#cve
-
The Linux Kernel Is Nearing 2,000 CVEs per Release — Blame the Neural Nets
As LLMs analyzing the Linux kernel source code have spread, the number of vulnerabilities fixed per release has quadrupled. Greg Kroah-Hartman shared a slide from his upcoming talk at Kernel Recipes 2026.
-
Attacks on the miniOrange SAML SSO plugin for WordPress: login bypass grants admin rights
Attackers are mass-scanning WordPress sites for the Xecurify miniOrange SAML 2.0 SSO plugin, whose two vulnerabilities allow logging in as any user without authentication.
-
Vulnerability in Calix routers exposes home devices to the entire internet
An unpatched hole in Calix GS7 XGS routers lets attackers create port-forwarding rules remotely and without authentication, bypassing NAT and the firewall. The manufacturer never responded to the researcher's outreach.
-
Emacs Once Again Found to Execute Code When Opening a File
The vulnerability exploits the Emacs Lisp symbol shorthands mechanism and allows arbitrary code to run when opening any file in the default configuration. All versions from 28.1 onward are affected.
-
Critical GitLab Vulnerability CVE-2026-19478 Comes Under Exploitation Within Days
A fresh GitLab flaw rated CVSS 9.4 lets an unauthenticated attacker overwrite and delete public projects. According to watchTowr, real-world attacks began almost immediately after disclosure.
-
Critical NetScaler Vulnerability Allows Authentication Bypass
Citrix has released updates for NetScaler ADC and NetScaler Gateway, patching two vulnerabilities, including a critical authentication bypass on gateways and AAA servers.
-
How str.lower() Became a Python Vulnerability
A routine call to lowercase a string broke conformance with the IDNA 2003 standard and turned into a CVE. The culprit is the version of Unicode the interpreter works with.
-
Certighost: an ordinary domain user turns the certificate authority into a domain controller
The CVE-2026-54121 vulnerability lets a rank-and-file domain user issue a domain controller certificate and take over the entire domain. Microsoft has shipped a fix, but the real problem lies in accumulated privileges and blind trust in the PKI.
-
Microsoft closes the LegacyHive zero-day in Windows
In its August batch of updates, Microsoft fixed a vulnerability in the Windows User Profile Service that allowed local escalation to administrator privileges. The patch arrived a month after the PoC was published.
-
Azure Linux 3.0.20260809: Over 233 Vulnerability Fixes
Microsoft has released another monthly update to the stable Azure Linux 3.0 branch, bundling an impressive set of security patches.
-
Attacks on SharePoint: Public PoC Fuels Exploitation of an Authentication Bypass
After Rapid7 published a proof-of-concept exploit, attackers began actively exploiting the critical CVE-2026-55040 vulnerability in Microsoft SharePoint, which allows a JWT to be forged and lets an attacker impersonate any user.
-
Rsync 3.5: an “extraordinary” release closes 33 vulnerabilities
The popular file-synchronization utility has received an update that its developers have called “extraordinary” because of the sheer number of security issues it fixes.
-
SAP Patches a Critical 10-out-of-10 Vulnerability in Commerce Cloud
SAP has released fixes for a maximum-severity flaw in Commerce Cloud that let an unauthenticated attacker execute arbitrary code. Alongside it, the August update also closes three more critical holes.
-
Storm-1175 Switches to a New Ransomware Strain, StormEncryptor
Microsoft reports that the China-linked group Storm-1175 has abandoned Medusa in favor of a previously undocumented ransomware, StormEncryptor, breaking into networks through a fresh vulnerability in N-able N-central.
-
CISA Adds Critical Progress Kemp LoadMaster Vulnerability to KEV Catalog
CVE-2026-8037, rated CVSS 9.6, lets an unauthenticated attacker run arbitrary commands on the load balancer. Over 41 days, 792 exploitation attempts were recorded.
-
N-able Releases Hotfix 2 for N-central Amid Active Attacks on Managed Systems
Attackers are exploiting an authentication-bypass flaw in the N-central RMM platform to gain administrative access and maintain persistence through Cloudflare tunnels. The company has released a mandatory patch that supplements the previous one.
-
Zapscape: KVM Vulnerability Lets Attackers Escape a Guest VM onto the Linux Host
A new bug in KVM/x86's shadow MMU (CVE-2026-64561) lets privileged code inside a nested virtual machine run commands on the host as root. The risk applies to systems running nested virtualization exposed to untrusted guests.
-
Patches for Veeam, Terraform MCP and Django: The Big Hole Is Cross-Tenant, at CVSS 10.0
HashiCorp, Veeam and the Django Software Foundation have closed 11 vulnerabilities. The most serious is a cross-tenant bug in Terraform MCP Server that lets someone reuse another user's token.
-
OVSwrap: a Linux kernel flaw hands local users root through Open vSwitch
A memory-corruption bug in the Open vSwitch datapath lets an ordinary user gain root on a wide range of distributions in their default configuration. The public exploit ships with ready-made data for roughly 800 kernel builds.
-
Critical Gitea Vulnerability: Reading Server Files via Org Markup Without Logging In
In Gitea versions 1.22.1 through 1.27.0, an unauthenticated attacker could read any file accessible to the service account. All it took was a public repository and specially crafted Org markup.
- More