Skip to content

Blog · page 6/7

CVE analysis, as it happens

Critical vulnerabilities and CISA KEV additions, explained: what is affected, which versions fix it, and what to check first.

  1. CVE-2026-34084 PhpSpreadsheet: Fixed in 5.6.0, 3.10.4, 2.4.4, 1.30.3

    PhpSpreadsheet fixes 5.6.0, 3.10.4, 2.4.4, 2.1.15 and 1.30.3 for CVE-2026-34084 (CVSS 9.8): RCE via phar:// in IOFactory::load(). Detection and mitigation.

    CVE-2026-34084 · 5 min

  2. CVE-2026-0300 Palo Alto PAN-OS 10.2: Root RCE, CISA KEV, Workaround

    CVE-2026-0300 (CVSS 9.8): PAN-OS 10.2 User-ID Authentication Portal buffer overflow → unauthenticated root RCE. In CISA KEV. Patch, workaround, detection.

    CVE-2026-0300 · 5 min

  3. CVE-2026-42238 Nginx UI: Fixed in 2.3.8 — Unauthenticated Root RCE

    Nginx UI fix 2.3.8 for CVE-2026-42238 (CVSS 9.8): /api/restore unauthenticated for 10 min after startup → root RCE via app.ini. Detection and mitigation.

    CVE-2026-42238 · 5 min

  4. n8n CVE-2026-42233: Oracle SQL Injection via Webhook in Database Node

    n8n (before 1.123.32 / 2.17.4 / 2.18.1) contains a critical SQL injection (CVSS 9.8) on the Oracle Database node select operation. Webhook-driven data exfiltration.

    CVE-2026-42233 · 5 min

  5. LiteLLM CVE-2026-42208: AI Gateway SQL Injection Added to CISA KEV

    LiteLLM AI Gateway (v1.81.16 → 1.83.7) contains a critical SQL injection (CVSS 9.8) on LLM routes. API key theft, added to CISA KEV — patch urgently.

    CVE-2026-42208 · 6 min

  6. CoreDNS CVE-2026-35579: TSIG Authentication Bypass on gRPC, QUIC, DoH and DoH3

    CoreDNS < 1.14.3 fails to validate the TSIG HMAC on modern transports. AXFR, DDNS and TSIG-gated plugins bypassable without a key. Patch and workaround.

    CVE-2026-35579 · 5 min

  7. WattBox 800/820 CVE-2026-41446: Diagnostic Backdoor in Plaintext on the Label

    Snap One WattBox 800 and 820 (firmware < 2.10.0.0) ship with diagnostic endpoints whose auth relies on MAC + service tag — both printed on the label. Root RCE.

    CVE-2026-41446 · 5 min

  8. CVE-2026-35051 / 39858 Traefik: Fixed in 2.11.43, 3.6.14, 3.7.0-rc.2

    Traefik fix 2.11.43, 3.6.14, 3.7.0-rc.2 for CVE-2026-35051 and CVE-2026-39858 (CVSS 10.0) — unauthenticated ForwardAuth bypass. IOCs and mitigation.

    CVE-2026-35051 CVE-2026-39858 · 5 min

  9. Totolink A8000RU: 22 Critical Command Injection CVEs in One Week

    The Totolink A8000RU router stacks 22 CRITICAL CVEs (CVSS 9.8) in /cgi-bin/cstecgi.cgi command injection. All exploits public — analysis, IOCs, mitigation.

    CVE-2026-7121 · 5 min

  10. Tenda AC18 CVE-2026-31255: Unauthenticated RCE via SetSambaCfg

    Tenda AC18 router v15.03.05.05 contains a critical command injection (CVSS 9.8) on /goform/SetSambaCfg. Analysis, exploitation and mitigation.

    CVE-2026-31255 · 4 min

  11. ProjeQtor CVE-2026-41462: Unauthenticated SQL Injection on Login

    ProjeQtor 7.0 to 12.4.3 contains a critical SQL injection (CVSS 9.8) on the login endpoint. Privileged account creation, data theft, possible RCE.

    CVE-2026-41462 · 4 min

  12. D-Link DI-8100 CVE-2026-7248: Critical Buffer Overflow in tgfile.htm

    D-Link DI-8100 firmware 16.07.26A1 contains an unauthenticated buffer overflow (CVSS 9.8) on tgfile.htm. Public PoC, analysis and mitigation.

    CVE-2026-7248 · 3 min

  13. Patch Management Guide: How to Handle CVEs Quickly and Effectively

    Learn how to build a robust CVE patch management process: SLAs by severity, key steps, tools, and common mistakes to avoid to protect your infrastructure.

    8 min

  14. How to Monitor CVE Vulnerabilities Across Your IT Assets

    A complete guide to tracking and managing CVEs affecting your IT infrastructure: methods, tools, and best practices for IT teams and security managers.

    5 min

  15. How to Conduct a CVE Security Audit of Your IT Infrastructure

    Complete guide to conducting a CVE security audit: asset inventory, vulnerability scanning, CVSS scoring, remediation planning, and CISO best practices.

    8 min

  16. Best CVE Monitoring Tools in 2026: Full Comparison

    A complete comparison of the best CVE management and monitoring tools in 2026: open-source solutions, SaaS platforms, scanners. Which tool is right for your context?

    6 min

  17. VMware vCenter & ESXi CVEs 2026: Top 8 Critical Flaws (Patch Now)

    Critical VMware vCenter and ESXi CVEs exploited by ransomware gangs. Full list with CVE-2021-21985, CVE-2024-37085 — patches, IOCs and ESXiArgs protection.

    CVE-2021-21985 · 4 min

  18. Understanding the CVSS Score: How to Assess CVE Severity

    The CVSS (Common Vulnerability Scoring System) score is the global standard for measuring vulnerability severity. Learn to read it in 5 minutes.

    3 min

  19. Spring4Shell CVE-2022-22965: Critical RCE in Spring Framework

    Spring4Shell is a remote code execution vulnerability in Spring Framework. Analysis of CVE-2022-22965, exploitation conditions and how to protect Java applications.

    CVE-2022-22965 · 3 min

  20. ProxyLogon CVE-2021-26855: The Critical Microsoft Exchange Vulnerability

    ProxyLogon is one of the most exploited Exchange vulnerabilities in history. Analysis of CVE-2021-26855, the full exploit chain and remediation steps.

    CVE-2021-26855 · 3 min