https://0daynews.com/articles/2026-07-06-gitlab-exiftool-rce-cve-2021-22205/ 0dayNews en 2026-07-06T13:00:00.000Z GitLab's ExifTool RCE: A Patch That Sat Unrecognized for Months CVE-2021-22205, GitLab, ExifTool, remote code execution, patch adoption gap https://0daynews.com/articles/2026-07-06-gitlab-exiftool-rce-cve-2021-22205/cover.jpg GitLab's ExifTool RCE: A Patch That Sat Unrecognized for Months https://0daynews.com/articles/2026-07-05-barracuda-esg-zero-day-cve-2023-2868/ 0dayNews en 2026-07-05T15:30:00.000Z Barracuda Told Customers to Replace Their Appliances, Not Just Patch Them. Here's Why. CVE-2023-2868, Barracuda ESG, Email Security Gateway, appliance replacement, persistent backdoor https://0daynews.com/articles/2026-07-05-barracuda-esg-zero-day-cve-2023-2868/cover.jpg Barracuda Told Customers to Replace Their Appliances, Not Just Patch Them. Here's Why. https://0daynews.com/articles/2026-07-05-winrar-path-traversal-cve-2023-38831/ 0dayNews en 2026-07-05T13:00:00.000Z The WinRAR Bug That Hid a Malicious Script Behind a Fake Photo CVE-2023-38831, WinRAR, RARLAB, path traversal, spoofed file extension https://0daynews.com/articles/2026-07-05-winrar-path-traversal-cve-2023-38831/cover.jpg The WinRAR Bug That Hid a Malicious Script Behind a Fake Photo https://0daynews.com/articles/2026-07-04-vmware-vcenter-vsphere-client-rce-cve-2021-21972/ 0dayNews en 2026-07-04T15:30:00.000Z vCenter's Unrestricted-Upload Bug: A Reminder That Management Planes Shouldn't Face the Internet CVE-2021-21972, VMware vCenter Server, vSphere Client, unrestricted file upload, virtualization security https://0daynews.com/articles/2026-07-04-vmware-vcenter-vsphere-client-rce-cve-2021-21972/cover.jpg vCenter's Unrestricted-Upload Bug: A Reminder That Management Planes Shouldn't Face the Internet https://0daynews.com/articles/2026-07-04-spring4shell-vmware-spring-framework-rce/ 0dayNews en 2026-07-04T13:00:00.000Z Spring4Shell: Why This One Needed Careful Triage, Not Panic Spring4Shell, CVE-2022-22965, Spring Framework, VMware, data binding https://0daynews.com/articles/2026-07-04-spring4shell-vmware-spring-framework-rce/cover.jpg Spring4Shell: Why This One Needed Careful Triage, Not Panic https://0daynews.com/articles/2026-07-03-pegasus-mep-kouloglou-citizen-lab-analysis/ 0dayNews en 2026-07-03T23:15:00.000Z Pegasus on the MEP investigating Pegasus Pegasus, NSO Group, Citizen Lab, Stelios Kouloglou, European Parliament, PEGA committee, commercial spyware https://0daynews.com/articles/2026-07-03-fatfs-runzero-seven-flaws-embedded-firmware/ 0dayNews en 2026-07-03T22:15:00.000Z runZero discloses seven FatFs flaws in embedded firmware, six unpatched FatFs, embedded firmware, supply chain, runZero, CVE-2026-6682, JPCERT/CC, RTOS https://0daynews.com/articles/2026-07-03-bad-epoll-linux-kernel-lpe-cve-2026-46242/ 0dayNews en 2026-07-03T21:00:00.000Z Bad Epoll (CVE-2026-46242): Linux kernel LPE hits Android too CVE-2026-46242, Linux kernel, epoll, use-after-free, local privilege escalation, Android security https://0daynews.com/articles/2026-07-03-avalon-crownx-modular-malware-framework/ 0dayNews en 2026-07-03T20:20:00.000Z Avalon: modular malware framework bundles CrownX ransomware — Blackpoint Avalon malware framework, CrownX ransomware, Blackpoint Cyber, MSBuild loader, ETW bypass, Proton Drive phishing, modular malware https://0daynews.com/articles/2026-07-03-cisco-unified-cm-active-exploitation-confirmed/ 0dayNews en 2026-07-03T19:15:00.000Z Cisco confirms active exploitation of Unified CM flaw patched in early June Cisco, Unified Communications Manager, Cisco Unified CM, active exploitation, vendor advisory, Cisco PSIRT, patch prioritization https://0daynews.com/articles/2026-07-03-cisco-unified-cm-active-exploitation-confirmed/cover.jpg Cisco confirms active exploitation of Unified CM flaw patched in early June https://0daynews.com/articles/2026-07-03-argo-cd-repo-server-unauth-rce-unpatched/ 0dayNews en 2026-07-03T18:15:00.000Z Unpatched Argo CD repo-server flaw lets unauth callers reach cluster takeover Argo CD, repo-server, Kubernetes, GitOps, unauthenticated RCE, Synacktiv, cluster takeover https://0daynews.com/articles/2026-07-03-argo-cd-repo-server-unauth-rce-unpatched/cover.jpg Unpatched Argo CD repo-server flaw lets unauth callers reach cluster takeover https://0daynews.com/articles/2026-07-03-dprk-npm-rollup-polyfill-supply-chain/ 0dayNews en 2026-07-03T17:15:00.000Z DPRK-linked npm packages impersonate a Rollup polyfill to steal developer secrets npm, supply-chain, North Korea, DPRK, Rollup, JFrog, developer secrets, typosquatting https://0daynews.com/articles/2026-07-03-anubis-ransomware-citrix-bleed-2-cve-2025-5777/ 0dayNews en 2026-07-03T16:00:00.000Z Anubis ransomware seen exploiting Citrix Bleed 2 for initial access CVE-2025-5777, Citrix Bleed 2, NetScaler, Anubis ransomware, BYOVD, RMM abuse, initial access https://0daynews.com/articles/2026-07-03-confluence-ognl-injection-cve-2022-26134/ 0dayNews en 2026-07-03T15:30:00.000Z The Confluence Bug That Went From Zero-Day to Mass Ransomware Precursor in Days CVE-2022-26134, Atlassian Confluence, OGNL injection, ransomware precursor, webshell https://0daynews.com/articles/2026-07-03-confluence-ognl-injection-cve-2022-26134/cover.jpg The Confluence Bug That Went From Zero-Day to Mass Ransomware Precursor in Days https://0daynews.com/articles/2026-07-03-fortios-fortiproxy-auth-bypass-cve-2022-40684/ 0dayNews en 2026-07-03T13:00:00.000Z FortiOS Auth Bypass: Why Fortinet Warned Select Customers Before Going Public CVE-2022-40684, FortiOS, FortiProxy, authentication bypass, SSH key persistence https://0daynews.com/articles/2026-07-03-fortios-fortiproxy-auth-bypass-cve-2022-40684/cover.jpg FortiOS Auth Bypass: Why Fortinet Warned Select Customers Before Going Public https://0daynews.com/articles/2026-07-03-kemp-loadmaster-cve-2026-8037-pre-auth-rce/ 0dayNews en 2026-07-03T13:00:00.000Z Kemp LoadMaster pre-auth RCE (CVE-2026-8037): PoC is out, patch now CVE-2026-8037, Progress Kemp LoadMaster, pre-auth RCE, OS command injection, load balancer, patch management https://0daynews.com/articles/2026-07-03-fbi-netnut-popa-botnet-takedown/ 0dayNews en 2026-07-03T05:00:00.000Z FBI seizes NetNut proxy platform, Google degrades Popa botnet NetNut, Popa botnet, FBI seizure, residential proxy, Alarum Technologies, Google Threat Intelligence Group, botnet takedown https://0daynews.com/articles/2026-07-03-sharepoint-cve-2026-45659-kev-active-exploitation/ 0dayNews en 2026-07-03T04:30:00.000Z SharePoint RCE now on CISA KEV: patch it this week, not next CVE-2026-45659, Microsoft SharePoint, CISA KEV, deserialization, remote code execution, patch management https://0daynews.com/articles/2026-07-02-f5-big-ip-icontrol-rest-auth-bypass/ 0dayNews en 2026-07-02T15:00:00.000Z F5 BIG-IP's Maximum-Severity Auth Bypass: What CVE-2022-1388 Actually Exposed CVE-2022-1388, F5 BIG-IP, iControl REST, authentication bypass, application delivery controller https://0daynews.com/articles/2026-07-02-f5-big-ip-icontrol-rest-auth-bypass/cover.jpg F5 BIG-IP's Maximum-Severity Auth Bypass: What CVE-2022-1388 Actually Exposed https://0daynews.com/articles/2026-07-02-follina-msdt-zero-day-explained/ 0dayNews en 2026-07-02T13:00:00.000Z Follina Explained: The MSDT Bug That Skipped the Macro Warning Entirely Follina, CVE-2022-30190, MSDT, Windows Support Diagnostic Tool, zero-day https://0daynews.com/articles/2026-07-02-follina-msdt-zero-day-explained/cover.jpg Follina Explained: The MSDT Bug That Skipped the Macro Warning Entirely