HIGH 95% confidence cve

ZDI-26-051: Kemp LoadMaster delcert Command Injection Vulnerability

Progress Software Kemp LoadMaster delcert command injection allows remote code execution with required auth. CVSS rating of 7.1, applies to network-adjacent.

['Exploit allows for unauthorized access and potential system compromise']

Network security operations, systems administrators

action items (1)

• Apply available patches or updates for Kemp LoadMaster

Zero Day Initiative · 2026-02-27T04:25

HIGH 95% confidence cve

ZDI-26-059: CyberArk EPM Local Privilege Escalation Vulnerability

['CyberArk Endpoint Privilege Management suffers from a local privilege escalation issue. This flaw allows unprivileged users to escalate privileges on. Read fu

['The vulnerability stems from improper privilege management within EPM that permits a local user to execute commands or processes outside of their granted access level.', '96']

WindowsLinux

action items (2)

• Update EPM immediately using vendor patches or mitigations.
• Review system configurations and ensure compliance with least privilege principles.

Zero Day Initiative · 2026-02-27T04:24

HIGH 85% confidence cve

ZDI-26-058: AzeoTech DAQFactory Pro CTL File Parsing Vulnerability

Remote code execution vulnerability in AzeoTech DAQFactory Pro via CTL file parsing. CVSS rating of 7.8, CVE-2025-66589. Includes severity, confidence, and acti

['Exploitation requires user interaction', 'Attackers may execute arbitrary code remotely', 'CVSS rating of 7.8 indicates high severity']

WindowsLinuxUnix-like systems

action items (2)

• Review system configurations for AzeoTech DAQFactory Pro
• Implement patches or updates provided by vendor

Zero Day Initiative · 2026-02-27T04:24

CRITICAL 95% confidence cve

ZDI-26-057: Apple Safari JavaScriptCore FTL New Array Materialization Type Confusion

Apple Safari's JavaScriptCore FTL has a type confusion vulnerability allowing remote code execution. User interaction is required. Includes severity, confidence

['Type confusion bug in FTL (Fast Transformer Library) of JavaScriptCore can be exploited by malicious websites or files', "Can lead to arbitrary code execution on user's system if visited or opened"]

Apple Safari UsersWeb Developers using JavaScriptCoreNetwork Administrators

action items (3)

• Install patches or updates provided by Apple immediately
• Monitor networks for signs of exploitation activity
• Educate users about risks associated with visiting untrusted websites or opening unknown files

Zero Day Initiative · 2026-02-27T04:23

MEDIUM 85% confidence cve

Apple macOS AppleIntelKBLGraphics OOB Read Disclosure Vulnerability ZDI-26-056

Local attackers can disclose sensitive info on affected macOS systems due to an out-of-bounds read in AppleIntelKBLGraphics. CVE-2025-43283, CVSS:6.5. Includes

['Sensitive data disclosure risk', 'Potential misuse of leaked info by malicious actors']

Apple macOS UsersIT Administrators

action items (2)

• Install patches provided by Apple
• Review and enhance system privilege controls

Zero Day Initiative · 2026-02-27T04:23