https://0daynews.com/articles/2026-07-06-gitlab-exiftool-rce-cve-2021-22205/ 0dayNews en 2026-07-06T13:00:00.000Z GitLab's ExifTool RCE: A Patch That Sat Unrecognized for Months CVE-2021-22205, GitLab, ExifTool, remote code execution, patch adoption gap https://0daynews.com/articles/2026-07-06-gitlab-exiftool-rce-cve-2021-22205/cover.jpg GitLab's ExifTool RCE: A Patch That Sat Unrecognized for Months https://0daynews.com/articles/2026-07-05-barracuda-esg-zero-day-cve-2023-2868/ 0dayNews en 2026-07-05T15:30:00.000Z Barracuda Told Customers to Replace Their Appliances, Not Just Patch Them. Here's Why. CVE-2023-2868, Barracuda ESG, Email Security Gateway, appliance replacement, persistent backdoor https://0daynews.com/articles/2026-07-05-barracuda-esg-zero-day-cve-2023-2868/cover.jpg Barracuda Told Customers to Replace Their Appliances, Not Just Patch Them. Here's Why. https://0daynews.com/articles/2026-07-05-winrar-path-traversal-cve-2023-38831/ 0dayNews en 2026-07-05T13:00:00.000Z The WinRAR Bug That Hid a Malicious Script Behind a Fake Photo CVE-2023-38831, WinRAR, RARLAB, path traversal, spoofed file extension https://0daynews.com/articles/2026-07-05-winrar-path-traversal-cve-2023-38831/cover.jpg The WinRAR Bug That Hid a Malicious Script Behind a Fake Photo https://0daynews.com/articles/2026-07-04-vmware-vcenter-vsphere-client-rce-cve-2021-21972/ 0dayNews en 2026-07-04T15:30:00.000Z vCenter's Unrestricted-Upload Bug: A Reminder That Management Planes Shouldn't Face the Internet CVE-2021-21972, VMware vCenter Server, vSphere Client, unrestricted file upload, virtualization security https://0daynews.com/articles/2026-07-04-vmware-vcenter-vsphere-client-rce-cve-2021-21972/cover.jpg vCenter's Unrestricted-Upload Bug: A Reminder That Management Planes Shouldn't Face the Internet https://0daynews.com/articles/2026-07-04-spring4shell-vmware-spring-framework-rce/ 0dayNews en 2026-07-04T13:00:00.000Z Spring4Shell: Why This One Needed Careful Triage, Not Panic Spring4Shell, CVE-2022-22965, Spring Framework, VMware, data binding https://0daynews.com/articles/2026-07-04-spring4shell-vmware-spring-framework-rce/cover.jpg Spring4Shell: Why This One Needed Careful Triage, Not Panic https://0daynews.com/articles/2026-07-03-confluence-ognl-injection-cve-2022-26134/ 0dayNews en 2026-07-03T15:30:00.000Z The Confluence Bug That Went From Zero-Day to Mass Ransomware Precursor in Days CVE-2022-26134, Atlassian Confluence, OGNL injection, ransomware precursor, webshell https://0daynews.com/articles/2026-07-03-confluence-ognl-injection-cve-2022-26134/cover.jpg The Confluence Bug That Went From Zero-Day to Mass Ransomware Precursor in Days https://0daynews.com/articles/2026-07-03-fortios-fortiproxy-auth-bypass-cve-2022-40684/ 0dayNews en 2026-07-03T13:00:00.000Z FortiOS Auth Bypass: Why Fortinet Warned Select Customers Before Going Public CVE-2022-40684, FortiOS, FortiProxy, authentication bypass, SSH key persistence https://0daynews.com/articles/2026-07-03-fortios-fortiproxy-auth-bypass-cve-2022-40684/cover.jpg FortiOS Auth Bypass: Why Fortinet Warned Select Customers Before Going Public https://0daynews.com/articles/2026-07-02-f5-big-ip-icontrol-rest-auth-bypass/ 0dayNews en 2026-07-02T15:00:00.000Z F5 BIG-IP's Maximum-Severity Auth Bypass: What CVE-2022-1388 Actually Exposed CVE-2022-1388, F5 BIG-IP, iControl REST, authentication bypass, application delivery controller https://0daynews.com/articles/2026-07-02-f5-big-ip-icontrol-rest-auth-bypass/cover.jpg F5 BIG-IP's Maximum-Severity Auth Bypass: What CVE-2022-1388 Actually Exposed https://0daynews.com/articles/2026-07-02-follina-msdt-zero-day-explained/ 0dayNews en 2026-07-02T13:00:00.000Z Follina Explained: The MSDT Bug That Skipped the Macro Warning Entirely Follina, CVE-2022-30190, MSDT, Windows Support Diagnostic Tool, zero-day https://0daynews.com/articles/2026-07-02-follina-msdt-zero-day-explained/cover.jpg Follina Explained: The MSDT Bug That Skipped the Macro Warning Entirely https://0daynews.com/articles/2026-07-01-mshtml-office-zero-day-cve-2021-40444/ 0dayNews en 2026-07-01T15:30:00.000Z The MSHTML Zero-Day That Turned a Word Document Into Full Code Execution CVE-2021-40444, MSHTML, Office zero-day, ActiveX, phishing https://0daynews.com/articles/2026-07-01-mshtml-office-zero-day-cve-2021-40444/cover.jpg The MSHTML Zero-Day That Turned a Word Document Into Full Code Execution https://0daynews.com/articles/2026-07-01-proxylogon-exchange-server-attack-chain/ 0dayNews en 2026-07-01T13:00:00.000Z ProxyLogon: Inside the Exchange Server Attack Chain That Triggered an FBI Court Order ProxyLogon, CVE-2021-26855, Exchange Server, Hafnium, webshell https://0daynews.com/articles/2026-07-01-proxylogon-exchange-server-attack-chain/cover.jpg ProxyLogon: Inside the Exchange Server Attack Chain That Triggered an FBI Court Order https://0daynews.com/articles/2026-06-30-printnightmare-windows-print-spooler-explained/ 0dayNews en 2026-06-30T15:00:00.000Z PrintNightmare: How a Leaked Proof-of-Concept Forced an Emergency Windows Patch PrintNightmare, CVE-2021-34527, Windows Print Spooler, privilege escalation, domain controller compromise https://0daynews.com/articles/2026-06-30-printnightmare-windows-print-spooler-explained/cover.jpg PrintNightmare: How a Leaked Proof-of-Concept Forced an Emergency Windows Patch https://0daynews.com/articles/2026-06-30-log4shell-log4j-anniversary-explainer/ 0dayNews en 2026-06-30T13:00:00.000Z Log4Shell, Explained: Why a Logging Library Became the Internet's Worst Week Log4Shell, CVE-2021-44228, Apache Log4j2, JNDI injection, remote code execution https://0daynews.com/articles/2026-06-30-log4shell-log4j-anniversary-explainer/cover.jpg Log4Shell, Explained: Why a Logging Library Became the Internet's Worst Week