SMBFS

macOS SMB Kernel Flaw CVE-2026-84543: Details and PoC Exploit Released macOS SMB kernel vulnerability CVE-2026-84543 in SMBFS, with technical details and proof-of-concept exploit released by researcher Peter Malone

macOS SMB Kernel Flaw CVE-2026-84543: Details and PoC Exploit Released

Do Son September 29, 2026

TL;DR Researcher Peter Malone has published full details and proof-of-concept code for CVE-2026-84543, a macOS SMB kernel...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-86950CVSS 8.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
CVE-2026-88772
Memory overflow vulnerability leading to remote code execution or denial of service.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-88771
Remote code execution due to improper input validation that can allow an unauthenticated attacker to execute arbitrary commands.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-65660CVSS 8.8
Improper control of generation of code (\'code injection\') in Microsoft Office SharePoint allows an authorized attacker to execute...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 25, 2026
CVE-2026-5430CVSS 10.0
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-71362CVSS 9.1
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-48842CVSS 8.1
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
Admin intel📅 Updated: Sep 23, 2026
CVE-2026-87902
Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 23, 2026

CVE-2026-69431CVSS 9.8
Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to execute code over a network.
📅 Updated: Sep 29, 2026
CVE-2026-7192CVSS 9.3
A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause...
📅 Updated: Sep 29, 2026
CVE-2026-22094CVSS 9.3
The firmware for the EVbee DC-80 has a weak hardcoded root password, which allows attackers to login as...
📅 Updated: Sep 29, 2026
CVE-2026-102268CVSS 9.1
PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, is_pem_format in jwt/utils.py is affected...
📅 Updated: Sep 29, 2026
CVE-2026-100818CVSS 9.6
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4,...
📅 Updated: Sep 29, 2026
CVE-2025-15039CVSS 9.4
The Conditional Authentication (Adaptive Authentication) script does not correctly enforce the completion of all required authentication steps when...
📅 Updated: Sep 29, 2026
CVE-2026-6928CVSS 9.8
IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been freed. This allows an attacker...
📅 Updated: Sep 29, 2026
CVE-2026-92035CVSS 9.6
Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 156,...
📅 Updated: Sep 29, 2026