01
29 July 2026 · 14 min read
CVE-2026-10702: a page visit enabled Firefox RCE
Public CVE-2026-10702 analysis explains a SpiderMonkey JIT flaw and Firefox-to-kernel chain. Review scope, patches and defensive priorities.
Topic · 67 articles
Vulnerabilities and CVEs
Daily vulnerability and CVE analysis explaining what happened, who is affected, how to assess exposure and which fixes or mitigations come first.
FIELD NOTES
TOPIC INDEX
Latest research
02
29 July 2026 · 13 min read
CVE-2026-60004: critical Gitea RCE through a Git hook
Gitea before 1.27.1 let repository writers create a live Git hook and execute server commands. Review preconditions, impact and remediation.
03
29 July 2026 · 14 min read
VMware patches a VM escape and two critical vCenter flaws
VMSA-2026-0006 fixes VM escape CVE-2026-47876 and two critical vCenter flaws. Review versions, priorities, detection and rollout.
04
28 July 2026 · 12 min read
Fastjson CVE-2026-16723: RCE exploited in the wild
A critical Fastjson 1.x flaw enables remote code execution even with AutoType disabled. Learn the attack conditions, SafeMode mitigation and response plan.
05
27 July 2026 · 17 min read
GitLab: RCE via notebooks and a patch with no CVE
A public exploit runs commands as git on unpatched GitLab 18.11.3 servers. The fix shipped as a bugfix, with no CVE. Analysis and lessons.
06
27 July 2026 · 17 min read
Node.js July 2026 security release: patching guide
Node.js announced HIGH-severity fixes for the 26, 24 and 22 release lines. Here is what is confirmed, what remains undisclosed and how to patch safely.
07
26 July 2026 · 16 min read
FortiSandbox: CVE-2026-39808 and 25089 under active attack
Two CVSS 9.1 flaws in FortiSandbox let an unauthenticated attacker run OS commands. Both are in CISA KEV. Analysis, detection and remediation.
08
26 July 2026 · 16 min read
A record Patch Tuesday: 570 flaws and 3 zero-days
Microsoft patched a record 570 vulnerabilities and three zero-days in July 2026. How to triage that many fixes and what you must not defer.
09
25 July 2026 · 15 min read
Certighost (CVE-2026-54121): domain takeover via AD CS
The public Certighost exploit lets an ordinary domain user impersonate a domain controller through AD CS and run DCSync. Analysis and detection.
10
24 July 2026 · 7 min read
Adobe Acrobat: extension flaw could read WhatsApp Web
CVE-2026-48294 (HermeticReader) in Adobe's Acrobat Chrome extension let any site read WhatsApp Web data across origins. Check that you are on the patched build.
11
24 July 2026 · 7 min read
Ubuntu snap-confine (CVE-2026-8933): local root
CVE-2026-8933 is a race condition in snap-confine that gives a local user root on default Ubuntu Desktop 24.04, 25.10 and 26.04. How to patch it, and why.
12
23 July 2026 · 7 min read
Check Point SmartConsole: CVE-2026-16232 0-day in attacks
CVE-2026-16232 (CVSS 9.1) lets an unauthenticated attacker take over SmartConsole with admin rights. It is in CISA KEV and actively exploited — patch now.
13
23 July 2026 · 8 min read
RefluXFS (CVE-2026-64600): local root on Linux
CVE-2026-64600 (RefluXFS) gives a local user root through an XFS race condition. See which distributions to patch and why the reboot matters.
14
21 July 2026 · 16 min read
ServiceNow CVE-2026-6875: Pre-Auth RCE Explained
CVE-2026-6875 enables pre-auth RCE in ServiceNow AI Platform. Review exploitation evidence, patches, MID Server exposure and response steps.
15
21 July 2026 · 16 min read
Zimbra 10.1.20 Fixes Critical Mail and SNMP Flaws
Zimbra 10.1.20 fixes command injection, four XSS paths, forwarding bypass, EWS, delegation and SSRF. Follow a safe upgrade and hunt plan.
16
20 July 2026 · 19 min read
NGINX CVE-2026-42533: Critical map Regex Flaw
CVE-2026-42533 is a configuration-dependent heap overflow in NGINX. Check affected versions, exploit conditions, detection and a safe update plan.
17
20 July 2026 · 18 min read
OpenSSL HollowByte: 11 Bytes Can Exhaust Server RAM
HollowByte shows how an 11-byte TLS record can exhaust memory in OpenSSL services. Check affected releases, exposure and a safe update plan.
