https://knutmichael.com/radar/2026-11-04-zdi-26-874-0day-ashlar-vellum-cobalt-xe-file-parsing-use-after-free-remote-code-execution-vulnerability Knut Michael Haugland en 2026-11-04T00:00:00+01:00 ZDI-26-874: (0Day) Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-11-04-zdi-26-873-0day-ashlar-vellum-cobalt-ar-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-11-04T00:00:00+01:00 ZDI-26-873: (0Day) Ashlar-Vellum Cobalt AR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-11-04-zdi-26-872-0day-ashlar-vellum-cobalt-xe-file-parsing-use-after-free-remote-code-execution-vulnerability Knut Michael Haugland en 2026-11-04T00:00:00+01:00 ZDI-26-872: (0Day) Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-11-04-zdi-26-871-0day-ashlar-vellum-cobalt-li-file-parsing-heap-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-11-04T00:00:00+01:00 ZDI-26-871: (0Day) Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-11-04-zdi-26-870-0day-ashlar-vellum-cobalt-xe-file-parsing-stack-based-buffer-overflow-remote-code-execution-vulnerability Knut Michael Haugland en 2026-11-04T00:00:00+01:00 ZDI-26-870: (0Day) Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability https://knutmichael.com/radar/2026-11-04-zdi-26-869-mailenable-save-directory-traversal-arbitrary-file-creation-vulnerability Knut Michael Haugland en 2026-11-04T00:00:00+01:00 ZDI-26-869: MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability https://knutmichael.com/radar/2026-11-03-subnet-solutions-powersystem-center Knut Michael Haugland en 2026-11-03T12:00:00+01:00 Subnet Solutions PowerSYSTEM Center https://knutmichael.com/radar/2026-11-03-cisa-adds-one-known-exploited-vulnerability-to-catalog Knut Michael Haugland en 2026-11-03T12:00:00+01:00 CISA KEV — WordPress Core Time-of-check Time-of-use (TOCTOU) (CVE-2026-119977)