-306/","published_at":"2026-04-28T05:00:00.000Z","valid_from":"2026-04-28T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5943","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-304/","article_title":"ZDI-26-304: Foxit PDF Reader AcroForm Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-304/","published_at":"2026-04-27T05:00:00.000Z","valid_from":"2026-04-27T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5942","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-303/","article_title":"ZDI-26-303: Foxit PDF Reader AcroForm Signature Use-After-Free Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-303/","published_at":"2026-04-27T05:00:00.000Z","valid_from":"2026-04-27T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5941","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-302/","article_title":"ZDI-26-302: Foxit PDF Reader AcroForm Signature Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-302/","published_at":"2026-04-27T05:00:00.000Z","valid_from":"2026-04-27T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5940","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-301/","article_title":"ZDI-26-301: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-301/","published_at":"2026-04-27T05:00:00.000Z","valid_from":"2026-04-27T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41276","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-300/","article_title":"ZDI-26-300: Flowise AccountService resetPassword Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-300/","published_at":"2026-04-27T05:00:00.000Z","valid_from":"2026-04-27T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-6406","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-299/","article_title":"ZDI-26-299: Docker Desktop Enhanced Container Isolation Exposed Dangerous Function Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-299/","published_at":"2026-04-23T05:00:00.000Z","valid_from":"2026-04-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-24032","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-298/","article_title":"ZDI-26-298: Siemens SINEC NMS Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-298/","published_at":"2026-04-23T05:00:00.000Z","valid_from":"2026-04-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-25654","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-297/","article_title":"ZDI-26-297: Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-297/","published_at":"2026-04-23T05:00:00.000Z","valid_from":"2026-04-23T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5726","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-296/","article_title":"ZDI-26-296: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-296/","published_at":"2026-04-23T05:00:00.000Z","valid_from":"2026-04-23T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"sec.cloudapps.cisco.com","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-vulns-n2EJSbbw?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Cross-Site%20Scripting,%20Open%20Redirect,%20and%20SQL%20Injection%20Vulnerabilities%26vs_k=1","article_title":"Cisco Unity Connection Cross-Site Scripting, Open Redirect, and SQL Injection Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-vulns-n2EJSbbw?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Cross-Site%20Scripting,%20Open%20Redirect,%20and%20SQL%20Injection%20Vulnerabilities%26vs_k=1","published_at":"2026-04-15T16:00:00.000Z","valid_from":"2026-04-15T16:00:00.000Z","origin":"rss"},{"type":"url","value":"https://sec.cloudapps.cisco.com/security/c","source":"Cisco Advisories","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-vulns-n2EJSbbw?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Cross-Site%20Scripting,%20Open%20Redirect,%20and%20SQL%20Injection%20Vulnerabilities%26vs_k=1","article_title":"Cisco Unity Connection Cross-Site Scripting, Open Redirect, and SQL Injection Vulnerabilities","article_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unity-vulns-n2EJSbbw?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20Unity%20Connection%20Cross-Site%20Scripting,%20Open%20Redirect,%20and%20SQL%20Injection%20Vulnerabilities%26vs_k=1","published_at":"2026-04-15T16:00:00.000Z","valid_from":"2026-04-15T16:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-22898","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-292/","article_title":"ZDI-26-292: QNAP TS-453E QVRPro excpostgres  Exposed Dangerous Method Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-292/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32861","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-291/","article_title":"ZDI-26-291: NI LabVIEW LVCLASS File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-291/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32860","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-290/","article_title":"ZDI-26-290: NI LabVIEW LVLIB File Parsing Memory Corruption Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-290/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-71066","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-289/","article_title":"ZDI-26-289: Linux Kernel ETS Scheduler Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-289/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5492","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-288/","article_title":"ZDI-26-288: DriveLock Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-288/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5491","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-287/","article_title":"ZDI-26-287: DriveLock Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-287/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5490","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-286/","article_title":"ZDI-26-286: DriveLock SQL