https://zerodaydigest.net/hourly1.0 https://zerodaydigest.net/index.htmlhourly1.0 https://zerodaydigest.net/privacy.html0.3 https://zerodaydigest.net/terms.html0.3 https://zerodaydigest.net/article.html?slug=cve-2026-94490-octoprint-command-api-systempy-executesystemcommand-os-command-injection2026-09-22weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94489-octoprint-file-download-api-filespy-validate-path-traversal2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94426-xuxueli-xxl-job-insert-cross-site-scripting2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94425-moore-threads-mtt-s80-driver-package-ioctl-mtdispkm64sys-sub140006f0c-privileges-mana-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94425-moore-threads-mtt-s80-driver-package-ioctl-mtdispkm64sys-sub140006f0c-privileges-mana2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94626-vllm-through-0290-memory-exhaustion-via-unvalidated-nixl-tpsize-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94623-vllm-through-0290-denial-of-service-via-nixl-multi-prompt-assertion-failure-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94627-vllm-through-0290-gpu-kv-cache-leak-via-mooncake-transfer-id-collision-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94624-vllm-through-0290-denial-of-service-via-unbounded-p2p-kv-offloading-sessions-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94622-vllm-through-0290-denial-of-service-via-incomplete-nixl-kv-transfer-metadata-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88738-jazzware-rt1000-edge-unrestricted-file-upload-remote-code-execution2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79079-crosswire-xiphos-arbitrary-code-execution-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88756-pagekit-cms-sql-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-78847-gray-matter-arbitrary-code-execution2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-78806-matter-project-chip-information-disclosure-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61652-zapros-streaming-decoders-ignored-the-requested-chunk-size-allowing-a-single-compress2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94627-vllm-through-0290-gpu-kv-cache-leak-via-mooncake-transfer-id-collision2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94626-vllm-through-0290-memory-exhaustion-via-unvalidated-nixl-tpsize2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94625-vllm-through-0290-resource-exhaustion-via-ownerless-mooncake-transfer-placeholders2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94624-vllm-through-0290-denial-of-service-via-unbounded-p2p-kv-offloading-sessions2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94623-vllm-through-0290-denial-of-service-via-nixl-multi-prompt-assertion-failure2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94622-vllm-through-0290-denial-of-service-via-incomplete-nixl-kv-transfer-metadata2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94540-desktopsms-1110-unauthorized-access-via-local-service2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65980-chartbrew-sql-injection-via-missing-backslash-escaping-in-clickhouse-variable-substit2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61851-chartbrew-incomplete-read-only-keyword-blocklist-in-ai-runquery-tool2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61852-chartbrew-sql-injection-via-rowlimit-parameter-in-ai-runquery-tool2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61743-chartbrew-dns-rebinding-ssrf-bypass-in-outbound-request-validation2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94536-lamp-cloud-through-5100-unauthorized-information-disclosure-via-anyonevisibleresource2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94535-lamp-cloud-through-5100-unauthorized-notification-deletion2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94534-lamp-cloud-through-5100-unauthorized-profile-modification-via-put-endpoints2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94533-lamp-cloud-through-5100-unauthorized-file-download-via-anyonefile2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94532-lamp-cloud-through-5100-unauthorized-user-profile-access-via-getuserinfobyid2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93340-gladys-assistant-510-password-reset-link-poisoning-via-forgotpassword-endpoint2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61541-zapros-has-an-unbounded-content-encoding-decompression-chain-that-allows-denial-of-se2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-59830-discourse-stored-xss-via-unescaped-actor-name-in-post-actions2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94572-openstack-octavia-amphora-provider-driver-improper-input-validation-configuration-inj2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94588-proxmox-pmg-api-argument-injection-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94572-openstack-octavia-amphora-provider-driver-improper-input-validation-configuration-inj-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94571-openstack-octavia-amphora-provider-driver-haproxy-configuration-injection-vulnerabili-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94571-openstack-octavia-amphora-provider-driver-haproxy-configuration-injection-vulnerabili2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94424-moore-threads-mtt-s80-driver-package-ioctl-mtdispkm64sys-sub140001000-heap-based-over-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94424-moore-threads-mtt-s80-driver-package-ioctl-mtdispkm64sys-sub140001000-heap-based-over2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93433-libstoragemgmt-libstoragemgmt-denial-of-service-via-stack-buffer-overflow-in-scsi-vpd2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88409-falkordb-buffer-overflow-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88746-idccms-cross-site-scripting-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79916-maxkb-aws-bedrock-model-credential-injection-leads-to-remote-code-execution2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77521-maxkb-prompt-injectable-agent-can-lead-to-command-execution2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-46649-joplin-sso-auth-code-login-missing-rate-limiting-9-digit-numeric-code-brute-forceable2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55159-luci-app-adblock-fast-delegated-luci-app-adblock-fast-users-can-reach-root-command-ex2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58269-sync-in-server-has-a-complete-2fa-bypass-via-post-apiauthtoken2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55897-luci-app-advanced-reboot-read-acl-exposes-binsh-through-fileexec-allowing-delegated-u2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58269-sync-in-server-has-a-complete-2fa-bypass-via-post-apiauthtoken-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73546-envoy-stored-xss-in-admin-stats-interface-statsformathtml2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73512-envoy-use-after-free-in-quic-on-internal-redirects2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58271-sync-inserver-vulnerable-to-totp-brute-force-via-post-apiappsyncregister2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73550-envoy-http2-discarded-host-header-200-gb-header-copy-oom-in-envoy2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73547-envoy-extauthz-request-path-pseudoheader-dereferenced-wo-null-check2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48521-envoy-http3-connection-pool-selection-null-derefs-in-prodclustermanagerfactoryallocat2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73549-envoy-incomplete-fix-for-cve-2026-26310-copyinternetaddressandport-crashes-on-scoped2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73513-envoy-oghttp2-upstream-trailers-incorrect-handling2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85219-denial-of-service-in-the-opencanary-redis-service2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49811-dell-command-monitor-incorrect-permission-assignment-elevation-of-privilege-vulnerabi-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-49811-dell-command-monitor-incorrect-permission-assignment-elevation-of-privilege-vulnerabi2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