https://zerodaydigest.net/hourly1.0 https://zerodaydigest.net/index.htmlhourly1.0 https://zerodaydigest.net/privacy.html0.3 https://zerodaydigest.net/terms.html0.3 https://zerodaydigest.net/article.html?slug=cve-2026-79767-gardener-authorization-bypass-via-group-subject-injection2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61570-mpxj-xxe-vulnerability-in-merlinreader2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65829-mpxj-potential-path-traversal-vulnerability-in-primavera-p3-prx-and-suretrak-stx-read2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77322-sipgo-dos-via-unvalidated-websocket-frame-length2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58268-sipgo-dos-via-unvalidated-content-length-in-the-stream-parser2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87121-out-of-bounds-write-in-lwip-tcpip-stack-mqtt-client-application2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87121-out-of-bounds-write-in-lwip-tcpip-stack-mqtt-client-application-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-83805-nautobot-authorization-bypass-in-approval-workflow-rest-api-allows-self-approval-and2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-83801-nautobot-stored-cross-site-scripting-xss-in-object-createedit-form-help-text2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63104-kaneo-2312-2122-missing-authorization-via-bulk-task-endpoint2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63104-kaneo-2312-2122-missing-authorization-via-bulk-task-endpoint-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47116-ltsecurity-ltk3500sf-hard-coded-credentials-via-telnetssh-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47116-ltsecurity-ltk3500sf-hard-coded-credentials-via-telnetssh2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94574-cve-2026-945742026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89281-cve-2026-892812026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89282-cve-2026-892822026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95831-cryptselfcertificate-versions-from-101-through-105-for-perl-contains-malware-which-ex2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95861-unifi-gateway-uncontrolled-recursion-denial-of-service2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95862-unifi-gateway-out-of-bounds-write-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94462-spree-broken-access-control-in-patch-apiv3storecartsidassociate-idor2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91130-home-assistant-xss-in-statistics-graph-card2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91130-home-assistant-xss-in-statistics-graph-card-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91129-home-assistant-mdns-server-side-request-forgery2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88415-mcms-stored-cross-site-scripting2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88414-mcms-sql-injection-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89277-cai-content-credentials-integer-overflow-or-wraparound-cwe-1902026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84396-indesign-desktop-null-pointer-dereference-cwe-4762026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84395-premiere-pro-server-side-request-forgery-ssrf-cwe-9182026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-83964-adobe-connect-improper-certificate-validation-cwe-2952026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81999-adobe-experience-manager-forms-jee-server-side-request-forgery-ssrf-cwe-9182026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82000-adobe-experience-manager-forms-jee-server-side-request-forgery-ssrf-cwe-9182026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81995-adobe-experience-manager-forms-jee-improper-input-validation-cwe-202026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77256-mcp-atlassian-oauth-refresh-token-backup-file-is-world-readable-under-default-unix-um2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77257-mcp-atlassian-http-upload-tools-accept-arbitrary-server-local-file-paths2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77262-mcp-atlassian-path-traversal-arbitrary-file-read-in-confluenceuploadattachment-mcp-to2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77254-mcp-atlassian-unauthenticated-http-mcp-requests-can-use-globally-configured-jira-and2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77248-mcp-atlassian-unauthenticated-arbitrary-local-file-read-via-uploadattachment-filepath2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77255-mcp-atlassian-arbitrary-file-read-exfiltration-confused-deputy-in-jira-updateissue2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77247-mcp-atlassian-arbitrary-server-local-file-upload-to-jiraconfluence-attachments-via-un2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75744-adobe-experience-manager-forms-jee-cross-site-scripting-stored-xss-cwe-792026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75745-adobe-experience-manager-forms-jee-incorrect-authorization-cwe-8632026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75697-adobe-connect-cross-site-scripting-stored-xss-cwe-792026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75686-adobe-connect-improper-input-validation-cwe-202026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75682-adobe-connect-improper-neutralization-of-special-elements-used-in-an-sql-command-sql2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75684-adobe-connect-cross-site-scripting-stored-xss-cwe-792026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75689-adobe-connect-cross-site-scripting-stored-xss-cwe-792026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75698-adobe-connect-cross-site-scripting-reflected-xss-cwe-792026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-34689-adobe-connect-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traver2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57149-ploneappportlets-vulnerable-to-remote-code-execution-via-tales-injection2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-28325-solarwinds-observability-self-hosted-unauthenticated-remote-code-execution-vulnerabil2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=check-point-warns-of-management-server-zero-day-exploited-in-targeted-attacks2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=check-point-warns-of-management-server-zero-day-exploited-in-targeted-attacks-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77261-mcp-atlassian-ssrf-redirect-protection-missing-for-basic-auth-and-oauth-authenticatio2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=wordpress-issues-patch-for-critical-flaw-that-can-enable-code-execution-on-some-servers-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=wordpress-issues-patch-for-critical-flaw-that-can-enable-code-execution-on-some-servers2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77260-mcp-atlassian-arbitrary-local-file-read-via-unconstrained-filepath-in-uploadattachmen2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77271-mcp-atlassian-incomplete-path-traversal-fix-allows-intra-cwd-module-overwrite-and-rce2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95660-moonshot-ai-kimi-code-mcp-configuration-loader-config-loaderts-os-command-injection2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77242-mcp-atlassian-incomplete-fix-for-cve-2026-27826-dns-rebinding-bypasses-ssrf-validatio2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=malicious-npm-package-poses-as-twilio-bug-bounty-probe-can-exfiltrate-credentials2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77243-mcp-atlassian-enabledtools-toolset-authorization-bypass2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77251-mcp-atlassian-jiraprojectsfilter-confluencespacesfilter-allow-forbidden-project-conte2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-43643-softaculous-virtualizor-authorization-bypass-via-billing-module-handler2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-43643-softaculous-virtualizor-authorization-bypass-via-billing-module-handler-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77252-mcp-atlassian-jiraprojectsfilter-and-confluencespacesfilter-can-be-bypassed-in-search2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-43642-softaculous-virtualizor-php-object-injection-via-billing-module-handler2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-43642-softaculous-virtualizor-php-object-injection-via-billing-module-handler-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77267-mcp-atlassian-has-an-incomplete-ssrf-remediation2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-43641-softaculous-virtualizor-os-command-injection-via-billing-module-handler-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-43641-softaculous-virtualizor-os-command-injection-via-billing-module-handler2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77250-mcp-atlassian-oauth-fallback-token-storage-writes-plaintext-access-and-refresh-tokens2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18626-out-of-bounds-read-vulnerability-in-rti-connext-professional-core-libraries-allows-ov2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18462-integer-overflow-or-wraparound-improper-access-control-vulnerability-in-rti-connext-p2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18461-use-of-externally-controlled-format-string-vulnerability-in-rti-connext-professional2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18461-use-of-externally-controlled-format-string-vulnerability-in-rti-connext-professional-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18460-off-by-one-error-out-of-bounds-write-vulnerability-in-rti-connext-professional-core-l2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18459-incorrect-calculation-vulnerability-in-rti-connext-professional-core-libraries-allows2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18459-incorrect-calculation-vulnerability-in-rti-connext-professional-core-libraries-allows-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18457-heap-based-buffer-overflow-vulnerability-in-rti-connext-professional-core-libraries-a-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18458-out-of-bounds-read-function-call-with-incorrect-number-of-arguments-access-of-resourc2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18457-heap-based-buffer-overflow-vulnerability-in-rti-connext-professional-core-libraries-a2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-11389-out-of-bounds-read-function-call-with-incorrect-number-of-arguments-access-of-resourc2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-11388-double-free-vulnerability-in-rti-connext-professional-core-libraries-allows-file-mani2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-8849-use-after-free-vulnerability-in-rti-connext-professional-security-plugins-allows-file2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-7866-stack-based-buffer-overflow-vulnerability-in-rti-connext-professional-core-libraries-a2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-7866-stack-based-buffer-overflow-vulnerability-in-rti-connext-professional-core-libraries-a-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77244-mcp-atlassian-authentication-bypass-in-http-transport-atlassianopaquetokenverifier-ac2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75703-adobe-campaign-classic-acc-improper-control-of-generation-of-code-code-injection-cwe2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84412-adobe-campaign-classic-acc-improper-control-of-generation-of-code-code-injection-cwe2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89276-adobe-campaign-classic-acc-improper-control-of-generation-of-code-code-injection-cwe2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-83660-adobe-campaign-classic-acc-server-side-request-forgery-ssrf-cwe-9182026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82013-adobe-campaign-classic-acc-server-side-request-forgery-ssrf-cwe-9182026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82009-adobe-campaign-classic-acc-improper-neutralization-of-special-elements-used-in-an-sql2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82003-adobe-campaign-classic-acc-improper-input-validation-cwe-202026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75721-adobe-campaign-classic-acc-improper-control-of-generation-of-code-code-injection-cwe2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75723-adobe-campaign-classic-acc-incorrect-authorization-cwe-8632026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75699-adobe-campaign-classic-acc-improper-control-of-generation-of-code-code-injection-cwe2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73369-adobe-campaign-classic-acc-improper-control-of-generation-of-code-code-injection-cwe2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82011-adobe-campaign-classic-acc-improper-neutralization-of-special-elements-used-in-an-sql2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82443-adobe-campaign-classic-acc-server-side-request-forgery-ssrf-cwe-9182026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82008-adobe-campaign-classic-acc-improper-input-validation-cwe-202026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75728-adobe-campaign-classic-acc-incorrect-authorization-cwe-8632026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89275-adobe-campaign-classic-acc-improper-control-of-generation-of-code-code-injection-cwe2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82010-adobe-campaign-classic-acc-improper-neutralization-of-special-elements-used-in-an-sql2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94456-unauthenticated-recovery-of-the-mathrandom-state-behind-oauth-tokens-authorization-co2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=microsoft-takes-down-eviltokens-device-code-phishing-service-tied-to-12000-inbox-compromises2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=critical-bifrost-ai-gateway-flaw-lets-attackers-run-commands-without-credentials2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=critical-bifrost-ai-gateway-flaw-lets-attackers-run-commands-without-credentials-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=researcher-drops-bigdiskbuster-zero-day-poc-that-blocks-microsoft-defender-updates2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=researcher-drops-bigdiskbuster-zero-day-poc-that-blocks-microsoft-defender-updates-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56681-9router-authentication-bypass-in-public-llm-api-via-spoofable-x-9r-real-ip-header2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86805-atsecure-programs-may-load-attacker-controlled-code-via-origin2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86698-refresh-tokens-accepted-as-private-repository-credentials-at-the-cdn2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75517-novu-cross-environment-integration-manipulation-idor2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90462-sssd-sssd-fail-open-in-ldap-ppolicy-access-check-allows-continued-authorization2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75511-novu-server-side-request-forgery-ssrf-via-chat-provider-webhook-urls2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75510-novu-stored-xss-in-in-app-inbox-via-notification-redirecturl-javascript-scheme2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94640-rpcbind-unbounded-memory-allocation-in-rpcbind-statistics-tracking-allows-unauthentic2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-70410-apache-calcite-avatica-unrestricted-class-initialization-when-instantiating-plugins2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88010-traefik-basicauth-singleflight-coalescing-reintroduces-an-unauthenticated-username-en2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75608-frigate-viewer-role-user-can-access-go2rtc-internal-api-to-obtain-sensitive-informati2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75607-frigate-websocket-missing-authorization-viewer-can-execute-admin-only-operations2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77637-cloudreve-privilege-scope-bypass-state-mutating-admin-operations-accessible-via-read2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77633-cloudreve-storage-quota-toctou-race-allows-quota-bypass-and-storage-based-denial-of-s2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79913-cloudreve-ssrf-guard-bypass-checkip-does-not-decode-ipv6-transition-wrappers-nat64-ip2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95655-aureus-erp-before-150-unscoped-message-access-via-chatterpanel-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95655-aureus-erp-before-150-unscoped-message-access-via-chatterpanel2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95654-databasement-before-1714-authorization-bypass-via-stale-invitation-token2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95654-databasement-before-1714-authorization-bypass-via-stale-invitation-token-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95653-concrete-cms-community-store-before-278-predictable-digital-download-token2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95653-concrete-cms-community-store-before-278-predictable-digital-download-token-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80156-lantronix-autonomous-out-of-band-devices-arbitrary-file-write-via-upload-filename-val2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80156-lantronix-autonomous-out-of-band-devices-arbitrary-file-write-via-upload-filename-val-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80155-lantronix-autonomous-out-of-band-devices-unauthenticated-authentication-bypass-via-sn2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80155-lantronix-autonomous-out-of-band-devices-unauthenticated-authentication-bypass-via-sn-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80154-lantronix-autonomous-out-of-band-devices-predictable-session-token-with-validation-by-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80154-lantronix-autonomous-out-of-band-devices-predictable-session-token-with-validation-by2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80152-lantronix-autonomous-out-of-band-devices-os-command-injection-via-set-script-schedule-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80152-lantronix-autonomous-out-of-band-devices-os-command-injection-via-set-script-schedule2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92706-dark-reader-ability-to-request-icon-like-bitmap-data-from-certain-local-web-servers2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80151-lantronix-autonomous-out-of-band-devices-os-command-injection-via-set-nfs-download-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80151-lantronix-autonomous-out-of-band-devices-os-command-injection-via-set-nfs-download2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80150-lantronix-autonomous-out-of-band-devices-webtelnet-ssrf-via-rooturl-parameter2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80149-lantronix-autonomous-out-of-band-devices-webssh-ssrf-via-rooturl-parameter2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80148-lantronix-autonomous-out-of-band-devices-webssh-ssrf-via-username-truncation2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80147-lantronix-autonomous-out-of-band-devices-stack-based-buffer-overflow-via-mfc-eeprom-w2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80146-lantronix-autonomous-out-of-band-devices-stack-based-buffer-overflow-via-mfc-eeprom-r2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80145-lantronix-autonomous-out-of-band-devices-cli-command-injection-via-set-cifs-password2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80144-lantronix-autonomous-out-of-band-devices-cli-command-injection-via-mfc-eeprom-write2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94127-big-ip-apm-oauth-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80143-lantronix-autonomous-out-of-band-devices-cli-command-injection-via-mfc-eeprom-read2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84388-fortinet-fortipam-chrome-extension-ui-redressing-information-disclosure2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65130-nvidia-infrastructure-controller-os-command-injection-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65179-nvidia-nemo-insecure-deserialization-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65128-nvidia-infrastructure-controller-sql-injection-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65121-nvidia-infrastructure-controller-improper-authentication-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65114-nvidia-infrastructure-controller-missing-authentication-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65113-nvidia-infrastructure-controller-hard-coded-credentials-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=d-link-waarschuwt-voor-kritieke-kwetsbaarheid-in-wifi-router2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93343-marketking-2172-missing-authorization-via-marketkingadminvendorsajax2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95682-misp-stored-cross-site-scripting-via-unescaped-organization-name-in-admin-email-view2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93342-marketking-2172-missing-authorization-via-marketkingduplicateproduct-ajax2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12718-sqli-in-karel-electronics-karelips-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12718-sqli-in-karel-electronics-karelips2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93341-marketking-2172-missing-authorization-via-marketkingsendrefund-ajax2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95679-misp-unauthenticated-blind-ssrf-via-xml-body-processing2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95675-d-link-dap-1360-614-unauthenticated-rce-via-web-management-interface2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95675-d-link-dap-1360-614-unauthenticated-rce-via-web-management-interface-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95499-josephchuks-php-file-manager-with-code-editor-filemanagerphp-moveuploadedfile-unrestr2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95674-misp-eventscontroller-queryenrichment-allows-querying-unavailable-or-legacy-modules-w2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95671-misp-collections-missing-authorization-check-for-sharing-group-on-put-request-in-coll2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95661-misp-reflected-cross-site-scripting-in-attribute-histogram-via-unescaped-url-supplied2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95273-dgtlmoon-changedetectionio-visualselectordata-flaskapppy-staticcontent-path-traversal2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95619-gcc-libstdc-integer-overflow-in-new-operator2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95659-misp-reflected-xss-via-unvalidated-object-type-in-analystdata-overmind-thread2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95658-misp-csrf-vulnerability-in-workflow-modulestatelessexecution-allows-cross-site-execut2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95271-dgtlmoon-changedetectionio-authentication-hook-flaskapppy-checkauthentication-imprope2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95272-dgtlmoon-changedetectionio-screenshot-flaskapppy-staticcontent-path-traversal2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93616-directory-traversal-and-file-upload-allows-execution-of-arbitrary-script-on-the-manag-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75791-authentication-bypass-vulnerability-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75791-authentication-bypass-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93616-directory-traversal-and-file-upload-allows-execution-of-arbitrary-script-on-the-manag2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95667-misp-installer-log-and-fifo-created-world-readable-exposing-sensitive-credentials2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95666-unbounded-post-id-array-in-the-bulk-reactions-endpoint-allows-denial-of-service2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95665-misp-reflected-cross-site-scripting-in-event-export-confirmation-form-via-unescaped-j2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95396-sfturing-hosporder-public-search-handlers-hospitalcontrollerjava-cross-site-scripting2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=ai-agents-are-rewriting-the-rules-of-lateral-movement2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=new-cvss-100-velocloud-orchestrator-flaw-actively-exploited-in-certificate-based-setups-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=new-cvss-100-velocloud-orchestrator-flaw-actively-exploited-in-certificate-based-setups2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-74849-remote-code-execution-vulnerability-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-74849-remote-code-execution-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=dora-year-two-can-your-soc-actually-see-the-attack2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=new-linux-kernel-flaw-gives-arm64-kvm-guests-read-write-access-to-host-memory2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=new-linux-kernel-flaw-gives-arm64-kvm-guests-read-write-access-to-host-memory-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=sharepoint-flaw-initially-listed-as-spoofing-by-microsoft-enables-authenticated-rce2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=sharepoint-flaw-initially-listed-as-spoofing-by-microsoft-enables-authenticated-rce-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95623-improper-ssrf-protection-via-http-redirects-in-tauri-plugin-http2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92882-redact-snmp-community-snmpv3-pass-phrases-and-ipmi-password-in-host-config-rest-api-g2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90990-livestatus-injection-via-monitoring-filter-values2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87119-mpp-tempo-subscription-key-authorization-is-not-bound-to-the-issuing-challenge-allowi-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87119-mpp-tempo-subscription-key-authorization-is-not-bound-to-the-issuing-challenge-allowi2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89420-session-voucher-adding-no-new-funds-is-accepted-without-a-charge-in-mpp-serving-paid2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95270-dgtlmoon-changedetectionio-hash-comparison-flaskapppy-checkpassword-timing-discrepanc2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63279-out-of-bounds-read-in-pict-image-import2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63278-package-urls-can-be-used-to-exfiltrate-arbitrary-ini-file-values-and-environment-vari2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63276-stack-buffer-overflow-in-cff-to-type-1-font-conversion2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63275-stack-buffer-overflow-in-cff-font-hint-handling2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63274-heap-buffer-overflow-in-pdf-import-stream-handling2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63273-heap-buffer-overflow-in-pdf-import-encryption-handling2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63272-heap-buffer-overflow-in-wmf-text-record-import2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=slechts-n-van-225-aan-anthropic-gelinkte-kwetsbaarheden-actief-misbruikt2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25265-creation-of-temporary-file-with-insecure-permissions-in-qualcomm-software-center2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25265-creation-of-temporary-file-with-insecure-permissions-in-qualcomm-software-center-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25264-uncontrolled-search-path-element-in-qualcomm-software-center2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25264-uncontrolled-search-path-element-in-qualcomm-software-center-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25262-write-what-where-condition-in-primary-bootloader2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25255-exposed-function-in-qualcomm-package-manager-and-qualcomm-software-center-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25255-exposed-function-in-qualcomm-package-manager-and-qualcomm-software-center2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25254-improper-authorization-in-qualcomm-software-center2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-25254-improper-authorization-in-qualcomm-software-center-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=malicious-npm-package-indexed-btree-hid-its-loader-in-runtime-code-before-removal2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90882-reflected-arbitrary-origins-with-credentials-allowing-cross-origin-reads-of-authentic-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90882-reflected-arbitrary-origins-with-credentials-allowing-cross-origin-reads-of-authentic2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9231-wp-travel-engine-680-authenticated-contributor-local-file-inclusion-via-template-short2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95511-cups-cups-filters-cups-filters-lpadmin-can-escalate-to-root-via-privileged-serial-bac2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95508-libslirp-libslirp-heap-buffer-overflow-in-dhcpv6tftp-response-builders-on-small-inter2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95511-cups-cups-filters-cups-filters-lpadmin-can-escalate-to-root-via-privileged-serial-bac-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93556-direct-references-to-unsafe-objects-idor-in-tankuam-places-by-kompini-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-68956-ssh-daemon-allocates-unbounded-idle-session-channels-bypassing-maxchannels2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89422-tls-13-client-skips-server-authentication-when-serverhello-carries-an-unsolicited-pre-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93556-direct-references-to-unsafe-objects-idor-in-tankuam-places-by-kompini2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93928-wordpress-taxi-booking-manager-for-woocommerce-plugin-208-broken-authentication-vulne2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65634-superlinear-cpu-denial-of-service-in-erlangotp-asn1-object-identifier-decoder2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65634-superlinear-cpu-denial-of-service-in-erlangotp-asn1-object-identifier-decoder-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89422-tls-13-client-skips-server-authentication-when-serverhello-carries-an-unsolicited-pre2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15095-product-feed-manager-for-woocommerce-6643-authenticated-shop-manager-path-traversal-t2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94117-wordpress-hashbar-wordpress-notification-bar-plugin-203-sql-injection-vulnerability2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92235-wp-ultimate-review-242-authenticated-subscriber-arbitrary-shortcode-execution-via-xss-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92969-husky-144-unauthenticated-local-file-inclusion-via-customtpl-shortcode-attribute-via-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87078-netidnpunycode-versions-from-2302-before-2590-for-perl-leak-the-output-buffer-on-ever2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-74766-netidnpunycode-versions-from-2301-before-2590-for-perl-allow-a-heap-use-after-free-vi2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-1281-bm-content-builder-3171-authenticated-subscriber-arbitrary-file-deletion-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=sidecopy-broadens-india-targeting-to-academia-with-reverserat-spear-phishing2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-95503-keycloak-services-keycloak-services-potential-kdc-spoofing-bypass-when-kerberos-passw2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93836-wpc-product-bundles-for-woocommerce-866-unauthenticated-stored-cross-site-scripting-v2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-7622-thumbpress-621-missing-authorization-to-authenticated-subscriber-plugin-deactivation2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18345-wp-user-manager-2918-missing-authorization-to-authenticated-subscriber-stripe-account2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9004-wp-crm-system-346-authenticated-contributor-exposure-of-sensitive-information-via-cont2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-14487-handily-103-missing-authorization-to-unauthenticated-arbitrary-stripe-payment-setting2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-1280-bm-content-builder-3171-authenticated-subscriber-arbitrary-file-read2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91092-wpforo-forum-315-missing-authorization-to-authenticated-subscriber-guest-post-takeove2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93778-wp-yelp-review-slider-92-unauthenticated-stored-cross-site-scripting-via-yelp-review2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92235-wp-ultimate-review-242-authenticated-subscriber-arbitrary-shortcode-execution-via-xss2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18439-tutor-lms-407-authenticated-custom-insecure-direct-object-reference-to-arbitrary-quiz2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-1645-hostel-118-authenticated-administrator-stored-cross-site-scripting-via-customcurrency2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6922-wp-table-builder-221-incorrect-authorization-to-authenticated-subscriber-arbitrary-pos2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-1281-bm-content-builder-3171-authenticated-subscriber-arbitrary-file-deletion2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-4123-rw-elephant-rental-inventory-2313-missing-authorization-to-authenticated-subscriber-ar2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92969-husky-144-unauthenticated-local-file-inclusion-via-customtpl-shortcode-attribute-via2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-14486-pixelplay-102-missing-authorization-to-unauthenticated-arbitrary-api-key-deletion-via2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-14484-image-buzz-103-missing-authorization-to-unauthenticated-arbitrary-api-key-modificatio2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-16778-live-composer-2121-authenticated-contributor-stored-cross-site-scripting-via-dslcmodu2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12995-custom-field-template-278-authenticated-contributor-insecure-direct-object-reference2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93952-security-advisory-0183-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93952-security-advisory-01832026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87082-netidnpunycode-versions-before-2590-for-perl-hang-crash-or-return-a-wrong-label-via-u2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87081-netidnuts46-versions-before-2590-for-perl-allow-cpu-exhaustion-via-quadratic-punycode2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87080-netidnpunycodepp-versions-before-2590-for-perl-decode-a-truncated-label-to-a-name-con2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87079-netidnpunycode-versions-before-2590-for-perl-allow-cpu-exhaustion-via-quadratic-inser2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92438-ninja-forms-3153-unauthenticated-stored-xss-via-paragraph-text-field-in-submissions-a2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=one-hidden-meta-muse-setting-could-let-attackers-turn-the-ai-assistant-into-a-backdoor2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=wordpress-comment2shell-flaw-can-turn-anonymous-comment-xss-into-rce-via-admin-session-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=wordpress-comment2shell-flaw-can-turn-anonymous-comment-xss-into-rce-via-admin-session2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88788-text-styler-111-contributor-stored-xss2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=zyxel-and-veeam-flaws-under-active-exploitation-with-command-and-system-access-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=zyxel-and-veeam-flaws-under-active-exploitation-with-command-and-system-access2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93655-booking-calendar-1183-reflected-cross-site-scripting-via-wpbcautofill-parameter2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12470-cmp-4117-authenticated-editor-privilege-escalation-via-arbitrary-option-update-to-cmp2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85653-contextual-related-posts-441-authenticated-author-stored-cross-site-scripting-via-oth2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-19658-give-tributes-231-unauthenticated-php-object-injection-via-givetributesecardnotifyrec-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-19658-give-tributes-231-unauthenticated-php-object-injection-via-givetributesecardnotifyrec2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13355-meta-box-aio-3110-and-standalone-plugin-extensions-unauthenticated-privilege-escalati-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13355-meta-box-aio-3110-and-standalone-plugin-extensions-unauthenticated-privilege-escalati2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94493-gigatech-pdv5701-websocket-service-indexhtml-missing-authentication-12026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94493-gigatech-pdv5701-websocket-service-indexhtml-missing-authentication2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94492-yonyou-u8cloud-openapi-sosaleordersendaudit-sql-injection2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94491-yonyou-ksoa-searchlistjsp-sql-injection2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93711-dancer2-versions-before-220-for-perl-do-not-strip-cr-and-lf-from-response-header-name2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93709-dancer2-versions-before-220-for-perl-serve-a-layout-as-a-page-when-an-equivalent-spel2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93710-dancer2-versions-from-200-before-220-for-perl-dispatch-a-route-that-a-dying-hook-refu2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93712-dancer2-versions-from-210-before-220-for-perl-serve-files-from-outside-publicdir-via2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-76974-information-disclosure-vulnerability-in-sap-fiori-launchpad2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94490-octoprint-command-api-systempy-executesystemcommand-os-command-injection2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94489-octoprint-file-download-api-filespy-validate-path-traversal2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94426-xuxueli-xxl-job-insert-cross-site-scripting2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94425-moore-threads-mtt-s80-driver-package-ioctl-mtdispkm64sys-sub140006f0c-privileges-mana-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94425-moore-threads-mtt-s80-driver-package-ioctl-mtdispkm64sys-sub140006f0c-privileges-mana2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94626-vllm-through-0290-memory-exhaustion-via-unvalidated-nixl-tpsize-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94623-vllm-through-0290-denial-of-service-via-nixl-multi-prompt-assertion-failure-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94627-vllm-through-0290-gpu-kv-cache-leak-via-mooncake-transfer-id-collision-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94624-vllm-through-0290-denial-of-service-via-unbounded-p2p-kv-offloading-sessions-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94622-vllm-through-0290-denial-of-service-via-incomplete-nixl-kv-transfer-metadata-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88738-jazzware-rt1000-edge-unrestricted-file-upload-remote-code-execution2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79079-crosswire-xiphos-arbitrary-code-execution-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88756-pagekit-cms-sql-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-78847-gray-matter-arbitrary-code-execution2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-78806-matter-project-chip-information-disclosure-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61652-zapros-streaming-decoders-ignored-the-requested-chunk-size-allowing-a-single-compress2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94627-vllm-through-0290-gpu-kv-cache-leak-via-mooncake-transfer-id-collision2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94626-vllm-through-0290-memory-exhaustion-via-unvalidated-nixl-tpsize2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94625-vllm-through-0290-resource-exhaustion-via-ownerless-mooncake-transfer-placeholders2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94624-vllm-through-0290-denial-of-service-via-unbounded-p2p-kv-offloading-sessions2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94623-vllm-through-0290-denial-of-service-via-nixl-multi-prompt-assertion-failure2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94622-vllm-through-0290-denial-of-service-via-incomplete-nixl-kv-transfer-metadata2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94540-desktopsms-1110-unauthorized-access-via-local-service2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65980-chartbrew-sql-injection-via-missing-backslash-escaping-in-clickhouse-variable-substit2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61851-chartbrew-incomplete-read-only-keyword-blocklist-in-ai-runquery-tool2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61852-chartbrew-sql-injection-via-rowlimit-parameter-in-ai-runquery-tool2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61743-chartbrew-dns-rebinding-ssrf-bypass-in-outbound-request-validation2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94536-lamp-cloud-through-5100-unauthorized-information-disclosure-via-anyonevisibleresource2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94535-lamp-cloud-through-5100-unauthorized-notification-deletion2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94534-lamp-cloud-through-5100-unauthorized-profile-modification-via-put-endpoints2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94533-lamp-cloud-through-5100-unauthorized-file-download-via-anyonefile2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94532-lamp-cloud-through-5100-unauthorized-user-profile-access-via-getuserinfobyid2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93340-gladys-assistant-510-password-reset-link-poisoning-via-forgotpassword-endpoint2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61541-zapros-has-an-unbounded-content-encoding-decompression-chain-that-allows-denial-of-se2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59830-discourse-stored-xss-via-unescaped-actor-name-in-post-actions2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94572-openstack-octavia-amphora-provider-driver-improper-input-validation-configuration-inj2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94588-proxmox-pmg-api-argument-injection-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94572-openstack-octavia-amphora-provider-driver-improper-input-validation-configuration-inj-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94571-openstack-octavia-amphora-provider-driver-haproxy-configuration-injection-vulnerabili-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94571-openstack-octavia-amphora-provider-driver-haproxy-configuration-injection-vulnerabili2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94424-moore-threads-mtt-s80-driver-package-ioctl-mtdispkm64sys-sub140001000-heap-based-over-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94424-moore-threads-mtt-s80-driver-package-ioctl-mtdispkm64sys-sub140001000-heap-based-over2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93433-libstoragemgmt-libstoragemgmt-denial-of-service-via-stack-buffer-overflow-in-scsi-vpd2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88409-falkordb-buffer-overflow-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88746-idccms-cross-site-scripting-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79916-maxkb-aws-bedrock-model-credential-injection-leads-to-remote-code-execution2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77521-maxkb-prompt-injectable-agent-can-lead-to-command-execution2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46649-joplin-sso-auth-code-login-missing-rate-limiting-9-digit-numeric-code-brute-forceable2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55159-luci-app-adblock-fast-delegated-luci-app-adblock-fast-users-can-reach-root-command-ex2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58269-sync-in-server-has-a-complete-2fa-bypass-via-post-apiauthtoken2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55897-luci-app-advanced-reboot-read-acl-exposes-binsh-through-fileexec-allowing-delegated-u2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58269-sync-in-server-has-a-complete-2fa-bypass-via-post-apiauthtoken-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73546-envoy-stored-xss-in-admin-stats-interface-statsformathtml2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73512-envoy-use-after-free-in-quic-on-internal-redirects2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58271-sync-inserver-vulnerable-to-totp-brute-force-via-post-apiappsyncregister2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73550-envoy-http2-discarded-host-header-200-gb-header-copy-oom-in-envoy2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73547-envoy-extauthz-request-path-pseudoheader-dereferenced-wo-null-check2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48521-envoy-http3-connection-pool-selection-null-derefs-in-prodclustermanagerfactoryallocat2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73549-envoy-incomplete-fix-for-cve-2026-26310-copyinternetaddressandport-crashes-on-scoped2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73513-envoy-oghttp2-upstream-trailers-incorrect-handling2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85219-denial-of-service-in-the-opencanary-redis-service2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49811-dell-command-monitor-incorrect-permission-assignment-elevation-of-privilege-vulnerabi-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49811-dell-command-monitor-incorrect-permission-assignment-elevation-of-privilege-vulnerabi2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73552-envoy-http-rbac-saferegex-can-fail-open-on-rfc-valid-obs-text-header-values2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73548-envoy-cross-user-response-poisoning-via-a-generic-non-websocket-http-upgrade-on-envoy2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50572-envoy-extauthz-rawhttpclientimpl-onsuccess-0x0-segfault2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55897-luci-app-advanced-reboot-read-acl-exposes-binsh-through-fileexec-allowing-delegated-u-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81469-dell-inventory-collector-client-unquoted-search-path-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55159-luci-app-adblock-fast-delegated-luci-app-adblock-fast-users-can-reach-root-command-ex-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94495-jsherp-through-36-missing-authorization-via-systemconfig2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94501-jsherp-through-36-privilege-escalation-via-userbusiness-crud-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94497-jsherp-through-36-unauthorized-access-via-by-id-endpoints-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94496-jsherp-through-36-privilege-escalation-via-role-management2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94497-jsherp-through-36-unauthorized-access-via-by-id-endpoints2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94501-jsherp-through-36-privilege-escalation-via-userbusiness-crud2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94496-jsherp-through-36-privilege-escalation-via-role-management-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94411-jsherp-36-privilege-escalation-via-updateonevaluebykeyidandtype2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94412-jsherp-through-36-authorization-bypass-via-resetpwd-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94494-jsherp-through-36-tenant-information-disclosure-via-get-tenantinfo2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94412-jsherp-through-36-authorization-bypass-via-resetpwd2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94414-jsherp-through-36-missing-authorization-via-updatebtnstr2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94413-jsherp-through-36-password-hash-disclosure-via-userinfo2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94403-colorful-igamecenter-ioctl-enesys-sub140001af0-untrusted-pointer-dereference2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58491-warpgate-reflected-xss-in-sso-return-endpoint-via-attacker-controlled-next-parameter2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62182-kubeedge-configupdatejob-updatefields-enables-remote-shell-injection-and-code-executi2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48976-homebox-cross-tenant-idor-in-notifier-update-leaks-shoutrrr-credentials-and-allows-we2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48975-homebox-cross-tenant-idor-in-maintenanceentry-update-and-delete-allows-tampering-and2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