ZEN SecDB
secdb@infosec.exchange
<p>ZEN <a href="https://infosec.exchange/tags/SecDB" class="mention hashtag" rel="tag">#<span>SecDB</span></a> Portal is a vulnerability and security intelligence platform built to help security teams identify, prioritize, and respond to threats across their infrastructure - from a single <a href="https://infosec.exchange/tags/CVE" class="mention hashtag" rel="tag">#<span>CVE</span></a> to a full attack surface. </p><p>ZEN SecDB Portal: <a href="https://secdb.nttzen.cloud" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="">secdb.nttzen.cloud</span><span class="invisible"></span></a></p><p>SecDB Telegram Channel: <a href="https://t.me/secdbportal_feed" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">htt
Posts
-
View post
๐ CVE Published in last 7 days (2026-10-05 - 2026-10-05) See more at https://secdb.nttzen.cloud/dashboard Total CVEs: Severity: - Critical: 362 - High: 1154 - Medium: 1303 - Low: 193 - None: 268 Status: - : 32 - Analyzed: 380 - Awaiting Analysis: 719 - Deferred: 961 - Modified: 16 - Received: 883 - Rejected: 32 - Undergoing Analysis: 257 CISA KEVs: - CISA-2026:1008 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1008) Top CNAs: - Patchstack: 479 - GitHub, Inc.: 425 - VulnChe...
-
View post
๐จ [CISA-2026:1013] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1013) CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-104935 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-104935) - Name: Ivanti...
-
View post
๐จ [CISA-2026:1014] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1014) CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-0322 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-0322) - Name: Palo Alto...
-
View post
๐จ [CISA-2026:1015] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1015) CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-21589 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-21589) - Name: Atlassia...
-
View post
๐ก๏ธ secdb-cli 0.7.0 is out. It&#39;s the open source command-line client for ZEN SecDB: CVE lookup, SSVC, and auditing of packages, SBOMs, dependency manifests, Linux hosts and Docker images. What&#39;s new: - secdb search: full-text search across CVEs, CWEs, security advisories, NASL plugins and ExploitDB entries. Filter by record type and by date, combine terms with OR, exclude them, search exact phrases. CVEs in the CISA KEV catalog are marked, and every result links to its record....
-
View post
๐จ PwnEscape (CVE-2026-99999) has been identified as a notable vulnerability. In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This was discovered and reported by Paulos, and has been reporoduced by others independently since. We really shouldn&#39;t allow such packets i...
-
View post
๐จ [CISA-2026:1016] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1016) CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2025-61624 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-61624) - Name: Fortinet...
-
View post
๐ CVE Published in last 7 days (2026-10-12 - 2026-10-12) See more at https://secdb.nttzen.cloud/dashboard Total CVEs: Severity: - Critical: 389 - High: 2415 - Medium: 1801 - Low: 195 - None: 228 Status: - : 39 - Analyzed: 663 - Awaiting Analysis: 1828 - Deferred: 1843 - Modified: 1 - Received: 194 - Rejected: 31 - Undergoing Analysis: 429 CISA KEVs: - CISA-2026:1013 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1013) - CISA-2026:1014 (https://secdb.nttzen.cloud/security-adv...
-
View post
๐จ [CISA-2026:1001] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001) CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-104286 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-104286) - Name: Fortin...
-
View post
๐จ [CISA-2026:1002] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1002) CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-102489 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-102489) - Name: Zammad...
-
View post
๐จ [CISA-2026:1004] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1004) CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-88779 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-88779) - Name: Citrix N...
-
View post
๐ CVE Published in last 7 days (2026-09-28 - 2026-09-28) See more at https://secdb.nttzen.cloud/dashboard Total CVEs: Severity: - Critical: 264 - High: 1061 - Medium: 941 - Low: 181 - None: 99 Status: - : 37 - Analyzed: 207 - Awaiting Analysis: 736 - Deferred: 1237 - Received: 185 - Rejected: 12 - Undergoing Analysis: 132 CISA KEVs: - CISA-2026:0929 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0929) - CISA-2026:0930 (https://secdb.nttzen.cloud/security-advisory/detail/CISA...
-
View post
๐ก๏ธ secdb-cli v0.6.0 is out. ๐ --notify sends the audit summary to Slack, Teams or a webhook ๐๏ธ CI context (project, branch, commit, run link) in the report ๐ LSP options configurable from the IDE/editor Parser fixes: Yarn berry lockfiles read as empty, fixable vulns hidden by an unrelated package in the same advisory, and --fail-on silently ignored with SARIF/CSV. Available for Linux, Windows and macOS - open source, Apache-2.0 ๐ https://github.com/giterlizzi/secdb-cli #DevSecOps #DevOps #Cybe...
-
View post
๐จ [CISA-2026:1008] CISA Adds 5 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1008) CISA has added 5 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2015-3306 (https://secdb.nttzen.cloud/cve/detail/CVE-2015-3306) - Name: ProFTPD Im...
-
View post
๐จ [CISA-2026:0908] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908) CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-75650 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-75650) - Name: Adobe Co...
-
View post
๐จ [CISA-2026:0909] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0909) CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2025-25249 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-25249) - Name: Fortinet...
-
View post
๐จ [CISA-2026:0910] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0910) CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-67277 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-67277) - Name: MikroTik...
-
View post
๐จ [CISA-2026:0911] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0911) CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-42016 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-42016) - Name: JFrog Ar...
-
View post
๐ CVE Published in last 7 days (2026-09-07 - 2026-09-07) See more at https://secdb.nttzen.cloud/dashboard Total CVEs: Severity: - Critical: 346 - High: 1713 - Medium: 1297 - Low: 177 - None: 301 Status: - : 75 - Analyzed: 817 - Awaiting Analysis: 956 - Deferred: 771 - Modified: 23 - Received: 764 - Rejected: 23 - Undergoing Analysis: 405 CISA KEVs: - CISA-2026:0908 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0908) - CISA-2026:0909 (https://secdb.nttzen.cloud/security-advi...
-
View post
๐จ [CISA-2026:0914] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0914) CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-76461 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-76461) - Name: Cisco Se...
-
View post
๐จ ZcopyReaper (CVE-2026-43502) has been identified as a notable vulnerability. In the Linux kernel, the following vulnerability has been resolved: net/rds: handle zerocopy send cleanup before the message is queued A zerocopy send can fail after user pages have been pinned but before the message is attached to the sending socket. The purge path currently infers zerocopy state from rm-&gt;m_rs, so an unqueued message can be cleaned up as if it owned normal payload pages. However, zerocopy...
-
View post
๐จ [CISA-2026:0916] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0916) CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-58704 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-58704) - Name: Google P...
-
View post
secdb-cli 0.5.0 ๐ Point it at a repo โ discovers every manifest โ known vulns as inline diagnostics + SARIF with file &amp; line. Plain LSP over stdio: Neovim, Kate, Zed, any LSP editor. https://github.com/giterlizzi/secdb-cli/releases/tag/v0.5.0 #DevSecOps #golang #AppSec #OpenSource #NTTDATA #ZEN #SecDB
-
View post
๐จ [CISA-2026:0918] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0918) CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2025-39964 (https://secdb.nttzen.cloud/cve/detail/CVE-2025-39964) - Name: Linux Ke...
-
View post
๐ CVE Published in last 7 days (2026-09-14 - 2026-09-14) See more at https://secdb.nttzen.cloud/dashboard Total CVEs: Severity: - Critical: 478 - High: 2067 - Medium: 1314 - Low: 307 - None: 680 Status: - : 35 - Analyzed: 339 - Awaiting Analysis: 1126 - Deferred: 1117 - Modified: 32 - Received: 1943 - Rejected: 28 - Undergoing Analysis: 226 CISA KEVs: - CISA-2026:0914 (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0914) - CISA-2026:0916 (https://secdb.nttzen.cloud/security-a...
-
View post
๐จ [CISA-2026:0921] CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0921) CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-7273 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-7273) - Name: Zyxel GS19...
-
View post
๐จ [CISA-2026:0922] CISA Adds 4 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0922) CISA has added 4 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-85102 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-85102) - Name: Check Po...
-
View post
๐จ [CISA-2026:0924] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0924) CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-5430 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-5430) - Name: WSO2 Multi...
-
View post
๐จ [CISA-2026:0925] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0925) CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-65660 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-65660) - Name: Microsof...
-
View post
๐จ [CISA-2026:0927] CISA Adds 2 Known Exploited Vulnerabilities to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0927) CISA has added 2 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. โ ๏ธ CVE-2026-88771 (https://secdb.nttzen.cloud/cve/detail/CVE-2026-88771) - Name: Citrix N...