28 articles · newest first
CVE-2026-20200 lets a low-privilege, already-logged-in attacker take full root control of Cisco UCS C-Series servers through the web management interface — and the discoverer's own proof-of-concept tool is sitting on GitHub right now.
Ravi Malhotra · 17h ago · 6 min
A password-reset endpoint with a CVSS 10.0 score let attackers become Metabase admins with zero credentials — and Framework's customers paid for it.
Priya Nair · 2d ago · 6 min
Three flaws in Catalyst SD-WAN and IOS XE score 9.9 out of 10 — and one of them lets an attacker reach files no matter how the device is configured.
Ravi Malhotra · 3d ago · 6 min
Veeam disclosed six vulnerabilities in Veeam ONE, and the worst one lets a stranger run code on your backup monitoring server with zero credentials — exactly the kind of hole ransomware crews go looking for first.
Priya Nair · 5d ago · 7 min
A single #+INCLUDE line in a Gitea markup preview is enough for an anonymous visitor to pull your server's config file straight off disk, and from there, the path to running their own code is depressingly short.
Priya Nair · 5d ago · 7 min
A Chinese hacker wired DeepSeek into an autonomous attack framework and pointed it at unpatched Apache Tomcat servers, and CISA wants federal systems fixed by Friday — everyone else should move just as fast.
Priya Nair · 5d ago · 7 min
CVE-2026-15409 and CVE-2026-15410 let INC ransomware walk into SMA 1000 appliances as root — SonicWall didn't even know the holes existed until the attacks were already underway.
Ravi Malhotra · 5d ago · 6 min
CVE-2026-9198 lets anyone run code on a default Langflow install with zero credentials — CISA gave federal agencies two days to patch it.
Lena Fischer · 5d ago · 6 min
CVE-2026-20316 is a static-credential bug in Secure FMC that's already on CISA's Known Exploited Vulnerabilities list, with a federal patch deadline of August 1.
Priya Nair · 6d ago · 6 min
CVE-2026-66066 scores a 9.5 on CVSS 4.0 because Active Storage's image pipeline can be tricked into reading any file the app can read, no authentication required.
Priya Nair · 6d ago · 7 min
Qualys just named a nine-year-old race condition in XFS that turns any local login into root, and the disk never shows it happened.
Priya Nair · 6d ago · 6 min
CVE-2026-18577 lets an attacker skip the login screen entirely and pivot straight into every endpoint N-central manages — CISA added it to its must-patch list within 24 hours.
Priya Nair · 6d ago · 6 min
A 9.8-severity flaw in TeamCity On-Premises lets anyone with network access run commands on your build server — no credentials, no phishing, just a crafted request.
Priya Nair · Aug 4 · 6 min
CVE-2026-16812 scores a perfect 10, needs zero credentials, and CISA is already watching it get used against real networks.
Ravi Malhotra · Aug 3 · 7 min
A patch, a diff, and a Git hook was all it took — no admin access required, and Gitea's own advisory shipped with working exploit code attached.
Priya Nair · Aug 3 · 6 min
no external researcher gets credit for the four ugliest bugs in Chrome 151 — Google's own team found them first, patched them, and shipped before anyone could weaponize a single one.
Priya Nair · Aug 2 · 6 min
The published proof-of-concept and the real attacks hit the same endpoint through two different doors — which is why patching alone didn't close this one.
Priya Nair · Aug 1 · 7 min
KindaRails2Shell abuses a file that tells two different libraries two different lies to read anything your Rails app can read — including the keys that sign its cookies.
Priya Nair · Aug 1 · 6 min
A broken identity check let attackers skip the login screen entirely — and Check Point found out because someone was already inside.
Priya Nair · Aug 1 · 6 min
A file-upload flaw in Cisco Catalyst SD-WAN Manager lets an authenticated attacker overwrite files and escalate to root. It's being exploited across on-prem, cloud, and government deployments.
Priya Nair · Jul 31 · 10 min
Microsoft confirmed CVE-2026-56155 in Active Directory Federation Services is being exploited in the wild. If AD FS underpins your single sign-on, this is a priority fix.
Priya Nair · Jul 31 · 10 min
An unauthenticated attacker can run code on your SharePoint server with a single crafted request. There's a public PoC, it's under active exploitation, and Microsoft already shipped the fix. Patch today.
Priya Nair · Jul 31 · 10 min
Hackers were already exploiting Fastjson's default config for over a week before Alibaba's patch quietly showed up on a wiki page.
Priya Nair · Jul 31 · 7 min
CVE-2026-47876 lets a VM break out and run code on the ESXi host underneath it. Broadcom patched five bugs at once — and the one graded lower is actually getting all the headlines.
Priya Nair · Jul 31 · 8 min
CVE-2026-20316 gives anyone the login to a low-privilege account baked into Cisco Secure FMC — and Cisco's own team says it was already being used in the wild before a patch existed.
Priya Nair · Jul 31 · 7 min
A researcher found a way to turn a page number into a working PHP shell — no login required. vBulletin patched it in July. A lot of self-hosted forums haven't.
Priya Nair · Jul 31 · 7 min
Same vulnerability, two official severity scores that don't agree: Microsoft rates CVE-2026-56164 a 5.3, the National Vulnerability Database a 9.8. It's a zero-day being exploited right now. Here's who's right, and what to do.
Priya Nair · Jul 22 · 7 min
CVE-2026-35273 is a 9.8 pre-auth RCE ShinyHunters used as a zero-day on universities before Oracle had a patch. It's fixed in the July CPU — here's the patch-now checklist, and why patching alone isn't enough.
Priya Nair · Jul 22 · 7 min