18
18 July 2026 · 14 min read
SharePoint CVE-2026-58644: Active RCE Attacks
CVE-2026-58644 in SharePoint is actively exploited. Review affected builds, KEV priority, forensic triage, patching and remediation evidence.
19
18 July 2026 · 14 min read
WordPress CVE-2026-63030: Critical Core RCE
WordPress 7.0.2 fixes a critical Core RCE chain. Review affected versions, safe rollout, compromise detection and post-update validation steps.
20
17 July 2026 · 13 min read
CVE-2026-63087: Critical Grafana OnCall Flaw
Grafana OnCall has critical flaw CVE-2026-63087. Understand exposure, potential impact, detection hypotheses and a safe risk-reduction plan.
21
16 July 2026 · 9 min read
Oracle E-Business Suite under active attack: act now on CVE-2026-46817
CISA confirms active exploitation of CVE-2026-46817 in Oracle EBS. Check affected 12.2.3–12.2.15 systems, response priorities and post-patch actions.
22
15 July 2026 · 9 min read
Microsoft July 2026: exploited SharePoint and AD FS flaws
CVE-2026-56164 and CVE-2026-56155 are being exploited. Learn how to establish SharePoint and AD FS exposure, patch safely and collect defensible validation evidence.
23
15 July 2026 · 10 min read
SonicWall SMA 1000 under active attack: CVE-2026-15409 and CVE-2026-15410
SonicWall confirms active exploitation of SSRF and RCE flaws in SMA 1000. Check affected builds, hunt vendor IOCs and decide whether to patch or rebuild.
24
14 July 2026 · 8 min read
Firefox 152.0.6 fixes two critical flaws with public exploit code
Mozilla has fixed CVE-2026-15718 and CVE-2026-15719. Public exploit code is not confirmed exploitation, but it sharply reduces the time available to update.
25
14 July 2026 · 10 min read
PTC expands Windchill and FlexPLM patch rollout for CVE-2026-12569
PTC released critical fixes for additional Windchill and FlexPLM versions on 14 July. Review affected releases, web-shell IOCs and a safe PLM patching plan.
26
14 July 2026 · 9 min read
SAP July 2026 security patches: how to triage CVE-2026-44747
SAP’s July update fixes critical flaws in NetWeaver, Approuter and Commerce Cloud. Understand the 9.9 risk, patch order and the evidence needed to close remediation.
27
10 July 2026 · 9 min read
CVE-2026-0300: critical PAN-OS portal root RCE flaw
CVE-2026-0300 enables unauthenticated root RCE in a specific PAN-OS Authentication Portal configuration. Check exposure, patches and mitigations.
28
10 July 2026 · 8 min read
CVE-2026-10520: critical Ivanti Sentry root RCE flaw
CVE-2026-10520 is an actively exploited CVSS 10 unauthenticated root RCE in Ivanti Sentry. Check affected versions, patches and response steps.
29
10 July 2026 · 8 min read
CVE-2026-11645: actively exploited Chrome V8 zero-day
CVE-2026-11645 in Chrome V8 is actively exploited. Check fixed Chrome and Edge versions and the response steps for users and administrators.
30
10 July 2026 · 7 min read
CVE-2026-28318: exploited SolarWinds Serv-U DoS flaw
CVE-2026-28318 lets an unauthenticated attacker crash SolarWinds Serv-U with a crafted POST request. Review affected versions, Hotfix 1 and mitigations.
31
10 July 2026 · 8 min read
CVE-2026-41089: critical Windows Netlogon RCE flaw
CVE-2026-41089 is an actively exploited unauthenticated Netlogon RCE on Windows domain controllers. Review affected systems and response steps.
32
10 July 2026 · 8 min read
CVE-2026-42897: exploited XSS flaw in Exchange OWA
CVE-2026-42897 executes JavaScript after a crafted email is opened in on-premises OWA with user interaction. Check scope, fixes and mitigations.
33
8 July 2026 · 8 min read
Adobe ColdFusion CVE-2026-48282: critical 0-day
CVE-2026-48282 in Adobe ColdFusion (CVSS 10.0) was exploited within hours of a public write-up. See the patched versions and how to reduce RDS risk.
34
30 June 2026 · 7 min read
Critical CVEs of 2026: when exploits beat the patch
2026 confirms a worrying trend: vulnerabilities are exploited faster than vendors ship patches. What it means for defence and how to keep up.
