← Back to feed
advisories Zero Day Initiative

ZDI-26-295: (0Day) PublicCMS getXml Server-Side Request Forgery Information Disclosure Vulnerability

Zero Day Initiative

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PublicCMS. Authentication is not required to exploi...

Read the full story Zero Day Initiative →

Related Coverage

advisories ISC Stormcast For Thursday, September 24th, 2026 https://isc.sans.edu/podcastdetail/10108, (Thu, Sep 24th) SANS ISC · Sep 24 advisories Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators CISA Advisories · Sep 23 advisories ZDI-26-734: Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability Zero Day Initiative · Sep 23