Indicators of Compromise

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-635: Oracle Outside In Technology PDF File Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-60392

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-634: Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-70477

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-633: GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-4153

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-632: WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-13086

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-631: NI LabVIEW VI File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

CVEs: CVE-2026-18444

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-630: NI LabVIEW VI File Parsing Integer Overflow Information Disclosure Vulnerability

CVEs: CVE-2026-18445

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability

CVEs: CVE-2026-59346

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-646: Progress Software Kemp LoadMaster escape_quotes Uninitialized Memory Remote Code Execution Vulnerability

CVEs: CVE-2026-8037

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-645: Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-84387

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-644: Oracle VirtualBox VMSVGA Race Condition Local Privilege Escalation Vulnerability

CVEs: CVE-2026-60155

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-643: Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability

CVEs: CVE-2026-60162

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-642: Oracle VirtualBox IDisplay Out-Of-Bounds Read Local Privilege Escalation Vulnerability

CVEs: CVE-2026-60159

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-641: Oracle VirtualBox VirtioSCSI Out-Of-Bounds Read Information Disclosure Vulnerability

CVEs: CVE-2026-71114

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-640: Oracle VirtualBox VirtioSCSI Uninitialized Memory Information Disclosure Vulnerability

CVEs: CVE-2026-71132

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-639: Oracle VirtualBox VMSVGA Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

CVEs: CVE-2026-71116

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-638: Oracle Outside In Technology WPS File Parsing Memory Corruption Remote Code Execution Vulnerability

CVEs: CVE-2026-60414

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-637: Oracle Outside In Technology GEM File Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-60413

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 9

ZDI-26-636: Oracle Outside In Technology PostScript File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-60412

Zero Day Initiative →

The Hacker News 📡 RSS Sep 9

N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

CVEs: CVE-2026-86218

The Hacker News →

SANS ISC 📡 RSS Sep 9

ISC Stormcast For Wednesday, September 9th, 2026 https://isc.sans.edu/podcastdetail/10086, (Wed, Sep 9th)

SANS ISC →