73552-envoy-http-rbac-saferegex-can-fail-open-on-rfc-valid-obs-text-header-values2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-73548-envoy-cross-user-response-poisoning-via-a-generic-non-websocket-http-upgrade-on-envoy2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-50572-envoy-extauthz-rawhttpclientimpl-onsuccess-0x0-segfault2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55897-luci-app-advanced-reboot-read-acl-exposes-binsh-through-fileexec-allowing-delegated-u-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81469-dell-inventory-collector-client-unquoted-search-path-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55159-luci-app-adblock-fast-delegated-luci-app-adblock-fast-users-can-reach-root-command-ex-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94495-jsherp-through-36-missing-authorization-via-systemconfig2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94501-jsherp-through-36-privilege-escalation-via-userbusiness-crud-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94497-jsherp-through-36-unauthorized-access-via-by-id-endpoints-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94496-jsherp-through-36-privilege-escalation-via-role-management2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94497-jsherp-through-36-unauthorized-access-via-by-id-endpoints2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94501-jsherp-through-36-privilege-escalation-via-userbusiness-crud2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94496-jsherp-through-36-privilege-escalation-via-role-management-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94411-jsherp-36-privilege-escalation-via-updateonevaluebykeyidandtype2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94412-jsherp-through-36-authorization-bypass-via-resetpwd-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94494-jsherp-through-36-tenant-information-disclosure-via-get-tenantinfo2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94412-jsherp-through-36-authorization-bypass-via-resetpwd2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94414-jsherp-through-36-missing-authorization-via-updatebtnstr2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94413-jsherp-through-36-password-hash-disclosure-via-userinfo2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94403-colorful-igamecenter-ioctl-enesys-sub140001af0-untrusted-pointer-dereference2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-58491-warpgate-reflected-xss-in-sso-return-endpoint-via-attacker-controlled-next-parameter2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62182-kubeedge-configupdatejob-updatefields-enables-remote-shell-injection-and-code-executi2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48976-homebox-cross-tenant-idor-in-notifier-update-leaks-shoutrrr-credentials-and-allows-we2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48975-homebox-cross-tenant-idor-in-maintenanceentry-update-and-delete-allows-tampering-and2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48826-homebox-cross-group-inventory-wipe-in-homebox-via-global-owner-role-and-x-tenant-head2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61745-inventree-missing-authorization-on-machine-restart-endpoint-allows-any-authenticated2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-69190-graylog-manager-to-owner-privilege-escalation-on-saved-searches-and-dashboards2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55473-homebox-notifier-ssrf-guard-misses-nat64-prefixes-64ff9b96-64ff9b148-generic-url-reac2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48826-homebox-cross-group-inventory-wipe-in-homebox-via-global-owner-role-and-x-tenant-head-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48974-homebox-forced-group-membership-without-consent-in-homebox-addmember-handler2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48975-homebox-cross-tenant-idor-in-maintenanceentry-update-and-delete-allows-tampering-and-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-48976-homebox-cross-tenant-idor-in-notifier-update-leaks-shoutrrr-credentials-and-allows-we-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62182-kubeedge-configupdatejob-updatefields-enables-remote-shell-injection-and-code-executi-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61612-aborrusockan-mcp-server-has-ssrf-via-dns-name-internal-ip-incomplete-fix-of-cve-20262026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=fake-lastpass-authenticator-installer-abuses-microsoft-signed-driver-to-kill-antivirus-and-edr2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94488-telegram-desktop-cross-site-scripting-vulnerability-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94488-telegram-desktop-cross-site-scripting-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92382-usbredir-usbredir-unbounded-isopacketdesc-index-in-usbredirhostisopacket-leads-to-hea2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93012-emailsendertransportsendmail-versions-before-2602-for-perl-allow-arbitrary-command-ex2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94449-quarkus-smallrye-fault-tolerance-quarkus-smallrye-fault-tolerance-memory-leak-in-appl2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84990-ntopng-missing-authorization-on-system-configuration-backup-download-and-listing-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84990-ntopng-missing-authorization-on-system-configuration-backup-download-and-listing2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-83621-ntopng-missing-authorization-check-in-rest-api-allows-non-admin-users-to-tamper-threa2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-83621-ntopng-missing-authorization-check-in-rest-api-allows-non-admin-users-to-tamper-threa-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=contagious-interview-campaign-compromises-30000-devices-steals-1071m-in-crypto2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79920-ajenti-privilege-escalation-to-root-via-unauthenticatedunauthorized-plugin-install-ta2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-79920-ajenti-privilege-escalation-to-root-via-unauthenticatedunauthorized-plugin-install-ta-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77582-tinyauth-user-enumeration-attack-by-timing-oracle2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77561-tinyauth-unauthenticated-login-attempts-can-trigger-global-login-lockdown-denial-of-s2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77560-tinyauth-forward-auth-per-app-acl-is-matched-case-sensitively-against-the-case-insens-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77560-tinyauth-forward-auth-per-app-acl-is-matched-case-sensitively-against-the-case-insens2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-76898-drawio-unauthenticated-ssrf-via-ipv6-ula-blocklist-bypass-in-embed2js2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63373-drawio-oauth-csrf-via-missing-state-validation-on-self-hosted-deployments-allows-sess2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63416-drawio-path-traversal-in-exportproxyservlet-allows-access-to-arbitrary-backend-endpoi2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63334-drawio-ssrf-via-dns-rebinding-in-proxyservlet-bypasses-private-ip-blocklist2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63116-deepstream-patchmulti-action-bypasses-valve-permission-system-allowing-unauthorized-r2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63116-deepstream-patchmulti-action-bypasses-valve-permission-system-allowing-unauthorized-r-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62987-fabio-incomplete-fix-for-cve-2025-48865-operator-configured-trust-headers-clientiptls2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62371-kubeedge-command-injection-in-nodeupgradejob-rce-on-edge-nodes-via-v1alpha2-api2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61674-fluent-bit-remote-stack-buffer-overflow-in-fluent-bit-outforward-secure-forward-pong2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-62369-kubeedge-keadm-decompresstargz-path-traversal-enables-arbitrary-file-write-on-windows2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=google-fined-403-million-over-gdpr-violations