ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

News

32 stories in the last 7d

Sortlatesthotimportance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllAI research 235Vulnerability 217Advisory 170AI safety & security 167AI industry 165Research 150Exploit / PoC 125Industry 110Data breach 64Threat actor 63Malware 62Tools 58Policy & legal 58Phishing & fraud 43
SeverityAllcritical 76high 310medium 314low 94info 1003

Cisco Identity Services Engine Authorization Bypass Vulnerabilities

Cisco fixed authorization bypass flaws in ISE and ISE-PIC web management letting authenticated admins modify file descriptions via crafted HTTP requests.

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine and ISE Passive Identity Connector result from missing server-side validation of Administrator permissions. An authenticated remote attacker with valid Administrator credentials can submit crafted HTTP requests to modify descriptions of files on specific pages. Cisco has released software updates addressing the issues.

Cisco Security Advisoriesupdated · 24m agofirst · 19h agoAdvisory 21 sources

GNU security advisory (AV26-923)

Canadian Cyber Centre advisory AV26-923 flags a stack overflow in GNU libextractor before v1.15 via OLE2 files.

The Canadian Centre for Cyber Security issued advisory AV26-923 on September 15, 2026, covering CVE-2026-91752, a stack overflow vulnerability in GNU libextractor versions prior to 1.15 triggered via OLE2 file parsing. The Cyber Centre encourages users and administrators to review the provided links and apply necessary updates as they become available.

Canadian Centre for Cyber Securityupdated · 12h agofirst · 1d agoAdvisory 2 sourcesCVE-2026-91752

USN-8775-1: SQLite vulnerability

Ubuntu issued USN-8775-1 fixing a buffer overflow in SQLite's sqlar extension that could cause denial of service via a crafted archive.

Ubuntu Security Notice USN-8775-1 addresses a buffer overflow in the sqlar extension of SQLite. An attacker could trick a user into opening a specially crafted SQLar archive, causing a denial of service. No CVE id is listed in the notice and no exploitation is reported.

Ubuntu Security Noticesupdated · 15h agofirst · 18h agoAdvisory 7 sources

Google security advisory (AV26-926)

Canadian Cyber Centre relays Google's Chrome 153.0.8010.48 stable channel update fixing unspecified desktop vulnerabilities.

The Canadian Centre for Cyber Security issued advisory AV26-926 noting that Google Chrome versions prior to 153.0.8010.48 are affected by vulnerabilities. The advisory provides no CVE details or exploitation information and encourages users and administrators to apply the stable channel desktop update for September 15, 2026.

Canadian Centre for Cyber Security · 18h agoAdvisory

Cisco Nexus Dashboard Software Security Hardening Release: September 2026

Cisco released Nexus Dashboard hardening updates for multiple internally discovered vulnerabilities, grouped by CWE and not known to be exploited.

Cisco's Nexus Dashboard engineering team conducted an internal security review that found multiple vulnerabilities, addressed via software hardening releases. The issues were discovered during internal testing and are not known to be actively exploited. Cisco grouped the issues by CWE class and assigned a single CVE ID per issue before releasing fixes.

Cisco Security Advisories · 19h agoAdvisory

Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability

Cisco patched a BroadWorks CommPilot authorization bypass letting low-privileged authenticated users alter device configurations via crafted HTTP requests.

A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software is caused by missing authorization checks. An authenticated remote attacker with low privileges can send crafted HTTP requests to alter configurations on select pages. Cisco has released software updates and no workarounds are available.

Cisco Security Advisories · 19h agoAdvisory

Jenkins Security Advisory 2026-09-16

Jenkins released a security advisory patching vulnerabilities across 13 plugins, including GitLab, Bitbucket, Gradle, Keycloak Authentication, and Script Security.

