https://zerodaydigest.net/hourly1.0 https://zerodaydigest.net/index.htmlhourly1.0 https://zerodaydigest.net/privacy.html0.3 https://zerodaydigest.net/terms.html0.3 https://zerodaydigest.net/article.html?slug=cve-2023-49900-origin-validation-error-in-x-rite-ma-t6-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2023-49899-origin-validation-error-in-x-rite-ma-t6-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-22752-spring-security-authorization-server-dynamic-client-registration-endpoints-perform-in-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2023-49899-origin-validation-error-in-x-rite-ma-t62026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2023-49900-origin-validation-error-in-x-rite-ma-t62026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=ai-can-find-bugs-but-human-knowledge-still-proves-them2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=unpatched-shark-vacuum-flaw-could-let-attackers-control-other-vacuums-region-wide2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58078-joomla-extension-themexpertcom-unauthenticated-sql-injection-in-quix-page-builder-pro-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-7543-breakdance-271-unauthenticated-stored-cross-site-scripting-via-webhook-action-details2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6424-use-after-free-vulnerability-in-eset-security-products-for-linux2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6423-local-privilege-escalation-via-unauthenticated-alpc-in-eset-inspect-connector-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15610-wpbot-856-missing-authorization-to-authenticated-subscriber-arbitrary-rag-document-re2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15407-themify-builder-777-missing-authorization-to-authenticated-subscriber-arbitrary-post2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15651-wp-tripadvisor-review-slider-146-authenticated-administrator-sql-injection-via-filter2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15727-wp-bulk-delete-142-authenticated-administrator-sql-injection-via-deleteuserroles-para2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15350-the-cache-purger-2320-missing-authorization-to-authenticated-subscriber-arbitrary-log2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15005-loco-translate-285-cross-site-request-forgery-to-remote-code-execution-via-template-p-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15106-wpbot-856-missing-authorization-to-unauthenticated-arbitrary-chat-session-deletion-vi2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15008-uncanny-automator-7314-unauthenticated-php-object-injection-to-arbitrary-file-deletio2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15008-uncanny-automator-7314-unauthenticated-php-object-injection-to-arbitrary-file-deletio-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15324-sysbasics-customize-my-account-for-woocommerce-4414-authenticated-shop-manager-stored2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15099-wp-delicious-1102-authenticated-contributor-stored-cross-site-scripting-via-steps-blo2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15021-wpforo-forum-311-authenticated-subscriber-stored-cross-site-scripting-via-location-pr2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15103-wpfunnels-3128-authenticated-funnel-manager-privilege-escalation-via-groupid-path-par2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15103-wpfunnels-3128-authenticated-funnel-manager-privilege-escalation-via-groupid-path-par-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15022-tutor-lms-400-authenticated-subscriber-sql-injection-via-stored-quiz-answer-array2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15005-loco-translate-285-cross-site-request-forgery-to-remote-code-execution-via-template-p2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13754-tickera-3600-authenticated-staff-sql-injection-via-s-parameter2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13767-quiz-and-survey-master-qsm-1120-authenticated-custom-sql-injection-via-pages-paramete2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13755-tickera-3600-authenticated-contributor-stored-cross-site-scripting-via-pricewrapper-s2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13741-digits-wordpress-mobile-number-signup-and-login-9105-authenticated-subscriber-privile-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13741-digits-wordpress-mobile-number-signup-and-login-9105-authenticated-subscriber-privile2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=zoom-waarschuwt-voor-kritiek-lek-dat-overname-accounts-mogelijk-maakt2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=openais-gpt-red-automates-prompt-injection-testing-to-harden-gpt-56-sol2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-22752-spring-security-authorization-server-dynamic-client-registration-endpoints-perform-in2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58078-joomla-extension-themexpertcom-unauthenticated-sql-injection-in-quix-page-builder-pro2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6423-local-privilege-escalation-via-unauthenticated-alpc-in-eset-inspect-connector2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=zoom-patches-critical-windows-flaw-that-could-enable-account-takeover-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=zoom-patches-critical-windows-flaw-that-could-enable-account-takeover2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12979-funnelkit-31506-admin-arbitrary-file-deletion-via-path-traversal-in-template-importer2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12907-rtmkit-addons-for-elementor-209-author-site-wide-theme-builder-template-creation-and2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12869-header-footer-builder-for-elementor-121-contributor-stored-xss-via-template-import2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12906-rtmkit-addons-for-elementor-209-contributor-private-post-title-disclosure2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15925-improper-tls-hostname-verification-in-snowflake-connector-for-python-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12585-abandoned-cart-lite-for-woocommerce-682-unauthenticated-account-takeover-via-malleabl2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12684-customer-reviews-for-woocommerce-51130-unauthenticated-arbitrary-media-upload-via-cru2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12978-funnelkit-31506-reflected-xss-via-divi-optin-form2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12525-redux-framework-4513-subscriber-privilege-escalation-to-administrator2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-11371-betterdocs-455-unauthenticated-stored-xss-via-ai-doc-summarizer-prompt-injection2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12510-ai-engine-355-subscriberchatbot-discussion-disclosure-and-takeover-via-idor2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12395-wp-job-portal-255-subscriber-sql-injection-via-applied-resumes-ta-parameter2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12492-happy-coders-otp-login-for-woocommerce-28-unauthenticated-account-takeover-via-hcotpa2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-11866-latepoint-563-multiple-privileged-actions-via-csrf2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15925-improper-tls-hostname-verification-in-snowflake-connector-for-python2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15458-seo-booster-731-authenticated-administrator-sql-injection-via-sortfield-parameter2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15445-seo-booster-731-authenticated-administrator-sql-injection-via-orderby-parameter2