OPS INTEL

CRITICAL 95% confidence cve

(Pwn2Own) Lexmark CX532adwe libesffls Directory Traversal RCE Vulnerability

Network-adjacent attackers can execute arbitrary code on Lexmark CX532adwe printers without authentication due to a directory traversal remote code execution.

['Impact on corporate and home networks', 'Potential for data exfiltration and system compromise', 'Risk of service disruption and loss']

IT administratorsNetwork Security TeamsPrinter Management Personnel

action items (3)

• Review Lexmark CX532adwe usage in your environment
• Apply available security updates immediately
• Implement network segmentation around critical assets

Zero Day Initiative · 2026-02-27T03:49

HIGH 90% confidence cve

ZDI-26-062: Lexmark CX532adwe esfhelper Vulnerability

['Local attackers can escalate privileges on Lexmark CX532adwe printers. CVE-2025-65078, CVSS rating of 7.8.', 'ZDI alert for Lexmark CX532adwe with untrusted.

['Attackers need to execute low-privileged code initially, but this flaw allows for privilege escalation.']

Lexmark CX532adwe usersIT administrators managing networked printers

action items (3)

• Audit existing Lexmark CX532adwe printer deployments
• Apply vendor-provided patches immediately
• Review and enforce least privilege access controls

Zero Day Initiative · 2026-02-27T03:49

HIGH 90% confidence cve

ZDI-26-070: Adobe ColdFusion CAR File Parsing RCE Vulnerability

Adobe ColdFusion suffers from a CAR file parsing directory traversal remote code execution vulnerability. Requires authentication but can lead to full system.

['CAR file parsing is vulnerable to directory traversal attacks', 'Authenticated access allows for potential privilege escalation and data exfiltration']

Adobe ColdFusion usersWeb application administrators

action items (2)

• Update ColdFusion to the latest version with fixes
• Review and restrict permissions for users with access to CAR files

Zero Day Initiative · 2026-02-27T03:49

HIGH 85% confidence cve

(0Day) Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability

This entry discusses a critical remote code execution vulnerability in Xmind that requires user interaction to be exploited. Includes severity, confidence, and

['Understanding the specific conditions required for exploitation can help prioritize mitigation efforts', 'Remediation actions are crucial to prevent remote attacks']

IT security professionalsXmind users and administrators

action items (2)

• Identify all instances running affected versions of Xmind
• Deploy monitoring for suspicious activity

Zero Day Initiative · 2026-02-27T03:49

CRITICAL 95% confidence outage

Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access

['Cisco SD-WAN Controller and Manager are affected by a zero-day flaw tracked as CVE-2026-20127, allowing unauthenticated attackers to bypass authentication.

['Failure to patch affected systems can lead to unauthorized access, data theft, and potential disruption of network services.', 'Immediate action is required to mitigate the risk of exploitation and protect sensitive in

Cisco SD-WANNetwork Security

action items (2)

• Review system configurations and apply necessary security updates immediately.
• Monitor networks for signs of exploitation and report any suspicious activity.

The Hacker News · 2026-02-27T03:48