Index

ZDI-26-809: Meta FAIRChem dense_eval dft-targets Deserialization of Untrusted Data Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·27 Oct 2026 ·fetched 27 Oct 2026, 11:38 UTC Research agreed3/3

Why readMeta FAIRChem unpickles dft-targets input in dense_eval, giving code execution in the process context when a researcher opens a malicious model or dataset file.

ZDI-26-809 documents a deserialization of untrusted data flaw in FAIRChem's pickle parsing path, reachable through the dense_eval dft-targets handling. Exploitation needs user interaction: the target must open a malicious file or visit a malicious page. Meta has shipped a fix, and the pattern is worth checking for across other scientific ML pipelines that still accept pickled artefacts from shared model hubs.

zerodayinitiative.com → (opens in a new tab)

PHP 5.4.23 (custom 5.4-5.6) backported patch for PHP2Shell OOM vulnerability (CVE-2026-109618) (opens in a new tab)

oss-security ·26 Oct 2026 ·fetched 26 Oct 2026, 03:42 UTC Research CVE-2026-109618 EPSS 100.0% agreed3/3

Why readIf you still run PHP 5.4 through 5.6 anywhere, this is the only patch you are going to get for a flaw whose EPSS is effectively 1.0.

Roman Kuligin posted an unofficial backport to oss-security covering PHP 5.4, 5.5 and 5.6 for the PHP2Shell out of memory flaws tracked as CVE-2026-109618 and CVE-2026-109619. The patch reworks the internal memory allocation model used during file upload progress tracking so a crafted upload cannot exhaust memory and crash the process. Upstream will never ship a fix for these branches, but this is third party code with no upstream review, so build and test it yourself before it goes anywhere near production.

seclists.org → (opens in a new tab)

CVE-2026-115889 (CVSS 9.9): Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that can silen (opens in a new tab)

NVD ·26 Oct 2026 ·fetched 26 Oct 2026, 15:42 UTC Research CVE-2026-115889 CVSS 9.9 EPSS 0.5% agreed3/3

Why readA Cranelift integer overflow in SSA index bit-packing silently miscompiles large Wasm functions, breaking the Wasmtime sandbox on every architecture using the default backend.

CVE-2026-115889 (CVSS 9.9) affects Wasmtime before 36.0.19 and 43.0.0: the Cranelift backend bit-packs SSA value indices in a way that overflows without a check in release builds when compiling a function with enough SSA values. The result is references to the wrong IR values, producing arbitrary miscompilation and type confusion with attacker-controlled effects that can escape the sandbox. Anyone running untrusted Wasm (edge runtimes, plugin hosts, multi-tenant compute) should treat this as a guest-escape and upgrade.

nvd.nist.gov → (opens in a new tab)

CVE-2026-115806 (CVSS 9.8): The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.1 via dese (opens in a new tab)

NVD ·26 Oct 2026 ·fetched 26 Oct 2026, 15:42 UTC Research CVE-2026-115806 CVSS 9.8 EPSS 0.5% agreed3/3

Why readUnauthenticated PHP object injection in WordPress Prime Mover up to 2.2.1, stored through wp-comments-post.php and detonated when an admin runs an export, with the POP chain shipped in the plugin's own bundled Freemius code.

CVE-2026-115806 (CVSS 9.8) stems from recursiveUnserializeReplace() in the migration search-and-replace routine passing base64-decoded stored input to unserialize() with no allowed_classes restriction. An unauthenticated attacker plants the payload in wp_comments.comment_content via the standard comment endpoint and waits; the next routine export or restore by an administrator triggers it. The gadget chain (FS_Clone_Manager::__set to FS_Option_Manager::set_option to store() to update_option()) is in the bundled Freemius library, so no second vulnerable plugin or theme is needed.

nvd.nist.gov → (opens in a new tab)

CVE-2026-115893 (CVSS 9.9): Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table ins (opens in a new tab)

NVD ·26 Oct 2026 ·fetched 26 Oct 2026, 15:42 UTC Research CVE-2026-115893 CVSS 9.9 EPSS 0.4% agreed3/3

Why readOn aarch64, a Wasm br_table with more than roughly 256,000 targets compiles to an incorrect conditional branch, giving a guest module a jump to a user-controlled offset and a sandbox escape.

CVE-2026-115893 (CVSS 9.9) hits Wasmtime before 36.0.19, 48.0.7 and 49.0.4 on aarch64 only. Cranelift mis-handles br_table instructions past the ~256k target threshold, emitting a branch that lands at an attacker-chosen offset rather than the intended case, which is enough for a crafted module to escape the Wasm sandbox. ARM-based Wasm hosts running untrusted guest code are the exposed population; the fix is in the three listed releases.

nvd.nist.gov → (opens in a new tab)

CVE-2026-115931 (CVSS 9.9): Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be (opens in a new tab)

NVD ·26 Oct 2026 ·fetched 26 Oct 2026, 15:42 UTC Research CVE-2026-115931 CVSS 9.9 EPSS 0.5% agreed3/3

Why readPostiz exposes unrestricted internal function invocation to any signed-in user, and self-registration is on by default, so arbitrary file read of the .env and session-signing secret needs only a fresh account.

CVE-2026-115931 (CVSS 9.9) lets an authenticated Postiz user name any backend function to run against a connected channel, with no allowlist on what is reachable. One reachable helper reads a file from disk, so storing a file path as a channel token returns arbitrary file contents including the environment, which holds the session-signing secret, database address and connected-service credentials; another helper terminates the backend process in a single request. Open self-registration removes the authentication barrier entirely for self-hosted instances exposed to the internet.

nvd.nist.gov → (opens in a new tab)

CVE-2026-115933 (CVSS 9.9): Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token is for. A route that refr (opens in a new tab)

NVD ·26 Oct 2026 ·fetched 26 Oct 2026, 15:42 UTC Research CVE-2026-115933 CVSS 9.9 EPSS 0.2% agreed3/3

Why readPostiz signs sessions, invitations and password resets with one secret and no token-type marker, and a refresh route will sign attacker-supplied claims and hand them back.

CVE-2026-115933 (CVSS 9.9) is a textbook token-confusion chain: with no "what is this token for" field and a single shared signing secret, any validly signed blob is accepted in every context. A browser-extension channel refresh route signs data taken straight from the request and stores the result where the requester can read it, so a user can mint a token bearing any claims they want and present it as a session, an organisation invitation with a chosen role, a password reset, or an enterprise provisioning token. A second team-invitation route signs request-body fields the same way.

nvd.nist.gov → (opens in a new tab)

CVE-2020-37268: Rocq/Coq Print Assumptions omits unsafe universe checking inlined through Parameter Inline (0 = 1 demonstrated) — unfixed since 2020 (opens in a new tab)

oss-security ·26 Oct 2026 ·fetched 26 Oct 2026, 03:42 UTC Research CVE-2020-37268 EPSS 0.2% agreed3/3

Why readIf any part of your assurance story rests on Print Assumptions showing a Rocq proof is axiom free, that check can be made to lie.

Jonathan Brossard documents a soundness audit bypass in the Rocq (formerly Coq) module system: when a functor application inlines a Parameter Inline body, the metadata recording that the original definition was produced under Unset Universe Checking is dropped. The result is a demonstrated proof of False that Print Assumptions reports as closed under the global context, with no axioms and no unsafe flags visible to a reviewer. Tracked as CVE-2020-37268 and unfixed since 2020, which means the audit command cannot be relied on as a trust boundary for third party developments.

seclists.org → (opens in a new tab)

CVE-2026-98981 (CVSS 8.8): In the Linux kernel, the following vulnerability has been resolved: namespace: unhash a dentry before detaching the mounts on it unlink(), rmdir() a (opens in a new tab)

NVD ·26 Oct 2026 ·fetched 26 Oct 2026, 11:40 UTC Research CVE-2026-98981 CVSS 8.8 EPSS 0.2% agreed3/3

Why readA wide race between detach_mounts() and d_delete() in unlink/rmdir/rename exposes files hidden under mounts in other namespaces, hit in 11,938 of 16,140 attempts in the author's test.

When the VFS removes an entry it calls detach_mounts() with the inode locked, then d_delete() only after unlock, leaving a window in which the dentry is still hashed and positive but nothing covers it. Any lookup that finds it in the dcache during that window sees what the mounts hid, and the window spans namespace_unlock() with a full synchronize_rcu_expedited() grace period plus the inode_unlock(). Three competing walkers reading an overmounted file succeeded in 11,938 of 16,140 unlinks, which makes this the most reliably triggerable of the mount-reveal set; the fix unhashes the dentry before detaching its mounts.

nvd.nist.gov → (opens in a new tab)

Starman versions before 0.4019 for Perl (4 CVEs) (opens in a new tab)

oss-security ·26 Oct 2026 ·fetched 26 Oct 2026, 03:42 UTC Research CVE-2026-115823 agreed3/3

Why readFour Starman bugs fixed in 0.4019, including HEAD responses that return a body and desynchronise the connection, plus quadratic regex backtracking on chunked bodies.

Starman before 0.4019 sends response bodies for HEAD requests, desynchronising the stream in a way that matters behind a reverse proxy, and parses chunked request bodies with a regex that backtracks quadratically for CPU exhaustion. Two further issues cover a stalled request body pinning a worker indefinitely because read_timeout covers headers only, and a fourth CVE in the same batch (CVE-2026-115817, CVE-2026-115822, CVE-2026-115823). Upgrade any Perl PSGI service fronting untrusted traffic to 0.4019.

seclists.org → (opens in a new tab)

CVE-2026-72711: Lean 4 kernel soundness bug — inference cache poisoning via opaque declarations (0 = 1 demonstrated) (opens in a new tab)

oss-security ·26 Oct 2026 ·fetched 26 Oct 2026, 03:42 UTC Research CVE-2026-72711 EPSS 0.2% agreed3/3

Why readLean 4's add_opaque path skips the closure check that definitions and theorems receive, and a stale inference cache turns that omission into a proof of 0 = 1 that survives --trust=0.

The kernel runs check_no_metavar_no_fvar when adding definitions and theorems but not when adding opaque declarations, so a term still carrying metavariables or free variables can enter the environment. Combined with a stale inference cache entry, that admits a proof of False at maximum checking, without sorry, unsafeCast, debug.skipKernelTC or tampered .olean files. The practical point is that --trust=0 is not currently a sufficient guarantee for a Lean proof artifact received from an untrusted source.

seclists.org → (opens in a new tab)

CVE-2026-89320 (CVSS 8.8): `HmacShaCryptor.Hash` never hashed its input. For any input it returned `HMAC_K("")` — the MAC of the empty message under the key. Every AES-CBC-HMAC (opens in a new tab)

NVD ·25 Oct 2026 ·fetched 25 Oct 2026, 19:42 UTC Research CVE-2026-89320 CVSS 8.8 EPSS 0.2% agreed3/3

Why readgose's HmacShaCryptor.Hash ignored its input entirely and returned HMAC_K(""), so every AES-CBC-HMAC JWE it produced or verified carried a tag that is constant per key and says nothing about the ciphertext.

The authentication tag computed by the library is the MAC of the empty message, identical for every message under a given key and independent of content. That removes ciphertext integrity completely: an attacker can modify a JWE body and the tag still validates, which is why the CVSS 4.0 vector shows VI:H with only VC:L. It is a good worked example of a crypto failure that unit tests comparing a value against itself will happily pass.

nvd.nist.gov → (opens in a new tab)

CVE-2026-110803 (CVSS 8.7): VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside the block that releases the loc (opens in a new tab)

NVD ·24 Oct 2026 ·fetched 24 Oct 2026, 15:44 UTC Research CVE-2026-110803 CVSS 8.7 EPSS 0.3% agreed3/3

Why readOne unauthenticated request with a non-numeric v-uiId permanently deadlocks a Vaadin 8 session and, repeated, takes the application down.

VaadinService.requestEnd() locks the session and then parses the v-uiId request parameter outside the block that releases it, so Integer.parseInt throwing on a non-numeric value leaves the container thread returning to the pool still holding the lock. Every subsequent request for that session blocks forever in lockSession(), and repeating the request exhausts the thread pool. No authentication is needed beyond a session cookie any client gets on its first request. Affects Vaadin Framework 8.16.0 through 8.32.1 and is fixed in 8.32.2; Framework 7 and Vaadin 10 and later are not affected because Flow releases the lock in a finally block.

nvd.nist.gov → (opens in a new tab)

CVE-2026-114126 (CVSS 8.7): Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and 11.0.0-al (opens in a new tab)

NVD ·24 Oct 2026 ·fetched 24 Oct 2026, 15:44 UTC Research CVE-2026-114126 CVSS 8.7 EPSS 0.5% agreed3/3

Why readThe Storybook dev server leaks its WebSocket auth token to anyone on the LAN who can load its pages, leading to file writes and developer-privilege code execution.

From 8.0.0 until 8.6.19, 9.1.21, 10.6.2 and 11.0.0-alpha.6, a network-adjacent attacker who can reach the Storybook development server obtains its WebSocket authentication token and can invoke the file-writing and testing endpoints behind it. Weak story-write validation allows code to be planted in story files, and if the Vitest addon is installed alongside an old Vitest, the payload can use a Vitest API to write further files or run commands as the developer. This is a workstation and coffee-shop-network problem for frontend teams; fixed in 8.6.19, 9.1.21, 10.6.2 and 11.0.0-alpha.6.

nvd.nist.gov → (opens in a new tab)

jxrlib: memory bugs on damaged JPEG XR files, fixed in mircomir/jxrlib 1.4.4, still in most distributions (opens in a new tab)

oss-security ·24 Oct 2026 ·fetched 24 Oct 2026, 11:40 UTC Research agreed3/3

Why readFuzzing found heap overflow writes in Microsoft's abandoned jxrlib that a few-hundred-byte JPEG XR file triggers, and most distributions still ship the unpatched code.

Memory corruption bugs, including a heap buffer overflow write, are reachable in jxrlib by decoding a damaged JPEG XR file of only a few hundred bytes. The bugs were found while fuzzing decoders for the Featherview image viewer and are fixed in the maintained fork mircomir/jxrlib 1.4.4, released 2026-10-09, but upstream Microsoft jxrlib is abandoned and distribution packages still carry the old code. Anything that decodes JXR from untrusted input, including image viewers and thumbnailers, is the exposure.

seclists.org → (opens in a new tab)

ZDI-26-786: NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·23 Oct 2026 ·fetched 23 Oct 2026, 23:40 UTC Research CVE-2026-114549 agreed3/3

Why readUnauthenticated heap overflow RCE in the NoMachine web service on TCP 4443, with fixed versions already published.

CVE-2026-114549 is a heap-based buffer overflow in NoMachine's nxwebrunner component, reachable without authentication on the web service that listens on TCP port 4443 by default. The flaw is a missing length check on user-supplied data before it is copied into a heap buffer, giving code execution as the service account. Fixed in v10.1.7, 9.9.6 and 8.27.1 per vendor KB TR07X11893.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-788: Cisco Snort OLE VBA Decompression Stack-based Buffer Overflow Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·23 Oct 2026 ·fetched 23 Oct 2026, 11:41 UTC Research CVE-2026-20218 EPSS 0.4% agreed3/3

Why readCVE-2026-20218 lets an unauthenticated attacker reach code execution in Cisco Snort by way of a crafted OLE file's VBA stream.

ZDI details a stack-based buffer overflow in Cisco Snort's decompression of VBA data inside OLE file streams: the length of user-supplied data is not validated before the copy into a fixed-length stack buffer. No authentication is required, and successful exploitation runs code as the service account, meaning the inspection engine itself becomes the entry point. EPSS is low at 0.004, and Cisco has shipped a fix in advisory cisco-sa-snort3-vba-bufdos-jAuFdvn9.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-789: OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure Vulnerability (opens in a new tab)

ZDI Published Advisories ·23 Oct 2026 ·fetched 23 Oct 2026, 03:44 UTC Research CVE-2026-63073 EPSS 1.2% agreed3/3

Why readFormat string bug in OpenSSL's CMP Distinguished Name handling, CVE-2026-63073, exploitable without authentication against either client or server.

A user-supplied string in CMP message Distinguished Names reaches a format specifier without validation, letting a remote unauthenticated attacker disclose memory contents in the context of the OpenSSL CMP client or server. CMP is used for certificate management, so exposure is narrower than OpenSSL's TLS paths but hits PKI automation directly. OpenSSL has published a fix; EPSS is low at 0.012 and no exploitation is reported.

zerodayinitiative.com → (opens in a new tab)

Unofficial backports for CVE-2026-109618 / CVE-2026-109619 to EOL PHP 7.3 (EL7) and 5.4/5.3 (Amazon Linux) (opens in a new tab)

oss-security ·22 Oct 2026 ·fetched 22 Oct 2026, 19:41 UTC Research CVE-2026-109619 EPSS 5.8% agreed3/3

Why readWorking source backports of the upstream bailout-corruption fix for the unauthenticated PHP RCE pair, aimed at builds that will never see a vendor patch.

The post publishes backports of upstream commit 712e60f9ed, the minimal mitigation for CVE-2026-109618 and CVE-2026-109619 (unauthenticated RCE, CVSS 4.0 9.2), to PHP 7.3.33 on CentOS/RHEL 7, PHP 5.4.16 on Amazon Linux 2, and PHP 5.3.29 on Amazon Linux 1. These are exactly the estates with no upgrade path and no vendor fix coming, which is where exploitation pressure concentrates once a public PoC lands; EPSS already sits in the 93rd percentile. Treat it as unofficial: read the diff and rebuild from source rather than trusting a third party binary, but it is a real option for anyone currently stuck with compensating controls alone.

seclists.org → (opens in a new tab)

CVE-2026-94140: Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no (opens in a new tab)

oss-security ·22 Oct 2026 ·fetched 22 Oct 2026, 03:39 UTC Research CVE-2026-94140 agreed3/3

Why readRex through 1.16.1 hardcodes StrictHostKeyChecking=no in every remote rsync path, so config-management file transfers accept any host key and no caller option overrides it.

Every remote branch of Rex's sync command builds its ssh invocation with StrictHostKeyChecking=no, for password auth, private-key auth and the fallback alike, and options passed via set_openssh_opt do not restore host key checking for the transfer. An attacker able to redirect the connection presents their own key and the transfer continues: password auth hands over the connection password, an upload writes the selected local files to the attacker, and a download writes attacker-supplied content to the target. The affected code is in lib/Rex/Commands/Rsync.pm.

seclists.org → (opens in a new tab)

CVE-2026-94423: Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts (opens in a new tab)

oss-security ·22 Oct 2026 ·fetched 22 Oct 2026, 03:39 UTC Research CVE-2026-94423 agreed3/3

Why readNet::LibSSH before 0.004 for Perl never checks the host key against known_hosts, so every session it opens is unauthenticated at the server end despite strict_hostkeycheck being set.

The binding treats ssh_connect returning SSH_OK as success, but libssh leaves known-hosts verification to the application and Net::LibSSH never performs it, making the strict_hostkeycheck and knownhosts options inert. Password, agent and public-key authentication, channels and SFTP all proceed against an unverified peer, so an attacker who can redirect the connection receives the password under password auth and sees all commands and data. Fixed in 0.004, with the patch commit published.

seclists.org → (opens in a new tab)

Amazon Threat Intelligence identifies PHP2Shell exploitation prior to public disclosure in MadPot (opens in a new tab)

AWS Security ·CJ Moses ·21 Oct 2026 ·fetched 21 Oct 2026, 23:40 UTC Must read Research CVE-2026-109619 agreed3/3

Why readHoneypot telemetry showing PHP2Shell exploitation four days before the CVEs were public, which means the embargo itself leaked.

Amazon Threat Intelligence found a PHP2Shell exploitation attempt in MadPot telemetry dated 17 October 2026, four days ahead of the disclosure of CVE-2026-109618 and CVE-2026-109619 and while both were still embargoed. The attempt came from commercial anonymisation infrastructure, consistent with a threat actor rather than a researcher, and how the exploit information leaked is unexplained. On disclosure day Amazon saw proof of concept code circulating from roughly 0200 UTC, hours before the 1400 UTC embargo lift, followed by further attempts whose varied payloads and infrastructure point to several distinct actors.

aws.amazon.com → (opens in a new tab)

PHP2Shell: AI uncovers critical RCE vulnerabilities affecting 70% of the Internet (opens in a new tab)

Wiz ·Tomer Schwartz ·21 Oct 2026 ·fetched 21 Oct 2026, 15:41 UTC Must read Research agreed3/3

Why readUnauthenticated RCE and memory disclosure in the PHP engine itself, affecting every release back to 5.4, with the fix shipped on 21 October 2026.

Wiz Research found multiple memory-safety bugs in core PHP, including unauthenticated remote code execution that triggers at the runtime level rather than in application code, so the application stack on top offers no protection. Every PHP version released in the last decade is affected by at least one of the issues, back to 5.4, and PHP shipped the patch on 21 October 2026. This is the discovery writeup rather than secondary coverage, and the exposure covers the large majority of server-side web estates.

wiz.io → (opens in a new tab)

PHP2Shell - Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619): detection, analysis, and remediation (opens in a new tab)

Datadog Security Labs ·21 Oct 2026 ·fetched 21 Oct 2026, 15:41 UTC Research CVE-2026-109618 agreed3/3

Why readIndependent reproduction showing the widely circulated session.upload_progress.enabled=0 mitigation does not work and that application auth cannot block the request.

Datadog reproduced CVE-2026-109618 and CVE-2026-109619 (CVSS v4.0 9.2) and found PHP processes the malicious request before any application code runs, so authentication in front of the app is no defence. The exploit bypasses ASLR with a calibrated memory layout and a handful of preparatory requests, needs no brute force, and does not reliably crash the worker, which removes the obvious signal. Hunt for large form submissions, memory-exhaustion errors during request initialisation and unexpected shell processes; patching to 8.2.35 or later is the only fix.

securitylabs.datadoghq.com → (opens in a new tab)

KVM escape exposes broader attack surface in Linux networking (opens in a new tab)

CSO Online ·20 Oct 2026 ·fetched 20 Oct 2026, 23:32 UTC Research CVE-2026-99999 EPSS 0.2%

Why readExamine a high-severity Linux kernel networking flaw that enables virtual machine escapes from KVM and Firecracker microVMs.

Researchers identified CVE-2026-99999 (PwnEscape) in the Linux kernel networking stack during a security challenge against Vercel's sandbox platform. The vulnerability allows an attacker inside a VM to manipulate IPv4 packet headers after host validation, causing host memory leakage, crashes, or root code execution. The underlying bug exists in Linux network packet processing rather than the hypervisor code itself.

csoonline.com → (opens in a new tab)

CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE (opens in a new tab)

Horizon3 Attack Team ·Zach Hanley ·20 Oct 2026 ·fetched 20 Oct 2026, 15:33 UTC Research CVE-2026-106173 EPSS 0.4%

Why readTechnical breakdown and root-cause analysis of a critical gRPC path traversal flaw (CVE-2026-106173) in FortiSIEM.

Horizon3 Attack Team presents a technical analysis of CVE-2026-106173, an arbitrary file write flaw in FortiSIEM's phQueryMaster service listening on port tcp/27918. Unlike previously analyzed vulnerabilities in phMonitor on port tcp/7900, this issue resides in the grpcNotificationServer::run() routine. The writeup demonstrates how the gRPC handler processes unauthenticated requests to achieve arbitrary file writes and execution.

horizon3.ai → (opens in a new tab)

CVE-2026-101767 | Oracle E-Business Suite TCF SQL Injection and Remote Code Execution (opens in a new tab)

Horizon3 Attack Team ·Horizon3 ·20 Oct 2026 ·fetched 20 Oct 2026, 23:32 UTC Research CVE-2026-101767

Why readTechnical walkthrough of an unauthenticated SQL injection in Oracle EBS chained to remote code execution.

Horizon3 details an unauthenticated SQL injection vulnerability in Oracle E-Business Suite's Thin Client Framework (TCF) servlet. An attacker with network access to the servlet can execute SQL commands as the APPS database user and subsequently invoke operating system commands on the underlying host. The writeup demonstrates the full exploitation chain from HTTP request to command execution.

horizon3.ai → (opens in a new tab)

Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED) (opens in a new tab)

Rapid7 ·Marcus Chang ·20 Oct 2026 ·fetched 20 Oct 2026, 03:36 UTC Research

Why readDetails three zero-day vulnerabilities in Eptura Archibus facilities management software that allow unauthenticated remote code execution and full database extraction.

Rapid7 discovered multiple flaws in Eptura Archibus, including a legacy API authentication bypass (CVSS 8.6) that enables unauthorized callers to execute restricted backend functions. Exploitation allows arbitrary file uploads leading to remote code execution as local service (CVSS 9.6) alongside direct database reads (CVSS 8.5) on systems managing physical enterprise infrastructure.

rapid7.com → (opens in a new tab)

One parser, two bugs, many routers: Exploiting Broadcom WiFi across eCos, Linux (opens in a new tab)

Hacker News ·zoobab ·19 Oct 2026 ·fetched 19 Oct 2026, 03:35 UTC Must read Research 57 points

Why readDetails a zero-click remote code execution flaw in Broadcom's Wi-Fi SDK affecting eCos and Linux access points.

A long-standing flaw in Broadcom's proprietary 802.11 implementation allows unauthenticated remote attackers to achieve arbitrary code execution over Wi-Fi without knowing the network key. Broadcom provided an incomplete fix in 2018 and recommended migrating to hostapd, leaving legacy eCos and Linux chipsets (including BCM3380, BCM3383, BCM3390, and BCM68xx) permanently vulnerable. The author provides a YARA rule and fingerprinting script to help defenders identify affected devices.

quentinkaiser.be → (opens in a new tab) Discussion (opens in a new tab)

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory (opens in a new tab)

The Hacker News ·The Hacker News ·16 Oct 2026 ·fetched 16 Oct 2026, 03:34 UTC Research CVE-2026-99999

Why readA Linux kernel networking flaw dubbed PwnEscape (CVE-2026-99999) enables guest VMs to extract host memory and escape cloud hypervisor isolation.

Security researcher Paulos Yibelo demonstrated CVE-2026-99999 (PwnEscape), a flaw in the Linux kernel networking subsystem allowing guest VMs to breach hypervisor boundaries. By transmitting crafted network packets, a guest virtual machine can extract 32 bytes of host memory per packet, facilitating cross-tenant data leakage or host compromise. The issue was demonstrated on production cloud sandboxes before responsible disclosure.

thehackernews.com → (opens in a new tab)

Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229) (opens in a new tab)

Rapid7 ·Jonah Burgess ·16 Oct 2026 ·fetched 16 Oct 2026, 15:35 UTC Research CVE-2026-97229 EPSS 0.5%

Why readRapid7 published a technical analysis and working command-execution PoC for the CVSS 10.0 integer overflow in GitLab CI/CD regular-expression processing.

Rapid7 detailed the exploitation mechanism of CVE-2026-97229, a CVSS 10.0 integer overflow vulnerability in GitLab CI/CD regex handling affecting versions prior to 19.4.2, 19.3.5, and 19.2.8. Researchers successfully developed a reliable end-to-end exploit achieving arbitrary command execution as the git service account on 64-bit Linux with ASLR enabled by committing a malicious CI configuration and specially named project path.

rapid7.com → (opens in a new tab)

PoC Released for Linux Vhost Flaw Enabling Root Privilege Escalation and VM Escape (opens in a new tab)

Cybersecurity News ·Abinaya ·15 Oct 2026 ·fetched 15 Oct 2026, 03:35 UTC Research CVE-2026-74580 EPSS 0.1%

Why readPublic exploit code is available for CVE-2026-74580, a high-severity Linux kernel vhost bug enabling local root escalation and guest-to-host VM escape.

A working proof of concept has been released for CVE-2026-74580, an 8.8 CVSS vulnerability in the Linux kernel vhost subsystem. The issue stems from stale IOTLB mapping caches when a virtqueue is reconfigured, allowing memory safety checks to be bypassed during host memory writes. Patches are available in updated kernel releases.

cybersecuritynews.com → (opens in a new tab)

ZDI-26-757: (0Day) Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·15 Oct 2026 ·fetched 15 Oct 2026, 19:35 UTC Research CVE-2026-111105

Why readDetails a zero-day integer truncation vulnerability in Telegram's rlottie library causing heap buffer corruption.

A zero-day numeric truncation vulnerability in Telegram's rlottie library permits out-of-bounds memory writes leading to remote code execution. Exploitation requires user interaction through a crafted file or web page. ZDI published details following vendor server-side mitigations and disclosure timeline disagreements.

zerodayinitiative.com → (opens in a new tab)

From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1) (opens in a new tab)

Rapid7 ·Jonah Burgess ·14 Oct 2026 ·fetched 14 Oct 2026, 19:35 UTC Research CVE-2026-93637 EPSS 0.3%

Why readBreaks down five account and authentication security vulnerabilities in Zimbra Collaboration Suite, including two unpatched flaws.

Rapid7 details research into Zimbra Collaboration Suite (ZCS) covering more than 80 security findings across authentication, LDAP processing, and web clients. This initial write-up analyzes five specific bugs, including CVE-2026-93637 (GraphQL authentication rate-limit bypass) and CVE-2026-93635 (LDAP filter injection), neither of which have public fixes available yet. Proof-of-concept code and tracking write-ups have been published to a dedicated repository.

rapid7.com → (opens in a new tab)

AhsayCBS Deep-Dive: Auth Bypass to RCE (opens in a new tab)

Horizon3 Attack Team ·Zach Hanley ·14 Oct 2026 ·fetched 14 Oct 2026, 19:35 UTC Research

Why readExplains the auth bypass and path traversal chain in AhsayCBS backup servers exploited to gain SYSTEM and root access.

Horizon3 provides a technical deep-dive into an unauthenticated remote code execution chain impacting AhsayCBS backup servers on Linux and Windows. The exploit combines an API authentication bypass (CVE-2026-105133) with a file write path traversal (CVE-2026-105134) in underlying Java Tomcat web applications. Attackers have actively leveraged this sequence in the wild to drop webshells and execute privileged system commands.

horizon3.ai → (opens in a new tab)

Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce (opens in a new tab)

Rapid7 ·Marcus Chang ·14 Oct 2026 ·fetched 14 Oct 2026, 15:35 UTC Research CVE-2026-108065

Why readUnauthenticated SQL injection in Channel Software WebAlliance eCommerce allows arbitrary database access and potential system command execution.

Rapid7 disclosed an unauthenticated SQL injection vulnerability (CVE-2026-108065, CVSS 9.8) in Channel Software WebAlliance eCommerce. The flaw allows attackers to dump sensitive database contents, including user credentials and PII, or execute operating system commands if the database service runs with administrative privileges.

rapid7.com → (opens in a new tab)

ZDI-26-752: (0Day) Genesis World decompress_usdz Directory Traversal Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·13 Oct 2026 ·fetched 13 Oct 2026, 23:34 UTC Research

Why readWarns of an unpatched zero-day directory traversal RCE in Genesis World's decompress_usdz function.

Zero Day Initiative released details on an unpatched zero-day flaw (ZDI-26-752) in Genesis World. Missing path validation in the decompress_usdz function allows directory traversal leading to remote code execution.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-756: (0Day) Genesis World load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·13 Oct 2026 ·fetched 13 Oct 2026, 23:34 UTC Research

Why readWarns of an unpatched zero-day deserialization RCE in Genesis World's load_checkpoint function.

Zero Day Initiative published a zero-day advisory (ZDI-26-756) for Genesis World following unaddressed disclosures. The vulnerability stems from untrusted data deserialization within the load_checkpoint component, allowing arbitrary code execution in the context of the running process.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-755: (0Day) Genesis World glTF Server-Side Request Forgery Vulnerability (opens in a new tab)

ZDI Published Advisories ·13 Oct 2026 ·fetched 13 Oct 2026, 19:33 UTC Research

Why readUnpatched zero-day SSRF vulnerability in Genesis World glTF library during URI parsing.

Zero Day Initiative published an unpatched zero-day vulnerability advisory affecting Genesis World glTF parsing. The bug allows remote attackers to perform server-side request forgery (SSRF) via malicious URI parsing in glTF files. The vendor closed GitHub disclosure issues without releasing a patch, making input restriction the primary mitigation.

zerodayinitiative.com → (opens in a new tab)

Telegram Desktop vulnerability allowed any user's file to be stolen (opens in a new tab)

Hacker News ·g-b-r ·10 Oct 2026 ·fetched 10 Oct 2026, 07:35 UTC Must read Research 92 points agreed2/2

Why readDetails a local IPC injection flaw in Telegram Desktop up to version 7.2.8 that allows arbitrary local file exfiltration via a clicked link.

Telegram Desktop passes clicked links to a running process over a local socket without escaping command delimiters. An attacker can combine this socket injection with the internal interpret URI scheme to read and exfiltrate arbitrary files, including session authentication keys, without user interaction beyond clicking the link. The issue affects Telegram Desktop versions up to 7.2.8 on Windows.

beaksec.github.io → (opens in a new tab) Discussion (opens in a new tab)

Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access (opens in a new tab)

The Hacker News ·The Hacker News ·10 Oct 2026 ·fetched 10 Oct 2026, 19:36 UTC Must read Research agreed2/2

Why readUpdate Linux AnyDesk instances to version 8.0.3 or higher to prevent remote root compromise via a newly published exploit.

Researchers released AnyPwn, a public exploit targeting a heap buffer overflow in AnyDesk Linux session handling over TCP port 7070. The bug allows unauthenticated attackers to gain root access on vulnerable Linux hosts running versions prior to 8.0.3. AnyDesk silently fixed the vulnerability in June without issuing a security advisory or assigning a CVE.

thehackernews.com → (opens in a new tab)

GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys (opens in a new tab)

The Hacker News ·The Hacker News ·10 Oct 2026 ·fetched 10 Oct 2026, 19:36 UTC Research agreed2/2

Why readUnderstand how a truncation bug in GoBalance allows attackers to derive Tor private keys and hijack onion web addresses.

Searchlight Cyber disclosed a cryptographic implementation flaw in GoBalance, a load balancer used by onion services. The software truncated 64-byte Tor private keys to 32 bytes during signature generation, exposing internal secret values. Attackers can compute the missing private key from published network descriptors and redirect onion site traffic.

thehackernews.com → (opens in a new tab)

Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578) (opens in a new tab)

watchTowr Labs ·Piotr Bazydlo (@chudyPB) ·9 Oct 2026 ·fetched 9 Oct 2026, 19:37 UTC Must read Research CVE-2026-81578 EPSS 63.5% agreed2/2

Why readDetails a pre-authentication remote code execution chain and patch bypasses affecting PaperCut servers.

watchTowr Labs analyzed actively exploited PaperCut vulnerabilities, uncovering multiple patch bypasses alongside the original pre-authentication remote code execution chain. The writeup evaluates initial log snippets and temporary mitigations provided by the vendor before patch availability, demonstrating how attackers bypassed early fixes. Organizations running PaperCut should review log indicators and ensure all updated patches are applied immediately.

labs.watchtowr.com → (opens in a new tab)

CVE-2026-19186 (CVSS 8.1): ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt_get_len(pkt) - ll_hdr_len - authtag_len (opens in a new tab)

NVD ·9 Oct 2026 ·fetched 9 Oct 2026, 23:35 UTC Research CVE-2026-19186 CVSS 8.1 EPSS 0.2% agreed2/2

Why readDetails an unauthenticated zero-click buffer overflow in the Zephyr IEEE 802.15.4 wireless stack caused by an integer underflow in short data frames.

An integer underflow vulnerability in ieee802154_decipher_data_frame() allows unauthenticated attackers in radio range to trigger heap memory corruption without cryptographic keys. Frames shorter than the expected header and authentication tag length wrap the calculated payload length to a large uint8_t value, forcing the crypto engine to read and overwrite memory past the packet buffer boundary before tag verification.

nvd.nist.gov → (opens in a new tab)

CVE-2026-105192 (CVSS 9.8): LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache bl (opens in a new tab)

NVD ·9 Oct 2026 ·fetched 9 Oct 2026, 23:35 UTC Research CVE-2026-105192 CVSS 9.8 EPSS 0.5% agreed2/2

Why readLMCache distributed mode can deserialize attacker-controlled pickle data from its ZeroMQ transport port, yielding unauthenticated RCE, often as root in official containers.

CVE-2026-105192 affects LMCache multiprocess mode: an unauthenticated ZeroMQ ROUTER accepts msgpack extension code 1, which reaches DeviceIPCWrapper.Deserialize and pickle.loads before request handling. A single DEALER message to the default port 5555 executes code as the LMCache process; official images run it as root, although the socket is localhost-bound unless operators expose it with --host for multi-node use.

nvd.nist.gov → (opens in a new tab)

CVE-2026-107204 (CVSS 9.3): LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting s (opens in a new tab)

NVD ·9 Oct 2026 ·fetched 9 Oct 2026, 23:35 UTC Research CVE-2026-107204 CVSS 9.3 EPSS 0.8% agreed2/2

Why readLMCache through 0.5.5 exposes unauthenticated RCE at /run_script, with a documented FastAPI-object route around its guarded import control.

CVE-2026-107204 affects LMCache through 0.5.5, where an unauthenticated attacker can post Python to /run_script. The attacker can recover real builtins via the injected FastAPI application object, bypass the guarded __import__, import os, and execute operating-system commands as the LMCache process.

nvd.nist.gov → (opens in a new tab)

CVE-2026-102489 | Technical Details (opens in a new tab)

Horizon3 Attack Team ·Horizon3 ·8 Oct 2026 ·fetched 8 Oct 2026, 19:37 UTC Research CVE-2026-102489 EPSS 1.3% agreed2/2

Why readDetails an unauthenticated session disclosure vulnerability in Zammad added to CISA KEV that allows session hijacking and admin RCE.

Horizon3 details CVE-2026-102489, an unauthenticated session disclosure vulnerability in the Zammad open-source helpdesk platform that was added to CISA's Known Exploited Vulnerabilities catalog. Attackers can obtain session cookies of connected users to hijack sessions, where compromising an administrator account enables remote code execution as the system user.

horizon3.ai → (opens in a new tab)

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely (opens in a new tab)

The Hacker News ·The Hacker News ·7 Oct 2026 ·fetched 7 Oct 2026, 23:37 UTC Research agreed2/2

Why readLMCache multiprocess deployments listening on a routable address are vulnerable to unauthenticated remote code execution, with no patch available.

