WHCP

Microsoft to Require Windows Driver SBOM and VEX Statements from March 2027 Windows driver SBOM and VEX requirement for WHCP certification 2027

Windows driver SBOM and VEX requirement for WHCP certification 2027

Microsoft to Require Windows Driver SBOM and VEX Statements from March 2027

Do Son September 3, 2026

Microsoft recently published an official blog post announcing revisions to the certification requirements of its Windows Hardware...

The Kernel Lockdown: Microsoft to Sever Trust for Legacy Drivers in Windows 11 and Server 2025

Windows Secure Lock Screen Clock Lag Windows 11 KB5079391 error Windows 11 Kernel Driver Trust Microslop Windows 11 Windows 11 modem driver removal 2026, CVE-2025-24052 Agere driver exploit Windows 11 Password Icon Bug Lock Screen Glitch Windows 11 26H1 ARM Snapdragon X2 Windows 11 Reboot-Free, Insider Build Windows Update Error, 0x80070103 File Explorer, NTLM leak Windows bug, WinRE Windows Update, UAC prompts Secure Boot Certificate, Windows Security Windows 11 22H2 Installation security updates Windows UEFI CA 2023 Windows 11 25H2

The Kernel Lockdown: Microsoft to Sever Trust for Legacy Drivers in Windows 11 and Server 2025

Do Son March 27, 2026

Microsoft is orchestrating a novel paradigm to elevate the overarching stability and security of Windows 11. However,...

Microsoft Enforces New USB-C Standard for All Windows PCs USB-C Standard, Windows PCs

USB-C Standard, Windows PCs

Microsoft Enforces New USB-C Standard for All Windows PCs

Do Son June 3, 2025

Although the USB-IF alliance claims that the current USB4 2.0 specification is capable of delivering the same...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-88772
Memory overflow vulnerability leading to remote code execution or denial of service.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-88771
Remote code execution due to improper input validation that can allow an unauthenticated attacker to execute arbitrary commands.
Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
CVE-2026-65660CVSS 8.8
Improper control of generation of code (\'code injection\') in Microsoft Office SharePoint allows an authorized attacker to execute...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 25, 2026
CVE-2026-5430CVSS 10.0
The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-71362CVSS 9.1
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
CISA KEV📅 Added to KEV: Sep 24, 2026
CVE-2026-48842CVSS 8.1
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
Admin intel📅 Updated: Sep 23, 2026
CVE-2026-87902
Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 23, 2026
CVE-2026-94127CVSS 9.8
When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026

CVE-2026-101007CVSS 9.3
A vulnerability has been found in aaPanel BaoTa up to 11.8.0. This issue affects the function InputSql of...
📅 Updated: Sep 28, 2026
CVE-2026-49076CVSS 9.3
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows...
📅 Updated: Sep 28, 2026
CVE-2026-101002CVSS 9.4
A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function system of the file...
📅 Updated: Sep 28, 2026
CVE-2026-101001CVSS 10.0
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/network_tools of...
📅 Updated: Sep 28, 2026
CVE-2026-101000CVSS 10.0
A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.apply of the file /usr/share/rpcd/acl.d/unauthenticated.json of...
📅 Updated: Sep 28, 2026
CVE-2026-88771CVSS 9.5
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37,...
CISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 28, 2026
CVE-2026-88772CVSS 9.5
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before...
CISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 28, 2026
CVE-2025-49796CVSS 9.1
A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a...
📅 Updated: Sep 28, 2026