https://zerodayroom.com/2026-08-18https://zerodayroom.com/share-home.svg https://zerodayroom.com/news/cisa-flags-actively-exploited/2026-08-18https://zerodayroom.com/share-cisa-flags-actively-exploited.svgCISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCEThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. https://zerodayroom.com/news/critical-gitlab-graphql-flaw/2026-08-18https://zerodayroom.com/share-critical-gitlab-graphql-flaw.svgCritical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public ProjectsGitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software. (Source: The Hacker News) https://zerodayroom.com/news/unisoc-volte-video-call/2026-08-18https://zerodayroom.com/share-unisoc-volte-video-call.svgUnisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel AccessSecurity researchers have discovered a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc modem firmware through a VoLTE video call. (Source: The Hacker News) https://zerodayroom.com/news/mcp-servers-hidden-gap/2026-08-18https://zerodayroom.com/share-mcp-servers-hidden-gap.svgMCP Servers: A Hidden Gap in Enterprise SecurityMCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access, and prompt injection, highlighting the need for robust security measures to protect... https://zerodayroom.com/news/cavern-c2-framework-evolves/2026-08-17https://zerodayroom.com/share-cavern-c2-framework-evolves.svgCavern C2 Framework Evolves with New Communication Module and Google Apps Script RelayKaspersky researchers have discovered new components in the Cavern command-and-control framework used by Iranian nation-state hackers, expanding its communication capabilities and allowing it to... https://zerodayroom.com/news/cybersecurity-threats-week-review/2026-08-17https://zerodayroom.com/share-cybersecurity-threats-week-review.svgCybersecurity Threats: A Week in ReviewA summary of the latest cybersecurity threats and vulnerabilities. (Source: The Hacker News) https://zerodayroom.com/news/snowflake-github-actions-flaw/2026-08-17https://zerodayroom.com/share-snowflake-github-actions-flaw.svgSnowflake GitHub Actions Flaw Exposes Jira Credentials to Workflow Injection AttacksA vulnerability in Snowflake's public GitHub repository allowed attackers to inject commands into a workflow containing internal Jira credentials, potentially exposing sensitive information. https://zerodayroom.com/news/critical-flaws-wordpress-plugins/2026-08-17https://zerodayroom.com/share-critical-flaws-wordpress-plugins.svgCritical Flaws in WordPress Plugins Expose Sites to Unauthenticated RCE and Auth Bypass AttacksTwo high-severity vulnerabilities have been discovered in popular WordPress plugins, Forminator Forms and User Profile Builder, allowing unauthenticated attackers to execute arbitrary code and gain... https://zerodayroom.com/news/microsoft-defender-patch-bypass-e95232/2026-08-17https://zerodayroom.com/share-microsoft-defender-patch-bypass-e95232.svgMicrosoft Defender Patch Bypass Exploit Claims SYSTEM AccessA security researcher has released a proof-of-concept exploit for a Microsoft zero-day vulnerability, claiming it can bypass a previously released patch and grant an attacker SYSTEM-level privileges. https://zerodayroom.com/news/cisco-asa-ftd-flaw-ede96a/2026-08-17https://zerodayroom.com/share-cisco-asa-ftd-flaw-ede96a.svgCisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoSA high-severity vulnerability in Cisco's Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild, allowing an... https://zerodayroom.com/news/sap-commerce-cloud-vulnerability-9c4fb6/2026-08-17https://zerodayroom.com/share-sap-commerce-cloud-vulnerability-9c4fb6.svgSAP Commerce Cloud Vulnerability Allows Unauthenticated Attackers to Execute Arbitrary CodeSAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. (Source: The Hacker News) https://zerodayroom.com/news/microsoft-patches-flaws-including-73b10d/2026-08-17https://zerodayroom.com/share-microsoft-patches-flaws-including-73b10d.svgMicrosoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active AttackMicrosoft has released its monthly security updates, addressing 398 flaws, including a Windows driver zero-day under active attack. (Source: The Hacker News) https://zerodayroom.com/news/adobe-patches-critical-flaws-96b5e1/2026-08-16https://zerodayroom.com/share-adobe-patches-critical-flaws-96b5e1.svgAdobe Patches Critical Flaws in ColdFusion, Commerce, and Campaign ClassicAdobe releases updates to address multiple critical security vulnerabilities in ColdFusion, Commerce, and Campaign Classic, with some flaws having a CVSS score of 10.0. (Source: The Hacker News) https://zerodayroom.com/news/malicious-litellm-releases-may-1b59d6/2026-08-16https://zerodayroom.com/share-malicious-litellm-releases-may-1b59d6.svgMalicious LiteLLM Releases May Have Exposed Thousands of OrganizationsA recent investigation has revealed that two malicious LiteLLM releases were published on PyPI in March, potentially exposing over 2,500 organizations to credential-stealing code. https://zerodayroom.com/news/attackers-exploit-vmware-vcenter-a0ae0c/2026-08-16https://zerodayroom.com/share-attackers-exploit-vmware-vcenter-a0ae0c.svgAttackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote AccessThreat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability, CVE-2026-59310, is a... https://zerodayroom.com/news/enterprise-defenses-recovered-edge-2689d1/2026-08-16https://zerodayroom.com/share-enterprise-defenses-recovered-edge-2689d1.svgEnterprise Defenses Recovered at the Edge, Collapsed InsideA recent report by Picus Labs reveals that enterprise defenses have made significant improvements at the perimeter, but are struggling to prevent quiet attacks inside the network. https://zerodayroom.com/news/lazarus-group-exploits-windows-a82e1d/2026-08-16https://zerodayroom.com/share-lazarus-group-exploits-windows-a82e1d.svgLazarus Group Exploits Windows Zero-Day Vulnerability to Gain SYSTEM Access and Deploy BackdoorThe North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen... https://zerodayroom.com/news/chrome-vpn-extensions-caught-af9804/2026-08-16https://zerodayroom.com/share-chrome-vpn-extensions-caught-af9804.svg737 Chrome VPN Extensions Caught Routing Traffic Through ProxiesA set of 737 free VPN and proxy extensions have been found to target Russian-speaking users, intercepting browser traffic and routing it through a proxy infrastructure. (Source: The Hacker News) https://zerodayroom.com/news/flaw-ai-reasoning-apis-aa04ef/2026-08-16https://zerodayroom.com/share-flaw-ai-reasoning-apis-aa04ef.svgFlaw in AI Reasoning APIs Exposes Secrets and Private DataResearchers have discovered a vulnerability in the AI reasoning APIs of OpenAI, Anthropic, and Google, allowing them to recover internal reasoning and secrets from session logs, including API keys... https://zerodayroom.com/news/sharepoint-authentication-bypass-exploited-670241/2026-08-16https://zerodayroom.com/share-sharepoint-authentication-bypass-exploited-670241.svgSharePoint Authentication Bypass Exploited After PoC ReleaseThreat actors are actively exploiting a critical SharePoint vulnerability (CVE-2026-55040) after a proof-of-concept exploit was publicly released. The flaw allows unauthenticated attackers to bypass... https://zerodayroom.com/vulnerabilities/2026-08-18 https://zerodayroom.com/about/ https://zerodayroom.com/sources-and-methods/ https://zerodayroom.com/corrections/