JFrog disclosed CVE-2026-105192, a 9.8-severity flaw in LMCache multiprocess mode where a single ZeroMQ message can execute commands as the LMCache process user. It affects versions 0.3.9 through 0.5.5, plus 0.5.6 release candidates and the development branch; exposure depends on binding the cache server beyond localhost, and no fixed version exists.

thehackernews.com → (opens in a new tab)

Zammad CVE-2026-102489: Session Leak to RCE (opens in a new tab)

Horizon3 Attack Team ·Zach Hanley ·7 Oct 2026 ·fetched 7 Oct 2026, 11:35 UTC Research CVE-2026-102489 EPSS 1.4% agreed2/2

Why readExplains the technical exploit chain from session leakage to remote code execution in Zammad (CVE-2026-102489).

Horizon3 Attack Team breaks down CVE-2026-102489 in the Zammad helpdesk platform, demonstrating how session leaking allows unauthenticated attackers to elevate privileges to arbitrary code execution. The vulnerability gained visibility following disclosures by DIVD linking Zammad exploitation to an agentic AI intrusion.

horizon3.ai → (opens in a new tab)

Anthropic Mythos AI Finds Rejetto HFS Flaw That Lets Attackers Forge Admin Sessions and Execute Code (opens in a new tab)

Cybersecurity News ·Abinaya ·7 Oct 2026 ·fetched 7 Oct 2026, 11:35 UTC Research CVE-2026-61500 EPSS 1.0% agreed2/2

Why readCVE-2026-61500 allows remote attackers to forge admin sessions and execute code on Rejetto HFS 3.x via weak session signing.

Researchers operating Anthropic's Mythos AI model uncovered a critical session-forgery flaw tracked as CVE-2026-61500 in Rejetto HTTP File Server 3.x. The vulnerability stems from Koa framework session signing keys generated using JavaScript's non-cryptographic Math.random() function, enabling unauthenticated remote code execution. The discovery was produced as part of Anthropic's Project Glasswing initiative targeting open-source infrastructure vulnerabilities.

cybersecuritynews.com → (opens in a new tab)

Microsoft, Adobe, Apple, and Foxit vulnerabilities (opens in a new tab)

Cisco Talos ·Kri Dontje ·7 Oct 2026 ·fetched 7 Oct 2026, 19:35 UTC Research CVE-2026-48388 EPSS 0.3% agreed2/2

Why readDetails multiple disclosed flaws including an Adobe Photoshop privilege escalation vulnerability (CVE-2026-48388) and a macOS CoreWLAN information disclosure bug.

Cisco Talos detailed newly disclosed vulnerabilities across Adobe, Apple, Foxit, and Microsoft software alongside Snort detection coverage. The advisories highlight CVE-2026-48388, an installation functionality privilege escalation in Adobe Photoshop 2.11.0.30, and TALOS-2026-2376, an API sequencing information disclosure bug in macOS CoreWLAN. Patch advisories and network detection signatures have been made available for all impacted products.

blog.talosintelligence.com → (opens in a new tab)

You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) (opens in a new tab)

watchTowr Labs ·Piotr Bazydlo (@chudyPB) ·6 Oct 2026 ·fetched 6 Oct 2026, 19:34 UTC Research CVE-2026-21589 EPSS 0.7%

Why readBreaks down a critical pre-authentication arbitrary file read flaw (CVE-2026-21589) in Atlassian Jira and Confluence.

watchTowr Labs analyzes an out-of-band security advisory published by Atlassian affecting multiple on-premises product lines. CVE-2026-21589 allows remote unauthenticated attackers to perform arbitrary file reads across widespread server installations. The writeup discusses the architecture of the bug and the impact on enterprise self-managed environments.

labs.watchtowr.com → (opens in a new tab)

CVE-2026-97637 (CVSS 9.8): The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and includin (opens in a new tab)

NVD ·4 Oct 2026 ·fetched 4 Oct 2026, 19:33 UTC Research CVE-2026-97637 CVSS 9.8 EPSS 0.6% agreed2/2

Why readExplains how URI transient caching in WordPress JSON API Auth allows unauthenticated attackers to steal admin cookies.

WordPress JSON API Auth plugin versions up to 3.1.2 contain a critical authentication bypass via cached session cookies (CVE-2026-97637). Transient caching in the parent PI-Media/json-api plugin caches endpoint responses ignoring HTTP methods, letting unauthenticated GET requests pull active admin cookies from previous POST responses.

nvd.nist.gov → (opens in a new tab)

CVE-2026-53953 (CVSS 9.1): GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In version 3.3.22, the password reset e (opens in a new tab)

NVD ·4 Oct 2026 ·fetched 4 Oct 2026, 11:36 UTC Research CVE-2026-53953 CVSS 9.1 EPSS 0.3% agreed2/2

Why readBlock unauthenticated access to GetSimple CMS password reset endpoints due to predictable PRNG seeding causing full account takeover.

GetSimple CMS 3.3.22 contains an unauthenticated password reset flaw that overwrites user password hashes with a temporary password upon request. Because the temporary password relies on PHP rand() seeded with microtime(), the entropy space is sufficiently small to allow real-time brute force attacks against unthrottled login endpoints, leading to complete administrator account takeover.

nvd.nist.gov → (opens in a new tab)

CVE-2026-102757 (CVSS 8.5): An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can u (opens in a new tab)

NVD ·2 Oct 2026 ·fetched 2 Oct 2026, 15:34 UTC Research CVE-2026-102757 CVSS 8.5 EPSS 0.1% agreed2/2

Why readFlaws in ThreadX Module Manager enable unprivileged modules to execute privileged writes and disable MPU protections.

ThreadX Module Manager misvalidates object pointer locations, allowing modules to treat internal allocation offsets as valid control blocks. Attackers can leverage kernel helper routines to perform privileged memset operations across arbitrary memory and clear MPU boundary flags.

nvd.nist.gov → (opens in a new tab)

CVE-2026-102730 (CVSS 8.6): Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **write** in LevelX's NAND flash-tr (opens in a new tab)

NVD ·2 Oct 2026 ·fetched 2 Oct 2026, 15:34 UTC Research CVE-2026-102730 CVSS 8.6 EPSS 0.1% agreed2/2

Why readUnbounded heap writes in LevelX NAND flash metadata parser allow control-flow hijacking via overwritten function pointers.

Mounting a crafted NAND flash image triggers an out-of-bounds heap write in LevelX lx_nand_flash_open(). Attackers can overwrite driver function pointers to achieve arbitrary instruction pointer execution. Header comments indicate parts of the vulnerable parser were generated by Copilot.

nvd.nist.gov → (opens in a new tab)

CVE-2026-102710 (CVSS 9.3): Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dispatch calls, on a build with ` (opens in a new tab)

NVD ·2 Oct 2026 ·fetched 2 Oct 2026, 15:34 UTC Research CVE-2026-102710 CVSS 9.3 EPSS 0.1% agreed2/2

Why readUnvalidated trace callbacks in ThreadX user-mode modules allow privilege escalation to kernel mode.

User-mode memory-protected modules issuing kernel calls in ThreadX builds with trace logging enabled can register arbitrary function pointers as global trace callbacks. The kernel executes the registered callback without validation when the trace buffer wraps. Runtime captures confirm execution at kernel privilege level.

nvd.nist.gov → (opens in a new tab)

CVE-2026-102713 (CVSS 8.8): The TFTP server accepts a DATA datagram of any size. The dispatcher rejects datagrams shorter than four bytes (nxd_tftp_server.c:1037) and nothing (opens in a new tab)

NVD ·2 Oct 2026 ·fetched 2 Oct 2026, 15:34 UTC Research CVE-2026-102713 CVSS 8.8 EPSS 0.3% agreed2/2

Why readUnauthenticated heap buffer overflow in NetX Duo TFTP server caused by missing upper bound validation on DATA datagrams.

The NetX Duo TFTP server implementation fails to check upper bounds on incoming packet lengths before passing them to FileX file write routines in nxd_tftp_server.c. An unauthenticated attacker can send oversized DATA datagrams to force FileX to copy beyond single packet boundaries, triggering a heap buffer overflow.

nvd.nist.gov → (opens in a new tab)

CVE-2026-102761 (CVSS 9.3): NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the loop's uppe (opens in a new tab)

NVD ·2 Oct 2026 ·fetched 2 Oct 2026, 15:34 UTC Research CVE-2026-102761 CVSS 9.3 EPSS 0.3% agreed2/2

Why readNetX Duo WebSocket client memory corruption enables arbitrary code execution via crafted split frames.

NetX Duo's WebSocket client resets its unmasking cursor to the initial packet when processing chained packet buffers. A server frame split across packets forces the unmasking XOR loop into memory containing control blocks. Attackers can control the corruption using four-byte WebSocket masking keys.

nvd.nist.gov → (opens in a new tab)

CVE-2026-102712 (CVSS 8.8): On the first DTLS ClientHello, the parser copies a device-claimed session_id length and validates the ciphersuite-list length against the total rec (opens in a new tab)

NVD ·2 Oct 2026 ·fetched 2 Oct 2026, 15:34 UTC Research CVE-2026-102712 CVSS 8.8 EPSS 0.3% agreed2/2

Why readMemory disclosure vulnerability in NetX Duo DTLS parser echoes process memory in ServerHello packets.

A length validation bug in NetX Duo DTLS ClientHello handling compares cipher suite length against total record length instead of remaining payload bytes. An unauthenticated peer can force an out-of-bounds read of up to 255 bytes that are reflected directly into the ServerHello response, disclosing adjacent heap memory.

nvd.nist.gov → (opens in a new tab)

CVE-2026-102716 (CVSS 8.7): An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session header the parser cannot con (opens in a new tab)

NVD ·2 Oct 2026 ·fetched 2 Oct 2026, 15:34 UTC Research CVE-2026-102716 CVSS 8.7 EPSS 0.3% agreed2/2

Why readUnauthenticated RTSP server packet pool exhaustion DoS in NetX Duo caused by unreleased error buffers.

When parsing malformed Session headers in RTSP requests, NetX Duo returns raw error codes directly rather than mapping them to RTSP status codes. This skips packet cleanup logic in _nx_rtsp_server_error_response_send, leaking response packets and draining the global server packet pool after a handful of requests.

nvd.nist.gov → (opens in a new tab)

CVE-2026-76504 | Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability | Reversed by Horizon3 (opens in a new tab)

Horizon3 Attack Team ·Horizon3 ·1 Oct 2026 ·fetched 1 Oct 2026, 03:36 UTC Must read Research CVE-2026-76504 agreed2/2

Why readExploitation and CISA KEV listing details for critical Cisco Catalyst SD-WAN Manager flaw CVE-2026-76504.

Cisco Catalyst SD-WAN Manager contains a critical unauthenticated API authentication bypass rated CVSS 9.8 that grants administrative access. Added to the CISA KEV catalog following confirmed active exploitation, Horizon3 details the vulnerability mechanics and exposure implications.

horizon3.ai → (opens in a new tab)

16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rows (opens in a new tab)

The Register Security ·1 Oct 2026 ·fetched 1 Oct 2026, 07:38 UTC Research agreed2/2

Why readDetails an authentication signature flaw in Microsoft's internal Titan analytics service that exposed administrative database access.

A security researcher uncovered an authentication flaw in Microsoft's internal Titan analytics API hosted on Azure Cloud Services. Because the service failed to validate JWT signatures on login tokens, unauthorized administrative SQL queries could be issued against backend databases holding trillions of rows. Microsoft has since patched the flaw.

theregister.com → (opens in a new tab)

Here We Go Again (Citrix NetScaler DTLS Preauth Memory Overflow CVE-2026-88772) (opens in a new tab)

watchTowr Labs ·Sina Kheirkhah (@SinSinology) ·29 Sep 2026 ·fetched 29 Sep 2026, 15:41 UTC Research CVE-2026-88772 EPSS 1.3% agreed3/3

Why readA full walkthrough of a pre-authentication DTLS memory overflow in the appliance that sits in front of everything else you own.

watchTowr reconstructs CVE-2026-88772 in the NetScaler DTLS handling path, reachable before any authentication, and uses the teardown to argue that the hardened security appliance posture is mostly branding. This is primary research with enough technical detail to build detection or confirm a patch actually closes the path, and it follows a companion post on a second NetScaler issue the same week. Given the exploitation history of internet facing NetScaler Gateway, treat it as a patch now item rather than a reading item.

labs.watchtowr.com → (opens in a new tab)

Zilliz / Attu | 2.6.5 (opens in a new tab)

Bishop Fox ·29 Sep 2026 ·fetched 29 Sep 2026, 23:37 UTC Research agreed3/3

Why readA clean two-bug chain that goes from unauthenticated request proxying to full Kubernetes namespace takeover, and a reminder that regex is the wrong tool for blocking private IP ranges.

Bishop Fox found that Zilliz Attu 2.6.5 exposes an unauthenticated proxy endpoint, and that the regex intended to block requests to private addresses can be bypassed. Chained, the two give an attacker arbitrary server side requests from inside the cluster, which the researchers rode to complete takeover of the Kubernetes namespace in a cloud deployment. Attu is the web UI for Milvus, so anyone running a vector database stack should assume it is reachable and move to 3.0.0.

bishopfox.com → (opens in a new tab)

CVE-2026-96812 (CVSS 8.8): Improper Exposure of Resource to Wrong Sphere in the host file helper (gofer) in Google gVisor prior to commit 573a9e73cf844f on Linux platforms with (opens in a new tab)

NVD ·28 Sep 2026 ·fetched 28 Sep 2026, 11:40 UTC Research CVE-2026-96812 CVSS 8.8 EPSS 0.1% agreed2/2

Why readA /dev/cuse node inside a container image passes through gVisor's gofer to the host, turning a sandbox boundary into host root code execution.

In Google gVisor before commit 573a9e73cf844f, the host file helper (gofer) fails to restrict a CUSE character device node included in a container image: opening it reaches the real host device. An attacker who can deploy container images into a sandbox can register a host device and abuse CUSE's unrestricted ioctl handling to overwrite root udev helper memory, achieving root execution on the host. Only Linux hosts with CUSE enabled are affected, but the whole point of gVisor is that this should not be possible.

nvd.nist.gov → (opens in a new tab)

CVE-2026-84458 (CVSS 9.1): Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on initial logon" setting is enab (opens in a new tab)

NVD ·28 Sep 2026 ·fetched 28 Sep 2026, 11:40 UTC Research CVE-2026-84458 CVSS 9.1 EPSS 0.4% agreed2/2

Why readZammad before 7.1.2 binds SSO identities to local accounts on the provider-reported email alone, so anyone with an Azure AD tenant can log in as an existing agent or admin.

With "Automatic account link on initial logon" enabled, Zammad matches an incoming third-party identity to a local account by email address without checking that the identity provider verified ownership of it. Because Zammad ships a multi-tenant Microsoft 365 /common app registration by default, an attacker who controls any identity in any Azure AD tenant can set that identity's email to a victim's address and authenticate as them, bypassing the local password entirely, including for administrators. Zammad now honours the xms_edov ID token claim and treats a missing claim as unverified; fixed in 7.1.2.

nvd.nist.gov → (opens in a new tab)

Athena's disclosures begin (opens in a new tab)

Chainguard ·28 Sep 2026 ·fetched 28 Sep 2026, 19:39 UTC Research agreed3/3

Why readFourteen real Java vulnerabilities that were fixed upstream, sometimes years ago, but never got a CVE, which means your scanner has been calling affected versions clean.

Chainguard has published the first batch from its Athena programme: 14 silent vulnerabilities in Java projects, one critical, one high, eight medium and four low, all already fixed at HEAD and all absent from vulnerability databases. Patches are in a public repository and four of the more serious cases are walked through in the post. The broader point is the class of bug rather than this batch, since silent upstream fixes leave no signal for scanners and Chainguard says thousands more are queued behind these.

chainguard.dev → (opens in a new tab)

CVE-2026-93834 (CVSS 8.8): A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concur (opens in a new tab)

NVD ·28 Sep 2026 ·fetched 28 Sep 2026, 11:40 UTC Research CVE-2026-93834 CVSS 8.8 EPSS 0.4% agreed2/2

Why readA race between QEMU's main thread and a 9pfs worker gives a malicious guest a path out of the shared directory and, from there, host code execution as the QEMU user.

Concurrent Tlcreate and Twalk requests in QEMU's 9pfs subsystem trigger a use-after-free that lets a guest user craft a fid path containing stale heap data. That bypasses the directory traversal restrictions and escapes the shared directory boundary, giving arbitrary host file read and write and ultimately code execution as the QEMU process user, which is a full VM escape. Relevant to anyone using 9p/virtio-9p passthrough for guest filesystem sharing.

nvd.nist.gov → (opens in a new tab)

CVE-2026-100612 (CVSS 8.6): Capgo (capgo.app) through version 12.261.0 contains an incomplete access-control fix for the public.sso_providers table. Migration 20260826100000_sso_ (opens in a new tab)

NVD ·28 Sep 2026 ·fetched 28 Sep 2026, 19:39 UTC Research CVE-2026-100612 CVSS 8.6 EPSS 0.3% agreed3/3

Why readShows concretely why Postgres RLS is not access control: row policies constrain which row you update, not which columns, and Capgo's SSO trust anchor was left writable.

Capgo through 12.261.0 shipped migration 20260826100000 with a BEFORE UPDATE guard freezing only dns_verified_at, domain, status and enforce_sso, leaving provider_id, metadata_url and attribute_mapping writable while the table is granted ALL to anon and authenticated. An org_admin holding org.update_settings can PATCH provider_id over PostgREST to an IdP they control, then authenticate through it while asserting the org owner's email, and the merge routine attaches their SSO identity. The column-level gap in an RLS-only model is the transferable lesson here.

nvd.nist.gov → (opens in a new tab)

CVE-2026-62262 (CVSS 9.1): Piwigo is a full featured open source photo gallery application for the web. In 17.0.0beta1 and earlier, when rating is enabled, an unauthenticated gu (opens in a new tab)

NVD ·28 Sep 2026 ·fetched 28 Sep 2026, 11:40 UTC Research CVE-2026-62262 CVSS 9.1 EPSS 0.3% agreed2/2

Why readUnauthenticated SQL injection in Piwigo through 17.0.0beta1 with no fixed version available, reachable through the public search flow whenever rating is enabled.

An unauthenticated guest can call pwg.images.filteredSearch.create with a crafted ratings[] value and then open the returned search URL. include/ws_functions/pwg.images.php stores the value unvalidated into the search rules, and include/functions_search.inc.php integer-casts only the lower rating bound while concatenating the raw upper bound straight into SQL, giving error-based and blind extraction plus time delays. No patched release existed at time of publication, so internet-facing galleries need rating disabled or the endpoint blocked.

nvd.nist.gov → (opens in a new tab)

CVE-2026-100618 (CVSS 8.7): Capgo (capgo.app) is affected by an authorization flaw in the app icon update path. The PUT /app/:id endpoint accepts a user-controlled `icon` value, (opens in a new tab)

NVD ·28 Sep 2026 ·fetched 28 Sep 2026, 19:39 UTC Research CVE-2026-100618 CVSS 8.7 EPSS 0.2% agreed3/3

Why readA confused-deputy in Capgo: a scoped write API key makes a service-role worker rewrite private storage objects it cannot touch directly, and there is no patch.

PUT /app/:id accepts a user-controlled icon value and stores it in public.apps.icon_url without checking the path belongs to that app's image namespace. The update fires the on_app_update trigger, whose worker calls cleanStoredImageMetadata() under supabaseAdmin() and re-uploads the referenced object with upsert: true, so an app-limited key can overwrite out-of-scope private images such as an organization logo despite Storage RLS. All versions affected; no fixed version existed at advisory time.

nvd.nist.gov → (opens in a new tab)

Master Key Included: Detecting SolarWinds ARM CVE-2026-28326 (opens in a new tab)

Bishop Fox ·25 Sep 2026 ·fetched 25 Sep 2026, 19:35 UTC Research CVE-2026-28326 EPSS 0.7% agreed2/2

Why readUnauthenticated RCE as NT AUTHORITY\SYSTEM in SolarWinds Access Rights Manager via a client-auth secret identical on every install, reachable on TCP 55555, with a safe two-request vulnerability check.

CVE-2026-28326 is a hardcoded static key in SolarWinds Access Rights Manager: the same client-authentication secret ships with every install, so anything that can reach TCP 55555 gets to a .NET deserialization sink. Bishop Fox confirmed execution as NT AUTHORITY\SYSTEM and released a detection tool that fingerprints a vulnerable asset with two safe requests. SolarWinds fixed it in 2026.2.1.7 on 17 September 2026 and rated it 8.8 on an adjacent-network vector; since ARM is the software deciding who can open which mailbox and file, audit how far port 55555 actually reaches before trusting that AV:A.

bishopfox.com → (opens in a new tab)

CVE-2026-96454 (CVSS 8.2): Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and t (opens in a new tab)

NVD ·25 Sep 2026 ·fetched 25 Sep 2026, 23:38 UTC Research CVE-2026-96454 CVSS 8.2 EPSS 0.3% agreed2/2

Why readEvery Pake-generated desktop app accepts IPC from any HTTPS origin, and Tauri's ACL never checks app-registered commands, so untrusted page script can call download_file.

Two inherited template settings combine: capabilities/default.json grants IPC with "remote": {"urls": ["https://*.*"]}, and "withGlobalTauri": true in tauri.conf.json puts window.__TAURI__.core.invoke() in reach of ordinary page JavaScript. The sharper finding is that Tauri's access control list only gates plugin: commands; commands registered through generate_handler! are never checked, so they need no permission entry and get none. Pake registers download_file that way, which is why any script in the wrapped site can drive native functionality.

nvd.nist.gov → (opens in a new tab)

CVE-2026-83603 (CVSS 8.4): Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in src/collectors/u (opens in a new tab)

NVD ·25 Sep 2026 ·fetched 25 Sep 2026, 03:36 UTC Research CVE-2026-83603 CVSS 8.4 EPSS 0.3% agreed2/2

Why readNetdata's setuid-root ndsudo helper can be pointed at an attacker-controlled UNIX socket whose reply reaches pickle.loads(), giving root on any host with fail2ban-client installed.

Before 2.10.4, the `fail2ban-client-status-socket` command in `src/collectors/utils/ndsudo.c` accepts a `--socket_path` supplied by the low-privileged netdata service account. Because fail2ban's `CSocket.receive()` in `fail2ban/client/csocket.py` deserialises the socket response with pickle.loads(), a malicious socket turns the root-run client into arbitrary code execution as root. The chain is a clean example of a setuid helper trusting a caller-controlled path into an unsafe deserialiser; fixed in 2.10.4 and nightly 2.10.0-782, and Netdata plus fail2ban is a common pairing on internet-facing Linux hosts.

nvd.nist.gov → (opens in a new tab)

CVE-2026-96455 (CVSS 8.8): The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachy_mini/daemon/app/rou (opens in a new tab)

NVD ·25 Sep 2026 ·fetched 25 Sep 2026, 23:38 UTC Research CVE-2026-96455 CVSS 8.8 EPSS 0.2% agreed2/2

Why readUnauthenticated POST /apps/install on the Reachy Mini robot daemon installs any Hugging Face Space as a Python package, which is arbitrary code execution by design.

The handler in src/reachy_mini/daemon/app/routers/apps.py depends only on Depends(get_app_manager) and checks no credential, so any caller can supply an AppInfo body naming a Hugging Face Space. install_package in src/reachy_mini/apps/sources/local_common_venv.py then installs it via uv or pip, running the package's own build and setup code. Reach depends on _resolve_bind_host in daemon/app/main.py: the wireless model binds 0.0.0.0, everything else binds loopback, which is why the vector is AV:A rather than fully remote.

nvd.nist.gov → (opens in a new tab)

Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4) (opens in a new tab)

Datadog Security Labs ·24 Sep 2026 ·fetched 24 Sep 2026, 15:37 UTC Research agreed2/2

Why readFull exploit chain for an unauthenticated RCE in an AI coding agent with 16 million monthly users, plus the version check to see whether your developers are exposed.

Datadog Security Labs details GHSA-632h-h47v-g4x4, where a content-type confusion on OpenCode's /global/upgrade endpoint turns an underlying code injection into reachable remote code execution against a developer workstation. The write-up walks the discovery and the attack flow end to end; OpenCode 1.18.22 is the fixed release. Note that Anomaly declined to request a CVE on principle, so this will not surface in vulnerability feeds keyed on CVE identifiers, which makes inventory by version the only reliable check.

securitylabs.datadoghq.com → (opens in a new tab)

CVE-2026-65634 (CVSS 8.2): Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote unauthenticated attacker to cause denial of servic (opens in a new tab)

NVD ·24 Sep 2026 ·fetched 24 Sep 2026, 19:37 UTC Research CVE-2026-65634 CVSS 8.2 EPSS 0.4% agreed2/2

Why readA crafted DER OBJECT IDENTIFIER sent during the TLS handshake burns roughly 13 seconds of CPU per message on any Erlang/OTP service, pre-authentication.

asn1rtt_ber:dec_subidentifiers/3 and its PER equivalent asn1rtt_per_common:dec_subidentifiers/3 accumulate base-128 subidentifiers with (Av bsl 7) + H into an unbounded integer, making each continuation byte linear in the bits already accumulated and the whole decode quadratic. A single arc of about 262 KB of continuation bytes costs roughly 13 seconds of CPU on typical hardware, and the JER helper asn1rtt_jer:json2oid/1 has the same unbounded-integer parsing from dot-separated JSON OIDs. The vulnerable decoder is generated into every ASN.1 module containing an OBJECT IDENTIFIER, which puts it in the TLS handshake path of anything built on OTP. CVSS 8.2, remote and unauthenticated.

nvd.nist.gov → (opens in a new tab)

CVE-2026-90882 (CVSS 8.7): The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin together with Access-Control-Allow-Credentials: true (opens in a new tab)

NVD ·24 Sep 2026 ·fetched 24 Sep 2026, 19:37 UTC Research CVE-2026-90882 CVSS 8.7 EPSS 0.4% agreed2/2

Why readOrigin reflection plus Allow-Credentials on open-vsx.org's /user/ endpoints let any web page mint a publish-capable personal access token for a logged-in extension publisher.

The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the requesting origin alongside Access-Control-Allow-Credentials: true on authenticated /user/ endpoints, exposing /user, /user/tokens, /user/namespaces, /user/extensions and namespace member lists to any origin. Because /user/csrf was readable the same way, CSRF protection on write endpoints fell too, so an attacker page could call /user/token/create and exfiltrate a token with publish and delete rights over the victim's namespaces. The headers came from the CDN/edge layer rather than the application, which sets allowCredentials(true) only against a single exact origin from ovsx.webui.url; the interesting part is that no software configuration produced the flaw, and the same class of edge-layer override applies to anyone fronting a credentialed API with a CDN.

nvd.nist.gov → (opens in a new tab)

CVE-2026-74766 (CVSS 8.4): Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that reallocates the output buffer i (opens in a new tab)

NVD ·24 Sep 2026 ·fetched 24 Sep 2026, 19:37 UTC Research CVE-2026-74766 CVSS 8.4 EPSS 0.2% agreed2/2

Why readThe fix for CVE-2016-15059 introduced a heap use-after-free in Net::IDN::Punycode, triggered by decoding an attacker-supplied label.

decode_punycode in the XS backend computes the insertion pointer before growing the output buffer, and the realloc updates every pointer except that one, so the subsequent move and code point write go through freed heap. The buffer starts at twice the label length and any code point above U+FFFF takes four output bytes, so a label of such code points reliably forces the reallocation. Versions 2.301 up to 2.590 are affected, the pure-Perl backend is not, and 2.301 was itself the CVE-2016-15059 fix.

nvd.nist.gov → (opens in a new tab)

CVE-2026-87078 (CVSS 9.1): Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode. The XS backend alloca (opens in a new tab)

NVD ·24 Sep 2026 ·fetched 24 Sep 2026, 19:37 UTC Research CVE-2026-87078 CVSS 9.1 EPSS 0.7% agreed2/2

Why readEvery rejected punycode label leaks twice its length in heap from Net::IDN::Punycode's XS backend, with no valid input required.

decode_punycode in the XS backend allocates the return scalar before validating input, sizing it at twice the input length, and frees it only on the success path. All three croak paths that reject a label therefore leak the scalar and its buffer, and nothing bounds label length in the to-Unicode direction because the 63-byte DNS limit is checked only when encoding to ASCII. Versions 2.302 up to 2.590 are affected; a remote sender can grow a long-lived Perl process until it dies.

nvd.nist.gov → (opens in a new tab)

Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127) (opens in a new tab)

watchTowr Labs ·Sina Kheirkhah (@SinSinology) ·23 Sep 2026 ·fetched 23 Sep 2026, 23:39 UTC Must read Research CVE-2026-94127 EPSS 1.4% agreed3/3

Why readPrimary exploitation write-up of an unauthenticated heap overflow in BIG-IP's Authorization header parsing that reaches code execution on a management surface many organisations expose.

watchTowr walks through CVE-2026-94127 from the parsing flaw in F5 BIG-IP's handling of the HTTP Authorization header to a working heap corruption primitive and remote code execution, with no credentials required. The detail on how the overflow is reached and controlled is the part worth reading, since it tells you what to hunt for in logs and where the patch actually matters. Treat internet-facing BIG-IP management interfaces as the immediate exposure.

labs.watchtowr.com → (opens in a new tab)

CVE-2026-82412 (CVSS 8.8): ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, the vulnerability-scan endpoints scripts/lua/rest/v2/add/host/to_sc (opens in a new tab)

NVD ·23 Sep 2026 ·fetched 23 Sep 2026, 07:37 UTC Research CVE-2026-82412 CVSS 8.8 EPSS 0.4% agreed3/3

Why readntopng before 6.7.260717 passes the scan_ports parameter into an nmap command line for any authenticated user, and the endpoint accepts GET so CSRF reaches it too.

The vulnerability-scan endpoints scripts/lua/rest/v2/add/host/to_scan.lua and schedule_vulnerability_scan.lua take scan_ports without an admin gate and validate it only with validateSingleWord, which allows shell metacharacters; vs_utils.lua then concatenates it into nmap_scan_host and runs it through ntop.execCmd, execCmdAsync or popen. Any non-admin account gets OS command execution as the ntopng process user wherever nmap is installed. Because ntopng's CSRF check only covers POST bodies and these endpoints answer GET, an attacker with no credentials can fire it through a logged-in user's browser. Upgrade to 6.7.260717.

nvd.nist.gov → (opens in a new tab)

CVE-2026-53940 (CVSS 8.8): Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parse_entry_point_ (opens in a new tab)

NVD ·23 Sep 2026 ·fetched 23 Sep 2026, 07:37 UTC Research CVE-2026-53940 CVSS 8.8 EPSS 0.4% agreed3/3

Why readA malicious conda noarch:python package can write executables outside the environment prefix or silently overwrite an existing entry point, giving code execution the next time it is run.

Before conda 26.5.2, parse_entry_point_def in conda/common/path/python.py accepted an unvalidated entry-point command from a package's info/link.json, and PrefixPathAction.target_full_path joined it to the prefix without checking the result stayed inside bin or Scripts. Path separators, traversal segments or an absolute path let create_python_entry_point write a wrapper anywhere the parent directory already exists, or clobber an in-prefix entry point that later executes attacker Python as the installing user. This fires during default install and environment transactions, which makes it a real supply-chain path for anyone pulling packages from channels they do not fully control.

nvd.nist.gov → (opens in a new tab)

CVE-2026-62371 (CVSS 8.8): KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.12.0 until 1.21.2 (opens in a new tab)

NVD ·23 Sep 2026 ·fetched 23 Sep 2026, 07:37 UTC Research CVE-2026-62371 CVSS 8.8 EPSS 0.5% agreed3/3

Why readKubeEdge edge nodes execute arbitrary commands when a NodeUpgradeJob carries shell metacharacters in spec.version or spec.image; fixed in 1.21.2, 1.22.2 and 1.23.1.

The v1alpha2 NodeUpgradeJob handler in edge/pkg/taskmanager/actions/nodeupgradejob.go concatenates user-controlled spec.version and spec.image into the keadm upgrade edge shell command. Anyone with RBAC to create or update NodeUpgradeJob resources therefore gets code execution on targeted edge nodes at the privilege of the upgrade process, which turns a fairly ordinary-looking cluster permission into node compromise. Affected from 1.12.0; upgrade to 1.21.2, 1.22.2 or 1.23.1 and audit who holds write access to that CRD.

nvd.nist.gov → (opens in a new tab)

CVE-2026-79920 (CVSS 9.9): Ajenti is a Linux & BSD modular server admin panel. Prior to version 2.2.16, any authenticated user can call /api/core/tasks/start to enqueue InstallP (opens in a new tab)

NVD ·23 Sep 2026 ·fetched 23 Sep 2026, 11:39 UTC Research CVE-2026-79920 CVSS 9.9 EPSS 0.4% agreed3/3

Why readAny authenticated Ajenti user below 2.2.16 can reach root code execution by enqueuing a plugin install that shells out to pip as root.

In Ajenti before 2.2.16, /api/core/tasks/start accepts InstallPlugin, UnInstallPlugin and UpgradeAll from plugins/plugins/tasks.py with no plugin-management authorization check. The name and version fields are concatenated into a pip package specification and the task worker runs pip as root, so a low-privileged panel user gets full host compromise. Fixed in 2.2.16; EPSS is currently low (0.0036) but the panel is internet-facing by design.

nvd.nist.gov → (opens in a new tab)

WordPress: Unauthenticated path traversal leading to conditional RCE (opens in a new tab)

Hacker News ·vntok ·22 Sep 2026 ·fetched 22 Sep 2026, 19:38 UTC Research 80 points agreed3/3

Why readUnauthenticated path traversal in WordPress get_page_template() reaches arbitrary local .php files and chains to RCE via pearcmd.php; fixed in 7.1.2 and backported.

Page-template resolution can be steered to include a readable .php file outside the active theme directories, with no authentication required. Exploitation needs a theme containing a top-level directory whose name begins with page- (Twenty Twelve, Twenty Fourteen, and third-party themes Neve, Hestia and Sydney qualify) plus a usable local target; the well known pearcmd.php PEAR path gives RCE where register_argc_argv is On, which covers the official PHP Docker image and default cPanel setups on PHP before 8.5. WordPress 7.1.2 contains the fix and it has been backported to older branches.

github.com → (opens in a new tab) Discussion (opens in a new tab)

WordPress “Comment2Shell” XSS-to-RCE Chain Lets Unauthenticated Attackers Compromise Servers via Malicious Comments (opens in a new tab)

Orca Security ·The Orca Research Pod ·22 Sep 2026 ·fetched 22 Sep 2026, 23:40 UTC Research CVE-2026-93485 EPSS 0.2% agreed3/3

Why readStored XSS in WordPress Core's wpautop() in wp-includes/formatting.php chains to remote code execution from an unauthenticated comment.

CVE-2026-93485 (CVSS 7.1) sits in the comment rendering pipeline of WordPress Core, where wpautop() mishandles attacker-supplied markup and permits a stored XSS that escalates to full server compromise. The write-up is short on chain detail but the affected component and file are named, and the install base makes this worth scheduling immediately rather than at the next maintenance window.

orca.security → (opens in a new tab)

ZDI-26-719: Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·22 Sep 2026 ·fetched 22 Sep 2026, 23:40 UTC Research CVE-2026-20350 EPSS 0.3% agreed3/3

Why readCVE-2026-20350: Cisco ThousandEyes Virtual Appliance runs a user-supplied DHCP client configuration string through a system call, giving authenticated attackers code execution as root.

The flaw sits in processing of DHCP client configuration data, where a string is used in a system call without validation, so an authenticated attacker gets root on the appliance. ThousandEyes enterprise agents typically sit inside the network with broad visibility, which makes a rooted appliance a useful pivot and monitoring position. Cisco has published a fix in advisory cisco-sa-teva-os-command-W4GAO6jp; EPSS is currently 0.0034 with no reported exploitation.

zerodayinitiative.com → (opens in a new tab)

CVE-2026-94401 (CVSS 8.3): MISP has a file-handling vulnerability that could let certain authenticated users make the server read files or access internal network services. Whe (opens in a new tab)

NVD ·22 Sep 2026 ·fetched 22 Sep 2026, 15:39 UTC Research CVE-2026-94401 CVSS 8.3 EPSS 0.3% agreed3/3

Why readMISP before 2.5.47 turns XML import into arbitrary local file read and SSRF for any user with modify permission.

The XML import path never verified that the uploaded content was actually XML, so a user with modify rights can supply a local file path or a URL instead. A path makes the server read and expose that file; a URL makes MISP issue the request, reaching internal-only services from a host that typically sits with broad network access. The privilege bar here is an ordinary modify-capable account rather than site admin, which makes it the more practically exploitable of the two MISP bugs; fixed in 2.5.47.

nvd.nist.gov → (opens in a new tab)

CVE-2026-93603 (CVSS 10.0): vm2 through 3.12.0 (fixed in 3.12.1) does not correctly handle a nullish `this` receiver in the apply trap of its bridge (lib/bridge.js): when sandbox (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 23:35 UTC Must read Research CVE-2026-93603 CVSS 10.0 EPSS 0.4% agreed3/3

Why readThe cleanest of the vm2 escapes: calling any sloppy-mode host function with no receiver returns a live proxy of the host global, giving process and child_process from inside the sandbox.

In vm2 through 3.12.0 (fixed in 3.12.1) the apply trap in lib/bridge.js passes a nullish this straight through to the host call, so V8 substitutes the host realm global object. Any of fn(), a detached method, fn.call(), fn.apply(undefined), Reflect.apply(fn, undefined, []) or fn.bind()() on a non-strict host function returns that global wrapped as a sandbox proxy, reaching process.getBuiltinModule('child_process').execSync for arbitrary command execution. Exploitation needs only one non-strict host function exposed to the sandbox; strict-mode and ES module host functions are unaffected. Upgrade to 3.12.1 or move off vm2.

nvd.nist.gov → (opens in a new tab)

CVE-2026-93606 (CVSS 10.0): vm2 (npm) versions 3.12.0 and earlier contain a sandbox escape in `VM` and `NodeVM`. When an embedder exposes a host API that returns a host-realm Pro (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 23:35 UTC Must read Research CVE-2026-93606 CVSS 10.0 EPSS 0.5% agreed3/3

Why readSandbox escape in vm2 3.12.0 and earlier: overwriting Symbol.species on a host Promise defeats the bridge's rejection sanitizer and hands sandboxed code a live host proxy.

vm2's rejection sanitizer (hostPromiseSanitizeReject, makeSanitizedPromiseCallback, normalizeHostPromiseCallbacks in lib/bridge.js) only wraps then/catch rejection slots holding a function, and the Symbol.species neutralization is installed solely on the sandbox intrinsic Promise.prototype, so host-realm Promises are untouched. Sandboxed code overwrites p.constructor[Symbol.species] and calls p.then() with no onRejected handler; V8 substitutes its internal Thrower, re-throwing the raw host rejection value into an attacker-captured closure. If that value is host-pivotable, for example a host process object, the result is arbitrary code execution on the host. Applies wherever an embedder exposes a host API returning a host Promise.

nvd.nist.gov → (opens in a new tab)

CVE-2026-54460 (CVSS 9.8): OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to 1.1.1, POST /api/auth/passkeys ac (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 19:37 UTC Research CVE-2026-54460 CVSS 9.8 EPSS 0.6% agreed2/2

Why readA passkey enrollment endpoint that accepts a body-supplied userId without a session, plus a login oracle to find the right userId, is a pattern worth checking in your own WebAuthn code.

In OpenReception before 1.1.1, POST /api/auth/passkeys accepts an attacker-supplied userId and public key with no authenticated session, never calls WebAuthnService.verifyRegistration, and does not bind enrollment to locals.user.id. An attacker harvests candidate userId values from the public booking bootstrap and GET /api/tenants/[id]/appointments/staff-public-keys, injects a controlled key, then uses the login check comparing verificationResult.userId against the email-resolved account as an oracle to confirm the match and obtain a STAFF session. The generalisable lesson is that unbound credential registration turns passkeys from a phishing defence into an unauthenticated account takeover.

nvd.nist.gov → (opens in a new tab)

CVE-2026-54734 (CVSS 10.0): Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-supplied parameters into outbound r (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 19:37 UTC Research CVE-2026-54734 CVSS 10.0 EPSS 0.4% agreed2/2

Why readBidder adapters in Prebid Server Java before 3.43.0 interpolate user-supplied parameters into outbound URLs without HttpUtil validation, giving unauthenticated SSRF to cloud metadata endpoints.

Prebid Server Java below 3.43.0 builds outbound bid requests by interpolating attacker-controllable parameters into URLs without validating the resulting domain or path segment through HttpUtil. Anyone able to supply bid-request parameters can steer the server at internal services or instance metadata endpoints with the server's own network position, which is why it carries CVSS 10.0 despite an EPSS of 0.0036. Unlike the Microsoft service CVEs in this batch this is self-hosted software, so the upgrade to 3.43.0 is on the operator.

nvd.nist.gov → (opens in a new tab)

CVE-2026-89036 (CVSS 8.7): Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 07:42 UTC Research CVE-2026-89036 CVSS 8.7 EPSS 0.7% agreed3/3

Why readAppwrite before 2.0.0 lets a functions.write user reach RCE by smuggling TAB characters through escapeshellcmd into a GNU tar argument vector and using --checkpoint-action=exec.

The providerRootDirectory parameter is sanitised with escapeshellcmd instead of escapeshellarg and left unquoted, so TAB characters survive and are read as argument separators when the tar command line is assembled. That allows injection of arbitrary tar options, and --checkpoint-action=exec turns it into command execution as the builds worker process user. The escapeshellcmd-versus-escapeshellarg confusion plus TAB as a separator is a reusable primitive worth remembering for other PHP codebases that shell out.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92958 (CVSS 8.4): vm2 through 3.11.6 contains a builtin-module denylist bypass in NodeVM. When the embedder uses the builtin wildcard together with negative entries (e. (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 03:38 UTC Research CVE-2026-92958 CVSS 8.4 EPSS 0.3% agreed3/3

Why readvm2 through 3.11.6 lets sandboxed code reach the filesystem via require('fs/promises') even when the embedder explicitly denied fs.

lib/builtin.js matches negative denylist entries by exact module name, so a config of builtin: ['*', '-fs', '-child_process'] blocks fs but not its subpaths, and node: prefix handling is inconsistent enough that -node:fs/promises fails to block the bare form. Host file creation and writing were confirmed through fsp.writeFile(), with cp, mkdir, rename, rm and the read operations equally reachable. Fixed in 3.11.7; anyone still using vm2 as a security boundary for untrusted code should audit their builtin wildcard configuration now.

nvd.nist.gov → (opens in a new tab)

CVE-2026-54626 (CVSS 9.8): SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, the TGA_ (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 19:37 UTC Research CVE-2026-54626 CVSS 9.8 EPSS 0.5% agreed2/2

Why readAn incomplete fix: the pixel-count clamp added for CVE-2026-40494 in SAIL does not constrain per-pixel write width, so crafted RLE TGA files still corrupt the heap.

In SAIL 0.9.10 and earlier, the TGA_INDEXED_RLE path (image_type == 9) allocates using the one-byte-per-pixel SAIL_PIXEL_FORMAT_BPP8_INDEXED format from tga_private_sail_pixel_format() in src/sail-codecs/tga/helpers.c, while sail_codec_load_frame_v8_tga() derives a two-to-four-byte pixel_size from an attacker-controlled header bpp of 9 to 32. Loading a crafted colour-mapped RLE TGA via sail_load_from_file() or sail_load_from_memory() writes controlled bytes past the heap pixel buffer, giving heap corruption or potential code execution. This is explicitly an incomplete fix of CVE-2026-40494, so anyone who patched that one is still exposed until 1.0.0.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92916 (CVSS 8.7): Grav is a flat-file CMS. In Grav 1.7.0 through 1.7.53.2 and 2.0.0 through 2.0.21, when the debugger is enabled (system.debugger.enabled: true, which i (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 03:38 UTC Research CVE-2026-92916 CVSS 8.7 EPSS 0.4% agreed3/3

Why readWith the debugger enabled, Grav exposes the Clockwork profiler unauthenticated at any path containing /__clockwork/, leaking session cookies, plaintext login passwords and SMTP credentials.

InitializeProcessor::handleDebuggerRequest() intercepts the path during bootstrap and hands it to Debugger::debuggerRequest(), which performs no user lookup, IP restriction or Clockwork authenticator check, and supports anonymous pagination over the whole stored history. Because censored defaults to false, stored records include raw cookies (the Grav session cookie value is the PHP session id, so an admin session can be resumed), the full parsed request body (login posts data[username] and data[password], and Clockwork's password filter only inspects top-level keys, so passwords sit in plaintext), and the entire system and plugin configuration. Affects 1.7.0 through 1.7.53.2 and 2.0.0 through 2.0.21; the debugger is not on by default, which is the only thing keeping this off the emergency list.

nvd.nist.gov → (opens in a new tab)

CVE-2026-93605 (CVSS 10.0): vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUS_BUILTINS denylist omits child_process despite blocking ot (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 23:35 UTC Research CVE-2026-93605 CVSS 10.0 EPSS 0.4% agreed3/3

Why readvm2's DANGEROUS_BUILTINS denylist omits child_process, so NodeVM configured with builtin:['*'] lets sandboxed code require it and run host commands.

NodeVM before 3.12.1 blocks other host-spawning modules but leaves child_process off the DANGEROUS_BUILTINS list. Any embedder running NodeVM with builtin:['*'] or an explicit child_process allowance is handing untrusted script arbitrary command execution on the host. Less severe than the bridge escapes in the same batch because it depends on a permissive configuration, but it is a trivial one-line audit of your NodeVM options.

nvd.nist.gov → (opens in a new tab)

CVE-2026-69197 (CVSS 8.7): Umbraco is an ASP.NET CMS. Prior to 13.15.1, 17.5.3, and 18.0.2, the Content Delivery API applies member and Public Access checks to the directly requ (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 07:42 UTC Research CVE-2026-69197 CVSS 8.7 EPSS 0.4% agreed3/3

Why readUmbraco's Content Delivery API enforces member and Public Access checks only on the directly requested node, so ?expand on an unprotected node leaks protected content through Content Picker references.

Prior to 13.15.1, 17.5.3 and 18.0.2, nodes referenced through Content Picker or Multi-Node Tree Picker properties, including pickers nested in Block List, Block Grid or Rich Text Editor blocks, are serialised without access checks. With DeliveryApi:PublicAccess enabled an anonymous caller retrieves a protected node's name, route and id and then its full property values via ?expand; where the API is gated by the organisation-wide key, a key holder bypasses per-node Public Access the same way. RequestContextOutputExpansionStrategyV2 and ElementOnlyOutputExpansionStrategy also bypass allowed and disallowed content-type alias restrictions, while direct requests for the protected node still return 401, so this will not show up in obvious access logs.

nvd.nist.gov → (opens in a new tab)

CVE-2026-54627 (CVSS 9.8): SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, psd_priv (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 19:37 UTC Research CVE-2026-54627 CVSS 9.8 EPSS 0.4% agreed2/2

Why readA colour-mode versus bit-depth mismatch in SAIL's PSD codec: a one-bit row buffer receiving one byte per pixel, distinct from the two earlier GHSAs.

In SAIL 0.9.10 and earlier, psd_private_sail_pixel_format() in src/sail-codecs/psd/helpers.c maps a single-channel Bitmap-mode PSD to SAIL_PIXEL_FORMAT_BPP1_INDEXED without checking that the file depth is one, while sail_codec_load_frame_v8_psd() accepts depth == 8 and writes a full byte per pixel. A crafted PSD loaded through sail_load_from_file() or sail_load_from_memory() writes past every heap row, producing memory corruption or potential code execution. The advisory notes this is distinct from GHSA-rcqx-gc76-r9mv and GHSA-wcj8-hxxf-pq2c, and it is fixed in 1.0.0 along with the TGA issue.

nvd.nist.gov → (opens in a new tab)

CVE-2026-88952 (CVSS 9.1): Improper Authentication vulnerability in team-alembic AshAuthentication allows an attacker to be signed in as another user by linking an OAuth2 identi (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 07:42 UTC Research CVE-2026-88952 CVSS 9.1 EPSS 0.4% agreed3/3

Why readAn OAuth2 identity can be linked to someone else's AshAuthentication account, and the upsert rewrites the victim's email so account recovery lands with the attacker.

OAuth2.UserResolver.resolve/3 matches an existing account using the register action's upsert_identity keys, then gates linking on email_trusted?/2, which only reads the provider's email_verified boolean and never compares the provider email against the matched account's email. Under any upsert_identity other than email the gate is vacuous, so an attacker with their own verified provider email is attached to an account matched on some other attribute and issued a session. The same unguarded path applies in OAuth2.SignInPreparation when registration_enabled? is false, and the upsert overwrites the matched account's email address, extending the takeover to future password recovery.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92917 (CVSS 8.7): Grav is a flat-file CMS. In versions 2.0.0-rc.1 through 2.0.21, the Twig content sandbox fails to restrict the dump and serialize filters (print_r, va (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 03:38 UTC Research CVE-2026-92917 CVSS 8.7 EPSS 0.3% agreed3/3

Why readGrav 2.x's Twig content sandbox never actually engages for dump filters, so a page editor can render {{ config|print_r }} and dump every plugin secret.

GravExtension::assertSandboxDumpSafe() calls SandboxExtension::isSandboxed() with no Source argument, which reports only the global sandbox flag Grav never sets, so the guard from GHSA-mc5q-6hpj-rp7j is dead code and print_r, vardump, json_encode, yaml_encode and string stay reachable. print_r reflects the real Config object held in a private property of the SandboxConfig facade, defeating that facade's path redaction and exposing SMTP credentials, API tokens, webhook secrets and cache backend passwords. Affects 2.0.0-rc.1 through 2.0.21 and is fixed in 2.0.22, where the filters are registered with needs_is_sandboxed; Grav 1.7 has no Twig content sandbox and is unaffected.

nvd.nist.gov → (opens in a new tab)

CVE-2026-82761 (CVSS 9.1): Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding a leaked magic link to re (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 07:42 UTC Research CVE-2026-82761 CVSS 9.1 EPSS 0.4% agreed3/3

Why readAshAuthentication magic link tokens marked single_use_token? can be redeemed concurrently any number of times, so a leaked link yields multiple full user tokens.

Sign-in verifies the JWT with Jwt.verify/4 and only revokes afterwards: MagicLink.SignInPreparation revokes in a Query.after_action callback and MagicLink.SignInChange in an after_transaction hook that runs post-commit, so nothing serialises the validity check against consumption. TokenResource.Actions.revoke/3 writes the revocation as an upsert, meaning a concurrent duplicate revoke succeeds silently rather than conflicting and no request loses the race. Affects ash_authentication 3.9.0 before 4.15.0 and 5.0.0-rc.0 before 5.0.0-rc.14.

nvd.nist.gov → (opens in a new tab)

CVE-2026-91039 (CVSS 9.1): Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who operates one identity-provider connection of (opens in a new tab)

NVD ·20 Sep 2026 ·fetched 20 Sep 2026, 07:42 UTC Research CVE-2026-91039 CVSS 9.1 EPSS 0.4% agreed3/3

Why readash_authentication's dynamic_oidc per-connection identity namespacing never actually takes effect, so whoever runs one IdP connection can sign in as a user established through a different one.

The strategy is meant to write each UserIdentity row's strategy field as "<name>/<connection_id>", but __connection_id__ is only set on the ephemeral per-request struct built in dynamic_oidc/plug.ex, while DynamicOidc.IdentityChange.change/3 re-fetches the compile-time strategy through Info.strategy_for_action and gets the defstruct default of nil. OAuth2.identity_strategy_name/1 then falls back to the bare strategy name for both writes and the reads in oauth2/user_resolver.ex and oauth2/sign_in_preparation.ex. Because the identity resource's unique key is (uid, strategy), a single row exists per sub across every connection and the identity-match branch fires across tenant boundaries, which matters for anyone offering customer-managed OIDC connections.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92956 (CVSS 10.0): vm2 versions 3.10.1 through 3.11.6 contain a sandbox escape reachable from a default `new VM()` sandbox when running on Node.js 26. WebAssembly.compil (opens in a new tab)

NVD ·19 Sep 2026 ·fetched 19 Sep 2026, 23:39 UTC Research CVE-2026-92956 CVSS 10.0 EPSS 0.4% agreed3/3

Why readEscape from a default `new VM()` vm2 sandbox on Node.js 26 with no NodeVM, no require permission and no host object injection required.

WebAssembly.compileStreaming and instantiateStreaming in vm2 3.10.1 through 3.11.6 return a raw host-realm Promise; by controlling Symbol.species through Promise.prototype.finally, sandbox code receives the raw host error object, walks from the host error constructor to the host Function constructor and recovers the real host `process`, gaining host module access such as fs. This bypasses the fix for GHSA-6j2x-vhqr-qr7q, which had removed the JSPI entry points WebAssembly.promising and WebAssembly.Suspending. Unlike the rest of this vm2 batch it needs no unsafe configuration at all, which makes it the one to patch first; fixed in 3.11.7.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92593 (CVSS 8.7): Craft CMS versions 5.10.0 through 5.10.12 contain an incomplete fix for CVE-2026-55794: the Controller::getPostedRedirectUrl() -> View::renderObjectTe (opens in a new tab)

NVD ·19 Sep 2026 ·fetched 19 Sep 2026, 19:41 UTC Research CVE-2026-92593 CVSS 8.7 EPSS 0.4% agreed3/3

Why readThe fix for CVE-2026-55794 in Craft CMS was incomplete and added a self-signing oracle, so a low-privilege CP user can still reach unsandboxed Twig and run PHP.

Craft CMS 5.10.0 through 5.10.12 left the Controller::getPostedRedirectUrl() to View::renderObjectTemplate() sink unsandboxed, and the same patch commit introduced a token-minting oracle in Cp::elementLabelHtml(). Because Craft and Yii HMAC tokens are not bound to a parameter name, an authenticated user with edit rights on a single element type can sign attacker-controlled Twig as returnUrl and replay it as the redirect POST parameter, giving server-side template injection and arbitrary PHP execution. Fixed in 5.10.13; anyone who patched for CVE-2026-55794 and stopped there is still exposed.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92592 (CVSS 8.7): Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated user's attacker-controlled license-shun cookie with the same key and fo (opens in a new tab)

NVD ·19 Sep 2026 ·fetched 19 Sep 2026, 19:41 UTC Research CVE-2026-92592 CVSS 8.7 EPSS 0.5% agreed3/3

Why readCraft CMS signature confusion lets any authenticated non-admin user turn a license-shun cookie into server-side template injection and OS command execution.

In Craft CMS 4.8.0 to 4.18.5 and 5.0.0 to 5.10.12 the HMAC over the license-shun cookie is not bound to its purpose, because Yii's cookieValidationKey derives from the same Craft securityKey used for signed request parameters. A low-privilege user without Control Panel access can set the cookie, transplant the signed envelope into the redirect parameter, and have Craft render the attacker's bytes as an unsandboxed Twig template, where the map filter accepts a string callback and reaches PHP system(). Exploitation needs password auth without active 2FA and the default request configuration; fixed in 4.18.6 and 5.10.13.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92935 (CVSS 9.5): vm2 is a sandbox for running untrusted Node.js code. In versions >= 3.11.4 and <= 3.11.6, the NodeVM constructor computes `hasRealRequireConfig` with (opens in a new tab)

NVD ·19 Sep 2026 ·fetched 19 Sep 2026, 23:39 UTC Research CVE-2026-92935 CVSS 9.5 EPSS 0.5% agreed3/3

Why readAn array-shaped require value such as require: [] slips past vm2's NodeVM nesting guard and lets sandboxed code build an inner VM with child_process allowed.

In vm2 3.11.4 through 3.11.6 the NodeVM constructor tests requireOpts with typeof === 'object' && !== null, which an array satisfies, so the guard meant to reject nesting without explicit require configuration passes. makeResolverFromLegacyOptions() then returns a resolver holding only NESTING_OVERRIDE.vm2, letting sandbox code require the host vm2 module and construct an inner NodeVM with its own builtin allowlist such as child_process. Outer builtin restrictions do not apply to that inner VM, giving command execution as the host process. Fixed in 3.11.7.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92937 (CVSS 10.0): vm2 3.11.6 is vulnerable to a sandbox escape leading to remote code execution in the host Node.js process. The fix for GHSA-m283-3h24-438v is incomple (opens in a new tab)

NVD ·19 Sep 2026 ·fetched 19 Sep 2026, 23:39 UTC Research CVE-2026-92937 CVSS 10.0 EPSS 0.8% agreed3/3

Why readIncomplete fix for GHSA-m283-3h24-438v: routing a rejection handler through Function.prototype.call bypasses vm2's bridge sanitiser and hands sandboxed code a live proxy to host objects.

vm2 3.11.6 identity-checks only the direct call target at lib/bridge.js:1624 when deciding whether to rebuild a rejected host Promise value, so `p.then.call(p, undefined, cb)` makes the intercepted target Function.prototype.call and the sanitiser never runs. Any embedder that bridges an async host function or a NodeVM external module method can leak a host error whose own properties reference host objects, for example `err.detail = process`, giving sandbox code `e.detail.mainModule.require('child_process')` and command execution at host privilege. CVSS 10.0, EPSS 0.0079; the exploitation path is spelled out well enough to reproduce.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92944 (CVSS 9.3): vm2 versions 3.10.2 through 3.11.6 contain a sandbox escape vulnerability on Node.js 26 where Promise.prototype.finally() bypasses vm2's wrapper prote (opens in a new tab)

NVD ·19 Sep 2026 ·fetched 19 Sep 2026, 23:39 UTC Research CVE-2026-92944 CVSS 9.3 EPSS 0.6% agreed3/3

Why readA stale PromiseThenLookupChain protector in V8 14.6 lets Promise.prototype.finally() walk past vm2's wrappers with no privileged builtin configured, reaching the host Function constructor.

On Node.js 26, vm2 3.10.2 through 3.11.6 allows sandboxed code to define an async function returning a Promise whose constructor carries an attacker-controlled Symbol.species; Promise.prototype.finally() then bypasses vm2's wrapper protections because V8 14.6 leaves the PromiseThenLookupChain protector stale. That yields the host Function constructor and process object and arbitrary code execution. The vector is PR:N and needs no builtin allowlist or nesting configuration, which makes it the most broadly reachable of the vm2 escapes in this batch for anyone already on Node 26.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92948 (CVSS 9.4): vm2 versions >= 3.9.6 and <= 3.11.6 are affected by a NodeVM builtin allowlist bypass that permits a sandbox escape on Node.js 24 and newer when the e (opens in a new tab)

NVD ·19 Sep 2026 ·fetched 19 Sep 2026, 23:39 UTC Research CVE-2026-92948 CVSS 9.4 EPSS 0.4% agreed3/3

Why readOn Node.js 24+, require('node:node:test') resolves past vm2's DANGEROUS_BUILTINS protection and node:test.run() passes attacker execArgv such as --eval into a fresh unrestricted host process.

Node 24 exposes the scheme-only key node:test in module.builtinModules, which vm2's family-based DANGEROUS_BUILTINS list does not cover, so it lands in the generic host-passthrough loader. requireImpl() in lib/setup-node-sandbox.js strips one node: prefix, meaning require('node:node:test') from inside the sandbox returns a readonly proxy to the host module. node:test.run() spawns a separate Node process for isolated test execution and forwards attacker-controlled execArgv, so --eval=<js> runs arbitrary code outside the sandbox. Affects vm2 3.9.6 through 3.11.6 where the embedder allows node:test; fixed in 3.11.7.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92939 (CVSS 9.4): vm2 3.11.3 through 3.11.6 exposes the host Node.js crypto module to a NodeVM sandbox when the crypto builtin is allowed. The module is presented via a (opens in a new tab)

NVD ·19 Sep 2026 ·fetched 19 Sep 2026, 23:39 UTC Research CVE-2026-92939 CVSS 9.4 EPSS 0.5% agreed3/3

Why readcrypto.setEngine() is enough to escape a vm2 NodeVM: OpenSSL asks the dynamic loader to load an attacker-supplied .so and its constructor runs before symbol validation rejects it.

vm2 3.11.3 through 3.11.6 hands the host Node crypto module to a NodeVM sandbox behind a recursive read-only proxy, but the callable exports still run with host authority. Sandboxed code calls crypto.setEngine() with a path to a native library bundled in an untrusted plugin package; the OS dynamic loader executes the library constructor in the host process before engine symbol validation fails. No fs, process, module, child_process, worker_threads, vm or inspector access is needed, only the crypto builtin. Fixed in 3.11.7.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92938 (CVSS 9.4): vm2 versions 3.11.3 through 3.11.6 expose Node.js's host node:sqlite module to code running in NodeVM when that builtin is permitted, either explicitl (opens in a new tab)

NVD ·19 Sep 2026 ·fetched 19 Sep 2026, 23:39 UTC Research CVE-2026-92938 CVSS 9.4 EPSS 0.4% agreed3/3

Why readDatabaseSync.loadExtension() in node:sqlite gives a vm2 sandbox native code execution in the host process, reachable via the double-prefix trick require('node:node:sqlite').

vm2 3.11.3 through 3.11.6 exposes the host node:sqlite module to NodeVM when that builtin is permitted explicitly or by builtin: ['*'], wrapped only in vm.readonly() which blocks assignment but leaves host-authority callables live. The resolver treats anything starting with node: as a core request and the runtime strips a single prefix, so node:node:sqlite resolves to the configured entry. Sandboxed code opens an in-memory DatabaseSync with extension loading enabled and calls loadExtension() on a native library shipped in the untrusted plugin (path from __dirname), which SQLite loads into the host process. Fixed in 3.11.7.

nvd.nist.gov → (opens in a new tab)

CVE-2026-90822 (CVSS 9.8): FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the (opens in a new tab)

NVD ·19 Sep 2026 ·fetched 19 Sep 2026, 23:39 UTC Research CVE-2026-90822 CVSS 9.8 EPSS 1.4% agreed3/3

Why readUnauthenticated root command injection in FatPipe MPVPN, WARP and IPVPN on EOL firmware 10.1.2r60p100, reachable at the AuthFormServlet endpoint.

The xtremed daemon on FatPipe MPVPN, WARP and IPVPN appliances running 10.1.2r60p100 passes authentication data from AuthFormServlet into a shell, letting an unauthenticated attacker with management interface access execute arbitrary commands as root. The management interface is off by default and must have been enabled, and there is no patch for the EOL build: FatPipe directs customers to upgrade to a supported release and to restrict management access with WAN ACLs. CVSS 9.8, EPSS 0.0141 at the 71st percentile, and FatPipe edge devices have a prior history of in-the-wild exploitation.

nvd.nist.gov → (opens in a new tab)

CVE-2026-61599 (CVSS 8.8): djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live (opens in a new tab)

NVD ·19 Sep 2026 ·fetched 19 Sep 2026, 19:41 UTC Research CVE-2026-61599 CVSS 8.8 EPSS 0.4% agreed3/3

Why readUnauthenticated WebSocket clients can force the djust LiveView framework to import any Python module by name, executing its top-level code before any auth check runs.

djust before 1.0.7 resolves the LiveView to mount from a client-supplied dotted path via __import__(), importing the module before it checks the object is a LiveView subclass and before per-view authentication. The LIVEVIEW_ALLOWED_MODULES allowlist is fail-open (the guard is skipped entirely when the setting is unset, which is the default) and uses loose startswith matching, so a mount, live_redirect_mount, url_change or SSE frame with an arbitrary module path executes import side effects on an unauthenticated handshake. Version 1.0.7 adds fail-closed resolution.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92957 (CVSS 9.4): vm2 through 3.11.6 does not normalize `node:`-prefixed builtin specifiers when evaluating user-supplied negative (deny) entries in a NodeVM wildcard r (opens in a new tab)

NVD ·19 Sep 2026 ·fetched 19 Sep 2026, 23:39 UTC Research CVE-2026-92957 CVSS 9.4 EPSS 0.5% agreed3/3

Why readA vm2 deny entry written as '-node:child_process' does not actually deny child_process, because negative wildcard entries are matched by exact string against canonical names.

vm2 through 3.11.6 strips the node: prefix during require() resolution but compares negative wildcard policy entries by exact string against canonical builtin names. A policy of builtin: ['*', '-node:child_process'] therefore leaves child_process reachable via either require('child_process') or require('node:child_process'), handing sandboxed code execSync and spawn. Anyone who wrote deny lists using the node:-prefixed form should assume those denials never applied. Fixed in 3.11.7.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92934 (CVSS 9.5): vm2 before 3.11.8 contains an incomplete fix for Error.cause sanitization that allows sandbox escape when revisited host-wrapped AggregateError object (opens in a new tab)

NVD ·19 Sep 2026 ·fetched 19 Sep 2026, 23:39 UTC Research CVE-2026-92934 CVSS 9.5 EPSS 0.7% agreed3/3

Why readThe earlier Error.cause sanitisation fix in vm2 is incomplete: a revisited host-wrapped AggregateError still leaks unsanitised host proxies and gives RCE, so patched-to-3.11.7 installs are not done.

vm2 before 3.11.8 fails to sanitise host-wrapped AggregateError objects that are revisited within a single exception handler traversal, because the cycle detection in handleException can be bypassed. Sandboxed code reaches unsanitised host proxies embedded in the errors array and gets full remote code execution plus host process information disclosure. This is an incomplete fix for a prior Error.cause issue, which matters because operators who moved to 3.11.7 for the other vm2 escapes in this batch still need 3.11.8.

nvd.nist.gov → (opens in a new tab)

CVE-2026-92940 (CVSS 10.0): vm2 versions 3.11.3 through 3.11.6 expose the host process's real https.globalAgent to sandboxed code when a NodeVM is explicitly configured to allow (opens in a new tab)

NVD ·19 Sep 2026 ·fetched 19 Sep 2026, 23:39 UTC Research CVE-2026-92940 CVSS 10.0 EPSS 0.3% agreed3/3

Why readNodeVM sandboxes allowed require('https') in vm2 3.11.3 to 3.11.6 can steal the host's Authorization headers and read host response bodies in plaintext.

vm2's read-only proxy around host builtins forwards method calls, so sandbox code can call Agent.prototype.on() on the real https.globalAgent and register a listener for the 'free' event. When an unrelated host HTTPS request releases a pooled connection, the listener receives the live request options and the host TLSSocket, exposing the Authorization header and destination, allowing a data listener on the socket to read subsequent host responses, and permitting authenticated requests with the stolen credentials. Fixed in 3.11.7; CVSS 10.0, EPSS 0.0034.

nvd.nist.gov → (opens in a new tab)

ZDI-26-717: Cisco Identity Services Engine AlarmMessageDiskQueue Deserialization of Untrusted Data Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·18 Sep 2026 ·fetched 18 Sep 2026, 19:38 UTC Research CVE-2026-20211 EPSS 0.6% agreed3/3

Why readCVE-2026-20211: unsafe deserialization in the Cisco ISE AlarmMessageDiskQueue class gives authenticated remote code execution as the iseadminportal user.

ZDI details a flaw in the AlarmMessageDiskQueue class of Cisco Identity Services Engine where user-supplied data reaches a deserialization path without proper validation, allowing code execution in the context of iseadminportal. Authentication is required, and EPSS currently sits at 0.0056. Cisco has shipped a fix under advisory cisco-sa-ise-rce-se7bYU57; ISE is core identity infrastructure, so prioritise it above its CVSS peers.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·18 Sep 2026 ·fetched 18 Sep 2026, 15:40 UTC Research CVE-2026-20176 EPSS 0.8% agreed3/3

Why readCVE-2026-20176: command injection in the createDBLink method of Cisco Identity Services Engine gives authenticated attackers RCE as the iseadminportal user.

Cisco ISE fails to validate a user-supplied string before passing it to a system call in createDBLink, allowing arbitrary code execution in the iseadminportal context. Exploitation requires authentication and EPSS currently sits at 0.008, so this is a patch-in-cycle item rather than an emergency, but ISE holds network access policy and a foothold there is valuable. Cisco has shipped a fix under advisory cisco-sa-ise-rce-se7bYU57.

zerodayinitiative.com → (opens in a new tab)

MikroTrick: Inside the RouterOS Takeover Chain (opens in a new tab)

Bishop Fox ·17 Sep 2026 ·fetched 17 Sep 2026, 23:40 UTC Research agreed3/3

Why readA full reconstruction of the unauthenticated RouterOS takeover chain, built by diffing vulnerable and fixed builds and reproduced end to end in a lab.

Bishop Fox took the lowest-prerequisite entry point from CERT Polska's six-bug MikroTik advisory, CVE-2026-67279, which needs no credentials and no knowledge of an existing user. Tracing the SSH service and login path across releases exposed two distinct failures: one lets an unauthenticated connection reach post-login functionality, the other promotes attacker-supplied login data into a trusted administrative identity. Evidence points to exploitation before public disclosure, so exposed RouterOS devices should be treated as potentially already compromised, not merely unpatched.

bishopfox.com → (opens in a new tab)

ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation Vulnerability (opens in a new tab)

ZDI Published Advisories ·16 Sep 2026 ·fetched 16 Sep 2026, 23:40 UTC Research agreed3/3

Why readUnpatched Windows privilege escalation that leaks machine-account NTLM responses when a low-privileged user points the HTTP proxy setting at an attacker server, and Microsoft has declined to fix it.

ZDI published this as a 0-day after Microsoft first scheduled a September fix, then on 31 August 2026 ruled it below the bar for security servicing. A local low-privileged attacker changes the proxy setting to a malicious server and captures NTLM authentication in the context of the machine account, which relays into resources the user should not reach. No patch exists; restricting who can modify proxy configuration and hardening NTLM relay defences is the only available mitigation.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-704: (0Day) Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability (opens in a new tab)

ZDI Published Advisories ·16 Sep 2026 ·fetched 16 Sep 2026, 23:40 UTC Research CVE-2026-92204 agreed3/3

Why readUnpatched authenticated SSRF in Airbyte's OneDrive connector (CVE-2026-92204) with no fix available, published as a 0-day after the vendor went silent for five months.

The `_get_shared_drive_object` method in Airbyte's OneDrive source connector fails to validate a URI before fetching it, letting an authenticated user coerce server-side requests and read responses in the context of the service account. ZDI reported it on 29 October 2025, chased the vendor in February 2026, and published unfixed on 30 March 2026. The only stated mitigation is restricting who can reach the product, which for a data-integration platform holding cloud credentials is a meaningful exposure.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability (opens in a new tab)

ZDI Published Advisories ·16 Sep 2026 ·fetched 16 Sep 2026, 23:40 UTC Research CVE-2026-92203 agreed3/3

Why readCompanion 0-day to the OneDrive issue: the same unvalidated URI bug in Airbyte's SharePoint connector, CVE-2026-92203, shipped without a patch.

Airbyte's SharePoint connector implements `_get_shared_drive_object` with the same missing URI validation, so an authenticated user can drive arbitrary server-side requests and disclose information as the service account. Disclosure timeline matches the OneDrive case: reported 29 October 2025, no vendor confirmation, published as a 0-day advisory. Treat both connectors as one exposure and gate network access from Airbyte workers until a fix lands.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-707: (0Day) MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·16 Sep 2026 ·fetched 16 Sep 2026, 23:40 UTC Research CVE-2026-92207 agreed3/3

Why readAn unpatched authenticated RCE in MindsDB where the vendor never answered ZDI, so access restriction is your only control.

The OpenBBtable class passes a user-supplied string into Python execution without validation, letting any authenticated user run code as the service account. ZDI reported it in November 2025, followed up twice and published as a 0-day after no vendor response, so no fix exists. If MindsDB is deployed anywhere with data access worth protecting, treat authenticated reach to it as equivalent to shell on the host and restrict accordingly.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-705: (0Day) BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability (opens in a new tab)

ZDI Published Advisories ·16 Sep 2026 ·fetched 16 Sep 2026, 23:40 UTC Research CVE-2026-92205 agreed3/3

Why readSymlink directory traversal in BusyBox's libarchive handling allows arbitrary file creation on extraction, unpatched after roughly a year with the vendor.

CVE-2026-92205 is a path validation failure in the libarchive component used by BusyBox: an archive containing crafted symlink paths writes files outside the intended directory as the extracting user. ZDI reported it on 3 October 2025, followed up twice through December, and published as a 0-day in April 2026 with no fix available. BusyBox's ubiquity in embedded Linux, containers and appliance firmware makes the exposure broad even though exploitation needs a user to open the archive.

zerodayinitiative.com → (opens in a new tab)

ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell (opens in a new tab)

JFrog Security ·drewt ·15 Sep 2026 ·fetched 15 Sep 2026, 15:43 UTC Research agreed2/2

Why readAn unprivileged local user on macOS gets root through Parallels Desktop 26.4.0 (build 57513) by abusing prl_disp_service's world-writable socket and argument injection in the appliance unpack path.

JFrog chains three defaults in Parallels Desktop for Mac: a world-writable Unix socket, a local client login that trusts peer credentials rather than a Team ID, and an appliance extraction path that builds tar arguments via Qt string splitting. A quote in the parent path injects --use-compress-program=, and macOS tar executes the attacker's script as uid 0. Confirmed on 26.4.0 build 57513 on Apple silicon; any compromised unprivileged process or CI job on a developer Mac running Parallels is a root escalation away.

jfrog.com → (opens in a new tab)

ZDI-26-680: Linux Kernel Crypto Subsystem Use-After-Free Local Privilege Escalation Vulnerability (opens in a new tab)

ZDI Published Advisories ·15 Sep 2026 ·fetched 15 Sep 2026, 03:40 UTC Research CVE-2026-31719 EPSS 0.3% agreed3/3

Why readUse-after-free in the Linux crypto subsystem's async AEAD request handling (CVE-2026-31719) that escalates from low-privileged local code to kernel context.

Unlike the neighbouring ZDI kernel advisories this one needs only the ability to run low-privileged code, which makes it a plausible container-escape and post-exploitation escalation primitive rather than a chain component. The flaw is a missing object-existence check when handling asynchronous AEAD requests, reachable from userspace crypto interfaces. Fixed upstream in commit 3bfbf5f0a99c; patch your kernels on the normal cycle and prioritise multi-tenant hosts.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-693: Linux Kernel ksmbd Share Configuration Race Condition Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·15 Sep 2026 ·fetched 15 Sep 2026, 03:40 UTC Research agreed3/3

Why readAuthenticated remote kernel code execution against ksmbd, the highest-impact bug in this ZDI batch.

A locking failure in ksmbd's handling of share_conf objects lets an authenticated remote attacker win a race and execute code in kernel context. Only systems with the in-kernel SMB server enabled are affected, which is a small population, but on those hosts this is remote pre-root rather than a local escalation. Patched upstream; no public exploit or exploitation reported yet.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-684: Linux Kernel KSMBD Query Directory Request Race Condition Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·14 Sep 2026 ·fetched 14 Sep 2026, 19:42 UTC Research CVE-2026-64397 EPSS 0.5% agreed3/3

Why readPre-authentication remote kernel code execution in KSMBD's query directory handling, on any host with the in-kernel SMB server enabled.

CVE-2026-64397 is a race in the handling of dir_fp objects in KSMBD, caused by missing locking, that a remote attacker can leverage to execute code in kernel context with no authentication. Only systems with KSMBD enabled are affected, which limits blast radius but makes exposed Linux SMB shares a priority for the fix in commit be6d26b.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-695: Linux Kernel NFSv4 Server Race Condition Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·14 Sep 2026 ·fetched 14 Sep 2026, 15:40 UTC Research CVE-2026-89688 EPSS 0.6% agreed3/3

Why readKernel RCE in the NFSv4 server through a locking failure on nfs4_openowner objects, with the upstream fix commit identified.

ZDI-26-695 (CVE-2026-89688) describes a race condition in the Linux kernel NFSv4 server caused by missing locking around nfs4_openowner operations, allowing an authenticated remote attacker to execute code in kernel context. Only systems with nfsd enabled are affected. The fix landed upstream as commit 5e4627d3513e60accfce9d5f4c7fa95251ef93d6; EPSS is currently 0.006, so this is a patch-in-cycle item for NFS servers rather than an emergency.

zerodayinitiative.com → (opens in a new tab)

CVE-2026-72709 (CVSS 9.3): SPIP before 4.4.18 contains a missing authorization vulnerability in the administrative action endpoints under ecrire/action/ that allows unauthentica (opens in a new tab)

NVD ·13 Sep 2026 ·fetched 13 Sep 2026, 23:39 UTC Research CVE-2026-72709 CVSS 9.3 EPSS 0.3% agreed3/3

Why readSPIP before 4.4.18 never calls autoriser() on the ecrire/action/ endpoints, so an anonymous user who computes a valid HMAC-SHA256 nonce can reset the administrator's password.

The administrative action handlers treat possession of a valid nonce as authorisation and perform no server-side permission check. An attacker can obtain a nonce, compute it for any action as the anonymous user, and call editer_auteur directly over HTTP to change any account's password, administrator included. This is the authentication half of the chain that makes CVE-2026-72710's job-queue RCE reachable pre-auth; fixed in 4.4.18.

nvd.nist.gov → (opens in a new tab)

CVE-2026-72710 (CVSS 9.3): SPIP before 4.4.18 contains a remote code execution vulnerability in the editer_objet action where the arg parameter resolves SQL table names without (opens in a new tab)

NVD ·13 Sep 2026 ·fetched 13 Sep 2026, 23:39 UTC Research CVE-2026-72710 CVSS 9.3 EPSS 0.6% agreed3/3

Why readRemote code execution in SPIP before 4.4.18: arg=job/0 on editer_objet injects a row into spip_jobs whose fonction and args are unserialized and executed when the cron queue drains.

The editer_objet action resolves SQL table names from the arg parameter with no allowlist of editable columns, letting an attacker holding a valid nonce write attacker-controlled rows into the job queue table. Crafted fonction and args values are later unserialized and invoked as arbitrary PHP when cron processes the queue. Paired with CVE-2026-72709, which lets an anonymous user compute a valid nonce, this becomes an unauthenticated RCE chain against an internet-facing CMS; fixed in 4.4.18.

nvd.nist.gov → (opens in a new tab)

CVE-2026-54072 (CVSS 9.3): Authorizer is an open-source, self-hostable authentication and authorization server. Prior to version 2.2.1, the `/authorize` endpoint accepts any `re (opens in a new tab)

NVD ·13 Sep 2026 ·fetched 13 Sep 2026, 23:39 UTC Research CVE-2026-54072 CVSS 9.3 EPSS 0.3% agreed3/3

Why readAuthorizer before 2.2.1 redirects OAuth tokens to any attacker-supplied redirect_uri, and the required client_id is readable from an unauthenticated GraphQL query.

The /authorize endpoint never checks redirect_uri against AllowedOrigins, so with response_type=token or id_token the server appends access_token, id_token and refresh_token as query parameters on a 302 to a host the attacker controls. The client_id needed to drive it comes straight from the public /graphql?query={meta{client_id}} endpoint. A v2.0.1 fix covered oauth_login, verify_email, magic_link_login, forgot_password, invite_members and oauth_callback but missed /authorize; upgrade to 2.2.1.

nvd.nist.gov → (opens in a new tab)

CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key (opens in a new tab)

Bishop Fox ·11 Sep 2026 ·fetched 11 Sep 2026, 19:40 UTC Must read Research CVE-2026-82329 EPSS 7.7% agreed3/3

Why readUnauthenticated admin token on internet-facing JFrog Artifactory via a derivable cluster join key, reproduced end to end against 7.111.20 and already being exploited.

CVE-2026-82329 is a CVSS 9.8 authentication bypass in self-managed JFrog Artifactory: on a default install, JFrog Access registers a cluster join key whose id and signing secret are both derivable, so a single forged join request to an unauthenticated endpoint returns an admin-scoped token. Bishop Fox reproduced the full chain to Artifactory administrator on a default 7.111.20 instance, and exploitation began within days of disclosure. Admin on Artifactory means reading every package an organisation ships, uploading poisoned ones that downstream builds trust, and pulling credentials that reach adjacent systems, so treat any exposed instance as a build-pipeline compromise.

bishopfox.com → (opens in a new tab)

Preinstalled but Not Safe. OnePlus OEM App Session Takeover Vulnerability (opens in a new tab)

Doyensec ·10 Sep 2026 ·fetched 10 Sep 2026, 11:39 UTC Research agreed3/3

Why readA live, unpatched session takeover in an app preinstalled on the OnePlus 13R, published after the vendor stopped giving a remediation timeline.

Doyensec targeted the OEM applications shipped on the OnePlus 13R and found a flaw in one of them that allows takeover of a user session. The vendor did not commit to a fix schedule through the disclosure window, so the researchers published without a patch available. Beyond the bug itself, the write up is a concrete case study in what happens when a bug bounty relationship breaks down on the vendor side.

blog.doyensec.com → (opens in a new tab)

ZDI-26-649: (Pwn2Own) OpenAI Codex Improper Neutralization of Control Sequences Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·10 Sep 2026 ·fetched 10 Sep 2026, 15:41 UTC Research CVE-2026-19591 EPSS 0.3% agreed3/3

Why readCVE-2026-19591: opening a malicious folder in OpenAI Codex gives arbitrary code execution as the current user via control sequences in git command arguments.

A Pwn2Own entry from Compass Security researchers found that Codex insufficiently neutralises control sequences when parsing arguments passed to git, so a crafted repository or directory triggers code execution in the user's context when opened. OpenAI has shipped a fix. EPSS is negligible at 0.003, but the class matters: cloning untrusted repos into an AI coding agent is now a code execution path, and developer workstations are where the credentials live.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-632: WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·9 Sep 2026 ·fetched 9 Sep 2026, 23:38 UTC Research CVE-2026-13086 EPSS 0.4% agreed3/3

Why readUnauthenticated stack buffer overflow in WatchGuard FireWare OS Endpoint Protection Manager gives root code execution to a network-adjacent attacker.

CVE-2026-13086 sits in the Endpoint Protection Manager service in WatchGuard FireWare OS, which copies user-supplied data into a fixed-length stack buffer without validating its length. Exploitation requires no authentication and runs code as root on the firewall itself. EPSS is still low at 0.0044, but an unauthenticated root RCE on a perimeter appliance is the class of bug that gets weaponised after the patch diff is public, so treat the vendor update as urgent.

zerodayinitiative.com → (opens in a new tab)

Critical N-able N-central Vulnerability and Active Exploitation (opens in a new tab)

Huntress ·8 Sep 2026 ·fetched 8 Sep 2026, 15:38 UTC Must read Research agreed3/3

Why readCVE-2026-86218 is an actively exploited pre-auth RCE in N-able N-central with a CVSS of 10.0, and Hotfix 4 (2026.3 HF4) supersedes every earlier hotfix, so HF3 systems are still vulnerable.

N-able shipped 2026.3 HF4 for CVE-2026-86218, an exploited pre-auth RCE zero-day in on-premises N-central; hosted NCOD instances are already patched. Separately, Huntress built a working PoC for a distinct chain, CVE-2026-86206 and CVE-2026-86207, that bypasses access controls to create unauthorised administrative accounts, addressed in 2026.3.1.13. Operators should apply HF4 now, audit user lists for anomalous accounts such as those with .invalid email addresses, and restrict inbound access to the console. An RMM platform reachable from the internet makes this a downstream-tenant problem, not just a local one.

huntress.com → (opens in a new tab)

CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED) (opens in a new tab)

Rapid7 ·Stephen Fewer ·8 Sep 2026 ·fetched 8 Sep 2026, 15:38 UTC Research CVE-2026-86206 EPSS 0.3% agreed3/3

Why readChaining CVE-2026-86206 and CVE-2026-86207 lets an unauthenticated remote attacker create a System administrator account on N-able N-central, the RMM platform MSPs use to reach every downstream client.

Rapid7's Stephen Fewer found two new flaws while researching the earlier N-central bypass CVE-2026-18577: CVE-2026-86206, a semicolon/Forwarded header access-control bypass (CWE-791, CVSSv4 6.9), and CVE-2026-86207, a UserTwoFactorLogin authentication bypass (CWE-305, CVSSv4 7.7). Chained, they defeat authentication entirely and yield a new attacker-controlled administrator on the latest N-central release. Both are fixed in N-central 2026.3 Hotfix 3; the individual CVSS scores badly undersell the chain given N-central's position in MSP estates.

rapid7.com → (opens in a new tab)

ZDI-26-622: Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·8 Sep 2026 ·fetched 8 Sep 2026, 23:41 UTC Research CVE-2026-50696 EPSS 1.2% agreed3/3

Why readUnauthenticated remote code execution as SYSTEM in the Windows IKEEXT service via an integer underflow in AES-GCM decryption, CVE-2026-50696.

The IKEv2 handler in IKEEXT fails to validate user-supplied data during AES-GCM decryption, producing an integer underflow before a memory write. No authentication is required, and successful exploitation runs code as SYSTEM, though only hosts with particular IPsec configurations are affected. Worth an inventory pass over anything terminating IPsec on Windows; EPSS is currently 0.012, so patch state rather than observed attacks is the driver.

zerodayinitiative.com → (opens in a new tab)

CVE-2026-76642 (CVSS 8.5): util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to e (opens in a new tab)

NVD ·5 Sep 2026 ·fetched 5 Sep 2026, 15:37 UTC Research CVE-2026-76642 CVSS 8.5 EPSS 0.2% agreed3/3

Why readutil-linux through 2.41.5 and 2.42.2 runs post-mount hooks without checking the mount helper's exit status, so an unprivileged user can abuse X-mount.idmap or X-mount.owner to escalate privileges on pre-existing filesystems.

When the helper fails, mount proceeds to the hooks anyway and applies them to whatever is already at the target, letting an attacker clone a filesystem with inherited suid bits or rewrite target inode permissions. This is local privilege escalation in a package present on essentially every Linux host, including containers and CI runners where user-invocable mounts exist. Distribution updates are the fix; in the meantime audit fstab entries carrying the user option alongside X-mount.idmap or X-mount.owner.

nvd.nist.gov → (opens in a new tab)

CVE-2026-79756 (CVSS 8.7): Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, the fix for unauthenticated OS command injection (opens in a new tab)

NVD ·5 Sep 2026 ·fetched 5 Sep 2026, 11:36 UTC Research CVE-2026-79756 CVSS 8.7 EPSS 5.1% agreed3/3

Why readAn incomplete patch leaves Nuclio's dashboard exposed to unauthenticated command injection through the X-Nuclio-Function-Namespace header.

The earlier fix added validateFunctionName and common.Quote() for the named-resource path, but the list-all path, hit when no resource name is supplied, still interpolates resourceNamespace unquoted into a /bin/sh -c string. Shell metacharacters in X-Nuclio-Function-Namespace, X-Nuclio-Project-Namespace or X-Nuclio-Function-Event-Namespace give arbitrary execution inside the dashboard container on the local/Docker platform. Patched in 1.17.4; EPSS 0.051 puts it in the 92nd percentile, the highest in today's batch.

nvd.nist.gov → (opens in a new tab)

CVE-2026-53671 (CVSS 9.3): PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the abstract transformer in prevail trea (opens in a new tab)

NVD ·5 Sep 2026 ·fetched 5 Sep 2026, 11:36 UTC Research CVE-2026-53671 CVSS 9.3 EPSS 0.3% agreed3/3

Why readPREVAIL models writes through a T_CTX base register as a no-op, giving a full arbitrary-read primitive in a program the verifier declares safe.

do_mem_store in src/crab/ebpf_transformer.cpp only models T_STACK stores and the checker's T_CTX bounds arm never tests AccessType::write, so a program can overwrite a context field such as ctx->data, reload it typed as T_PACKET, and dereference an attacker-controlled address. The verifier reports the program as safe throughout. Fixed in 0.2.4, and paired with CVE-2026-53670 it makes the case for treating verifier soundness as its own attack surface wherever unprivileged BPF loading is allowed.

nvd.nist.gov → (opens in a new tab)

CVE-2026-53670 (CVSS 9.3): PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransf (opens in a new tab)

NVD ·5 Sep 2026 ·fetched 5 Sep 2026, 11:36 UTC Research CVE-2026-53670 CVSS 9.3 EPSS 0.3% agreed3/3

Why readA soundness bug in the PREVAIL eBPF verifier accepts out-of-bounds memory access, meaning a malicious BPF program passes verification.

EbpfTransformer::add() silently skips offset-variable updates when the destination register carries a non-singleton typeset, two or more simultaneously possible pointer types, so later bounds checks run against a stale offset. A crafted program is verified as safe and then corrupts memory at runtime. Patched in 0.2.4; PREVAIL is the verifier behind eBPF for Windows, so this is a trust-boundary failure rather than a memory bug in ordinary code.

nvd.nist.gov → (opens in a new tab)

CVE-2026-77999 (CVSS 8.7): Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, (opens in a new tab)

NVD ·5 Sep 2026 ·fetched 5 Sep 2026, 15:37 UTC Research CVE-2026-77999 CVSS 8.7 EPSS 0.3% agreed3/3

Why readAn anonymous POST to J2Store's PayPal IPN listener moves a pending order to CONFIRMED with no payment, because _validateIPN() treated UNVERIFIED as valid and stored its verdict where nothing downstream read it.

In J2Store 1.0.0-3.3.21, 4.0.0-4.0.21 and 4.1.0-4.1.6 the IPN listener accepted any non-INVALID response as valid, made its verification callback with CURLOPT_SSL_VERIFYPEER disabled, and continued processing regardless. The amount comparison only ran when mc_gross was a positive number, so omitting the field entirely skipped it, and sequential order ids in the custom field made targeting trivial, including forcing another customer's pending order to FAILED. paypalv2.php performed no amount check at all, so any shop on these versions has been taking free orders for anyone who bothered to look.

nvd.nist.gov → (opens in a new tab)

CVE-2026-53649 (CVSS 9.6): Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a local API on 127.0.0.1:9090 that performs no authent (opens in a new tab)

NVD ·5 Sep 2026 ·fetched 5 Sep 2026, 11:36 UTC Research CVE-2026-53649 CVSS 9.6 EPSS 0.2% agreed3/3

Why readJoro's proxy mode turns any web page an operator visits into remote code execution on the operator's own machine.

Joro's default proxy exposes an unauthenticated local API on 127.0.0.1:9090 with a wildcard CORS policy, and plugin upload uses multipart/form-data, a CORS-safelisted content type that needs no preflight. Cross-origin JavaScript can therefore upload a native plugin and trigger a restart through the operator's browser, and plugins execute on load, yielding RCE as the operator from a single page visit. Fixed in 1.1.1, and a reminder that red-team tooling bound to loopback is not the same as tooling that is unreachable.

nvd.nist.gov → (opens in a new tab)

Privilege Escalation Vulnerability in Falcon Crowdstrike (opens in a new tab)

Truesec ·Hjalmar Desmond ·4 Sep 2026 ·fetched 4 Sep 2026, 11:42 UTC Research agreed3/3

Why readA public PoC turns CrowdStrike Falcon's Office macro remediation into local privilege escalation on fully patched Windows 11 25H2 and Server 2025, with a named policy setting to switch off today.

FalconFlank abuses the Falcon Sensor's "Microsoft Office file malicious macro removal" prevention feature to escalate privileges, and works against a fully updated Windows 11 25H2 or Windows Server 2025 host running Phase 3 Optimal Protection. The recommended mitigation is to disable the "Microsoft Office File Suspicious Macro Removal Windows" prevention setting under the next-gen antivirus clean-infected-files options; cloud anti-malware coverage for Office files continues to apply. PoC code is published at github.com/MSNightmare/FalconFlank, so the window between disclosure and use is short.

truesec.com → (opens in a new tab)

CVE-2026-69664 (CVSS 8.7): Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial (opens in a new tab)

NVD ·3 Sep 2026 ·fetched 3 Sep 2026, 23:42 UTC Research CVE-2026-69664 CVSS 8.7 EPSS 0.7% agreed3/3

Why readUnauthenticated worker exhaustion in Erlang/OTP inets httpd: a chunk-size line that is not hex, delivered in a separate write, permanently leaks the connection's worker.

When a chunked request body arrives in the same write as the headers, httpd_request_handler:handle_body/3 catches the {error, {chunk_size, _}} throw from http_chunk:decode_size/4 and returns 400. Split the chunk-size line into a later write and the decoder resumes through a bare catch in handle_info/2, which turns the throw into a return value that is then treated as the next decoder continuation, so the worker is never released and no timeout reclaims it. Default configuration is affected and no authentication is required, so repeating the request across connections consumes every worker.

nvd.nist.gov → (opens in a new tab)

CVE-2026-70399 (CVSS 8.7): Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial (opens in a new tab)

NVD ·3 Sep 2026 ·fetched 3 Sep 2026, 23:42 UTC Research CVE-2026-70399 CVSS 8.7 EPSS 0.5% agreed3/3

Why readThe documented max_clients default of 150 in Erlang/OTP inets httpd is never applied, so an unauthenticated attacker exhausts the node by simply opening connections.

httpd_manager:handle_new_connection/4 reads max_clients with the two-argument httpd_util:lookup/2, which returns the atom undefined when the option is unset, rather than the three-argument form carrying the 150 default used by neighbouring code. Erlang term ordering puts every integer before every atom, so the Count =< Max guard always holds and {reject, busy} is never returned. Any inets httpd that relies on the documented default accepts unlimited simultaneous connections, each holding a worker process and a socket, with no request and no authentication needed. Set max_clients explicitly if you cannot patch.

nvd.nist.gov → (opens in a new tab)

CVE-2026-83605 (CVSS 8.7): xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.14 and (opens in a new tab)

NVD ·3 Sep 2026 ·fetched 3 Sep 2026, 23:42 UTC Research CVE-2026-83605 CVSS 8.7 EPSS 0.3% agreed3/3

Why readAttribute injection in @xmldom/xmldom below 0.8.14 and 0.9.11: setAttribute() skips QName validation and the serializer emits the name verbatim, so a crafted name injects event handlers into browser-consumed XML.

Element.setAttribute() routes through the private _createAttribute(name) path without name validation, unlike Document.createAttribute(name) which checks against QName. XMLSerializer.serializeToString() then writes the name as given, and requireWellFormed: true did not catch it, so an attacker-controlled attribute name can terminate the intended attribute and inject further attributes including event handlers; synthesized xmlns:PREFIX declarations hit the same unchecked boundary. Fixed in @xmldom/xmldom 0.8.14 and 0.9.11, with no fix for the legacy xmldom package at 0.6.0 and earlier, which means dependency trees pinned to the old package name need migrating rather than bumping.

nvd.nist.gov → (opens in a new tab)

CVE-2026-71380 (CVSS 8.7): Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial (opens in a new tab)

NVD ·3 Sep 2026 ·fetched 3 Sep 2026, 23:42 UTC Research CVE-2026-71380 CVSS 8.7 EPSS 0.4% agreed3/3

Why readSlowloris by design in Erlang/OTP inets httpd: the request timeout is cancelled once headers parse, so a stalled body pins a worker forever across OTP 17.0 to 27.3.4.17.

httpd_request_handler:handle_info/2 cancels the request timeout as soon as any parse step succeeds, headers included, and the more-data clause re-arms the socket with {active, once} without setting a new timer. httpd_request:whole_body/2 returns that continuation whenever received bytes fall short of the announced Content-Length, so a well-formed request that stops mid-body leaves the worker blocked indefinitely; the byte-rate reclaim only runs when minimum_bytes_per_second is configured, which it is not by default. Repeating across connections fills max_clients at negligible bandwidth cost. Fixed in OTP 27.3.4.17 and later branch releases.

nvd.nist.gov → (opens in a new tab)

CVE-2026-53552 (CVSS 9.6): Goploy is an open-source automation deployment system. In versions 1.17.5 and prior, Project.AddFile, Project.EditFile, Project.RemoveFile, and Projec (opens in a new tab)

NVD ·3 Sep 2026 ·fetched 3 Sep 2026, 11:40 UTC Research CVE-2026-53552 CVSS 9.6 EPSS 0.2% agreed3/3

Why readCross-namespace IDOR in Goploy <= 1.17.5 lets any low-privileged manager rewrite another project's git remote URL, which becomes RCE on the next deploy; no patch exists.

Project.AddFile, EditFile, RemoveFile and Project.Edit in cmd/server/api/project/handler.go take a row id straight from the JSON body, and model.ProjectFile.GetData and model.Project.GetData filter only on that id, with no namespace ownership check. A user with the manager role or FileSync/EditProject permission in their own namespace can therefore read, write and delete files in any project on the install, and set a foreign project's git remote to a repository they control; Edit runs git remote set-url, so the next deploy pulls attacker code. No public patch at time of publication, so restrict who holds those roles or take the instance off shared access.

nvd.nist.gov → (opens in a new tab)

CVE-2026-84196 (CVSS 8.3): Kyverno before 1.18.0 contains a server-side request forgery vulnerability in apiCall.service.url that allows authenticated users to send arbitrary HT (opens in a new tab)

NVD ·3 Sep 2026 ·fetched 3 Sep 2026, 19:38 UTC Research CVE-2026-84196 CVSS 8.3 EPSS 0.3% agreed3/3

Why readAuthenticated SSRF in Kyverno's apiCall policy type reaches cloud metadata endpoints and reflects the response back in admission error messages, so exfiltration is not blind.

Kyverno before 1.18.0 lets user-controlled input reach apiCall.service.url through variable substitution, so an authenticated cluster user can make the policy engine issue arbitrary HTTP requests to internal services, loopback addresses and the instance metadata service. Response data is surfaced in admission error messages, turning it into a readable data exfiltration primitive rather than a blind SSRF. CVSS 4.0 8.3; upgrade to 1.18.0. EPSS is negligible at 0.0026, but Kyverno sits in the admission path of a lot of clusters.

nvd.nist.gov → (opens in a new tab)

CVE-2026-81578 + CVE-2026-82078 | PaperCut NG/MF Authentication Bypass and Unsafe Dynamic Class Loading Vulnerabilities (opens in a new tab)

Horizon3 Attack Team ·Horizon3 ·1 Sep 2026 ·fetched 1 Sep 2026, 15:40 UTC Must read Research CVE-2026-82078 EPSS 0.9% agreed3/3

Why readTwo chained PaperCut NG/MF bugs give pre-auth RCE on the Application Server, and PaperCut has confirmed exploitation and customer incidents.

CVE-2026-81578 is an improper access control flaw (CVSS 4.0 8.8) in the PaperCut NG/MF web management interface that lets unauthenticated remote requests trigger administrative backend actions before access validation completes, allowing configuration changes. CVE-2026-82078 is unsafe dynamic class loading (CVSS 4.0 9.4) that turns control of those configuration parameters into arbitrary Java bytecode execution. Chained, they yield pre-authentication RCE as the PaperCut server process; the vendor confirms active exploitation and customer incidents, so patch and audit rather than wait on EPSS, which has not caught up at 0.009.

horizon3.ai → (opens in a new tab)

Off the Hook: Discovering and Observing Active Exploitation of Sangoma Switchvox CVE-2026-9586 (opens in a new tab)

Horizon3 Attack Team ·Zach Hanley ·1 Sep 2026 ·fetched 1 Sep 2026, 11:41 UTC Research CVE-2025-57819 EPSS 0.7% agreed3/3

Why readHorizon3 found CVE-2026-9586 in Sangoma Switchvox and reports observing active exploitation of it in the wild.

After FreePBX bugs CVE-2025-57819 and CVE-2025-64328 landed in CISA KEV, Horizon3 audited the wider Sangoma ecosystem and turned up a vulnerability in Switchvox, tracked as CVE-2026-9586, which they say is now being exploited. The fetched text is the intro only, so the technical mechanism and affected versions are not in what was delivered. Switchvox is a phone system typically reachable from the internet, which makes exploitation claims worth chasing to the full write-up today.

horizon3.ai → (opens in a new tab)

CVE-2026-9586 | Sangoma Switchvox Unauthenticated SQL Injection Remote Code Execution Vulnerability (opens in a new tab)

Horizon3 Attack Team ·Horizon3 ·1 Sep 2026 ·fetched 1 Sep 2026, 15:40 UTC Research CVE-2026-9586 EPSS 0.4% agreed3/3

Why readUnauthenticated SQL injection in Sangoma Switchvox SMB Edition reaches RCE via the backend PostgreSQL database, no auth or user interaction needed.

CVE-2026-9586 (CVSS 4.0 9.3) lets a remote attacker execute arbitrary SQL against Switchvox's PostgreSQL backend and escalate to code execution on the appliance. Horizon3 reports independent discovery. Switchvox instances are commonly exposed for SIP and web administration, which makes this worth inventorying now even with EPSS still low at 0.004.

horizon3.ai → (opens in a new tab)

ZDI-26-612: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·1 Sep 2026 ·fetched 1 Sep 2026, 03:41 UTC Research agreed3/3

Why readSecond unpatched RCE in pdfforge PDF Architect, an out-of-bounds write in PDF parsing, disclosed as 0-day with no vendor fix.

An out-of-bounds write in PDF Architect's PDF file parsing lets a crafted document write past an allocated object and execute code as the current user. Reported 27 January 2026 and confirmed received on 23 March, the case was published as a 0-day advisory after the vendor stopped responding. Mitigation is limited to restricting use of the product on affected endpoints.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-613: (0Day) pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·1 Sep 2026 ·fetched 1 Sep 2026, 03:41 UTC Research agreed3/3

Why readUnpatched remote code execution in pdfforge PDF Architect via PDF parsing memory corruption, published as 0-day after the vendor let the disclosure clock run out.

ZDI reported a memory corruption flaw in PDF Architect's PDF file parsing on 12 February 2026; the vendor acknowledged receipt on 23 March and then went quiet, so ZDI published without a fix. Exploitation requires the user to open a malicious file or visit a malicious page, and yields code execution in the process context. No patch exists, so the only mitigation is restricting interaction with the product.

zerodayinitiative.com → (opens in a new tab)

PaperCut Zero-Day: Active Exploitation and Pre-Auth RCE (opens in a new tab)

Huntress ·31 Aug 2026 ·fetched 31 Aug 2026, 23:38 UTC Must read Research agreed3/3

Why readPre-auth RCE in PaperCut NG and MF is being exploited in the wild, with a full chain reproduced against version 25.0.11.75758 and emergency patches out for majors 24, 25 and 26.

PaperCut's August 27 advisory confirms active exploitation of a pre-authentication remote code execution flaw in PaperCut NG and MF, with confirmed customer incidents. Huntress observed exploitation in two customer environments, where activity was limited to system discovery with no secondary malware, C2 or persistence recovered, and independently reproduced a full pre-auth RCE chain against a vanilla NG 25.0.11.75758 server. Emergency patches exist for majors 24, 25 and 26; patched or not, the recommendation is to pull the application server off the public internet and restrict access to trusted networks.

huntress.com → (opens in a new tab)

Traefik | Version Through 3.7.11 (opens in a new tab)

Bishop Fox ·31 Aug 2026 ·fetched 31 Aug 2026, 23:38 UTC Research agreed3/3

Why readTraefik's HTTP/3 server was built with no timeout at all, so the default 60-second read timeout never applies and an unauthenticated client can pin upstream connections open indefinitely.

Bishop Fox found that Traefik's documented request read timeout is implemented as a deadline on the underlying TCP connection, which HTTP/3 does not use; the HTTP/3 server was constructed without any timeout, so the setting has no effect on that protocol. An unauthenticated remote user can hold requests open indefinitely, consuming one upstream connection per request until legitimate traffic is denied. Affects versions 2.8.2 through 2.11.55 and 3.0.0 through 3.7.11, which covers most container and Kubernetes ingress deployments running HTTP/3.

bishopfox.com → (opens in a new tab)

ZDI-26-614: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·31 Aug 2026 ·fetched 31 Aug 2026, 19:43 UTC Research agreed3/3

Why readUnpatched out-of-bounds write in pdfforge PDF Architect's PDF parser giving remote code execution on opening a malicious file, disclosed as a 0-day with no vendor fix.

Improper validation of user-supplied data during PDF parsing allows a write past the end of an allocated buffer and code execution in the context of the current process; the target must open a file or visit a malicious page. ZDI reported the bug on 02/20/26, the vendor acknowledged it on 03/23/26, and it was published unpatched after a 07/13/26 notice. One of several concurrent PDF Architect 0-days, so the practical answer is blocking or removing the product rather than waiting on a patch.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-615: (0Day) pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (opens in a new tab)

ZDI Published Advisories ·31 Aug 2026 ·fetched 31 Aug 2026, 19:43 UTC Research agreed3/3

Why readUnpatched local privilege escalation to SYSTEM in pdfforge PDF Architect's activation-service, published as a 0-day after the vendor went silent for months.

The activation-service update process loads a library from an unsecured location, so a local low-privileged attacker can plant a DLL and execute code as SYSTEM. ZDI reported it on 04/06/26 and published unpatched after chasing the vendor through 07/13/26; there is no fix available. The only stated mitigation is restricting interaction with the product, which for a desktop PDF tool realistically means removal from privileged endpoints.

zerodayinitiative.com → (opens in a new tab)

CVE-2026-61800 (CVSS 9.1): Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.4.0 through 4.14. (opens in a new tab)

NVD ·30 Aug 2026 ·fetched 30 Aug 2026, 19:38 UTC Research CVE-2026-61800 CVSS 9.1 EPSS 0.6% agreed3/3

Why readA Wazuh worker node will write cluster-synced files anywhere under /var/ossec, giving root RCE to anyone holding the cluster key, and it is an incomplete fix for CVE-2026-30893.

In 4.4.0 through 4.14.6, the non-merged branch of update_master_files_in_worker() derives destinations from safe_join() alone, which keeps files inside /var/ossec but never checks they land in the directory declared by their cluster_item_key. The destination check that exists on the primary node and on the worker's merged branch was omitted, so a peer with the cluster key can drop files into paths executed as root; the delete branch has the same gap. This is the residue of CVE-2026-30893, which only blocked traversal outside /var/ossec. Fixed in 4.14.7, and worth prioritising because the cluster key is a shared secret many deployments treat casually.

nvd.nist.gov → (opens in a new tab)

CVE-2026-74232 (CVSS 9.3): Zbtlink L3_V2_8 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.0 (opens in a new tab)

NVD ·29 Aug 2026 ·fetched 29 Aug 2026, 23:37 UTC Research CVE-2026-74232 CVSS 9.3 EPSS 0.5% agreed3/3

Why readMultiple Zbtlink and OEM router firmware images ship yunmgrd, a backdoor implant that talks to a hardcoded C2 over unauthenticated cleartext UDP and executes commands as root.

Zbtlink L3_V2_8 firmware 3.0.0.4.528, WE826-T2 firmware 19.1101, ZBT-7628 firmware 1.0.0.2.007, ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620/7620A and MQAP-7620/7620A/7628 firmware 1.0.0.2.000, AP522 firmware 1.0.0.2.014, AP7628 and HC5661A firmware 3.0.0.4.380, APG721B firmware 19.0809, HK300 firmware 1.0.0.2.032 and MAP-N10 firmware 1.0.0.2.044 all contain the yunmgrd implant. Because the channel is cleartext and unauthenticated, anyone on the network path can hijack it, not just the vendor: the documented capabilities include arbitrary root command execution, DNS record modification, PPPoE credential exfiltration and opening reverse SSH tunnels. This is a shipped-from-the-factory backdoor rather than a coding error, so patching is not the answer; identify these models on the estate and plan replacement or full firmware substitution.

nvd.nist.gov → (opens in a new tab)

Two Unitree G1 EDU Humanoid Robot Flaws Enable Root RCE, One Starts Over Bluetooth (opens in a new tab)

The Hacker News ·The Hacker News ·29 Aug 2026 ·fetched 29 Aug 2026, 03:42 UTC Research CVE-2026-76640 EPSS 0.3% agreed3/3

Why readTwo independent root RCE chains on the Unitree G1 EDU humanoid, CVE-2026-76639 via chat_go and bashrunner and CVE-2026-76640 starting from Bluetooth Low Energy proximity, with no confirmed fixed firmware.

Olivier Laflamme disclosed the two chains on 27 August 2026; the second reaches root on the robot's Locomotion PC from BLE range alone. Unitree patched the cloud account-to-robot ownership check in July 2026, so the cloud-assisted route now needs an account already bound to the target or the key material in hand, but no fixed firmware release has been identified for either RCE path. EPSS sits at 0.003 and the install base is small, so this is a read for robotics and OT teams rather than a general patch scramble.

thehackernews.com → (opens in a new tab)

CVE-2026-74233 (CVSS 9.3): Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108, and WG3526 firmware 19.1101, Zbtlink WE2426-C firmware 19.1112, Zbtlink (opens in a new tab)

NVD ·29 Aug 2026 ·fetched 29 Aug 2026, 23:37 UTC Research CVE-2026-74233 CVSS 9.3 EPSS 2.6% agreed3/3

Why readUnauthenticated root command injection in the infosrvd service on UDP/9992 across a long list of Zbtlink router models, with the authentication defeated by a hardcoded salt and an all-zero wildcard MAC.

The infosrvd service listening on UDP/9992 in Zbtlink WE1326, WE357, WE5926, WE5926-WD, WE826-Q, WE826-T2, WE826-WD, WG108 and WG3526 firmware 19.1101, WE2426-C firmware 19.1112, WE5926-EC_QP firmware 20.0516, WF3526-P firmware 19.051, CTN720-W1, LF-1541 and MT7620N firmware 19.1101, and WRC1 firmware 20.0622 executes attacker-supplied commands as root from a single crafted UDP packet. The service's own authentication is ineffective because it relies on a hardcoded salt and accepts an all-zero wildcard MAC. EPSS is already 0.026, in the 84th percentile, and blocking UDP/9992 at the perimeter is the immediate mitigation where firmware cannot be replaced.

nvd.nist.gov → (opens in a new tab)

ZDI-26-595: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·29 Aug 2026 ·fetched 29 Aug 2026, 03:42 UTC Research CVE-2026-57254 EPSS 0.2% agreed3/3

Why readUse-after-free in Foxit PDF Reader annotation handling gives remote code execution in the reader process when a user opens a crafted file or page.

CVE-2026-57254 sits in the handling of Annotation objects, where operations are performed without validating that the object still exists. Opening a malicious PDF or visiting a malicious page is enough for an attacker to execute code as the current user, so user interaction is required but the bar is low for a phishing chain. Foxit has shipped a fix; EPSS remains low at 0.0017, but PDF reader UAFs are conventional payload delivery.

zerodayinitiative.com → (opens in a new tab)

CVE-2026-76838 (CVSS 8.4): Hi.Events validates a webhook destination only when it is registered, never when it is used. NoInternalUrlRule in backend/app/Validators/Rules/NoInter (opens in a new tab)

NVD ·27 Aug 2026 ·fetched 27 Aug 2026, 07:38 UTC Research CVE-2026-76838 CVSS 8.4 EPSS 0.3% agreed2/2

Why readA validate-on-registration, never-on-use webhook design in Hi.Events yields full-read SSRF to cloud metadata via redirects and DNS changes.

NoInternalUrlRule in backend/app/Validators/Rules/NoInternalUrlRule.php resolves the hostname with gethostbyname() and blocks private ranges only at registration time; WebhookDispatchService then calls the stored URL through spatie/laravel-webhook-server with no Guzzle options set, so redirect following stays on and the resolution is never repeated. A destination that redirects to loopback, RFC1918 or the cloud metadata endpoint, or whose DNS record simply changes later, gets fetched by the server, and WebhookResponseHandlerService stores the response body where the requester can read it back from the webhook logs endpoint. The pattern generalises well beyond this product: SSRF filters that run at configuration time and not at dispatch time are not filters.

nvd.nist.gov → (opens in a new tab)

A GUID is Not a Credential: Unauthenticated RCE in Veeam Service Provider Console (opens in a new tab)

Bishop Fox ·26 Aug 2026 ·fetched 26 Aug 2026, 19:40 UTC Must read Research agreed2/2

Why readChained unauthenticated RCE on Veeam Service Provider Console via CVE-2026-58073 and CVE-2026-58072, proven end to end, with a fix that requires upgrading to 9.3.0.35057 rather than a hotfix.

CVE-2026-58073 (CVSS 9.5) lets an unauthenticated network peer claim a connected backup agent's identity and receive that agent's real certificate; CVE-2026-58072 (CVSS 9.0) then lets any holder of an agent certificate write a file to an arbitrary path on the server. Bishop Fox chained the two into unauthenticated remote code execution against Veeam's own binaries, on the console MSPs use to run backups across every tenant. All version 9 builds up to 9.2.1.33875 are affected with no 9.2.x backport, so remediation is an upgrade to 9.3.0.35057, and Bishop Fox has released a safe detection tool plus IOCs to check logs against.

bishopfox.com → (opens in a new tab)

CVE-2026-66906 (CVSS 9.1): Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from (opens in a new tab)

NVD ·26 Aug 2026 ·fetched 26 Aug 2026, 07:38 UTC Research CVE-2026-66906 CVSS 9.1 EPSS 0.2% agreed2/2

Why readPath traversal in Apache Camel's camel-azure-storage-blob component lets a blob name written by whoever can put objects in the container control where files land on the Camel host.

CVE-2026-66906 (CVSS 9.1) affects Apache Camel 4.0.0 to 4.14.9, 4.15.0 to 4.18.4 and 4.19.0 to 4.22.0. BlobOperations.downloadBlobToFile built its local target with new File(fileDir, client.getBlobName()) and handed it straight to the Azure SDK with no lexical normalization and no check that the resolved path stayed under fileDir; because BlobConsumer.createBatchExchangesFromContainer enumerates the container and uses BlobItem.getName() verbatim with no default filtering, the traversal path is not route-controlled data. Any route using downloadBlobToFile against a container an attacker can write to should be upgraded to 4.14.9, 4.18.4 or 4.22.0.

nvd.nist.gov → (opens in a new tab)

CVE-2026-13212 (CVSS 8.8): The Zephyr virtio driver does not validate the descriptor-chain head id that the virtio device writes into the used ring. In virtio_isr() (drivers/vir (opens in a new tab)

NVD ·26 Aug 2026 ·fetched 26 Aug 2026, 03:40 UTC Research CVE-2026-13212 CVSS 8.8 EPSS 0.2% agreed2/2

Why readZephyr's virtio driver calls an attacker-shaped function pointer because virtio_isr() uses the device-supplied used-ring id as an unchecked index into recv_cbs[] and desc[].

In drivers/virtio/virtio_common.c, vq->used->ring[idx].id is written by the virtio device and used directly to index vq->recv_cbs[] and vq->desc[], both sized to exactly vq->num entries. A malicious backend, meaning an untrusted hypervisor or a peer virtio device on PCI or MMIO, supplies a 16-bit id past the bound, causing an out-of-bounds read of a {function pointer, argument} pair from adjacent heap and then a call to it in interrupt context. No guest privileges or user interaction are needed, only a used-ring write and a queue interrupt.

nvd.nist.gov → (opens in a new tab)

CVE-2026-78208 (CVSS 8.7): exceljs-hardened before 5.0.0 contains a path traversal vulnerability in the Workbook.addImage() function that fails to validate file paths. Attackers (opens in a new tab)

NVD ·26 Aug 2026 ·fetched 26 Aug 2026, 07:38 UTC Research CVE-2026-78208 CVSS 8.7 EPSS 0.4% agreed2/2

Why readWorkbook.addImage() takes an unvalidated path, so anything the Node process can read can be embedded into a generated xlsx and handed back to the requester.

exceljs-hardened before 5.0.0 fails to validate file paths passed to Workbook.addImage(), giving arbitrary file read scoped to the Node.js process. If your service lets users influence image paths in a generated workbook, that is a read primitive for config files and key material. The advisory links the equivalent code in upstream exceljs v4.4.0 (lib/doc/workbook.js and lib/xlsx/xlsx.js), which is worth checking if you use the parent package rather than the fork.

nvd.nist.gov → (opens in a new tab)

ZDI-26-591: NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·26 Aug 2026 ·fetched 26 Aug 2026, 07:38 UTC Research CVE-2026-24272 EPSS 0.2% agreed2/2

Why readCVE-2026-24272 is a heap overflow in NVIDIA TensorRT's ONNX model parser: opening an untrusted model file gets code execution in the inference process.

ZDI-26-591 documents a heap-based buffer overflow in NVIDIA TensorRT's parsing of ONNX models, where user-supplied data length is not validated before being copied into a fixed-length heap buffer. Exploitation requires the target to open a malicious model or visit a malicious page, and yields code execution in the context of the current process. EPSS is low at 0.002, but the bug matters for anyone loading third-party models from model hubs into a TensorRT pipeline; NVIDIA has shipped an update.

zerodayinitiative.com → (opens in a new tab)

CVE-2026-76848 (CVSS 8.7): TypeORM's SelectQueryBuilder.distinctOn accepts an array of strings and stores it on the expression map without validation. For PostgreSQL-family driv (opens in a new tab)

NVD ·25 Aug 2026 ·fetched 25 Aug 2026, 19:39 UTC Research CVE-2026-76848 CVSS 8.7 EPSS 0.4% agreed2/2

Why readSQL injection in TypeORM's SelectQueryBuilder.distinctOn, with the exact function and file where the values are interpolated unescaped.

createSelectDistinctExpression in src/query-builder/SelectQueryBuilder.ts joins the distinctOn array and drops it straight into SELECT DISTINCT ON (...) with no escaping, quoting, identifier validation or allowlist, and without passing through replacePropertyNames or the driver's escape helper. Because the injection point is a parenthesized expression list rather than an identifier-only position, an element can carry arbitrary expressions including correlated subqueries, giving a client-controlled read of anything the application's database role can reach via boolean or time-based inference. validateOrderByCondition, the allowlist that guards orderBy in the same class, is never applied here, so any app that lets a caller pick a deduplication column is exposed on PostgreSQL-family drivers.

nvd.nist.gov → (opens in a new tab)

CVE-2026-78306 (CVSS 8.5): DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuratio (opens in a new tab)

NVD ·25 Aug 2026 ·fetched 25 Aug 2026, 19:39 UTC Research CVE-2026-78306 CVSS 8.5 EPSS 0.1% agreed2/2

Why readAn unauthenticated DUML command interface over Bluetooth lets anyone in range rewrite a DJI drone's Wi-Fi PSK and then reach the flight control interface.

DJI drones accept unauthenticated DUML commands over Bluetooth that modify SSID, PSK, MAC address, regulatory country code and channel. Overwriting the PSK with a known value lets an attacker in Bluetooth range join the drone's internal Wi-Fi and issue flight commands, and crafted commands can also restart or disable the radios to cut control, video and telemetry mid-flight. Affected firmware is listed per model, including Neo before 01.00.0400, Flip before 01.00.1200, Air 3 before 01.00.1600, Mavic 3 Pro before 01.01.0700 and Mavic 4 Pro before 01.00.0500.

nvd.nist.gov → (opens in a new tab)

CVE-2026-76847 (CVSS 8.7): act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of (opens in a new tab)

NVD ·25 Aug 2026 ·fetched 25 Aug 2026, 19:39 UTC Research CVE-2026-76847 CVSS 8.7 EPSS 0.2% agreed2/2

Why readact's Artifacts V4 backend ships a hardcoded four-byte HMAC key and a commented-out run ID ownership check, and binds to the host's outbound address by default.

Any workflow using actions/upload-artifact@v4 or download-artifact@v4 starts an HTTP backend whose CreateArtifact, GetSignedArtifactURL, ListArtifacts, FinalizeArtifact and DeleteArtifact RPCs accept a caller-supplied workflow_run_backend_id without verifying ownership: validateRunIDV4 in pkg/artifacts/artifacts_v4.go parses the value and returns it with the comparison left commented out. Signed URLs are authenticated with an HMAC keyed on the constant 0xba 0xdb 0xee 0xf0, identical in every build, computed over an unseparated concatenation of endpoint, expiry, artifact name and task ID, so signatures are both forgeable and ambiguous across differing name and task pairs. Because --artifact-server-addr defaults to the outbound interface rather than loopback, anyone on the same network as a developer running act can read, overwrite or delete artifacts.

nvd.nist.gov → (opens in a new tab)

ZDI-26-590: libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·25 Aug 2026 ·fetched 25 Aug 2026, 03:37 UTC Research CVE-2026-19773 agreed2/2

Why readUnauthenticated out-of-bounds write in libwebsockets' HTTP/2 HPACK path header parsing, in a library embedded across embedded and IoT products.

CVE-2026-19773 is an out-of-bounds write in libwebsockets when parsing the HTTP/2 HPACK path header, reachable with no authentication and leading to code execution in the process context. libwebsockets is widely vendored into embedded firmware and appliances, so the real work is inventory: find which shipped products link it and whether they expose HTTP/2. Fixed in commit 824151862f37bc72f46d9a3e01d5b9408d313a0b.

zerodayinitiative.com → (opens in a new tab)

State divergence enables unauthorized access (opens in a new tab)

Trail of Bits ·25 Aug 2026 ·fetched 25 Aug 2026, 11:41 UTC Research agreed2/2

Why readAn access control bug in Provenance Blockchain's marker module let any user grant themselves admin over tokenised asset accounts without holding a token, affecting 82 live mainnet markers.

Trail of Bits found that state divergence in the Cosmos SDK based Provenance chain's marker module allowed unauthorised users to add themselves to a marker's access control list, gaining mint, burn, withdraw and administrative rights over assets they had no stake in. It affected versions before 1.28.0 and 82 markers representing live financial instruments including tokenised loans, private equity and bridged assets; reported 1 April 2026 and fixed in PR #2627 (commit c81fd65), shipped in v1.28.0 on 1 May 2026. The class of bug, divergence between two views of the same state, generalises beyond this chain to any system enforcing authorisation against a stale or parallel state copy.

blog.trailofbits.com → (opens in a new tab)

CVE-2026-10582 (CVSS 8.3): Hugo's security.http.urls allowlist is the only control on outbound fetches made by resources.GetRemote, and it inspects the URL text alone. CheckAllo (opens in a new tab)

NVD ·25 Aug 2026 ·fetched 25 Aug 2026, 23:39 UTC Research CVE-2026-10582 CVSS 8.3 EPSS 0.3% agreed2/2

Why readHugo's security.http.urls allowlist checks URL text only and never resolves the hostname, so an attacker-supplied URL pointing at cloud metadata or loopback gets fetched by resources.GetRemote and baked into the published site.

CVE-2026-10582 shows CheckAllowedHTTPURL in config/security/securityConfig.go applying the pattern list and re-canonicalising integer, hex and octal IPv4 hosts, but never resolving the hostname or inspecting the address actually dialled; the client built in resources/resource_factories/create/create.go installs no dial-time hook either. A hostname resolving to loopback, RFC1918 or 169.254.169.254 therefore satisfies policy, and the fetched body is embedded in the generated output. Anyone taking URLs from front matter or a CMS field has a build-time SSRF whose results are exfiltrated in the static artifact itself, which is a useful reminder that allowlists validating strings rather than connections are not allowlists.

nvd.nist.gov → (opens in a new tab)

CVE-2026-76844 (CVSS 8.3): webpack-dev-middleware resolves a request to a local file in getFilenameFromUrl by testing the request pathname against a traversal guard and then sli (opens in a new tab)

NVD ·25 Aug 2026 ·fetched 25 Aug 2026, 23:39 UTC Research CVE-2026-76844 CVSS 8.3 EPSS 0.4% agreed2/2

Why readA publicPath without a trailing slash makes GET /assets../.env escape outputPath in webpack-dev-middleware, because the traversal guard only matches whole-segment dot-dot while the slice cuts mid-segment.

CVE-2026-76844 details a path traversal in webpack-dev-middleware's getFilenameFromUrl: UP_PATH_REGEXP applied to path.normalize(`./${pathname}`) only catches ".." standing as a complete path segment, while containment is tested with pathname.startsWith(publicPathPathname) and the file path is built from pathname.slice(publicPathPathname.length). With publicPath set to /assets and no trailing slash, a request for /assets../.env passes the guard because its dot-dot lives inside the segment "assets..", and the fixed-offset slice hands "../.env" to path.join. Reading the file requires a physical filesystem behind the middleware, meaning writeToDisk is true or a custom outputFileSystem is set, since the default memfs volume holds only build output.

nvd.nist.gov → (opens in a new tab)

CVE-2026-76840 (CVSS 8.5): RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste (opens in a new tab)

NVD ·25 Aug 2026 ·fetched 25 Aug 2026, 19:39 UTC Research CVE-2026-76840 CVSS 8.5 EPSS 0.3% agreed2/2

Why readHeap overflow in RustDesk's Windows clipboard file redirection, traced to a CopyMemory with a peer-controlled length that is only compared to the buffer size after the copy.

CliprdrStream_Read in libs/clipboard/src/windows/wf_cliprdr.c requests cb bytes of a remote file, then runs CopyMemory(pv, clipboard->req_fdata, clipboard->req_fsize) where req_fsize comes verbatim from the peer's CLIPRDR FileContentsResponse cbRequested field via wf_cliprdr_server_file_contents_response and is never clamped to cb. The only length check, req_fsize < cb, handles short reads and is evaluated after the copy has already happened, so a malicious peer answering a small read with an oversized response writes chosen data past the heap buffer of the OLE paste consumer, typically explorer.exe. Triggering it needs the local user to paste remote clipboard file contents, and since the code is a FreeRDP fork, other downstream forks are worth checking for the same pattern.

nvd.nist.gov → (opens in a new tab)

CVE-2026-78255 (CVSS 8.7): The HTTP media server running on DJI drones serves stored photos and videos through the `/v2` endpoint without authenticating the requesting client. F (opens in a new tab)

NVD ·25 Aug 2026 ·fetched 25 Aug 2026, 23:39 UTC Research CVE-2026-78255 CVSS 8.7 EPSS 0.2% agreed2/2

Why readDJI's on-drone HTTP media server serves stored photos and video from /v2 with no client authentication and predictable filenames, across sixteen named models with per-model fixed firmware.

Anyone who joins a drone's internal network can enumerate the predictable filename pattern and pull stored media from the /v2 endpoint without authenticating, exposing locations, property, travel history, identifiable people and operator routines (CVSS:4.0 AV:N/PR:N/UI:N/VC:H/SC:L, 8.7). Fixed firmware is enumerated per model, including DJI Neo until 01.00.0400, Flip until 01.00.1200, Air 3 until 01.00.1600, Air 3S until 01.00.1400, Avata 2 until 01.00.0400, Mavic 3 until 01.00.1400, Mavic 4 Pro until 01.00.0500, Mini 4 Pro until 01.00.1100 and Mini 5 Pro until 01.00.0600. Relevant to any organisation flying DJI airframes for survey, inspection or public safety work, where the media on the card is the sensitive asset.

nvd.nist.gov → (opens in a new tab)

CVE-2026-76842 (CVSS 8.8): The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are str (opens in a new tab)

NVD ·25 Aug 2026 ·fetched 25 Aug 2026, 23:39 UTC Research CVE-2026-76842 CVSS 8.8 EPSS 0.4% agreed2/2

Why readThe Mercado Pago Node.js SDK interpolates identifiers into API paths without percent-encoding, so a dot-dot or question mark in an id redirects the merchant's own access token to another endpoint.

Path parameters in the payment (get, capture, cancel), paymentRefund, advancedPayment and disbursementRefund clients are built as template literals, for example RestClient.fetch(`/v1/payments/${id}`) in src/clients/payment/get/index.ts. The WHATWG URL parser normalises traversal sequences and honours an appended query string, so an untrusted identifier forwarded without an ownership check reaches other resources inside the merchant token's scope. The repository already ships the correct helper, encodePathParam in src/utils/path.ts, which these call sites do not use; audit any code path that passes a user-supplied id into these methods.

nvd.nist.gov → (opens in a new tab)

ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·25 Aug 2026 ·fetched 25 Aug 2026, 07:37 UTC Research CVE-2026-64715 EPSS 0.4% agreed2/2

Why readSafari renderer RCE via a use-after-free in JavaScriptCore's B3 ReduceStrength optimisation phase, now patched by Apple.

ZDI-26-610 (CVE-2026-64715) documents a use-after-free in the B3 ReduceStrength phase of JavaScriptCore: the optimiser operates on an object without validating that it still exists. Exploitation needs the target to visit a malicious page or open a malicious file, and yields code execution in the renderer process, so a sandbox escape is still required for full compromise. EPSS is low at 0.0037 and Apple has shipped a fix.

zerodayinitiative.com → (opens in a new tab)

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520) (opens in a new tab)

Rapid7 ·Stephen Fewer ·24 Aug 2026 ·fetched 24 Aug 2026, 19:40 UTC Must read Research CVE-2026-63520 EPSS 2.9% agreed2/2

Why readFull exploitation detail for SharePoint RCE CVE-2026-63520, including the Database LOB system and ObjectDataProvider gadget chain, and how chaining CVE-2026-55040 turns it into unauthenticated RCE.

CVE-2026-63520 lets a remote authenticated user run code on a SharePoint server as the site's service account; chained with the authentication bypass CVE-2026-55040 the result is unauthenticated RCE. Rapid7 reached it through a Database Line-of-Business system and an ObjectDataProvider gadget chain, and contrasts that with VulnCheck's DotNet-based route to the same bug. Publication was pulled forward from the planned 30-day window because a third party had already released details, so expect public weaponisation pressure to rise quickly despite the currently modest EPSS of 0.029.

rapid7.com → (opens in a new tab)

CVE-2026-77812 (CVSS 9.4): DJI drones transmit DUML (DJI Universal Markup Language) protocol messages over BLE (Bluetooth Low Energy) without encryption. When a client attempts (opens in a new tab)

NVD ·23 Aug 2026 ·fetched 23 Aug 2026, 23:38 UTC Research CVE-2026-77812 CVSS 9.4 EPSS 0.1% agreed2/2

Why readPassive BLE sniffing within range of a DJI drone recovers the Wi-Fi SSID, PSK and the session UUID that is the only thing distinguishing a trusted client, letting an attacker join the drone network and skip the physical pairing confirmation.

DJI drones exchange DUML protocol messages with the DJI Fly app over unencrypted BLE, including the Wi-Fi credentials handed over when a client connects over Wi-Fi or the drone enters QuickTransfer mode. An attacker in BLE range captures the SSID, PSK and trusted-identifier UUID in cleartext, then joins the drone's internal network, reaches its exposed services, and decrypts traffic between the drone and its legitimate operator. Replaying the captured UUID bypasses the physical confirmation step for new devices, so the pairing control provides no real assurance.

nvd.nist.gov → (opens in a new tab)

CVE-2026-76641 (CVSS 8.7): Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external en (opens in a new tab)

NVD ·23 Aug 2026 ·fetched 23 Aug 2026, 15:38 UTC Research CVE-2026-76641 CVSS 8.7 EPSS 0.3% agreed2/2

Why readAn Expat out-of-bounds read introduced by the fix for CVE-2026-66046, affecting everything through 2.8.3 and reachable through external entity parsers.

A struct size mismatch between ELEMENT_TYPE members causes storeAtts to read the attIndex member past the allocation when parsing XML through parsers created with XML_ExternalEntityParserCreate. The result is either failure to normalise whitespace in non-CDATA attributes or a wild pointer dereference and segfault. That it is a regression from an earlier security fix matters operationally: anyone who patched CVE-2026-66046 promptly is the population now exposed, and Expat is linked into a very wide range of language runtimes and applications.

nvd.nist.gov → (opens in a new tab)

CVE-2026-55642 (CVSS 9.8): dbx is a cross-platform database client for databases. Prior to 0.5.51, dbx-web auth_middleware in crates/dbx-web/src/auth.rs passes every protected r (opens in a new tab)

NVD ·23 Aug 2026 ·fetched 23 Aug 2026, 11:36 UTC Research CVE-2026-55642 CVSS 9.8 EPSS 0.4% agreed2/2

Why readdbx-web's auth middleware waves through every protected request when password_hash is None, and the service binds 0.0.0.0:4224 by default, so a fresh deploy with DBX_PASSWORD unset is an open SQL execution endpoint.

CVE-2026-55642 pins the flaw to auth_middleware in crates/dbx-web/src/auth.rs: with no stored password and DBX_PASSWORD unset, the middleware passes requests straight to the handler chain. Because crates/dbx-web/src/main.rs binds to all interfaces on port 4224, an unauthenticated attacker can hit /api/connection/connect and /api/query/execute and run arbitrary SQL against the configured databases. Fixed in 0.5.51; the Tauri desktop build is unaffected because it binds loopback only.

nvd.nist.gov → (opens in a new tab)

CVE-2026-18265 (CVSS 9.8): OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on (opens in a new tab)

NVD ·22 Aug 2026 ·fetched 22 Aug 2026, 23:37 UTC Research CVE-2026-18265 CVSS 9.8 EPSS 1.0% agreed2/2

Why readUnauthenticated remote code execution as root on OSNEXUS QuantaStor storage appliances via an unauthenticated Kapacitor endpoint.

CVE-2026-18265 (CVSS 9.8) stems from Kapacitor being configured without authentication in front of functionality that permits code execution, giving an unauthenticated remote attacker root on the appliance. Reported through ZDI as ZDI-CAN-30036. EPSS is low at 0.010 with no observed exploitation, but a storage controller running as root is an attractive target once someone writes the request.

nvd.nist.gov → (opens in a new tab)

CVE-2026-44829 (CVSS 8.8): Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, filename handling in pkg/modules/api/context.go uses filepath.Base o (opens in a new tab)

NVD ·22 Aug 2026 ·fetched 22 Aug 2026, 03:36 UTC Research CVE-2026-44829 CVSS 8.8 EPSS 0.4% agreed2/2

Why readGotenberg's filename sanitisation uses filepath.Base on Linux, which ignores backslashes, so a Windows-style traversal name survives into the returned zip and writes outside the extraction directory.

In Gotenberg 8.32.0 and earlier, pkg/modules/api/context.go sanitises multipart filenames with filepath.Base, which does not treat backslashes as separators on Linux. The original name flows through ctx.diskToOriginal into archives.FilesFromDisk and archives.Zip.Archive as the zip entry name, so a submitted or downloadFrom Content-Disposition value such as ........\Windows\System32\evil.pdf becomes an arbitrary file write when a downstream Windows extractor unpacks the archive. Affected routes include /forms/pdfengines/split and the other multi-output PDF, LibreOffice and conversion endpoints; fixed in 8.33.0.

nvd.nist.gov → (opens in a new tab)

CVE-2026-64850 (CVSS 8.7): Grav is a file-based Web platform. Prior to 2.0.7, Grav Blueprint::dynamicData() in system/src/Grav/Common/Data/Blueprint.php sends an editor-controll (opens in a new tab)

NVD ·22 Aug 2026 ·fetched 22 Aug 2026, 11:40 UTC Research CVE-2026-64850 CVSS 8.7 EPSS 0.3% agreed2/2

Why readA concrete PHP callable-injection gadget chain in Grav before 2.0.7 turns admin.pages or api.pages.write into command execution as the web server user.

Blueprint::dynamicData() in system/src/Grav/Common/Data/Blueprint.php passes an editor-controlled Class::method provider and its arguments to call_user_func_array() without rejecting dangerous callbacks. An account with admin.pages or api.pages.write can use Grav\Common\Utils::arrayFilterRecursive() as a trampoline with system as the callback, plant the command in page frontmatter, and have it run when the page is rendered. Fixed in 2.0.7; the trampoline pattern is worth noting for anyone auditing similar blueprint or schema-driven callable resolution.

nvd.nist.gov → (opens in a new tab)

CVE-2026-53451 (CVSS 9.8): Ground Station is a browser-based suite for satellite tracking, SDR reception, hardware control, and telemetry decoding. Prior to version 0.4.13, the (opens in a new tab)

NVD ·22 Aug 2026 ·fetched 22 Aug 2026, 11:40 UTC Research CVE-2026-53451 CVSS 9.8 EPSS 0.7% agreed2/2

Why readA full unauthenticated RCE chain in Ground Station below 0.4.13: Socket.IO path traversal writes a YAML logging config, then dictConfig executes a callable factory on restart.

CVE-2026-53451 chains three unauthenticated Socket.IO operations in the browser-based Ground Station satellite suite. The save-waterfall-snapshot handler passes attacker-controlled snapshotName from backend/handlers/entities/sdr.py into backend/server/snapshots.py, where os.path.join accepts absolute paths and traversal and writes base64-decoded bytes anywhere on disk; the attacker drops a logging YAML containing a logging.config.dictConfig callable factory, points log_config at it via update-app-config, and calls restart_service so backend/common/logger.py executes it with service privileges. Fixed in 0.4.13; the dictConfig-as-code-execution primitive is reusable against any Python service that loads logging config from a writable path.

nvd.nist.gov → (opens in a new tab)

CVE-2026-76214 (CVSS 9.1): phpMyFAQ before 4.1.7 fails to persist the WebAuthn login challenge generated by prepareForLogin, because neither WebAuthn controller saves the mutate (opens in a new tab)

NVD ·22 Aug 2026 ·fetched 22 Aug 2026, 03:36 UTC Research CVE-2026-76214 CVSS 9.1 EPSS 0.3% agreed2/2

Why readphpMyFAQ never persisted its WebAuthn challenge, so a captured assertion replays forever and logs an attacker in without the hardware key.

In phpMyFAQ before 4.1.7 the login challenge produced by prepareForLogin is never written back to the database, because neither WebAuthn controller saves the mutated key objects. The anti-replay comparison then short-circuits on its own null guard, so anyone who captures one successful assertion can replay it indefinitely and authenticate as that user with no interaction. It is a clean example of a passkey deployment losing its replay protection to a missing persistence call, and worth reading if you review WebAuthn implementations.

nvd.nist.gov → (opens in a new tab)

CVE-2026-76207 (CVSS 8.6): phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where remember-me tokens are issued before 2FA verification completes. (opens in a new tab)

NVD ·22 Aug 2026 ·fetched 22 Aug 2026, 11:40 UTC Research CVE-2026-76207 CVSS 8.6 EPSS 0.3% agreed2/2

Why readphpMyFAQ before 4.1.7 issues remember-me tokens before the 2FA challenge completes, so a credential-holder can replay the cookie and skip the second factor entirely.

The remember-me cookie is minted at the point of password validation rather than after second-factor verification, so an attacker with valid credentials can collect the cookie, abandon the 2FA prompt, and replay it for fully authenticated access. Fixed in 4.1.7; advisory GHSA-hvj7-4fmg-53cr. The ordering mistake is worth checking for in any homegrown persistent-session implementation sitting alongside MFA.

nvd.nist.gov → (opens in a new tab)

CVE-2026-52792 (CVSS 8.7): Algernon is a small self-contained pure-Go web server. Prior to 1.17.9, Algernon on Windows selects a file handler in engine/handlers.go by calling fi (opens in a new tab)

NVD ·22 Aug 2026 ·fetched 22 Aug 2026, 11:40 UTC Research CVE-2026-52792 CVSS 8.7 EPSS 0.4% agreed2/2

Why readAppending NTFS name aliases such as x.lua::$DATA to a request path makes Algernon on Windows return raw script source, including its cookie secret.

Algernon before 1.17.9 picks its file handler in engine/handlers.go using filepath.Ext() without rejecting NTFS-equivalent names, so an unauthenticated request for a .lua, .tl, .po2, .amber or .frm script suffixed with ::$DATA, a trailing dot, or a trailing space skips the renderer and execution paths and falls through URL2filename to FilePage, os.Open and ToClient. NTFS resolves the alias back to the real script, so the server returns source code that can carry database credentials, API keys and SetCookieSecret, the last of which permits forged session cookies. Windows hosts only; Linux and macOS are unaffected. Fixed in 1.17.9.

nvd.nist.gov → (opens in a new tab)

CVE-2026-76213 (CVSS 9.1): phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped and reset (opens in a new tab)

NVD ·22 Aug 2026 ·fetched 22 Aug 2026, 11:40 UTC Research CVE-2026-76213 CVSS 9.1 EPSS 0.3% agreed2/2

Why readA clean example of a throttle-scoping bug: phpMyFAQ's 2FA failure counter lives in the session and resets on every successful password re-auth, so the five-attempt limit means nothing.

In phpMyFAQ before 4.1.7 the TOTP failure counter is session-scoped, and re-authenticating with the (already known) password issues a fresh session cookie that zeroes it. An attacker holding valid credentials can therefore guess TOTP codes without bound, defeating the second factor entirely. SSVC records a public proof of concept. Worth reading as a pattern to check in your own rate limiting: counters keyed to a session or cookie rather than to the account or the second-factor secret.

nvd.nist.gov → (opens in a new tab)

CVE-2026-76205 (CVSS 8.6): phpMyFAQ before 4.1.7 contains a SQL injection vulnerability in the glossary create and update endpoints caused by truncating an escaped string before (opens in a new tab)

NVD ·22 Aug 2026 ·fetched 22 Aug 2026, 11:40 UTC Research CVE-2026-76205 CVSS 8.6 EPSS 0.2% agreed2/2

Why readA dangling-backslash SQL injection in phpMyFAQ's glossary endpoints, caused by truncating a string after escaping rather than before.

phpMyFAQ before 4.1.7 escapes glossary input and then truncates the result before embedding it in a SQL literal, so a payload ending in a backslash can survive truncation, consume the closing quote and inject arbitrary SQL. An authenticated user with glossary add or edit permission can read sensitive database contents. Fixed in 4.1.7; advisory GHSA-79h3-6hxj-g98h, and the escape-then-truncate ordering is a pattern worth grepping for elsewhere.

nvd.nist.gov → (opens in a new tab)

CVE-2026-71961 (CVSS 8.7): Cudy WR3000 2.0 running firmware before 2.5.24 contains an OS command injection vulnerability that allows authenticated attackers to execute arbitrary (opens in a new tab)

NVD ·22 Aug 2026 ·fetched 22 Aug 2026, 11:40 UTC Research CVE-2026-71961 CVSS 8.7 EPSS 3.3% agreed2/2

Why readRoot command injection through the Cudy WR3000 mesh MQTT command interface, with the highest EPSS in today's batch (0.033, 88th percentile) and a companion bug that supplies the missing credentials.

The sync_command binary passes unsanitised input straight to a shell sink in command.lua, and the command execution path is enabled by default, so anyone who can talk to the MQTT broker gets arbitrary commands as root. Fixed in firmware 2.5.24. Read it alongside CVE-2026-71960, the hard-coded JWT signing secret in the same firmware, which removes the authentication requirement and turns this into a full unauthenticated device takeover.

nvd.nist.gov → (opens in a new tab)

No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452 (opens in a new tab)

Bishop Fox ·21 Aug 2026 ·fetched 21 Aug 2026, 19:39 UTC Research CVE-2026-8452 EPSS 1.0% agreed2/2

Why readA way to prove from outside the appliance whether your NetScaler is genuinely patched against CVE-2026-8452, without crashing it, plus the one crash artifact that looks like exploitation and is not.

CVE-2026-8452 is a heap overflow in the SAML single sign-on parser on Citrix NetScaler ADC and Gateway, reachable pre-authentication in one HTTP request against any Gateway or AAA vserver with SAML configured, and it corrupts memory in the process handling all appliance traffic. Bishop Fox worked out that patch state is observable from the outside in one or two ordinary SAML exchanges, and released a checker covering both directions of the exchange, which matters because upgrading the build does not guarantee every virtual server picked up the fix. The post also lays out compromise indicators to hunt for and flags a crash signature that practitioners are likely to misread as evidence of an attack.

bishopfox.com → (opens in a new tab)

CVE-2026-45790 (CVSS 8.0): Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.6, Dokploy's organization.inviteMember tRPC procedure in apps/dokploy/ser (opens in a new tab)

NVD ·20 Aug 2026 ·fetched 20 Aug 2026, 15:37 UTC Research CVE-2026-45790 CVSS 8.0 EPSS 0.3% agreed2/2

Why readA member-level Dokploy user can invite an owner-role account and take over the organization permanently, since owner roles cannot be demoted.

Before 0.29.6, Dokploy's organization.inviteMember tRPC procedure lets a user holding member:create invite an account with the owner role, and user.ts lets a privileged self-hosted user mint an account with an arbitrary role. Because owner roles cannot be demoted, this yields permanent organization takeover of the self-hosted PaaS. Fixed in 0.29.6.

nvd.nist.gov → (opens in a new tab)

CVE-2026-74907 (CVSS 8.2): Grav before 2.0.15 contains a path traversal vulnerability in the static asset server within index.php that uses string prefix matching instead of dir (opens in a new tab)

NVD ·20 Aug 2026 ·fetched 20 Aug 2026, 19:38 UTC Research CVE-2026-74907 CVSS 8.2 EPSS 0.3% agreed2/2

Why readGrav before 2.0.15 serves static assets using string prefix matching, so an unauthenticated request for `assets-secret` escapes the `assets` base directory.

The static asset server in Grav's index.php compares the requested path against the configured base as a string prefix rather than validating a directory boundary, letting sibling directories whose names extend that prefix be read without authentication. No credentials or user interaction are needed, though the vector records high attack complexity and a passive precondition, presumably the attacker needing to know or guess the sibling directory name. Patched in 2.0.15; see GHSA-4v9q-p283-qc2m.

nvd.nist.gov → (opens in a new tab)

CVE-2026-74238 (CVSS 8.7): TIER IV Nebula through 1.2.0 contains an out-of-bounds read vulnerability in the Vlp32Decoder::unpack() function that allows unauthenticated remote at (opens in a new tab)

NVD ·20 Aug 2026 ·fetched 20 Aug 2026, 07:39 UTC Research CVE-2026-74238 CVSS 8.7 EPSS 0.4% agreed2/2

Why readA short UDP datagram makes TIER IV Nebula read past its buffer and publish heap-derived fake lidar points into Autoware's PointCloud2 stream.

Nebula through 1.2.0 reads out of bounds in Vlp32Decoder::unpack() when a datagram shorter than expected arrives on the Velodyne UDP sensor port, which unlike the other drivers applies no sender-address restriction. The decoder walks into adjacent heap memory and silently emits fabricated points into downstream PointCloud2 messages consumed by Autoware nodes, so the consequence is data integrity in a perception stack rather than a crash (CVSS 4.0 VI:H). Anyone running Autoware with Velodyne input should restrict the sensor port by source address and upgrade.

nvd.nist.gov → (opens in a new tab)

Yet another RCE in Gogs, but it's fixed this time! (opens in a new tab)

Aikido Security ·19 Aug 2026 ·fetched 19 Aug 2026, 15:38 UTC Research CVE-2026-52813 EPSS 0.9% agreed2/2

Why readCVE-2026-52813 is a remote code execution bug in Gogs fixed in 0.14.3, alongside a read-only repository write flaw (CVE-2026-52810) and one still-unpatched bypass with a manual code patch supplied.

Aikido's writeup covers a new RCE in the Gogs self-hosted Git platform, rooted in its heavy reliance on the git CLI, plus a logic bug that permits writes to read-only repositories. All reported issues are fixed in 0.14.3, but one bypass of a previously reported vulnerability remains unpatched and the post ships a manual patch for it. EPSS is low at 0.009, so this is upgrade-now-on-your-schedule rather than under-attack, but self-hosted Gogs instances are frequently internet-facing.

aikido.dev → (opens in a new tab)

CVE-2026-9771 (CVSS 8.8): The flash_copy() system call is verified by z_vrfy_flash_copy() in drivers/flash/flash_util.c. On builds with CONFIG_USERSPACE enabled, this handler i (opens in a new tab)

NVD ·19 Aug 2026 ·fetched 19 Aug 2026, 15:38 UTC Research CVE-2026-9771 CVSS 8.8 EPSS 0.1% agreed2/2

Why readA missing K_SYSCALL_DRIVER_FLASH check in Zephyr's z_vrfy_flash_copy() lets a user-mode thread hand the kernel a forged struct device and get arbitrary supervisor-mode execution.

z_vrfy_flash_copy() in drivers/flash/flash_util.c validated only the output buffer with K_SYSCALL_MEMORY_WRITE and passed src_dev and dst_dev through unchecked, unlike every sibling flash syscall which guards its device pointer. Because z_impl_flash_copy() dereferences those pointers and calls through their driver API tables (api->get_parameters, flash_read, flash_write), an unprivileged thread on a CONFIG_USERSPACE build can point them at a fake device in its own address space and choose the function pointers the kernel calls. Clean writeup of a trust-boundary omission, and a useful audit pattern for anyone reviewing syscall verifiers in RTOS code.

nvd.nist.gov → (opens in a new tab)

ZDI-26-568: Linux Kernel Net Scheduler Race Condition Local Privilege Escalation Vulnerability (opens in a new tab)

ZDI Published Advisories ·18 Aug 2026 ·fetched 18 Aug 2026, 23:37 UTC Research agreed2/2

Why readNames the exact kernel object behind a local privilege escalation, tcf_tunnel_key_params, and links the upstream fix commit.

A race condition in the Linux kernel net scheduler's handling of tcf_tunnel_key_params objects stems from missing locking and lets a local attacker execute code in kernel context. ZDI notes the attacker must already run high-privileged code on the target, and the fix landed upstream in commit f1f5c8a3955f. Useful for anyone maintaining kernel backports or writing detections around tc class actions.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-569: Linux Kernel Net Scheduler True Link Equalizer Race Condition Local Privilege Escalation Vulnerability (opens in a new tab)

ZDI Published Advisories ·18 Aug 2026 ·fetched 18 Aug 2026, 11:37 UTC Research agreed2/2

Why readLocal privilege escalation to kernel context in the Linux net scheduler TEQL qdisc, with the upstream fix commit named so you can check whether your kernel carries it.

ZDI-26-569 is a race condition in the handling of qdisc objects in the True Link Equalizer scheduler: missing locking around object operations lets a local attacker execute arbitrary code in kernel context. Exploitation requires the ability to run high-privileged code first, which limits the practical blast radius. Linux has shipped a fix; the advisory points at commit e5b811fe793166aecc59b085c1b7c31262ef2316 in torvalds/linux.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-573: Linux Kernel KSMBD Response Header Out-Of-Bounds Read Information Disclosure Vulnerability (opens in a new tab)

ZDI Published Advisories ·17 Aug 2026 ·fetched 17 Aug 2026, 23:38 UTC Research agreed2/2

Why readUnauthenticated out-of-bounds read in the Linux kernel's ksmbd server via init_smb2_rsp_hdr, with the upstream fix commit linked.

ZDI-26-573 documents an out-of-bounds read in the init_smb2_rsp_hdr functions of the in-kernel SMB server ksmbd, reachable remotely without authentication on hosts where ksmbd is enabled. The flaw leaks kernel memory and is positioned as an information-disclosure primitive to pair with other bugs for kernel-context code execution. The fix landed upstream in commit cfc0b8e5080aec87700774e8568765eaa4b7b92b; the exposure is limited to systems that actually run ksmbd rather than Samba.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-566: BlackBerry QNX KEV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·17 Aug 2026 ·fetched 17 Aug 2026, 11:35 UTC Research CVE-2026-40272 EPSS 0.1% agreed2/2

Why readOut-of-bounds write in BlackBerry QNX's KEV file parser gives remote code execution in the context of the parsing process, tracked as CVE-2026-40272.

ZDI-26-566 documents a heap write past an allocated buffer in BlackBerry QNX's handling of KEV files, caused by missing validation of user-supplied data. Exploitation requires user interaction: the target must open a malicious file or visit a malicious page, and code runs as the current process. BlackBerry has shipped a fix; EPSS is negligible at 0.00113, so this is a patch-in-cycle item for QNX embedded and automotive fleets rather than an emergency.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-575: Linux Kernel Net Scheduler Packet Classifier API Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability (opens in a new tab)

ZDI Published Advisories ·17 Aug 2026 ·fetched 17 Aug 2026, 19:37 UTC Research agreed2/2

Why readA time-of-check time-of-use race in the Linux kernel traffic classifier API, with the upstream fixing commit linked.

