MATLOCK.CA
38Articles
6Categories
2026-02-12Date
🚨
CISA Adds Four Known Exploited Vulnerabilities to CatalogCISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2024-43468 Microsoft Configuration Manager SQL Injection Vulnerability CVE-2025-15556 Notepad++ Download of Code Without Integrity Check Vu…
KEVCISA.GOV — Thu, 12 Feb 26 1
🐛
CVE-2026-20841 Windows Notepad App Remote Code Execution Vulnerability
MSRC.MICROSOFT.COM — 12 Feb 2026
🐛
ZDI-26-094: Schneider Electric EcoStruxure Power Build SSD File Parsing Use-After-Free Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-093: Schneider Electric EcoStruxure Power Build SSD File Parsing Use-After-Free Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-092: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-091: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-090: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-089: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-088: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-087: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-086: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-085: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-084: Schneider Electric EcoStruxure Power Build SSD File Parsing Memory Corruption Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-083: Microsoft Windows searchConnector-ms NTLM Response Information Disclosure Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-082: Microsoft Exchange InterceptorSmtpAgent Reliance on Untrusted Inputs Security Feature Bypass Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-081: Microsoft Windows win32kfull Use-After-Free Local Privilege Escalation Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-080: Ivanti Endpoint Manager AuthHelper Authentication Bypass Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-079: Ivanti Endpoint Manager ROI SQL Injection Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-078: Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-077: GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-076: GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-075: GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-074: GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-073: Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-072: Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
ZDI-26-071: Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability
ZERODAYINITIATIVE.COM — 12 Feb 2026
🐛
VU#504749: PyMuPDF path traversal and arbitrary file write vulnerabilities
KB.CERT.ORG — 2026-02-12
⚠️
Polish hacker charged seven years after massive Morele.net data breach
BITDEFENDER.COM — 12 Feb 2026
⚠️
GTIG AI Threat Tracker: Distillation, Experimentation, and (Continued) Integration of AI for Adversarial Use
KEVCLOUD.GOOGLE.COM — 12 Feb 2026
🔥
Urgent warnings from UK and US cyber agencies after Polish energy grid attack
FORTRA.COM — 12 Feb 2026
🔥
Naming and shaming: How ransomware groups tighten the screws on victims
WELIVESECURITY.COM — 12 Feb 2026
🔥
State of Security Report | Recorded Future
RECORDEDFUTURE.COM — 12 Feb 2026
🕵️
Detecting and mitigating common agent misconfigurations
MICROSOFT.COM — 12 Feb 2026
🕵️
Your complete guide to Microsoft experiences at RSAC™ 2026 Conference
MICROSOFT.COM — 12 Feb 2026
🕵️
Smashing Security podcast #454: AI was not plotting humanity’s demise. Humans were
GRAHAMCLULEY.COM — 12 Feb 2026
🕵️
When Security Becomes an Afterthought
PALOALTONETWORKS.COM — 12 Feb 2026
🕵️
Fragmentation Defined 2025's Threat Landscape. Here's What It Means for 2026
RECORDEDFUTURE.COM — 12 Feb 2026
🌐
I bought, I saw, I attended: a quick guide to staying scam-free at the Olympics | Kaspersky official blog
KASPERSKY.COM — 12 Feb 2026