NewsThe Hacker News
Zoom Patches Critical Windows Flaw That Could Enable Account Takeover
Affected vendors and products
More on Takeover
Other advisories
- Not ratedosv:CVE-2026-61826Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery
- Not ratedosv:CVE-2026-104615Cluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace
- Not ratedosv:CVE-2026-61728SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover
- Not ratedosv:CVE-2026-119564Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs
- Not ratedosv:CVE-2026-119425OPNsense 26.1.6 through 26.7.7 Captive Portal Session Takeover via Forged ARP
- Not ratedosv:CVE-2026-61673WeGIA: Stored DOM XSS in listar_despachos.php Allows Account Takeover
- Not ratedosv:CVE-2026-119129ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.19.5 Account Takeover via Device Authorization Approval
- Not ratedosv:CVE-2026-119128ZITADEL 4.0.0 before 4.19.5 Login V2 Account Takeover via Forgeable verificationCheck Cookie
Other news entries
- Undead Software Projects Continue to Raise Security RisksNewsDark Reading
- AI-Generated Fake Login Pages Are Making Account Takeovers EasierNewsThe Hacker News
- Dead Popcorn Time Updater Put Millions of Computers at Risk of TakeoverNewsSecurityWeek
- When the attacker becomes the user: Rethinking account takeoverNewsThe Register — Security
- Major U.S. banks detect unauthorized third-party AI agents inside customer accountsBreachpwn.watch
- ConnectWise turns off its SaaS-y backup, security, and management services to probe security SNAFUNewsThe Register — Security
- F5, Juniper Networks Patch Critical VulnerabilitiesNewsSecurityWeek
- ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover FlawNewsSecurityWeek
Source: https://thehackernews.com/2026/07/zoom-patches-critical-windows-flaw-that.html
ID