Defused Cyber

Mentions · 7d2
Mentions · 30d5
All mentions11
First seenAug 11, 2026
Last mentioned4d ago

Timeline

11 articles · newest first

Attackers probe patched Oracle EBS bug; PeopleSoft zero-day is three flaws

ShinyHunters used CVE-2026-35273 for theft and extortion; ZDI says Oracle bundled three PeopleSoft bugs under one CVE.

The Register · Securityupdated Oct 29, 13:12 UTC · 3d agofirst Oct 28, 19:56 UTC · 4d agoExploit / PoCExploited8 sourcesCVE-2026-101767 CVE-2026-352731

Attackers probe Oracle E-Business Suite SQL injection flaw CVE-2026-101767

Decoys recorded exploratory exploits on October 27 against the unauthenticated TCF servlet flaw, which chains SQL injection to command execution as the EBS application account.

The Hacker Newsupdated Oct 29, 13:12 UTC · 3d agofirst Oct 28, 12:48 UTC · 4d agoExploit / PoCExploited8 sourcesCVE-2026-1017672 · 1 read

PHP2Shell exploited at a European government entity, Unit 42 says

Within two hours the attackers reached password hashes, MFA secrets, and an NTLM-relay path toward Domain Admin.

The Hacker NewsOct 25, 17:19 UTC · 7d agoExploit / PoCExploitedCVE-2026-109618 CVE-2026-109619 CVE-2026-1155603 · 1 read

CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

CISA put actively exploited Ivanti Connect Secure flaw CVE-2026-104935 on KEV, with federal fixes due October 16.

The Hacker NewsOct 14, 12:30 UTC · 18d agoExploit / PoCExploitedCVE-2026-1049355 · 2 reads

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch

Attackers made 135 attempts to exploit critical pre-auth SSRF CVE-2026-102255 in SonicWall SMA 1000 days after patching.

The Hacker NewsOct 12, 10:36 UTC · 20d agoExploit / PoCExploitedCVE-2026-102255 CVE-2026-15409 CVE-2026-154106 · 2 reads

CVE-2026-9586 | Sangoma Switchvox Unauthenticated SQL Injection Remote Code Execution Vulnerability

CVE-2026-9586, a critical unauthenticated SQL injection to RCE in Sangoma Switchvox, is being actively exploited against internet-facing systems per honeypot observations.

Horizon3.aiSep 1, 15:32 UTC · Sep 1, 2026Exploit / PoCExploitedCVE-2026-95863 · 1 read

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

CISA added six actively exploited flaws to KEV, led by Citrix NetScaler CVE-2026-8452, with federal patch deadlines set.

The Hacker NewsAug 27, 07:05 UTC · Aug 27, 2026Exploit / PoCExploitedCVE-2019-1068 CVE-2026-8452 CVE-2022-0995+34 · 1 read

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

A maximum-severity (CVSS 10.0) unauthenticated RCE flaw in SAP Commerce Cloud, CVE-2026-58231, is under active exploitation days after patching.

The Hacker NewsAug 17, 17:57 UTC · Aug 17, 2026Exploit / PoCExploitedCVE-2026-58231 CVE-2025-313243 · 3 reads

SAP Commerce Cloud CVE-2026

Attackers actively exploit unauthenticated RCE CVE-2026-58231 (CVSS 10.0) in SAP Commerce Cloud days after patch release.

Security AffairsAug 15, 17:14 UTC · Aug 15, 2026Exploit / PoCExploitedCVE-2026-582312 · 1 read

Attackers Exploit SharePoint Authentication Bypass After Public PoC Release

Attackers exploit SharePoint authentication bypass CVE-2026-55040 (CVSS 9.1) after Rapid7's PoC release, with 12 exploitation attempts recorded since July 19, 2026.

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2026Exploit / PoCExploitedCVE-2026-55040 CVE-2026-45659 CVE-2026-56164+21 · 1 read

Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

Broadcom patches three critical VMware flaws, including vCenter auth bypass CVE-2026-59309 and an ESX VM escape, urging immediate updates.

The Hacker NewsAug 11, 15:42 UTC · Aug 11, 2026VulnerabilityCVE-2026-59309 CVE-2026-59310 CVE-2026-47876+23

Related CVEs

by mentions

CVE-2026-58231<1%10.0
Unauthenticated Code Injection RCE in SAP Commerce Cloud
published Aug 11, 2026SAP Commerce CloudPoC
CVE-2026-101767<1%9.8
Missing authentication in Oracle E-Business Suite Application Object Library
published 12d agoOracle Application Object Library (Oracle E-Business Suite)PoC ×5
CVE-2026-561641%9.8
Missing Authentication in Microsoft SharePoint Server Allows Privilege Escalation
published Jul 14, 2026Microsoft SharePoint ServerKEV
CVE-2025-3132499%9.8
Unauthenticated File Upload RCE in SAP NetWeaver Visual Composer
published Apr 24, 2025sap netweaverKEVRansomwarePoC
CVE-2026-109619100%9.2
Use-after-free RCE in PHP via stale request globals
published 11d agophpKEVPoC ×15
CVE-2019-106857%8.8
Remote Code Execution in Microsoft SQL Server 2016 and 2017
published Jul 15, 2019Microsoft SQL ServerKEV
CVE-2026-84521%8.8
Memory Buffer Overflow in Citrix NetScaler ADC/Gateway Exploited in the Wild
published Jun 30, 2026Citrix NetScaler ADCKEVPoC
CVE-2026-10493587%8.6
Auth Bypass to Command Execution in Ivanti Connect Secure
published 19d agoIvanti Connect SecureKEVPoC ×4
CVE-2022-09959%7.8
Out-of-Bounds Write in Linux Kernel watch_queue Enables Local Privilege Escalation
published Mar 25, 2022Linux kernelKEVPoC ×2
CVE-2026-47876<1%9.3
VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter
published Jul 30, 2026

Appears with

Previdianorganization · 3
CISAorganization · 2
Microsoftvendor · 2
Oraclevendor · 2
SAP Commerce Cloudproduct · 2
Horizon3organization · 2
KEVIntelorganization · 2
SAPvendor · 2
Oracle E-Business Suiteproduct · 1
UNC5174threat actor · 1
Red Hat ABRTproduct · 1
UNC5221threat actor · 1
SAPorganization · 1
PHPvendor · 1
Mandiantorganization · 1
PeopleSoftproduct · 1

Entities are extracted by the model from each article. First seen Aug 11, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.