IOC Feed — FreeIntelHub

Zero Day Initiative 📡 RSS Sep 10

ZDI-26-658: Adobe Acrobat Pro DC JPEG Parsing Integer Overflow Remote Code Execution Vulnerability

CVEs: CVE-2026-81987

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 10

ZDI-26-657: ASUS Control Center Express Agent Missing Authentication Remote Code Execution Vulnerability

CVEs: CVE-2026-19397

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 10

ZDI-26-654: TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability

CVEs: CVE-2025-71414

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 10

ZDI-26-653: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

CVEs: CVE-2025-71415

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 10

ZDI-26-652: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

CVEs: CVE-2025-71416

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 10

ZDI-26-651: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution Vulnerability

CVEs: CVE-2026-19593

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 10

ZDI-26-650: (Pwn2Own) OpenAI Codex External Control of Configuration Setting Remote Code Execution Vulnerability

CVEs: CVE-2026-19592

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 10

ZDI-26-649: (Pwn2Own) OpenAI Codex Improper Neutralization of Control Sequences Remote Code Execution Vulnerability

CVEs: CVE-2026-19591

Zero Day Initiative →

Zero Day Initiative 📡 RSS Sep 10

ZDI-26-648: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution Vulnerability

CVEs: CVE-2026-19590

Zero Day Initiative →

BleepingComputer 📡 RSS Sep 9

Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks

CVEs: CVE-2026-20079

BleepingComputer →

Security Affairs 📡 RSS Sep 9

Google fixes the seventh actively exploited Chrome zero-day of 2026

CVEs: CVE-2026-87491

Security Affairs →

GBHackers 📡 RSS Sep 9

FortiPAM Chrome Extension Vulnerability Lets Malicious Sites Control Browser Proxy and Record Tabs

CVEs: CVE-2026-84388

CISA Advisories 📡 RSS Sep 9

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CVEs: CVE-2025-25249 CVE-2026-19490 CVE-2026-87491 CVE-2026-20079

CISA Advisories →

GBHackers 📡 RSS Sep 9

Critical MapLibre GL JS Vulnerability Enables Zero-Click XSS Attacks

CVEs: CVE-2026-85061

GBHackers 📡 RSS Sep 9

Windows BitLocker Flaw Lets Attackers Execute Code on Vulnerable Systems

CVEs: CVE-2026-69449

The Hacker News 📡 RSS Sep 9

Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox

CVEs: CVE-2026-87491

The Hacker News →

Help Net Security 📡 RSS Sep 9

September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor

CVEs: CVE-2026-69414

Help Net Security →

GBHackers 📡 RSS Sep 9

Windows Defender ShieldCrash 0-Day Lets Attackers Read Arbitrary Files as SYSTEM

CVEs: CVE-2026-69414

Help Net Security 📡 RSS Sep 9

Google fixes yet another actively exploited Chrome zero-day (CVE-2026-87491)

CVEs: CVE-2026-87491

Help Net Security →

GBHackers 📡 RSS Sep 9

cPanel EmailTrack SQL Injection Flaw Lets Attackers Execute Code as Root

CVEs: CVE-2026-67401