Skip to main content

Daily vulnerability intelligence for defenders – fresh CVEs with exploitability signals, patch status, and action-oriented priorities from 17 sources.

CVEs published

Get CVEs that hit your stack — not 200/day

Pick your technologies, get a weekly digest by email. Free, no spam.

React Python Postgres +200 more
Trending Now See all
Critical Watch See all
Upcoming Zero-Day Disclosures 396 366 overdue
View all

to view ZDI disclosures

Attack Technique Trend
Prediction based on ZDI Disclosures & CVE data · 30 days
Analytics
Vendor Today – Quick Filter
Techniques
results
Sort:
Base Score
Vector String
Attack Vector (AV)
Attack Complexity (AC)
Privileges Required (PR)
User Interaction (UI)
Scope (S)
Confidentiality (C)
Integrity (I)
Availability (A)
0 | 3.9| 6.9| 8.9| 10
NONE LOW MEDIUM HIGH CRITICAL
CVSS Filter CVEs match

No CVEs match the selected criteria

Loading...
Linux Kernel
Linux Kernel
ZDI Disclosures – Jul 28 20 58d
View all
ZDI-CAN-29492 7.8
HIGH Foxit

Foxit is a widely-used PDF software company, and this high-severity vulnerability (CVSS 7.8) requires local access and user interaction but requires no authentication, potentially allowing an attacker to achieve complete compromise of confidentiality, integrity, and availability on an affected system. The attack vector is local, meaning an attacker would need some level of access to the target machine, but could escalate privileges or damage files without prior credentials. Security teams should monitor for exploitation attempts targeting Foxit products and prepare patches for deployment once the vendor deadline of July 28, 2026 approaches.

Potential Privilege Escalation
ZDI-CAN-29790 8.5
HIGH Linux

Linux is the open-source operating system kernel used across servers, desktops, and embedded systems worldwide. This high-severity vulnerability (CVSS 8.5) can be exploited remotely by an authenticated attacker with moderate complexity, potentially compromising confidentiality, integrity, and availability across multiple systems. Security teams should prepare for patches following the July 28, 2026 deadline and monitor for any public exploits targeting this authentication-dependent network vector.

Linux Linux Kernel Potential RCE
ZDI-CAN-29838 6.4
MEDIUM LiteLLM

LiteLLM is an open-source library that provides a unified interface for large language model APIs. This medium-severity vulnerability (CVSS 6.4) can be exploited remotely by authenticated users without user interaction, potentially allowing attackers to gain limited access to confidential information and make unauthorized changes, though system availability is not affected. Security teams should monitor for this issue and prepare patches once the vendor deadline of July 28, 2026 passes, as authenticated attackers on their networks could potentially leverage this flaw for privilege escalation or data exposure.

Python AI / ML
ZDI-CAN-29299 7.5
HIGH OpenPrinting

OpenPrinting is a widely-used open-source printing system commonly integrated into Linux distributions and enterprise print servers. This high-severity vulnerability (CVSS 7.5) can be exploited remotely without authentication, though it requires user interaction and specific conditions to succeed, with potential for complete compromise of confidentiality, integrity, and availability. Security teams should monitor for patches from their Linux vendors and print service providers by the July 2026 deadline and review any printing-related services exposed to network access.

Linux OpenSSL Potential RCE
ZDI-CAN-29413 7.5
HIGH Linux

A high-severity vulnerability (CVSS 7.5) has been discovered in Linux that requires local access and high-level privileges to exploit, but can result in complete compromise of system confidentiality, integrity, and availability with cross-system impact. The attack is difficult to execute and requires no user interaction once an attacker has elevated privileges on the target system. Security teams should monitor for patches following the vendor deadline of July 28, 2026, and prioritize systems where high-privileged users may be compromised or untrusted.

Linux Linux Kernel
ZDI-CAN-29491 7.8
HIGH Foxit

Foxit is a well-known software company specializing in PDF readers and document management solutions. This high-severity vulnerability (CVSS 7.8) requires local access and user interaction to exploit, but once successful grants an attacker high-level control over confidentiality, integrity, and availability of the affected system with no authentication needed. Security teams should monitor for patches after the July 28, 2026 deadline and watch for exploitation attempts targeting Foxit users, particularly in environments where local file access or document opening could be weaponized.

Potential Privilege Escalation
ZDI-CAN-29663 7.4
HIGH oFono

oFono is an open-source telephony framework for Linux that manages mobile broadband and voice communication. This vulnerability has a high severity rating of 7.4 and requires local access to exploit, with no authentication or user interaction needed, but could allow an attacker to compromise confidentiality, integrity, and availability of the system. Security teams should monitor for patches following the July 28, 2026 vendor deadline and prioritize updates for systems running oFono, particularly on devices where local access could be gained.

Linux Potential Privilege Escalation
ZDI-CAN-29495 7.8
HIGH Foxit

Foxit is a well-known software company that develops PDF readers and document management solutions widely used in enterprise environments. This high-severity vulnerability requires local access and user interaction but requires no authentication, and if exploited could allow an attacker to gain complete control over confidentiality, integrity, and availability of the affected system. Security teams should monitor for patches from Foxit by the July 2026 deadline and prioritize updates for systems where users regularly open untrusted PDF documents.

Potential Privilege Escalation
Live Feed auto-refresh 60s
Track CVEs for your stack Sign up free →

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy