Vulnerabilities and CVEs

07:00 Vulnerability

ZDI-26-752: (0Day) Genesis World decompress_usdz Directory Traversal Remote Code Execution Vulnerability

Zero Day Initiative

07:00 Vulnerability

ZDI-26-756: (0Day) Genesis World load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

Zero Day Initiative

03:29 Patch

Fwd: Announcing FreeType version 2.15.0

CVE-2026-95512CVE-2026-50811oss-security

02:00 Vulnerability

September 2026 CVE Landscape

Recorded Future

01:14 Vulnerability

USN-8915-1: FFmpeg vulnerabilities

Ubuntu Security

00:11 Vulnerability

Flock can now issue CVEs for its own products. Should we trust it?

CyberScoop

00:00 Vulnerability

Playing It SFAPE: Code Execution in Isolated User Mode

Doyensec

23:42 Exploited

Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack

Dark Reading

22:09 Patch

CVE-2026-92120: Apache Allura: Oauth1 Replay Attack

CVE-2026-92120oss-security

22:07 Patch

CVE-2026-92119: Apache Allura: REST API Mass Assignment

CVE-2026-92119oss-security

22:05 Patch

CVE-2026-92116: Apache Allura: OAuth1 missing callback validation

CVE-2026-92116oss-security

20:10 Patch

Wordfence Argus Discovers Critical Vulnerability in Ghostscript, the Program That Turns Uploaded PDFs into Thumbnails on Your Server

CVE-2026-39919Wordfence

17:27 Vulnerability

CVE-2026-85097: Bricksforge WordPress Plugin Flaw Exploited for Unauthenticated RCE

CVE-2026-85097SOCRadar

17:24 Vulnerability

USN-8914-1: Google Guest Agent, Google OS Config Agent vulnerability

Ubuntu Security

16:52 Vulnerability

VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1

CERT/CC

16:51 Vulnerability

12th October – Threat Intelligence Report

Check Point Research

15:50 Patch

SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin

CVE-2026-102255Security Affairs

15:14 Exploited

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild

CVE-2026-85097SecurityWeek

15:09 Patch

GitLab warns of max severity code execution vulnerability

BleepingComputer

15:00 Vulnerability

Shared standards, independent review: Fin's AI lesson

Sonar