Vulnerabilities and CVEs

08:00 Patch

Abandoned IoT apps keep sending sensitive data to broken servers

Help Net Security

07:00 Vulnerability

ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-715: Linux Mint Xreader PDF File Parsing Type Confusion Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Patch

ZDI-CAN-31049: RARLAB

Zero Day Initiative

01:25 Patch

Chrome for Android Update

Chrome Releases

00:42 Vulnerability

AI coding agents' 0-click RCE flaw could hand attackers keys to the kingdom

The Register

00:34 Patch

Dev Channel Update for ChromeOS / ChromeOS Flex

Chrome Releases

00:20 Patch

USN-8779-2: Bubblewrap regression

CVE-2026-87766Ubuntu Security

23:23 Vulnerability

CISA Ditches Weekly Vulnerability Roundups for Risk-Based Focus

Dark Reading

23:03 Exploited

Cisco alerts customers to second actively exploited zero-day in as many days

CVE-2026-76460CyberScoop

22:17 Vulnerability

100,000 WordPress Sites Exposed to Remote Code Execution via PHP Object Injection Vulnerability Found by Wordfence Argus in Tutor LMS

Wordfence

22:03 Patch

Extended Stable Update for Desktop

Chrome Releases

22:03 Patch

Stable Channel Update for Desktop

Chrome Releases

21:52 Patch

Tanium security advisory (AV26-935)

Canadian Centre for Cyber Security

21:46 Patch

Dell security advisory (AV26-934)

Canadian Centre for Cyber Security

21:13 Exploited

Cisco IOS XR Software Security Hardening Release: September 2026

Cisco PSIRT

20:21 Patch

Check Point security advisory (AV26-933)

Canadian Centre for Cyber Security

20:08 Patch

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

The Hacker News