The Jenkins security advisory dated September 16, 2026 addresses vulnerabilities in 13 plugins: Bitbucket Push and Pull Request, Bitbucket Server Integration, Coverage, Gitee, GitLab, Gradle, Keycloak Authentication, OWASP Dependency-Check, Pipeline: Groovy Libraries, Pipeline: Multibranch, Robot Framework, Script Security, and Warnings. Jenkins users should update the affected plugins to the patched versions listed in the advisory.

Jenkins Security Advisoriesupdated · 20h agofirst · 23h agoAdvisory 2 sources1

USN-8766-1: Suricata-Update vulnerability

Ubuntu patches Suricata-Update path validation flaw allowing arbitrary file writes outside the rules directory from malicious rule archives.

Ubuntu security notice USN-8766-1 fixes a Suricata-Update vulnerability discovered by Guillem Lefait. The tool did not properly validate destination paths when extracting files referenced by downloaded rule archives, allowing an attacker to write arbitrary files outside the configured rules directory. Users are advised to update the suricata-update package.

Ubuntu Security Notices · 1d agoAdvisory

USN-8761-1: Linux kernel (Azure) vulnerabilities

Ubuntu patches multiple Linux kernel (Azure) flaws across ARM64, Bluetooth, Netfilter, NTFS3, SMB and other subsystems.

Ubuntu security notice USN-8761-1 corrects several security issues in the Linux kernel for Azure, spanning ARM32, ARM64, and PowerPC architectures plus subsystems including Bluetooth, Netfilter, EFI core, GPU drivers, InfiniBand, SCSI, NTFS3, and SMB. An attacker could possibly use these flaws to compromise the system.

Ubuntu Security Notices · 2d agoAdvisory 2 sources

Microsoft confirms KB5002914 Excel update breaks copy and paste

Microsoft confirms KB5002914 Office security update silently breaks copy-paste, autofill, and formula dragging in Excel 2016 through 2024.

Microsoft confirmed the September 2026 KB5002914 security update breaks copy-and-paste, autofill, and formula dragging in Excel 2024, 2021, 2019, and 2016. Failures occur silently with no beep or error message, leaving the destination unmodified. Uninstalling KB5002914 via OfficeC2RClient or Oarpmany restores functionality while Microsoft investigates.

BleepingComputerupdated · 2d agofirst · 2d agoAdvisory 3 sources2

USN-8760-1: Linux kernel (NVIDIA) vulnerabilities

Canonical issues USN-8760-1 patching multiple Linux kernel (NVIDIA) vulnerabilities across numerous subsystems and CPU architectures.

Canonical published USN-8760-1 to correct several Linux kernel (NVIDIA) vulnerabilities that an attacker could possibly use to compromise the system. The update fixes flaws spanning UAPI, the kernel build system, ARM32, ARM64, RISC-V, S390, and x86 architectures. Patched subsystems also include the block layer, cryptographic API, Compute Acceleration Framework, Intel NPU driver, ACPI and Bluetooth drivers, and the hardware random number generator core.

Ubuntu Security Notices · 2d agoAdvisory

Microsoft Releases Emergency Patch to Fix RDS Snafu

Microsoft's out-of-band KB5129195 fixes September Patch Tuesday regressions breaking RDS connections, Hyper-V shared folders, and USB audio.

Microsoft released cumulative out-of-band update KB5129195 on September 14, 2026, fixing RDS instability causing failing RDP connections, sign-in issues, and hanging servers. The patch also resolves Hyper-V Plan9 shared-folder failures affecting WSL and Claude Cowork, plus USB Audio Class 1.0 device failures. This is Microsoft's sixth emergency patch after a September Patch Tuesday that fixed a record 974 CVEs.

Infosecurity Magazine · 2d agoAdvisory 3 sources

visionOS 27.0 (24M362)

Apple ships visionOS 27.0 (build 24M362) for Vision Pro; release notice contains no security or CVE details.

Apple announced the general availability of visionOS 27.0, build 24M362, via its developer release feed. The notice contains only download and release-notes links with no vulnerability or CVE information. Defenders should consult the security release notes to determine if patches affect Apple Vision Pro devices.

