Vulnerabilities and CVEs

09:42 Vulnerability

[0day-rubbish] CloudPanel 2.5.4-3 site-settings rootDirectory nginx virtual-host injection to host root code execution (8.8)

Full Disclosure

09:42 Vulnerability

[0day-rubbish] Auerswald COMmander 6000 / 6000R 8.6D unauthenticated provisioning import zip-slip to root binary hijack and root code execution (9.8)

Full Disclosure

09:42 Patch

[0day-rubbish] Abyss Web Server X1 2.16.22.0 first-run console credential takeover to configuration-write log-as-CGI command execution (7.5)

Full Disclosure

09:41 Vulnerability

1-click MMI/USSD execution in Android via CALL_PHONE and browser-reachable dialer deeplinks (ACR Phone / com.nll.cb)

Full Disclosure

09:31 Vulnerability

Qualys introduces TruConfidence to orchestrate cyber risk remediation

Help Net Security

09:07 Vulnerability

Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts

The Hacker News

09:00 Vulnerability

EU Grocers Pay a Steep Price for Unpatched Fridge Firmware

Dark Reading

08:59 Exploited

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution

SecurityWeek

08:43 Patch

AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches

CVE-2026-105133CVE-2026-105134The Hacker News

08:35 Patch

Re: Incomplete fix for Emacs CVE-2026-79992

CVE-2026-79992CVE-2026-108976oss-security

08:34 Vulnerability

Cisco Warns of Exploited Secure Email Gateway Vulnerability

SecurityWeek

08:17 Patch

Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation

CVE-2026-0322The Hacker News

07:00 Vulnerability

ZDI-26-757: (0Day) Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-777: Adobe Photoshop AdobePDFL PDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-775: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-774: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-772: Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability

Zero Day Initiative