Zero Day Initiative (Published)

Uebersicht

Letzter Fetch Letzter Erfolg Aufeinanderfolgende Fehler Letzte Fehlermeldung ETag Last-Modified
2026-10-21 10:18 UTC 2026-10-21 10:18 UTC 0 - - -

Letzte Eintraege

668 Eintraege · 50 pro Seite · Seite 6 von 14

Veroeffentlicht Titel CVEs EPSS-Pctl Severity
2026-08-11 05:00

ZDI-26-531: SonicWall GMS Virtual Appliance interface Command Injection Local Privilege Escalation Vulnerability

CVE-2026-66148

MEDIUM
2026-08-11 05:00

ZDI-26-530: SonicWall Email Security snmp Command Injection Local Privilege Escalation Vulnerability

CVE-2026-66150

HIGH
2026-08-11 05:00

ZDI-26-528: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVE-2026-28220

HIGH
2026-08-11 05:00

ZDI-26-527: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVE-2026-44901

HIGH
2026-08-11 05:00

ZDI-26-549: OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2026-18290

HIGH
2026-08-11 05:00

ZDI-26-556: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

CVE-2026-18263

HIGH
2026-08-11 05:00

ZDI-26-534: (Pwn2Own) Microsoft Exchange Capture-Replay Authentication Bypass Vulnerability

CVE-2026-62911

HIGH
2026-08-11 05:00

ZDI-26-529: Samsung Galaxy S25 TIFF File Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2026-21045

HIGH
2026-08-11 05:00

ZDI-26-544: Microsoft Windows Deployment Services Use-After-Free Remote Code Execution Vulnerability

CVE-2026-62893

CRITICAL
2026-08-11 05:00

ZDI-26-555: Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability

CVE-2026-18262

HIGH
2026-08-05 05:00

ZDI-26-524: (0Day) PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability

CVE-2026-19908

HIGH
2026-08-05 05:00

ZDI-26-525: (0Day) PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability

CVE-2026-19909

HIGH
2026-07-30 05:00

ZDI-26-506: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Insertion of Sensitive Information into Log File Authentication Bypass Vulnerability

CVE-2026-44105

MEDIUM
2026-07-30 05:00

ZDI-26-504: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability

CVE-2026-7849

CRITICAL
2026-07-30 05:00

ZDI-26-511: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Symlink Following Local Privilege Escalation Vulnerability

CVE-2026-44093

HIGH
2026-07-30 05:00

ZDI-26-510: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Missing Cryptographic Signature Remote Code Execution Vulnerability

CVE-2026-44104

CRITICAL
2026-07-30 05:00

ZDI-26-512: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability

CVE-2026-44107

HIGH
2026-07-30 05:00

ZDI-26-502: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Link Following Local Privilege Escalation Vulnerability

CVE-2026-44106

HIGH
2026-07-30 05:00

ZDI-26-515: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-jupicore Missing Authentication Configuration Modification Vulnerability

CVE-2026-44100

CRITICAL
2026-07-30 05:00

ZDI-26-516: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability

CVE-2026-44090

CRITICAL
2026-07-30 05:00

ZDI-26-509: (Pwn2Own) Phoenix Contact CHARX SEC-3150 OCPP Missing Authentication for Critical Function Authentication Bypass Vulnerability

CVE-2026-44101

CRITICAL
2026-07-30 05:00

ZDI-26-508: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx_set_ip_address Improper Input Validation Local Privilege Escalation Vulnerability

CVE-2026-44095

HIGH
2026-07-30 05:00

ZDI-26-503: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Race Condition Firewall Bypass Vulnerability

CVE-2026-44108

CRITICAL
2026-07-30 05:00

ZDI-26-514: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Failing Open Authentication Bypass Vulnerability

CVE-2026-44094

HIGH
2026-07-30 05:00

ZDI-26-518: (Pwn2Own) Phoenix Contact CHARX SEC-3150 MQTT Service Server-Side Request Forgery Remote Code Execution Vulnerability

CVE-2026-44091

CRITICAL
2026-07-30 05:00

ZDI-26-513: (Pwn2Own) Phoenix Contact CHARX SEC-3150 update2-upload Arbitrary File Upload Vulnerability

CVE-2026-44097

HIGH
2026-07-30 05:00

ZDI-26-521: Phoenix Contact CHARX SEC-3000 Command Injection Remote Code Execution Vulnerability

CVE-2026-44095

HIGH
2026-07-30 05:00

ZDI-26-505: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-system-config-manager Service CRLF Injection Firewall Bypass Vulnerability

CVE-2026-44092

CRITICAL
2026-07-30 05:00

ZDI-26-520: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Jupicore External Control of Path Remote Code Execution Vulnerability

CVE-2026-44103

MEDIUM
2026-07-30 05:00

ZDI-26-522: Phoenix Contact CHARX SEC-3000 Insertion of Sensitive Information into Log File Information Disclosure Vulnerability

CVE-2026-41032

HIGH
2026-07-30 05:00

ZDI-26-519: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability

CVE-2026-44099

HIGH
2026-07-30 05:00

ZDI-26-523: Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVE-2026-15679

HIGH
2026-07-30 05:00

ZDI-26-517: (Pwn2Own) Phoenix Contact CHARX SEC-3150 BackendURL WebSocket Command Injection Remote Code Execution Vulnerability

CVE-2026-44098

HIGH
2026-07-30 05:00

ZDI-26-507: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Privilege Defined With Unsafe Actions Local Privilege Escalation Vulnerability

CVE-2026-44096

HIGH
2026-07-29 05:00

ZDI-26-464: GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2026-18296

HIGH
2026-07-29 05:00

ZDI-26-498: TrendAI Vision One Incorrect Privilege Assignment Privilege Escalation Vulnerability

CVE-2025-71387

-
2026-07-29 05:00

ZDI-26-486: (Pwn2Own) Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability

CVE-2026-18269

MEDIUM
2026-07-29 05:00

ZDI-26-485: (Pwn2Own) Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability

CVE-2026-18268

HIGH
2026-07-29 05:00

ZDI-26-482: Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability

CVE-2026-59689

HIGH
2026-07-29 05:00

ZDI-26-481: Progress Software Kemp LoadMaster access Missing Authorization Privilege Escalation Vulnerability

CVE-2026-59690

HIGH
2026-07-29 05:00

ZDI-26-490: (Pwn2Own) Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability

CVE-2026-18273

MEDIUM
2026-07-29 05:00

ZDI-26-489: (Pwn2Own) Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability

CVE-2026-18272

MEDIUM
2026-07-29 05:00

ZDI-26-501: WatchGuard FireWare OS sigd comp_start_cb Directory Traversal Arbitrary File Creation Vulnerability

CVE-2026-13054

HIGH
2026-07-29 05:00

ZDI-26-484: (Pwn2Own) Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability

CVE-2026-18267

MEDIUM
2026-07-29 05:00

ZDI-26-491: Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability

CVE-2026-43673

HIGH
2026-07-29 05:00

ZDI-26-499: WatchGuard FireWare OS cli Token Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2026-13053

HIGH
2026-07-29 05:00

ZDI-26-495: (Pwn2Own) VMware ESXi VMXNET3 espQueueMask Out-Of-Bounds Write Local Privilege Escalation Vulnerability

CVE-2026-47876

CRITICAL
2026-07-29 05:00

ZDI-26-494: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2026-43729

HIGH
2026-07-29 05:00

ZDI-26-493: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

CVE-2026-43733

HIGH
2026-07-29 05:00

ZDI-26-487: (Pwn2Own) Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability

CVE-2026-18270

HIGH