#Privilege Escalation
Ivanti Connect Secure Chain Gets a Second Patch Deadline as Root-Level Exploitation Stays Active
Ivanti Connect Secure Chain Gets a Second Patch Deadline as Root-Level Exploitation Stays Active Organizations that patched Ivanti Connect Secure after the firs...
Lucas Oliveira
Research
CVE-2026-102489: Zammad Zero-Day Chain Hits Root
CVE-2026-102489: Zammad Zero-Day Chain Hits Root | 2026 Executive Summary Since September 21, 2026, the chained CVE-2026-102489 and CVE-2026-102490 vulnerabilit...
Lucas Oliveira
Research
CISA deadline arrives for exploited Linux kernel AF_ALG race condition
CISA deadline arrives for exploited Linux kernel AFALG race condition CISA's September 21 remediation deadline for CVE-2025-39964 should push this Linux kernel...
Lucas Oliveira
Research
cPanel CVE-2026-65643 turns domain parking into a root-control risk
cPanel CVE-2026-65643 turns domain parking into a root-control risk cPanel has disclosed CVE-2026-65643, a critical [vulnerability](https://invaders.ie/resource...
Lucas Oliveira
Research
AI-Assisted Linux Kernel Exploit Turns a Traffic-Control Race Into Root Access
AI-Assisted Linux Kernel Exploit Turns a Traffic-Control Race Into Root Access STAR Labs has published technical details for CVE-2026-53264, a Linux kernel race...
Lucas Oliveira
Research
Microsoft Defender RoguePlanet fix closes a SYSTEM-level escalation path
Microsoft Defender RoguePlanet fix closes a SYSTEM-level escalation path Microsoft has released a fix for CVE-2026-50656, the Microsoft Defender vulnerability p...
Lucas Oliveira
Research
Cisco patches another SD-WAN zero-day after limited exploitation
Cisco patches another SD-WAN zero-day after limited exploitation Cisco has disclosed yet another actively exploited weakness in its SD-WAN stack, and the import...
Lucas Oliveira
Research
Cisco CUCM SSRF bug turns WebDialer exposure into a path toward root
Cisco CUCM SSRF bug turns WebDialer exposure into a path toward root Cisco's latest Unified Communications Manager advisory deserves attention because it turns...
Lucas Oliveira
Research
Cisco SD-WAN zero-day turns earlier auth bypass flaws into root access risk
Cisco SD-WAN zero-day turns earlier auth bypass flaws into root access risk Cisco's new CVE-2026-20245 advisory matters because it is not just another isolated...
Lucas Oliveira
Research
CVE-2026-48172 puts LiteSpeed cPanel deployments on a KEV deadline
CVE-2026-48172 puts LiteSpeed cPanel deployments on a KEV deadline CVE-2026-48172 has escalated from vendor emergency to federal patching priority. On May 26, 2...
Lucas Oliveira
Research
Dirty Frag Linux kernel zero-day gives local users a fast path to root
Dirty Frag Linux kernel zero-day gives local users a fast path to root Dirty Frag is the kind of Linux bug defenders worry about because it turns a limited foot...
Lucas Oliveira
Research
Dirty Frag Linux kernel zero-day gives local users a fast path to root
Dirty Frag Linux kernel zero-day gives local users a fast path to root Dirty Frag deserves attention because it is not a theoretical Linux bug waiting for slow...
Lucas Oliveira
Research