Apple software releases · 2d agoAdvisory

iOS 27.0 RC (24A437)

Apple issues iOS 27.0 release candidate (build 24A437); notification lists no security fixes or CVEs.

Apple published the iOS 27.0 Release Candidate, build 24A437, on its developer release feed. The notice provides only download and release-notes links without vulnerability or CVE details. Security teams should monitor the accompanying release notes for security fixes ahead of general availability.

Apple software releasesupdated · 2d agofirst · 5d agoAdvisory 3 sources

MongoDB security advisory (AV26-918)

Canadian Cyber Centre advisory AV26-918 urges patching MongoDB Server vulnerability fixed in 7.0.43, 8.0.32, 8.3.11, and 9.0.1.

The Canadian Centre for Cyber Security issued advisory AV26-918 on September 14, 2026, regarding a vulnerability in MongoDB Server. Affected versions include those prior to 7.0.43, 8.0.32, 8.3.11, 9.1.0-rc0, and 9.0.1. The fix shreds collection validator constants during parsing. Users and administrators are encouraged to review MongoDB's advisory and apply updates as they become available.

Canadian Centre for Cyber Security · 2d agoAdvisory

USN-8757-1: cgit vulnerability

Ubuntu USN-8757-1 fixes cgit path-handling flaw letting remote attackers read files outside repositories during HTTP cloning.

Ubuntu Security Notice USN-8757-1 addresses a cgit vulnerability in which repository paths are incorrectly handled when HTTP cloning is enabled. A remote attacker could exploit the flaw to access files outside the repository and obtain sensitive information. The notice provides no CVE identifier or exploitation details.

Ubuntu Security Notices · 2d agoAdvisory

USN-8756-1: Yelp vulnerability

Ubuntu patches Yelp help viewer flaw allowing crafted help documents to execute arbitrary scripts and expose sensitive user information.

USN-8756-1 fixes a vulnerability in Yelp, Ubuntu's help viewer, where help documents could execute arbitrary scripts. An attacker could trick a user into opening a specially crafted help document to obtain sensitive information. Ubuntu has released updated packages.

Ubuntu Security Notices · 2d agoAdvisory

USN-8755-1: libvips vulnerability

Ubuntu patches libvips flaw where crafted TIFF images converted to HEIF cause a crash, enabling denial of service.

USN-8755-1 fixes a libvips vulnerability in which specially crafted TIFF images are incorrectly handled when saved as HEIF, causing the library to crash. The impact is limited to denial of service with no code execution indicated. Ubuntu shipped updated packages.

Ubuntu Security Notices · 2d agoAdvisory

USN-8754-1: Freeciv vulnerability

Ubuntu patches Freeciv stack overflow where remote attackers crash clients or servers using crafted network packets.

USN-8754-1 fixes a Freeciv vulnerability where certain network packets trigger a stack overflow. A remote attacker could use this to crash Freeciv clients or servers, resulting in denial of service. Ubuntu released updated packages.

Ubuntu Security Notices · 2d agoAdvisory1

USN-8751-1: Urwid vulnerabilities

Ubuntu USN-8751-1 patches Urwid weak PRNG issue allowing local attacker possible denial of service or code execution.

Katriel Moses discovered that Urwid used a weak pseudo-random number generator. A local attacker could potentially exploit this issue to cause a denial of service or execute arbitrary code. Ubuntu has released a patch under USN-8751-1.

Ubuntu Security Notices · 3d agoAdvisory1

USN-8750-1: FFmpeg vulnerabilities

Ubuntu USN-8750-1 fixes multiple FFmpeg memory-handling flaws that allow denial of service via crafted files.

Ubuntu Security Notice USN-8750-1 patches several FFmpeg vulnerabilities related to incorrect memory operations, reported by Seung Min Shin, Xinghang Lv, and others. If a user or automated system is tricked into opening a specially crafted file, an attacker could cause a denial of service. Affected CVEs include CVE-2026-12706, CVE-2026-30999, and CVE-2026-58049.

