Vulnerability Report Archives • Page 33 of 119 • Daily CyberSecurity

Public PoC Discloses CVE-2026-31694, a Linux Kernel FUSE Local Privilege Escalation

Linux kernel FUSE local privilege escalation via CVE-2026-31694 page cache overflow

Public PoC Discloses CVE-2026-31694, a Linux Kernel FUSE Local Privilege Escalation

Do Son July 10, 2026

TL;DR Researchers have published full details and working exploit code for CVE-2026-31694. This Linux kernel FUSE bug...

GNU Guix Vulnerabilities Expose guix substitute and guix pull GNU Guix vulnerabilities in guix substitute and guix pull enabling remote privilege escalation

GNU Guix vulnerabilities in guix substitute and guix pull enabling remote privilege escalation

GNU Guix Vulnerabilities Expose guix substitute and guix pull

Do Son July 10, 2026

TL;DR The GNU Guix project disclosed four GNU Guix vulnerabilities in early July 2026. Three affect the...

Django SQL Injection Flaw CVE-2026-1207 Is Being Exploited in the Wild Django SQL injection CVE-2026-1207 exploited in the wild via PostGIS RasterField raster lookups

Django SQL injection CVE-2026-1207 exploited in the wild via PostGIS RasterField raster lookups

Django SQL Injection Flaw CVE-2026-1207 Is Being Exploited in the Wild

Do Son July 10, 2026

TL;DR CVE-2026-1207 is a high-severity Django SQL injection flaw, scored 8.3. It affects RasterField lookups when Django...

Roundcube 1.7.2 Patches Zero-Click Stored XSS CVE-2026-54433 Roundcube zero-click XSS warning showing CVE-2026-54433 stored XSS in plain-text email rendering

Roundcube zero-click XSS warning showing CVE-2026-54433 stored XSS in plain-text email rendering

Roundcube 1.7.2 Patches Zero-Click Stored XSS CVE-2026-54433

Do Son July 9, 2026

TL;DR Roundcube shipped versions 1.7.2 and 1.6.17 to fix six security bugs. The headline flaw is a...

Apache Lucene.NET vulnerability advisory showing a Lucene.Net.Replicator path traversal risk

Apache Lucene.NET Vulnerability Trio Fixed in Beta 18

Do Son July 9, 2026

The Apache project patched three Apache Lucene.NET vulnerability issues in the 4.8.0-beta00018 release. Two of the flaws...

Feast Feature Server Flaw Lets Unauthenticated Attackers Write Files Feast Feature Server arbitrary file write vulnerability advisory graphic

Feast Feature Server arbitrary file write vulnerability advisory graphic

Feast Feature Server Flaw Lets Unauthenticated Attackers Write Files

Do Son July 9, 2026

A critical flaw in the Feast Feature Server carries a CVSS score of 9.1. The bug, tracked...

OPNsense Root RCE Flaw CVE-2026-57155 (CVSS 9.9): Details and PoC Publicly Disclosed OPNsense root RCE advisory graphic showing an arbitrary file write chain to root on the firewall

OPNsense root RCE advisory graphic showing an arbitrary file write chain to root on the firewall

OPNsense Root RCE Flaw CVE-2026-57155 (CVSS 9.9): Details and PoC Publicly Disclosed

Do Son July 9, 2026

TL;DR A researcher from Hacking Cult published full technical details and proof-of-concept code for three OPNsense firewall...

Linux kernel privilege escalation CVE-2026-46215 DRM GEM use-after-free root exploit diagram

Linux Kernel Privilege Escalation Flaw CVE-2026-46215: PoC and Full Write-Up Public

Do Son July 9, 2026

TL;DR A researcher has published a full technical write-up and proof-of-concept exploit for a Linux kernel privilege...

MOVEit Transfer Fixes Stored XSS and Two Other Vulnerabilities MOVEit Transfer stored XSS vulnerability CVE-2026-11903 patched in version 2026.0.1

MOVEit Transfer stored XSS vulnerability CVE-2026-11903 patched in version 2026.0.1

MOVEit Transfer Fixes Stored XSS and Two Other Vulnerabilities

Do Son July 9, 2026

TL;DR Progress released a MOVEit Transfer security bulletin on July 8, 2026. It fixes three flaws, and...

Microsoft Patches RoguePlanet Defender Zero-Day That Grants SYSTEM Access Microsoft Defender zero-day RoguePlanet CVE-2026-50656 patched via Malware Protection Engine update

Microsoft Defender zero-day RoguePlanet CVE-2026-50656 patched via Malware Protection Engine update

Microsoft Patches RoguePlanet Defender Zero-Day That Grants SYSTEM Access

Do Son July 9, 2026

TL;DR Microsoft patched a Microsoft Defender zero-day named RoguePlanet, tracked as CVE-2026-50656. The flaw is a race...

HPLIP Vulnerability CVE-2026-14544 (CVSS 9.8) Allows Arbitrary Code Execution HPLIP vulnerability advisory graphic showing CVE-2026-14544 arbitrary code execution via crafted print data

HPLIP vulnerability advisory graphic showing CVE-2026-14544 arbitrary code execution via crafted print data

HPLIP Vulnerability CVE-2026-14544 (CVSS 9.8) Allows Arbitrary Code Execution

Do Son July 9, 2026

TL;DR Red Hat disclosed a critical HPLIP vulnerability, tracked as CVE-2026-14544, with a CVSS score of 9.8....

GitLab Patch Release Fixes Eight Flaws, Including a High-Severity XSS Bug (CVE-2026-6896) GitLab patch release fixing cross-site scripting vulnerability CVE-2026-6896 in version 19.1.2

GitLab patch release fixing cross-site scripting vulnerability CVE-2026-6896 in version 19.1.2

GitLab Patch Release Fixes Eight Flaws, Including a High-Severity XSS Bug (CVE-2026-6896)

Do Son July 9, 2026

TL;DR This GitLab patch release, shipped on July 8, 2026, covers versions 19.1.2, 19.0.4, and 18.11.7. The...

CVE-2026-0288: PAN-OS Buffer Overflow Can Execute Arbitrary Code PAN-OS buffer overflow CVE-2026-0288 enabling arbitrary code execution on Palo Alto firewall

PAN-OS buffer overflow CVE-2026-0288 enabling arbitrary code execution on Palo Alto firewall

CVE-2026-0288: PAN-OS Buffer Overflow Can Execute Arbitrary Code

Do Son July 9, 2026

TL;DR Palo Alto Networks disclosed a PAN-OS buffer overflow tracked as CVE-2026-0288. It sits in the User-ID...

Chrome Security Update Patches 27 Flaws, Including Two Critical Use-After-Free Bugs Chrome security update patching critical use-after-free vulnerabilities in version 150.0.7871.114

Chrome security update patching critical use-after-free vulnerabilities in version 150.0.7871.114

Chrome Security Update Patches 27 Flaws, Including Two Critical Use-After-Free Bugs

Do Son July 9, 2026

TL;DR Google shipped a Chrome security update that fixes 27 flaws across the desktop browser. Two are...

Foxit PDF Reader Flaws Enable Arbitrary Code Execution Foxit PDF Reader arbitrary code execution vulnerability patched in version 2026.1.2

Foxit PDF Reader Flaws Enable Arbitrary Code Execution

Do Son July 8, 2026

TL;DR Foxit shipped Foxit PDF Reader 2026.1.2 and PDF Editor 2026.1.2 for Windows. The release fixes 28...

OpenSSH 10.4 Ships Eight Security Fixes for SSH Clients and Servers OpenSSH 10.4 security fixes including a client use-after-free and SFTP SCP path flaws

OpenSSH 10.4 security fixes including a client use-after-free and SFTP SCP path flaws

OpenSSH 10.4 Ships Eight Security Fixes for SSH Clients and Servers

Do Son July 8, 2026

TL;DR OpenSSH 10.4 landed on July 6 with eight security fixes. The most serious is a client-side...

Ghost Cache Poisoning Flaw Lets Attackers Hijack Staff Accounts Ghost cache poisoning XSS via x-ghost-preview header advisory graphic

Ghost Cache Poisoning Flaw Lets Attackers Hijack Staff Accounts

Do Son July 8, 2026

Ghost released version 6.37.0 to fix a critical cache poisoning bug. The Ghost cache poisoning flaw, tracked...

Network UPS Tools RCE Flaw Affects upsmon, With No Patch Yet Network UPS Tools RCE advisory showing upsmon command injection via ups.alarm

Network UPS Tools RCE Flaw Affects upsmon, With No Patch Yet

Do Son July 8, 2026

A remote code execution flaw affects Network UPS Tools, the widely used NUT monitoring suite. The bug,...

pretix Patches Two Critical Session Takeover and SSRF Flaws pretix vulnerabilities advisory showing the session takeover and SSRF fix

pretix Patches Two Critical Session Takeover and SSRF Flaws

Do Son July 8, 2026

The pretix team shipped version 2026.5.3 to fix two critical flaws. The update also covers 2026.4.5 and...

Apache APISIX JWT Authentication Bypass, CVE-2026-39999 APISIX authentication bypass via JWT algorithm confusion, CVE-2026-39999

Apache APISIX JWT Authentication Bypass, CVE-2026-39999

Do Son July 8, 2026

TL;DR Apache APISIX 3.16.0 shipped a JWT algorithm confusion bug in its jwt-auth plugin. The flaw, tracked...

Android remote root exploit chain PoC by Nebula

Android Remote Root Exploit Chain Unveiled by Nebula

Do Son July 8, 2026

Cybersecurity firm Nebula recently unveiled a demonstration video exposing a critical kernel-level vulnerability and remote privilege escalation...

WordPress Sites at Risk: Outdated PHP, Plugins, and Default Configs WordPress outdated PHP end-of-life security risk chart showing plugin and PHP version gaps

WordPress outdated PHP end-of-life security risk chart showing plugin and PHP version gaps

WordPress Sites at Risk: Outdated PHP, Plugins, and Default Configs

Do Son July 8, 2026

Hundreds of WordPress sites remain easy targets year after year. The cause is rarely a rare zero-day...