35
18 June 2026 · 7 min read
New critical vulnerabilities — how not to drown in CVEs
Dozens of new vulnerabilities are published every day. We show how to tell the ones that actually affect you from the noise.
36
17 May 2026 · 12 min read
Vulnerability management: how to build the process
The scanner is the easy part. How to build the full process: inventory, risk-based prioritisation, remediation SLAs and metrics that matter.
37
29 April 2026 · 18 min read
CopyFail CVE-2026-31431: Linux root, AF_ALG and a safe PoC
Technical CopyFail analysis: CVE-2026-31431, algif_aead, splice, page-cache overwrite, affected Linux systems, safe PoC, detection and remediation.
38
20 April 2026 · 9 min read
CVE-2026-35616: critical Fortinet FortiClient EMS flaw
CVE-2026-35616 in FortiClient EMS is actively exploited and listed in CISA KEV. Check affected releases, the hotfix and investigation steps.
39
16 April 2026 · 9 min read
CVE-2026-33827: remote RCE in Windows TCP/IP
CVE-2026-33827 is a network race condition in Windows TCP/IP. Review confirmed scope, attack conditions and a defensible patching plan.
40
15 April 2026 · 9 min read
CVE-2026-32201: actively exploited SharePoint flaw
CVE-2026-32201 scores 6.5 but appears in CISA KEV. Check affected SharePoint Server editions and follow a defensible response plan.
41
14 April 2026 · 15 min read
BlueHammer CVE-2026-33825: when Microsoft Defender leads to SYSTEM
Technical BlueHammer analysis: Defender local privilege escalation, safe PoC boundaries, KEV status, platform versions, hunting and remediation.
42
1 April 2026 · 14 min read
CVE-2026-20160: root RCE in Cisco Smart Software Manager On-Prem
Critical CVSS 9.8 Cisco SSM On-Prem flaw: exposed internal service, unauthenticated commands as root, affected versions, detection and upgrade plan.
43
31 March 2026 · 10 min read
Two Chrome zero-days in March 2026: CVE-2026-3909 and CVE-2026-5281
Google confirmed active exploitation of an out-of-bounds write in Skia and a use-after-free in Dawn. Fixed releases and an enterprise response runbook.
44
18 March 2026 · 11 min read
Jenkins CVE-2026-33001: artifact archives could lead to RCE
Jenkins handled tar symlinks unsafely. We explain the code-execution path, exploit conditions, affected releases and the 2.555/LTS 2.541.3 fix.
45
12 March 2026 · 12 min read
Rocket.Chat CVE-2026-28514: a missing await made every password valid
A critical ddp-streamer authentication bypass came from a missing await. Combined with CVE-2026-30833, it enabled account takeover without a full username.
46
12 March 2026 · 16 min read
Veeam Backup & Replication 13: six CVEs and two 9.9 RCE paths
Technical guide to CVE-2026-21669–21709 in Veeam VBR 13: domain-user RCE, Backup Viewer, SSH credentials, HA, patching and investigation.
47
10 March 2026 · 9 min read
FortiWeb CVE-2026-24017: login rate-limit bypass
FortiWeb allowed unauthenticated requests to bypass login rate limiting. Complete 8.0/7.6/7.4/7.2/7.0 fixed-version matrix and defence plan.
48
25 February 2026 · 17 min read
Cisco SD-WAN under attack: CVE-2026-20127 and the Manager flaw cluster
Technical guide to CVSS 10 CVE-2026-20127 and Cisco SD-WAN Manager flaws: NETCONF access, auth.log evidence, segmentation and upgrades.
49
10 February 2026 · 17 min read
February 2026 Patch Tuesday: six Microsoft zero-days under attack
CVE-2026-21510, 21513, 21514, 21519, 21525 and 21533 explained: attack-chain roles, deployment priorities, hunting and compensating controls.
50
2 February 2026 · 12 min read
vLLM CVE-2026-22778: a video could trigger remote code execution
Critical vLLM RCE combined an address leak with a JPEG2000 flaw in OpenCV/FFmpeg. Affected versions, exploit chain and safe mitigation.
51
30 January 2026 · 9 min read
CVE-2026-1281 and 1340: active attacks on Ivanti EPMM
CVE-2026-1281 and CVE-2026-1340 enable unauthenticated RCE in Ivanti EPMM. Review advisory facts, KEV status and response steps.