Ubuntu Security Notices · 3d agoAdvisoryCVE-2026-12706CVE-2026-30999CVE-2026-58049

n8n security advisory (AV26-916)

Canadian Cyber Centre advisory AV26-916 warns n8n before versions 2.37.7, 2.38.2, and 1.123.76 is affected by an undisclosed vulnerability; patch required.

The Canadian Centre for Cyber Security issued advisory AV26-916 on September 11, 2026, stating that n8n is affected by a vulnerability in versions prior to 2.37.7, 2.38.2, and 1.123.76. Fixed releases [email protected], [email protected], and [email protected] are available via GitHub. No CVE identifier or exploitation details are provided; administrators are urged to review linked resources and apply updates.

Canadian Centre for Cyber Security · 5d agoAdvisory

[Control Systems] National Instruments security advisory (AV26-914)

Canada's Cyber Centre relayed a National Instruments advisory covering improper access control and cleartext sensitive-information flaws in NI SystemLink and SystemLink Server.

Advisory AV26-914, dated September 11, 2026, notes that NI SystemLink and SystemLink Server prior to or equal to 2026 Q3 Patch 1 are affected by improper access controls and storage of sensitive information in cleartext. The Canadian Centre for Cyber Security urges users and administrators to review the vendor's links and apply available security updates.

Canadian Centre for Cyber Security · 5d agoAdvisory2

[Control systems] GeoVision security advisory (AV26-913)

Canada's Cyber Centre (AV26-913) warns GeoVision GV-LPC2011/LPC2211 firmware 1.13 license-plate cameras are affected by vulnerabilities and urges updates.

The Canadian Centre for Cyber Security issued control-systems advisory AV26-913 on September 11, 2026, noting that GeoVision GV-LPC2011/LPC2211 firmware version 1.13 is affected by vulnerabilities. The bulletin references the vendor advisory GV-LPC-2026-09-01 but provides no CVE identifiers or exploitation details. Administrators are encouraged to review the linked advisories and apply updates as they become available.

Canadian Centre for Cyber Security · 5d agoAdvisory

[Control systems] Schneider Electric security advisory (AV26-912)

Canada's Cyber Centre relays a Schneider Electric advisory covering multiple vulnerabilities in EcoStruxure IT Data Center Expert and PowerLogic T300, urging users to apply updates.

The Canadian Centre for Cyber Security issued advisory AV26-912 noting that as of September 9, 2026 Schneider Electric is affected by vulnerabilities in EcoStruxure IT Data Center Expert versions 9.1.2 and prior, and PowerLogic T300 versions 2.9.8-5620 and prior. The issues include an improper neutralization of special elements used in an OS command on the PowerLogic T300. The advisory recommends reviewing vendor notifications, performing suggested mitigations, and applying necessary updates.

Canadian Centre for Cyber Security · 5d agoAdvisory

MongoDB security advisory (AV26-911)

Canada's Cyber Centre warns MongoDB Java Driver and Laravel MongoDB (PHP) have vulnerabilities fixed in versions 5.11.1 and 5.11.0.

The Canadian Centre for Cyber Security (AV26-911) reports MongoDB vulnerabilities affecting the Java Driver prior to 5.11.1 and Laravel MongoDB (PHP) prior to 5.11.0. Fixed issues include a native heap use-after-free during cancellation racing a KMS credential fetch in reactive encryption (JAVA-6276) and a query builder fix forcing literal equality when 3-arg where clauses use '=' with array values (PHPLARA-260). Administrators are urged to review the advisories and apply the updates.

Canadian Centre for Cyber Security · 5d agoAdvisory1

HashiCorp security advisory (AV26-910)

Canada's Cyber Centre warns HashiCorp Consul and consul-template have authorization bypass and information disclosure flaws, urging users to apply available updates.

