Skip to content
Threat Feed
Subscribe

Product

Zoom Workplace VDI Client

2 briefs RSS
high threat

Remote Code Execution Vulnerability in Zoom Clients

A critical buffer overflow vulnerability (CVE-2026-53413) in the Zoom annotator function allows for unauthenticated remote code execution on participant devices.

exploited Zoom Workplace +3 vulnerability rce zoom cve-2026-53413
1t 1c
high advisory

Splunk Enterprise and Cloud Platform CSRF Vulnerability Leading to Arbitrary SPL Execution (CVE-2026-20296)

A Cross-Site Request Forgery (CSRF) vulnerability, identified as CVE-2026-20296, in Splunk Enterprise and Splunk Cloud Platform allows an attacker to trick a user with the `list_deployment_server` capability into executing arbitrary Search Processing Language (SPL) searches as the highly privileged `splunk-system-user`, potentially leading to unauthorized access of stored credentials and indexed data due to a lack of CSRF token validation and improper input neutralization.

Splunk Enterprise < 9.4.13 +14 splunk vulnerability csrf remote-code-execution credential-access data-exfiltration web-vulnerability
4t 3c updated