Wireshark LBMC reassembly bug allows remote code execution
Only Wireshark installs with LBMC fragment reassembly enabled are affected; ZDI rates it CVSS 7.5.
Stories per day · 30 days
15 RSS
Relatedremote-code-execution29rce26deserialization20fairchem17meta17privilege-escalation13information-disclosure11zero-day11xorg9heap-overflow8use-after-free8x-org-server7local6originlab6buffer-overflow5genesis-world5ssrf5directory-traversal4
179 stories, newest first · one card per story
Stories tagged #zdi
Home Assistant Green stores credentials in cleartext, enabling local privilege escalation
Attackers need low-privileged code in a container first; ZDI rates CVE-2026-91131 at CVSS 8.8.
OriginLab Origin Viewer OGG parsing RCE vulnerability (ZDI-26-882)
ZDI-26-882 reports out-of-bounds write in OGG file parsing enabling remote code execution in Origin Viewer after user interaction.
Trimble SketchUp SKP parsing use-after-free allows remote code execution
ZDI rates CVE-2026-121741 at CVSS 7.8; the target must open a malicious file or visit a malicious page.
Philips Hue Bridge Pro flaw lets adjacent attackers bypass authentication
ZDI rates CVE-2026-122044 at CVSS 8.8 and says no authentication is required to exploit it.
LibreOffice dBase parser heap overflow allows code execution
ZDI rates CVE-2026-76181 at CVSS 7.8 and says the target must open a malicious file or page.
Docker Sandboxes flaw allows local code execution
ZDI rates CVE-2026-121614 at CVSS 7.8; the user must open a malicious file or page.
ZDI-26-870: Ashlar-Vellum Cobalt XE stack buffer overflow RCE
Ashlar-Vellum Cobalt XE file parsing vulnerability allows remote code execution with user interaction; ZDI assigned CVSS 7.8.
Unauthenticated MLflow get-artifacts SSRF leaks data (CVE-2026-118628)
ZDI rates the flaw 8.2; the snippet gives no affected versions, fix, or exploitation status.
Ultralytics check_det_dataset code injection can run remote code
ZDI-26-813 is a CVSS 7.8 zero-day that requires opening a malicious file or page.
Valkey numeric truncation bug allows authenticated remote code execution
ZDI rates ZDI-26-833 at CVSS 8.8; an authenticated attacker can run arbitrary code on Valkey.
MailEnable cleartext auth storage leaks data without login
ZDI rates CVE-2026-114551 at CVSS 5.9 and says authentication is not required.
Public Linux kernel root exploit appears before a CVE or fix
Sysdig says six ZDI reports went to lists on October 20–21, and several still lack a released-kernel fix.
1
libwebsockets MQTT PUBACK handling flaw allows unauthenticated RCE
ZDI rates CVE-2026-114550 at 8.1; no login is required, and no fixed version is named.
Meta FAIRChem adsorbate_db_path flaw allows code execution
ZDI rates the reaction adsorbate_db_path deserialization bug 7.8 and requires user interaction.
OpenUSD crate parsing double free allows remote code execution
ZDI rates CVE-2026-92211 at 7.8; library interaction is required and no fix is listed.
Unpatched Linux KSMBD flaws rated CVSS 9.0 posted before fixes
ZDI reports describe remote code execution in the kernel SMB server; no CVE or mainline fix is named.
1
Unpatched Linux kernel flaws posted to the public LKML
Trend Micro ZDI reports include two CVSS 9.0 remote code execution issues; mainline fixes are not out, though some patches are in testing.
Cisco Snort OLE VBA bug allows unauthenticated remote code execution
ZDI rates stack-overflow CVE-2026-20218 at CVSS 8.1 and says authentication is not required.
OpenSSL CMS integrity-check flaw lets attackers tamper with messages
ZDI rates CVE-2026-34182 at CVSS 3.1 and says the attacker must already be able to modify the messages.
NVIDIA Megatron Bridge YAML parsing bug enables code execution
CVE-2026-24250 requires a user to open a malicious file or page; ZDI rates it CVSS 7.8.
ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
ZDI disclosed a LibreOffice PDF parsing out-of-bounds write that can run code if a user opens a malicious file.
ZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability
ZDI discloses an unauthenticated hard-coded credential bypass in Fortinet FortiSandbox, CVE-2026-107656 (CVSS 7.3).
ZDI-26-758: Docker Buildx Filesystem Entitlements Protection Mechanism Failure Remote Code Execution Vulnerability
ZDI discloses a Docker Buildx entitlements flaw enabling remote code execution after user interaction.