45
45
45
45
45
45
45
45
45
45
45
45
45
45
45
45
45
[webapps] Ray 2.56.0 - Directory Traversal & Local File Inclusion
Public exploit released for directory traversal and local file inclusion in Ray 2.56.0, the widely used distributed ML framework.
Exploit-DB entry 52635 publishes a web application exploit targeting Ray 2.56.0, the distributed computing framework from Anyscale commonly used for ML workloads. The PoC demonstrates a directory traversal and local file inclusion condition, allowing attackers to read files outside the intended path on an exposed Ray instance. Ray dashboard instances exposed to the internet could leak sensitive files such as credentials and configuration.
40
45
50
45
50
45
45
45
45
45
50
45
ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch
Researcher Chaotic Eclipse published a PoC bypassing Microsoft's CVE-2026-50656 Defender patch, enabling SYSTEM-level code execution on fully patched Windows systems.
Security researcher Chaotic Eclipse released a proof-of-concept for ShieldBreak, a Microsoft Defender zero-day that fully bypasses the patch for CVE-2026-50656 (RoguePlanet), a race condition in the Malware Protection Engine (mpengine.dll) allowing SYSTEM-level code execution. The PoC was tested on Windows 11 25H2 and Windows Server 2025 with a 100% success rate, and Windows 10 is also vulnerable though not supported by the PoC; the flaw may also leak 8 bytes of memory. Microsoft's MSRC had criticized the researcher's repeated uncoordinated disclosures, including YellowKey (BitLocker bypass), GreenPlasma, and LegacyHive (User Profile Service LPE).
58
50
45
45
45
45
45
45
50
50
45