ZDI-26-575 documents missing locking around an object in the kernel net scheduler packet classifier API, giving a local attacker code execution in kernel context. Exploitation requires the ability to run high-privileged code first, which limits its value as an initial-access primitive but makes it useful as a container or namespace escape step. The fix is torvalds/linux commit 8b519cbcabe836a441369fbec1a8a6518a709251.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-574: Linux Kernel Net Scheduler Connection Tracking Race Condition Local Privilege Escalation Vulnerability (opens in a new tab)

ZDI Published Advisories ·17 Aug 2026 ·fetched 17 Aug 2026, 07:41 UTC Research CVE-2026-46319 EPSS 0.1% agreed2/2

Why readRoot-cause detail for a Linux kernel local privilege escalation in tcf_ct_flow_table handling, with the upstream fix commit linked.

CVE-2026-46319 is a race condition in the net scheduler's connection-tracking flow table: operations on tcf_ct_flow_table objects are performed without proper locking, letting a local attacker execute code in kernel context. ZDI credits an upstream fix at commit f462dca0c8415bf0058d0ffa476354c4476d0f09. EPSS is negligible at 0.00125 and exploitation requires existing local code execution, so this is kernel patch hygiene plus a clean read on the bug class rather than an emergency.

zerodayinitiative.com → (opens in a new tab)

CVE-2026-49864 (CVSS 8.6): wetty provides terminal access in browser over http/https. Prior to version 3.0.4, the wetty client decodes a base64 filename from the file-download e (opens in a new tab)

NVD ·16 Aug 2026 ·fetched 16 Aug 2026, 15:41 UTC Research CVE-2026-49864 CVSS 8.6 EPSS 0.3% agreed3/3

Why readTerminal output containing an ANSI file-download escape sequence executes script in the wetty origin and types attacker-chosen keystrokes into the victim's SSH session.

Before 3.0.4 the wetty client base64-decodes the filename from the \x1b[5i...:...\x1b[4i sequence and interpolates it raw into a Toastify HTML string with escapeMarkup set to false. Any rendered content reaches it: a cat'd file, a tailed log, an SSH MOTD, a curl response. That turns passive output into command execution as the logged-in user. Fixed in 3.0.4.

nvd.nist.gov → (opens in a new tab)

CVE-2026-73564 (CVSS 8.7): frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by ad (opens in a new tab)

NVD ·16 Aug 2026 ·fetched 16 Aug 2026, 15:41 UTC Research CVE-2026-73564 CVSS 8.7 EPSS 0.4% agreed3/3

Why readA five-byte SSH request kills frps and drops every active tunnel on frp 0.53.0 to 0.70.0 where the SSH Tunnel Gateway is enabled.

pkg/ssh/server.go adds 4 to an attacker-controlled four-byte big-endian length; 0xFFFFFFFF wraps the uint32 to 3, defeats the bounds check, and payload[4:3] panics in TunnelServer.handleNewChannel. With no authorized-keys file configured, sshConfig.NoClientAuth lets an unauthenticated peer reach the channel phase before the frp token is validated, so the crash is pre-auth. Upgrade to 0.70.1 or disable the SSH tunnel gateway.

nvd.nist.gov → (opens in a new tab)

CVE-2026-57894 (CVSS 8.5): Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration (opens in a new tab)

NVD ·16 Aug 2026 ·fetched 16 Aug 2026, 15:41 UTC Research CVE-2026-57894 CVSS 8.5 EPSS 0.3% agreed3/3

Why readGitea through 1.26.4 validates a migration URL against the allow/block list and then follows Git HTTP redirects, letting a low-privileged user pull internal repositories out through the server.

The allow/block check happens before redirect handling, so an attacker-controlled external host can answer with a redirect to an internal Git endpoint that the server then clones on their behalf. CVSS 3.1 records a scope change with high confidentiality impact, and CISA's ADP entry marks exploitation status as proof of concept. Details are in GHSA-82f7-87hm-852x; upgrade past 1.26.4.

nvd.nist.gov → (opens in a new tab)

CVE-2026-13048 (CVSS 8.2): Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon i (opens in a new tab)

NVD ·16 Aug 2026 ·fetched 16 Aug 2026, 15:41 UTC Research CVE-2026-13048 CVSS 8.2 EPSS 0.5% agreed3/3

Why readData::MuForm::Localizer through 0.05 executes Perl taken from a message catalog Plural-Forms header, reachable at an arbitrary path via traversal in the language attribute.

load_lexicon builds the catalog path as Messages/$lang.po relative to Localizer.pm without checking that $lang is a bare locale tag, so ../ segments load any readable .po file. extract_header_msgstr then prefixes $ to nplurals, plural and n in the Plural-Forms header and evaluates the remainder, so a header of nplurals=2; plural=(system('...'),0); runs a command at catalog load time. Anywhere the language attribute is user-influenced, this is remote code execution.

nvd.nist.gov → (opens in a new tab)

ZDI-26-564: NVIDIA Transformers4Rec load_model_trainer_states_from_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·16 Aug 2026 ·fetched 16 Aug 2026, 07:39 UTC Research CVE-2026-24232 EPSS 0.1% agreed3/3

Why readUnsafe checkpoint deserialization in NVIDIA Transformers4Rec gives code execution in the loading process, one to check if your ML training stack pulls third-party checkpoints.

CVE-2026-24232 sits in load_model_trainer_states_from_checkpoint, which fails to validate user-supplied data before deserialising it, letting an attacker execute code in the context of the loading process. Exploitation requires the target to open a malicious file or visit a malicious page, so this is a model supply-chain problem rather than a remote-unauthenticated one. NVIDIA has shipped an update; EPSS is negligible at 0.0014.

zerodayinitiative.com → (opens in a new tab)

CVE-2026-16101 (CVSS 8.8): Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below (opens in a new tab)

NVD ·16 Aug 2026 ·fetched 16 Aug 2026, 11:39 UTC Research CVE-2026-16101 CVSS 8.8 EPSS 0.2% agreed3/3

Why readSpoofing an already bonded peer forces RS9116W and SiWx917 chips to re-pair with a rogue device, the core BLERP attack primitive.

V1 of the NDSS BLERP paper: an attacker impersonating a device already in the bond table can drive the Silicon Labs stack into a fresh pairing exchange with attacker-controlled parameters, defeating the assumption that bonding is a one-time trust decision. AV:A with high impact across all three dimensions; fixes are in the RS9116 WiseConnect and SiSDK BLE release notes. Anyone shipping BLE peripherals on these parts should read the paper before assuming their own stack handles re-pairing correctly.

nvd.nist.gov → (opens in a new tab)

ZDI-26-583: Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·15 Aug 2026 ·fetched 15 Aug 2026, 15:40 UTC Research CVE-2026-20215 EPSS 0.5% agreed3/3

Why readRemote code execution in ClamAV via an integer overflow when parsing 7z archive streams, which matters because ClamAV sits in mail and file-upload paths and eats attacker-supplied archives by design.

CVE-2026-20215 is an integer overflow in ClamAV's parsing of streams inside 7z files: user-supplied data is not validated before a buffer allocation, allowing code execution in the ClamAV process context. Cisco has shipped a fix under advisory cisco-sa-clamav-88cFYyxR. The interaction requirement is weak in practice for gateway deployments, where scanning an inbound archive is the interaction.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-571: Linux Kernel Net Scheduler Packet Classifier API Use-After-Free Local Privilege Escalation Vulnerability (opens in a new tab)

ZDI Published Advisories ·15 Aug 2026 ·fetched 15 Aug 2026, 07:39 UTC Research CVE-2026-64530 EPSS 0.5% agreed3/3

Why readUse-after-free in the Linux kernel's tcf_qevent_handle function gives local privilege escalation to kernel context, with the upstream fix commit linked.

CVE-2026-64530 is a use-after-free in the net scheduler packet classifier API: tcf_qevent_handle operates on an object without validating it still exists, letting a low-privileged local user execute code in kernel context. Linux has committed a fix (a8a02897f2b4), so the patch is available to backport or pull from your distro. EPSS is low at 0.005 and exploitation requires prior local code execution, so this is container-escape and multi-tenant hygiene rather than an emergency.

zerodayinitiative.com → (opens in a new tab)

CVE-2025-59321 (CVSS 9.8): CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the (opens in a new tab)

NVD ·15 Aug 2026 ·fetched 15 Aug 2026, 07:39 UTC Research CVE-2025-59321 CVSS 9.8 EPSS 0.5% agreed3/3

Why readCryptoPro Secure Disk for BitLocker sealed to TPM PCRs that ignore boot state, so the key unseals on another machine or via an unintended boot path.

Versions before 7.7.4 ship a default TPM PCR policy that does not account for system boot state, allowing the sealed volume key to be released through an alternate execution path or after moving the hardware. That defeats the threat model full disk encryption is bought for, evil-maid and stolen-laptop access to data at rest. The advisory points at the Black Hat USA 2026 talk and whitepaper "The Cost of Obscurity" by Burch, which carry the full analysis of the product family.

nvd.nist.gov → (opens in a new tab)

CVE-2026-49827 (CVSS 9.8): WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1.19 and prior allow any self-registered user to up (opens in a new tab)

NVD ·15 Aug 2026 ·fetched 15 Aug 2026, 23:38 UTC Research CVE-2026-49827 CVSS 9.8 EPSS 0.5% agreed3/3

Why readArbitrary PHP upload via the HR Expense scan_file parameter in WebErpMesv2 1.19 and earlier chains with open registration into effectively unauthenticated RCE.

Any self-registered user of WebErpMesv2 can upload arbitrary PHP through the HR Expense scan_file parameter and reach code execution. Because registration needs no invite and the CheckUserRole middleware silently swallows RouteNotFoundException, the role check does not hold, making a default installation exploitable without prior access. Fixed in commit 5c54862fa044b363fd2be03d586750e81afd6818.

nvd.nist.gov → (opens in a new tab)

ZDI-26-580: Cisco Identity Services Engine Missing Authentication for Critical Function Information Disclosure Vulnerability (opens in a new tab)

ZDI Published Advisories ·15 Aug 2026 ·fetched 15 Aug 2026, 11:37 UTC Research CVE-2026-20190 EPSS 0.5% agreed3/3

Why readCVE-2026-20190 lets an unauthenticated remote attacker pull stored credentials out of Cisco ISE through the upgrade file handling path.

The flaw is missing authentication on functionality that handles upgrade files in Cisco Identity Services Engine, so no credentials are needed to reach it. An attacker can retrieve stored credentials, which turns an information disclosure into a route to wider compromise of whatever ISE authenticates against. Cisco has patched it in advisory cisco-sa-ise-multi-G5WP8vv; EPSS is currently low at 0.005, so this is patch-on-schedule rather than emergency.

zerodayinitiative.com → (opens in a new tab)

CVE-2025-59324 (CVSS 9.1): CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file in (opens in a new tab)

NVD ·15 Aug 2026 ·fetched 15 Aug 2026, 11:37 UTC Research CVE-2025-59324 CVSS 9.1 EPSS 0.1% agreed3/3

Why readCryptoPro Secure Disk for BitLocker before 7.7.4 skips every file integrity check when LUKS encryption is detected, disclosed with a Black Hat USA 2026 whitepaper.

The product fails to properly validate LUKS encryption, and when encryption is present all CryptoPro integrity checks are bypassed, giving an unauthenticated network attacker confidentiality and integrity impact at CVSS 9.1. The finding comes from Burch's Black Hat USA 2026 talk 'The Cost of Obscurity', which ships both slides and a whitepaper. Fixed in v7.7.4; the paper is the reason to open this rather than the NVD record.

nvd.nist.gov → (opens in a new tab)

CVE-2026-73300 (CVSS 9.6): Budibase is an open-source low-code platform. Prior to 3.40.0, the MySQL integration component in Budibase is configured with multipleStatements: true (opens in a new tab)

NVD ·15 Aug 2026 ·fetched 15 Aug 2026, 07:39 UTC Research CVE-2026-73300 CVSS 9.6 EPSS 0.4% agreed3/3

Why readBudibase's MySQL connector sets multipleStatements: true, so a single injection point yields stacked queries and full database compromise.

Before 3.40.0, the Budibase MySQL integration configures the driver with multipleStatements enabled, allowing several SQL statements per query. Injected input through user-facing fields therefore escalates from data disclosure to arbitrary statement execution against the connected database. CISA's SSVC record notes a public proof of concept; fixed in 3.40.0 and detailed in GHSA-q6x4-v3qx-85qw.

nvd.nist.gov → (opens in a new tab)

ZDI-26-579: Cisco Identity Services Engine zipFiles Directory Traversal Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·15 Aug 2026 ·fetched 15 Aug 2026, 03:42 UTC Research CVE-2026-20181 EPSS 0.7% agreed3/3

Why readPath traversal in the zipFiles method of Cisco Identity Services Engine gives authenticated attackers code execution as the iseadminportal user.

CVE-2026-20181 stems from missing validation of a user-supplied path before it is used in file operations, letting an attacker write outside the intended directory and execute code in the ISE admin portal context. Authentication is required and EPSS sits at 0.007, so this is a patch-in-cycle item rather than an emergency, but ISE holds network access policy and its compromise is a lateral movement multiplier. Cisco has shipped a fix in advisory cisco-sa-ise-multi-G5WP8vv.

zerodayinitiative.com → (opens in a new tab)

You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?)) (opens in a new tab)

watchTowr Labs ·Sina Kheirkhah (@SinSinology) ·14 Aug 2026 ·fetched 14 Aug 2026, 11:38 UTC Must read Research CVE-2026-8452 EPSS 0.5% agreed3/3

Why readThe first public pre-authentication RCE writeup against Citrix NetScaler in three years, from a team whose NetScaler research has historically preceded mass exploitation by days.

watchTowr Labs walks through a pre-auth remote code execution flaw in Citrix NetScaler, tracked provisionally as CVE-2026-8452, on an appliance class that sits at the network edge and terminates SSLVPN sessions. The writeup is primary exploit research rather than advisory coverage, so it carries the reachability details and code path needed to judge whether your configuration is exposed and to build detection while you patch. NetScaler pre-auth bugs have a consistent history of moving from public writeup to opportunistic scanning quickly, and EPSS at the 40th percentile reflects only what has been seen so far, not what this becomes once the technique circulates.

labs.watchtowr.com → (opens in a new tab)

ZDI-26-584: dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service Vulnerability (opens in a new tab)

ZDI Published Advisories ·14 Aug 2026 ·fetched 14 Aug 2026, 03:39 UTC Research CVE-2026-4890 EPSS 7.2% agreed3/3

Why readCVE-2026-4890 lets an unauthenticated remote attacker hang dnsmasq through a missing loop exit condition in NSEC record handling, which matters wherever dnsmasq is the resolver on a router or embedded device.

The flaw sits in dnsmasq's processing of DNSSEC NSEC and NSEC3 type bitmaps, where the loop lacks a proper exit condition and can be driven into an infinite loop. No authentication is required, and the result is denial of service on the affected installation. EPSS is only 0.072 but sits in the 93rd percentile; the practical exposure is embedded and appliance builds of dnsmasq that will patch slowly, if at all.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·13 Aug 2026 ·fetched 13 Aug 2026, 19:40 UTC Research CVE-2026-27654 EPSS 21.7% agreed3/3

Why readUnauthenticated RCE in the NGINX HTTP DAV module via an integer underflow in alias-directive WebDAV request parsing, EPSS in the 97th percentile.

CVE-2026-27654 is an integer underflow in NGINX's parsing of WebDAV requests handled under an alias directive: user-supplied data is not validated before a memory write, giving remote code execution in the context of the service account with no authentication. ZDI's advisory carries the technical root cause but no patch reference in the text supplied. Any NGINX build with ngx_http_dav_module compiled in and DAV enabled behind an alias is exposed directly to the internet, and the EPSS percentile of 0.97 suggests exploit interest is already elevated.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·13 Aug 2026 ·fetched 13 Aug 2026, 23:38 UTC Research CVE-2026-20147 EPSS 11.7% agreed3/3

Why readCommand injection in Cisco ISE's invokeScript method yields remote code execution as the iseadminportal user, with a patch already available.

CVE-2026-20147 stems from missing validation of a user-supplied string before it is passed to a system call in the invokeScript implementation of Cisco Identity Services Engine. Exploitation requires authentication but grants code execution in the context of the iseadminportal user, which on a NAC policy server is a serious foothold. EPSS is 0.117 but sits in the 95.7th percentile; Cisco has published a fix in advisory cisco-sa-ise-rce-traversal-8bYndVrZ.

zerodayinitiative.com → (opens in a new tab)

Zoom Zero-Click RCE Flaws Allow Any Meeting Attendee to Compromise All Participants (opens in a new tab)

Orca Security ·The Orca Research Pod ·12 Aug 2026 ·fetched 12 Aug 2026, 23:39 UTC Research CVE-2026-53415 EPSS 0.4% agreed3/3

Why readMemory corruption in Zoom Workplace annotation message handling gives zero-click RCE against every participant in a meeting, on all platforms.

CVE-2026-53413 and CVE-2026-53415 (CVSS 8.3 and 9.0) are critical memory corruption bugs in Zoom Workplace clients, reachable through malicious annotation messages sent inside a meeting. Any attendee can use them to compromise all other participants without user interaction, putting full device compromise one meeting invitation away. Client patching should be pushed on managed fleets rather than left to user-initiated updates, given how much of the install base sits on personal machines.

orca.security → (opens in a new tab)

ZDI-26-535: (Pwn2Own) Microsoft Exchange External Control of File Path Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·12 Aug 2026 ·fetched 12 Aug 2026, 03:37 UTC Research CVE-2026-62911 agreed2/2

Why readPwn2Own Exchange bug that yields code execution as SYSTEM via an unvalidated user-supplied file path, with the required authentication bypassable.

CVE-2026-62911 in Microsoft Exchange stems from missing validation of a user-supplied path before it is used in file operations, giving a remote attacker arbitrary code execution as SYSTEM. Authentication is nominally required but ZDI notes the existing mechanism can be bypassed, which pairs it with the capture-replay auth bypass filed the same day. Microsoft has shipped an update; on-premises Exchange operators should treat this as priority patching given the product's exposure.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-534: (Pwn2Own) Microsoft Exchange Capture-Replay Authentication Bypass Vulnerability (opens in a new tab)

ZDI Published Advisories ·12 Aug 2026 ·fetched 12 Aug 2026, 03:37 UTC Research CVE-2026-62911 agreed2/2

Why readThe unauthenticated half of the Exchange chain: a weak alternative authentication path that lets an attacker replay captured credentials with no prior access.

Exchange exposes an alternative, weak authentication path in its handling of authentication requests, allowing a capture-replay bypass with no authentication required. Combined with the file path RCE tracked under the same CVE-2026-62911, it turns an authenticated code execution bug into a full unauthenticated chain. Both were demonstrated at Pwn2Own and are fixed in Microsoft's update.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-533: Cisco Secure Firewall Management Center login.cgi Authentication Bypass Vulnerability (opens in a new tab)

ZDI Published Advisories ·12 Aug 2026 ·fetched 12 Aug 2026, 03:37 UTC Research CVE-2026-20316 EPSS 0.8% agreed2/2

Why readUnauthenticated authentication bypass in the login.cgi endpoint of Cisco Secure Firewall Management Center, the console that governs your FTD estate.

CVE-2026-20316 lets a remote attacker with no credentials bypass authentication on Cisco Secure Firewall Management Center through a flawed authentication algorithm in login.cgi; Cisco's own advisory identifier (cisco-sa-fmc-static-cred-BET3Cjh) points to a static credential as the root cause. Compromise of FMC means control of the firewall policy for every managed device behind it. EPSS is currently low at 0.008, but the pre-auth nature and the target make this a same-week patch.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-527: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·12 Aug 2026 ·fetched 12 Aug 2026, 03:37 UTC Research CVE-2026-44901 agreed2/2

Why readA deserialization bug in Wazuh's cluster DAPI protocol lets a compromised worker node execute code as root on the master.

CVE-2026-44901 sits in Wazuh's handling of the sort_casting field in the cluster Distributed API protocol, where unvalidated data reaches a deserialization routine. An attacker with low-privileged code execution on a worker node pivots to root on the master, collapsing the trust boundary between cluster members. Wazuh has published GHSA-8c6v-7g3w-prrq with fixed versions; anyone running multi-node Wazuh should upgrade and review worker node isolation.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-528: Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·12 Aug 2026 ·fetched 12 Aug 2026, 03:37 UTC Research CVE-2026-28220 EPSS 0.4% agreed2/2

Why readDeserialization flaw in Wazuh's cluster DAPI protocol escalates a foothold on a worker node into root on the master.

CVE-2026-28220 sits in Wazuh's as_wazuh_object deserializer, which accepts untrusted data over the cluster DAPI protocol. An attacker who can run low-privileged code on a worker node executes code as root on the master, collapsing the trust boundary of the SIEM that is supposed to witness the intrusion. Fixed per GHSA-w2jj-pfq9-mh9p; multi-node Wazuh operators should patch and review inter-node network segmentation.

zerodayinitiative.com → (opens in a new tab)

ZDI-26-546: Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·12 Aug 2026 ·fetched 12 Aug 2026, 03:37 UTC Research CVE-2026-69264 EPSS 0.6% agreed2/2

Why readAn unauthenticated path to arbitrary code execution on any exposed Flowise instance, in a product that often sits inside internal AI stacks with broad credential access.

ZDI-26-546 (CVE-2026-69264) covers a code injection flaw in the run method of Flowise's Airtable_Agents class, where a user-supplied string reaches Python execution without validation. No authentication is required, and code runs as the Flowise service account. The fix landed in FlowiseAI PR 6499; EPSS is still low at 0.6 percent, which reflects observed exploitation rather than the ease of the bug.

zerodayinitiative.com → (opens in a new tab)

Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040) (opens in a new tab)

Rapid7 ·Stephen Fewer ·11 Aug 2026 ·fetched 11 Aug 2026, 15:38 UTC Research CVE-2026-55040 EPSS 1.6% agreed2/2

Why readFull root-cause analysis plus a working PoC for the SharePoint JWT auth bypass, tracing four distinct validation weaknesses that let an attacker forge a token and impersonate any site user.

Rapid7 published its technical teardown of CVE-2026-55040 alongside a proof-of-concept script, based on decompilation of SharePoint Server Subscription Edition 16.0.19725.20210. The bypass is a chain of four separate flaws in the JWT token validation pipeline that together allow a remote unauthenticated attacker to forge a valid token and act as any site user or administrator. With the PoC public and the companion RCE (CVE-2026-63520) now disclosed, exploitation attempts against unpatched internet-facing SharePoint should be expected quickly.

rapid7.com → (opens in a new tab)

CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED) (opens in a new tab)

Rapid7 ·Stephen Fewer ·11 Aug 2026 ·fetched 11 Aug 2026, 15:38 UTC Research CVE-2026-55040 EPSS 1.6% agreed2/2

Why readUnauthenticated RCE against all supported SharePoint versions via unsafe .NET type instantiation in Business Connectivity Services, chained with the previously disclosed CVE-2026-55040 auth bypass.

Rapid7 Labs disclosed CVE-2026-63520, the second half of a zero-day chain that gives unauthenticated remote code execution on SharePoint as the site's service account. The root cause is unsafe .NET type instantiation in Business Connectivity Services; it affects all supported SharePoint versions plus some Project Server and Office Web Apps Server builds. Combined with CVE-2026-55040, disclosed in July, this is a full pre-auth chain against an internet-exposed product with a history of mass exploitation, so patch state should be confirmed now rather than waiting for in-the-wild reports.

rapid7.com → (opens in a new tab)

Python Software Foundation - Python 3.11.0a3 to 3.15.0b2 (opens in a new tab)

Bishop Fox ·10 Aug 2026 ·fetched 10 Aug 2026, 19:36 UTC Research agreed2/2

Why readBishop Fox advisory covering CPython from 3.11.0a3 through 3.15.0b2, so nearly every currently supported interpreter on Linux, macOS and Windows is in scope.

Identified vulnerabilities span Python 3.11.0a3 to 3.15.0b2, with 3.14.7 (released 5 August 2026) the current stable and 3.15.0rc1 the pre-release at publication. The issue is in CPython specifically and does not affect other implementations such as PyPy. Given the version range, anything running a distro or vendor-packaged Python needs a rebuild check rather than a spot patch.

bishopfox.com → (opens in a new tab)

CVE-2026-70558 (CVSS 9.3): Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path) and file.transferTo(dest) with (opens in a new tab)

NVD ·9 Aug 2026 ·fetched 9 Aug 2026, 15:40 UTC Must read Research CVE-2026-70558 CVSS 9.3 EPSS 0.6% agreed3/3

Why readDinky ships a hardcoded default dinkyToken (efda1551-7958-4e0f-80a8-dfd107df3e38) guarding an unauthenticated arbitrary file write, and the write path leads to RCE via classpath shadowing.

POST /download/uploadFromRsByLocal passes the caller-supplied path straight to new File(path) and file.transferTo(dest) with no validation; the route is @SaIgnore and /download/** is excluded from the Sa-Token interceptor, so the only control is a header match against a token hardcoded in source and shipped to every deployment. The default Docker image listens on 8888 with no proxy and chmod 777 on /opt/dinky, making the classpath, launch scripts and static assets writable by the flink uid 9999. Demonstrated impact includes overwriting /opt/dinky/config/static/index.html to serve JavaScript to admin browsers and dropping /opt/dinky/org/dinky/Dinky.class for code execution at next JVM start via script/bin/auto.sh.

nvd.nist.gov → (opens in a new tab)

CVE-2026-48088 (CVSS 9.4): OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.4, the route `POST /a (opens in a new tab)

NVD ·9 Aug 2026 ·fetched 9 Aug 2026, 15:40 UTC Research CVE-2026-48088 CVSS 9.4 EPSS 0.3% agreed3/3

Why readAn unauthenticated attacker can register their own ML-KEM-768 public key as an extra recipient for any tenant's encrypted appointments, and a JavaScript `undefined === undefined` comparison makes the bypass silent.

OpenReception before 1.0.4 accepts attacker-supplied ML-KEM-768 public keys at POST /api/tenants/{tenantId}/staff/{staffId}/crypto without authentication: the handler logs an "Unauthorized crypto key storage attempt" warning when neither session nor registration cookie is present, then inserts the row anyway. That breaks the platform's claim that even administrators cannot read sensitive data, since the attacker becomes an additional decryption recipient for future patient appointments. A second variant suppresses even the warning: the Zod schema marks `email` optional, so omitting it with no registration cookie makes the check `registrationEmail === email` evaluate `undefined === undefined` to true and the request is treated as legitimate.

nvd.nist.gov → (opens in a new tab)

CVE-2026-48087 (CVSS 9.8): OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, the registration h (opens in a new tab)

NVD ·9 Aug 2026 ·fetched 9 Aug 2026, 15:40 UTC Research CVE-2026-48087 CVSS 9.8 EPSS 0.5% agreed3/3

Why readA WebAuthn registration handler that validates the challenge against the cookie email but never against the `userId` in the URL, letting an attacker graft their own passkey onto any victim account.

In OpenReception before 1.0.2, POST /api/auth/register/{userId} checks that the WebAuthn challenge matches the registration cookie's email but never checks that the path `userId` belongs to that email. An attacker requests a challenge for their own address, completes the ceremony with their own authenticator, and replays the response against a victim's user ID; addPasskey writes the attacker credential into the victim's user_passkey rows and the next login as the victim's email issues them a session. Staff-list endpoints return user IDs to authenticated tenant members, so the identifier needed is not secret. The binding mistake generalises to any passkey enrolment flow.

nvd.nist.gov → (opens in a new tab)

CVE-2026-48085 (CVSS 9.8): OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.1, a fully provisione (opens in a new tab)

NVD ·9 Aug 2026 ·fetched 9 Aug 2026, 15:40 UTC Research CVE-2026-48085 CVSS 9.8 EPSS 0.6% agreed3/3

Why readA GET-only layout guard on the setup page leaves `POST /setup/create-admin-account` open on fully provisioned OpenReception instances, minting active GLOBAL_ADMIN accounts unauthenticated.

OpenReception before 1.0.1 never checks whether an administrator already exists when handling POST to /setup/create-admin-account, so any unauthenticated party who can submit a same-origin form POST creates a new platform admin. The account is written with is_active=true and confirmation_state=ACCESS_GRANTED, skipping email confirmation and usable immediately for login and tenant enumeration. This is separate from the documented deploy-to-claim race: the protecting layout guard only redirects on GET, so the hole persists after the operator has properly claimed the instance.

nvd.nist.gov → (opens in a new tab)

CVE-2026-15733 (CVSS 9.8): A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attacke (opens in a new tab)

NVD ·9 Aug 2026 ·fetched 9 Aug 2026, 11:37 UTC Research CVE-2026-15733 CVSS 9.8 EPSS 3.9% agreed3/3

Why readPublic PoC for OS command injection in WGDashboard up to 4.3.2 that yields command execution as root on a box fronting WireGuard.

Multiple OS command injection points in the WGDashboard WireGuard management UI let an attacker run arbitrary commands as root; the CVE record advertises versions through 4.3.2 as affected while the description names 4.2.3 and earlier, so treat anything at or below 4.3.2 as at risk. A working proof of concept is published at github.com/Stuub/WGDashboard-v4.3.2-OS-Command-Injection-to-Root-RCE-PoC. CISA's SSVC entry marks it automatable with total technical impact, and these dashboards are frequently exposed to the internet.

nvd.nist.gov → (opens in a new tab)

CVE-2026-53983 (CVSS 9.2): Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forgery vulnerability in the orbital-source configuration path tha (opens in a new tab)

NVD ·9 Aug 2026 ·fetched 9 Aug 2026, 19:38 UTC Research CVE-2026-53983 CVSS 9.2 EPSS 0.3% agreed3/3

Why readUnauthenticated blind SSRF in Ground Station before 0.6.0 that reaches cloud instance metadata at 169.254.169.254 from an open Socket.IO listener on port 7000.

Authentication enforcement is disabled and CORS is wildcarded on the Socket.IO server, so any client can send a data_submission event with the submit-orbital-sources action to persist an attacker-chosen URL, then fire background_task:start to make the process fetch it. The URL goes straight to requests.get in _fetch_http_3le and _fetch_http_omm in backend/tlesync/source_adapters.py with no scheme allowlist and no rejection of loopback, RFC1918 or link-local addresses. Outbound status codes and error strings are broadcast back over the orbital_sync_state event to every connected client, turning the blind SSRF into a usable internal port scanner.

nvd.nist.gov → (opens in a new tab)

CVE-2026-48086 (CVSS 9.9): OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.2, a TENANT_ADMIN pro (opens in a new tab)

NVD ·9 Aug 2026 ·fetched 9 Aug 2026, 15:40 UTC Research CVE-2026-48086 CVSS 9.9 EPSS 0.3% agreed3/3

Why readShows a role-update handler where Zod schema validation is the only authorization check, letting a tenant admin set their own role to GLOBAL_ADMIN in one PUT.

OpenReception before 1.0.2 accepts the GLOBAL_ADMIN enum value from any TENANT_ADMIN updating staff in their own tenant, with no policy check that only an existing global admin may grant that role. After re-login the JWT carries the new role, giving cross-tenant control of configuration, users, staff records and tenant lifecycle on the hosted service. Appointment contents stay protected by the E2E model unless chained with the staff-crypto poisoning or passkey hijack issues in the same disclosure set.

nvd.nist.gov → (opens in a new tab)

CVE-2026-15734 (CVSS 9.8): A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary co (opens in a new tab)

NVD ·9 Aug 2026 ·fetched 9 Aug 2026, 11:37 UTC Research CVE-2026-15734 CVSS 9.8 EPSS 0.7% agreed3/3

Why readServer-side template injection in WGDashboard 4.3.2 and earlier, with a published PoC chaining to root code execution.

The WGDashboard template engine accepts attacker-controlled input, giving authenticated users arbitrary code execution as root. A proof of concept is available at github.com/Stuub/WGDashboard-v4.3.2-SSTI-to-Root-RCE-PoC. It pairs with the command injection and SSRF issues disclosed against the same version, so a single upgrade should be treated as covering all three rather than patching them one at a time.

nvd.nist.gov → (opens in a new tab)

CVE-2026-17556 (CVSS 8.8): A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and direc (opens in a new tab)

NVD ·8 Aug 2026 Research CVE-2026-17556 CVSS 8.8 EPSS 0.5% agreed2/2

Why readUnauthenticated path traversal in GitHub Enterprise Server let an attacker delete the entire user storage directory, LFS objects, release assets and attachments included, and it worked with private mode enabled.

CVE-2026-17556 (CVSS 8.8) stems from GHES using the attacker-controlled X-GitHub-Request-Id header unsanitized as a filesystem path segment for the upload buffer directory. A traversal value repointed the buffer, and the deferred cleanup routine then recursively deleted the traversed target, giving an unauthenticated attacker with only network reachability arbitrary file and directory deletion. Fixed in 3.21.4, 3.20.6, 3.19.10, 3.18.13 and 3.17.19; reported through the GitHub Bug Bounty programme.

nvd.nist.gov → (opens in a new tab)

ZDI-26-526: (0Day) PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·8 Aug 2026 Research agreed2/2

Why readUnpatched 0day in PAX Technology Q80 payment terminals lets a network-adjacent, unauthenticated attacker bypass application installer signature verification and run code.

ZDI is publishing this as a 0day: the Q80's application installer fails to properly verify package signatures, so an attacker on an adjacent network segment can install and execute arbitrary code without authentication. CVSS 7.5, no vendor fix referenced at publication. Payment terminals sit in flat store networks and handle cardholder data, so the practical move is network segmentation and monitoring of terminal management traffic until PAX ships an update.

zerodayinitiative.com → (opens in a new tab)

CVE-2026-71319 (CVSS 9.6): Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools (development mode only) exposes a bidirectional RPC channel (opens in a new tab)

NVD ·8 Aug 2026 Research CVE-2026-71319 CVSS 9.6 EPSS 0.3% agreed2/2

Why readAny page that can reach a developer's Vite HMR port can chain two unauthenticated Nuxt DevTools RPC calls into arbitrary command execution on that developer's machine.

Nuxt DevTools before 3.3.1 exposes a bidirectional RPC channel over the Vite HMR WebSocket (subprotocol vite-hmr) with no token, handshake, or origin check. updateOptions(), clearOptions(), and openInEditor() skip the ensureDevAuthToken check the other mutating methods enforce, so an attacker sets behavior.openInEditor to an arbitrary command via updateOptions() and then calls openInEditor() on any existing file, at which point the launch-editor package spawns it as a child process. Development mode only, but developer workstations hold cloud credentials and signing keys, and the missing origin check is what makes this reachable from a browser tab.

nvd.nist.gov → (opens in a new tab)

Hidden beneFITs: Bypassing Signature Verification in U-Boot SPL (opens in a new tab)

Binarly (firmware) ·8 Aug 2026 Research agreed2/2

Why readSignature verification in U-Boot SPL can be bypassed during FIT image processing, giving controlled code execution before the verified boot chain starts.

A flaw in how U-Boot's Secondary Program Loader parses FIT images allows an attacker to get code execution while bypassing image signature checks, defeating verified boot on affected embedded configurations. The exposure is configuration-dependent, so whether a given board is affected turns on how its SPL and FIT setup is built. Upstream boot protections were hardened in response, anyone shipping U-Boot in a device with a root of trust should re-check their SPL config against the disclosed conditions.

binarly.io → (opens in a new tab)

CVE-2026-71287 (CVSS 8.8), Cacti's sanitize_sql_column() (lib/functions.php) sanitizes user-supplied ORDER BY column names using the regex `preg_replace('/[^a-zA-Z0-9_().]/', '' (opens in a new tab)

NVD ·8 Aug 2026 Research CVE-2026-71287 CVSS 8.8 EPSS 0.3% agreed2/2

Why readCacti's ORDER BY allowlist keeps parentheses and dots, so `SLEEP(5)` survives sanitisation intact and any authenticated user gets blind SQLi.

sanitize_sql_column() in lib/functions.php strips everything outside /[a-zA-Z0-9_().]/ to permit expressions like COUNT(id) and table.column, which means a function-call payload passes through unmodified into raw ORDER BY clauses that cannot be parameterised. The sort_column GET parameter reaches this sink in at least user_log.php, utilities.php, user_domains.php and user_group_admin.php, and privilege level is irrelevant, any logged-in user qualifies. Cacti is widely deployed on internal monitoring networks and has a track record of prior bugs reaching KEV, so treat authenticated-only as weak mitigation here.

nvd.nist.gov → (opens in a new tab)

ZDI-26-524: (0Day) PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability (opens in a new tab)

ZDI Published Advisories ·8 Aug 2026 Research

Why readUnauthenticated network-adjacent attackers can modify configurations and extract sensitive data from PAX Q80 payment terminals.

The Zero Day Initiative published a zero-day advisory for an unpatched vulnerability in the XCB daemon running on PAX Technology Q80 payment terminals. The flaw stems from missing authentication on the daemon interface, allowing adjacent network attackers to disclose sensitive device parameters and alter system configurations. No vendor patch is currently available to remediate the issue.

zerodayinitiative.com → (opens in a new tab)

CVE-2026-71270 (CVSS 8.6), Stirling-PDF's POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) was not updated with the CustomHtmlSanitizer/SsrfProtectionService SSR (opens in a new tab)

NVD ·8 Aug 2026 Research CVE-2026-71270 CVSS 8.6 EPSS 0.3% agreed2/2

Why readStirling-PDF's `/api/v1/convert/url/pdf` endpoint missed the SSRF hardening its three siblings received, letting an attacker-supplied page pull cloud metadata into the output PDF.

ConvertWebsiteToPDF.java validates only that the initially requested URL resolves to a public IP, then fetches the page server-side and hands the raw HTML to a WeasyPrint subprocess. WeasyPrint retrieves embedded resources, `<img src="http://169.254.169.254/...">` and the like, with no per-resource filtering, so internal endpoints and IMDS responses land in the generated PDF. The endpoint requires no authentication, and the html/pdf, file/pdf and markdown/pdf paths were fixed while this one was not, which is the more interesting lesson: SSRF fixes applied per-endpoint rather than in the fetch layer leave gaps.

nvd.nist.gov → (opens in a new tab)

CVE-2026-71259 (CVSS 8.6), ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url() validator in esphome/config_validation.py: `if parsed.scheme and pars (opens in a new tab)

NVD ·8 Aug 2026 Research CVE-2026-71259 CVSS 8.6 EPSS 0.1% agreed2/2

Why readAn `and`/`or` precedence bug in ESPHome's `cv.url()` validator lets a `file://` URL in `external_components` clone and execute arbitrary local Python.

