A heap-based buffer overflow vulnerability exists in libilbm's ILBM file parsing functionality, allowing remote attackers to execute arbitrary code. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability is tracked as CVE-2025-10935 and has a high severity rating of 7.8 by the Zero Day Initiative.
A SQL injection vulnerability in Philips Hue Bridge Pro allows network-adjacent attackers to execute arbitrary code. Exploitation requires authentication, but the authentication mechanism can be bypassed. The vulnerability is assigned CVE-2026-118632 with a high severity rating.
A use-after-free vulnerability in Trimble SketchUp's SKP file parsing allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The vulnerability is assigned CVE-2026-121741 with a high severity rating by ZDI.
High7.1EPSS 0.1%Zero Day InitiativeCVE-2026-121614
A remote code execution vulnerability exists in Docker Sandboxes that allows local attackers to execute arbitrary code. Exploitation requires user interaction, such as visiting a malicious webpage or opening a malicious file. The vulnerability has been assigned CVE-2026-121614 and a CVSS rating of 7.8 by the Zero Day Initiative.
Medium5.4EPSS 0.1%Zero Day InitiativeCVE-2026-76181
A heap-based buffer overflow vulnerability in LibreOffice's dBase file parsing allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The vulnerability has a high severity rating with a CVSS score of 7.8 assigned by the Zero Day Initiative.
A heap-based buffer overflow vulnerability exists in OriginLab Origin Viewer when parsing OGWU files. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page, and can lead to remote code execution. The vulnerability has a high severity rating assigned by ZDI.
A remote code execution vulnerability exists in OriginLab Origin Viewer due to an out-of-bounds write in OGG file parsing. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious webpage. The vulnerability has a high severity rating with a CVSS score assigned by ZDI of 7.8. No affected versions or patch information are provided.
A remote code execution vulnerability exists in OriginLab Origin Viewer due to an out-of-bounds write during OPJ file parsing. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The vulnerability is assigned CVE-2026-114560 with a high severity rating of 7.8 by ZDI.
A remote code execution vulnerability exists in OriginLab Origin Viewer when parsing OPJU files. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The vulnerability has a high severity rating of 7.8 assigned by ZDI.
A remote code execution vulnerability exists in OriginLab Origin Viewer due to an out-of-bounds write in OGWU file parsing. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The vulnerability has a high severity rating assigned by ZDI.
A stack-based buffer overflow vulnerability exists in OriginLab Origin Viewer when parsing OGWU files. This flaw allows remote attackers to execute arbitrary code on affected systems if a user opens a malicious file or visits a malicious page. Exploitation requires user interaction. The vulnerability is rated high severity with a CVSS score of 7.8 assigned by the Zero Day Initiative.
A remote code execution vulnerability exists in OriginLab Origin Viewer due to an out-of-bounds write in OGG file parsing. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The vulnerability has a high severity rating of 7.8 assigned by ZDI.
A remote code execution vulnerability exists in OriginLab Origin Viewer due to an out-of-bounds write during OGG file parsing. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The vulnerability has a high severity rating of 7.8 assigned by ZDI.
A memory corruption vulnerability in OriginLab Origin Viewer allows remote attackers to execute arbitrary code if a user opens a malicious file or visits a malicious page. Exploitation requires user interaction. The vulnerability is rated high severity with a CVSS score of 7.8 assigned by the Zero Day Initiative.
A remote code execution vulnerability exists in OriginLab Origin Viewer due to an out-of-bounds write in OGWU file parsing. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The vulnerability is assigned CVE-2026-114567 with a high severity rating by ZDI.
A heap-based buffer overflow vulnerability in OriginLab Origin Viewer OPJ file parsing allows remote attackers to execute arbitrary code. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The vulnerability is assigned CVE-2026-114568 with a high severity rating of 7.8 by ZDI.
A remote code execution vulnerability exists in OriginLab Origin Viewer when parsing OPJU files. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The vulnerability is rated high severity with a CVSS score of 7.8 assigned by ZDI.
ARTEX is an AI-powered autonomous hacking platform used by cybercriminals to conduct large-scale, financially motivated attacks. It leverages AI agents to discover and exploit web vulnerabilities such as Remote Code Execution (RCE) and conduct supply chain attacks with minimal human interaction. The platform, originally open-source, has been forked and remains publicly accessible despite being closed by its developer. ARTEX operators primarily use Chinese AI models and deploy attacks broadly, targeting various industries including gray-market code-signing certificate shops. Misconfigurations expose many ARTEX instances publicly, enabling remote access to administrative interfaces and operator data.
Cisco and WatchGuard have released patches addressing multiple vulnerabilities, including a high-severity remote code execution (RCE) flaw in Cisco UCS Central Software and critical authentication and integrity issues in WatchGuard products. WatchGuard also disclosed a critical use-after-free vulnerability in the Linux kernel affecting some of its products, though not exploitable via RCE in those cases. SonicWall's legacy Global Management System (GMS), which reached end-of-life in October 2025, contains two vulnerabilities—a critical unauthenticated file read and a medium-severity SQL injection—that will remain unpatched.
Aegis Latent Core is a tamper-evident evidence chain designed to secure AI interaction logs by hash-chaining and signing each event before delivery. It aims to help blue teams detect post-collection tampering of AI traffic logs, preserve forensic artifacts, and support compliance with AI traceability regulations. It does not prevent or detect endpoint compromise or guarantee client honesty, as it starts at the collector. The system is intended as an additional evidence layer rather than a SIEM replacement or producer attestation mechanism.