cve

Echo and NanoClaw collaborated to eliminate 1,400 CVEs in NanoClaw's container images through scanning, patching, and backporting fixes. The article details their agentic hardening process, including safe version bumps and manual patch research.

A homelab owner details how their Forgejo instance was hacked via CVE-2026-60004, an RCE in Gitea, and shares the postmortem including mistakes made and exploit analysis.

Tencent's Corvus AI research pipeline discovered SCTPhantom, an 18-year-old use-after-free vulnerability in Linux SCTP dynamic address reconfiguration (ASCONF) that enables local privilege escalation. The article details the discovery, root cause, exploitation chain, and upstream fix.

The tweet reports that serious cyber vulnerability disclosures are climbing sharply, with 21 major tech organizations publishing about 2,500 high- and critical-severity CVEs in July — roughly 5× the previous monthly record — following Anthropic's reveal that Claude Mythos Preview could autonomously find software vulnerabilities.

JFrog researchers debunk a batch of SQLite CVEs published by a suspicious GitHub repo, finding the advisories are likely LLM-generated slop with non-existent code references and non-working PoCs, prompting NVD downgrades.

Kremlin-linked hackers are actively exploiting a maximum-severity Microsoft Exchange Server flaw (CVE-2026-42897) to install the OWAReaper backdoor and steal credentials via half-click attacks, according to Proofpoint and NSA warnings.

A critical remote code execution vulnerability (CVE-2026-66066) has been discovered in Ruby on Rails' Active Storage when using the default Vips image processor, affecting Rails 7.x and 8.x default configurations. Patches have been released and immediate upgrading is recommended.

Apple released macOS Tahoe 26.6 with security fixes addressing multiple vulnerabilities including buffer overflows, authorization issues, sandbox escapes, and kernel memory corruption.

Qualys and Anthropic disclose CVE-2026-64600, a race condition in the Linux kernel's XFS filesystem that allows local privilege escalation to root, affecting over 16 million systems, with no kernel log output and survival across reboots.

A blog post detailing a local privilege escalation vulnerability (CVE-2026-50343) in the Windows Install Service on Windows 11, allowing a standard user to execute code as SYSTEM by exploiting a writable plugin map and a user-plantable COM server.

An in-depth article about Git's `--end-of-options` flag, its history, and its importance in preventing argument injection vulnerabilities, including related CVEs.

432 Linux kernel CVEs were published in the last 24 hours, indicating a significant batch of security vulnerabilities.

Fortinet FortiSandbox contains a critical unauthenticated OS command injection vulnerability (CVE-2026-25089) actively exploited in the wild, added to CISA's Known Exploited Vulnerabilities catalog on July 16, 2026.

GhostLock (CVE-2026-43499) is a 15-year-old Linux kernel stack use-after-free vulnerability affecting all distributions, allowing local privilege escalation and container escape. Detailed exploitation techniques are presented.

Google paid a $250,000 bounty for a Linux KVM vulnerability (Januscape) that allows unprivileged guest VMs to escape and gain root access on the host, affecting cloud platforms using AMD or Intel processors.

A use-after-free vulnerability in OpenBSD through version 7.9 allows local attackers to escalate privileges to root. The flaw exists in sysv_sem.c and is identified as CVE-2026-57589.

Several versions of Tenda firmware contain an undocumented authentication backdoor (CVE-2026-11405) that grants administrative access to devices' web management interfaces without valid credentials. No patch is available; mitigation includes disabling remote management.

A Linux kernel zero-day vulnerability (CVE-2026-43456) rooted in code from 2007 was discovered by Yuki Koike and Kota Toda, rewarded over $80,000 via Google's kernelCTF. The flaw, a type confusion in the net/bonding subsystem, allows reliable privilege escalation within one second.

Januscape (CVE-2026-53359) is a use-after-free vulnerability in KVM/x86's shadow MMU that allows guest-to-host escape. Exploitation can lead to host kernel panic or code execution, affecting multi-tenant cloud environments.

Bad Epoll (CVE-2026-46242) is a race-condition use-after-free vulnerability in the Linux kernel's epoll subsystem that allows unprivileged users to escalate to root on both Linux and Android devices. It was reported by Jaeyoung Chung and was missed by Anthropic's Mythos AI.