Research and
insights
Analysis from leaders and experts across TrendAI™ and the TrendAI™ ZDI community
Read our research
Events and
recaps
Pwn2Own™ contests and other TrendAI™ ZDI initiatives connecting researchers, vendors, and defenders
Read moreLatest advisories
The following are some of the latest publicly disclosed vulnerabilities identified by TrendAI™ ZDI researchers. While the affected vendors develop patches, TrendAI™ customers are already protected through proactive security filters.
| ZDI ID | ZDI CAN | Vendor / Product | CVE | CVSS | Published | Updated | ||
|---|---|---|---|---|---|---|---|---|
ZDI-CAN-28486 |
QNAP |
CVE-2018-10388, CVE-2018-10389 |
7.5 |
2026-10-15 |
2026-10-15 |
QNAP TS-453E syslog log_message Format String Remote Code Execution Vulnerability |
||
ZDI-CAN-31143 |
GStreamer |
CVE-2026-111183 |
9.8 |
2026-10-15 |
2026-10-15 |
GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-30646 |
NoMachine |
CVE-2026-111185 |
7.8 |
2026-10-15 |
2026-10-15 |
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability |
||
ZDI-CAN-31213 |
NoMachine |
CVE-2026-111184 |
7.8 |
2026-10-15 |
2026-10-15 |
NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability |
||
ZDI-CAN-31871 |
Fortinet |
CVE-2026-106170 |
4.9 |
2026-10-15 |
2026-10-15 |
Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability |
The advantage of knowing, and
acting, first
TrendAI™ ZDI is the starting point for many of the safeguards TrendAI™ customers rely on. TrendAI™ ZDI's research becomes proactive filters that narrow the window of exposure before attackers can exploit a flaw. Strengthened by more than 20 years of vendor partnerships, organizations gain earlier, faster, and broader security coverage than with any other provider.
- Backed by more than 450 dedicated TrendAI™ researchers across 14 global threat centers and an external community of over 19,000 independent vulnerability researchers
- Industry-leading visibility with 2.5x more disclosures than the next program
- Filters deployed across IPS, endpoint, and cloud workload defenses
- Direct mapping between TrendAI™ ZDI advisories and TrendAI Vision One™
Early visibility that makes
AI security smarter
AI is only as strong as the intelligence behind it. TrendAI™ ZDI gives strategic, actionable insights into vulnerabilities before they're made public: how they behave, how they break, and how attackers could exploit them. This foundation enables TrendAI Vision One™ to focus on what needs attention first long before risk turns into compromise, while continuously learning to adapt to emerging threats and real-world attacks.
- Enhanced risk scoring that reflects attacker techniques
- AI-driven prioritization informed by validated vulnerabilities
- Data lineage that keeps AI-powered decisions explainable, auditable, and trustworthy for security teams