ShieldBreak

ShieldCrash: Windows Defender 0day With Public PoC Exploit Windows Defender 0day CVE-2026-69414 ShieldCrash proof-of-concept exploit reading files as SYSTEM

Do Son September 9, 2026

TL;DR A researcher published ShieldCrash, a Windows Defender 0day that bypasses Microsoft’s patch for the ShieldBreak vulnerability...

CVE-2026-50656 PoC Published: Defender Privilege Escalation Bypass ShieldBreak PoC exploit code for CVE-2026-50656 Windows Defender privilege escalation displayed on screen

Do Son August 12, 2026

TL;DR A researcher has published a public PoC called ShieldBreak. It bypasses Microsoft’s July patch for the...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-94127CVSS 9.8
When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
Admin intel📅 Updated: Sep 22, 2026
CVE-2026-85102CVSS 9.8
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote...
Admin intel📅 Updated: Sep 22, 2026
CVE-2026-93616CVSS 9.8
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on...
Admin intel📅 Updated: Sep 22, 2026
CVE-2026-93952CVSS 10.0
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
Admin intel📅 Updated: Sep 22, 2026
CVE-2026-32996CVSS 7.3
A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.
Admin intel📅 Updated: Sep 22, 2026
CVE-2026-7273CVSS 8.8
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a...
CISA KEV📅 Added to KEV: Sep 21, 2026
CVE-2026-58138CVSS 9.8
Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute...
Admin intel📅 Updated: Sep 20, 2026
CVE-2026-86124CVSS 9.8
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and...
Admin intel📅 Updated: Sep 19, 2026

CVE-2026-94127CVSS 9.8
When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
Admin intel📅 Updated: Sep 22, 2026
CVE-2026-89040CVSS 9.8
Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a crafted POST request...
📅 Updated: Sep 22, 2026
CVE-2026-94083CVSS 9.4
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for...
📅 Updated: Sep 22, 2026
CVE-2026-85734CVSS 9.1
LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the POST /login endpoint in lightrag/api/lightrag_server.py does not...
📅 Updated: Sep 22, 2026
CVE-2026-92702CVSS 9.1
Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up...
📅 Updated: Sep 22, 2026
CVE-2026-92240CVSS 9.1
A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending...
📅 Updated: Sep 22, 2026
CVE-2026-92071CVSS 9.6
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox...
📅 Updated: Sep 22, 2026
CVE-2026-87080CVSS 9.1
Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never...
📅 Updated: Sep 22, 2026