Skip to main content

ZDI Advisories

1797 advisories

Zero Day Initiative vulnerability advisories – published disclosures and upcoming publications.

ZDI-CAN-31909 7.8 Upcoming – 73d Adobe Aug 01, 2026

Adobe

ZDI-CAN-32653 7.0 Upcoming – 73d PyTorch Foundation Aug 01, 2026

PyTorch Foundation

ZDI-CAN-32339 6.5 Upcoming – 73d LiteLLM Aug 01, 2026

LiteLLM

ZDI-CAN-32290 6.5 Upcoming – 73d Nagios Aug 01, 2026

Nagios

ZDI-CAN-32342 6.5 Upcoming – 73d LiteLLM Aug 01, 2026

LiteLLM

ZDI-CAN-32023 7.8 Upcoming – 73d Autodesk Aug 01, 2026

Autodesk

ZDI-CAN-31917 7.8 Upcoming – 73d Autodesk Aug 01, 2026

Autodesk

ZDI-26-517 6.8 CVE-2026-44098 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 BackendURL WebSocket Command Injection Remote Code Execution Vulnerability

ZDI-26-502 7.8 CVE-2026-44106 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 user-applications Link Following Local Privilege Escalation Vulnerability

ZDI-26-518 6.3 CVE-2026-44091 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 MQTT Service Server-Side Request Forgery Remote Code Execution Vulnerability

ZDI-26-521 6.8 CVE-2026-44095 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3000 Command Injection Remote Code Execution Vulnerability

ZDI-26-520 7.5 CVE-2026-44103 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 Jupicore External Control of Path Remote Code Execution Vulnerability

ZDI-26-514 7.5 CVE-2026-44094 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 Failing Open Authentication Bypass Vulnerability

ZDI-26-519 7.5 CVE-2026-44099 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability

ZDI-26-523 7.8 CVE-2026-15679 Hugging Jul 30, 2026

Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-26-505 5.0 CVE-2026-44092 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 charx-system-config-manager Service CRLF Injection Firewall Bypass Vulnerability

ZDI-26-516 6.5 CVE-2026-44090 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability

ZDI-26-522 6.5 CVE-2026-41032 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3000 Insertion of Sensitive Information into Log File Information Disclosure Vulnerability

ZDI-26-507 7.8 CVE-2026-44096 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 Privilege Defined With Unsafe Actions Local Privilege Escalation Vulnerability

ZDI-26-506 5.3 CVE-2026-44105 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 Insertion of Sensitive Information into Log File Authentication Bypass Vulnerability

ZDI-26-509 5.0 CVE-2026-44101 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 OCPP Missing Authentication for Critical Function Authentication Bypass Vulnerability

ZDI-26-515 4.2 CVE-2026-44100 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 charx-jupicore Missing Authentication Configuration Modification Vulnerability

ZDI-26-508 7.8 CVE-2026-44095 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 charx_set_ip_address Improper Input Validation Local Privilege Escalation Vulnerability

ZDI-26-511 7.8 CVE-2026-44093 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 user-applications Symlink Following Local Privilege Escalation Vulnerability

ZDI-26-503 6.4 CVE-2026-44108 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 Race Condition Firewall Bypass Vulnerability

ZDI-26-513 2.4 CVE-2026-44097 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 update2-upload Arbitrary File Upload Vulnerability

ZDI-26-512 6.5 CVE-2026-44107 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability

ZDI-26-510 7.5 CVE-2026-44104 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 Missing Cryptographic Signature Remote Code Execution Vulnerability

ZDI-26-504 7.5 CVE-2026-7849 Phoenix Jul 30, 2026

Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability

ZDI-26-488 6.8 CVE-2026-18271 Kenwood Jul 29, 2026

Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability

Prev Page 14 of 60 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy