Vulnerabilities & Exploits
CVEs, zero-days, patching and exploited weaknesses.
Unlocking Sex-Specific Vulnerabilities: GABA Pathway Fuels Glioblastoma in Females
A new study reveals that the neurotransmitter GABA selectively reprograms immune cells to fuel glioblastoma growth specifically in females, showing a critical sex-specific mechanism that could lead to targeted therapies.
Active Attacks Target Critical SSRF Vulnerability in Cisco Unified Communications Manager
Threat actors are actively leveraging a newly disclosed server-side request forgery (SSRF) flaw, CVE-2026-20230, in Cisco's Unified Communications Manager. This high-severity issue, which permits arbitrary file-write operations, is currently being used for reconnaissance, with concerns for potential remote code execution and root privilege escalation.
Critical Privilege Escalation Flaw Discovered in Kirki WordPress Plugin
A critical privilege escalation vulnerability, CVE-2026-8206, in the Kirki WordPress plugin allows unauthenticated attackers to hijack administrator accounts. Users must update to version 6.0.7 immediately.
Git Rebase Command Injection in Gogs Enables Server Takeover
A critical argument injection vulnerability (CVE-2026-52806) in Gogs enabled authenticated users to execute arbitrary commands by exploiting the 'Rebase before merging' function. Explore technical analysis and mitigation strategies to secure your Git infrastructure against RCE.
Active Directory Control Planes at Risk of Remote Takeover via Exposed Netlogon Protocol
An urgent warning from Belgium's national cybersecurity authority reveals that threat actors are actively capitalizing on CVE-2026-41089, a critical stack-based buffer overflow in the Windows Netlogon service allowing unauthenticated remote code execution on Domain Controllers.
Emergency Security Patch Addresses Low-Privilege Remote Code Execution in SharePoint Server
Microsoft released an emergency out-of-band security fix for CVE-2026-45659, a critical remote code execution (RCE) vulnerability in on-premises SharePoint Server. CISA has now added it to the KEV catalog as actively exploited, ordering federal agencies to patch by Saturday under BOD 26-04. Shadowserver tracks over 10,000 exposed SharePoint servers online with no confirmed patch coverage.
Root RCE via Reflected Configuration Commands: A Technical Breakdown of Ivanti Sentry's Dual Flaws
An analytical breakdown of Ivanti Sentry's CVE-2026-10520 and CVE-2026-10523 vulnerabilities, detailing how a pre-authentication endpoint allowed attackers to execute root-level commands via reflective Java configuration parsing.
Critical Exploited Zero-Day Found in Oracle PeopleSoft Applications
Oracle has issued emergency mitigations for CVE-2026-35273, a critical zero-day in PeopleSoft PeopleTools currently being exploited by the ShinyHunters extortion group to facilitate large-scale data theft.
From Zero-Day to Student Records: Deconstructing the Attack on Nottingham's Database
An analysis of the massive data breach at the University of Nottingham, focusing on how the ShinyHunters extortion crew exploited a critical zero-day vulnerability in Oracle PeopleSoft to access over 450,000 student records.
Campus Networks Unlocked: The PeopleSoft Zero-Day ShinyHunters Exploited to Ransom US Universities
A critical remote code execution vulnerability (CVE-2026-35273) in Oracle PeopleSoft’s Environment Management Hub has been weaponized by the ShinyHunters group, leading to data theft at dozens of institutions, including the University of Nottingham.
Active Exploitation of Path Traversal in Langflow AI
Exploitation of CVE-2026-5027, a critical path traversal vulnerability in Langflow, is underway, allowing unauthorized file uploads on exposed servers.
Path-Divergence Vulnerability in Starlette Exposes Python-Based AI Agents to Data Breaches
An in-depth look at CVE-2026-48710 (BadHost), a critical path-divergence vulnerability in the Starlette ASGI framework that allows authentication bypasses and security control evasion across the Python AI ecosystem.