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15306-product-feed-manager-for-woocommerce-761-reflected-cross-site-scripting-via-s-search2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15013-saml-single-sign-on-543-unauthenticated-authentication-bypass-via-samlresponse-parame-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15013-saml-single-sign-on-543-unauthenticated-authentication-bypass-via-samlresponse-parame2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13042-rpb-chessboard-812-unauthenticated-stored-cross-site-scripting-via-comment-content2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53366-ipv4-account-for-fraggap-on-the-paged-allocation-path2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-21729-loki-detectedfields-query-limits-results-in-unbounded-memory-allocation2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15652-easy-accordion-316-authenticated-contributor-stored-cross-site-scripting-via-align-bl2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12409-landing-page-builder-1536-cross-site-request-forgery-to-ulpbadmindata-ajax-action2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-14987-givewp-4163-authenticated-give-worker-stored-cross-site-scripting-via-twittermessage2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12941-multivendorx-509-authenticated-store-owner-sql-injection-via-orderby-parameter2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15336-catch-themes-demo-import-33-missing-authorization-to-authenticated-subscriber-single2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12434-list-category-posts-0950-missing-authorization-to-authenticated-contributor-sensitive2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12753-advance-product-search-voice-ajax-search-for-woocommerce-144-unauthenticated-sql-inje2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13005-mxchat-3210-authenticated-admin-stored-cross-site-scripting-via-intromessage-setting2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-1609-orgkeycloakkeycloak-quarkus-server-keycloak-unauthorized-access-via-jwt-authorization-12026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48863-libsolv-stack-based-buffer-overflow-in-libsolv-eddsa-pgp-signature-verification-allow2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-23538-feast-resource-exhaustion-via-websocket-endpoint2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-3842-qemu-kvm-hypervsyndbg-missing-mapped-length-guard-after-cpuphysicalmemorymap-causes-ho2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15909-rafymrx-toko-online-roti-addphp-authorization2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-1609-orgkeycloakkeycloak-quarkus-server-keycloak-unauthorized-access-via-jwt-authorization2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15907-h3c-secpath-f1000-c8300-glogfwnbcmailjsondata-sql-injection2026-07-16weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63175-cross-capture-session-data-leakage-due-to-shared-mutable-state-in-looklyloo-playwrigh2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55445-qinglong-incomplete-fix-for-cve-2026-3965-improper-authentication-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55445-qinglong-incomplete-fix-for-cve-2026-3965-improper-authentication2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55576-maaassistantarknights-pr-title-expression-injection-in-release-preparationyml2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55652-wekan-header-login-ip-allowlist-bypass-via-x-forwarded-for-spoofing-in-wekan-allows-u-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55576-maaassistantarknights-pr-title-expression-injection-in-release-preparationyml-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55234-wekan-broken-access-control-any-authenticated-user-can-move-their-cardslistsswimlanes-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54458-avideo-unauthenticated-stored-dom-cross-site-scripting-via-per-client-metadata-broadc-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54458-avideo-unauthenticated-stored-dom-cross-site-scripting-via-per-client-metadata-broadc2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53446-wekan-server-side-request-forgery-ssrf-via-webhook-integration-urls2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53447-wekan-cloneboard-meteor-method-has-no-authorization-check-any-user-can-clone-read-any2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52893-wekan-oidc-account-takeover-via-unconditional-email-based-account-merge-in-oncreateus-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53445-wekan-authorization-bypass-in-copyboard-ddp-method-allows-any-user-to-copy-private-bo2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52893-wekan-oidc-account-takeover-via-unconditional-email-based-account-merge-in-oncreateus2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52892-wekan-read-only-board-members-can-createmodifydelete-custom-fields-privilege-escalati2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53444-wekan-missing-authorization-on-oidc-meteor-methods-allows-privilege-escalation-to-adm2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52891-wekan-shell-injection-via-avatar-upload-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52891-wekan-shell-injection-via-avatar-upload2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52890-wekan-arbitrary-file-read-and-server-dos-via-attachment-versionsoriginalpath2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50182-avideo-has-unauthenticated-reflected-xss-via-getsearch-in-youtubeapi-gallery-paginati2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49279-wwbn-avideo-stored-xss-via-autoevalcodeonhtml-bypass-in-messagesqlite-websocket-handl2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48795-incomplete-fix-for-cve-2026-25754-in-adonisjsbodyparser2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48795-incomplete-fix-for-cve-2026-25754-in-adonisjsbodyparser-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45313-sandboxie-plus-sandboxie-apc-injection-sandbox-escape2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-38755-busybox-evalcommand-heap-buffer-overflow2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-38974-dulwich-missing-ssh-host-key-verification2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-38754-busybox-heap-buffer-overflow2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-38752-busybox-awk-stack-overflow2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-36590-nanomq-denial-of-service-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62314-anubis-policy-bypass-via-client-controlled-x-original-uri-header2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56678-9router-kiro-region-injection-allows-authenticated-ssrf-with-authorization-header-for2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56679-9router-mass-assignment-in-patch-apisettings-allows-authenticated-authorization-downg-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55399-resource-exhaustion-vulnerability-in-the-secure-access-publisher2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55410-nocobase-backup-restore-schema-name-allows-command-injection2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62361-listmonk-sql-injection-in-apisubscribersexport-bypasses-table-access-control-leaking2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55608-n8n-mcp-incorrect-authorization-can-expose-default-scope-workflow-version-backups-in2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62312-9router-authenticated-rce-via-unvalidated-mcp-plugin-arguments-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62312-9router-authenticated-rce-via-unvalidated-mcp-plugin-arguments2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56679-9router-mass-assignment-in-patch-apisettings-allows-authenticated-authorization-downg2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59950-mcp-python-sdk-websocket-server-transport-does-not-support-hostorigin-validation2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54052-n8n-mcp-cross-tenant-access-to-workflow-version-backups-in-multi-tenant-http-deployme-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-51380-tenda-ac10-buffer-overflow-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52887-nocobase-sql-injection-in-apimyinappchannelslist-filter-to-pg-superuser-rce2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54052-n8n-mcp-cross-tenant-access-to-workflow-version-backups-in-multi-tenant-http-deployme2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52888-nocobase-sensitive-data-exposure-via-sql-blacklist-bypass2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55398-memory-management-vulnerability-in-secure-access-clients2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52887-nocobase-sql-injection-in-apimyinappchannelslist-filter-to-pg-superuser-rce-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49353-9router-local-only-access-gate-bypass-in-9router-via-host-header-spoofing2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49352-9router-hardcoded-default-fallback-jwt-secret-allows-authentication-bypass2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49352-9router-hardcoded-default-fallback-jwt-secret-allows-authentication-bypass-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46339-9router-unauthenticated-remote-code-execution-via-unprotected-mcp-custom-plugin-route-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46339-9router-unauthenticated-remote-code-execution-via-unprotected-mcp-custom-plugin-route2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15921-nvm-path-traversal-via-a-malicious-mirrors-lts-codename-writes-outside-the-alias-dire2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-33444-memory-management-vulnerability-in-secure-access-servers2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-33684-avideos-privilege-avideo-escalation-via-unguarded-permission-parameters-in-signup-api2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-38753-busybox-awksub-use-after-free-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-33445-memory-management-vulnerability-in-secure-access-servers-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55652-wekan-header-login-ip-allowlist-bypass-via-x-forwarded-for-spoofing-in-wekan-allows-u2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55234-wekan-broken-access-control-any-authenticated-user-can-move-their-cardslistsswimlanes2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50183-wwbn-avideo-stored-xss-via-hostile-youtube-video-title-in-avideo-youtubeapi-gallery-s2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49445-cilium-sensitive-information-disclosure-and-cluster-disruption-via-local-envoy-admin2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46684-dataease-unauthorized-command-execution-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45533-dataease-path-traversal-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45419-dataease-arbitrary-file-write-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45534-dataease-rce-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45535-dataease-stored-sql-injection-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45320-dataease-data-dashboard-sqlvariable-transfilter-unfiltered-sql-injection2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45417-dataease-sql-injection-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-40952-privilge-misconfiguration-in-secure-access-installers2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-33445-memory-management-vulnerability-in-secure-access-servers2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62355-tdengine-standard-user-permission-unexpect2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62947-openwrt-acl-bypass-and-arbitrary-root-file-read-via-cgi-io-cgi-download2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62353-tdengine-authenticated-out-of-bounds-read-in-sql-lexer-tgettoken2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62351-tdengine-unauthenticated-remote-denial-of-service-via-out-of-bounds-read-in-transdeco2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62350-tdengine-udf-lead-to-rce2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62349-tdengine-off-by-one-buffer-overflow-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62348-tdengine-kill-ssmigrate-missing-authorization-lets-low-privilege-users-interrupt-shar2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62349-tdengine-off-by-one-buffer-overflow2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54443-dashy-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49988-repomix-attachpackedoutput-can-bypass-file-read-secret-scanning-for-supported-local-f2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49987-repomix-command-injection-rce-via-remote-branch-argument-injection2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46485-dash-users-can-write-to-config-despire-permissions-oidc-tested-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46485-dash-users-can-write-to-config-despire-permissions-oidc-tested2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46421-supply-chain-compromise-via-malicious-package-versions-cap-jssqlite-cap-jspostgres-ca2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46421-supply-chain-compromise-via-malicious-package-versions-cap-jssqlite-cap-jspostgres-ca-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-26032-apache-ivy-packagerresolver-path-traversal-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15895-os-command-injection-in-jsii-diff-in-aws-jsii-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15746-credential-disclosure-in-strands-agents-tools-elasticsearchmemory-tool2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12997-gravity-forms-2104-unauthenticated-arbitrary-file-read-via-gformuploadedfiles-paramet2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15895-os-command-injection-in-jsii-diff-in-aws-jsii2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=tuxbot-v3-evolution-shows-signs-of-llm-assisted-iot-botnet-development2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-8055-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62948-openwrt-odhcpdluci-unauthenticated-dhcpv6-client-can-inject-lease-file-lines-via-fqdn-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62948-openwrt-odhcpdluci-unauthenticated-dhcpv6-client-can-inject-lease-file-lines-via-fqdn2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62389-ws-8211-default-maxfragments-allows-memory-exhaustion-dos-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59258-immich-303-shared-album-editor-ownership-takeover-via-updateuser2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61643-fastgpt-workflow-runtime-can-execute-another-users-private-http-toolset2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59258-immich-303-shared-album-editor-ownership-takeover-via-updateuser-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59255-bloodhound-missing-authorization-on-custom-node-management-api2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62389-ws-8211-default-maxfragments-allows-memory-exhaustion-dos2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58658-gpustack-unauthenticated-information-disclosure-via-worker-endpoints2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58659-pytorch-lightning-arbitrary-code-execution-via-instantiator-hyperparameter-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58660-kanboard-boardajaxcontroller-missing-ownership-check-via-drag-and-drop-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58659-pytorch-lightning-arbitrary-code-execution-via-instantiator-hyperparameter2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58658-gpustack-unauthenticated-information-disclosure-via-worker-endpoints-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53517-better-auth-oauth-provider-refresh-token-rotation-race-condition-allows-concurrent-re2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58660-kanboard-boardajaxcontroller-missing-ownership-check-via-drag-and-drop2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53512-better-auth-oauth-refresh-token-replay-via-missing-client-authentication-on-oidc-prov-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53516-better-auth-account-takeover-via-oauth-auto-link-to-unverified-pre-registered-email2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50562-fastgpt-untrusted-pr-artifacts-are-pushed-and-deployed-by-privileged-preview-workflow2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53513-better-auth-server-side-request-forgery-via-unvalidated-oidc-endpoints-on-better-auth2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-40501-cherry-studio-rce-via-searchservice-nodeintegration-misconfiguration2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-20296-spl-command-safeguards-bypass-through-cross-site-request-forgery-csrf-in-deployment-s-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12382-aap-gateway-missing-requestheaderstoremove-allows-mtls-bypass-via-subject-header-spoo-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-10673-out-of-bounds-write-in-adin2111adin1110-oa-spi-ethernet-rx-frame-reassembly2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12382-aap-gateway-missing-requestheaderstoremove-allows-mtls-bypass-via-subject-header-spoo2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-20298-sensitive-information-disclosure-through-the-storagepasswords-rest-endpoint-in-splunk2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-20296-spl-command-safeguards-bypass-through-cross-site-request-forgery-csrf-in-deployment-s2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-20297-path-traversal-through-explicitappname-in-the-app-install-rest-endpoint-in-splunk-ent2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53512-better-auth-oauth-refresh-token-replay-via-missing-client-authentication-on-oidc-prov2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53518-better-auth-oauth-provider-race-condition-in-authorization-code-exchange-enables-mult2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62378-rustfs-console-critical-stored-xss-in-preview-modal-leading-to-administrative-account-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62378-rustfs-console-critical-stored-xss-in-preview-modal-leading-to-administrative-account2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62165-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61839-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62169-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62168-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62248-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62180-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62173-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62174-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62164-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61841-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62287-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62172-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62177-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62178-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61710-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61606-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59955-apollo-configservice-access-key-authentication-bypass-via-raw-config-file-appid-parsi2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61829-rejected-reason-reject-do-not-use-this-cand2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52842-lightpandaurl-parser-misidentifies-page-origin-for-urls-containing-in-the-path-same-o2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52843-lightpanda-fetch-and-xmlhttprequest-attach-session-cookies-to-cross-origin-requests-r2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-20156-cisco-roomos-security-hardening-release-buffer-management-vulnerabilities2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-20150-cisco-roomos-security-hardening-release-access-control-vulnerabilities2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62685-file-browser-colliding-username-normalization-gives-two-users-the-same-home-directory2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61828-nixosmysql-servicesmysql-is-configured-with-insecure-authentication-by-default-when-u2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-60005-nginx-ngxhttpslicemodule-vulnerability-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55242-erpnext-server-side-template-injection-ssti-in-batch-autonaming-via-stock-settingsnam2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50148-metabase-remote-code-execution-via-snowflake-jdbc-driver-arbitrary-file-write-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47158-vaultwarden-csrf-in-sso-authorization-flow2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-44986-penpot-pre-authenticated-account-takeover-via-team-invitation-token-prepare-register-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45805-penpot-mcp-repl-server-binds-to-0000-with-unauthenticated-execute-endpoint-rce-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=okobot-malware-framework-injects-seed-phrase-phishing-into-ledger-and-trezor-apps2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50148-metabase-remote-code-execution-via-snowflake-jdbc-driver-arbitrary-file-write2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62294-flameshot-octou-symlink-attack-via-predictable-tmp-path-in-flameshot-open-with2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61740-lightrag-authentication-bypass-hardcoded-defaulttokensecret-and-public-auth-status-de2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61836-directus-authorization-dependent-response-served-from-unsegmented-cache-key2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61736-lightrag-cors-wildcard-credentials-enables-any-origin-credentialed-requests2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61684-fastgpt-unauthenticated-cross-tenant-data-access-via-forgeable-plugin-invoke-jwt-defa2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61684-fastgpt-unauthenticated-cross-tenant-data-access-via-forgeable-plugin-invoke-jwt-defa-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61835-directus-ssrf-protection-bypass-via-0000-in-file-import2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61736-lightrag-cors-wildcard-credentials-enables-any-origin-credentialed-requests-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61836-directus-authorization-dependent-response-served-from-unsegmented-cache-key-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61740-lightrag-authentication-bypass-hardcoded-defaulttokensecret-and-public-auth-status-de-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-60062-nginx-agent-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-60065-nginx-plus-ngxstreammqttfiltermodule-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61613-cursor-cloud-agent-browser-sandbox-escape2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61646-fastgpt-shared-axios-ssrf-guard-validates-only-the-initial-url-before-following-redir2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61644-fastgpt-apicorechatrecordgetcollectionquote-can-disclose-cross-tenant-dataset-text-du2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59762-big-ip-http2-vulnerability-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55723-nginx-ingress-controller-vulnerability-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56434-nginx-ngxhttpssimodule-vulnerability-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54563-cloudreve-path-traversal-broken-access-control-in-cloudreve-webdav-dav-scoped-dav-cre2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54560-cloudreve-oauth-access-tokens-bypass-scope-enforcement-due-to-missing-clientid-claim2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54562-cloudreve-non-admin-remote-download-users-can-ssrf-loopbackinternal-services-and-read2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52865-nginx-ingress-controller-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-42533-nginx-map-directive-and-regex-matching-vulnerability-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-33213-redash-open-redirect-vulnerability-in-post-login-redirect-handling2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45805-penpot-mcp-repl-server-binds-to-0000-with-unauthenticated-execute-endpoint-rce2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-44986-penpot-pre-authenticated-account-takeover-via-team-invitation-token-prepare-register2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45806-penpot-authenticated-ssrf-in-remote-image-import-via-create-file-media-object-from-ur2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-60005-nginx-ngxhttpslicemodule-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56434-nginx-ngxhttpssimodule-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-42533-nginx-map-directive-and-regex-matching-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59762-big-ip-http2-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55723-nginx-ingress-controller-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-43637-cornac-260-path-traversal-via-extractarchive-in-downloadpy2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=firefox-chrome-adobe-and-vmware-updates-fix-multiple-critical-security-flaws2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=firefox-chrome-adobe-and-vmware-updates-fix-multiple-critical-security-flaws-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58558-file-system-permission-control-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58559-vibration-service-denial-of-service-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58556-bluetooth-module-improper-authorization-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58557-expedition-mode-design-defect-denial-of-service2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58555-card-module-permission-bypass-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58554-settings-module-broken-access-control2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58553-image-codec-module-out-of-bounds-read-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58550-image-codec-module-out-of-bounds-read-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58551-image-codec-module-out-of-bounds-read-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58552-image-codec-module-out-of-bounds-read-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58549-image-codec-out-of-bounds-read-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46459-missing-authorization-in-icu-scandinavia-boomerang2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46458-credential-exposure-in-icu-scandinavia-boomerang2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15809-githubcomcri-ocri-o-fix-bypass-for-cve-2022-4318-etcpasswd-injection-via-home-env2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15779-samba-winbind-samba-pamwinbind-mkhomedir-chowns-critical-system-paths-without-validat2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61869-imagemagick-before-712-26-memory-leak-in-miff-encoder2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61872-imagemagick-before-712-26-memory-leak-via-tiff-encoder2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61873-grav-before-918-arbitrary-file-write-via-twig-processed-filename2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61873-grav-before-918-arbitrary-file-write-via-twig-processed-filename-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61871-imagemagick-before-712-26-memory-leak-in-icon-decoder2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61865-imagemagick-before-712-26-memory-leak-in-hough-lines2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61863-imagemagick-before-712-26-memory-leak-in-tiff-encoder2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61868-imagemagick-before-712-26-memory-leak-in-yuv-decoder2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61866-imagemagick-before-712-26-memory-leak-in-jng-encoder2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61867-imagemagick-before-712-26-memory-leak-in-tiff-encoder2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61864-imagemagick-before-712-26-memory-leak-in-log-colorspace2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61457-grav-before-103-remote-code-execution-via-file-upload-extension-bypass2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61443-praisonai-before-1678-remote-code-execution-via-skilltools2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61446-praisonai-before-1678-remote-code-execution-via-plugin-auto-discovery2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61451-grav-before-104-password-reset-token-poisoning-via-adminbaseurl2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61430-praisonai-before-1678-dns-rebinding-ssrf-via-webcrawl2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61436-praisonai-before-4678-missing-webhook-signature-verification2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61435-praisonai-before-4678-authentication-bypass-via-host-header-spoofing2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61433-praisonai-before-4678-code-injection-via-api-deployment-generator2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-60085-praisonai-before-4678-unenforced-security-policy-in-subprocess-sandbox2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58655-grav-flex-objects-server-side-template-injection-via-dynamic-titles2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57996-phpmyfaq-privilege-escalation-via-missing-superadmin-guard-in-useradd-endpoint2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56699-wazuh-manager-ndjson-injection-in-inventorysync-via-agent-controlled-datavalueindex2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56400-open-webui-remote-code-execution-via-cors-misconfiguration-and-session-validation2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56339-capgo-unauthenticated-organization-existence-enumeration-via-rescindinvitation-rpc2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56398-open-webui-stored-cross-site-scripting-via-oauth-picture-claim-svg-data-uri2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=sase-has-an-ai-blind-spot-inspecting-packets-is-no-longer-enough2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59235-missing-authorization-in-prospero-flow-crm-allows-low-privileged-users-to-read-all-ba-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-40633-dell-powerscale-onefs-information-disclosure-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59236-authorization-bypass-in-prospero-flow-crm-excel-import-allows-cross-tenant-record-inj2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=researcher-drops-new-windows-zero-day-poc-hours-after-microsoft-patch-tuesday2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=new-webinar-closing-the-approval-gap-in-ai-era-ad-tech2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cursor-flaw-lets-malicious-cloned-repositories-trigger-windows-code-execution2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cursor-flaw-lets-malicious-cloned-repositories-trigger-windows-code-execution-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=vulnerabilities-in-icu-scandinavia-boomerang-software2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59235-missing-authorization-in-prospero-flow-crm-allows-low-privileged-users-to-read-all-ba2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49501-dell-powerscale-onefs-improper-privilege-management-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57821-apache-fineract-office-list-sql-injection-via-subquery-in-orderby2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57833-joomla-extension-weeblrcom-unauthenticated-stored-xss-in-4analytics-502-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57821-apache-fineract-office-list-sql-injection-via-subquery-in-orderby-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-56287-apache-fineract-boolean-sql-injection-in-client-search-api-orderby-parameter-leading2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58077-joomla-extension-weeblrcom-unauthenticated-stored-xss-in-4analytics-502-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-8281-rejected-reason-this-cve-id-has-been-rejected-or2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-35152-apache-fineract-sql-injection-in-runreports-endpoint2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=adobe-updates-voor-kritieke-coldfusion-lekken-zo-snel-mogelijk-installeren2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cisa-adds-sonicwall-sma1000-vulnerabilities-to-kev-catalog-following-active-exploitation2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=mozilla-waarschuwt-voor-kritieke-firefox-lekken-met-publieke-exploitcode2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57832-joomla-extension-joomdonationcom-unauthenticated-blind-sql-injection-in-edocman-39-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57831-joomla-extension-digital-peakcom-unauthenticated-blind-sql-injection-in-dp-calendar-8-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=compromised-asyncapi-npm-packages-deliver-multi-stage-botnet-malware2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58077-joomla-extension-weeblrcom-unauthenticated-stored-xss-in-4analytics-5022026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57833-joomla-extension-weeblrcom-unauthenticated-stored-xss-in-4analytics-5022026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15804-metaguruhcm-sql-injection2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15804-metaguruhcm-sql-injection-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15583-ssrf-confused-deputy-in-grafana-mcp-server-via-x-grafana-url-header-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15583-ssrf-confused-deputy-in-grafana-mcp-server-via-x-grafana-url-header2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-14251-gitops-operator-gitops-operator-missing-allowednamespace-check-in-reconcilerhook-for2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57832-joomla-extension-joomdonationcom-unauthenticated-blind-sql-injection-in-edocman-392026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57831-joomla-extension-digital-peakcom-unauthenticated-blind-sql-injection-in-dp-calendar-82026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=microsoft-komt-met-grootste-patch-tuesday-ooit-622-kwetsbaarheden-gefixt2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=sonicwall-waarschuwt-voor-actief-misbruik-van-lekken-in-sma1000-gateway2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=microsoft-sharepoint-servers-aangevallen-vs-roept-op-tot-extra-beveiliging2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12512-quotes-llama-316-unauthenticated-sql-injection-via-sc-parameter2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12512-quotes-llama-316-unauthenticated-sql-injection-via-sc-parameter-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12281-shibboleth-254-unauthenticated-administrator-account-creation-via-identity-header-spo2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12281-shibboleth-254-unauthenticated-administrator-account-creation-via-identity-header-spo-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-11580-kali-forms-2417-contributor-arbitrary-post-metadata-disclosure-via-idor2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-11579-kali-forms-2417-unauthenticated-media-upload2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=july-2026-patch-tuesday-microsoft-patches-622-vulnerabilities-including-two-exploited-zero-days2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=two-sonicwall-sma-1000-zero-days-exploited-one-could-enable-admin-commands2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-42936-hyper-sbi-dll-hijacking-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=microsoft-patch-tuesday-july-2026-the-largest-security-release-in-microsofts-history2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-8920-asus-aura-wallpaper-service-path-traversal-and-improper-access-control-vulnerability-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-8920-asus-aura-wallpaper-service-path-traversal-and-improper-access-control-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-8919-asus-gamesdk-cross-domain-information-disclosure-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15029-asus-system-control-interface-arbitrary-memory-access-vulnerability-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15030-asus-system-control-interface-out-of-bounds-read2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15029-asus-system-control-interface-arbitrary-memory-access-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13385-asus-router-improper-certificate-and-integrity-validation-vulnerability2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13385-asus-router-improper-certificate-and-integrity-validation-vulnerability-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13585-asus-system-control-interface-and-business-manager-information-disclosure-and-denial2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13585-asus-system-control-interface-and-business-manager-information-disclosure-and-denial-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-11851-asus-router-web-management-interface-sql-injection2026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9770-hardcoded-cryptographic-key-information-disclosure-vulnerability-on-tp-link-kasa-ec70-12026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13230-information-disclosure-vulnerability-in-local-discovery-response-in-tp-link-kasa-ec702026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9770-hardcoded-cryptographic-key-information-disclosure-vulnerability-on-tp-link-kasa-ec702026-07-15weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-5270-authentication-bypass-in-navigator-and-blue-planet-products2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-5269-navigator-ncs-and-mcp-system-accounts-with-default-passwords2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15753-zhinianboke-xianyu-auto-reply-review-approve-trusting-http-permission-methods-on-the2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-51808-openhtj2k-buffer-overflow-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15752-zhinianboke-xianyu-auto-reply-backend-user-endpoint-users-authorization2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15751-mastergo-design-mastergo-magic-mcp-mcpgetcomponentgenerator-component-workflowmd-exec2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-51807-openhtj2k-buffer-overflow-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-36035-caxperts-universalplantviewer-webservices-server-improper-access-control2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-56363-matter-sdk-null-pointer-dereference-denial-of-service-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-56364-matter-sdk-use-of-uninitialized-value-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-56362-matter-sdk-level-control-cluster-reachable-assertion-denial-of-service2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-56365-matter-sdk-reachable-assertion-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=microsofts-secure-boot-has-been-broken-for-a-decade-and-no-one-noticed-until-now2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59733-rclone-serve-restic-private-repos-authorization-bypass-in-the-url-path-lets-an-authen2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59733-rclone-serve-restic-private-repos-authorization-bypass-in-the-url-path-lets-an-authen-12026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59732-rclone-archive-extract-allows-s3-destination-prefix-escape-via-crafted-archive-paths2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54684-jadx-xapk-archive-entries-with-absolute-paths-can-plant-drop-in-plugins-and-achieve-c2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-54572-rclone-unvalidated-symlink-target-in-local-links-arbitrary-file-write-from-an-untrust2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50130-pi-hole-local-privilege-escalation-from-pihole-user-to-root-via-etcpiholelogrotate-12026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50130-pi-hole-local-privilege-escalation-from-pihole-user-to-root-via-etcpiholelogrotate2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49981-twig-sandbox-filter-tag-and-function-allow-list-bypass-when-sandbox-state-changes-bet2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48808-twig-sandbox-property-allowlist-bypass-via-the-column-filter-under-sourcepolicyinterf2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48807-twig-sandbox-tostring-policy-bypass-via-traversable-in-join-and-replace-filters2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48806-twig-sandbox-tostring-policy-bypass-via-dynamic-mapping-keys2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48805-twig-sandbox-state-regression-in-deprecated-internal-wrappers-in-srcresourcescorephp2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48353-cai-content-credentials-improper-input-validation-cwe-202026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48357-cai-content-credentials-uncontrolled-resource-consumption-cwe-4002026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48354-cai-content-credentials-integer-overflow-or-wraparound-cwe-1902026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48334-illustrator-improper-input-validation-cwe-202026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48290-cai-content-credentials-server-side-request-forgery-ssrf-cwe-9182026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48275-illustrator-untrusted-search-path-cwe-4262026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46640-twig-arbitrary-php-code-execution-via-selfstring-macro-reference-compilation2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46633-twig-php-code-injection-via-use-template-name2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45363-jwt-ruby-gem-empty-key-hmac-bypass2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-42049-jadx-rce-via-groovy-code-injection-in-gradle-export2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59889-jackson-databind-jsonview-ypassed-for-jsonunwrapped-container-properties-on-deseriali2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61520-simple-machines-forum-ssrf-via-image-proxy2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53486-decompress-archive-extraction-can-create-files-and-links-outside-the-target-directory-12026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52101-andreimarcu-linux-server-information-disclosure-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-52100-linux-server-cross-site-request-forgery-to-remote-code-execution2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53486-decompress-archive-extraction-can-create-files-and-links-outside-the-target-directory2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49477-soup-sieve-regular-expression-denial-of-service-redos-in-soupsieve-selector-parser2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49978-dompurify-inplace-sanitization-bypass-via-attached-shadow-root-inside-templatecontent2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49853-tornado-authorization-header-forwarded-across-cross-origin-redirects-in-simpleasyncht2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49855-tornado-asynchttpclient-accumulates-decompressed-chunks-without-size-limit-gzip-bomb2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49854-tornado-out-of-bounds-memory-access-in-c-extension2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49476-soup-sieve-memory-exhaustion-via-large-comma-separated-selector-lists-in-soupsieve2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48815-sigstore-js-certificateoids-verification-constraints-are-silently-dropped-and-never-e2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49458-dompurify-cross-realm-inplace-sanitization-leaves-executable-markup-intact-via-realm2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49459-dompurify-inplace-mode-preserves-attributes-of-a-clobbered-root-element-allowing-xss2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48758-sigstore-js-dsse-payloadtype-type-binding-failure2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48801-linkify-it-quadratic-algorithmic-complexity-in-linkifyitmatch-scan-loop2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48370-media-encoder-out-of-bounds-write-cwe-7872026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48816-sigstore-js-insufficient-verification-of-data-authenticity2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48801-linkify-it-quadratic-algorithmic-complexity-in-linkifyitmatch-scan-loop-12026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48341-bridge-out-of-bounds-write-cwe-7872026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48366-media-encoder-out-of-bounds-write-cwe-7872026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48367-after-effects-out-of-bounds-write-cwe-7872026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48342-bridge-integer-overflow-or-wraparound-cwe-1902026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48343-bridge-out-of-bounds-write-cwe-7872026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48369-premiere-pro-out-of-bounds-write-cwe-7872026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48344-gocart-time-of-check-time-of-use-toctou-race-condition-cwe-3672026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-24233-nvidia-tensorrt-llm-insecure-deserialization-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15774-google-chrome-skia-use-after-free-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15776-google-chrome-v8-arbitrary-code-execution2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15773-google-chrome-core-use-after-free-sandbox-escape2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15772-google-chrome-gpu-use-after-free-sandbox-escape2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48320-coldfusion-cross-site-scripting-reflected-xss-cwe-792026