52
27 January 2026 · 15 min read
CVE-2026-24858: FortiCloud SSO authentication bypass explained
Technical analysis of critical FortiCloud SSO CVE-2026-24858: attack conditions, affected Fortinet products, persistence accounts, logs and response.
53
8 January 2026 · 16 min read
n8n CVE-2026-21858 Ni8mare: unauthenticated file access explained
Technical analysis of CVSS 10 n8n Ni8mare: vulnerable form workflow, local file read, possible chains, detection, remediation and automation hardening.
54
3 December 2025 · 22 min read
React2Shell CVE-2025-55182: critical RSC RCE
CVE-2025-55182 React2Shell is a CVSS 10.0 unauthenticated RCE. Affected React and Next.js versions, public PoC, attacks and patches.
55
14 November 2025 · 20 min read
FortiWeb CVE-2025-64446: critical authentication bypass
CVE-2025-64446 (CVSS 9.4) lets unauthenticated attackers run FortiWeb admin commands. Public PoC, KEV, versions, hunting and fixes.
56
24 October 2025 · 20 min read
WSUS CVE-2025-59287: critical unauthenticated RCE
CVE-2025-59287 (CVSS 9.8) enables RCE in Windows Server Update Services. OOB patches, KEV, defensive PoC, detection and remediation.
57
4 October 2025 · 21 min read
Oracle E-Business Suite CVE-2025-61882: critical RCE
CVE-2025-61882 (CVSS 9.8) enables unauthenticated code execution in Oracle EBS 12.2.3–12.2.14. PoC, IOCs, patches and threat hunting.
58
18 September 2025 · 22 min read
GoAnywhere MFT CVE-2025-10035: critical RCE and Medusa
CVE-2025-10035 (CVSS 10.0) in GoAnywhere MFT was exploited as a zero-day. PoC analysis, Medusa ransomware, IOCs and vendor fixes.
59
22 July 2025 · 10 min read
ToolShell: the mass SharePoint 0-day attack (2025)
In summer 2025, CVE-2025-53770 in SharePoint Server let attackers take over servers with no login. We analyse the ToolShell chain and its lessons.
60
30 June 2025 · 21 min read
Wing FTP Server CVE-2025-47812: root or SYSTEM RCE
CVE-2025-47812 (CVSS 10.0) enables RCE in Wing FTP Server before 7.4.4, including via anonymous access. PoC, KEV, detection and fixes.
61
25 June 2025 · 9 min read
CitrixBleed 2 (CVE-2025-5777): a gateway memory leak
CVE-2025-5777 let attackers pull session tokens from Citrix NetScaler gateways, bypassing MFA. We analyse CitrixBleed 2 and the defence.
62
1 June 2025 · 21 min read
Roundcube CVE-2025-49113: critical post-auth RCE
CVE-2025-49113 (CVSS 9.9) enables code execution in Roundcube through PHP deserialization. Versions, public PoC, detection and updates.
63
29 April 2025 · 9 min read
SAP NetWeaver (CVE-2025-31324): a login-free web shell
CVE-2025-31324 in SAP NetWeaver let attackers upload a web shell with no login and take over the ERP. We analyse attacks on a company's heart.
64
16 April 2025 · 20 min read
CVE-2025-32433: critical Erlang/OTP SSH server RCE
CVE-2025-32433 is a CVSS 10.0 unauthenticated RCE in Erlang/OTP SSH. Affected versions, public PoC, detection and vendor fixes.
65
8 April 2025 · 9 min read
Windows CLFS (CVE-2025-29824): an escalation 0-day
CVE-2025-29824 is another 0-day in the Windows CLFS driver, used by ransomware to seize SYSTEM. Why this class of flaw returns and how to limit the risk.
66
7 April 2025 · 20 min read
Langflow CVE-2025-3248: critical unauthenticated RCE
CVE-2025-3248 (CVSS 9.8) enables unauthenticated code execution in Langflow before 1.3.0. Public PoC, KEV status, detection and fixes.
67
24 March 2025 · 20 min read
CVE-2025-1974 IngressNightmare: critical ingress-nginx RCE
CVE-2025-1974 (CVSS 9.8) enables ingress-nginx RCE and possible Kubernetes takeover. Affected versions, public PoC, detection and fixes.
BR / NEXT STEP
Want to prepare your team for these threats?
We turn current threats into role-based training, safe exercises and a clear reporting path. The free Academy remains available for self-directed learning.
NDA · clear scope · direct communication