Vulnerabilities and CVEs

12:00 Exploited

Zero-Day Flaw in TP-Link Cameras Enables Eavesdropping

Infosecurity Magazine

07:54 Patch

Mythos has made 2026 patching hell. It might make 2027 a breeze

The Register

07:00 Vulnerability

ZDI-26-713: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-709: Cisco Secure Firewall Management Center CommandSinkRmi Deserialization of Untrusted Data Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-707: (0Day) MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-706: (0Day) CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-705: (0Day) BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability

Zero Day Initiative

00:00 Patch

DSA-6503-1 thunderbird - security update

Debian Security

00:00 Patch

DSA-6502-1 mkvtoolnix - security update

Debian Security

00:00 Patch

DSA-6501-1 firefox-esr - security update

Debian Security

00:00 Patch

DSA-6500-1 tor - security update

Debian Security

00:00 Patch

DSA-6496-2 nginx - regression update

Debian Security

23:38 Patch

The vulnpocalypse rains iBugs down on Apple with record-setting number of patches

The Register

23:00 Patch

Oracle September 2026 Critical Security Patch Update addresses 672 CVEs

Tenable