Research and
insights
Analysis from leaders and experts across TrendAI™ and the TrendAI™ ZDI community
Read our research
Events and
recaps
Pwn2Own™ contests and other TrendAI™ ZDI initiatives connecting researchers, vendors, and defenders
Read moreLatest advisories
The following are some of the latest publicly disclosed vulnerabilities identified by TrendAI™ ZDI researchers. While the affected vendors develop patches, TrendAI™ customers are already protected through proactive security filters.
| ZDI ID | ZDI CAN | Vendor / Product | CVE | CVSS | Published | Updated | ||
|---|---|---|---|---|---|---|---|---|
ZDI-CAN-29196 |
Dify |
5.4 |
2026-07-23 |
2026-07-23 |
Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability |
|||
ZDI-CAN-29308 |
Docker |
8.8 |
2026-07-23 |
2026-07-23 |
Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability |
|||
ZDI-CAN-28831 |
AzeoTech |
CVE-2026-12921 |
7.8 |
2026-07-23 |
2026-07-23 |
AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability |
||
ZDI-CAN-28876 |
AzeoTech |
CVE-2026-12390 |
7.8 |
2026-07-23 |
2026-07-23 |
AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability |
||
ZDI-CAN-28703 |
Bitdefender |
CVE-2026-6851 |
7.3 |
2026-07-23 |
2026-07-23 |
Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability |
The advantage of knowing, and
acting, first
TrendAI™ ZDI is the starting point for many of the safeguards TrendAI™ customers rely on. TrendAI™ ZDI's research becomes proactive filters that narrow the window of exposure before attackers can exploit a flaw. Strengthened by more than 20 years of vendor partnerships, organizations gain earlier, faster, and broader security coverage than with any other provider.
- Backed by more than 450 dedicated TrendAI™ researchers across 14 global threat centers and an external community of over 19,000 independent vulnerability researchers
- Industry-leading visibility with 2.5x more disclosures than the next program
- Filters deployed across IPS, endpoint, and cloud workload defenses
- Direct mapping between TrendAI™ ZDI advisories and TrendAI Vision One™
Early visibility that makes
AI security smarter
AI is only as strong as the intelligence behind it. TrendAI™ ZDI gives strategic, actionable insights into vulnerabilities before they're made public: how they behave, how they break, and how attackers could exploit them. This foundation enables TrendAI Vision One™ to focus on what needs attention first long before risk turns into compromise, while continuously learning to adapt to emerging threats and real-world attacks.
- Enhanced risk scoring that reflects attacker techniques
- AI-driven prioritization informed by validated vulnerabilities
- Data lineage that keeps AI-powered decisions explainable, auditable, and trustworthy for security teams