VM Escape

CVE-2026-59346 (CVSS 9.3): VMware Flaw Allows Runnin Code on the Host VMware Workstation vulnerability CVE-2026-59346 VMXNET3 integer overflow execute code on the host advisory diagram

VMware Workstation vulnerability CVE-2026-59346 VMXNET3 integer overflow execute code on the host advisory diagram

CVE-2026-59346 (CVSS 9.3): VMware Flaw Allows Runnin Code on the Host

Do Son September 3, 2026

TL;DR Broadcom patched two VMware Workstation and Fusion flaws on September 3, 2026. The more severe VMware...

“VM Isolation is Not Absolute”: Researchers Unmask Sophisticated ESXi “Maestro” Exploit GUARDIANWALL MailSuite Exploit CVE-2026-32661 FileZen Vulnerability CVE-2026-25108 Ivanti EPMM Vulnerability Dormant Backdoor Fortinet Authentication Bypass CVE-2026-24858 VMware vCenter Server Flaw CVE-2025-21590

GUARDIANWALL MailSuite Exploit CVE-2026-32661 FileZen Vulnerability CVE-2026-25108 Ivanti EPMM Vulnerability Dormant Backdoor Fortinet Authentication Bypass CVE-2026-24858 VMware vCenter Server Flaw CVE-2025-21590

“VM Isolation is Not Absolute”: Researchers Unmask Sophisticated ESXi “Maestro” Exploit

Do Son January 8, 2026

In a new report, the Huntress Tactical Response Team details a sophisticated intrusion discovered in December 2025...

CVE-2025-61927 (CVSS 9.4): Critical RCE Flaw Discovered in Happy DOM, Over 2.7 Million Weekly Downloads Impacted

CVE-2025-61927 (CVSS 9.4): Critical RCE Flaw Discovered in Happy DOM, Over 2.7 Million Weekly Downloads Impacted

Do Son October 13, 2025

A critical-severity vulnerability has been disclosed in Happy DOM, a popular JavaScript package used to emulate web...

VirtualBox VM Escape: Integer Overflow Flaw Allows Full Host Takeover, PoC Published VirtualBox Escape, Integer Overflow

VirtualBox Escape, Integer Overflow

VirtualBox VM Escape: Integer Overflow Flaw Allows Full Host Takeover, PoC Published

Do Son August 6, 2025

Security researcher Juan Jose Lopez Jaimez published the technical details and proof-of-concept exploit code for a vulnerability...

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-94127CVSS 9.8
When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-85102CVSS 9.8
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-93616CVSS 9.8
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-93952CVSS 10.0
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
CVE-2026-32996CVSS 7.3
A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.
Admin intel📅 Updated: Sep 22, 2026
CVE-2026-7273CVSS 8.8
A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a...
CISA KEV📅 Added to KEV: Sep 21, 2026
CVE-2026-58138CVSS 9.8
Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute...
Admin intel📅 Updated: Sep 20, 2026
CVE-2026-86124CVSS 9.8
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces and...
Admin intel📅 Updated: Sep 19, 2026

CVE-2026-84082CVSS 9.8
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper...
📅 Updated: Sep 23, 2026
CVE-2026-84064CVSS 9.9
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to...
📅 Updated: Sep 23, 2026
CVE-2026-82967CVSS 9.8
IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attacker to...
📅 Updated: Sep 23, 2026
CVE-2026-82340CVSS 9.8
IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled reflective method dispatch in the...
📅 Updated: Sep 23, 2026
CVE-2026-82000CVSS 9.6
Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in...
📅 Updated: Sep 23, 2026
CVE-2026-81995CVSS 9.1
Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary...
📅 Updated: Sep 23, 2026
CVE-2026-81657CVSS 9.8
IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system...
📅 Updated: Sep 23, 2026
CVE-2026-80442CVSS 9.9
IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCertificate functionality....
📅 Updated: Sep 23, 2026