Advisory AV26-910 relays HashiCorp security advisories HCSEC-2026-34, HCSEC-2026-37 and HCSEC-2026-38 covering Consul and consul-template. Consul has an authorization bypass in the catalog node-write path and another in the Connect service mesh, while consul-template has an information disclosure issue in error handling. Fixed versions include Consul 2.0.4, Consul Enterprise 1.21.18 and consul-template 0.43.0. The Cyber Centre encourages users and administrators to review the linked advisories and apply updates.

Canadian Centre for Cyber Security · 5d agoAdvisory1

USN-8571-2: Apache HTTP Server regression

Ubuntu issues USN-8571-2 fixing an Apache HTTP Server regression that prevented startup when HTTP/2 proxying was enabled.

Ubuntu released USN-8571-2 to fix a regression introduced by USN-8571-1 in Apache HTTP Server. The earlier fix was incomplete due to a missing library symbol, causing Apache to fail to start when HTTP/2 proxying was enabled. The original advisory addressed CVE-2026-33007, a memory-handling flaw in mod_authn_socache allowing remote denial of service, and an HTTP response splitting vulnerability affecting multiple modules, credited to Pavel Kohout, Arkadi Vainbrand, Haruki Oyama, Merih Mengisteab, and Dawit Jeong.

Ubuntu Security Noticesupdated · 5d agofirst · 6d agoAdvisory 8 sourcesCVE-2026-330071

Wordfence Intelligence Weekly WordPress Vulnerability Report (August 31, 2026 to September 6, 2026)

Wordfence's weekly WordPress vulnerability report summarizes plugin and theme vulnerabilities disclosed and added to its database during the week ending September 6, 2026.

Wordfence published its weekly WordPress Vulnerability Report covering disclosures between August 31 and September 6, 2026. The report lists new vulnerabilities added to the Wordfence Intelligence Vulnerability Database and highlights contributors to WordPress Security. Administrators are advised to review the listed plugin and theme vulnerabilities to check whether their sites are affected.

Wordfence · 6d agoAdvisory

[Control systems] Advantech security advisory (AV26-907)

Canada's Cyber Centre flagged vulnerabilities in the Advantech WISE-6610 industrial gateway and urged users to apply available updates.

Advisory AV26-907, dated September 10, 2026, states that multiple versions and models of the Advantech WISE-6610 industrial gateway are affected by vulnerabilities. The Canadian Centre for Cyber Security encourages users and administrators to review the provided links and apply updates as they become available. No CVE identifiers or exploitation details were included in the announcement.

Canadian Centre for Cyber Security · 6d agoAdvisory

Fortra security advisory (AV26-906)

Canada's Cyber Centre advises that Fortra GoAnywhere MFT Endpoint versions prior to 7.10.2 are affected by a path traversal vulnerability.

The Canadian Centre for Cyber Security issued advisory AV26-906 noting that Fortra GoAnywhere MFT Endpoint versions prior to 7.10.2 are affected by a path traversal vulnerability. The advisory was published September 10, 2026, referencing Fortra's own security advisory. No exploitation details or CVE id are provided; administrators are urged to review the links and apply the 7.10.2 update.

Canadian Centre for Cyber Security · 6d agoAdvisory

Palo Alto Networks security advisory (AV26-905)

Canada's Cyber Centre relayed Palo Alto Networks advisories covering PAN-OS, Cloud NGFW, Prisma Access, and Prisma Browser vulnerabilities, including PAN-OS CVE-2026-0310 buffer overflow.

The Canadian Centre for Cyber Security issued advisory AV26-905, noting that as of September 10, 2026, multiple Palo Alto Networks products are affected by vulnerabilities. Affected products include Cloud NGFW on AWS and Azure, multiple PAN-OS versions, Prisma Access, and Prisma Browser prior to 151.26.5.170. The advisory references CVE-2026-0310, a PAN-OS buffer overflow via XML processing (PAN-SA-2026-0012), and the September 2026 Chromium monthly vulnerability update. Administrators are encouraged to review the vendor links and apply available updates.

Canadian Centre for Cyber Security · 6d agoAdvisory 2 sourcesCVE-2026-0310