RoguePlanet

CVE-2026-50656 PoC Published: Defender Privilege Escalation Bypass ShieldBreak PoC exploit code for CVE-2026-50656 Windows Defender privilege escalation displayed on screen

ShieldBreak PoC exploit code for CVE-2026-50656 Windows Defender privilege escalation displayed on screen

CVE-2026-50656 PoC Published: Defender Privilege Escalation Bypass

Do Son August 12, 2026

TL;DR A researcher has published a public PoC called ShieldBreak. It bypasses Microsoft’s July patch for the...

Microsoft Patches RoguePlanet Defender Zero-Day That Grants SYSTEM Access Microsoft Defender zero-day RoguePlanet CVE-2026-50656 patched via Malware Protection Engine update

Microsoft Defender zero-day RoguePlanet CVE-2026-50656 patched via Malware Protection Engine update

Microsoft Patches RoguePlanet Defender Zero-Day That Grants SYSTEM Access

Do Son July 9, 2026

TL;DR Microsoft patched a Microsoft Defender zero-day named RoguePlanet, tracked as CVE-2026-50656. The flaw is a race...

New Microsoft Defender Zero Day Exploit Released Publicly Online Defender zero day exploit race condition vulnerability

Defender zero day exploit race condition vulnerability

New Microsoft Defender Zero Day Exploit Released Publicly Online

Do Son June 10, 2026

Researcher Discloses RoguePlanet Flaw Amidst Ongoing Bug Bounty Dispute A prominent security researcher, Nightmare Eclipse, recently released...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-83549CVSS 7.8
Post-authentication Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability has been identified...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-83548CVSS 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-0768CVSS 9.8
Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-35029
### Impact The `/config/update endpoint` does not enforce admin role authorization. A user who is already authenticated into...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-9586CVSS 9.3
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-82329CVSS 9.8
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-81578CVSS 8.8
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under...
Admin intelCISA KEV📅 Added to KEV: Aug 31, 2026📅 Updated: Aug 28, 2026
CVE-2026-82078CVSS 9.4
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG....
Admin intelCISA KEV📅 Added to KEV: Aug 31, 2026📅 Updated: Aug 28, 2026