Indicators of Compromise

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-437: (Pwn2Own) Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability

CVEs: CVE-2026-13308

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-436: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability

CVEs: CVE-2026-13307

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-435: (Pwn2Own) Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability

CVEs: CVE-2026-13309

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-434: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability

CVEs: CVE-2026-13306

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-433: (Pwn2Own) Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability

CVEs: CVE-2026-13305

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-432: G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability

CVEs: CVE-2026-13268

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-431: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability

CVEs: CVE-2026-8921

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-430: MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability

CVEs: CVE-2026-6102

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-429: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVEs: CVE-2026-24157

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-428: WatchGuard FireWare OS admd Stack-based Buffer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-8247

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-427: WatchGuard FireWare OS iked ike2_hmac Null Pointer Dereference Denial-of-Service Vulnerability

CVEs: CVE-2026-13084

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-426: OpenSSL X.509 Email Validation Out-Of-Bounds Read Information Disclosure Vulnerability

CVEs: CVE-2026-42771

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-425: OpenSSL OCSP Stapling Verification Double Free Remote Code Execution Vulnerability

CVEs: CVE-2026-35188

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-424: Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability

CVEs: CVE-2026-13135

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-423: Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability

CVEs: CVE-2025-15660

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-422: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability

CVEs: CVE-2026-15551

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-421: Cisco Identity Services Engine validFileNameOrPath Directory Traversal Information Disclosure Vulnerability

CVEs: CVE-2026-20146

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-420: Adobe Creative Cloud AGSService Incorrect Permission Assignment Local Privilege Escalation Vulnerability

CVEs: CVE-2026-48344

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-419: Adobe Creative Cloud AdobeUpdateService Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

CVEs: CVE-2026-48272

Zero Day Initiative →

Zero Day Initiative 📡 RSS Jul 15

ZDI-26-418: Microsoft SharePoint SPFieldMultiLineText Cross-Site Scripting Vulnerability

CVEs: CVE-2026-55126

Zero Day Initiative →