Skip to main content

ZDI Advisories

658 advisories

Zero Day Initiative vulnerability advisories – published disclosures and upcoming publications.

ZDI-26-373 8.8 CVE-2026-9784 Quest Jun 24, 2026

Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability

ZDI-26-372 8.8 CVE-2026-9783 Quest Jun 24, 2026

Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability

ZDI-26-371 8.8 CVE-2026-9782 Quest Jun 24, 2026

Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability

ZDI-26-370 8.8 CVE-2026-9781 Quest Jun 24, 2026

Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability

ZDI-26-369 8.8 CVE-2026-9780 Quest Jun 24, 2026

Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability

ZDI-26-368 8.8 CVE-2026-7570 Quest Jun 24, 2026

Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability

ZDI-26-367 7.8 CVE-2026-8108 Fuji Jun 24, 2026

Fuji Electric Tellus pcid64 Driver Registry APIs Exposed Dangerous Method Local Privilege Escalation Vulnerability

ZDI-26-366 7.8 CVE-2026-8108 Fuji Jun 24, 2026

Fuji Electric Tellus pcid64 Driver File APIs Exposed Dangerous Method Arbitrary File Deletion Vulnerability

ZDI-26-365 8.8 CVE-2026-41137 FlowiseAI Jun 24, 2026

FlowiseAI Flowise CSV Agent customReadCSV Code Injection Remote Code Execution Vulnerability

ZDI-26-364 9.8 CVE-2026-41264 FlowiseAI Jun 24, 2026

FlowiseAI Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability

ZDI-26-363 8.6 CVE-2026-55887 Docker Jun 24, 2026

Docker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability

ZDI-26-362 7.5 CVE-2026-46873 Oracle Jun 24, 2026

Oracle VirtualBox VMSVGA Stack-based Buffer Overflow Local Privilege Escalation Vulnerability

ZDI-26-360 7.8 CVE-2026-52849 MATE Jun 11, 2026

MATE Desktop Atril Document Viewer EPUB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-358 4.6 CVE-2026-11443 Allegra Jun 11, 2026

Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability

ZDI-26-356 3.7 CVE-2026-34032 Apache Jun 11, 2026

Apache HTTP Server mod_proxy_ajp Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-26-357 6.5 CVE-2026-11442 Allegra Jun 11, 2026

Allegra exportReport Directory Traversal Information Disclosure Vulnerability

ZDI-26-359 7.8 CVE-2026-8916 Samsung Jun 11, 2026

Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability

ZDI-26-355 7.8 CVE-2026-27220 Adobe Jun 10, 2026

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-26-353 7.8 CVE-2026-47918 Adobe Jun 09, 2026

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-26-354 7.8 CVE-2026-47919 Adobe Jun 09, 2026

Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability

ZDI-26-346 3.3 CVE-2026-47924 Adobe Jun 09, 2026

Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability

ZDI-26-345 7.8 CVE-2026-47912 Adobe Jun 09, 2026

Adobe Acrobat Reader DC Font Handling Use-After-Free Remote Code Execution Vulnerability

ZDI-26-344 3.3 CVE-2026-47923 Adobe Jun 09, 2026

Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-26-343 7.8 CVE-2026-47911 Adobe Jun 09, 2026

Adobe Acrobat Reader DC TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

ZDI-26-347 7.8 CVE-2026-47913 Adobe Jun 09, 2026

Adobe Acrobat Reader DC Multimedia Rendition Use-After-Free Remote Code Execution Vulnerability

ZDI-26-332 8.8 CVE-2026-3886 QEMU Jun 09, 2026

QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability

ZDI-26-333 7.8 CVE-2026-33999 X.Org Jun 09, 2026

X.Org Server XkbSetCompatMap Integer Underflow Privilege Escalation Vulnerability

ZDI-26-334 6.1 CVE-2026-34000 X.Org Jun 09, 2026

X.Org Server CheckSetGeom Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-26-335 7.8 CVE-2026-34001 X.Org Jun 09, 2026

X.Org Server SyncAwaitFence Use-After-Free Privilege Escalation Vulnerability

ZDI-26-336 6.1 CVE-2026-34002 X.Org Jun 09, 2026

X.Org Server CheckKeyActions Out-Of-Bounds Read Information Disclosure Vulnerability

Prev Page 12 of 22 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy