Exploits
CVE-2026-76418: Cisco ASA and FTD SSL VPN zero-day explained (affected versions, fixes, mitigation)
CVE-2026-76418 lets an unauthenticated attacker reboot Cisco ASA and FTD firewalls. See affected versions, fixed releases, mitigation and an audit script
phpMyAdmin 5.2.3 WebAuthn 2FA Bypass: How a Missing Signature Check Broke Two-Factor Authentication
A technical breakdown of the phpMyAdmin 5.2.3 WebAuthn bypass. See how the CustomServer fallback skips signature verification, who is affected, and how to check and fix your install
CVE-2026-115560 Explained: The PHP Session Bug That Survives the PHP2Shell Patches
CVE-2026-115560 is a potential PHP RCE tied to session upload progress. Learn the affected configuration, security risks, and official mitigation
Node2Shell CVE-2026-111497: Brotli Out-of-Bounds Write
Node2Shell (CVE-2026-111497) is a critical Node.js Brotli decoder vulnerability that risks memory corruption and remote code execution. Learn affected versions and fixes
QPACK Header Accordion Attack: How One HTTP/3 Connection Can Exhaust Server Memory
QPACK Header Accordion attacks exploit HTTP/3 header compression to trigger memory exhaustion. Learn the affected libraries, CVEs, and mitigation steps
WPSplinter: a 16-year-old flaw in Broadcom’s Wi-Fi SDK lets anyone in range run code on your router
WPSplinter exposes a 16-year-old Broadcom Wi-Fi flaw that lets attackers execute code on vulnerable routers without a Wi-Fi password
The 37-Year Old Bug: How a Legacy OpenBSD Code Enabled a Root Exploit on OpenBSD 7.9 Despite KARL, SMAP and SMEP
OpenBSD 7.9 Big Fish exploit explained: how a 37-year-old kernel bug bypasses KARL, SMAP and SMEP to achieve local root, plus patches
Critical Nextcloud Collabora Flaw Enables Unauthenticated Command Execution Through Built-in CODE Server
CVE-2026-110447 is a critical Nextcloud Collabora RCE flaw exploited in the wild. Learn affected versions, attack details, web shell indicators, and fixes
GitLab CVE-2026-97229: The CVSS 10.0 RCE Vulnerability Exposing 26,000+ CI/CD Pipelines to Attack
GitLab CVE-2026-97229 is a critical CVSS 10.0 RCE flaw in CI/CD regex compilation. Learn affected versions, exploit details, patches and detection
PwnEscape (CVE-2026-99999): The Critical Linux Kernel Flaw That Breaks VM Isolation
PwnEscape (CVE-2026-99999) is a critical Linux kernel flaw that can expose host memory and enable VM escape. Learn the impact, affected systems and patch