Injection Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-286/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5489","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-285/","article_title":"ZDI-26-285: DriveLock Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-285/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5487","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-284/","article_title":"ZDI-26-284: DriveLock Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-284/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5056","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-283/","article_title":"ZDI-26-283: GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-283/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-2050","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-282/","article_title":"ZDI-26-282: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-282/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34054","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-281/","article_title":"ZDI-26-281: Microsoft vcpkg OpenSSL Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-281/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-4682","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-280/","article_title":"ZDI-26-280: (Pwn2Own) HP DeskJet 2855e JobStatusEvent Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-280/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32183","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-279/","article_title":"ZDI-26-279: Microsoft Windows Snipping Tool Improper Input Validation Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-279/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-33104","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-278/","article_title":"ZDI-26-278: Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-278/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32073","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-277/","article_title":"ZDI-26-277: Microsoft Windows afd.sys Race Condition Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-277/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-26179","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-276/","article_title":"ZDI-26-276: Microsoft Windows Secure Kernel Double Free Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-276/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5057","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-272/","article_title":"ZDI-26-272: ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-272/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5424","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-271/","article_title":"ZDI-26-271: Avast Premium Security Gen Self Protection Driver Exposed Dangerous Function Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-271/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-54987","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-270/","article_title":"ZDI-26-270: TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-270/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-54948","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-269/","article_title":"ZDI-26-269: TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-269/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-25203","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-268/","article_title":"ZDI-26-268: Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-268/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-40688","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-266/","article_title":"ZDI-26-266: Fortinet FortiWeb cat_cgi_paths Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-266/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-39811","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-265/","article_title":"ZDI-26-265: Fortinet FortiWeb cgi_buf_alloc Integer Overflow Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-265/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27305","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-264/","article_title":"ZDI-26-264: Adobe ColdFusion fetchCFSettingFile Directory Traversal Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-264/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27282","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-263/","article_title":"ZDI-26-263: Adobe ColdFusion subscribeToEndpoints Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-263/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34619","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-262/","article_title":"ZDI-26-262: Adobe ColdFusion deleteVersion Directory Traversal Arbitrary File Deletion Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-262/","published_at":"2026-04-15T05:00:00.000Z","valid_from":"2026-04-15T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5495","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-257/","article_title":"ZDI-26-257: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-257/","published_at":"2026-04-06T05:00:00.000Z","valid_from":"2026-04-06T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5494","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-256/","article_title":"ZDI-26-256: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-256/","published_at":"2026-04-06T05:00:00.000Z","valid_from":"2026-04-06T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5493","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-255/","article_title":"ZDI-26-255: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-255/","published_at":"2026-04-06T05:00:00.000Z","valid_from":"2026-04-06T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5496","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-254/","article_title":"ZDI-26-254: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-254/","published_at":"2026-04-06T05:00:00.000Z","valid_from":"2026-04-06T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21518","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-253/","article_title":"ZDI-26-253: Microsoft Visual Studio Code mcp.json Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-253/","published_at":"2026-04-02T05:00:00.000Z","valid_from":"2026-04-02T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-4698","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-252/","article_title":"ZDI-26-252: Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-252/","published_at":"2026-04-02T05:00:00.000Z","valid_from":"2026-04-02T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-3775","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-251/","article_title":"ZDI-26-251: Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-251/","published_at":"2026-04-02T05:00:00.000Z","valid_from":"2026-04-02T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-23092","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-250/","article_title":"ZDI-26-250: Linux Kernel Analog Device Driver Improper Validation of Array Index Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-250/","published_at":"2026-03-31T05:00:00.000Z","valid_from":"2026-03-31T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5055","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-249/","article_title":"ZDI-26-249: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-249/","published_at":"2026-03-30T05:00:00.000Z","valid_from":"2026-03-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5054","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-248/","article_title":"ZDI-26-248: NoMachine External Control of File Path Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-248/","published_at":"2026-03-30T05:00:00.000Z","valid_from":"2026-03-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5053","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-247/","article_title":"ZDI-26-247: NoMachine External Control of File Path Arbitrary File Deletion Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-247/","published_at":"2026-03-30T05:00:00.000Z","valid_from":"2026-03-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2024-54529","source":"Google Project Zero","source_url":"https://projectzero.google/2026/01/sound-barrier-2.html","article_title":"Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529","article_url":"https://projectzero.google/2026/01/sound-barrier-2.html","published_at":"2026-01-30T08:00:00.000Z","valid_from":"2026-01-30T08:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-31235","source":"Google Project Zero","source_url":"https://projectzero.google/2026/01/sound-barrier-2.html","article_title":"Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529","article_url":"https://projectzero.google/2026/01/sound-barrier-2.html","published_at":"2026-01-30T08:00:00.000Z","valid_from":"2026-01-30T08:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-50165","source":"WeLiveSecurity","source_url":"https://www.welivesecurity.com/en/eset-research/revisiting-cve-2025-50165-critical-flaw-windows-imaging-component/","article_title":"Revisiting CVE-2025-50165: A critical flaw in Windows Imaging Component","article_url":"https://www.welivesecurity.com/en/eset-research/revisiting-cve-2025-50165-critical-flaw-windows-imaging-component/","published_at":"2025-12-22T09:55:00.000Z","valid_from":"2025-12-22T09:55:00.000Z","origin":"rss"},{"type":"domain","value":"asp.net","source":"Elastic Security Labs","source_url":"https://www.elastic.co/security-labs/threat-command/tollbooth","article_title":"TOLLBOOTH: What's yours, IIS mine","article_url":"https://www.elastic.co/security-labs/threat-command/tollbooth","published_at":"2025-10-22T00:00:00.000Z","valid_from":"2025-10-22T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2022-30190","source":"Elastic Security Labs","source_url":"https://www.elastic.co/security-labs/blog/vulnerability-summary-follina","article_title":"Vulnerability summary: Follina, CVE-2022-30190","article_url":"https://www.elastic.co/security-labs/blog/vulnerability-summary-follina","published_at":"2023-01-19T00:00:00.000Z","valid_from":"2023-01-19T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2021-45046","source":"Elastic Security Labs","source_url":"https://www.elastic.co/security-labs/blog/analysis-of-log4shell-cve-2021-45046","article_title":"Analysis of Log4Shell vulnerability & CVE-2021-45046","article_url":"https://www.elastic.co/security-labs/blog/analysis-of-log4shell-cve-2021-45046","published_at":"2022-11-30T00:00:00.000Z","valid_from":"2022-11-30T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2021-44228","source":"Elastic Security Labs","source_url":"https://www.elastic.co/security-labs/blog/analysis-of-log4shell-cve-2021-45046","article_title":"Analysis of Log4Shell vulnerability & CVE-2021-45046","article_url":"https://www.elastic.co/security-labs/blog/analysis-of-log4shell-cve-2021-45046","published_at":"2022-11-30T00:00:00.000Z","valid_from":"2022-11-30T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2021-44228","source":"Elastic Security Labs","source_url":"https://www.elastic.co/security-labs/blog/detecting-log4j2-with-elastic-security","article_title":"Detecting Exploitation of CVE-2021-44228 (Log4j2) with Elastic Security","article_url":"https://www.elastic.co/security-labs/blog/detecting-log4j2-with-elastic-security","published_at":"2022-11-22T00:00:00.000Z","valid_from":"2022-11-22T00:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2022-22965","source":"Elastic Security Labs","source_url":"https://www.elastic.co/security-labs/blog/elastic-response-to-the-the-spring4shell-vulnerability-cve-2022-22965","article_title":"Elastic's response to the Spring4Shell vulnerability (CVE-2022-22965)","article_url":"https://www.elastic.co/security-labs/blog/elastic-response-to-the-the-spring4shell-vulnerability-cve-2022-22965","published_at":"2022-11-22T00:00:00.000Z","valid_from":"2022-11-22T00:00:00.000Z","origin":"rss"}]}