Indicators of Compromise

Zero Day Initiative 📡 RSS Apr 15

ZDI-26-268: Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability

CVEs: CVE-2026-25203

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 15

ZDI-26-266: Fortinet FortiWeb cat_cgi_paths Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-40688

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 15

ZDI-26-265: Fortinet FortiWeb cgi_buf_alloc Integer Overflow Denial-of-Service Vulnerability

CVEs: CVE-2026-39811

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 15

ZDI-26-264: Adobe ColdFusion fetchCFSettingFile Directory Traversal Information Disclosure Vulnerability

CVEs: CVE-2026-27305

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 15

ZDI-26-263: Adobe ColdFusion subscribeToEndpoints Authentication Bypass Vulnerability

CVEs: CVE-2026-27282

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 15

ZDI-26-262: Adobe ColdFusion deleteVersion Directory Traversal Arbitrary File Deletion Vulnerability

CVEs: CVE-2026-34619

Zero Day Initiative →

SentinelOne Blog 📡 RSS Apr 14

Securing the Software Supply Chain: How SentinelOne’s AI EDR Autonomously Blocked the CPU-Z Watering Hole Cyber Attack

Domains: cpuid.com

SentinelOne Blog →

Zero Day Initiative 📡 RSS Apr 6

ZDI-26-257: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-5495

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 6

ZDI-26-256: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-5494

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 6

ZDI-26-255: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVEs: CVE-2026-5493

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 6

ZDI-26-254: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability

CVEs: CVE-2026-5496

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 2

ZDI-26-253: Microsoft Visual Studio Code mcp.json Command Injection Remote Code Execution Vulnerability

CVEs: CVE-2026-21518

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 2

ZDI-26-252: Mozilla Firefox IonMonkey Switch Statement Optimization Type Confusion Remote Code Execution Vulnerability

CVEs: CVE-2026-4698

Zero Day Initiative →

Zero Day Initiative 📡 RSS Apr 2

ZDI-26-251: Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

CVEs: CVE-2026-3775

Zero Day Initiative →

Check Point Research 📡 RSS Mar 31

Operation TrueChaos: 0-Day Exploitation Against Southeast Asian Government Targets

CVEs: CVE-2026-3502

Check Point Research →

Infosecurity Magazine 📡 RSS Mar 31

NCSC Urges Immediate Patching of F5 BIG-IP Bug

CVEs: CVE-2025-53521

Infosecurity Magazine →

Zero Day Initiative 📡 RSS Mar 31

ZDI-26-250: Linux Kernel Analog Device Driver Improper Validation of Array Index Local Privilege Escalation Vulnerability

CVEs: CVE-2026-23092

Zero Day Initiative →

Infosecurity Magazine 📡 RSS Mar 30

Critical Citrix NetScaler Vulnerability Exploited in the Wild

CVEs: CVE-2026-3055

Infosecurity Magazine →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-249: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

CVEs: CVE-2026-5055

Zero Day Initiative →

Zero Day Initiative 📡 RSS Mar 30

ZDI-26-248: NoMachine External Control of File Path Local Privilege Escalation Vulnerability

CVEs: CVE-2026-5054

Zero Day Initiative →