`if parsed.scheme and parsed.netloc or parsed.scheme == "file"` binds `and` tighter than `or`, so any `file:` URI passes validation regardless of netloc. That validator gates the `url:` field of the `external_components` git source schema, which is handed to `git clone`, git supports `file://` natively, and the cloned path is then registered with Python's import machinery by ESPHome's component loader. Processing a crafted YAML config with `esphome config` or `esphome run` therefore executes attacker Python; affects through 2026.7.0-dev, and shared or downloaded ESPHome configs are common enough in the Home Assistant ecosystem to make this realistic.

nvd.nist.gov → (opens in a new tab)

ZDI-26-525: (0Day) PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability (opens in a new tab)

ZDI Published Advisories ·8 Aug 2026 Research agreed2/2

Why readUnauthenticated remote code execution on PAX Technology Q80 payment terminals via link following in AIP file parsing, disclosed as a 0day with no vendor fix.

A link-following flaw in the Q80's AIP file parsing lets a network-adjacent attacker execute arbitrary code without authentication; ZDI rates it 7.5. It is published as a 0day, meaning no patch is available at disclosure. Anyone with these payment terminals on a shared network segment should be segmenting them now rather than waiting on PAX.

zerodayinitiative.com → (opens in a new tab)

CVE-2026-71272 (CVSS 8.5), Memos' webhook dispatch function safeDialContext() (internal/webhook/webhook.go) resolves the target hostname via net.DefaultResolver.LookupHost() and (opens in a new tab)

NVD ·8 Aug 2026 Research CVE-2026-71272 CVSS 8.5 EPSS 0.2% agreed2/2

Why readMemos validates a webhook's resolved IPs and then dials the original hostname, letting net.Dialer re-resolve it, a clean, reproducible DNS-rebinding TOCTOU bypass of SSRF protection you should check your own code for.

CVE-2026-71272 (CVSS 8.5) breaks down safeDialContext() in internal/webhook/webhook.go: it calls net.DefaultResolver.LookupHost(), checks the returned addresses against reserved ranges, then passes net.JoinHostPort(host, port) rather than the validated IP to the dialer. DialContext performs its own lookup, so an attacker with control of a short-TTL record returns a public IP at validation time and an internal one at connect time. The fix pattern, dial the IP you validated, not the name, generalises to every SSRF guard written this way.

nvd.nist.gov → (opens in a new tab)

CVE-2026-71235 (CVSS 8.8), Magistrala's Rules Engine allows authenticated users to create rules with embedded Go or Lua scripts executed server-side when IoT messages arrive. Th (opens in a new tab)

NVD ·8 Aug 2026 Research CVE-2026-71235 CVSS 8.8 EPSS 0.3% agreed2/2

Why readMagistrala's Rules Engine hands authenticated low-privilege users a Go and Lua sandbox that is not a sandbox: full stdlib including os and net/http, plus preloaded db, ioutil and HTTP libraries in Lua.

The Go engine (re/golang.go) runs user scripts through the Yaegi interpreter with `stdlib.Symbols` and validates only with a regex blocking goroutines and `panic()`, leaving `os.ReadFile`, `os.WriteFile`, `os.Remove` and `os.Environ` reachable. The Lua engine (re/lua.go) validates nothing and preloads `db`, `ioutil`, an HTTP client and `filepath`. The result is arbitrary file read/write, environment-variable disclosure, direct database access and SSRF into internal microservices from an ordinary user account, a good case study in why interpreter-based rules engines need symbol allowlists, not regex denylists.

nvd.nist.gov → (opens in a new tab)

CVE-2026-71255 (CVSS 8.6), nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_device_identification_res() function (FC 0x2B/MEI 0x0E, (opens in a new tab)

NVD ·8 Aug 2026 Research CVE-2026-71255 CVSS 8.6 EPSS 0.2% agreed2/2

Why readnanoMODBUS ≤1.23.0 lets a malicious Modbus server corrupt memory in the client via a Read Device Identification response, a reminder that client-side parsers in OT libraries are attack surface too.

CVE-2026-71255 (CVSS 8.6) is an out-of-bounds write in recv_read_device_identification_res() (FC 0x2B / MEI 0x0E) in nanomodbus.c. The server-supplied object_length is validated only against remaining PDU size and never against the caller's buffers_length, so after strncpy the code writes a NUL terminator at buffers_out[buf_index][object_length]. When object_length ≥ buffers_length the terminator lands past the caller's buffer, corrupting adjacent stack or heap memory on the polling client.

nvd.nist.gov → (opens in a new tab)

CVE-2026-71288 (CVSS 8.8), Koha's guided report builder (reports/guided_reports.pl) reads the `order_by` CGI parameter and, for each value, a dynamically-named `{order}_ovalue` (opens in a new tab)

NVD ·8 Aug 2026 Research CVE-2026-71288 CVSS 8.8 EPSS 0.3% agreed2/2

Why readKoha's guided report builder concatenates the `order_by` CGI parameter and a dynamically-named `{order}_ovalue` parameter straight into an SQL ORDER BY clause, giving any low-privilege library staff account blind SQLi against a database holding patron PII and LDAP credentials.

CVE-2026-71288 (CVSS 8.8) traces the flaw through reports/guided_reports.pl, where multi_param('order_by') and the derived `_ovalue` parameter are appended verbatim to the query in C4::Reports::Guided with no allowlist or escaping. ORDER BY columns cannot be bound as placeholders, so an allowlist is the only defence and none exists. The create_reports or execute_reports permission, routinely granted to non-admin staff at libraries running Koha, is enough for time-based blind extraction of patron records and staff/LDAP credentials.

nvd.nist.gov → (opens in a new tab)

CVE-2026-71263 (CVSS 9.1), The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool() (demo/LINUXTCP/port/porttcp.c). The check `if (usTCPFrameBytes (opens in a new tab)

NVD ·8 Aug 2026 Research CVE-2026-71263 CVSS 9.1 EPSS 0.3% agreed2/2

Why readA single crafted Modbus TCP packet overflows FreeModbus's LINUXTCP receive buffer by seven bytes because of a > instead of >= bounds check.

xMBPortTCPPool() in demo/LINUXTCP/port/porttcp.c tests usTCPFrameBytesLeft > MB_TCP_BUF_SIZE rather than >=, so an MBAP frame declaring Length 264 yields 263 bytes remaining and passes the check. recv() then writes up to 263 bytes starting at offset 7 into the 263-byte static aucTCPBuf, spilling seven bytes into the adjacent usTCPBufPos variable. Modbus has no authentication, so any host that can reach the port triggers it, check whether your OT vendors vendored this port rather than writing their own.

nvd.nist.gov → (opens in a new tab)

CVE-2026-71236 (CVSS 8.7), Grocy's API request-body parser (controllers/Api/BaseApiController.php, GetParsedAndFilteredRequestBody) purifies incoming field values with HTMLPurif (opens in a new tab)

NVD ·8 Aug 2026 Research CVE-2026-71236 CVSS 8.7 EPSS 0.2% agreed2/2

Why readGrocy sanitises API input with HTMLPurifier and then manually un-escapes `&lt;`, `&gt;` and `&amp;` back to live characters immediately afterwards, a textbook double-decode that undoes the sanitiser across every API-writable field.

CVE-2026-71236 (CVSS 8.7) sits in GetParsedAndFilteredRequestBody in controllers/Api/BaseApiController.php, where the entity encoding HTMLPurifier produced to neutralise markup is reversed on the purifier's own output. Live script tags are reconstructed and stored, then rendered elsewhere without re-sanitisation, giving stored XSS across products, recipes, stock, users, chores and other objects. Worth reading as a pattern: post-sanitisation "cleanup" of encoded output is a recurring way to defeat a correct sanitiser.

nvd.nist.gov → (opens in a new tab)

CVE-2026-45538 (CVSS 9.8), OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions 4.0.0 and prior, processing a SIP message with a header name longer (opens in a new tab)

NVD ·7 Aug 2026 Must read Research CVE-2026-45538 CVSS 9.8

Why readOne unauthenticated UDP packet to port 5060 overflows a fixed stack buffer in OpenSIPS with attacker-controlled length and content, and no fix existed when the advisory published.

sip_to_json() in modules/sipmsgops/sipmsgops.c memcpys a SIP header name into a 255-byte stack buffer using the full parsed length, while the SIP parser itself permits header names up to roughly 65000 bytes. Any deployment whose routing script calls sip_to_json() can therefore have its saved frame pointer and return address overwritten by a single unauthenticated datagram, giving a reliable crash and, on builds without stack protections, code execution. The affected range is 4.0.0 and prior with no patch at publication, so the immediate control is auditing routing scripts for sip_to_json() and filtering oversized header names upstream.

nvd.nist.gov → (opens in a new tab)

oversecured/Samsung_Vulnerabilities, 176 vulnerabilities in Samsung preinstalled Android apps (opens in a new tab)

GitHub: new security tools ·oversecured ·7 Aug 2026 Must read Research ★ 315

Why readA single catalog of 176 real vulnerabilities in the Samsung apps that ship preinstalled on every Galaxy device, the OEM attack surface users cannot uninstall.

Oversecured has published its accumulated Samsung findings as one indexed repository covering 176 vulnerabilities across preinstalled Android applications, with the technical detail behind each. Preinstalled OEM apps run with privileges ordinary apps do not have and cannot be removed by users, so this class of bug converts directly into device compromise paths. Useful both as a target list for mobile testers and as a pattern library for anyone reviewing privileged Android components.

github.com → (opens in a new tab)

dinosn/fastjson-jsontype-rce-lab, Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass (opens in a new tab)

GitHub: new security tools ·dinosn ·7 Aug 2026 Must read Research CVE-2026-16723 ★ 203

Why readfastjson2 2.0.57 can reach loadClass from an attacker-controlled @type with autoType disabled, which breaks the mitigation most Java teams believe closes this bug class.

The repo documents two paths: a @JSONType resource probe in fastjson 1.2.66-1.2.83 (CVE-2026-16723), and, more importantly, an autoType-disabled bypass in fastjson2 2.0.57 where polymorphic type annotations such as @JSONType(seeAlso) or Jackson's @JsonSubTypes carry attacker input into class loading. It ships Docker labs and a defensive scanner with marker-only payloads, plus the safeMode and JDK 17 controls that actually hold. If your Java stack treats autoType=off as the fix, this is the item to act on.

github.com → (opens in a new tab)

The Pwn Request Reckoning: What Still Works Against GitHub Actions (opens in a new tab)

Wiz ·Shay Berkovich ·26 Oct 2026 ·fetched 26 Oct 2026, 15:42 UTC Must read Research agreed2/2

Why readUpdated threat model for pull_request_target after GitHub's 2026 hardening: which Pwn request paths the platform closed and which still work, with an audit checklist.

GitHub's checkout protections, read-only cache tokens and event policies make the default-case Pwn request exploit substantially harder, but they shift the vulnerability class rather than removing it. What still works now requires explicit opt-ins, outdated checkout action versions, unprotected triggers, or script injection into workflows that run with repository secrets. The post closes with a checklist of what to look for in your own workflows, and builds on earlier parts covering the base threat model and AI-powered actions.

wiz.io → (opens in a new tab)

EVSEFuzz : A Tool for Automated Testing of Protocol Implementations (opens in a new tab)

arXiv cs.CR (all) ·Soham Gumaste, Michael Khan, Roland Varriale, Rigel Gjomemo ·26 Oct 2026 ·fetched 26 Oct 2026, 07:40 UTC Research agreed3/3

Why readA fuzzer-builder for OCPP and similar protocol implementations in EV charging infrastructure, with two CVEs already published from it.

EVSEFuzz derives message structures from Python datatype validation packages to generate both compliant and non-compliant OCPP traffic, so fuzzers can be built without hand-writing grammars for each implementation. It has been run against several open and closed-source EV supply equipment stacks and produced two assigned CVEs. The datatype-validation trick generalises beyond charging infrastructure to any protocol whose implementation ships schema definitions.

arxiv.org → (opens in a new tab)

ripgrep as a lolbin (opens in a new tab)

Hexacorn ·adam ·25 Oct 2026 ·fetched 25 Oct 2026, 03:39 UTC Research agreed3/3

Why readDocuments that ripgrep's -z/--search-zip flag will invoke external decompression binaries, giving an execution-by-proxy primitive from a tool commonly present on developer and admin hosts.

Running ripgrep with -z or --search-zip makes it hand archive files to an external decompressor, which can be pointed at an attacker-controlled executable. That turns a widely installed search utility into a LOLBIN for process spawning. Worth a detection rule on ripgrep spawning unexpected child processes.

hexacorn.com → (opens in a new tab)

Metasploit Wrap Up: Langflow, MongoDB, and More (opens in a new tab)

Rapid7 ·Alan David Foster ·23 Oct 2026 ·fetched 23 Oct 2026, 19:40 UTC Must read Research CVE-2026-10134 EPSS 6.2% agreed3/3

Why readEleven new Metasploit modules land, six of them against Langflow covering auth bypass and three unauthenticated RCE paths across releases 1.0.0 through 1.11.4.

The Langflow cluster covers an authentication bypass (CVE-2026-93680), unauthenticated RCE via CVE-2026-0768, CVE-2026-0769 and CVE-2026-10134, and two authenticated code execution flaws (CVE-2026-7873, CVE-2026-93674), credited to rmhowe425 with research by Peter Girnus and n0k0. Also shipped: a pre-auth RCE chain against OpenCTI from kmkz, three new MongoDB auxiliary modules, an Apache Solr version scanner, and a 4gaBoards mass user information disclosure module (CVE-2026-53959). If you run Langflow or OpenCTI internally, weaponised coverage is now public and the exposure assessment is immediate.

rapid7.com → (opens in a new tab)

Header Accordions: QPACK amplification attacks against HTTP/3 servers (opens in a new tab)

oss-security ·22 Oct 2026 ·fetched 22 Oct 2026, 03:39 UTC Must read Research agreed3/3

Why readOne unauthenticated HTTP/3 connection can force a server to allocate thousands of times the memory it receives, and seven of ten QPACK implementations tested are vulnerable.

QPACK header compression in HTTP/3 lets a small HEADERS frame decode into hundreds of thousands of header objects, because decoded-header limits across implementations are missing, incomplete, or enforced after the allocation has already happened. The researchers found seven of ten tested stacks affected, with a single connection sufficient to OOM or pin a server running default settings. Anyone terminating HTTP/3 should check their stack's decoded-header limit rather than assuming frame size caps cover it.

seclists.org → (opens in a new tab)

Linear Self-Symmetries of Inverse-Based S-boxes: Generic Rigidity and Applications (opens in a new tab)

arXiv cs.CR (all) ·Zheng Zhang, Na Zhang ·22 Oct 2026 ·fetched 22 Oct 2026, 23:39 UTC Research agreed3/3

Why readProves the full AES S-box has no nontrivial linear self-symmetry and gives a practical rigidity criterion for inverse-based S-box designs.

The authors reduce the question of surviving linear self-symmetries in inversion-based S-boxes to semilinear conjugacy and centralizer estimates, deriving matching upper and lower bounds on the probability that a nontrivial symmetry survives a random outer linear transformation in GL_n(F_2). The leading quadratic exponent is governed by the smallest prime divisor of the extension degree, so decay depends on the arithmetic of the field extension rather than its dimension alone. Applications include a usable rigidity criterion for designers and a proof that the AES S-box is clean.

arxiv.org → (opens in a new tab)

SPECTER: Covert Data Exfiltration from Air-Gapped Systems via USB Power Modulation (opens in a new tab)

arXiv cs.CR (all) ·Hyeongjun Choi, Ji Hyuk Jung, Ji Won Yoon ·21 Oct 2026 ·fetched 21 Oct 2026, 07:35 UTC Must read Research

Why readDemonstrates SPECTER, a covert channel using host-side USB power manipulation to exfiltrate data from air-gapped hosts at up to 1.0 bit/sec without data transfers.

Researchers detailed SPECTER, a post-compromise exfiltration mechanism targeting air-gapped systems by modulating USB host power states. Payload bits are transmitted via device state switches rather than USB data packets, allowing signal recovery through phone charging states, mouse light activity, or near-field RF leakage captured with an SDR.

arxiv.org → (opens in a new tab)

Introducing pathrunner: An AWS privilege escalation framework (opens in a new tab)

Datadog Security Labs ·20 Oct 2026 ·fetched 20 Oct 2026, 19:36 UTC Must read Research

Why readDatadog released pathrunner, an open-source framework designed to automate AWS IAM privilege escalation attacks.

Building on its pathfinding.cloud taxonomy and vulnerable lab environments, Datadog Security Labs released pathrunner. The modular interactive console automates the exploitation of cloud privilege escalation paths across AWS IAM principals, helping offensive and defensive teams validate cloud security posture.

securitylabs.datadoghq.com → (opens in a new tab)

Locate, Then Reason: End-to-End Patch Presence Testing in Stripped Binaries (opens in a new tab)

arXiv cs.CR (AI) ·Huaijin Wang, Tongda Wang, Zhibo Liu, Yue Zhang ·20 Oct 2026 ·fetched 20 Oct 2026, 07:32 UTC Research

Why readIntroduces PatchAlign, an end-to-end tool that identifies whether security patches are present in stripped binaries without relying on function-level matching or debug symbols.

Binary patch presence testing determines if a specific security fix exists within compiled target code, but compiler optimizations and stripped symbols often break traditional function matching. PatchAlign uses instruction-aligned retrieval combined with caller-callee context graph analysis to pinpoint relevant code fragments. An LLM then compares target binary fragments against known vulnerable and patched reference snippets to issue precise patch verdicts.

arxiv.org → (opens in a new tab)

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug (opens in a new tab)

The Hacker News ·The Hacker News ·18 Oct 2026 ·fetched 18 Oct 2026, 23:35 UTC Must read Research

Why readDetails a root privilege escalation chain on OpenBSD 7.9 that bypasses KARL, SMAP, and SMEP by combining a 37-year-old integer overflow with a kernel UAF.

Security firm Calif released a detailed writeup and proof-of-concept exploit achieving root privileges on OpenBSD 7.9. The chain combines a 37-year-old integer overflow in the shmat(4) attach function with a separate reference-counting use-after-free in kernel memory. The exploit successfully bypasses OpenBSD's Kernel Address Randomized Link (KARL) as well as hardware SMAP and SMEP protections, and was patched via OpenBSD errata 018 and 026.

thehackernews.com → (opens in a new tab)

Thinking in Graphs: Neo4j-Backed Exploit-Chain Reasoning for LLM Penetration-Testing Agents (opens in a new tab)

arXiv cs.CR (AI) ·Joas Antonio dos Santos Barbosa ·18 Oct 2026 ·fetched 18 Oct 2026, 23:35 UTC Must read Research

Why readDetails ChainGraph, a pattern using Neo4j property graphs and MCP to give LLM penetration-testing agents multi-step exploit-chain reasoning.

The paper introduces ChainGraph, an architecture that externalizes exploit-chain reasoning for autonomous penetration-testing agents into a Neo4j property graph connected via the Model Context Protocol. Findings, credentials, targets, and execution steps are structured as typed graph nodes with explicit dependency edges. The framework formalizes key attack reasoning functions, including entry-to-crown-jewel pathfinding and dynamic severity promotion, as executable Cypher queries.

arxiv.org → (opens in a new tab)

In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit (opens in a new tab)

SecurityWeek ·SecurityWeek News ·18 Oct 2026 ·fetched 18 Oct 2026, 15:37 UTC Must read Research

Why readResearchers demonstrate ICS-Sniper, a side-channel network attack that manipulates cloud SCADA timing in industrial water facilities.

University of British Columbia researchers detailed ICS-Sniper, an attack against cloud-hosted SCADA systems that uses VPN packet size and timing analysis to selectively drop network traffic. In tests on an emulated water treatment testbed, dropping targeted packets delayed clean water pumping by 15 minutes and held critical valves open past safe thresholds. Separately, Intel announced plans to sunset Software Guard Extensions (SGX) after its Diamond Rapids platform, shifting hardware confidential computing efforts toward TDX.

securityweek.com → (opens in a new tab)

PAGE404: Breaking GPU Isolation Through Hardware-assisted Page Migration (opens in a new tab)

arXiv cs.CR (AI) ·Ravan Nazaraliyev, Yicheng Zhang, Nael Abu-Ghazaleh ·18 Oct 2026 ·fetched 18 Oct 2026, 11:32 UTC Must read Research

Why readDemonstrates two novel hardware side-channel attacks targeting page migration mechanisms on NVIDIA Grace Hopper GH200 superchips.

Security researchers analyzed the hardware-assisted page migration and UVM driver pipeline on NVIDIA GH200 unified memory architectures. They uncovered side-channel vulnerabilities in shared access counter structures and migration interrupt handling that leak memory access patterns across the CPU-GPU boundary. The work highlights new physical isolation risks introduced by hardware-accelerated memory locality features in modern AI superchips.

arxiv.org → (opens in a new tab)

On the Robustness of Gossip Protocols in Modern Blockchains (opens in a new tab)

arXiv cs.CR (all) ·Wenting Li, Jannik Albrecht, Frederik Armknecht, Ghassan Karame ·17 Oct 2026 ·fetched 17 Oct 2026, 19:33 UTC Research

Why readEvaluates the attack resilience of gossip protocols in Ethereum, Polkadot, Bitcoin, and Solana under realistic network adversaries.

Empirical and analytical testing reveals that current random graph parameters used in major blockchain networks fail to guarantee reliable quorum formation under targeted network attacks. While Solana's dynamic trees offer bandwidth efficiency in normal operations, they prove highly vulnerable to adaptive network disruption.

arxiv.org → (opens in a new tab)

Pricing the Unprovable: Ambiguity, Turnstile Runs, and the Verifiability Discount in Crypto Protocols (opens in a new tab)

arXiv cs.CR (all) ·Doohwi Cha, Hanhee Kim, Hyeonjun Yeo, Minsuk Sung ·17 Oct 2026 ·fetched 17 Oct 2026, 15:33 UTC Research

Why readResearch analyzing market impact, pool flows, and verifiable security risks in zero-knowledge privacy protocols like Zcash Orchard.

The authors propose VDISC, an empirical framework to quantify financial and trust impacts when privacy-preserving cryptographic protocols fix vulnerabilities without proving whether prior exploitation occurred. The study analyzes 40 historical protocol security events and models capital flight and shielded pool net outflows during unprovable vulnerability disclosures.

arxiv.org → (opens in a new tab)

Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD (opens in a new tab)

Hacker News ·rs_rs_rs_rs_rs ·16 Oct 2026 ·fetched 16 Oct 2026, 23:34 UTC Must read Research 156 points

Why readLearn how a 37-year-old integer overflow in OpenBSD SysV shared memory handling was chained into local root privilege escalation bypassing KARL, SMAP, and SMEP.

Researchers detailed the exploitation of a 16-bit signed short integer overflow in OpenBSD shared memory attachment counters dating back to original 1980s BSD source code. By wrapping the counter through repeated process forks and using sysctl memory statistics for heap grooming, the exploit triggers a use-after-free and combines it with an out-of-bounds write to achieve local root without requiring an information disclosure vulnerability.

calif.io → (opens in a new tab) Discussion (opens in a new tab)

Signal Messenger Security: A Research Case Study (opens in a new tab)

IOActive ·Christian Powills ·16 Oct 2026 ·fetched 16 Oct 2026, 15:35 UTC Research

Why readDetails how Signal Desktop's screen-capture protection on Windows can be bypassed from an external process.

IOActive evaluated Signal Desktop's screen-capture protection mechanism on Windows, which relies on setting window display affinity. Research showed that while standard administrative process calls fail, the affinity control can be removed externally by reversing ownership checks in the Windows graphics stack.

ioactive.com → (opens in a new tab)

MAppPrint: Robust and Real-time Mobile App Fingerprinting via Traffic Behavior Correlation Graphs (opens in a new tab)

arXiv cs.CR (all) ·Tao Duan, Junzhou Zhao, Jianglong Li, RongHua Li ·16 Oct 2026 ·fetched 16 Oct 2026, 15:35 UTC Research

Why readIntroduces a traffic behavior correlation graph technique to fingerprint encrypted mobile application traffic in real time.

Researchers presented MAppPrint, a framework designed to identify mobile applications from encrypted network traffic despite dynamic network conditions and multi-app concurrency. The technique models traffic patterns using Traffic Behavior Correlation Graphs combined with a fingerprint compression algorithm for low-latency analysis.

arxiv.org → (opens in a new tab)

Wanted to download an ISO, ended up writing a kernel exploit (opens in a new tab)

Hacker News ·0xdeafbeef ·15 Oct 2026 ·fetched 15 Oct 2026, 11:35 UTC Must read Research 131 points

Why readDetails a Linux kernel exploit technique targeting memory non-coherence and manual cache maintenance bugs in ARM drivers.

An independent research post explores vulnerability discovery and exploit implementation in Linux kernel in-tree drivers. The author identified a bug class affecting non-coherent architectures like ARM where drivers perform improper manual cache maintenance. The work highlights architectural differences in memory coherence and provides technical context on kernel exploitation on non-x86 hardware.

blog.dfb.sh → (opens in a new tab) Discussion (opens in a new tab)

Tulva: Practical Asynchronous Threshold FHE (opens in a new tab)

arXiv cs.CR (all) ·Valerio Cini, Antonio Guimarães, Russell W. F. Lai, Michał Osadnik ·15 Oct 2026 ·fetched 15 Oct 2026, 15:33 UTC Research

Why readpresents an asynchronous threshold FHE decryption scheme with benchmarked open-source implementation data.

Researchers introduce Tulva, a modular threshold scheme that adds asynchronous decryption to base FHE protocols while leaving existing ciphertexts largely unchanged. Benchmarks demonstrate partial decryption execution times of 3.7 ms and share combination in 0.5 ms for a 16-out-of-512 threshold setup.

arxiv.org → (opens in a new tab)

Quantum-Aware Key Rank for Side-Channel Attacks evaluation (opens in a new tab)

arXiv cs.CR (all) ·Yevgen Kotukh ·15 Oct 2026 ·fetched 15 Oct 2026, 11:35 UTC Research

Why readCalculates quantum search bounds for side-channel key recovery, demonstrating where Grover's algorithm fails to provide super-quadratic speedup beyond rank 2^58.6 under NIST limits.

Evaluates quantum-assisted key rank search following classical side-channel trace collection. Proves that for block search with advice under NIST MAXDEPTH budgets (D = 2^40), quadratic quantum advantages collapse to constant factors at ranks near 2^58.6 for AES-128.

arxiv.org → (opens in a new tab)

Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave (opens in a new tab)

The Hacker News ·The Hacker News ·14 Oct 2026 ·fetched 14 Oct 2026, 07:36 UTC Must read Research

Why readAnalyze Doyensec research detailing a code execution bypass inside Windows VBS SmartScreen enclaves.

Security researchers demonstrated code execution inside Windows Virtualization-based Security (VBS) enclaves by chaining a four-byte write flaw and a timing vulnerability (CVE-2026-83498). The technique bypassed hypervisor-enforced memory isolation protecting anti-phishing credentials in Isolated User Mode (VTL1). Microsoft patched the vulnerability in September 2026 prior to public disclosure.

thehackernews.com → (opens in a new tab)

Submit and Execute: Weaponizing Reflected XSS in Siemens Teamcenter's Login Redirect (CVE-2026-58113) (opens in a new tab)

Bishop Fox ·14 Oct 2026 ·fetched 14 Oct 2026, 23:34 UTC Research CVE-2026-58113 EPSS 0.4%

Why readExplains how a reflected XSS in Siemens Teamcenter (CVE-2026-58113) can automatically execute on redirect to hijack authenticated sessions.

Bishop Fox published technical details on CVE-2026-58113, a reflected cross-site scripting flaw in Siemens Teamcenter's login redirect endpoint. Unsanitized query input is reflected into an automatically submitting HTML form, executing attacker-supplied JavaScript immediately when a logged-in user visits the link. Siemens released fixed builds for the CVSS 8.5 vulnerability.

bishopfox.com → (opens in a new tab)

ML-Assisted Power Side-Channel Attacks on ML Accelerators in Shared FPGAs (opens in a new tab)

arXiv cs.CR (all) ·Anthony Etim, Kenan Erol, Jakub Szefer ·14 Oct 2026 ·fetched 14 Oct 2026, 03:36 UTC Research

Why readDemonstrates an on-chip power side-channel attack recovering full-color ImageNet inputs from co-located ML accelerators on shared FPGAs.

Researchers combined Time-to-Digital Converter power measurements with ML-based upscaling to execute a multi-tenant FPGA side-channel attack. The approach extracts input data processed by a remote victim's CNN first convolutional layer, demonstrating data leaks in shared hardware environments.

arxiv.org → (opens in a new tab)

Playing It SFAPE: Code Execution in Isolated User Mode (opens in a new tab)

Doyensec ·13 Oct 2026 ·fetched 13 Oct 2026, 11:35 UTC Research

Why readDetails how Windows Virtualization-Based Security (VBS) isolates code execution across Virtual Trust Levels in Isolated User Mode (IUM).

Analyzes the architecture of Virtualization-Based Security (VBS) in Windows x64, specifically looking at how Virtual Trust Levels (VTL0 and VTL1) partition execution environments. Details the role of Isolated User Mode (IUM) and the Secure Kernel (SK) in preventing privilege escalation even when kernel-mode memory in VTL0 is compromised.

blog.doyensec.com → (opens in a new tab)

Secrets in Preamble: Practical and Robust PHY Information Hiding for Wi-Fi (opens in a new tab)

arXiv cs.CR (all) ·Rui Pan, Guanxiong Shen, Linning Peng, Xinyu Qi ·13 Oct 2026 ·fetched 13 Oct 2026, 03:34 UTC Research

Why readDemonstrates physical-layer Wi-Fi steganography by hiding data in legacy short training fields.

Researchers introduce a technique for embedding covert payloads inside the legacy short training field (L-STF) of standard Wi-Fi frames using paired neural networks. The method preserves frame autocorrelation so packet detection and frequency offset estimation function normally while transmitting hidden data.

arxiv.org → (opens in a new tab)

A Systematic Study of Security Enforcement at Android Inter-Component Boundaries (opens in a new tab)

arXiv cs.CR (all) ·Sandiyo Christan A ·12 Oct 2026 ·fetched 12 Oct 2026, 19:32 UTC Research

Why readEvaluates security enforcement across 120 inter-component interface boundaries in Android 17 (API 37), identifying 97 enforcement gaps.

Researchers tested 99 inter-component interfaces and platform controls across over 30 Google and AOSP packages using a zero-permission attacker model. Activities and BroadcastReceivers exhibited a 100% gap rate in the evaluated corpus. The findings yield a 14-category taxonomy of enforcement gaps spanning manifest, code, platform, and architectural layers.

arxiv.org → (opens in a new tab)

Understanding Verification Vulnerabilities in Cross-chain Bridges: An Empirical Study (opens in a new tab)

arXiv cs.CR (AI) ·Yuying Wang, Yi Guo, Jiachi Chen, Hanwen Zhang ·12 Oct 2026 ·fetched 12 Oct 2026, 19:32 UTC Research

Why readCategorizes 11 distinct cross-chain verification vulnerability patterns derived from analyzing 588 real-world smart contract audits.

Researchers conducted an empirical study of cross-chain bridge security by analyzing audit reports from 36 prominent bridge projects. The paper establishes a taxonomy of Cross-chain Verification Vulnerabilities (CVVs) spanning state proof validation, sender identity verification, and signature processing logic. Findings provide concrete failure modes present in smart contract message-passing architecture.

arxiv.org → (opens in a new tab)

I Found a $90k Remote Code Execution Vulnerability in Google (opens in a new tab)

Hacker News ·soeckly ·12 Oct 2026 ·fetched 12 Oct 2026, 19:32 UTC Research 133 points

Why readDetails a $90,000 bug bounty report demonstrating a remote code execution chain against Google infrastructure.

Independent security research documents the discovery and technical exploitation of a remote code execution vulnerability in Google infrastructure. The writeup covers initial attack surface discovery, payload construction, and the vendor response.

simonkoeck.com → (opens in a new tab) Discussion (opens in a new tab)

A Zero-Knowledge Signature Framework for Efficient Post-Quantum Message Authentication in Cooperative Automated Driving (opens in a new tab)

arXiv cs.CR (all) ·Takahito Yoshizawa, Aysajan Abidin, Edoardo Pena-Gonzalez, Bart Preneel ·11 Oct 2026 ·fetched 11 Oct 2026, 23:36 UTC Research agreed2/2

Why readZKS-PQC proposes replacing bulky post-quantum V2X authentication material with zero-knowledge proofs while retaining certificate-based trust and legacy ECDSA compatibility.

The paper introduces ZKS-PQC, a zero-knowledge signature framework for post-quantum authentication of cooperative automated-driving messages. It aims to reduce the communication overhead of PQC public keys and signatures in high-frequency V2X traffic while allowing incremental migration from ECDSA.

arxiv.org → (opens in a new tab)

Two characters open up a world of typosquatting opportunities in Chromium browsers (opens in a new tab)

The Register Security ·10 Oct 2026 ·fetched 10 Oct 2026, 11:37 UTC Research agreed2/2

Why readExplains how two specific non-ASCII characters bypass Chromium display logic checks to render spoofed URLs as Unicode.

Researchers Ian Muscat and Leanne Briffa demonstrated that two specific homoglyph characters bypass Chromium safety checks in browsers like Chrome and Edge. While the domain names render as suspicious Punycode internally, Chromium displays them as legitimate-looking Unicode strings to end users.

theregister.com → (opens in a new tab)

One Node, Two Roles: Simultaneous Contests for Validation and Attention in Rollups (opens in a new tab)

arXiv cs.CR (all) ·Pranay Anchuri, Ben Berger, Matteo Campanelli, Akaki Mamageishvili ·9 Oct 2026 ·fetched 9 Oct 2026, 15:35 UTC Research agreed2/2

Why readThe paper formalizes "arguments with registered provers" and shows why paying rollup validators per identity does not ensure independent execution diversity.

The authors model the conflict between optimistic-rollup validation rewards and attention mechanisms that pay nodes to execute the state transition function. They introduce a non-amortizability property for registered provers, then design and analyze reward mechanisms intended to make independently executed validation economically viable.

arxiv.org → (opens in a new tab)

Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules (opens in a new tab)

Rapid7 ·The Metasploit Team ·9 Oct 2026 ·fetched 9 Oct 2026, 11:36 UTC Must read Research agreed2/2

Why readAdds Metasploit modules for an unauthenticated RCE in N-able N-central (CVE-2026-86218) and a vLLM heap address leak (CVE-2026-22778).

Rapid7 updated Metasploit with new exploit and auxiliary modules, including coverage for an unauthenticated remote code execution vulnerability in N-able N-central (CVE-2026-86218). Another module targets vLLM servers affected by CVE-2026-22778, where sending an invalid image to the multimodal endpoint triggers a PIL error that leaks heap addresses. The release also includes two Linux local privilege escalation modules and Windows AArch64 fetch payloads.

rapid7.com → (opens in a new tab)

Improved Local Leakage Resilience of Shamir Secret Sharing and Worst-Case Optimal Polynomial Intersection (opens in a new tab)

arXiv cs.CR (all) ·Yihang Sun, Mary Wootters ·9 Oct 2026 ·fetched 9 Oct 2026, 07:37 UTC Research agreed2/2

Why readNew theoretical cryptography research breaks the one-half barrier for local leakage resilience in Shamir secret sharing schemes.

Academic research establishes improved local leakage resilience bounds for Shamir secret sharing by linking the problem to worst-case optimal polynomial intersection. The authors show that Shamir secret sharing achieves one-bit local leakage resilience for evaluation parameters beyond previous theoretical thresholds.

arxiv.org → (opens in a new tab)

Samsung Galaxy S26 hacked three more times at Pwn2Own Ireland (opens in a new tab)

BleepingComputer ·Sergiu Gatlan ·8 Oct 2026 ·fetched 8 Oct 2026, 07:36 UTC Must read Research agreed2/2

Why readPwn2Own Ireland day two saw $232,500 awarded for 45 zero-day vulnerabilities, including three distinct exploits against the Samsung Galaxy S26.

Security researchers demonstrated exploit chains targeting the Samsung Galaxy S26 flagship, the Sonos Era 300, and AI infrastructure during Pwn2Own Ireland 2026. Attack chains also compromised the Home Assistant Green smart home hub and Oracle Autonomous AI Database. Kyeongmin Kim, PetoWorks, and Mobile Hacking Lab were among the teams claiming awards for zero-day disclosures.

bleepingcomputer.com → (opens in a new tab)

Show HN: MailAccess – the true Email OSINT framework (opens in a new tab)

Hacker News ·coding-maniac ·6 Oct 2026 ·fetched 6 Oct 2026, 15:35 UTC Research 54 points

Why readOpen-source email OSINT framework designed for identity chaining and structured reconnaissance.

MailAccess is a security framework created to automate email intelligence gathering using human analyst reasoning. The tool categorizes findings into structured sections and applies scoring to identity links rather than dumping raw lists. Penetration testers and analysts can use it to map domain infrastructure and target identity chains.

mailaccess.pro → (opens in a new tab) Discussion (opens in a new tab)

Smashing the token limit with overlapping fragments (opens in a new tab)

PortSwigger Research ·5 Oct 2026 ·fetched 5 Oct 2026, 15:38 UTC Must read Research agreed2/2

Why readLearn how to exfiltrate hundreds of token characters via CSS injection using overlapping fragment stitching.

PortSwigger research demonstrates an advanced CSS-based token exfiltration technique that bypasses token size limitations without requiring recursive stylesheet loading. By collecting and stitching overlapping fragments of varying lengths from target URLs rather than brute-forcing individual characters, an attacker can extract full tokens hundreds of characters long using significantly reduced payload sizes.

portswigger.net → (opens in a new tab)

QUFIG: GNN-Based Prediction of Quantum Fault Injection Vulnerabilities with Gate-Level Precision (opens in a new tab)

arXiv cs.CR (all) ·Shihan Zhao, Qiying Li, Ben Dong, Qian Wang ·4 Oct 2026 ·fetched 4 Oct 2026, 19:33 UTC Research

Why readUses graph neural networks on quantum circuit DAGs to prioritize gate-level fault injection vulnerabilities.

