https://zerodaydigest.net/hourly1.0 https://zerodaydigest.net/index.htmlhourly1.0 https://zerodaydigest.net/privacy.html0.3 https://zerodaydigest.net/terms.html0.3 https://zerodaydigest.net/article.html?slug=cve-2026-44023-docling-core-has-unsafe-remote-filename-resolution2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53410-zoom-clients-for-windows-race-condition2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53409-zoom-rooms-for-windows-privilege-escalation2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55173-avideo-incomplete-fix-for-cve-2026-33482-sanitizeffmpegcommand-still-allows-a-single2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61378-automationdirect-productivity-suite-divide-by-zero2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-60073-automationdirect-productivity-suite-out-of-bounds-read2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57896-automationdirect-productivity-suite-out-of-bounds-read2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-44019-docling-core-has-insufficient-validation-of-image-reference-uris2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-38158-ureport-sql-injection2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-33731-avideo-has-an-authorizenet-webhook-signature-bypass-that-enables-wallet-balance-infla2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-36425-opswat-appremover-driver-improper-access-control-vulnerability2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-33692-avideo-has-unauthenticated-env-file-exposure-via-official-docker-compose-configuratio2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-11889-salto-proaccess-space-authorization-bypass-through-user-controlled-key2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2024-32389-kerlink-wirnet-istation-buffer-overflow-vulnerability2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2024-34268-eq-3-eqiva-cc-rt-ble-bluetooth-authentication-bypass2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2024-32387-kerlink-wirnet-istation-snmp-information-disclosure2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2024-32386-kerlink-wirnet-istation-directory-traversal-vulnerability2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2024-32385-kerlink-wirnet-istation-information-disclosure-vulnerability2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62309-coredns-proxyproto-plugin-panics-on-ppv2-datagram-with-non-udp-transport-single-28-by2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63089-wireguard-easy-weak-token-generation-information-disclosure-via-otl-route-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62963-centrifugo-decompression-bomb-dos-via-permessage-deflate-in-unidirectional-websocket2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63089-wireguard-easy-weak-token-generation-information-disclosure-via-otl-route2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63397-remorsesgenql-code-injection2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62994-coredns-k8sexternal-headless-axfr-can-emit-an-empty-transfer-batch-that-panics-the-tr2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62963-centrifugo-decompression-bomb-dos-via-permessage-deflate-in-unidirectional-websocket-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62290-cert-manager-direct-acme-challenge-resources-can-bypass-issuer-dns01-solver-policy-an2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62299-coredns-rewrite-plugin-edns0-response-revert-nil-pointer-panic-remote-dos-when-a-down2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49998-centrifugo-dynamic-jwks-key-cache-keyed-only-by-kid-allows-cross-issuer-jwt-authentic2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55629-whistle-path-traversal2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15352-nasa-core-flight-system-cfs-health-safety-hs-application-null-pointer-dereference2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-44981-crowdsec-lapi-denial-of-service-via-unbounded-gzip-decompression2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15422-sctp-needs-to-better-check-init-ack-chunk-parameters2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53536-activepieces-cross-tenant-file-download-via-missing-jwt-audience-check-on-step-files2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54526-argo-workflows-incomplete-fix-for-cve-2026-31892-artifactgcpodspecpatch-bypass-of-str2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53535-activepieces-arbitrary-file-write-in-git-sync-via-path-traversal-and-symlinks2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54526-argo-workflows-incomplete-fix-for-cve-2026-31892-artifactgcpodspecpatch-bypass-of-str-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47087-cyrus-imap-urlauth-improper-access-control2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47088-cyrus-imap-heap-memory-exposure2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47089-cyrus-imap-information-disclosure-vulnerability2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47086-cyrus-imap-urlauth-token-acl-bypass2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47085-cyrus-imap-urlauth-token-forgery-vulnerability2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47082-cyrus-imap-vacation-feature-acl-bypass2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47084-cyrus-imap-improper-access-control2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47083-cyrus-imap-esearch-cross-user-information-disclosure2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47081-cyrus-imap-xapplepushservice-information-disclosure-and-push-hijack2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46353-bigbluebutton-api-checksum-bypass-via-presentationuploadexternalurl-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46515-frogman-multiple-read-tier-tools-expose-admin-grade-data-and-arbitrary-graphql-execut2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46378-dasel-denial-of-service-in-dasel-selector-lexer-due-to-infinite-loop-on-unterminated2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46353-bigbluebutton-api-checksum-bypass-via-presentationuploadexternalurl2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46513-frogman-api-tokens-stored-in-plaintext2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46512-frogman-dialplan-template-parameters-interpolated-into-extensionscustomconf-without-e-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46512-frogman-dialplan-template-parameters-interpolated-into-extensionscustomconf-without-e2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46404-bigbluebutton-presentation-url-security-hardening2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46514-frogman-plaintext-passwords-and-secrets-persisted-to-audit-log2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46515-frogman-multiple-read-tier-tools-expose-admin-grade-data-and-arbitrary-graphql-execut-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46377-dasel-index-out-of-range-panic-in-dasel-selector-lexer-on-trailing-backslash-in-quote2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46351-bigbluebutton-insecure-randomness-allows-to-guess-users-conference-session-token-and2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46351-bigbluebutton-insecure-randomness-allows-to-guess-users-conference-session-token-and-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46338-pymdown-extensions-regression-in-pymdownxsnippets-reintroduces-sibling-prefix-path-tr2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46686-emlog-reflected-cross-site-scripting-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46687-emlog-local-file-inclusion-lfi2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46686-emlog-reflected-cross-site-scripting2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46341-apify-mcp-server-domain-