Zero-Day Vulnerabilities

Malware, exploited flaws, phishing and botnets, from the researchers who found them.

13stories this week

0today

the last seven days

Most fromSecurity Affairs, The Hacker News, BleepingComputer, Schneier on Security

In the news hereCisco2 Ivanti2 Palo Alto Networks2 Apple1

Exploited
Fortinet sounds the alarm over actively exploited FortiMail zero-day

October 2, 2026

Malware & Exploits, UK Cyber Attacks, Zero-Day Vulnerabilities, UK Cyber Security News, Threat Intelligence

No login required, exploitation underway, and some admins are still waiting for patches…
The Register
Exploited
Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

October 2, 2026

Enterprise & Cloud Security, Identity & Access Management, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.
SecurityWeek
Exploited
Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

October 2, 2026

Automation & SOAR, Malware & Exploits, Zero-Day Vulnerabilities, AI & Emerging Technology, Threat Intelligence

CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.
SecurityWeek
Exploited
Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

October 2, 2026

AI Attacks & Abuse, Malware & Exploits, Zero-Day Vulnerabilities, AI & Emerging Technology, Threat Intelligence

CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.
SecurityWeek
Exploited
Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

October 2, 2026

Enterprise & Cloud Security, Malware & Exploits, SOC & SIEM, Zero-Day Vulnerabilities, Threat Intelligence

CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.
SecurityWeek
Exploited
U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog

October 2, 2026

Botnets & C2, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Fortinet FortiMail flaw, tracked as CVE-2026-104286 (CVSS score of 9.8), to its Known Exploited Vulnerabilities (KEV) catalog. The flaw is a path traversal vulnerability that can be triggered…
Security Affairs
Exploited
Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

October 2, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8), allows unauthenticated attackers to write arbitrary files on the underlying system. “An improper…
The Hacker News
Exploited
Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

October 1, 2026

Cyber Security News, Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices.
BleepingComputer
Exploited
Cisco SD-WAN Manager hit by zero-day admin access attack

October 1, 2026

Global Cyber Attacks, Global Cyber Security, UK Industry News, Zero-Day Vulnerabilities, UK Cyber Security News, Threat Intelligence

Cisco’s SD-WAN management software has been letting some attackers walk through an authentication check without having to prove who they are. The company says it has now fixed the flaw that was allowing it. The affected platform, Cisco Catalyst SD-WAN Manager, is used to configure and operate software-defined network deployments. Cisco said in an advisory…
CSO Online UK
Exploited
AI agent used Zammad zero-days to breach Dutch vulnerability disclosure non-profit

October 1, 2026

AI Attacks & Abuse, Cyber Security News, Data Breaches, Global Cyber Security, Zero-Day Vulnerabilities, AI & Emerging Technology, Threat Intelligence

An agentic AI-powered attack that hit the Dutch Institute for Vulnerability Disclosure (DIVD) on September 21 exploited two zero-day vulnerabilities in Zammad, an open-source helpdesk and customer support ticketing system. “Used together, [the two flaws] allowed the attackers to hijack sessions, run code remotely and escalate privileges from the Zammad user to root, in seconds,…
Help Net Security
Exploited
Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure

October 1, 2026

Cyber Security News, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction.
SecurityWeek
Exploited
Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950

October 1, 2026

Global Cyber Attacks, Global Cyber Security, Malware & Exploits, Zero-Day Vulnerabilities, Threat Intelligence

Apple patched a CoreGraphics zero-day that may have been exploited in targeted attacks. A public PoC for the flaw is now available. Apple patched a zero-day vulnerability, tracked as CVE-2026-86950, in CoreGraphics that attackers may have exploited to target specific individuals. The flaw is an out-of-bounds write that can lead to arbitrary code execution when…
Security Affairs

Your basket (items: 0)

Products in basket
Product	Details	Total
	Available on back-order Previous price: Discounted price:	Save

Zero-Day Vulnerabilities

Stay ahead in Cyber Security.