Topic · 19 articles

Critical Vulnerabilities

Verified critical CVE analysis covering root cause, real exposure, telemetry, vendor fixes and safe retesting without running exploits in production.

PUBLISHING STANDARD TECHNICAL RESEARCH AND ANALYSIS

01
Author

Named technical practitioner
02
Basis

Date and primary sources
03
Purpose

Concrete defensive action

FIELD NOTES

TOPIC INDEX

Latest research

19 ARTICLES

18 July 2026 · 14 min read

SharePoint CVE-2026-58644: Active RCE Attacks

CVE-2026-58644 in SharePoint is actively exploited. Review affected builds, KEV priority, forensic triage, patching and remediation evidence.

18 July 2026 · 14 min read

WordPress CVE-2026-63030: Critical Core RCE

WordPress 7.0.2 fixes a critical Core RCE chain. Review affected versions, safe rollout, compromise detection and post-update validation steps.

17 July 2026 · 13 min read

CVE-2026-63087: Critical Grafana OnCall Flaw

Grafana OnCall has critical flaw CVE-2026-63087. Understand exposure, potential impact, detection hypotheses and a safe risk-reduction plan.

16 July 2026 · 9 min read

Oracle E-Business Suite under active attack: act now on CVE-2026-46817

CISA confirms active exploitation of CVE-2026-46817 in Oracle EBS. Check affected 12.2.3–12.2.15 systems, response priorities and post-patch actions.

15 July 2026 · 9 min read

Microsoft July 2026: exploited SharePoint and AD FS flaws

CVE-2026-56164 and CVE-2026-56155 are being exploited. Learn how to establish SharePoint and AD FS exposure, patch safely and collect defensible validation evidence.

15 July 2026 · 10 min read

SonicWall SMA 1000 under active attack: CVE-2026-15409 and CVE-2026-15410

SonicWall confirms active exploitation of SSRF and RCE flaws in SMA 1000. Check affected builds, hunt vendor IOCs and decide whether to patch or rebuild.

14 July 2026 · 8 min read

Firefox 152.0.6 fixes two critical flaws with public exploit code

Mozilla has fixed CVE-2026-15718 and CVE-2026-15719. Public exploit code is not confirmed exploitation, but it sharply reduces the time available to update.

14 July 2026 · 10 min read

PTC expands Windchill and FlexPLM patch rollout for CVE-2026-12569

PTC released critical fixes for additional Windchill and FlexPLM versions on 14 July. Review affected releases, web-shell IOCs and a safe PLM patching plan.

14 July 2026 · 9 min read

SAP July 2026 security patches: how to triage CVE-2026-44747

SAP’s July update fixes critical flaws in NetWeaver, Approuter and Commerce Cloud. Understand the 9.9 risk, patch order and the evidence needed to close remediation.

3 December 2025 · 22 min read

React2Shell CVE-2025-55182: critical RSC RCE

CVE-2025-55182 React2Shell is a CVSS 10.0 unauthenticated RCE. Affected React and Next.js versions, public PoC, attacks and patches.

14 November 2025 · 20 min read

FortiWeb CVE-2025-64446: critical authentication bypass

CVE-2025-64446 (CVSS 9.4) lets unauthenticated attackers run FortiWeb admin commands. Public PoC, KEV, versions, hunting and fixes.

24 October 2025 · 20 min read

WSUS CVE-2025-59287: critical unauthenticated RCE

CVE-2025-59287 (CVSS 9.8) enables RCE in Windows Server Update Services. OOB patches, KEV, defensive PoC, detection and remediation.

4 October 2025 · 21 min read

Oracle E-Business Suite CVE-2025-61882: critical RCE

CVE-2025-61882 (CVSS 9.8) enables unauthenticated code execution in Oracle EBS 12.2.3–12.2.14. PoC, IOCs, patches and threat hunting.

18 September 2025 · 22 min read

GoAnywhere MFT CVE-2025-10035: critical RCE and Medusa

CVE-2025-10035 (CVSS 10.0) in GoAnywhere MFT was exploited as a zero-day. PoC analysis, Medusa ransomware, IOCs and vendor fixes.

30 June 2025 · 21 min read

Wing FTP Server CVE-2025-47812: root or SYSTEM RCE

CVE-2025-47812 (CVSS 10.0) enables RCE in Wing FTP Server before 7.4.4, including via anonymous access. PoC, KEV, detection and fixes.

1 June 2025 · 21 min read

Roundcube CVE-2025-49113: critical post-auth RCE

CVE-2025-49113 (CVSS 9.9) enables code execution in Roundcube through PHP deserialization. Versions, public PoC, detection and updates.

16 April 2025 · 20 min read

CVE-2025-32433: critical Erlang/OTP SSH server RCE

CVE-2025-32433 is a CVSS 10.0 unauthenticated RCE in Erlang/OTP SSH. Affected versions, public PoC, detection and vendor fixes.

7 April 2025 · 20 min read

Langflow CVE-2025-3248: critical unauthenticated RCE

CVE-2025-3248 (CVSS 9.8) enables unauthenticated code execution in Langflow before 1.3.0. Public PoC, KEV status, detection and fixes.

24 March 2025 · 20 min read

CVE-2025-1974 IngressNightmare: critical ingress-nginx RCE

CVE-2025-1974 (CVSS 9.8) enables ingress-nginx RCE and possible Kubernetes takeover. Affected versions, public PoC, detection and fixes.

BR / NEXT STEP

Prefer a specialist to check it for you?

Book a free consultation. We'll talk about your infrastructure and real priorities.

Book a consultation See services

NDA · clear scope · direct communication