Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#ssti — news, CVEs and analysis · ZeroHour

today 108K visits · 109K views · 181 reads·all time 1.7M views

07:30 UTC· 14m ago

Tag

#ssti

1 stories this week · 2 this month · 3 in 6 months · mostly security

stories per day · 30 days

Related#rce 2 #cert 1 #cve-2026-12544 1 #deserialization 1 #ecommerce 1 #foreman 1 #open-source 1 #smarty 1 #thelia 1 #xss 1

3 stories, newest first · one card per story

CERT/CC Vulnerability Notes·4d ago

VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1

#thelia #rce #ssti

CVE-2026-103521

7 min

oss-security·10d ago

CVE-2026-12544: Foreman: SSTI and unsafe deserialization in configuration (fixed in 3.19.2, 5.0.1)

#foreman #ssti #deserialization

CVE-2026-12544

The Hacker News·Aug 12, 2026 high

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

#commerce-cloud #netweaver #patch

2 min1