Exploits
PoC Released for Critical VMware VMXNET3 Integer Overflow Flaw Enabling Guest-to-Host Code Execution (CVE-2026-59346)
CVE-2026-59346 affects VMware VMXNET3 and enables guest-to-host memory corruption. A public PoC crashes vmware-vmx. Patch Workstation and Fusion now
Critical Atlassian Flaw (CVE-2026-21589) Exposes Files Across Jira, Confluence, Bitbucket, and 5 More Products: Unauthenticated Attackers Affected
CVE-2026-21589 is a critical Atlassian path traversal flaw rated CVSS 9.3. Learn about affected Jira, Confluence, Bitbucket products, fixes and mitigations
Microsoft Exchange Server Flaw (CVE-2026-96940) Lets Authenticated Attackers Hijack Mailboxes: What You Need to Patch Right Now
CVE-2026-96940 is a high-severity Microsoft Exchange Server flaw that lets authenticated attackers read other users' mailboxes. See affected versions and patches
Malicious HEIC Images Can Trigger Remote Code Execution on WordPress Servers: A Deep Dive into the libheif Exploit Chain
A critical libheif vulnerability can turn malicious HEIC uploads into code execution. Learn how the WordPress RCE chain works and how to mitigate it
Critical GitLab AI Gateway vulnerability (CVE-2026-90970) enables remote code execution on self-hosted servers
GitLab CVE-2026-90970 is a critical 9.9 AI Gateway sandbox escape affecting self-hosted deployments. Check affected versions and patches
Critical Fortinet FortiMail Zero-Day (CVE-2026-104286) Actively Exploited: Unauthenticated File Write Flaw Exposes Email Security Gateways Worldwide
CVE-2026-104286 is an actively exploited FortiMail zero-day allowing unauthenticated arbitrary file writes. See affected versions, IOCs and fixes
Critical PostgreSQL Flaw ‘PostGREShell’ (CVE-2026-6471) Enables Remote Code Execution: Complete Technical Breakdown and Remediation
CVE-2026-6471, dubbed PostGREShell, lets PostgreSQL replication users load unauthorized libraries and execute code. Learn the exploit and fix
Critical TP-Link Archer AX55 Vulnerabilities Expose Routers to RCE and Credential Theft: Full Technical Analysis and Patch Guide
TP-Link Archer AX55 V4 is affected by CVE-2026-18167 and CVE-2026-18330. Learn about the RCE, credential theft risks and firmware fix
CVE-2026-72898: Critical Metabase SQL Injection Is Being Actively Exploited, Allowing Unauthenticated Admin Takeover
CVE-2026-72898 is a critical Metabase SQL injection flaw actively exploited in the wild. Learn affected versions, attack path, impact, detection and mitigation
Researcher Demonstrates Authenticated RCE Against MariaDB 13.0.1-rc, Technical Details Remain Undisclosed
A researcher has demonstrated an authenticated RCE against MariaDB 13.0.1-rc. We analyze the exploit, confirmed findings, security impact, and mitigation guidance
