This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-2921.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-3084.
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-3086.
A critical vulnerability in FreeScout enables zero-click remote code execution, allowing attackers to fully compromise affected servers without user interaction. This flaw is a patch bypass of an authenticated code execution bug, meaning attackers can exploit it even after patches were applied. The vulnerability affects FreeScout installations, potentially leading to complete server takeover. No known exploits are currently observed in the wild, but the risk remains high due to the severity and ease of exploitation. Organizations using FreeScout should urgently review their exposure and apply mitigations. The threat primarily targets servers running FreeScout, an open-source help desk and customer support platform. Countries with significant FreeScout usage and critical infrastructure relying on it are at elevated risk. Immediate action is required to prevent potential full server compromises and data breaches.
CVE-2026-22719 is a critical remote code execution vulnerability in VMware Aria Operations that can be exploited by unauthenticated attackers. This flaw allows attackers to execute arbitrary code remotely without requiring authentication or user interaction. The vulnerability has been patched by VMware, but exploitation attempts have been observed in the wild, indicating active targeting. VMware Aria Operations is widely used for IT infrastructure monitoring and management, making this vulnerability particularly dangerous for organizations relying on this platform. Successful exploitation could lead to full system compromise, data breaches, and disruption of critical monitoring services. Organizations worldwide using VMware Aria Operations should urgently apply available patches and implement network-level protections. Countries with significant VMware market penetration and critical infrastructure reliance on VMware products are at higher risk. Due to the ease of exploitation, lack of authentication requirements, and potential for severe impact, this vulnerability is assessed as critical severity.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.4. The following CVEs are assigned: CVE-2025-71205.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.4. The following CVEs are assigned: CVE-2025-71206.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.4. The following CVEs are assigned: CVE-2025-71207.
This vulnerability allows remote attackers to escalate privileges on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2025-71208.
This vulnerability allows remote attackers to escalate privileges on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.1. The following CVEs are assigned: CVE-2025-71209.
An out-of-band security update for Junos OS Evolved patches the remote code execution vulnerability CVE-2026-21902. The post Juniper Networks PTX Routers Affected by Critical Vulnerability appeared first on SecurityWeek .
CISA has released an advisory to warn about four vulnerabilities discovered by a researcher in Gardyn Home and Gardyn Studio. The post Critical Flaws Exposed Gardyn Smart Gardens to Remote Hacking appeared first on SecurityWeek .
A critical vulnerability affecting the UPnP function in multiple Zyxel device models has been identified and patched. This flaw allows remote attackers to execute arbitrary code without authentication, posing a severe risk to affected devices. Exploitation could lead to full system compromise, enabling attackers to control the device, disrupt network operations, or pivot to internal networks. Although no known exploits are currently observed in the wild, the critical nature of the vulnerability demands immediate attention. Zyxel device users should promptly apply available patches to mitigate risk. The vulnerability primarily affects Zyxel devices widely deployed in enterprise and ISP environments globally. Countries with significant Zyxel market presence and strategic network infrastructure reliance are at higher risk. Given the ease of remote exploitation and potential for widespread impact, this vulnerability is assessed as critical severity. Defenders must prioritize patching, disable UPnP if not needed, and monitor network traffic for suspicious activity related to UPnP services.
SolarWinds has released patches for four critical vulnerabilities in its Serv-U product that could allow remote code execution. Exploitation of these vulnerabilities requires administrative privileges, limiting the attack surface to users with elevated access. Although no known exploits are currently active in the wild, the critical severity indicates a high risk if attackers gain admin-level access. Organizations using Serv-U should prioritize patching to prevent potential compromise. The vulnerabilities could lead to full system compromise, data theft, or disruption of services. Due to the administrative privilege requirement, insider threats or attackers who have already breached perimeter defenses pose the greatest risk. The threat primarily affects organizations relying on SolarWinds Serv-U for managed file transfer and related services. Countries with significant SolarWinds customer bases and critical infrastructure are at higher risk. Immediate mitigation involves applying official patches and reviewing administrative access controls. This threat is assessed as high severity given the critical impact but limited exploitation conditions.
By Aviv Donenfeld and Oded Vanunu Executive Summary Check Point Research has discovered critical vulnerabilities in Anthropic’s Claude Code that allow attackers to achieve remote code execution and steal API credentials through malicious project configurations. The vulnerabilities exploit various configuration mechanisms including Hooks, Model Context Protocol (MCP) servers, and environment variables -executing arbitrary shell commands […] The post Caught in the Hook: RCE and API Token Exfiltration Through Claude Code Project Files | CVE-2025-59536 | CVE-2026-21852<other cve="" id="" tbd=""></other> appeared first on Check Point Research .
CriticalEPSS 1.6%Zero Day InitiativeCVE-2025-15060
This vulnerability allows remote attackers to execute arbitrary code on affected installations of claude-hovercraft. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-15060.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of IceWarp. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2026-2493.
Broadcom has patched several vulnerabilities in VMware Aria Operations, including high-severity flaws. The post VMware Aria Operations Vulnerability Could Allow Remote Code Execution appeared first on SecurityWeek .
The flaw tracked as CVE-2026-2329 can be exploited without authentication for remote code execution with root privileges. The post Critical Grandstream Phone Vulnerability Exposes Calls to Interception appeared first on SecurityWeek .