allowlist-bypass-in-fetch-apify-docs-via-string-prefix-matchi2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45336-hireflow-use-of-hard-coded-credentials2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2021-27137-dd-wrt-upnp-buffer-overflow2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9046-lenovo-legion-zone-and-app-store-local-privilege-escalation-vulnerability2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57074-xmlbare-versions-through-053-for-perl-have-an-unbounded-character-lookahead2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63087-grafana-oncall-11611-unauthenticated-token-hijack-via-plugin-install-endpoint-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63086-text-generation-inference-337-ssrf-via-fetchimage-in-multimodal-chat-completions-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63088-stoatchat-0140-ssrf-via-dns-based-ip-blocklist-bypass-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57073-htmlbare-versions-through-004-for-perl-have-an-unbounded-character-lookahead2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6511-lenovo-smart-connect-improper-access-control-vulnerability2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63085-axelor-open-platform-8x-822-authorization-bypass-via-nested-relational-record-persist-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50012-squid-memory-corruption-in-cachedigest-reply-handling2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55406-buffa-use-after-free-in-ownedview-via-unsound-static-lifetime-promotion-in-deref2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46621-yamcs-authenticated-remote-code-execution-rce-via-jython-algorithm-code-injection-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47729-squid-memory-disclosure-in-ftp-gateway2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47751-claude-code-action-malicious-mcp-server-configuration-in-prs-enables-remote-code-exec2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55407-buffa-memory-exhaustion-denial-of-service-in-decodeunknownfield-via-unbounded-allocat2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55548-yamcs-insecure-direct-object-reference-idor-in-packetsapi-allows-unprivileged-users-t2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46621-yamcs-authenticated-remote-code-execution-rce-via-jython-algorithm-code-injection2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46562-yamcs-remote-code-execution-via-mission-database-algorithm-override-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-44632-yamcs-server-side-code-injection-rce-via-janino-expression-engine-in-javaexpralgorith-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45568-zrok-python-proxyshare-can-be-used-as-an-ssrf-proxy-through-absolute-url-paths-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45612-rz-libdemangle-out-of-bound-read-in-rust-demangler2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45325-gestor-de-oferta-prototype-pollution-in-tmlmobilidadeutils-setvalueatpath2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45325-gestor-de-oferta-prototype-pollution-in-tmlmobilidadeutils-setvalueatpath-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45795-janssen-project-jwe-request-object-signature-verification-bypass-in-jans-auth-server2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45576-zrok-copy-writes-attacker-controlled-webdav-paths-outside-the-destination-root-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45367-hapi-fhir-redos-via-fhirpath-matchesreplacematches-in-fhir-validator-http-endpoint2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46562-yamcs-remote-code-execution-via-mission-database-algorithm-override2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45568-zrok-python-proxyshare-can-be-used-as-an-ssrf-proxy-through-absolute-url-paths2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-44632-yamcs-server-side-code-injection-rce-via-janino-expression-engine-in-javaexpralgorith2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45576-zrok-copy-writes-attacker-controlled-webdav-paths-outside-the-destination-root2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-44595-yamcs-unauthorized-user-enumeration-via-iam-api-endpoints2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-44596-yamcs-no-rate-limiting-on-authentication-endpoint2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=two-scattered-spider-hackers-get-55-years-each-for-29-million-tfl-hack2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-14371-lenovo-xclarity-integrator-for-windows-admin-center-powershell-command-injection-vuln2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63088-stoatchat-0140-ssrf-via-dns-based-ip-blocklist-bypass2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59866-kiota-arbitrary-file-write-code-injection-via-x-ms-kiota-info-clientclassname-and-cli-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59865-kiota-command-injection-via-x-ms-kiota-info-dependencyinstallcommand-surfaced-by-kiot-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59864-kiota-pathurl-injection-into-generated-copilot-plugin-manifest-via-x-ai-extensions-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57206-simplechat-plugin-validation-endpoints-missing-authentication-and-authorization-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54733-moodle-localo365-authentication-bypass-via-unverified-jwt-signature-in-teams-sso-endp-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53597-prompty-arbitrary-code-execution-via-javascript-frontmatter-in-typescript-loader-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45695-kopia-unauthenticated-rce-via-ssh-proxycommand-injection-when-insecure-without-passwo2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63087-grafana-oncall-11611-unauthenticated-token-hijack-via-plugin-install-endpoint2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63086-text-generation-inference-337-ssrf-via-fetchimage-in-multimodal-chat-completions2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63085-axelor-open-platform-8x-822-authorization-bypass-via-nested-relational-record-persist2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=threatsday-game-cheat-spyware-24-hour-ransomware-chrome-sync-stalking-12-more-stories-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=threatsday-game-cheat-spyware-24-hour-ransomware-chrome-sync-stalking-12-more-stories2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57206-simplechat-plugin-validation-endpoints-missing-authentication-and-authorization2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59860-kiota-xml-doc-comment-newline-breakout-code-injection-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59859-kiota-code-generation-literal-injection-in-the-php-generator-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59859-kiota-code-generation-literal-injection-in-the-php-generator2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59863-kiota-workspace-config-poisoning-out-of-repo-file-write-generation-time-ssrf2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59862-kiota-code-generation-literal-injection-in-the-python-generator2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59860-kiota-xml-doc-comment-newline-breakout-code-injection2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59861-kiota-code-generation-literal-injection-in-kiota-ruby-generator2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59237-idor-in-prospero-flow-crm-order-api-allows-cross-tenant-read-and-modification-of-orde2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-14254-improper-restriction-of-excessive-authentication-attempts-in-delphix-continuous-data-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57205-simplechat-authenticated-users-can-access-other-users-profile-metadata-through-user-i2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53598-prompty-arbitrary-file-read-via-filepath-reference-expansion2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53597-prompty-arbitrary-code-execution-via-javascript-frontmatter-in-typescript-loader2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54733-moodle-localo365-authentication-bypass-via-unverified-jwt-signature-in-teams-sso-endp2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59867-kiota-generation-time-ssrf-remotelocal-file-inclusion-via-unrestricted-ref2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59866-kiota-arbitrary-file-write-code-injection-via-x-ms-kiota-info-clientclassname-and-cli2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59864-kiota-pathurl-injection-into-generated-copilot-plugin-manifest-via-x-ai-extensions2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-14890-cve-2026-148902026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59865-kiota-command-injection-via-x-ms-kiota-info-dependencyinstallcommand-surfaced-by-kiot2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-5674-pipewire-pipewire-sandbox-escape-and-arbitrary-code-execution-via-malicious-library-lo2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-5674-pipewire-pipewire-sandbox-escape-and-arbitrary-code-execution-via-malicious-library-lo-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56456-hcl-dfxanalytics-is-affected-by-an-internal-file-path-disclosure-vulnerability2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-14254-improper-restriction-of-excessive-authentication-attempts-in-delphix-continuous-data2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=n8n-token-exchange-flaw-could-let-attackers-log-in-as-users-from-another-issuer2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=n8n-token-exchange-flaw-could-let-attackers-log-in-as-users-from-another-issuer-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56455-hcl-dfxanalytics-is-affected-by-a-buffer-overflow-vulnerability-that-can-lead-to-a-de2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56454-hcl-dfxanalytics-is-affected-by-a-deprecated-protocol-vulnerability-due-to-the-use-of2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56453-hcl-dfxanalytics-is-affected-by-an-account-takeover-via-response-manipulation-vulnera2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-35145-hcl-dfxanalytics-is-affected-by-a-missing-http-strict-transport-security-header-vulne2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-35143-hcl-dfxanalytics-is-affected-by-a-missing-samesite-attribute-vulnerability2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-35142-hcl-dfxanalytics-is-affected-by-an-internal-ip-address-disclosure-vulnerability2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-35141-hcl-dfxanalytics-is-affected-by-a-login-replay-attack-vulnerability2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=new-telepuz-malware-spreads-via-clickfix-to-steal-data-and-run-commands2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-35140-hcl-dfxanalytics-is-affected-by-a-missing-secure-attribute-in-encrypted-session-ssl-c2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=new-clicklock-macos-stealer-kills-apps-every-210ms-until-victims-type-their-password2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2024-58360-stoatchat-before-078-unrestricted-account-creation2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=age-of-empires-ii-path-traversal-lek-laat-aanvaller-code-op-systeem-uitvoeren2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63306-stoatchat-before-0135-unauthenticated-ssrf-via-proxy-and-embed-endpoints-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63306-stoatchat-before-0135-unauthenticated-ssrf-via-proxy-and-embed-endpoints2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63304-avideo-through-290-os-command-injection-via-listffmpegprocesses-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63305-avideo-through-290-os-command-injection-via-ffmpegjsonphp-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63305-avideo-through-290-os-command-injection-via-ffmpegjsonphp2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63304-avideo-through-290-os-command-injection-via-listffmpegprocesses2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71388-stoatchat-20241213-1-webhook-token-disclosure-via-read-permissions2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71377-stoatchat-before-20250210-1-unrestricted-message-history-fetch-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71377-stoatchat-before-20250210-1-unrestricted-message-history-fetch2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59249-sign-tolerant-http1-chunk-size-parser-in-mint-enables-response-smuggling-against-stri2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-35146-hcl-dfxserver-is-affected-by-an-unencrypted-communication-vulnerability2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-35147-hcl-dfxserver-is-affected-by-a-broken-authentication-vulnerability-via-direct-api-acc2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-35149-hcl-dfxserver-is-affected-by-an-authentication-bypass-vulnerability-via-server-respon-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-35148-hcl-dfxserver-is-affected-by-a-missing-access-control-vulnerability2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-35149-hcl-dfxserver-is-affected-by-an-authentication-bypass-vulnerability-via-server-respon2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-35147-hcl-dfxserver-is-affected-by-a-broken-authentication-vulnerability-via-direct-api-acc-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12391-ubuntu-pro-client-local-privilege-escalation-and-information-disclosure-via-symlink-a2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-11386-ubuntu-pro-client-input-validation-vulnerability-leading-to-arbitrary-apt-directive-i-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-11386-ubuntu-pro-client-input-validation-vulnerability-leading-to-arbitrary-apt-directive-i2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9494-ubuntu-pro-client-information-disclosure-via-cleartext-bearer-token-exposure-in-proces2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=20-hijacked-government-websites-became-an-attack-channel2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=new-agent-data-injection-attack-can-make-ai-agents-misclick-or-run-attacker-commands2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=daxin-resurfaces-in-taiwan-alongside-stupig-pre-login-system-backdoor2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2023-49900-origin-validation-error-in-x-rite-ma-t6-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2023-49899-origin-validation-error-in-x-rite-ma-t6-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-22752-spring-security-authorization-server-dynamic-client-registration-endpoints-perform-in-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2023-49899-origin-validation-error-in-x-rite-ma-t62026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2023-49900-origin-validation-error-in-x-rite-ma-t62026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=ai-can-find-bugs-but-human-knowledge-still-proves-them2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=unpatched-shark-vacuum-flaw-could-let-attackers-control-other-vacuums-region-wide2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58078-joomla-extension-themexpertcom-unauthenticated-sql-injection-in-quix-page-builder-pro-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-7543-breakdance-271-unauthenticated-stored-cross-site-scripting-via-webhook-action-details2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6424-use-after-free-vulnerability-in-eset-security-products-for-linux2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6423-local-privilege-escalation-via-