60
55
60
30
30
35
30
60
30
55
57
30
42
45
57
42
30
55
30
55
60
30
30
30
30
30
55
30
30
55
57
57
30
55
[Control Systems] Siemens security advisory (AV26-864)
Siemens fixed a vulnerability in Element maps-ng V47-V49 (SSA-682041); Canada's Cyber Centre urges administrators to apply the updated releases.
Siemens advisory SSA-682041 addresses a vulnerability affecting Element maps-ng V47 prior to V47.12.3, V48 prior to V48.11.3, and V49 prior to V49.16.1. Canada's Cyber Centre republished the notice (AV26-864) encouraging users and administrators to review the vendor links and apply the necessary updates. No CVSS score or exploitation details were provided in the bulletin.
22
ZDI-26-615: (0Day) pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Zero Day Initiative disclosed an uncontrolled search path flaw in pdfforge PDF Architect's update service, allowing local privilege escalation (CVSS 7.8).
ZDI published advisory ZDI-26-615 describing a local privilege escalation vulnerability in the activation-service Update Service of pdfforge PDF Architect. An uncontrolled search path element lets local attackers escalate privileges, but they must first be able to execute low-privileged code on the target. ZDI rated the issue 7.8 and tagged it as a 0-day disclosure.
22
ZDI-26-577: Trend Micro VPN OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI disclosed a local privilege escalation (CVE-2026-67212, CVSS 7.0) in Trend Micro VPN's OpenSSL configuration, requiring prior low-privileged code execution.
The Zero Day Initiative published advisory ZDI-26-577 describing an uncontrolled search path element vulnerability in Trend Micro VPN's OpenSSL configuration. Local attackers who can already execute low-privileged code on an affected installation can escalate privileges. ZDI rated the issue 7.0 on CVSS and assigned CVE-2026-67212.
25
30
45
30