ZDI Advisories

Microsoft

GNU

OriginLab

pdfforge

OriginLab

Bosch Rexroth

BlackBerry

MLflow

MLflow is an open-source machine learning platform used for managing ML workflows, experiments, and model deployment.

QNAP TS-453E server_handlers.pyc rr2s.kwargs Error Message Information Disclosure Vulnerability

A network-adjacent attacker can bypass authentication on QNAP TS-453E NAS devices to disclose sensitive information, despite the normally required…

MLflow

MLflow is an open-source machine learning platform used for experiment tracking, model management, and deployment.

Apple macOS Exposure of Sensitive Information to Unauthorized Sphere Information Disclosure Vulnerability

CVE-2026-20695 is a local information disclosure vulnerability affecting Apple macOS that requires an attacker to already have low-privileged code…

QNAP TS-453E write_file_to_svr External Control of File Path Remote Code Execution Vulnerability

QNAP TS-453E devices contain a code execution vulnerability (CVE-2025-62842) that can be exploited by network-adjacent attackers who can bypass the…

QNAP QHora-322 miro_webserver_controllers_api_login_singIn Authentication Bypass Vulnerability

QNAP QHora-322 routers contain an authentication bypass vulnerability (CVE-2024-13088) that allows network-adjacent attackers to gain unauthorized…

Digilent DASYLab DSB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Digilent DASYLab contains a remote code execution vulnerability (CVE-2026-0954) that allows attackers to execute arbitrary code on affected systems…

Linux

Linux is the open-source operating system kernel used across servers, desktops, and embedded systems worldwide.

OpenClaw Canvas Authentication Bypass Vulnerability

OpenClaw contains a critical authentication bypass vulnerability (CVE-2026-3690) that allows unauthenticated remote attackers to gain unauthorized…

OpenClaw Canvas Path Traversal Information Disclosure Vulnerability

OpenClaw contains a medium-severity information disclosure vulnerability (CVE-2026-3689, CVSS 6.5) that allows authenticated remote attackers to…

Digilent DASYLab DSA File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

A high-severity remote code execution vulnerability (CVE-2026-0957) affects Digilent DASYLab, allowing attackers to execute arbitrary code on…

Adobe

Adobe, a major software company known for creative and productivity applications, has a high-severity local vulnerability (CVSS 7.8) that requires…

MLflow

MLflow is an open-source machine learning platform used for managing ML experiments, models, and deployments.

Adobe

Adobe has disclosed a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to exploit, but delivers significant…

LiteLLM

LiteLLM is an open-source library that provides a unified interface for large language model APIs.

Linux Kernel AoE Driver Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability is a privilege escalation flaw in the Linux Kernel (CVE-2023-6270) that allows local attackers with low-level code execution to…

OpenClaw Client PKCE Verifier Information Disclosure Vulnerability

OpenClaw contains a credential disclosure vulnerability (CVE-2026-3691) that allows remote attackers to access stored credentials when a user…

Digilent DASYLab DSA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Digilent DASYLab contains a remote code execution vulnerability (CVE-2026-0955) rated HIGH with a CVSS score of 7.8 that allows attackers to execute…

aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability

aws-mcp-server Command Injection Remote Code Execution Vulnerability

Adobe

Adobe, a major software company known for creative and productivity applications, has a high-severity local vulnerability (CVSS 7.8) that requires…

OpenPrinting

OpenPrinting is a widely-used open-source printing system commonly integrated into Linux distributions and enterprise print servers.

Linux

A high-severity vulnerability (CVSS 7.5) has been discovered in Linux that requires local access and high-level privileges to exploit, but can result…