unauthenticated-alpc-in-eset-inspect-connector-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15651-wp-tripadvisor-review-slider-146-authenticated-administrator-sql-injection-via-filter2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15610-wpbot-856-missing-authorization-to-authenticated-subscriber-arbitrary-rag-document-re2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15407-themify-builder-777-missing-authorization-to-authenticated-subscriber-arbitrary-post2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15350-the-cache-purger-2320-missing-authorization-to-authenticated-subscriber-arbitrary-log2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15727-wp-bulk-delete-142-authenticated-administrator-sql-injection-via-deleteuserroles-para2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15008-uncanny-automator-7314-unauthenticated-php-object-injection-to-arbitrary-file-deletio2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15324-sysbasics-customize-my-account-for-woocommerce-4414-authenticated-shop-manager-stored2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15021-wpforo-forum-311-authenticated-subscriber-stored-cross-site-scripting-via-location-pr2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15099-wp-delicious-1102-authenticated-contributor-stored-cross-site-scripting-via-steps-blo2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15008-uncanny-automator-7314-unauthenticated-php-object-injection-to-arbitrary-file-deletio-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15103-wpfunnels-3128-authenticated-funnel-manager-privilege-escalation-via-groupid-path-par2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15005-loco-translate-285-cross-site-request-forgery-to-remote-code-execution-via-template-p-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15106-wpbot-856-missing-authorization-to-unauthenticated-arbitrary-chat-session-deletion-vi2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15005-loco-translate-285-cross-site-request-forgery-to-remote-code-execution-via-template-p2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15022-tutor-lms-400-authenticated-subscriber-sql-injection-via-stored-quiz-answer-array2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15103-wpfunnels-3128-authenticated-funnel-manager-privilege-escalation-via-groupid-path-par-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13741-digits-wordpress-mobile-number-signup-and-login-9105-authenticated-subscriber-privile-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13755-tickera-3600-authenticated-contributor-stored-cross-site-scripting-via-pricewrapper-s2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13767-quiz-and-survey-master-qsm-1120-authenticated-custom-sql-injection-via-pages-paramete2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13754-tickera-3600-authenticated-staff-sql-injection-via-s-parameter2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13741-digits-wordpress-mobile-number-signup-and-login-9105-authenticated-subscriber-privile2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=zoom-waarschuwt-voor-kritiek-lek-dat-overname-accounts-mogelijk-maakt2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=openais-gpt-red-automates-prompt-injection-testing-to-harden-gpt-56-sol2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-22752-spring-security-authorization-server-dynamic-client-registration-endpoints-perform-in2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58078-joomla-extension-themexpertcom-unauthenticated-sql-injection-in-quix-page-builder-pro2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6423-local-privilege-escalation-via-unauthenticated-alpc-in-eset-inspect-connector2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=zoom-patches-critical-windows-flaw-that-could-enable-account-takeover-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=zoom-patches-critical-windows-flaw-that-could-enable-account-takeover2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15925-improper-tls-hostname-verification-in-snowflake-connector-for-python-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12869-header-footer-builder-for-elementor-121-contributor-stored-xss-via-template-import2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12585-abandoned-cart-lite-for-woocommerce-682-unauthenticated-account-takeover-via-malleabl2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12906-rtmkit-addons-for-elementor-209-contributor-private-post-title-disclosure2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12907-rtmkit-addons-for-elementor-209-author-site-wide-theme-builder-template-creation-and2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12978-funnelkit-31506-reflected-xss-via-divi-optin-form2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12979-funnelkit-31506-admin-arbitrary-file-deletion-via-path-traversal-in-template-importer2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12684-customer-reviews-for-woocommerce-51130-unauthenticated-arbitrary-media-upload-via-cru2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-11371-betterdocs-455-unauthenticated-stored-xss-via-ai-doc-summarizer-prompt-injection2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12525-redux-framework-4513-subscriber-privilege-escalation-to-administrator2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12395-wp-job-portal-255-subscriber-sql-injection-via-applied-resumes-ta-parameter2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-11866-latepoint-563-multiple-privileged-actions-via-csrf2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12492-happy-coders-otp-login-for-woocommerce-28-unauthenticated-account-takeover-via-hcotpa2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12510-ai-engine-355-subscriberchatbot-discussion-disclosure-and-takeover-via-idor2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15925-improper-tls-hostname-verification-in-snowflake-connector-for-python2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15445-seo-booster-731-authenticated-administrator-sql-injection-via-orderby-parameter2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15458-seo-booster-731-authenticated-administrator-sql-injection-via-sortfield-parameter2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15306-product-feed-manager-for-woocommerce-761-reflected-cross-site-scripting-via-s-search2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15013-saml-single-sign-on-543-unauthenticated-authentication-bypass-via-samlresponse-parame-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15013-saml-single-sign-on-543-unauthenticated-authentication-bypass-via-samlresponse-parame2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13042-rpb-chessboard-812-unauthenticated-stored-cross-site-scripting-via-comment-content2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53366-ipv4-account-for-fraggap-on-the-paged-allocation-path2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-21729-loki-detectedfields-query-limits-results-in-unbounded-memory-allocation2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15652-easy-accordion-316-authenticated-contributor-stored-cross-site-scripting-via-align-bl2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12941-multivendorx-509-authenticated-store-owner-sql-injection-via-orderby-parameter2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-14987-givewp-4163-authenticated-give-worker-stored-cross-site-scripting-via-twittermessage2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12409-landing-page-builder-1536-cross-site-request-forgery-to-ulpbadmindata-ajax-action2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15336-catch-themes-demo-import-33-missing-authorization-to-authenticated-subscriber-single2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12753-advance-product-search-voice-ajax-search-for-woocommerce-144-unauthenticated-sql-inje2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12434-list-category-posts-0950-missing-authorization-to-authenticated-contributor-sensitive2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13005-mxchat-3210-authenticated-admin-stored-cross-site-scripting-via-intromessage-setting2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-1609-orgkeycloakkeycloak-quarkus-server-keycloak-unauthorized-access-via-jwt-authorization-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48863-libsolv-stack-based-buffer-overflow-in-libsolv-eddsa-pgp-signature-verification-allow2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-23538-feast-resource-exhaustion-via-websocket-endpoint2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-3842-qemu-kvm-hypervsyndbg-missing-mapped-length-guard-after-cpuphysicalmemorymap-causes-ho2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15909-rafymrx-toko-online-roti-addphp-authorization2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-1609-orgkeycloakkeycloak-quarkus-server-keycloak-unauthorized-access-via-jwt-authorization2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15907-h3c-secpath-f1000-c8300-glogfwnbcmailjsondata-sql-injection2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63175-cross-capture-session-data-leakage-due-to-shared-mutable-state-in-looklyloo-playwrigh2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55445-qinglong-incomplete-fix-for-cve-2026-3965-improper-authentication2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55445-qinglong-incomplete-fix-for-cve-2026-3965-improper-authentication-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55652-wekan-header-login-ip-allowlist-bypass-via-x-forwarded-for-spoofing-in-wekan-allows-u-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55576-maaassistantarknights-pr-title-expression-injection-in-release-preparationyml-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55576-maaassistantarknights-pr-title-expression-injection-in-release-preparationyml2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55234-wekan-broken-access-control-any-authenticated-user-can-move-their-cardslistsswimlanes-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54458-avideo-unauthenticated-stored-dom-cross-site-scripting-via-per-client-metadata-broadc-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54458-avideo-unauthenticated-stored-dom-cross-site-scripting-via-per-client-metadata-broadc2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53446-wekan-server-side-request-forgery-ssrf-via-webhook-integration-urls2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53447-wekan-cloneboard-meteor-method-has-no-authorization-check-any-user-can-clone-read-any2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52893-wekan-oidc-account-takeover-via-unconditional-email-based-account-merge-in-oncreateus2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52893-wekan-oidc-account-takeover-via-unconditional-email-based-account-merge-in-oncreateus-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53445-wekan-authorization-bypass-in-copyboard-ddp-method-allows-any-user-to-copy-private-bo2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52890-wekan-arbitrary-file-read-and-server-dos-via-attachment-versionsoriginalpath2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53444-wekan-missing-authorization-on-oidc-meteor-methods-allows-privilege-escalation-to-adm2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52891-wekan-shell-injection-via-avatar-upload2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52892-wekan-read-only-board-members-can-createmodifydelete-custom-fields-privilege-escalati2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52891-wekan-shell-injection-via-avatar-upload-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50182-avideo-has-unauthenticated-reflected-xss-via-getsearch-in-youtubeapi-gallery-paginati2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49279-wwbn-avideo-stored-xss-via-autoevalcodeonhtml-bypass-in-messagesqlite-websocket-handl2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48795-incomplete-fix-for-cve-2026-25754-in-adonisjsbodyparser-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48795-incomplete-fix-for-cve-2026-25754-in-adonisjsbodyparser2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45313-sandboxie-plus-sandboxie-apc-injection-sandbox-escape2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-38754-busybox-heap-buffer-overflow2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-38974-dulwich-missing-ssh-host-key-verification2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-38755-busybox-evalcommand-heap-buffer-overflow2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-38752-busybox-awk-stack-overflow2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-36590-nanomq-denial-of-service-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62314-anubis-policy-bypass-via-client-controlled-x-original-uri-header2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56679-9router-mass-assignment-in-patch-apisettings-allows-authenticated-authorization-downg-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62361-listmonk-sql-injection-in-apisubscribersexport-bypasses-table-access-control-leaking2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55608-n8n-mcp-incorrect-authorization-can-expose-default-scope-workflow-version-backups-in2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62312-9router-authenticated-rce-via-unvalidated-mcp-plugin-arguments-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55410-nocobase-backup-restore-schema-name-allows-command-injection2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56678-9router-kiro-region-injection-allows-authenticated-ssrf-with-authorization-header-for2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55399-resource-exhaustion-vulnerability-in-the-secure-access-publisher2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62312-9router-authenticated-rce-via-unvalidated-mcp-plugin-arguments2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56679-9router-mass-assignment-in-patch-apisettings-allows-authenticated-authorization-downg2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59950-mcp-python-sdk-websocket-server-transport-does-not-support-hostorigin-validation2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54052-n8n-mcp-cross-tenant-access-to-workflow-version-backups-in-multi-tenant-http-deployme-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-51380-tenda-ac10-buffer-overflow-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54052-n8n-mcp-cross-tenant-access-to-workflow-version-backups-in-multi-tenant-http-deployme2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52888-nocobase-sensitive-data-exposure-via-sql-blacklist-bypass2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55398-memory-management-vulnerability-in-secure-access-clients2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52887-nocobase-sql-injection-in-apimyinappchannelslist-filter-to-pg-superuser-rce-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52887-nocobase-sql-injection-in-apimyinappchannelslist-filter-to-pg-superuser-rce2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49353-9router-local-only-access-gate-bypass-in-9router-via-host-header-spoofing2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49352-9router-hardcoded-default-fallback-jwt-secret-allows-authentication-bypass2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49352-9router-hardcoded-default-fallback-jwt-secret-allows-authentication-bypass-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46339-9router-unauthenticated-remote-code-execution-via-unprotected-mcp-custom-plugin-route-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