-tied-to-location-data2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85751-mailu-authentication-bypass-in-header-based-proxy-authentication-via-spoofable-x-forw2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82412-ntopng-remote-code-execution-via-os-command-injection-in-vulnerability-scan-rest-api2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53940-conda-entry-point-path-traversal-in-noarchpython-install-arbitrary-file-write-canonic2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55563-feast-pullrequesttarget-integration-tests-run-untrusted-fork-code-with-production-clo2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82412-ntopng-remote-code-execution-via-os-command-injection-in-vulnerability-scan-rest-api-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55563-feast-pullrequesttarget-integration-tests-run-untrusted-fork-code-with-production-clo-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88978-hatchet-durabletask-workerstatus-grpc-resolves-caller-supplied-durable-task-uuids-via2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84298-hatchet-cross-tenant-durable-callback-payload-disclosure-in-hatchet-v1-dispatcher2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61687-hatchet-unauthenticated-oauth-state-csrf-login-csrf-via-empty-state-collision-in-vali2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-63342-hatchet-cross-tenant-durable-task-event-log-disclosure-via-missing-authorization-chec2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61681-hatchet-ssrf-via-unsigned-unsubscribeurl-in-sns-unsubscribeconfirmation-handler2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85751-mailu-authentication-bypass-in-header-based-proxy-authentication-via-spoofable-x-forw-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-53940-conda-entry-point-path-traversal-in-noarchpython-install-arbitrary-file-write-canonic-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77165-database-file-lock-denial-of-service2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77166-mattermost-emoji-field-cross-site-scripting-or-ui-redress-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94301-apache-mina-cve-2026-47065-resolveproxyclass-fix-missing-from-20x-and-21x-branches-202026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94301-apache-mina-cve-2026-47065-resolveproxyclass-fix-missing-from-20x-and-21x-branches-20-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94184-fetchmail-fetchmail-stack-based-buffer-overflow-in-ntlm-authentication-fetchmail-sa-2-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94184-fetchmail-fetchmail-stack-based-buffer-overflow-in-ntlm-authentication-fetchmail-sa-22026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93339-ditty-3170-stored-xss-via-layout-tag-wrapper-attribute2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86473-apache-airflow-logout-ignores-a-presented-authorization-bearer-token-leaving-it-revoc2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82355-apache-airflow-session-cookie-silently-overrides-explicit-authorization-bearer-header2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80110-pki-core-dogtag-pki-v2-rest-acl-filters-reverse-lexicographic-tie-break-lets-a-ca-age2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-80110-pki-core-dogtag-pki-v2-rest-acl-filters-reverse-lexicographic-tie-break-lets-a-ca-age-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-71543-openbaos-templated-policies-allow-privilege-escalation-via-wildcard-characters2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75158-apache-airflow-assets-events-api-returns-asset-events-for-every-dag-with-no-per-dag-a2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75939-openshiftoc-mirror-release-signature-verification-openpgp-signatureerror-checked-befo2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61630-nginx-ignition-has-totp-reuse-during-validity-window2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55870-gocd-is-vulnerable-to-credential-exposure-when-admins-insecurely-configure-material-u2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61628-nginx-ignition-has-unauthenticated-admin-account-creation-via-onboarding-race-conditi-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-68919-gocd-has-stored-xss-possible-via-forged-package-material-comments-on-stagejobvsm-page2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61628-nginx-ignition-has-unauthenticated-admin-account-creation-via-onboarding-race-conditi2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-61629-nginx-ignition-has-parseacceptlanguage-separator-bypass-that-enables-75x-cpu-amplific2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55074-ansible-freebsd-jail-connection-plugin-jail-escape-via-symlink-following-in-putfile-h2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-55071-mcp-for-stata-stata-command-injection-via-unsanitized-package-in-adopackageinstall2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=weekly-recap-cisco-0-day-ai-agent-rce-clickfix-attacks-clickfix-surge-and-browser-hijacks2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=weekly-recap-cisco-0-day-ai-agent-rce-clickfix-attacks-clickfix-surge-and-browser-hijacks-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cisa-meldt-actief-misbruik-van-drie-kwetsbaarheden-in-linux-kernel2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88807-libxrender-renderquerypictformats-reply-heap-based-buffer-overflow2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71421-uvdesk-core-framework-before-117-privilege-escalation-via-editagent2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=taskstomp-powershell-backdoor-steals-documents-wi-fi-passwords-and-clipboard-data2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94404-misp-csrf-vulnerability-allows-unauthorized-attribute-modification2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88807-libxrender-renderquerypictformats-reply-heap-based-buffer-overflow-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94387-aureus-erp-before-160-stored-xss-via-chatter-field-change-log2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71421-uvdesk-core-framework-before-117-privilege-escalation-via-editagent-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71420-uvdesk-core-framework-before-117-authorization-bypass-via-saved-reply2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-71419-uvdesk-core-framework-before-117-stored-xss-via-swiftmailer2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88806-libx11-xkbgetmap-reply-heap-based-buffer-overflow2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94401-misp-arbitrary-local-file-read-and-ssrf-via-misp-export-upload-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94401-misp-arbitrary-local-file-read-and-ssrf-via-misp-export-upload2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-938842026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94394-misp-objectreferencescontroller-granular-distribution-and-sharing-group-restrictions2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94379-misp-http-method-bypass-of-login-security-controls-bruteforce-protection-and-email-ot2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94381-misp-privilege-escalation-read-only-api-key-user-can-regain-full-role-via-updatelogin2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94381-misp-privilege-escalation-read-only-api-key-user-can-regain-full-role-via-updatelogin-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94383-misp-blocklist-workflow-module-arbitrary-script-execution-via-unrestricted-file-exten-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94383-misp-blocklist-workflow-module-arbitrary-script-execution-via-unrestricted-file-exten2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94372-stored-cross-site-scripting-via-unescaped-galaxy-cluster-tag-names-in-misp-default-th2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94373-misp-dom-based-cross-site-scripting-via-innerhtml-in-contextual-menu2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94374-misp-idor-via-client-supplied-report-id-in-module-results-processing-allows-reparenti-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94374-misp-idor-via-client-supplied-report