0dayNews — Vulnerability & Exploit News
Known Exploited Vulnerabilities
ownCloud Improper Authentication Vulnerability
ownCloud contains an improper authentication vulnerability that allows an attacker to access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured.
Linux Kernel Unspecified Vulnerability
Linux Kernel contains an unspecified vulnerability that can allow for privilege escalation via IPv6 networking subsystem. This vulnerability can impact multiple products, including but not limited to Suse, Red Hat, and other products using Linux.
JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions.
Citrix NetScaler ADC and Gateway Memory Buffer Overflow
CVE-2026-8452 is a CVSS 9.8 critical memory buffer overflow in Citrix NetScaler ADC and NetScaler Gateway affecting appliances configured as Gateway or AAA virtual server, confirmed exploited in the wild and added to CISA KEV on August 26, 2026.
Red Hat Libuser Race Condition Vulnerability
Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation.
Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.
From the desk
PaperCut Issues Second Patch as Bypasses Found
PaperCut's first emergency patch had bypasses. CVE-2026-81578 (auth bypass, CVSS 8.8) and CVE-2026-82078 (RCE, CVSS 9.4) remain exploitable on EP1 installs. Apply Emergency Patch Release 2.
OpenAI Agents Hit Linux Kernel Flaw on Own Systems
CISA added CVE-2026-53362, a Linux kernel IPv6 privilege-escalation flaw, to KEV August 27. OpenAI's agents exploited it in-house. Patch deadline: August 30.
McKesson Breach: ShinyHunters Claims 284M Patient Records
McKesson confirmed unauthorized access to third-party apps; ShinyHunters claims 284 million patient records stolen from the healthcare and pharma distribution giant.
APT28-Linked HOOKEDGE Backdoor Hit European Governments
Recorded Future Insikt Group identified APT28-linked campaigns deploying HOOKEDGE, a previously undocumented Windows batch backdoor, against government targets in Romania, Spain, and Türkiye.
ZBT Routers Ship With Factory-Installed Root Backdoors
VulnCheck found two undocumented firmware implants in Shenzhen ZBT routers: SPEAKINGSTONE and DARKLANTERN, each granting unauthenticated remote root access. Both carry CVSS 9.8 scores.
Nuclear Records Stolen via ownCloud Flaw, CISA KEV Added
CISA KEV added CVE-2023-49105 after nuclear data theft in Philippines. Self-hosted ownCloud users face an August 30 remediation deadline.