Zero Day Initiative

Everything SecOps Signal has reported about Zero Day Initiative: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

NoMachine Web Service Heap Overflow Enables Unauthenticated RCE; Patch to 10.1.7

A critical heap-based buffer overflow in NoMachine’s web service enables remote attackers to run code without credentials, as confirmed by the Zero Day Initiative advisory.

Oct 23, 2026

Vulnerabilities

X.Org Server Use-After-Free Bug in Window Handling Leaks Data, Patch Available

A vulnerability in X.Org Server’s window handling allows local attackers to leak sensitive data, though a vendor patch is now available.

Oct 16, 2026