Do Son A 27-year-old OpenBSD authentication bypass (CVE-2026-55706) is now public, with full details and a working PoC exploit for the PPP PAP flaw.
Heap Over-read
OVN reveals two critical heap over-read flaws in ICMP and DHCPv6 processing. Learn how crafted packets can siphon sensitive memory and find the patch versions.
MongoBleed (CVE-2025-14847) allows unauthenticated MongoDB memory leaks. With Joe Desimone's PoC released, upgrade to v8.0.17 or v7.0.28 now!
OpenVPN released an urgent patch (v2.7_rc2) fixing two critical flaws: a Heap Over-read (CVE-2025-12106, CVSS 9.1) and an HMAC bypass (CVE-2025-13086) that allows unauthenticated DoS. Windows 7 support is broken.