-id-in-module-results-processing-allows-reparenti2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94214-st-engineering-idirect-evolutionvelocity-webserver-evolution-management-service-login2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94216-st-engineering-idirect-evolutionvelocity-webserver-evolution-http-header-webserver-au2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94211-hyve5-leantime-project-dashboard-showbladephp-cross-site-scripting2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84285-os-command-injection-vulnerability-affecting-tuleap-enterprise-edition-from-173-throu-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84285-os-command-injection-vulnerability-affecting-tuleap-enterprise-edition-from-173-throu2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94393-misp-event-report-cross-event-reparenting-via-unscoped-uuid-resolution-in-editreport2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85220-denial-of-service-in-the-thinkst-canary-redis-service2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94382-beszel-before-0190-insecure-direct-object-reference-via-user-alerts2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94368-noobaa-core-noobaa-core-presigned-put-url-escalation-to-copyobject-via-unsigned-x-amz2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89139-temporal-server-worker-deployment-compute-provider-executes-a-caller-supplied-command2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89139-temporal-server-worker-deployment-compute-provider-executes-a-caller-supplied-command-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87858-temporal-server-completion-callback-source-header-can-direct-attacker-chosen-requests2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65654-temporalioringpop-go-fails-to-enforce-configured-label-limits-on-inbound-membership-g2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65654-temporalioringpop-go-fails-to-enforce-configured-label-limits-on-inbound-membership-g-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65653-temporaliotchannel-go-zero-chunk-call-fragment-causes-process-termination-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65653-temporaliotchannel-go-zero-chunk-call-fragment-causes-process-termination2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65652-temporaliotchannel-go-malformed-checksum-type-causes-process-termination-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65652-temporaliotchannel-go-malformed-checksum-type-causes-process-termination2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65651-temporaliosqlparser-deeply-nested-unary-expressions-can-cause-a-fatal-stack-overflow2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-65651-temporaliosqlparser-deeply-nested-unary-expressions-can-cause-a-fatal-stack-overflow-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-16651-temporaliosqlparser-malformed-mysql-version-comments-can-cause-a-panic2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-16651-temporaliosqlparser-malformed-mysql-version-comments-can-cause-a-panic-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94210-hyve5-leantime-kanban-board-ticketsphp-getallgrouped-cross-site-scripting2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91867-apache-neethi-remote-policy-fetch-lacks-a-total-timeout-allowing-a-slow-server-to-han2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91866-apache-neethi-crafted-policies-cause-unbounded-work-during-intersection-leading-to-de2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91865-apache-neethi-crafted-policy-references-cause-exponential-expansion-during-normalizat2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91864-apache-neethi-crafted-ws-policy-documents-bypass-elementattribute-limits-causing-memo2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91863-apache-neethi-uncontrolled-recursion-while-parsing-crafted-ws-policy-documents-allows2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-16652-temporal-server-schedule-exclusion-search-can-cause-excessive-cpu-consumption2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-77021-missing-decompression-size-limit-in-agent-receiver-allows-memory-exhaustion-via-push2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92612-eclipse-iceoryx2-staticstring-memory-safety-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92574-cri-o-cri-o-checkpoint-restore-bypasses-destination-security-context2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92574-cri-o-cri-o-checkpoint-restore-bypasses-destination-security-context-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-91921-cross-site-scripting-xss-in-1millionbots-ai-chatbot-platform2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94277-stored-cross-site-scripting-in-misp-galaxy-matrix-statistics-via-unescaped-galaxy-nam2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92400-payment-gateway-for-paypal-on-woocommerce-921-unauthenticated-payment-bypass-via-sand2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85113-givewp-4169-unauthenticated-arbitrary-shortcode-execution-via-donor-name2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94151-omega-solution-hrm-os-role-permission-api-permission-missing-authentication2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94150-omega-solution-hrm-os-svg-file-upload-view-cross-site-scripting2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86802-to-do-list-member-14-16-unauthenticated-content-injection-via-import2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94152-omega-solution-fbp-fulfillment-by-people-user-profile-api-user-authorization2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85010-restropress-346-unauthenticated-price-manipulation-via-cart-add-ons2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15801-cri-o-cri-o-insufficient-validation-during-container-checkpoint-restore2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15801-cri-o-cri-o-insufficient-validation-during-container-checkpoint-restore-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-12999-open-vsx-cache-poisoning-via-header-injection-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2025-12999-open-vsx-cache-poisoning-via-header-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=clickfix-lures-deploy-chainscript-rat-using-polygon-to-rotate-c2-infrastructure2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94149-omega-solution-hrm-os-role-permission-retrieval-endpoint-permission-resource-injectio2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-47321-apache-mina-unbounded-decompression-amplification-dos-in-zlibinflate2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94217-keycloak-services-keycloak-services-uma-scope-merge-across-resource-owners-via-resour2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94218-keycloak-services-keycloak-services-2fa-setup-enforcement-bypass-via-authentication-s2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94215-keycloak-services-keycloak-services-cross-realm-client-readwrite-via-request-level-ca2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94213-keycloak-services-keycloak-services-authorization-services-policy-evaluation-endpoint2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94146-biostar-bios-update-utility-ioctl-bsmem64w10sys-sub110bc-write-what-where-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82187-woocommerce-online-product-designer-170-2150-unauthenticated-arbitrary-file-upload2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94145-xuxueli-xxl-job-task-management-jobinfocontrollerjava-cross-site-scripting2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94144-drogonframework-drogon-orm-criteriacc-makecriteria-sql-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90860-canva-harmonyos-app-webview-improper-header-restriction-vulnerability2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94146-biostar-bios-update-utility-ioctl-bsmem64w10sys-sub110bc-write-what-where2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82187-woocommerce-online-product-designer-170-2150-unauthenticated-arbitrary-file-upload-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94148-scadabr-export-project-endpoint-exportprojecthtm-emportdwrcreateexportjson-informatio2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=jade-sleet-linked-to-indian-it-provider-breach-with-flatroof-and-roofdeck-backdoors2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94142-biostar-temperature-monitor-utility-ioctl-bshwmio64w10sys-sub1105c-write-what-where2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94142-biostar-temperature-monitor-utility-ioctl-bshwmio64w10sys-sub1105c-write-what-where-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94139-chengdu-feiyuxing-technology-feiyu-star-router-cookie-sendordercgi-command-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90839-rejected-reason-this-is-rejected2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94143-drogonframework-drogon-orm-mapper-mapperh-orderby-sql-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94138-chengdu-feiyuxing-technology-feiyu-star-router-sendordercgi-command-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94185-nvm-alias-resolution-follows-and-discloses-files-outside-nvmdiralias2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94137-hangzhou-shunwang-technology-shzh-irpmjdevicecontrol-shdrvx64sys-sub180004ac0-denial2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94128-biostar-vivid-led-dj-ioctl-bsled64sys-sub1105c-write-what-where-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94128-biostar-vivid-led-dj-ioctl-bsled64sys-sub1105c-write-what-where2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94129-biostar-valkyrie-aurora-ioctl-bsrvsio64sys-sub1105c-write-what-where2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94129-biostar-valkyrie-aurora-ioctl-bsrvsio64sys-sub1105c-write-what-where-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94101-netcore-nbr200v2-routerd-vlanloadformuci-buffer-overflow2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94110-qcms-content-detail-controllersphp-selftmp-sql-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94100-netcore-nbr200v2-wan-vlan-reconfiguration-routerd-wanconfigsetvlan-buffer-overflow-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94100-netcore-nbr200v2-wan-vlan-reconfiguration-routerd-wanconfigsetvlan-buffer-overflow2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94099-netcore-nbr200v2-backup-restore-restorecgi-command-injection-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94098-netcore-nbr200v2-firmware-upgrade-cgi-endpoint-upgrade-command-injection-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94098-netcore-nbr200v2-firmware-upgrade-cgi-endpoint-upgrade-command-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94099-netcore-nbr200v2-backup-restore-restorecgi-command-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94103-roocms-frontend-rendering-sitepagephpphp-eval-code-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94102-wuzhicms-login-indexphp-redirect2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94101-netcore-nbr200v2-routerd-vlanloadformuci-buffer-overflow-12026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94095-netcore-nbr200v2-traceroute-diagnostic-feature-networktools-command-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94096-netcore-nbr200v2-lan-ip-configuration-networktools-command-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94097-netcore-nbr200v2-cgi-diagnostic-endpoint-networktools-command-injection2026-09-21weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94097-netcore-nbr200v2-cgi-diagnostic-endpoint-networktools-command-injection-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94096-netcore-nbr200v2-lan-ip-configuration-networktools-command-injection-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94094-openclaw-canvas-host-route-serverts-createcanvashosthandler-denial-of-service2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94093-dlr-rm-stable-baselines3-saveutilpy-vecnormalizeload-deserialization2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94092-dmlc-dgl-utilspy-readtorchdata-deserialization2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94091-piskvorky-gensim-model-loader-utilspy-load-deserialization2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94095-netcore-nbr200v2-traceroute-diagnostic-feature-networktools-command-injection-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94090-justicerage-manalyze-pe-parser-pecpp-parsedebug-integer-underflow2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94089-d-link-dir-868l-authentication-webfaauthenticationcgi-strcpy-stack-based-overflow2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94051-0717376-coworkbench-pdf-tools-mcp-serverpy-controlflownode-server-side-request-forger2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94089-d-link-dir-868l-authentication-webfaauthenticationcgi-strcpy-stack-based-overflow-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94050-d-link-dir-x1860z-ubus-json-rpc-interface-routerdgetrandkey-information-disclosure2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94049-06ketan-slideshot-rendererts-renderslides-path-traversal2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94045-newbee-ltd-newbee-mall-goods-save-endpoint-uploadcontrollerjava-cross-site-scripting2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94046-0215andrewfeng-ace-mcp-mcp-tool-getfilesnippetts-getfilesnippet-path-traversal2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94043-free5gc-gmm-handlergo-race-condition2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94044-03-lovepreetsingh-mcp-routets-createfile-path-traversal2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94048-codeastro-qr-code-attendance-management-system-usercontrollerphp-save-privileges-mana2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94047-samanhappy-mcphub-template-import-endpoint-templateservicets-importtemplate-privilege2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88857-joomla-extension-ordasoftcom-authenticated-privileged-remote-code-execution-in-ordaso2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88855-joomla-extension-ordasoftcom-authenticated-privileged-sql-injection-in-ordasoft-jooml2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88856-joomla-extension-ordasoftcom-authenticated-privileged-remote-code-execution-in-ordaso2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88854-joomla-extension-ordasoftcom-unauthenticated-sql-injection-in-ordasoft-joomla-gallery2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88857-joomla-extension-ordasoftcom-authenticated-privileged-remote-code-execution-in-ordaso-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88854-joomla-extension-ordasoftcom-unauthenticated-sql-injection-in-ordasoft-joomla-gallery-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88855-joomla-extension-ordasoftcom-unauthenticated-sql-injection-in-ordasoft-joomla-gallery2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88856-joomla-extension-ordasoftcom-authenticated-privileged-remote-code-execution-in-ordaso-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94042-adithyayelloju-restaurant-management-system-addtablephp-mysqliquery-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94040-vas3k-taxhacker-actionsts-testllmprovideraction-server-side-request-forgery2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94038-noncegeek-dim-sum-app-deno-backend-maintsx-textsearchv2handler-server-side-request-fo2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94039-vas3k-taxhacker-invoice-pdf-renderer-actionsts-generateinvoicepdf-server-side-request2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94037-00kisumi00-mcp-file-analyzer-analyzecsvdata-mcp-tool-mainpy-controlflownode-path-trav2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94041-adithyayelloju-restaurant-management-system-addmenuphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94036-d-link-dir-x1860dir-x1860z-routerd-ubus-access-control2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94036-d-link-dir-x1860dir-x1860z-routerd-ubus-access-control-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94033-sourcecodester-drug-recommendation-system-user-management-adduser-cross-site-scriptin2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94034-sourcecodester-drug-recommendation-system-password-change-changepassword-cross-site-s2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94032-itsourcecode-leave-management-system-indexphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94035-sourcecodester-drug-recommendation-system-indexphp-cross-site-scripting2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94031-0-gaurav-0-nexus-mcp-nexusreauth-mcp-tool-browserts-childprocessexec-command-injectio2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94030-serenityos-libgfx-bmploadercpp-decodebmppixeldata-integer-overflow2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94015-sourcecodester-drug-recommendation-system-edituserphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94028-mealie-recipes-mealie-recipe-action-trigger-controllergrouprecipeactionspy-payloadmod2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94016-sourcecodester-drug-recommendation-system-addsymptom-cross-site-scripting2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92254-watchdog-antivirus-kernel-driver-arbitrary-file-deletion-via-unauthenticated-ioctl2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92252-incorrect-default-permissions-in-watchdog-anti-virus-installation-directory2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92253-arbitrary-file-write-via-directory-junction-in-watchdog-anti-virus-quarantine-restora2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90817-redcap-remote-code-execution-vulnerability-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-90817-redcap-remote-code-execution-vulnerability2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94109-openequella-before-202610-remote-code-execution-via-freemarker-template-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94003-comfast-cf-n1-s-web-management-mbox-config-getcsspathfromuri-stack-based-overflow2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94113-frappe-erpnext-before-151210-and-16340-missing-authorization-in-timesheet-endpoints2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94111-tencent-browserskill-through-030-origin-validation-error-in-local-websocket-daemon2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94112-mayswind-ezbookkeeping-before-200-totp-replay-attack2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94004-dedecms-mytagjsphp-code-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94109-openequella-before-202610-remote-code-execution-via-freemarker-template-injection-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94003-comfast-cf-n1-s-web-management-mbox-config-getcsspathfromuri-stack-based-overflow-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93979-code-projects-internship-management-system-loginphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93980-code-projects-internship-management-system-admin-login-form-loginphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93978-code-projects-internship-management-system-loginphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93977-code-projects-assessment-management-add-single-markphp-cross-site-scripting2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93997-sourcecodester-drug-recommendation-system-editsymptomphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94108-getid3-through-1926-xml-external-entity-injection-via-xml2array2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94108-getid3-through-1926-xml-external-entity-injection-via-xml2array-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94106-getid3-before-1926-os-command-injection-via-unescaped-filenames2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94107-nivocart-through-240-predictable-administrator-password-reset-token2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94107-nivocart-through-240-predictable-administrator-password-reset-token-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94106-getid3-before-1926-os-command-injection-via-unescaped-filenames-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94105-nivocart-through-240-destructive-configuration-write-via-the-password-reset-controlle2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94104-nivocart-through-240-arbitrary-file-upload-rce-via-filemanager-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94104-nivocart-through-240-arbitrary-file-upload-rce-via-filemanager2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93976-code-projects-assessment-management-add-userphp-cross-site-scripting2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93975-code-projects-assessment-management-user-editing-edit-userphp-cross-site-scripting2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93973-sourcecodester-online-reviewer-management-system-btnfunctionsphp-remove-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93974-sourcecodester-online-reviewer-management-system-btnfunctionsphp-remove-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86555-hardcoded-key-vulnerability-in-zte-smartlife-app2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93970-aiyiyi121-sxdevops-settings-settingspy-hard-coded-credentials2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86554-email-enumeration-and-account-id-leakage-vulnerabilities-in-zte-smartlife-app2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93972-sourcecodester-online-reviewer-management-system-btnfunctionsphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93971-aiyiyi121-sxdevops-settingspy-information-disclosure2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93969-aiyiyi121-sxdevops-servicespy-ensuredefaultsuperuser-hard-coded-credentials2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93968-aiyiyi121-sxdevops-userserializer-serializerspy-update-privileges-management2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92422-meow-gallery-555-unauthenticated-arbitrary-shortcode-execution-via-loadgallerycollect2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93966-aiyiyi121-sxdevops-taskruncommand-hosttaskspy-paramikosshclientexeccommand-command-in2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92965-tiktok-120-141-unauthenticated-oauth-code-redemption2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92540-import-and-export-users-and-customers-252-custom-role-privilege-escalation-to-adminis2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92541-import-and-export-users-and-customers-252-custom-role-privilege-escalation-to-adminis2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92423-meow-gallery-555-author-draft-and-private-post-disclosure-via-fetchposts2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93967-aiyiyi121-sxdevops-command-servicespy-generatehosttask-command-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92410-sign-up-sheets-240-arbitrary-sign-up-deletion-via-csrf2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-84223-kirki-600-630-author-stored-xss-via-unsanitized-svg-upload2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87068-forminator-forms-15721-authenticated-privilege-escalation-via-quiz-lead-form-import2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82842-saml-single-sign-on-600-unauthenticated-privilege-escalation-via-account-matching-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87839-tripzzy-151-unauthenticated-arbitrary-comment-deletion2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82842-saml-single-sign-on-600-unauthenticated-privilege-escalation-via-account-matching2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87067-forminator-forms-15721-authenticated-rce-via-xml-rpc-php-object-injection-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87067-forminator-forms-15721-authenticated-rce-via-xml-rpc-php-object-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85017-unlimited-elements-for-elementor-2020-subscriber-php-object-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87840-tripzzy-151-unauthenticated-booking-data-tampering2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81652-nextgen-gallery-450-contributor-image-metadata-disclosure-via-idor2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81651-nextgen-gallery-450-authenticated-cross-gallery-settings-modification-via-idor2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81654-nextgen-gallery