ZDI-CAN-29369 CRITICAL 9.3 Upcoming Feb 20, 2026

Hong Kong University Data Intelligence Lab

A critical vulnerability (CVSS 9.3) has been discovered in the Hong Kong University Data Intelligence Lab's products or services, which focuses on data analysis and AI-driven intelligence solutions. The flaw can be exploited remotely over the network without authentication or user interaction, potentially compromising confidentiality across multiple systems while causing minor integrity issues. Security teams should prioritize patching once fixes become available by the June 2026 deadline and monitor for any exploit attempts targeting this unauthenticated remote attack vector in the coming months.

Advisory Details
Researcher Peter Girnus (@gothburz) and Project AESIR of TrendAI Zero Day Initiative
Reported February 20, 2026
Deadline June 20, 2026 65d
CVSS Vector AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy