↓ Skip to main content

Vulnerability

One CVE per post: what it hits, what fixes it, who exploits it.

October 2026

30

CVE-2026-109618 - PHP2Shell a week on: crashes on the web, root on PAN-OS Vulnerability

29

CVE-2026-109618 - PHP RCE CVEs leaked before the patch was out Vulnerability

22

CVE-2026-110264 - Unauthenticated GitLab RCE via a crafted .org file Vulnerability

15

CVE-2026-88771 - Exploited NetScaler pre-auth command injection Vulnerability

15

CVE-2026-94127 - F5 BIG-IP APM OAuth heap overflow to unauthenticated RCE Vulnerability

15

CVE-2026-88779 - NetScaler SAML DoS, followed by a SAML RCE Vulnerability

15

CVE-2026-107181 - Telegram Desktop one-click account takeover Vulnerability

September 2026

15

Apache Log4j2 Java Deserialization Filter Bypass Vulnerability

August 2026

15

CVE-2026-64561 - Zapscape, a KVM/x86 guest-to-host escape Vulnerability

15

CVE-2026-27912 - ResetNightmare: AD takeover via Kerberos password change Vulnerability

15

CVE-2026-50656 - ShieldBreak PoC claims a Defender RoguePlanet patch bypass Vulnerability

July 2026

5

CVE-2026-31431 - Copy Fail: Four Bytes to Root Vulnerability

5

FortiBleed: The Firewall Is the Foothold Vulnerability

May 2026

22

CVE-2026-31431 - Copy Fail: Linux kernel page-cache write to root Vulnerability

22

CVE-2026-43284 - "Dirty Frag" Linux page-cache LPE via ESP and RxRPC Vulnerability

22

CVE-2026-46300 - Fragnesia: Linux kernel page-cache overwrite to root Vulnerability

22

CVE-2026-9082 - Drupal core SQL injection on PostgreSQL sites Vulnerability

March 2026

1

CVE-2026-2441 - Crash PoC for Chrome's CSS font feature use-after-free Vulnerability

January 2026

24

BREAKMEIFYOUCAN: Keyspace Reduction Attacks on NXP NFC Tags Vulnerability

24

CVE-2025-15467 - AISLE found all 12 OpenSSL January 2026 CVEs Vulnerability

December 2025

12

CVE-2025-55182 - React2Shell RCE in React Server Components Vulnerability

12

CVE-2025-20702 - Airoha Bluetooth chips expose RACE debug protocol Vulnerability

March 2025

19

CVE-2025-1974 - IngressNightmare: unauthenticated RCE in Ingress NGINX Vulnerability

February 2025

24

CVE-2025-27364 - RCE in MITRE Caldera Vulnerability

November 2024

24

CVE-2024-43451 - Windows NTLM hash disclosure zero-day exploited Vulnerability