vulnerability

4 articles · newest first

Rows of enterprise server racks in a data center, representative of VMware vCenter-managed infrastructure

hackers broke into 361 companies' VMware servers in under a week — and they're not leaving

A 9.8-severity bug in vCenter's syslog server went from patch to active exploitation in five days, and attackers are planting permanent backdoors, not just stealing data.

Priya Nair · 1d ago · 6 min

Hardware

Cisco's server controller scored a 9.8 bug that hands out root — exploit code is already public

CVE-2026-20200 lets a low-privilege, already-logged-in attacker take full root control of Cisco UCS C-Series servers through the web management interface — and the discoverer's own proof-of-concept tool is sitting on GitHub right now.

Ravi Malhotra · 5d ago · 6 min

Rows of server racks with a code editor displayed on a monitor in the foreground

Software

a critical bug in one of Java's most-used libraries had no fix. that just changed

Hackers were already exploiting Fastjson's default config for over a week before Alibaba's patch quietly showed up on a wiki page.

Priya Nair · Jul 31 · 7 min

NVD detail for CVE-2026-8451 showing a Citrix NetScaler memory-overread flaw

Software

CitrixBleed is back: a NetScaler flaw that leaks memory — and with it, the session tokens that unlock your network

CVE-2026-8451 makes NetScaler ADC and Gateway over-read memory when configured as a SAML identity provider, potentially spilling session tokens. It's the same class of bug behind the original CitrixBleed. Patch it.

Priya Nair · Jul 28 · 9 min