Mailing-list archive
No vulnerabilities published in this period.
August 2026
- APPLE-SA-08-17-2026-1 iOS 26.6.1 and iPadOS 26.6.1
full-disclosure - Re: Security advisory: multiple vulnerabilities including Default-credential RCE, Pre-authentication root RCE in atvise SCADA 3.13.0 (atvise GmbH / Bachmann Visutec)
full-disclosure - OpenZFS Linux open zpool manipulation and escapes via unprivileged userns
full-disclosure - [0day-rubbish] Workflow Enterprise 9.1.0.1 Pre-authentication RCE (expression injection) (9.8)
full-disclosure - [0day-rubbish] Call Center Suite 10.10.1 Pre-authentication RCE (auth bypass + webroot write) (9.8)
full-disclosure - [0day-rubbish] Vocia MS-1 Firmware 1.2.27 Pre-authentication RCE (hardcoded credentials + supervisor execution) (9.8)
full-disclosure - [0day-rubbish] Enterprise ADC 8.13.8 Authenticated RCE (command injection + passwordless sudo) (8.8)
full-disclosure - [0day-rubbish] KeyHelp 26.0 (Build 3624) Authenticated RCE (command injection via Apache directive) (7.2)
full-disclosure - [0day-rubbish] IceWarp Server 14.3.0 Authenticated config write + unauthenticated trigger (UNC DLL loading) (9.0)
full-disclosure - [0day-rubbish] InsightEdge Enterprise (XAP IMDg) 16.1.1 Pre-authentication RCE (path traversal + JSP webshell) (9.8)
full-disclosure - [0day-rubbish] HiveMQ Platform 4.54.0 Pre-authentication RCE (default credentials + Zip-Slip) (9.8)
full-disclosure - APPLE-SA-08-06-2026-3 macOS Sonoma 14.8.9
full-disclosure - APPLE-SA-08-06-2026-2 macOS Sequoia 15.7.9
full-disclosure - Cisco Catalyst SD-WAN C8000V Authenticated Heap Buffer Overflow
full-disclosure - batch-2: 15 vulnerabilities incl. multiple pre-auth RCE across 10 enterprise/SCADA products - full analyses + reproducible exploits
full-disclosure - Silent;Call — Pre-Authentication Remote Root in Cisco CUCM 15.x (SKYLINE-2026-001/002/003)
full-disclosure - [KIS-2026-16] Telenia Software TVox <= 26.5.3 (nice) Local Privilege Escalation Vulnerability
full-disclosure - [KIS-2026-15] Telenia Software TVox <= 26.5.3 (action_audio.php) OS Command Injection Vulnerability
full-disclosure - [KIS-2026-14] Telenia Software TVox <= 26.5.3 (set_env.php) Authentication Bypass Vulnerability
full-disclosure - Security advisory: multiple vulnerabilities including Pre-authentication root RCE in Xeams 10.3 build 6449 (Synametrics Technologies)
full-disclosure - Security advisory: Pre-authentication RCE in vMix 29 v29.0.0.48 (Studio Coast Pty Ltd)
full-disclosure - Security advisory: Pre-authentication SYSTEM RCE in Vicon Valerus ViconNet Gateway 25.200.46.0 (Vicon Industries)
full-disclosure - Security advisory: Pre-authentication RCE in Plastic SCM (Unity Version Control On-Prem) 11.0.16.10303 (Unity Technologies)
full-disclosure - Security advisory: Pre-authentication SYSTEM RCE in Stimulsoft Server 2026.3.1 (Stimulsoft)
full-disclosure - Security advisory: multiple vulnerabilities including JWT forgery / authentication bypass, Pre-authentication SYSTEM RCE in CIRCUTOR PowerStudio SCADA WAVE 24.11.6.0 (CIRCUTOR S.A.)
full-disclosure - Security advisory: multiple vulnerabilities including Authenticated RCE (property injection), Hardcoded credentials, Pre-authentication root RCE in CatDV Server 10.7.8 (Square Box Systems)
full-disclosure - Security advisory: multiple vulnerabilities including Default-credential RCE, Pre-authentication root RCE in atvise SCADA 3.13.0 (atvise GmbH / Bachmann Visutec)
full-disclosure - Security advisory: Pre-authentication RCE in Apache Struts 2 2.6.11.0 (Apache Software Foundation)
full-disclosure - Security advisory: Pre-authentication RCE in AOMEI Cyber Backup v2.3.0 (AOMEI)
full-disclosure