46339-9router-unauthenticated-remote-code-execution-via-unprotected-mcp-custom-plugin-route2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15921-nvm-path-traversal-via-a-malicious-mirrors-lts-codename-writes-outside-the-alias-dire2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-38753-busybox-awksub-use-after-free-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-33684-avideos-privilege-avideo-escalation-via-unguarded-permission-parameters-in-signup-api2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-33444-memory-management-vulnerability-in-secure-access-servers2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-33445-memory-management-vulnerability-in-secure-access-servers-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55652-wekan-header-login-ip-allowlist-bypass-via-x-forwarded-for-spoofing-in-wekan-allows-u2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55234-wekan-broken-access-control-any-authenticated-user-can-move-their-cardslistsswimlanes2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50183-wwbn-avideo-stored-xss-via-hostile-youtube-video-title-in-avideo-youtubeapi-gallery-s2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49445-cilium-sensitive-information-disclosure-and-cluster-disruption-via-local-envoy-admin2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46684-dataease-unauthorized-command-execution-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45534-dataease-rce-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45419-dataease-arbitrary-file-write-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45533-dataease-path-traversal-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45535-dataease-stored-sql-injection-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45320-dataease-data-dashboard-sqlvariable-transfilter-unfiltered-sql-injection2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45417-dataease-sql-injection-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-40952-privilge-misconfiguration-in-secure-access-installers2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-33445-memory-management-vulnerability-in-secure-access-servers2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62355-tdengine-standard-user-permission-unexpect2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62947-openwrt-acl-bypass-and-arbitrary-root-file-read-via-cgi-io-cgi-download2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62353-tdengine-authenticated-out-of-bounds-read-in-sql-lexer-tgettoken2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62350-tdengine-udf-lead-to-rce2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62348-tdengine-kill-ssmigrate-missing-authorization-lets-low-privilege-users-interrupt-shar2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62349-tdengine-off-by-one-buffer-overflow2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62349-tdengine-off-by-one-buffer-overflow-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62351-tdengine-unauthenticated-remote-denial-of-service-via-out-of-bounds-read-in-transdeco2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54443-dashy-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49987-repomix-command-injection-rce-via-remote-branch-argument-injection2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49988-repomix-attachpackedoutput-can-bypass-file-read-secret-scanning-for-supported-local-f2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46485-dash-users-can-write-to-config-despire-permissions-oidc-tested2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46485-dash-users-can-write-to-config-despire-permissions-oidc-tested-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46421-supply-chain-compromise-via-malicious-package-versions-cap-jssqlite-cap-jspostgres-ca2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46421-supply-chain-compromise-via-malicious-package-versions-cap-jssqlite-cap-jspostgres-ca-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-26032-apache-ivy-packagerresolver-path-traversal-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15895-os-command-injection-in-jsii-diff-in-aws-jsii-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15746-credential-disclosure-in-strands-agents-tools-elasticsearchmemory-tool2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12997-gravity-forms-2104-unauthenticated-arbitrary-file-read-via-gformuploadedfiles-paramet2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15895-os-command-injection-in-jsii-diff-in-aws-jsii2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=tuxbot-v3-evolution-shows-signs-of-llm-assisted-iot-botnet-development2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-8055-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62948-openwrt-odhcpdluci-unauthenticated-dhcpv6-client-can-inject-lease-file-lines-via-fqdn-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62948-openwrt-odhcpdluci-unauthenticated-dhcpv6-client-can-inject-lease-file-lines-via-fqdn2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59255-bloodhound-missing-authorization-on-custom-node-management-api2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62389-ws-8211-default-maxfragments-allows-memory-exhaustion-dos2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59258-immich-303-shared-album-editor-ownership-takeover-via-updateuser-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61643-fastgpt-workflow-runtime-can-execute-another-users-private-http-toolset2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59258-immich-303-shared-album-editor-ownership-takeover-via-updateuser2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62389-ws-8211-default-maxfragments-allows-memory-exhaustion-dos-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58660-kanboard-boardajaxcontroller-missing-ownership-check-via-drag-and-drop-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58659-pytorch-lightning-arbitrary-code-execution-via-instantiator-hyperparameter2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58659-pytorch-lightning-arbitrary-code-execution-via-instantiator-hyperparameter-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58658-gpustack-unauthenticated-information-disclosure-via-worker-endpoints2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58660-kanboard-boardajaxcontroller-missing-ownership-check-via-drag-and-drop2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53517-better-auth-oauth-provider-refresh-token-rotation-race-condition-allows-concurrent-re2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58658-gpustack-unauthenticated-information-disclosure-via-worker-endpoints-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50562-fastgpt-untrusted-pr-artifacts-are-pushed-and-deployed-by-privileged-preview-workflow2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53516-better-auth-account-takeover-via-oauth-auto-link-to-unverified-pre-registered-email2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53512-better-auth-oauth-refresh-token-replay-via-missing-client-authentication-on-oidc-prov-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53513-better-auth-server-side-request-forgery-via-unvalidated-oidc-endpoints-on-better-auth2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-40501-cherry-studio-rce-via-searchservice-nodeintegration-misconfiguration2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-20296-spl-command-safeguards-bypass-through-cross-site-request-forgery-csrf-in-deployment-s-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-10673-out-of-bounds-write-in-adin2111adin1110-oa-spi-ethernet-rx-frame-reassembly2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12382-aap-gateway-missing-requestheaderstoremove-allows-mtls-bypass-via-subject-header-spoo-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12382-aap-gateway-missing-requestheaderstoremove-allows-mtls-bypass-via-subject-header-spoo2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-20298-sensitive-information-disclosure-through-the-storagepasswords-rest-endpoint-in-splunk2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-20296-spl-command-safeguards-bypass-through-cross-site-request-forgery-csrf-in-deployment-s2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-20297-path-traversal-through-explicitappname-in-the-app-install-rest-endpoint-in-splunk-ent2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53512-better-auth-oauth-refresh-token-replay-via-missing-client-authentication-on-oidc-prov2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53518-better-auth-oauth-provider-race-condition-in-authorization-code-exchange-enables-mult2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62378-rustfs-console-critical-stored-xss-in-preview-modal-leading-to-administrative-account-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62378-rustfs-console-critical-stored-xss-in-preview-modal-leading-to-administrative-account2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62248-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62168-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62165-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62169-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61839-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61841-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62287-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62178-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62177-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62172-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62174-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62180-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62173-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62164-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61606-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59955-apollo-configservice-access-key-authentication-bypass-via-raw-config-file-appid-parsi2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61710-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61829-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52842-lightpandaurl-parser-misidentifies-page-origin-for-urls-containing-in-the-path-same-o2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52843-lightpanda-fetch-and-xmlhttprequest-attach-session-cookies-to-cross-origin-requests-r2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-20150-cisco-roomos-security-hardening-release-access-control-vulnerabilities2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-20156-cisco-roomos-security-hardening-release-buffer-management-vulnerabilities2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62685-file-browser-colliding-username-normalization-gives-two-users-the-same-home-directory2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61828-nixosmysql-servicesmysql-is-configured-with-insecure-authentication-by-default-when-u2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-60005-nginx-ngxhttpslicemodule-vulnerability-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55242-erpnext-server-side-template-injection-ssti-in-batch-autonaming-via-stock-settingsnam2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50148-metabase-remote-code-execution-via-snowflake-jdbc-driver-arbitrary-file-write-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47158-vaultwarden-csrf-in-sso-authorization-flow2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-44986-penpot-pre-authenticated-account-takeover-via-team-invitation-token-prepare-register-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45805-penpot-mcp-repl-server-binds-to-0000-with-unauthenticated-execute-endpoint-rce-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=okobot-malware-framework-injects-seed-phrase-phishing-into-ledger-and-trezor-apps2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50148-metabase-remote-code-execution-via-snowflake-jdbc-driver-arbitrary-file-write2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62294-flameshot-octou-symlink-attack-via-predictable-tmp-path-in-flameshot-open-with2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61736-lightrag-cors-wildcard-credentials-enables-any-origin-credentialed-requests2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61740-lightrag-authentication-bypass-hardcoded-defaulttokensecret-and-public-auth-status-de2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61836-directus-authorization-dependent-response-served-from-unsegmented-cache-key2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61684-fastgpt-unauthenticated-cross-tenant-data-access-via-forgeable-plugin-invoke-jwt-defa2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61740-lightrag-authentication-bypass-hardcoded-defaulttokensecret-and-public-auth-status-de-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61836-directus-authorization-dependent-response-served-from-unsegmented-cache-key-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61736-lightrag-cors-wildcard-credentials-enables-any-origin-credentialed-requests-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61835-directus-ssrf-protection-bypass-via-0000-in-file-import2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61684-fastgpt-unauthenticated-cross-tenant-data-access-via-forgeable-plugin-invoke-jwt-defa-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-60062-nginx-agent-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-60065-nginx-plus-ngxstreammqttfiltermodule-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61613-cursor-cloud-agent-browser-sandbox-escape2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61646-fastgpt-shared-axios-ssrf-guard-validates-only-the-initial-url-before-following-redir2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61644-fastgpt-apicorechatrecordgetcollectionquote-can-disclose-cross-tenant-dataset-text-du2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59762-big-ip-http2-vulnerability-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54563-cloudreve-path-traversal-broken-access-control-in-cloudreve-webdav-dav-scoped-dav-cre2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56434-nginx-ngxhttpssimodule-vulnerability-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55723-nginx-ingress-controller-vulnerability-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54562-cloudreve-non-admin-remote-download-users-can-ssrf-loopbackinternal-services-and-read2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52865-nginx-ingress-controller-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54560-cloudreve-oauth-access-tokens-bypass-scope-enforcement-due-to-missing-clientid-claim2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-42533-nginx-map-directive-and-regex-matching-vulnerability-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-33213-redash-open-redirect-vulnerability-in-post-login-redirect-handling2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45805-penpot-mcp-repl-server-binds-to-0000-with-unauthenticated-execute-endpoint-rce2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-44986-penpot-pre-authenticated-account-takeover-via-team-invitation-token-prepare-register2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45806-penpot-authenticated-ssrf-in-remote-image-import-via-create-file-media-object-from-ur2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-60005-nginx-ngxhttpslicemodule-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56434-nginx-ngxhttpssimodule-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-42533-nginx-map-directive-and-regex-matching-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59762-big-ip-http2-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55723-nginx-ingress-controller-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-43637-cornac-260-path-traversal-via-extractarchive-in-downloadpy2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=firefox-chrome-adobe-and-vmware-updates-fix-multiple-critical-security-flaws2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=firefox-chrome-adobe-and-vmware-updates-fix-multiple-critical-security-flaws-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58558-file-system-permission-control-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58559-vibration-service-denial-of-service-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58557-expedition-mode-design-defect-denial-of-service2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58556-bluetooth-module-improper-authorization-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58555-card-module-permission-bypass-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58554-settings-module-broken-access-control2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58553-image-codec-module-out-of-bounds-read-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58550-image-codec-module-out-of-bounds-read-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58551-image-codec-module-out-of-bounds-read-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58552-image-codec-module-out-of-bounds-read-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58549-image-codec-out-of-bounds-read-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46459-missing-authorization-in-icu-scandinavia-boomerang2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46458-credential-exposure-in-icu-scandinavia-boomerang2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15779-samba-winbind-samba-pamwinbind-mkhomedir-chowns-critical-system-paths-without-validat2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15809-githubcomcri-ocri-o-fix-bypass-for-cve-2022-4318-etcpasswd-injection-via-home-env2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61873-grav-before-918-arbitrary-file-write-via-twig-processed-filename2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61869-imagemagick-before-712-26-memory-leak-in-miff-encoder2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61872-imagemagick-before-712-26-memory-leak-via-tiff-encoder2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61873-grav-before-918-arbitrary-file-write-via-twig-processed-filename-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61871-imagemagick-before-712-26-memory-leak-in-icon-decoder2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61865-imagemagick-before-712-26-memory-leak-in-hough-lines2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61868-imagemagick-before-712-26-memory-leak-in-yuv-decoder2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61863-imagemagick-before-712-26-memory-leak-in-tiff-encoder2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61867-imagemagick-before-712-26-memory-leak-in-tiff-encoder2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61864-imagemagick-before-712-26-memory-leak-in-log-colorspace2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61866-imagemagick-before-712-26-memory-leak-in-jng-encoder2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61457-grav-before-103-remote-code-execution-via-file-upload-extension-bypass2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61443-praisonai-before-1678-remote-code-execution-via-skilltools2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61451-grav-before-104-password-reset-token-poisoning-via-adminbaseurl2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61446-praisonai-before-1678-remote-code-execution-via-plugin-auto-discovery2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61430-praisonai-before-1678-dns-rebinding-ssrf-via-webcrawl2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61436-praisonai-before-4678-missing-webhook-signature-verification2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61435-praisonai-before-4678-authentication-bypass-via-host-header-spoofing2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61433-praisonai-before-4678-code-injection-via-api-deployment-generator2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-60085-praisonai-before-4678-unenforced-security-policy-in-subprocess-sandbox2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58655-grav-flex-objects-server-side-template-injection-via-dynamic-titles2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57996-phpmyfaq-privilege-escalation-via-missing-superadmin-guard-in-useradd-endpoint2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56699-wazuh-manager-ndjson-injection-in-inventorysync-via-agent-controlled-datavalueindex2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56400-open-webui-remote-code-execution-via-cors-misconfiguration-and-session-validation2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56339-capgo-unauthenticated-organization-existence-enumeration-via-rescindinvitation-rpc2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56398-open-webui-stored-cross-site-scripting-via-oauth-picture-claim-svg-data-uri2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=sase-has-an-ai-blind-spot-inspecting-packets-is-no-longer-enough2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59235-missing-authorization-in-prospero-flow-crm-allows-low-privileged-users-to-read-all-ba-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-40633-dell-powerscale-onefs-information-disclosure-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59236-authorization-bypass-in-prospero-flow-crm-excel-import-allows-cross-tenant-record-inj2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=researcher-drops-new-windows-zero-day-poc-hours-after-microsoft-patch-tuesday2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=new-webinar-closing-the-approval-gap-in-ai-era-ad-tech2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cursor-flaw-lets-malicious-cloned-repositories-trigger-windows-code-execution-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cursor-flaw-lets-malicious-cloned-repositories-trigger-windows-code-execution2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=vulnerabilities-in-icu-scandinavia-boomerang-software2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59235-missing-authorization-in-prospero-flow-crm-allows-low-privileged-users-to-read-all-ba2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58077-joomla-extension-weeblrcom-unauthenticated-stored-xss-in-4analytics-502-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57821-apache-fineract-office-list-sql-injection-via-subquery-in-orderby2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49501-dell-powerscale-onefs-improper-privilege-management-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57833-joomla-extension-weeblrcom-unauthenticated-stored-xss-in-4analytics-502-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57821-apache-fineract-office-list-sql-injection-via-subquery-in-orderby-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56287-apache-fineract-boolean-sql-injection-in-client-search-api-orderby-parameter-leading2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-8281-rejected-reason-this-cve-id-has-been-rejected-or2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-35152-apache-fineract-sql-injection-in-runreports-endpoint2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=adobe-updates-voor-kritieke-coldfusion-lekken-zo-snel-mogelijk-installeren2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cisa-adds-sonicwall-sma1000-vulnerabilities-to-kev-catalog-following-active-exploitation2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=mozilla-waarschuwt-voor-kritieke-firefox-lekken-met-publieke-exploitcode2026-07-15weekly0.8