48826-homebox-cross-group-inventory-wipe-in-homebox-via-global-owner-role-and-x-tenant-head2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61745-inventree-missing-authorization-on-machine-restart-endpoint-allows-any-authenticated2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-69190-graylog-manager-to-owner-privilege-escalation-on-saved-searches-and-dashboards2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55473-homebox-notifier-ssrf-guard-misses-nat64-prefixes-64ff9b96-64ff9b148-generic-url-reac2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48826-homebox-cross-group-inventory-wipe-in-homebox-via-global-owner-role-and-x-tenant-head-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48974-homebox-forced-group-membership-without-consent-in-homebox-addmember-handler2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48975-homebox-cross-tenant-idor-in-maintenanceentry-update-and-delete-allows-tampering-and-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48976-homebox-cross-tenant-idor-in-notifier-update-leaks-shoutrrr-credentials-and-allows-we-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62182-kubeedge-configupdatejob-updatefields-enables-remote-shell-injection-and-code-executi-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61612-aborrusockan-mcp-server-has-ssrf-via-dns-name-internal-ip-incomplete-fix-of-cve-20262026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=fake-lastpass-authenticator-installer-abuses-microsoft-signed-driver-to-kill-antivirus-and-edr2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94488-telegram-desktop-cross-site-scripting-vulnerability-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94488-telegram-desktop-cross-site-scripting-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92382-usbredir-usbredir-unbounded-isopacketdesc-index-in-usbredirhostisopacket-leads-to-hea2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93012-emailsendertransportsendmail-versions-before-2602-for-perl-allow-arbitrary-command-ex2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94449-quarkus-smallrye-fault-tolerance-quarkus-smallrye-fault-tolerance-memory-leak-in-appl2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84990-ntopng-missing-authorization-on-system-configuration-backup-download-and-listing-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84990-ntopng-missing-authorization-on-system-configuration-backup-download-and-listing2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-83621-ntopng-missing-authorization-check-in-rest-api-allows-non-admin-users-to-tamper-threa2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-83621-ntopng-missing-authorization-check-in-rest-api-allows-non-admin-users-to-tamper-threa-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=contagious-interview-campaign-compromises-30000-devices-steals-1071m-in-crypto2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79920-ajenti-privilege-escalation-to-root-via-unauthenticatedunauthorized-plugin-install-ta2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79920-ajenti-privilege-escalation-to-root-via-unauthenticatedunauthorized-plugin-install-ta-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77582-tinyauth-user-enumeration-attack-by-timing-oracle2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77561-tinyauth-unauthenticated-login-attempts-can-trigger-global-login-lockdown-denial-of-s2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77560-tinyauth-forward-auth-per-app-acl-is-matched-case-sensitively-against-the-case-insens-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77560-tinyauth-forward-auth-per-app-acl-is-matched-case-sensitively-against-the-case-insens2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-76898-drawio-unauthenticated-ssrf-via-ipv6-ula-blocklist-bypass-in-embed2js2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63373-drawio-oauth-csrf-via-missing-state-validation-on-self-hosted-deployments-allows-sess2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63416-drawio-path-traversal-in-exportproxyservlet-allows-access-to-arbitrary-backend-endpoi2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63334-drawio-ssrf-via-dns-rebinding-in-proxyservlet-bypasses-private-ip-blocklist2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63116-deepstream-patchmulti-action-bypasses-valve-permission-system-allowing-unauthorized-r2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63116-deepstream-patchmulti-action-bypasses-valve-permission-system-allowing-unauthorized-r-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62987-fabio-incomplete-fix-for-cve-2025-48865-operator-configured-trust-headers-clientiptls2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62371-kubeedge-command-injection-in-nodeupgradejob-rce-on-edge-nodes-via-v1alpha2-api2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61674-fluent-bit-remote-stack-buffer-overflow-in-fluent-bit-outforward-secure-forward-pong2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62369-kubeedge-keadm-decompresstargz-path-traversal-enables-arbitrary-file-write-on-windows2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=google-fined-403-million-over-gdpr-violations-tied-to-location-data2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85751-mailu-authentication-bypass-in-header-based-proxy-authentication-via-spoofable-x-forw2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82412-ntopng-remote-code-execution-via-os-command-injection-in-vulnerability-scan-rest-api2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53940-conda-entry-point-path-traversal-in-noarchpython-install-arbitrary-file-write-canonic2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55563-feast-pullrequesttarget-integration-tests-run-untrusted-fork-code-with-production-clo2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82412-ntopng-remote-code-execution-via-os-command-injection-in-vulnerability-scan-rest-api-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55563-feast-pullrequesttarget-integration-tests-run-untrusted-fork-code-with-production-clo-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88978-hatchet-durabletask-workerstatus-grpc-resolves-caller-supplied-durable-task-uuids-via2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84298-hatchet-cross-tenant-durable-callback-payload-disclosure-in-hatchet-v1-dispatcher2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61687-hatchet-unauthenticated-oauth-state-csrf-login-csrf-via-empty-state-collision-in-vali2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63342-hatchet-cross-tenant-durable-task-event-log-disclosure-via-missing-authorization-chec2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61681-hatchet-ssrf-via-unsigned-unsubscribeurl-in-sns-unsubscribeconfirmation-handler2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85751-mailu-authentication-bypass-in-header-based-proxy-authentication-via-spoofable-x-forw-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53940-conda-entry-point-path-traversal-in-noarchpython-install-arbitrary-file-write-canonic-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77165-database-file-lock-denial-of-service2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77166-mattermost-emoji-field-cross-site-scripting-or-ui-redress-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94301-apache-mina-cve-2026-47065-resolveproxyclass-fix-missing-from-20x-and-21x-branches-202026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94301-apache-mina-cve-2026-47065-resolveproxyclass-fix-missing-from-20x-and-21x-branches-20-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94184-fetchmail-fetchmail-stack-based-buffer-overflow-in-ntlm-authentication-fetchmail-sa-2-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94184-fetchmail-fetchmail-stack-based-buffer-overflow-in-ntlm-authentication-fetchmail-sa-22026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93339-ditty-3170-stored-xss-via-layout-tag-wrapper-attribute2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86473-apache-airflow-logout-ignores-a-presented-authorization-bearer-token-leaving-it-revoc2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82355-apache-airflow-session-cookie-silently-overrides-explicit-authorization-bearer-header2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80110-pki-core-dogtag-pki-v2-rest-acl-filters-reverse-lexicographic-tie-break-lets-a-ca-age2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80110-pki-core-dogtag-pki-v2-rest-acl-filters-reverse-lexicographic-tie-break-lets-a-ca-age-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-71543-openbaos-templated-policies-allow-privilege-escalation-via-wildcard-characters2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75158-apache-airflow-assets-events-api-returns-asset-events-for-every-dag-with-no-per-dag-a2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75939-openshiftoc-mirror-release-signature-verification-openpgp-signatureerror-checked-befo2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61630-nginx-ignition-has-totp-reuse-during-validity-window2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55870-gocd-is-vulnerable-to-credential-exposure-when-admins-insecurely-configure-material-u2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61628-nginx-ignition-has-unauthenticated-admin-account-creation-via-onboarding-race-conditi-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-68919-gocd-has-stored-xss-possible-via-forged-package-material-comments-on-stagejobvsm-page2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61628-nginx-ignition-has-unauthenticated-admin-account-creation-via-onboarding-race-conditi2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61629-nginx-ignition-has-parseacceptlanguage-separator-bypass-that-enables-75x-cpu-amplific2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55074-ansible-freebsd-jail-connection-plugin-jail-escape-via-symlink-following-in-putfile-h2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55071-mcp-for-stata-stata-command-injection-via-unsanitized-package-in-adopackageinstall2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=weekly-recap-cisco-0-day-ai-agent-rce-clickfix-attacks-clickfix-surge-and-browser-hijacks2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=weekly-recap-cisco-0-day-ai-agent-rce-clickfix-attacks-clickfix-surge-and-browser-hijacks-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cisa-meldt-actief-misbruik-van-drie-kwetsbaarheden-in-linux-kernel2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88807-libxrender-renderquerypictformats-reply-heap-based-buffer-overflow2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71421-uvdesk-core-framework-before-117-privilege-escalation-via-editagent2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=taskstomp-powershell-backdoor-steals-documents-wi-fi-passwords-and-clipboard-data2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94404-misp-csrf-vulnerability-allows-unauthorized-attribute-modification2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88807-libxrender-renderquerypictformats-reply-heap-based-buffer-overflow-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94387-aureus-erp-before-160-stored-xss-via-chatter-field-change-log2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71421-uvdesk-core-framework-before-117-privilege-escalation-via-editagent-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71420-uvdesk-core-framework-before-117-authorization-bypass-via-saved-reply2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71419-uvdesk-core-framework-before-117-stored-xss-via-swiftmailer2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88806-libx11-xkbgetmap-reply-heap-based-buffer-overflow2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94401-misp-arbitrary-local-file-read-and-ssrf-via-misp-export-upload-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94401-misp-arbitrary-local-file-read-and-ssrf-via-misp-export-upload2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-938842026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94394-misp-objectreferencescontroller-granular-distribution-and-sharing-group-restrictions2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94379-misp-http-method-bypass-of-login-security-controls-bruteforce-protection-and-email-ot2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94381-misp-privilege-escalation-read-only-api-key-user-can-regain-full-role-via-updatelogin2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94381-misp-privilege-escalation-read-only-api-key-user-can-regain-full-role-via-updatelogin-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94383-misp-blocklist-workflow-module-arbitrary-script-execution-via-unrestricted-file-exten-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94383-misp-blocklist-workflow-module-arbitrary-script-execution-via-unrestricted-file-exten2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94372-stored-cross-site-scripting-via-unescaped-galaxy-cluster-tag-names-in-misp-default-th2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94373-misp-dom-based-cross-site-scripting-via-innerhtml-in-contextual-menu2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94374-misp-idor-via-client-supplied-report-id-in-module-results-processing-allows-reparenti-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94374-misp-idor-via-client-supplied-report-id-in-module-results-processing-allows-reparenti2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94214-st-engineering-idirect-evolutionvelocity-webserver-evolution-management-service-login2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94216-st-engineering-idirect-evolutionvelocity-webserver-evolution-http-header-webserver-au2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94211-hyve5-leantime-project-dashboard-showbladephp-cross-site-scripting2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84285-os-command-injection-vulnerability-affecting-tuleap-enterprise-edition-from-173-throu-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84285-os-command-injection-vulnerability-affecting-tuleap-enterprise-edition-from-173-throu2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94393-misp-event-report-cross-event-reparenting-via-unscoped-uuid-resolution-in-editreport2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85220-denial-of-service-in-the-thinkst-canary-redis-service2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94382-beszel-before-0190-insecure-direct-object-reference-via-user-alerts2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94368-noobaa-core-noobaa-core-presigned-put-url-escalation-to-copyobject-via-unsigned-x-amz2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89139-temporal-server-worker-deployment-compute-provider-executes-a-caller-supplied-command2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89139-temporal-server-worker-deployment-compute-provider-executes-a-caller-supplied-command-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87858-temporal-server-completion-callback-source-header-can-direct-attacker-chosen-requests2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65654-temporalioringpop-go-fails-to-enforce-configured-label-limits-on-inbound-membership-g2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65654-temporalioringpop-go-fails-to-enforce-configured-label-limits-on-inbound-membership-g-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65653-temporaliotchannel-go-zero-chunk-call-fragment-causes-process-termination-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65653-temporaliotchannel-go-zero-chunk-call-fragment-causes-process-termination2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65652-temporaliotchannel-go-malformed-checksum-type-causes-process-termination-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65652-temporaliotchannel-go-malformed-checksum-type-causes-process-termination2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65651-temporaliosqlparser-deeply-nested-unary-expressions-can-cause-a-fatal-stack-overflow2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65651-temporaliosqlparser-deeply-nested-unary-expressions-can-cause-a-fatal-stack-overflow-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-16651-temporaliosqlparser-malformed-mysql-version-comments-can-cause-a-panic2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-16651-temporaliosqlparser-malformed-mysql-version-comments-can-cause-a-panic-12026-09-21weekly0.8