OPS INTEL

MEDIUM 95% confidence cve

ZDI-26-045: Cisco Snort OOB Read Info Disclosure Vulnerability

Affected installations of Cisco Snort are vulnerable to remote attackers disclosing sensitive information. No auth required. Includes severity, confidence, and

['Exploit may result in unauthorized access to sensitive information', 'No user interaction required to trigger the vulnerability']

Cisco Snort users and administrators

action items (2)

• Deploy updates for Cisco Snort to address CVE-2026-20027
• Monitor network traffic for signs of exploitation attempts

Zero Day Initiative · 2026-02-27T04:29

CRITICAL 95% confidence cve

ZDI-26-050: GIMP ICO File Parsing Heap-based Buffer Overflow RCE

ZDI warns of a critical vulnerability in GIMP's ICO file parsing. A heap-based buffer overflow could lead to remote code execution. Includes severity, confidenc

['Remote code execution possible when users open malicious files', 'Exploits require user interaction but no authentication']

LinuxmacOSWindows

action items (2)

• Immediately patch all systems running vulnerable versions of GIMP
• Monitor for suspicious activity related to ICO files

Zero Day Initiative · 2026-02-27T04:28

CRITICAL 95% confidence cve

Exploiting CVE-2024-54529: Sound Barrier II

['In-depth exploration of exploiting a type confusion vulnerability in macOS coreaudiod process.', 'Details on turning a crash into an exploit through. Read ful

['Understanding exploitation methods helps in crafting better defensive strategies.', 'Detailed insights are crucial for enhancing security assessments and remediation efforts.']

macOS

action items (3)

• Review system configurations to ensure only necessary services are enabled.
• Update affected systems with latest security updates from Apple.
• Conduct thorough penetration testing focusing on newly identified vulnerabilities.

Google Project Zero · 2026-02-27T04:28

HIGH 90% confidence cve

ZDI-26-055: Progress Software Kemp LoadMaster addapikey Command Injection RCE Vulnerability

Exploitable via command injection in addapikey API of Progress Software Kemp LoadMaster, requiring authentication. CVSS rating 6.4. Includes severity, confidenc

['Allows network-adjacent actors to execute arbitrary commands on target systems', 'Potentially leads to full system compromise if exploited successfully']

Kemp LoadMaster usersNetwork administrators responsible for API security

action items (3)

• Review system configurations and network policies
• Update Kemp LoadMaster to latest version with fixes
• Increase monitoring of addapikey related activities

Zero Day Initiative · 2026-02-27T04:27

HIGH 95% confidence cve

ZDI-26-054 Kemp LoadMaster delapikey OS Command Injection RCE

Progress Software Kemp LoadMaster suffers from a remote code execution vulnerability requiring authentication. Includes severity, confidence, and actionable res

['This flaw enables authenticated users to inject and run arbitrary system commands on affected systems remotely, potentially leading to full control']

Kemp LoadMaster usersNetwork administrators

action items (2)

• Update Kemp LoadMaster to the latest version
• Review and restrict access permissions for sensitive functions

Zero Day Initiative · 2026-02-27T04:26