Vulnerabilities
Remote attackers could trigger the critical-severity flaw to access privileged internal functionality.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Zero-Day"
Vulnerabilities
Unauthenticated attackers could send malicious traffic to BIG-IP to achieve remote code execution.
Vulnerabilities
Remote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests.
Mobile & Wireless
Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.
Email Security
An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.
Vulnerabilities
Multiple espionage-motivated threat actors have adopted BlueMoon in opportunistic, rushed deployments.
Vulnerabilities
Administrators are advised to check their deployments for newly created user accounts they don’t recognize.
Vulnerabilities
The proof-of-concept (PoC) exploits lead to privilege escalation, spawning a shell with System privileges.
Vulnerabilities
Google’s Chrome 152 security update resolves 12 vulnerabilities, including a high-severity type confusion flaw in the V8 engine.
Vulnerabilities
The vulnerabilities CVE-2026-83549 and CVE-2026-83548 can be chained for unauthenticated remote code execution.
Vulnerabilities
CISA has added the vulnerabilities tracked as CVE-2026-82078 and CVE-2026-81578 to its KEV catalog.
Endpoint Security
Kaspersky told SecurityWeek that it patched the vulnerability affecting its Endpoint Security product.
Vulnerabilities
PaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578.
Vulnerabilities
A CVE identifier has not yet been assigned, but PaperCut is urging NG/MF users to install patches and implement mitigations.
Vulnerabilities
The security defect is described as an SQL injection that could allow attackers to achieve remote code execution.
Vulnerabilities
Dropped on Patch Tuesday, the exploit allows any user to spawn a shell with System privileges.
Vulnerabilities
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.
Vulnerabilities
CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices.
Vulnerabilities
A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges.
Vulnerabilities
The security defect allows unauthenticated, remote attackers to gain administrative access to Metabase instances.
Vulnerabilities
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
Artificial Intelligence
Email Security
Artificial Intelligence
Artificial Intelligence
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
Malware & Threats
Artificial Intelligence