Researchers introduced QUFIG, a circuit-DAG-based GNN framework that predicts the impact of gate-fault pairs on quantum circuit fidelity under runtime fault injection attacks. Evaluated on QASMbench and HamLib MaxCut benchmarks, the tool reduces necessary gate inspections by 2.9 to 19.8 percent compared to heuristic baselines.

arxiv.org → (opens in a new tab)

Learnt Attacks on Quantum Key Distribution under Channel Noise and Device Drift (opens in a new tab)

arXiv cs.CR (all) ·Marcel Mordarski, Benjamin Gras, Abdelrahman Shehata, Daniel Budina ·4 Oct 2026 ·fetched 4 Oct 2026, 11:36 UTC Research agreed2/2

Why readQuantifies adaptive eavesdropping strategies against Quantum Key Distribution (QKD) under channel noise and device drift using Markov decision processes.

Researchers modelled adaptive quantum eavesdropping as a constrained Markov decision process to evaluate security under channel noise and device drift between recalibrations. The approach jointly searches gate structures and rotation angles to synthesise compact attack circuits against noise models like amplitude damping on E91 protocols.

arxiv.org → (opens in a new tab)

Trapdoored Clifford Operators and Applications (opens in a new tab)

arXiv cs.CR (all) ·Minki Hhan, Hojune Lee ·4 Oct 2026 ·fetched 4 Oct 2026, 03:36 UTC Research agreed2/2

Why readDemonstrates a cryptographic method to construct trapdoored Clifford operator distributions with near-linear sampling complexity under the Learning Parity with Noise assumption.

Researchers introduced trapdoored Clifford operator distributions that remain computationally indistinguishable from uniform distributions while enabling near-linear time sampling and implementation. The construction relies on a variant of the Learning Parity with Noise (LPN) assumption and resolves an open question regarding efficient trapdoored matrix multiplication over finite fields. The approach allows fast tableau action on Pauli labels for classical simulation and enables polylogarithmic-depth quantum circuit implementations.

arxiv.org → (opens in a new tab)

Supersingularity and Superspeciality Verification of Abelian Surfaces (opens in a new tab)

arXiv cs.CR (all) ·Maria Corte-Real Santos, Gioella Lorenzon, Krijn Reijnders ·3 Oct 2026 ·fetched 3 Oct 2026, 15:38 UTC Research agreed2/2

Why readIntroduces an O(log p) Monte Carlo algorithm to verify whether an abelian surface over F_p is supersingular for isogeny-based cryptography.

Cryptography researchers developed an efficient Monte Carlo verification algorithm for supersingular abelian surfaces used in post-quantum isogeny schemes. The paper demonstrates verification in logarithmic time and provides conclusive verification algorithms when the curve order is smooth.

arxiv.org → (opens in a new tab)

System-Level Optimization Beyond Cryptographic Kernels: An ML-KEM Case Study on Arm Cortex-M7 (opens in a new tab)

arXiv cs.CR (all) ·Mahmoud Abdelhafeez Sayed, Mostafa Taha, Gurp Nijjer ·3 Oct 2026 ·fetched 3 Oct 2026, 07:37 UTC Research agreed2/2

Why readMeasures ML-KEM deployment gains on Arm Cortex-M7, including public-data reuse that cuts encapsulation cycles by up to 74.6%.

The authors evaluate memory placement, peripheral integration, clock configuration, and deterministic public-data reuse around a SLOTHY-optimized ML-KEM implementation. Across all three parameter sets, non-auxiliary profiles save up to 2.5% cycles, while a selected reuse profile reduces encapsulation and decapsulation by up to 74.6% and 58.8%.

arxiv.org → (opens in a new tab)

Time-space lower bounds for breaking quantum cryptography (opens in a new tab)

arXiv cs.CR (all) ·Fangqi Dong, Alex Lombardi ·2 Oct 2026 ·fetched 2 Oct 2026, 11:33 UTC Research

Why readProves mathematical time-space bounds demonstrating quantum cryptography resilience against preprocessing attacks.

Authors established near-optimal time-space lower bounds for adversaries attempting to recover secret keys from quantum binary phase states in the random oracle model. The findings prove that quantum cryptographic primitives maintain security against preprocessing space-bounded attacks up to quadratic memory thresholds.

arxiv.org → (opens in a new tab)

On the pseudorandomness of simple quantum processes (opens in a new tab)

arXiv cs.CR (all) ·Jesko Dujmovic, Jonas Haferkamp, Alexander Poremba ·2 Oct 2026 ·fetched 2 Oct 2026, 15:34 UTC Research agreed1/2

Why readIt shows that approximate unitary t-designs can be efficiently distinguished from random quantum processes with only O_t(log² n) queries.

The authors construct efficiently samplable one- and two-qubit gate distributions that become approximate unitary t-designs after O_t(n²log² n) steps, yet remain distinguishable by an efficient quantum algorithm. The result refutes the unitary analogue of a prior pseudorandom-permutation conjecture and sharpens limits on using moment matching as a cryptographic pseudorandomness proxy.

arxiv.org → (opens in a new tab)

One Port to Root: Weaponizing Check Point Management CVE-2026-93616 (opens in a new tab)

Bishop Fox ·1 Oct 2026 ·fetched 1 Oct 2026, 23:36 UTC Must read Research CVE-2026-93616 EPSS 19.7%

Why readExplains end-to-end weaponization of Check Point Management CVE-2026-93616 to achieve root RCE over port 19009.

Bishop Fox presents a technical deep dive and working exploit write-up for CVE-2026-93616, an unauthenticated directory traversal and arbitrary file upload flaw in Check Point Management servers. The research demonstrates how writing arbitrary files translates directly to root code execution over TCP port 19009 on R81.10 and R82.10 versions.

bishopfox.com → (opens in a new tab)

New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses (opens in a new tab)

The Hacker News ·The Hacker News ·1 Oct 2026 ·fetched 1 Oct 2026, 03:36 UTC Must read Research agreed2/2

Why readDiscover Spectre-v2 BTR, a speculative execution technique that extracts Linux kernel memory despite existing mitigations.

Researchers demonstrated Spectre-v2 Branch Target Relocation (BTR), an attack vector bypassing existing hardware and software speculative execution defenses. The technique was validated against SpiderMonkey, GraalVM, and the Linux cBPF JIT engine. Proof-of-concept exploits successfully extracted root password hashes from kernel memory on fully patched Intel systems in minutes.

thehackernews.com → (opens in a new tab)

On The Simplest Quantum-Secure Block Cipher (opens in a new tab)

arXiv cs.CR (all) ·Gorjan Alagic, Joseph Carolan, Christian Majenz, Saliha Tokat ·1 Oct 2026 ·fetched 1 Oct 2026, 03:36 UTC Research agreed2/2

Why readProves that two-round Even-Mansour remains information-theoretically secure against polynomially many adaptive quantum forward queries in the ideal permutation model.

The paper resolves an open quantum-query question for the two-round Even-Mansour construction, after Simon's algorithm had already broken the one-round variant and prior guarantees required non-adaptive queries. It gives cryptographers a sharper boundary for constructing quantum-secure pseudorandom permutations.

arxiv.org → (opens in a new tab)

Exponential quantum speedup for $\mathbb{F}_3^n$-Subset-Sum? Or, rigorous classical algorithms for Binary-Error LWE (opens in a new tab)

arXiv cs.CR (all) ·Robin Kothari, Tony Metger, Ryan O'Donnell, Noah Shutty ·1 Oct 2026 ·fetched 1 Oct 2026, 07:38 UTC Research agreed2/2

Why readpresents theoretical sample-time algorithmic bounds for solving vector subset sum problems over finite fields relevant to post-quantum cryptography.

Academic research analyzes vector subset sum algorithms over F_3^n, demonstrating sample-time tradeoffs that interpolate between polynomial and exponential runtimes for both quantum and classical models. The paper introduces a deterministic classical algorithm with direct implications for the security bounds of Binary-Error Learning With Errors (LWE) schemes.

arxiv.org → (opens in a new tab)

PS5 Relapse Exploit (opens in a new tab)

Hacker News ·therepanic ·29 Sep 2026 ·fetched 29 Sep 2026, 19:41 UTC Must read Research 116 points agreed3/3

Why readFull PS5 WebKit-to-kernel exploit chain with working payload loader: a structured clone object pool mismatch corrupts a typedarray, then an aio_multi_wait UAF race gives kernel read/write.

Public PS5 exploit chaining a browser stage that uses JSC info leaks and a structured clone object pool mismatch to corrupt a typedarray, then a kernel stage combining an address leak with an aio_multi_wait use-after-free race to establish kernel r/w. Payloads are served locally or from a hosted page, with an ELF loader listening on port 9021. The writeup includes concrete steps, failure modes and a credited contributor list.

github.com → (opens in a new tab) Discussion (opens in a new tab)

Acer System Monitor: from standard user to SYSTEM with CVE-2026-50610 (opens in a new tab)

Intrinsec ·Cassius GARAT ·29 Sep 2026 ·fetched 29 Sep 2026, 15:41 UTC Must read Research CVE-2026-50610 EPSS 0.1% agreed3/3

Why readReverse-engineering of the Acer System Monitor service behind NitroSense and PredatorSense, turned into a reliable standard-user to NT AUTHORITY\SYSTEM escalation as CVE-2026-50610.

Acer's NitroSense and PredatorSense split into an unprivileged UI and a LocalSystem background service, and the named-pipe bridge between them is the escalation path. Intrinsec documents the reversing work on the shared Acer System Monitor engine and the steps to get a reliable local privilege escalation to SYSTEM on affected Acer laptops. The pattern generalises to other OEM control-center software, which is worth auditing on any managed laptop fleet.

intrinsec.com → (opens in a new tab)

1 little known secret of UIEOrchestratorStub.exe (opens in a new tab)

Hexacorn ·adam ·27 Sep 2026 ·fetched 27 Sep 2026, 07:38 UTC Research agreed3/3

Why readUIEOrchestratorStub.exe resolves its child binary through %SystemRoot%, so setting that variable gives proxy execution of an arbitrary path on Windows 11 26H2.

UIEOrchestratorStub.exe launches %SystemRoot%\uus\<architecture>\UIEOrchestrator.exe without pinning the path, so an attacker who controls the SystemRoot environment variable in the process environment gets execution by proxy through a signed Microsoft binary. Demonstrated on 64-bit Windows 11 26H2. Short, concrete, and immediately turnable into a detection on SystemRoot values that differ from the machine default.

hexacorn.com → (opens in a new tab)

Forging 1024-bit RSA signatures in nearly SNFS time [pdf] (opens in a new tab)

Hacker News ·int0x29 ·25 Sep 2026 ·fetched 25 Sep 2026, 03:36 UTC Must read Research 52 points agreed2/2

Why readA cryptanalytic result claiming 1024-bit RSA signature forgery at close to special number field sieve cost, far below the general factoring cost everyone budgets against.

An IACR ePrint paper describes forging signatures under 1024-bit RSA keys at a cost approaching SNFS rather than GNFS, which is the gap that underpins the working assumption that 1024-bit keys are weak but not casually breakable. The practical question for anyone still running 1024-bit RSA in code signing, legacy PKI, DNSSEC or embedded trust anchors is whether their keys fall in the affected class. Only the abstract and an Ars Technica link came through the feed, so read the PDF for the actual parameters and cost model before drawing conclusions.

eprint.iacr.org → (opens in a new tab) Discussion (opens in a new tab)

One Tap Too Far: Using Shortcuts to Bypass Chrome for iOS Call Prompts (opens in a new tab)

Doyensec ·24 Sep 2026 ·fetched 24 Sep 2026, 15:37 UTC Must read Research CVE-2026-13795 EPSS 0.3% agreed2/2

Why readShows how a single click in Chrome for iOS could reach the phone dialler by bouncing through shortcuts:// and using the Shortcuts callback to deliver a tel: URL that Chrome never inspected.

Chrome for iOS prompted before opening third-party custom URL schemes but exempted shortcuts:// and its legacy workflow:// alias because Shortcuts is a native Apple app. Shortcuts supports a callback URL, so a page could hand it a second URL, tel:, which Chrome's user-interaction check on direct tel: navigations never saw because it did not originate in Chrome. Assigned CVE-2026-13795; the fix is to prompt on any Shortcuts or Workflow URL. A reusable pattern for anyone auditing deep-link allowlists on mobile.

blog.doyensec.com → (opens in a new tab)

Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications (opens in a new tab)

Bishop Fox ·24 Sep 2026 ·fetched 24 Sep 2026, 23:36 UTC Research agreed2/2

Why readShows how to extract readable .NET assemblies from cross-platform MAUI apps and the vulnerability patterns that recur once you can read them.

MAUI's write-once model means an attacker who reverse-engineers the shared assembly set breaks the Android and iOS builds at the same time. The post covers pulling readable assemblies out of packaged MAUI apps and the high-impact bug patterns Bishop Fox sees repeatedly in that code. Useful to mobile appsec testers and to teams shipping MAUI who assume platform packaging is a barrier.

bishopfox.com → (opens in a new tab)

OAuth Token Theft Through Microsoft's Front Door | Huntress (opens in a new tab)

Huntress ·23 Sep 2026 ·fetched 23 Sep 2026, 15:39 UTC Must read Research agreed2/2

Why readA new class of living-off-the-land abuse where a sideloaded AppX package borrows Microsoft-signed web hosts to render a genuine Microsoft login and pocket the refresh token.

Huntress details a post-compromise technique in which every moving part is Microsoft-signed, so the sign-in the victim sees is real and signature-based detection has nothing to flag; the reward is a refresh token that grants durable Microsoft 365 access from any machine. The precondition is Developer Mode or an enterprise sideloading policy being enabled, which is the exposure gate worth auditing and restricting. Detection moves to the network layer: the MSAppHost/3.0 user agent reaching anything outside Microsoft domains flags the whole class of hosts, not just this one sample, and should be paired with review of AppX registration activity.

huntress.com → (opens in a new tab)

HTTP/3 in Burp Suite - it’s time to find a bigger wordlist (opens in a new tab)

PortSwigger Research ·23 Sep 2026 ·fetched 23 Sep 2026, 15:39 UTC Must read Research agreed3/3

Why readTurbo Intruder now speaks HTTP/3 and sustains over 100,000 requests per second with auto-tuned concurrency, which changes what wordlist sizes are realistic in a web test.

PortSwigger has added HTTP/3 support to Turbo Intruder in Burp Suite, with throughput reported above 100,000 requests per second over Wi-Fi and automatic tuning of request rate. The practical consequence is that brute-force and parameter-discovery work previously bounded by request budget now scales to much larger wordlists, and QUIC endpoints that were out of reach for high-volume fuzzing come into scope. Worth re-running old discovery passes against targets you had to truncate.

portswigger.net → (opens in a new tab)

Rouxii: Exploiting Honeypots with Deception-Aware AI Pentesters (opens in a new tab)

arXiv cs.CR (AI) ·Arthur Cordeiro, Alberto Maria Mongardini, Emmanouil Vasilomanolakis ·23 Sep 2026 ·fetched 23 Sep 2026, 07:37 UTC Must read Research agreed3/3

Why readHoneypot deception against autonomous LLM attackers collapses the moment the attacker is told to look for it, and the paper puts numbers on how completely.

Rouxii bolts counter-deception onto an LLM pentesting agent's reconnaissance phase, and across three reasoning models, eleven network setups and 1,544 attack reports, correct honeypot identification rises from 19 percent to 97 percent between cohorts that differ only in the prompt. The gain is largest on OT services, 11 percent to 97 percent, while false alarms against real services stay at 0.7 percent. PentestGPT and HackingBuddy fail the same way, so prior results showing honeypots derail AI attackers describe a prompting artefact rather than a durable defensive property.

arxiv.org → (opens in a new tab)

Formally Modeling the Terrapin Attack on SSH (opens in a new tab)

arXiv cs.CR (all) ·Jörg Schwenk, Fabian Bäumer, Marcus Brinkmann ·23 Sep 2026 ·fetched 23 Sep 2026, 23:39 UTC Must read Research agreed2/2

Why readFormal proof of which SSH AEAD modes actually survive Terrapin-style chosen-state attacks, and which do not.

The paper builds a formal model for channel integrity under partially chosen state, with the SSH sequence number as the attacker-influenced input, and gives pseudocode for the eight most prominent AEAD modes used in SSH. By varying the send oracle it separates ciphertext-only (the original Terrapin vector), known-plaintext and chosen-plaintext settings and derives concrete security bounds for each mode. The result: all three Encrypt-then-MAC modes and ChaCha20-Poly1305 in SSH are insecure in this model, closing the open question of whether "unaffected by Terrapin" meant "secure".

arxiv.org → (opens in a new tab)

Forgeable Confirmation in Automated Computer Security Testing: Deterministic Rules versus AI Judges (opens in a new tab)

arXiv cs.CR (AI) ·Akihisha Fujiyama, Niwase Shamim ·22 Sep 2026 ·fetched 22 Sep 2026, 07:39 UTC Must read Research agreed2/2

Why readThe target of an automated scan can forge the evidence that an exploit worked, and one rule predicts which checks are forgeable: whether the decision reads attacker controlled data.

Across a four stage AI assisted testing pipeline, nine of fifteen confirmation mechanisms could be forged by the system under test, and forgeability was predicted entirely by whether the confirmation read attacker controlled content. The rule held prospectively on sixteen held out mechanisms and was 99.9 percent accurate across 12,203 mechanisms in public scanner templates, which means it applies to the template libraries most teams already run. The counterintuitive result is that deterministic rules were cheaper to forge than eight open weight LLM judges, failing at 2 percent of attacker controlled response content against a median of 50 percent, so the confirmations reported as fact are the weaker ones.

arxiv.org → (opens in a new tab)

SyzHarness: Patch-Based Kernel Bug Reproduction with LLM-Synthesized Fuzzing Harnesses (opens in a new tab)

arXiv cs.CR (AI) ·Xingyu Li, Juefei Pu, Haonan Li, Arrdya Srivastav ·22 Sep 2026 ·fetched 22 Sep 2026, 07:39 UTC Must read Research agreed2/2

Why readCombines an LLM agent with Syzkaller to reproduce Linux kernel bugs from a patch, synthesizing a parameterized harness that fixes the setup scaffold and exposes only bug-critical parameters to the fuzzer.

SyzHarness addresses the two halves of kernel bug reproduction separately: an LLM agent grounded by code navigation tools recovers the trigger scaffold and writes a parameterized harness, while coverage-guided fuzzing discovers the concrete values that actually trigger the bug. The harness compiles to a Syzkaller-compatible interface and is refined iteratively, sidestepping the brittleness of LLM-only generation under runtime nondeterminism and the failure of directed fuzzing to reach the vulnerable state at all. Directly applicable to patch validation, triage and regression testing work on the kernel.

arxiv.org → (opens in a new tab)

State-Aware Fuzzing of JavaScript Engines with LLM-Guided Instrumentation (opens in a new tab)

arXiv cs.CR (AI) ·Wai Kin Wong, Dongwei Xiao, Anthony Cheuk Tung Lai, Ping Fan Ke ·22 Sep 2026 ·fetched 22 Sep 2026, 07:39 UTC Must read Research agreed3/3

Why readStateLens uses LLM agents to pick instrumentation targets inside JS engines, giving fuzzers state feedback where edge coverage has plateaued.

The framework attacks the coverage plateau problem: JIT optimisation tiers and hidden class transitions share identical edge coverage, so standard metrics cannot distinguish the internal states that trigger deep bugs. Rather than instrumenting everything, an agent-based pipeline traverses code and developer comments to select high-value probe sites, keeping runtime overhead tractable. Directly relevant to browser bug hunters and to anyone building state-aware feedback into an existing fuzzing harness.

arxiv.org → (opens in a new tab)

The Truth about GET and HTTP Standards, (Tue, Sep 22nd) (opens in a new tab)

SANS ISC Diary ·22 Sep 2026 ·fetched 22 Sep 2026, 15:39 UTC Research agreed3/3

Why readHands-on evidence that Apache hands a GET request body straight to CGI while nginx does not, which is the parser disagreement request smuggling and filter bypass are built on.

Prompted by the new HTTP Query method, Johannes Ullrich tested what common web servers actually do when a GET request carries a body. Apache 2.4.68 accepted a GET with Content-Length: 6, returned 200, and passed both CONTENT_LENGTH and the body content through to a CGI script; nginx did not forward it the same way and answered with a 301 instead. Any pair of components that disagree about whether a GET body exists is a place where a front end proxy and a back end can be made to read two different requests out of one byte stream, so the practical takeaway is to test your own chain rather than assume the standard settles it.

isc.sans.edu → (opens in a new tab)

Windows Exploitation Techniques: Dangling COM Object Registrations (opens in a new tab)

Project Zero ·James Forshaw ·21 Sep 2026 ·fetched 21 Sep 2026, 19:37 UTC Must read Research CVE-2026-66804 EPSS 5.3% agreed2/2

Why readForshaw walks the dangling COM registration primitive behind CVE-2026-66804, including the exact CLSID and the writable %PROGRAMDATA% path that makes it a privilege escalation.

The CrossDevice COM object, CLSID {E9F83CF2-E0C0-4CA7-AF01-E90C70BEF496}, is registered system-wide under HKEY_CLASSES_ROOT but points at %PROGRAMDATA%\CrossDevice\CrossDevice.Streaming.Source.dll, a DLL that does not exist in a directory any user can create paths in. CVE-2026-66804 is the incomplete fix for CVE-2026-50343, the bug Calif called Dark Elevator, and was reported by Forshaw plus 14 others independently. The generalisable finding is the audit technique: registered CLSIDs whose server binary is absent from a world-writable location are a repeatable elevation class on Windows, not a one-off.

projectzero.google → (opens in a new tab)

I Hijacked a Real Artist's Spotify with AI Music. It Was Disturbingly Easy (opens in a new tab)

404 Media ·Emanuel Maiberg ·21 Sep 2026 ·fetched 21 Sep 2026, 23:39 UTC Research agreed3/3

Why readA reporter published a track to a real band's verified Spotify, Apple Music, Tidal and Amazon Music pages without the band knowing, showing the identity gap between distributors and streaming platforms end to end.

Emanuel Maiberg generated a song with Udio and got it onto Brooklyn band Lathe of Heaven's official streaming profiles by exploiting how digital distributors map uploads to existing artist identifiers, with no check that the uploader has any connection to the artist. The AI generator is incidental here; the defect is an identity and supply chain weakness in music distribution that has existed for years and is now being abused at scale by people flooding catalogues with generated tracks. It is a clean worked example of trust assumptions in an intermediary layer being inherited by the platform that displays the result.

404media.co → (opens in a new tab)

The Supersingular Isogeny Problem in Time and Memory $p^{1/3+o(1)}$, Unconditionally (opens in a new tab)

arXiv cs.CR (all) ·José Luis Delgado ·21 Sep 2026 ·fetched 21 Sep 2026, 07:42 UTC Research agreed3/3

Why readAn unconditional Las Vegas algorithm solves the supersingular OneEnd problem in p^(1/3+o(1)) time and memory, improving the previous unconditional exponent of 2/5 and removing Wesolowski's factorisation assumption.

Given a supersingular elliptic curve over F_p^2, the OneEnd problem asks for a non-scalar endomorphism, and by known reductions it also settles the supersingular endomorphism ring and isogeny problems that isogeny-based cryptography rests on. The algorithm fixes a family of smooth degrees in advance, uses counting results to guarantee many isogenies from curves to their Frobenius conjugates, and a collision estimate to show a random walk reaches one; it then splits a degree, enumerates two lists of shorter isogenies and matches targets. Crucially the analysis carries no smoothness heuristic, so the p^(1/3) exponent now holds unconditionally where it previously required an assumption, tightening the concrete security margin for isogeny-based schemes.

arxiv.org → (opens in a new tab)

AIJon: Automated Generation of Annotations for Fuzzing (opens in a new tab)

arXiv cs.CR (AI) ·Jayakrishna Menon Vadayath, Hulin Wang, Moritz Schloegel, Jie Hu ·20 Sep 2026 ·fetched 20 Sep 2026, 07:42 UTC Must read Research agreed3/3

Why readShows that LLM-generated IJON-style annotations match human expert annotations for guiding fuzzers, with results measured on the Magma benchmark.

AIJON replicates the IJON annotation work and extends it to real-world vulnerability detection at scale, replacing the human domain expert with an LLM that writes the annotations automatically. Evaluation on Magma found LLM-produced annotations performed comparably to human ones, removing the main scalability barrier that kept annotation-guided fuzzing a manual exercise. Relevant to anyone running fuzzing campaigns where coverage feedback alone has plateaued.

arxiv.org → (opens in a new tab)

Flock cameras are riddled with security vulnerabilities and hardcoded creds (opens in a new tab)

Hacker News ·micahflee ·18 Sep 2026 ·fetched 18 Sep 2026, 03:41 UTC Must read Research 47 points agreed3/3

Why readA first-hand teardown of filesystem images pulled from a Flock ALPR camera in service, with named artefacts rather than characterisations of them.

Working from a DDoSecrets dataset of partition images taken from a live Flock camera, the author documents a June 2025 build still running Android 8.1, years past end of life, alongside credentials baked into the firmware including an API key permissive enough to query a camera by MAC address. This is primary analysis of shipped hardware, not a summary of the 404 Media and WIRED reporting that accompanied the leak. Useful both as a case study in surveillance-vendor engineering practice and as a template for what to look for in any fielded camera platform.

micahflee.com → (opens in a new tab) Discussion (opens in a new tab)

From Fork to Framework: What Modifying Apollo Taught Us About Agent Invasion (opens in a new tab)

Bishop Fox ·18 Sep 2026 ·fetched 18 Sep 2026, 23:39 UTC Research agreed3/3

Why readExplains why string-stripping and metadata obfuscation of a forked Mythic Apollo agent stops buying runway against hardened EDR, and which architectural assumption breaks first.

Bishop Fox forked Mythic's Apollo agent and built a custom obfuscator to strip detectable strings and metadata, then spent months fighting an architecture that assumes stable, readable symbol names at every layer. That assumption, rather than any defender, is what defeated the fork, and the post traces how those limits shaped the decision to build an agent from scratch. Useful to anyone weighing fork-versus-build for C2 tradecraft, and to defenders who want to know which part of a customised agent still gives it away.

bishopfox.com → (opens in a new tab)

The skb that wasn't freed - the Fragnesia primitive via Open vSwitch (opens in a new tab)

Doyensec ·17 Sep 2026 ·fetched 17 Sep 2026, 07:40 UTC Must read Research agreed3/3

Why readA deterministic local privilege escalation, with public exploit, against default installs of current Arch, Fedora, Debian, RHEL and Amazon Linux running a kernel that already carries the Fragnesia fix.

Doyensec turns the Fragnesia family of read-only-mapping overwrite bugs into a reliable primitive reached through Open vSwitch, which auto-loads on stock distributions, giving root from an unprivileged user namespace with no race and no timing dependency. The underlying issue has been public on netdev since 13 August 2026 and the fix reached mainline and stable on 4 September 2026, so patched-but-unrebooted fleets are the exposure. The post follows the lineage from Copy Fail through Dirty Frag, Fragnesia and DirtyDecrypt, and ships the exploit.

blog.doyensec.com → (opens in a new tab)

Analog Pin Directionality as an Exfiltration Attack Surface in Mixed-Signal ICs (opens in a new tab)

arXiv cs.CR (all) ·Ramana Ranganatham, Chirag Adiga, Michael Zuzak, Tejasvi Das ·17 Sep 2026 ·fetched 17 Sep 2026, 07:40 UTC Must read Research agreed3/3

Why readDemonstrates in fabricated 55-nm silicon that a nominally input-only analog pin on a mixed-signal SoC can be turned into a covert outbound channel.

The authors identify a directionality-based exfiltration class for analog and mixed-signal ICs: data-dependent circuit-offset modulation drives current back out through an input pin, requiring a closed-loop amplifier, an exposed amplifier input, and high impedance at that pin. They validate it on a photoplethysmography analog front-end fabricated in commercial 55-nm CMOS, with the payload costing under 0.001% area and degrading filtered PPG output SNR by just 0.03 dB. The stealth margin is the point: existing functional verification treats pin directionality as a functional property, so a hardware trojan of this shape passes unnoticed.

arxiv.org → (opens in a new tab)

AD Rights Management Service (Part 2): Extraction, Offline Decryption, and the Unrotatable Key (opens in a new tab)

Huntress ·14 Sep 2026 ·fetched 14 Sep 2026, 07:41 UTC Must read Research agreed3/3

Why readShows how any member of the AD RMS Service Group can export the root Server Licensor Certificate key and decrypt every document a deployment ever protected, offline and permanently.

Membership of the AD RMS Service Group is enough to pull the SLC key blob through a Trusted Publishing Domain export over the SOAP interface, and the released SharpRMS tool then forges the signature and Rights Account Certificate needed to decrypt the extracted slc.bin without touching the server again. Because Microsoft issues the SLC with 255 years of validity and provides no rotation mechanism, the compromise is unrecoverable: the key cannot be rolled, so access extends to deleted files and documents recovered from decommissioned servers. The defensive takeaway is concrete, namely to govern and monitor AD RMS Service Group membership as a tier-zero privileged group.

huntress.com → (opens in a new tab)

IntentFuzz: A Protocol-Aware Fuzzer for Automated Invariant Violation Detection in Intent-Based Cross-Chain Bridges (opens in a new tab)

arXiv cs.CR (AI) ·André Augusto, Christof Ferreira Torres, André Vasconcelos, Miguel Correia ·14 Sep 2026 ·fetched 14 Sep 2026, 19:42 UTC Research agreed3/3

Why readA fuzzer that recovers intent structure and deposit/fill roles from unannotated Solidity, hitting 9/9 on benchmark protocols and 79.5% bridge-classification precision with 97.2% recall.

IntentFuzz targets intent-based cross-chain bridges, where a solver fulfils a declared outcome and an off-chain settlement layer reconciles fill against deposit. It separates invariant violations the contract must enforce locally from settlement exposures legitimately delegated off-chain, then synthesises multi-step fuzz sequences using an LLM fallback to construct call arguments, without hand-written per-protocol assertions. Across 77 manually labelled contracts it classifies deposit and fill functions at 100% recall and 82% combined precision, which is the part worth borrowing if you audit bridge code.

arxiv.org → (opens in a new tab)

Metasploit Wrap Up: This One Goes to Sixteen! (opens in a new tab)

Rapid7 ·Brendan Watters ·11 Sep 2026 ·fetched 11 Sep 2026, 15:39 UTC Must read Research CVE-2025-54988 EPSS 87.7% agreed3/3

Why readSixteen new Metasploit modules, ten of them exploits and five targeting CISA KEV entries across Cisco, PaperCut, SonicWall, JetBrains and Langflow.

This release adds exploit coverage for five vulnerabilities already on the KEV list, meaning red teams and validation programmes can now reproduce confirmed in-the-wild attack paths directly from the framework. Auxiliary additions include a scanner for the Apache Tika XFA XXE reachable through the Elasticsearch ingest-attachment processor (CVE-2025-54988 / CVE-2025-66516, EPSS 0.88) and an unauthenticated blind SQLi scanner for SPIP via date field escaping bypass. Defenders should treat the KEV-aligned modules as a signal that exploitation is now trivially available to anyone with msfconsole.

rapid7.com → (opens in a new tab)

Don't Trust the Super-App: A Case Study of Russia's Max (opens in a new tab)

arXiv cs.CR (all) ·Richa Priyanka, Aaron Ortwein, Joel Reardon, Michael Specter ·11 Sep 2026 ·fetched 11 Sep 2026, 15:39 UTC Must read Research agreed3/3

Why readDemonstrates that a super-app host can capture mini-app UI, read and write mini-app local storage, inject arbitrary JavaScript into the mini-app runtime, proxy its network traffic, and control authentication context well enough to impersonate users silently.

A decade of super-app security research assumed the host app is a trusted intermediary; this paper attacks that assumption using Russia's MAX as the case study. The authors enumerate host capabilities that leave no trace on the mini-app side, including UI capture, storage read/write, runtime JavaScript injection, network mediation and auth-context control enabling silent impersonation. The threat model generalises to WeChat, Bale and any other state-adjacent super-app platform, which matters for anyone assessing mini-app deployments in those ecosystems.

arxiv.org → (opens in a new tab)

Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490 (opens in a new tab)

Bishop Fox ·10 Sep 2026 ·fetched 10 Sep 2026, 23:40 UTC Must read Research CVE-2026-19490 EPSS 6.0% agreed3/3

Why readA branch by branch walk from a single unauthenticated NetScaler request to root, showing exactly which configurations turn CVE-2026-19490 from a crash into full appliance compromise.

Bishop Fox reversed Citrix CTX696939 and worked out how CVE-2026-19490, a CWE-288 SAML authentication bypass on NetScaler ADC and Gateway rated CVSS 9.3, behaves in practice. One unauthenticated request drives the appliance into its post-login path, but what that yields depends on the virtual server configuration: a reliable pre-authentication crash at one end, a proxy into the internal network in the middle, root command execution at the other. They also published a detection tool that reads patch state from outside in a single safe request, so defenders can measure exposure without exploiting it; fixed builds are 13.1-63.21 and 14.1-73.32, with 12.1 and 13.0 past end of life.

bishopfox.com → (opens in a new tab)

The Machine With Many Faces: Post-Exploitation Identity Misuse in SPIFFE/SPIRE (opens in a new tab)

Unit 42 ·Eviatar Garzi ·10 Sep 2026 ·fetched 10 Sep 2026, 11:39 UTC Must read Research agreed3/3

Why readShows how root on a Kubernetes node lets an attacker spoof cgroup data to make the SPIRE agent hand over another workload's SVID, breaking the trust assumption underneath SPIFFE deployments.

Unit 42 demonstrates post-exploitation identity misuse against SPIFFE/SPIRE: with root on a node, an attacker forges the Linux cgroup information the SPIRE agent reads during workload attestation, so the agent issues a co-located workload's Verifiable Identity Document to an attacker-controlled process. The team built tooling to carry this out, and the conclusion generalises beyond SPIRE, since every machine-identity system rests on the node being trusted. Not observed in the wild, but it reframes what short-lived workload identities actually buy you once node compromise is on the table.

unit42.paloaltonetworks.com → (opens in a new tab)

ECDSA.Fail: Open Autoresearch for Optimizing Elliptic-Curve Point Addition in Shor's Algorithm (opens in a new tab)

arXiv cs.CR (AI) ·Jieyi Long, Theodore Pender, Zhao Huang, Manuel B. Santos ·10 Sep 2026 ·fetched 10 Sep 2026, 11:39 UTC Research agreed3/3

Why readCuts the cost of the secp256k1 point-addition circuit in Shor's algorithm by 86.1%, landing over 50% below Google's published thresholds.

ECDSA.Fail runs an open leaderboard where humans and AI agents submit evaluator-verified reversible circuits for secp256k1 point addition, scored on peak logical qubits times average executed Toffoli count. The best entry at the 26 July 2026 cutoff uses 1,151 qubits and 1,299,453 Toffolis for a product of about 1.496 billion, with a windowed-Shor-compatible variant at 1,162 qubits and 1,684,161 Toffolis. Anyone modelling harvest-now-decrypt-later timelines for ECC should note the resource estimates moving down, under different accounting conventions to Google's.

arxiv.org → (opens in a new tab)

Testing race conditions with memory access tracing and stack-based delay injection (opens in a new tab)

Project Zero ·Jann Horn ·8 Sep 2026 ·fetched 8 Sep 2026, 19:40 UTC Must read Research agreed3/3

Why readA method for reliably triggering and regression-testing race condition bugs, using memory access tracing plus delay injection keyed on the stack trace at the access site rather than hand-placed mdelay() calls.

Race conditions resist both proof and regression testing: a candidate found by code reading may never interleave the right way, and after a fix there is usually no test that reliably reproduces the original bug. Horn's approach traces memory accesses and injects delays conditioned on the call stack at the accessing instruction, which replaces the usual practice of recompiling a kernel with conditional mdelay() spinloops inserted by hand. The payoff is threefold: confirming or disproving manually discovered bug candidates, writing regression tests that actually hit the interleaving, and steering fuzzers into code paths that only execute while operations are racing.

projectzero.google → (opens in a new tab)

AD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance (opens in a new tab)

Huntress ·8 Sep 2026 ·fetched 8 Sep 2026, 15:38 UTC Research agreed3/3

Why readMaps the AD RMS trust model and shows how to find an RMS deployment, fingerprint protected files, and trace the route to the Server Licensor Certificate private key.

AD RMS still ships in Windows Server 2025 and remains fully supported on-premises, which leaves a rarely audited SOAP and PKI surface in mature domains. Part 1 documents the Server Licensor Certificate, the license issuance flow and the service's exposed endpoints, then covers reconnaissance: locating an RMS deployment, identifying an AD RMS-protected file, and following the path toward the SLC private key that underpins all content protection. Useful groundwork for anyone assessing or defending a legacy RMS install ahead of the attack detail promised in later parts.

huntress.com → (opens in a new tab)

martian56/redcell: AI red-team platform. Autonomous LLM agents run a penetration test end to end inside a Kali container and write the report. LangGraph plan/act engine, provider-agnostic models via LiteLLM, PDF/JSON/SAR (opens in a new tab)

GitHub: new security tools ·martian56 ·8 Sep 2026 ·fetched 8 Sep 2026, 23:41 UTC Research ★ 198 agreed3/3

Why readA working, installable implementation of the autonomous pentest agent everyone is arguing about, useful for judging what LLM operators can and cannot actually do against real targets.

REDCELL runs a LangGraph plan and act loop in which an orchestrator hands objectives to executor agents that invoke real tooling inside a Kali container, then assembles PDF, JSON and SARIF reports. Models are pluggable through LiteLLM across hosted and local providers, and every run checkpoints so a crash resumes in place. The operator console exposes the agent graph, an activity feed, the driven browser and a terminal on any caught reverse shell, which makes it as useful for evaluating agentic offensive capability as for using it.

github.com → (opens in a new tab)

The NX bit is not just about security (opens in a new tab)