New that day
- highpatchedexploited Ajax.NET Professional Deserialization of Untrusted Data Vulnerability Ajax.NET Professional Ajax.NET Professional Ajax.NET Professional (AjaxPro) contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. Added to CISA KEV on 2026-08-26 (federal deadline 2026-09-09).
- highpatchedexploited Red Hat Libuser Race Condition Vulnerability Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the /etc/passwd file to cause a denial of service or privilege escalation. Added to CISA KEV on 2026-08-26 (federal deadline 2026-09-09).
- highpatchedexploited Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version. Added to CISA KEV on 2026-08-26 (federal deadline 2026-09-09).
- highpatchedexploited Linux Kernel Out-of-Bounds Write Vulnerability Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system. Added to CISA KEV on 2026-08-26 (federal deadline 2026-08-29).
- highpatchedexploited Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability which could lead to denial of service. Added to CISA KEV on 2026-08-26 (federal deadline 2026-08-29).
- highpatchedexploited Microsoft SQL Server Remote Code Execution Vulnerability Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account. Added to CISA KEV on 2026-08-26 (federal deadline 2026-08-29).