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48324-coldfusion-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-inj2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48318-coldfusion-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48327-coldfusion-incorrect-authorization-cwe-8632026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48319-coldfusion-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48321-coldfusion-incorrect-authorization-cwe-8632026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48322-coldfusion-improper-control-of-generation-of-code-code-injection-cwe-942026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48284-coldfusion-improper-input-validation-cwe-202026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48325-coldfusion-missing-authentication-for-critical-function-cwe-3062026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=microsoft-patches-record-622-flaws-including-two-zero-days-under-active-attack2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=microsoft-patches-record-622-flaws-including-two-zero-days-under-active-attack-12026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15738-cross-namespace-traffic-interception-via-incorrect-route-precedence-ordering-in-aws-l2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53633-vitest-exposed-browser-mode-api-can-proxy-cdp-and-overwrite-config-files-leading-to-r2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50528-net-security-feature-bypass-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48489-symfony-security-firewall-bypass-via-failureforward-subrequest-unauthenticated-access2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48356-adobe-commerce-unrestricted-upload-of-file-with-dangerous-type-cwe-4342026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48358-adobe-commerce-improper-encoding-or-escaping-of-output-cwe-1162026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48350-animate-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-cw2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48359-adobe-experience-manager-improper-restriction-of-xml-external-entity-reference-xxe-cw2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48349-animate-incorrect-authorization-cwe-8632026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48310-adobe-experience-manager-improper-limitation-of-a-pathname-to-a-restricted-directory2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48345-animate-improper-neutralization-of-special-elements-used-in-an-os-command-os-command2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48252-adobe-experience-manager-missing-authentication-for-critical-function-cwe-3062026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48259-adobe-experience-manager-server-side-request-forgery-ssrf-cwe-9182026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47988-adobe-commerce-incorrect-authorization-cwe-8632026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47994-adobe-commerce-cross-site-scripting-stored-xss-cwe-792026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47995-adobe-commerce-cross-site-scripting-stored-xss-cwe-792026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-5040-weak-password-hashing-mechanism-in-tp-link-deco-m52026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47767-symfony-symfonyruntime-cve-2024-50340-patch-bypass-web-requests-can-still-set-appenva2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47302-net-denial-of-service-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47304-net-security-feature-bypass-vulnerability-12026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47303-aspnet-core-elevation-of-privilege-vulnerability-12026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47305-visual-studio-remote-code-execution-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47301-configuration-manager-elevation-of-privilege-vulnerability-12026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47300-aspnet-core-elevation-of-privilege-vulnerability-12026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45754-symfony-mailjet-mailer-webhook-parser-never-verifies-the-configured-secret-unauthenti2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45305-symfony-yaml-parser-redos-via-catastrophic-backtracking-in-parsercleanup-regex2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45755-symfony-mailtrap-mailer-webhook-parser-never-verifies-the-x-mt-signature-hmac-unauthe2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45304-symfony-yaml-parser-exponential-memory-allocation-via-recursive-collection-alias-expa2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45753-symfony-htmlsanitizer-urlattributesanitizer-omits-actionformactionpostercite-javascri2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45075-symfony-head-request-bypasses-methods-get-filter-in-isgranted-issignaturevalid-iscsrf2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45070-symfony-email-header-injection-via-non-token-characters-in-mime-parameter-names2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45072-symfony-stored-xss-in-webprofiler-codeextensionfileexcerpt-unescaped-non-php-file-ren2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45069-symfony-oidctokenhandler-accepts-jwts-missing-audissexp-claims2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45073-symfony-sql-injection-in-pdoadapterdoclear-via-unsanitized-prefix2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45133-symfony-yaml-harden-the-parser-when-handling-untrusted-input2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45064-symfony-htmlsanitizer-url-attributes-pass-through-bidi-override-characters-visual-hre2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-45063-symfony-identity-spoofing-via-unanchored-dn-regex-in-x509authenticator2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15712-soupclientmessageiohttp2-libsoup3-libsoup-http2-goaway-frame-parsing-heap-buffer-over2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15641-devolutions-server-improper-authorization-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15720-pre-auth-heap-out-of-bounds-read-in-the-amf-nas-5gs-mobile-identity-handler-12026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15642-devolutions-server-sensitive-information-disclosure2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47304-net-security-feature-bypass-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47303-aspnet-core-elevation-of-privilege-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47301-configuration-manager-elevation-of-privilege-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15720-pre-auth-heap-out-of-bounds-read-in-the-amf-nas-5gs-mobile-identity-handler2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47300-aspnet-core-elevation-of-privilege-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58617-m365-copilot-for-ios-elevation-of-privilege-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58626-windows-remote-desktop-services-remote-code-execution-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58594-remote-desktop-client-remote-code-execution-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58534-windows-input-method-editor-ime-elevation-of-privilege-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58277-microsoft-sharepoint-elevation-of-privilege-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57094-microsoft-windows-media-foundation-remote-code-execution-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57102-visual-studio-code-security-feature-bypass-vulnerability2026-07-14weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-57090-microsoft-windows-media-foundation-remote-code-execution-vulnerability2026-07-14weekly0.8