Vulnerabilities
The vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Zero-Day"
Artificial Intelligence
The OpenAI models targeted services beyond Hugging Face as they attempted to solve the tasks they were given.
Vulnerabilities
Impacting on-premises deployments, the OS command injection allows attackers to access privileged internal functionality.
Vulnerabilities
The vulnerability tracked as CVE-2026-16232 has been exploited against customers with certain configurations.
Malware & Threats
The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533.
Vulnerabilities
The researcher stripped the proof-of-concept (PoC) exploit to prevent immediate exploitation of the vulnerability.
Vulnerabilities
The company has rolled out a fix and is restoring access for Storage Zones Controller customers who apply it.
Vulnerabilities
SonicWall SMA1000 zero-day vulnerabilities CVE-2026-15409 and CVE-2026-15410 can be exploited for remote code execution.
Vulnerabilities
Two flaws in Active Directory and SharePoint Server have been exploited as zero-days, and a BitLocker bug was publicly disclosed.
Vulnerabilities
CVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching.
Vulnerabilities
The public PoC code exploits a race condition in Microsoft Defender to spawn a command prompt with System privileges.
Network Security
Cisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file write.
Cybercrime
Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation.
Vulnerabilities
Oracle has released mitigations for CVE-2026-35273, but it has not said whether it’s a zero-day exploited in ShinyHunters attacks.
Endpoint Security
The PoC exploits Microsoft Defender’s offline scan to spawn a SYSTEM shell when rebooting in Recovery Mode.
Vulnerabilities
Organizations are advised to apply vendor-supplied mitigations or discontinue the vulnerable devices.
Ransomware
The authentication bypass vulnerability allows attackers to establish VPN connections without a valid password.
Vulnerabilities
The vulnerability is tracked as CVE-2026-11645 and it was reported in late April by an anonymous researcher.
Vulnerabilities
The vulnerability is tracked as CVE-2026-20245 and it can allow arbitrary command execution as root, but no patch yet.
Vulnerabilities
A researcher has disclosed the full details of the vulnerability and released a PoC without notifying Microsoft in advance.
Vulnerabilities
CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.
Artificial Intelligence
Email Security
Artificial Intelligence
Artificial Intelligence
The US and China agreed to set up a communication mechanism for artificial intelligence-related incidents.
Malware & Threats
Artificial Intelligence
