🔍 Zero Day Initiative

ZDI-26-779: (0Day) Sparx Systems Enterprise Architect XSLT Debugger XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sparx Systems Enterprise Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a...

#ZeroDay #Vulnerability

🔴 CVE Digest — 16 Oct 2026
4 critical vulnerabilities

🔴 CVE-2026-44977 · CVSS 9.0
countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44,...
🔴 CVE-2026-57169 · CVSS 9.6
Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint...
🔴 CVE-2026-95182 · CVSS 10.0
An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via...
🔴 CVE-2026-105279 · CVSS 9.3
In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can...

#CVE #Critical #Vulnerability

📰 BleepingComputer

Zero-click attacks used targeted ads to deliver Candiru spyware

Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim's device. [...]

#CyberNews #Infosec

🔍 Zero Day Initiative

ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LibreOffice. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following...

#ZeroDay #Vulnerability

🔍 Zero Day Initiative

ZDI-26-782: LibreOffice PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LibreOffice. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following...

#ZeroDay #Vulnerability

🔍 Zero Day Initiative

ZDI-26-781: LibreOffice EMF+ Brush Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LibreOffice. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following...

#ZeroDay #Vulnerability

📰 Dark Reading

AI Takes Control of Robotic Arm in 16 Minutes Flat

Most OT devices at utilities, factories, and elsewhere have been deployed for a decade or more, but operators need to get agile and deploy new cyber defenses.

#CyberNews #Infosec

🔴 CVE Digest — 16 Oct 2026
11 critical vulnerabilities

🔴 CVE-2026-111711 · CVSS 9.8
Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's...
🔴 CVE-2026-111708 · CVSS 9.8
WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated...
🔴 CVE-2026-111704 · CVSS 9.8
LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote...
🔴 CVE-2026-111693 · CVSS 9.8
DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauthenticated...
🔴 CVE-2026-111692 · CVSS 9.8
DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated...
🔴 CVE-2026-111691 · CVSS 9.1
WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows attackers to impersonate any...
🔴 CVE-2026-111690 · CVSS 9.8
Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers...
🔴 CVE-2026-111687 · CVSS 9.8
WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to...
🔴 CVE-2026-111675 · CVSS 9.1
Course-tencent-cloud through 2.0.1 contains an improper restriction of authentication attempts vulnerability that...
🔴 CVE-2026-111673 · CVSS 9.8
IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify,...
🔴 CVE-2026-111663 · CVSS 9.2
Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to...

#CVE #Critical #Vulnerability

📰 BleepingComputer

Critical BlockStrap flaw lets hackers run code on Magento servers

Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers. [...]

#CyberNews #Infosec

📰 Dark Reading

Biomemory Launches DNA Shield, First Commercial Product Built on Its Molecular IT Platform

The launch follows the acquisition of catalog's assets and the appointment of Laurent Guengant as CEO earlier this year.

#CyberNews #Infosec

📰 Dark Reading

Enterprise AI Enters Risk Management Phase as Security Concerns Rise

Companies are increasingly discovering that the challenge with AI is no longer adoption, but execution.

#CyberNews #Infosec

📰 Dark Reading

BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs

Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.

#CyberNews #Infosec

📰 Dark Reading

Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk

Campaigns that impersonate popular AI brands are on the rise, and they typically use ClickFix-like tactics to target unsuspecting enterprise employees.

#CyberNews #Infosec

🔴 CVE Digest — 16 Oct 2026
2 critical vulnerabilities

🔴 CVE-2026-96620 · CVSS 9.2
Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a...
🔴 CVE-2026-102608 · CVSS 9.0
ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, downloadEvents()...

#CVE #Critical #Vulnerability

🔍 Zero Day Initiative

ZDI-26-785: FreeBSD Kernel Shared Memory Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of FreeBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The...

#ZeroDay #Vulnerability

🔍 Zero Day Initiative

ZDI-26-784: FreeBSD Kernel kqueue Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of FreeBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The...

#ZeroDay #Vulnerability

🔴 CVE Digest — 17 Oct 2026
1 critical vulnerability

🔴 CVE-2026-111823 · CVSS 9.8
Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.

#CVE #Critical #Vulnerability

🔴 CVE Digest — 17 Oct 2026
1 critical vulnerability

🔴 CVE-2026-110653 · CVSS 9.1
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to...

#CVE #Critical #Vulnerability

🔴 CVE Digest — 17 Oct 2026
1 critical vulnerability

🔴 CVE-2026-104736 · CVSS 9.8
The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via...

#CVE #Critical #Vulnerability

📰 BleepingComputer

Drupal patches critical RCE flaws, warns exploits may emerge soon

Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...]

#CyberNews #Infosec