Skip to main content

ZDI Advisories

1797 advisories

Zero Day Initiative vulnerability advisories – published disclosures and upcoming publications.

ZDI-26-382 7.2 CVE-2026-9778 ATEN Jun 24, 2026

ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability

ZDI-26-381 7.2 CVE-2026-9777 ATEN Jun 24, 2026

ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability

ZDI-26-380 7.5 CVE-2026-9776 ATEN Jun 24, 2026

ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability

ZDI-26-383 7.2 CVE-2026-9779 ATEN Jun 24, 2026

ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

ZDI-26-389 8.8 CVE-2026-35273 Oracle Jun 24, 2026

Oracle PeopleSoft ExecuteProcessActivityCommand External Control of File Path Remote Code Execution Vulnerability

ZDI-26-388 7.5 CVE-2026-35273 Oracle Jun 24, 2026

Oracle PeopleSoft HubMBeanPersistance Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-26-387 9.3 CVE-2026-35273 Oracle Jun 24, 2026

Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability

ZDI-26-386 8.8 CVE-2026-9773 Unraid Jun 24, 2026

Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability

ZDI-26-385 8.8 CVE-2026-9772 Unraid Jun 24, 2026

Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability

ZDI-26-390 7.8 CVE-2026-50256 X.Org Jun 24, 2026

X.Org Server Font Alias Stack-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-26-395 7.8 CVE-2026-50261 X.Org Jun 24, 2026

X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability

ZDI-26-394 7.8 CVE-2026-50260 X.Org Jun 24, 2026

X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability

ZDI-26-379 5.5 CVE-2026-9775 ATEN Jun 24, 2026

ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability

ZDI-26-393 7.8 CVE-2026-50259 X.Org Jun 24, 2026

X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-26-378 5.5 CVE-2026-9774 ATEN Jun 24, 2026

ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability

ZDI-26-392 7.8 CVE-2026-50258 X.Org Jun 24, 2026

X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability

ZDI-26-391 7.8 CVE-2026-50257 X.Org Jun 24, 2026

X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability

ZDI-26-384 7.8 CVE-2026-10043 MosaicML Jun 24, 2026

MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability

ZDI-26-370 8.8 CVE-2026-9781 Quest Jun 24, 2026

Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability

ZDI-26-366 7.8 CVE-2026-8108 Fuji Jun 24, 2026

Fuji Electric Tellus pcid64 Driver File APIs Exposed Dangerous Method Arbitrary File Deletion Vulnerability

ZDI-26-396 5.5 CVE-2026-50262 X.Org Jun 24, 2026

X.Org Server ChangeDrawableAttributes Out-Of-Bounds Read Information Disclosure Vulnerability

ZDI-26-365 8.8 CVE-2026-41137 FlowiseAI Jun 24, 2026

FlowiseAI Flowise CSV Agent customReadCSV Code Injection Remote Code Execution Vulnerability

ZDI-CAN-32004 4.3 Upcoming – 35d Microsoft Jun 24, 2026

Microsoft

ZDI-CAN-32013 9.9 Upcoming – 34d Oracle Jun 23, 2026

Oracle

ZDI-CAN-29960 7.8 Upcoming – 34d verl Jun 23, 2026

verl

ZDI-CAN-29962 7.8 Upcoming – 34d verl Jun 23, 2026

verl

ZDI-CAN-31561 7.8 Upcoming – 34d Apple Jun 23, 2026

Apple

ZDI-CAN-30411 7.1 Upcoming – 34d Microsoft Jun 23, 2026

Microsoft

ZDI-CAN-31048 3.3 Upcoming – 34d Foxit Jun 23, 2026

Foxit

ZDI-CAN-31995 7.8 Upcoming – 34d Soda PDF Jun 23, 2026

Soda PDF

Prev Page 24 of 60 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy