Vulnerability Report Archives • Page 24 of 119 • Daily CyberSecurity

MarkLogic Server Security Bulletin Patches 10 Vulnerabilities, With CVSS Scores Up to 9.9 MarkLogic Server vulnerabilities including CVE-2026-7329 and CVE-2026-9192 rated up to CVSS 9.9

MarkLogic Server vulnerabilities including CVE-2026-7329 and CVE-2026-9192 rated up to CVSS 9.9

MarkLogic Server Security Bulletin Patches 10 Vulnerabilities, With CVSS Scores Up to 9.9

Do Son August 11, 2026

TL;DR Progress released an August 2026 bulletin for MarkLogic Server. It fixes ten MarkLogic Server vulnerabilities, several...

CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw Windows Kerberos ResetNightmare CVE-2026-27912 elevation of privilege flaw with public proof-of-concept exploit code

Windows Kerberos ResetNightmare CVE-2026-27912 elevation of privilege flaw with public proof-of-concept exploit code

CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw

Do Son August 11, 2026

TL;DR Researchers published full details and a proof-of-concept tool for CVE-2026-27912, called ResetNightmare. The flaw sits in...

CVE-2026-58231 (CVSS 10.0) and Code Injection RCE Flaws Top SAP August 2026 Patch Day SAP security patch day critical security vulnerabilities SAP SQL Injection April 2026 Patch Day SAP Security, Critical Vulnerabilities Security Patch Day CVE-2025-42944

SAP security patch day critical security vulnerabilities SAP SQL Injection April 2026 Patch Day SAP Security, Critical Vulnerabilities Security Patch Day CVE-2025-42944

CVE-2026-58231 (CVSS 10.0) and Code Injection RCE Flaws Top SAP August 2026 Patch Day

Do Son August 11, 2026

TL;DR SAP released its August 2026 Patch Day on August 11, with 28 new security notes. The...

Windows PnP Attack Chain Turns a USB Plug Into SYSTEM: Details and PoC Now Public Windows PnP attack chain diagram showing a USB plug and play exploit escalating to NT AUTHORITY SYSTEM privilege escalation

Windows PnP attack chain diagram showing a USB plug and play exploit escalating to NT AUTHORITY SYSTEM privilege escalation

Windows PnP Attack Chain Turns a USB Plug Into SYSTEM: Details and PoC Now Public

Do Son August 11, 2026

TL;DR Two Accenture researchers showed that plugging a USB device into Windows can hand an attacker SYSTEM....

Three Critical Wazuh Manager Flaws Disclosed With Public PoC Exploit Code Wazuh manager vulnerability advisory showing cluster protocol file write and root RCE with public PoC exploit code

Wazuh manager vulnerability advisory showing cluster protocol file write and root RCE with public PoC exploit code

Three Critical Wazuh Manager Flaws Disclosed With Public PoC Exploit Code

Do Son August 11, 2026

TL;DR Three critical Wazuh manager vulnerabilities now have public advisories and proof-of-concept exploit code. Each scores CVSS...

CVE-2026-44945: Rancher Cross-Cluster Impersonation Flaw Enables Full Privilege Escalation, Rated CVSS 9.1 Rancher privilege escalation flaw CVE-2026-44945 via cross-cluster impersonation, rated CVSS 9.1

Rancher privilege escalation flaw CVE-2026-44945 via cross-cluster impersonation, rated CVSS 9.1

CVE-2026-44945: Rancher Cross-Cluster Impersonation Flaw Enables Full Privilege Escalation, Rated CVSS 9.1

Do Son August 11, 2026

TL;DR A critical flaw lets a low-privileged Rancher user seize full control of the platform. Tracked as...

Red Hat ACM privilege escalation flaw CVE-2026-10090 granting cluster-admin, rated CVSS 9.9

CVE-2026-10090: Red Hat ACM Privilege Escalation Flaw Grants Cluster-Admin, Rated CVSS 9.9

Do Son August 10, 2026

TL;DR Red Hat disclosed a critical privilege escalation flaw in Advanced Cluster Management (ACM) for Kubernetes. Tracked...

Neo4j GraphQL authentication bypass CVE-2026-5423 diagram showing forged JWT claims over a WebSocket subscription

CVE-2026-5423: Authentication Bypass Hits Neo4j GraphQL Subscriptions

Do Son August 10, 2026

TL;DR A high-severity authentication bypass affects the Neo4j GraphQL Library before versions 7.5.6 and 5.12.14. Tracked as...

CVE-2026-43074: Linux Kernel eventpoll Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed Linux kernel eventpoll flaw CVE-2026-43074 use-after-free giving a root shell, with public PoC exploit code

Linux kernel eventpoll flaw CVE-2026-43074 use-after-free giving a root shell, with public PoC exploit code

CVE-2026-43074: Linux Kernel eventpoll Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed

Do Son August 10, 2026

TL;DR A Linux kernel eventpoll flaw lets a local user climb to root. Tracked as CVE-2026-43074, it...

CVE-2026-64564: SCTP Flaw Enables Container Escape Linux SCTP kernel use-after-free CVE-2026-64564 privilege escalation and container-to-host escape diagram

Linux SCTP kernel use-after-free CVE-2026-64564 privilege escalation and container-to-host escape diagram

CVE-2026-64564: SCTP Flaw Enables Container Escape

Do Son August 10, 2026

TL;DR A Linux kernel use-after-free in SCTP, tracked as CVE-2026-64564, allows local attackers to gain root. Researchers...

PoC Releases for CVE-2026-63077: TeamCity RCE Exploited in the Wild JetBrains TeamCity CVE-2026-63077 unauthenticated remote code execution exploited in the wild with public PoC exploit code

JetBrains TeamCity CVE-2026-63077 unauthenticated remote code execution exploited in the wild with public PoC exploit code

PoC Releases for CVE-2026-63077: TeamCity RCE Exploited in the Wild

Do Son August 10, 2026

TL;DR CVE-2026-63077 is a critical unauthenticated remote code execution flaw in JetBrains TeamCity. An attacker who reaches...

Metabase SQL Injection Zero-Day (CVSS 10) Exploited

Metabase SQL injection zero-day vulnerability CVSS 10 exploited in the wild unauthenticated admin access advisory

Metabase SQL Injection Zero-Day (CVSS 10) Exploited

Do Son August 8, 2026

TL;DR Metabase disclosed a critical SQL injection zero-day rated CVSS 10. An unauthenticated remote attacker can gain...

Multiple ClamAV Flaws Let Remote Attackers Cause DoS ClamAV vulnerability multiple denial of service flaws in Cisco Secure Endpoint remote attacker crafted file scanning

ClamAV vulnerability multiple denial of service flaws in Cisco Secure Endpoint remote attacker crafted file scanning

Multiple ClamAV Flaws Let Remote Attackers Cause DoS

Do Son August 8, 2026

TL;DR Cisco disclosed seven ClamAV vulnerabilities on August 7, 2026. Each lets an unauthenticated remote attacker crash...

CryptoJS randomness vulnerability Ill Bloom crypto wallet seed phrase attack draining funds across multiple chains

CryptoJS Randomness Vulnerability Drains Crypto Wallets

Do Son August 7, 2026

TL;DR A weak random number generator inside CryptoJS produced predictable wallet seed phrases for over a decade....

CVE-2026-5430: WSO2 Account Takeover Flaws Rated Up to CVSS 10 WSO2 account takeover flaws CVE-2026-5430 and CVE-2026-1728 rated up to CVSS 10

CVE-2026-5430: WSO2 Account Takeover Flaws Rated Up to CVSS 10

Do Son August 7, 2026

TL;DR WSO2 disclosed four critical vulnerabilities across its API and identity products. Several are WSO2 account takeover...

Zbtlink router backdoor ENDLESSDOORS CVE-2026-66747 enabling unauthenticated remote code execution as root

CVE-2026-66747: Zbtlink Router Backdoor ENDLESSDOORS Enables Unauthenticated Remote Code Execution as Root

Do Son August 7, 2026

TL;DR VulnCheck found a Zbtlink router backdoor in every published firmware build across the product line. Named...

CVE-2026-64561: Zapscape KVM Escape Runs Commands With Kernel Root Privilege, PoC Exploit Code Publicly Disclosed KVM escape vulnerability Zapscape CVE-2026-64561 running commands with kernel root privilege, with public PoC exploit code

KVM escape vulnerability Zapscape CVE-2026-64561 running commands with kernel root privilege, with public PoC exploit code

CVE-2026-64561: Zapscape KVM Escape Runs Commands With Kernel Root Privilege, PoC Exploit Code Publicly Disclosed

Do Son August 7, 2026

TL;DR Security researcher Hyunwoo Kim (@v4bel) disclosed a KVM escape vulnerability named Zapscape. Tracked as CVE-2026-64561, it...

CVE-2026-64638: WordPress Pre-Auth XSS Flaw Can Escalate to Remote Code Execution WordPress security update 7.0.3 fixing CVE-2026-64638 pre-auth XSS that can lead to remote code execution

WordPress security update 7.0.3 fixing CVE-2026-64638 pre-auth XSS that can lead to remote code execution

CVE-2026-64638: WordPress Pre-Auth XSS Flaw Can Escalate to Remote Code Execution

Do Son August 7, 2026

TL;DR WordPress 7.0.3 is out as a security release. This WordPress security update fixes about a dozen...

Chrome Security Update Patches 41 Vulnerabilities, Including 6 Critical Flaws Chrome security update patching 41 vulnerabilities including critical CVE-2026-19137 and CVE-2026-19170

Chrome security update patching 41 vulnerabilities including critical CVE-2026-19137 and CVE-2026-19170

Chrome Security Update Patches 41 Vulnerabilities, Including 6 Critical Flaws

Do Son August 7, 2026

TL;DR Google shipped a Chrome security update for the stable desktop channel. It fixes 41 vulnerabilities in...

Cisco IMC Argument Injection Flaw CVE-2026-20200 Enables Root RCE, PoC Exploit Code Publicly Available Cisco IMC vulnerabilities CVE-2026-20200 and CVE-2026-20288 enabling remote code execution as root

Cisco IMC vulnerabilities CVE-2026-20200 and CVE-2026-20288 enabling remote code execution as root

Cisco IMC Argument Injection Flaw CVE-2026-20200 Enables Root RCE, PoC Exploit Code Publicly Available

Do Son August 7, 2026

TL;DR Cisco disclosed two Cisco IMC vulnerabilities in the web-based management interface. The more serious one, CVE-2026-20200,...

Phoenix Contact CHARX vulnerabilities affecting EV charging controller firmware

Phoenix Contact CHARX Vulnerabilities Expose EV Charging Controllers

Do Son August 6, 2026

TL;DR: Phoenix Contact CHARX vulnerabilities now number 20 across the SEC-3xxx EV charging controllers. Several rate critical,...

CVE-2026-39868: Public PoC Discloses a macOS and iOS Kernel Memory Corruption Flaw macOS kernel vulnerability CVE-2026-39868 in DTrace DOF parsing with public proof-of-concept exploit code

macOS kernel vulnerability CVE-2026-39868 in DTrace DOF parsing with public proof-of-concept exploit code

CVE-2026-39868: Public PoC Discloses a macOS and iOS Kernel Memory Corruption Flaw

Do Son August 6, 2026

TL;DR Apple has patched a serious macOS kernel vulnerability tracked as CVE-2026-39868. An unprivileged app can corrupt...