#Remote Code Execution
Ivanti Connect Secure Chain Gets a Second Patch Deadline as Root-Level Exploitation Stays Active
Ivanti Connect Secure Chain Gets a Second Patch Deadline as Root-Level Exploitation Stays Active Organizations that patched Ivanti Connect Secure after the firs...
Lucas Oliveira
Research
GitLab CVE-2026-97229: Active Exploitation Turns CI/CD Into an Emergency Patch Queue
GitLab CVE-2026-97229: Active Exploitation Turns CI/CD Into an Emergency Patch Queue GitLab self-managed administrators have a narrow remediation window for CVE...
Lucas Oliveira
Research
Redis RESTORE Flaw Is Now Exploited: Patch CVE-2026-25243 and Restrict the Command
Redis RESTORE Flaw Is Now Exploited: Patch CVE-2026-25243 and Restrict the Command The Canadian Centre for Cyber Security has updated its Redis advisory to say...
Lucas Oliveira
Research
Another Critical NetScaler Flaw Keeps Edge Risk in the Spotlight
Another Critical NetScaler Flaw Keeps Edge Risk in the Spotlight Citrix has warned customers about CVE-2026-107406, a critical memory overflow vulnerability in...
Lucas Oliveira
Research
CVE-2026-87902: WordPress Template RCE Risk
CVE-2026-87902: WordPress Template RCE Risk | 2026 Executive Summary Since September 22, 2026, the critical CVE-2026-87902 vulnerability in WordPress has become...
Lucas Oliveira
Research
WordPress Site Owners Face Mass Exploitation of Super Forms and Elementor Pro Upload Flaws
WordPress Site Owners Face Mass Exploitation of Super Forms and Elementor Pro Upload Flaws Two critical WordPress plugin flaws are now being exploited at scale,...
Lucas Oliveira
Research
CISA's New KEV Additions Put Edge and AI Control Planes on a Short Patch Clock
CISA's New KEV Additions Put Edge and AI Control Planes on a Short Patch Clock CISA's latest Known Exploited Vulnerabilities update is not just another list of...
Lucas Oliveira
Research
cPanel CVE-2026-65643 turns domain parking into a root-control risk
cPanel CVE-2026-65643 turns domain parking into a root-control risk cPanel has disclosed CVE-2026-65643, a critical [vulnerability](https://invaders.ie/resource...
Lucas Oliveira
Research
Next.js Critical RCE Fixes Put Self-Hosted Apps on a Short Patch Clock
Next.js Critical RCE Fixes Put Self-Hosted Apps on a Short Patch Clock The August 2026 Next.js security release is not a routine framework bump. It fixes two cr...
Lucas Oliveira
Research
Gitea CVE-2026-60004: Patch Self-Hosted Git Before RCE Becomes an Incident
Gitea CVE-2026-60004: Patch Self-Hosted Git Before RCE Becomes an Incident Self-hosted source control is rarely treated like an internet-facing edge appliance,...
Lucas Oliveira
Research
Microsoft Entra ID CVSS 10 RCE is a trust-plane warning
Microsoft Entra ID CVSS 10 RCE is a trust-plane warning Security teams should treat CVE-2026-69836 as a serious [vulnerability](https://invaders.ie/resources/gl...
Lucas Oliveira
Research
CISA Warns of Active Exploitation in Zimbra Collaboration Suite
CISA Warns of Active Exploitation in Zimbra Collaboration Suite CISA has added CVE-2026-73570, an operating-system command injection flaw in Zimbra Collaboratio...
Lucas Oliveira
Research