ResetNightmare

CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw Windows Kerberos ResetNightmare CVE-2026-27912 elevation of privilege flaw with public proof-of-concept exploit code

CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw

Do Son August 11, 2026

TL;DR Researchers published full details and a proof-of-concept tool for CVE-2026-27912, called ResetNightmare. The flaw sits in...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-58138CVSS 9.8
Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute...
Admin intel📅 Updated: Sep 20, 2026
CVE-2026-86124CVSS 9.8
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and...
Admin intel📅 Updated: Sep 19, 2026
CVE-2025-39682CVSS 9.8
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the...
CISA KEV📅 Added to KEV: Sep 18, 2026
CVE-2025-39964CVSS 7.8
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg...
CISA KEV📅 Added to KEV: Sep 18, 2026
CVE-2026-53266CVSS 8.8
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The...
CISA KEV📅 Added to KEV: Sep 18, 2026
CVE-2026-76460CVSS 10.0
A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
CVE-2026-89026CVSS 9.8
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT...
Admin intel📅 Updated: Sep 16, 2026
CVE-2026-58704
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This...
Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026

CVE-2025-66455CVSS 9.8
## Summary LMDeploy's PyTorch DistServe/PD-disaggregation control plane used `recv_pyobj()` to deserialize messages received through a ZeroMQ PULL socket....
📅 Updated: Sep 21, 2026
CVE-2026-94101CVSS 9.9
A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected element is the function vlan_load_form_uci of...
📅 Updated: Sep 21, 2026
CVE-2026-94100CVSS 9.9
A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_vlan of the file /usr/bin/routerd...
📅 Updated: Sep 21, 2026
CVE-2026-94099CVSS 9.9
A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. This issue affects some unknown processing of the...
📅 Updated: Sep 21, 2026
CVE-2026-94098CVSS 9.1
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This vulnerability affects unknown code of the file /www/cgi-bin/upgrade of...
📅 Updated: Sep 21, 2026
CVE-2026-94097CVSS 10.0
A vulnerability was determined in Netcore NBR200V2 1.3.241127.071246. This affects an unknown part of the file /www/cgi-bin/network_tools of...
📅 Updated: Sep 20, 2026
CVE-2026-94096CVSS 9.9
A vulnerability was found in Netcore NBR200V2 1.3.241127.071246. Affected by this issue is some unknown functionality of the...
📅 Updated: Sep 20, 2026
CVE-2026-94095CVSS 9.9
A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of...
📅 Updated: Sep 20, 2026