-450-authenticated-plugin-image-settings-update2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81650-nextgen-gallery-450-authenticated-arbitrary-file-upload-via-zip-import2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-81653-nextgen-gallery-450-authenticated-arbitrary-gallery-image-deletion-via-idor2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93965-aiyiyi121-sxdevops-mcp-stdio-server-management-servicespy-subprocesspopen-command-inj2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93964-nginxproxymanager-nginx-proxy-manager-validate-route-certificatejs-internalcertificat2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93962-kamailio-cdp-diameter-receiver-receiverc-shmmalloc-heap-based-overflow-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93962-kamailio-cdp-diameter-receiver-receiverc-shmmalloc-heap-based-overflow2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93961-dromara-ujcms-usercontroller-usercontrollerjava-usernameexist-improper-authorization2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93963-itsourcecode-leave-management-system-controllerphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86553-a-password-reset-vulnerability-in-zte-smartlife-app-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86553-a-password-reset-vulnerability-in-zte-smartlife-app2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93959-sourcecodester-online-reviewer-management-system-btnfunctionsphp-sql-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86552-a-vulnerability-that-skips-email-ownership-verification-for-account-registration-in-z2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93960-pixelfed-oauth-scope-apiv1controllerphp-instancepeers-missing-authentication2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93958-d-link-r95-dhmapi-ssi-system-os-command-injection2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94083-suricata-doh2-type-confusion-vulnerability2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94084-suricata-http2threadmultibuf-use-after-free2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86551-wi-fi-mac-address-obtainment-by-non-privileged-program-vulnerability-in-zte-z80ultra2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94084-suricata-http2threadmultibuf-use-after-free-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94083-suricata-doh2-type-confusion-vulnerability-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93958-d-link-r95-dhmapi-ssi-system-os-command-injection-12026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93957-olivier-ls-php-fts-filter-matching-searchenginephp-matchessinglefilter-comparison2026-09-20weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94056-exim-information-disclosure-vulnerability2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94057-exim-smtp-smuggling-vulnerability2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93991-argo-workflows-410-through-413-cross-namespace-disclosure-via-negated-selector-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93992-gopeed-through-200-beta3-arbitrary-file-write-via-path-traversal-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93991-argo-workflows-410-through-413-cross-namespace-disclosure-via-negated-selector2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93990-expat-through-284-malformed-utf-16-acceptance-via-unchecked-surrogate2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93989-vllm-through-0290-cross-request-logits-corruption-via-badwords2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94055-exim-use-after-free-vulnerability2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93992-gopeed-through-200-beta3-arbitrary-file-write-via-path-traversal2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93993-mistral-vibe-before-2255-remote-code-execution-via-git-post-checkout-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93993-mistral-vibe-before-2255-remote-code-execution-via-git-post-checkout2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94054-exim-proxy-protocol-out-of-bounds-write2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93990-expat-through-284-malformed-utf-16-acceptance-via-unchecked-surrogate-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93955-grimmory-tools-grimmory-download-endpoint-kobocontrollerjava-streamfiletoresponse-aut2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93956-olivier-ls-php-fts-search-searchenginephp-buildhighlights-cross-site-scripting2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93988-qloapps-through-170-arbitrary-file-read-via-getemailhtml2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89155-rejected-reason-this-cve-id-has-been-rejected-or2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93954-grimmory-tools-grimmory-settings-api-endpoint-appsettingcontrollerjava-appsettingcont2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82672-unvalidated-chunk-size-line-tail-in-mint-http1-client-enables-response-smuggling-agai2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94000-keycloak-services-keycloak-services-delegated-admin-with-manage-users-can-escalate-to2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93999-keycloak-services-keycloak-services-token-refresh-continues-issuing-tokens-for-disabl2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-94001-keycloak-services-keycloak-services-admin-credential-delete-bypasses-denied-reset-pas2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-82560-podtext-versions-before-611-for-perl-allow-cpu-and-memory-exhaustion-formatting-a-pod2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=identity-visibility-in-2026-the-foundation-of-identity-security2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93985-openpanel-js-runtime-javascript-template-sandbox-escape-rce2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93987-rclone-serve-docker-path-traversal-via-volume-name2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93986-rclone-before-1751-path-traversal-via-directory-listing-names2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93985-openpanel-js-runtime-javascript-template-sandbox-escape-rce-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93984-openpanel-api-authentication-bypass-via-unverified-client-secret2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93983-openpanel-sql-injection-via-clickhouse-property-key-filter2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93982-openpanel-mcp-authentication-token-in-query-parameter-logged-plaintext2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93981-honojsx-before-4137-cross-site-scripting-via-unescaped-strings2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-78030-dbi-versions-before-1653-for-perl-load-arbitrary-modules-via-unvalidated-dbmtype-and2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-78030-dbi-versions-before-1653-for-perl-load-arbitrary-modules-via-unvalidated-dbmtype-and-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=claude-opus-5-helped-researchers-take-over-openai-staff-accounts-via-chained-flaws2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=claude-opus-5-helped-researchers-take-over-openai-staff-accounts-via-chained-flaws-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=solarwinds-patches-arm-hard-coded-key-flaw-enabling-unauthenticated-rce-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=solarwinds-patches-arm-hard-coded-key-flaw-enabling-unauthenticated-rce2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9613-datalogics-ecommerce-delivery-2665-missing-authorization-to-authenticated-subscriber-a2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9858-partial-shipment-for-woocommerce-34-missing-authorization-to-authenticated-subscriber2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9766-empik-for-woocommerce-151-missing-authorization-to-authenticated-subscriber-arbitrary2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-76579-litespeed-cache-79-reflected-cross-site-scripting-via-esi-esi-parameter2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9289-wordlift-35410-unauthenticated-sensitive-information-exposure-in-json-ld-rest-api-endp2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93742-totolink-a3002mu-formwsc-command-injection-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-1255-ys-leadgen-popups-opt-ins-lead-capture-214-unauthenticated-information-disclosure-in-y2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-1256-ys-leadgen-popups-opt-ins-lead-capture-214-missing-authorization-to-authenticated-subs2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-8354-gum-addon-for-elementor-1315-authenticated-contributor-stored-cross-site-scripting-via2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93742-totolink-a3002mu-formwsc-command-injection2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-5410-redux-framework-4513-authenticated-subscriber-stored-cross-site-scripting-via-spinner2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-18346-tiktok-141-missing-authorization-to-unauthenticated-tiktok-integration-takeover-via-a2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=critical-pre-auth-rce-in-orkes-conductor-workflow-platform-exploited-in-the-wild2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=critical-pre-auth-rce-in-orkes-conductor-workflow-platform-exploited-in-the-wild-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9615-flex-import-30-missing-authorization-to-authenticated-subscriber-arbitrary-modificatio2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85658-paid-membership-plugin-ecommerce-user-registration-form-login-form-user-profile-restr2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-4327-the-welcomizer-281-missing-authorization-to-authenticated-subscriber-remote-code-execu2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=google-gemini-broke-into-real-company-systems-after-security-test-domain-mix-up2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15098-real-3d-flipbook-511-authenticated-contributor-stored-cross-site-scripting-via-lightb2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-1984-ibtana-ecommerce-product-addons-0477-missing-authorization-to-authenticated-subscriber2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9855-custom-field-template-278-authenticated-contributor-sql-injection-via-postid-parameter2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-87917-mc4wp-mailchimp-for-wordpress-4140-reflected-cross-site-scripting-via-data-dynamic-co2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85658-paid-membership-plugin-ecommerce-user-registration-form-login-form-user-profile-restr-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-7527-wp-ghost-hide-my-wp-ghost-7002-unauthenticated-open-redirect-via-redirectto-parameter2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-5400-redux-framework-4513-authenticated-subscriber-cross-site-scripting-via-user-input2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-12402-otp-login-register-woocommerce-273-authenticated-administrator-stored-cross-site-scri2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-75959-gopay-for-woocommerce-1036-authenticated-shop-manager-sql-injection-via-logtablefilte2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13200-create-253-authenticated-author-sql-injection-via-order-parameter2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-4327-the-welcomizer-281-missing-authorization-to-authenticated-subscriber-remote-code-execu-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-2422-wp-composer-105-authenticated-contributor-stored-cross-site-scripting-via-pbwprawshort2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-1641-wow-elements-addons-for-elementor-1112-authenticated-contributor-server-side-request-f2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15463-ssl-zen-4742-reflected-cross-site-scripting-via-uri-and-host-parameters2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9232-easy-appointments-31227-missing-authorization-to-authenticated-contributor-sensitive-c2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15946-search-atlas-seo-2623-missing-authorization-to-authenticated-subscriber-whitelabel-pa2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-6295-wp-optimizer-250-authenticated-administrator-sql-injection-via-s-parameter2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13191-create-253-authenticated-author-sql-injection-via-orderby-parameter2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-9832-payment-gateway-of-stripe-for-woocommerce-508-unauthenticated-improper-verification-of2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-13770-appmysite-3153-authenticated-subscriber-stored-cross-site-scripting-via-saveamslicens2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-1242-blockspare-gutenberg-site-builder-blocks-starter-sites-426-incorrect-authorization-to2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-15947-search-atlas-seo-2623-missing-authorization-to-authenticated-subscriber-site-wide-opt2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-4792-bread-2912-missing-authorization-to-unauthenticated-information-exposure2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-2278-vw-writer-blog-138-missing-authorization-to-authenticated-subscriber-theme-settings-re2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-11899-pdf-builder-for-woocommerce-create-invoicespacking-slips-and-more-2011-missing-author2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88824-master-blocks-141-1414-unauthenticated-stored-xss-via-white-label-settings2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86591-botiga-pro-165-unauthenticated-arbitrary-blog-options-update-via-templates-builder-re2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88926-vikrentitems-flexible-rental-management-system-124-unauthenticated-sqli2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-86814-userswp-social-login-1510-unauthenticated-account-takeover-via-unverified-provider-em2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85574-unbounce-landing-pages-111-114-subscriber-reverse-proxy-target-hijack-via-setunbounce2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-85680-ultimate-member-2131-unauthenticated-stored-xss-via-profile-page-title2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=crowdsec-says-tanstack-npm-attack-led-to-copy-of-170-private-github-repositories2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=crowdsec-says-tanstack-npm-attack-led-to-copy-of-170-private-github-repositories-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cisa-flags-three-linux-kernel-vulnerabilities-exploited-in-the-wild2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93741-totolink-a3002mu-formwlwds-buffer-overflow2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-93741-totolink-a3002mu-formwlwds-buffer-overflow-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92967-pochipp-1202-reflected-cross-site-scripting-via-keyword-parameter2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92229-forminator-forms-1572-unauthenticated-arbitrary-shortcode-execution-via-currenturl-pa-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92807-save-as-pdf-plugin-by-pdfcrowd-461-authenticated-contributor-arbitrary-function-invoc-12026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92229-forminator-forms-1572-unauthenticated-arbitrary-shortcode-execution-via-currenturl-pa2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-92807-save-as-pdf-plugin-by-pdfcrowd-461-authenticated-contributor-arbitrary-function-invoc2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-88944-tutor-lms-408-missing-authorization-to-authenticated-subscriber-arbitrary-post-deleti2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89333-tutor-lms-408-insecure-direct-object-reference-to-authenticated-subscriber-sensitive2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89334-better-messages-21533-missing-authorization-to-authenticated-custom-chat-room-transcr2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89081-tutor-lms-408-reflected-cross-site-scripting-via-backurl-and-search-parameters2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89093-better-messages-21533-unauthenticated-information-exposure-spoofing-via-x-real-ip-hea2026-09-19weekly0.8 https://zerodaydigest.net/article.html?slug=cve-2026-89274-wp-recipe-maker-1081-unauthenticated-arbitrary-shortcode-execution-via-recipe-comment-12026-09-19weekly0.8