ZDI-CAN-29589 HIGH 7.8 Upcoming Mar 26, 2026

Meta

Meta, the social media and technology conglomerate behind Facebook, Instagram, and other services, has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to exploit, but once triggered delivers significant impact including data theft, system compromise, and denial of service. The flaw requires no authentication and affects confidentiality, integrity, and availability equally. Security teams should monitor Meta's advisory channels closely through late July 2026 for patch details and implement updates promptly, particularly for users in high-risk environments where local access threats are elevated.

Advisory Details
Researcher Mat Powell of TrendAI Zero Day Initiative
Reported March 26, 2026
Deadline July 24, 2026 99d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy