#CVE
CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure
CVE-2026-109618 and CVE-2026-109619: PHP2Shell RCE Exposure | 2026 Executive Summary CVE-2026-109618 and CVE-2026-109619 affect PHP runtimes and are collectivel...
Lucas Oliveira
Research
CVE-2026-104286: FortiMail File Write Zero-Day
CVE-2026-104286: FortiMail File Write Zero-Day | 2026 Executive Summary Since October 1, 2026, the critical CVE-2026-104286 vulnerability in Fortinet FortiMail...
Lucas Oliveira
Research
CISA deadline arrives for exploited Linux kernel AF_ALG race condition
CISA deadline arrives for exploited Linux kernel AFALG race condition CISA's September 21 remediation deadline for CVE-2025-39964 should push this Linux kernel...
Lucas Oliveira
Research
CVE-2026-76460: Cisco ISE Auth Bypass Zero-Day
CVE-2026-76460: Cisco ISE Auth Bypass Zero-Day | 2026 Executive Summary Since September 16, 2026, the critical CVE-2026-76460 vulnerability in Cisco Identity Se...
Lucas Oliveira
Research
Cisco Secure FMC Flaws Are Now an Active Firewall Management Risk
Cisco Secure FMC Flaws Are Now an Active Firewall Management Risk Cisco Secure Firewall Management Center is supposed to be the control point defenders use to m...
Lucas Oliveira
Research
CVE-2026-33824: Windows IKE RCE Active Exploit Patch Guide
CVE-2026-33824: Windows IKE RCE Active Exploit Patch Guide | 2026 Executive Summary Since August 18, 2026, the critical CVE-2026-33824 vulnerability in Microsof...
Lucas Oliveira
Research
macOS Screen Sharing CVE-2026-65400 exploited to gain root and deploy Monero miners
macOS Screen Sharing CVE-2026-65400 exploited to gain root and deploy Monero miners Executive Summary Threat actors are exploiting CVE-2026-65400, a recently pa...
Lucas Oliveira
Research
SharePoint JWT Bypass Turns Patch Delay Into an Identity Risk
SharePoint JWT Bypass Turns Patch Delay Into an Identity Risk Attackers have started targeting a critical Microsoft SharePoint Server authentication bypass afte...
Lucas Oliveira
Research
Metabase zero-day turns BI dashboards into a data-exposure path
Metabase zero-day turns BI dashboards into a data-exposure path Metabase has confirmed active exploitation of CVE-2026-72898, a critical unauthenticated [SQL in...
Lucas Oliveira
Research
Gitea Org-mode flaw turns public repositories into a server file-read risk
Gitea Org-mode flaw turns public repositories into a server file-read risk Gitea administrators have a critical patch to verify. The project has fixed CVE-2026-...
Lucas Oliveira
Research
N-able N-central flaw exposes MSP consoles to account takeover
N-able N-central flaw exposes MSP consoles to account takeover N-able has released an emergency hotfix for N-central after confirming active exploitation of an...
Lucas Oliveira
Research
Hugging Face Diffusers flaws turn model loading into a code execution risk
Hugging Face Diffusers flaws turn model loading into a code execution risk Security researchers have disclosed a set of Hugging Face Diffusers vulnerabilities t...
Lucas Oliveira
Research