60
55
60
Week in review: Attackers use phishing emails to steal NTLM hashes, Patch Tuesday forecast
60
60
Week in review: Exploited Citrix Bleed vulnerability, Atlassian patches critical Confluence bug
60
30
55
42
30
30
30
35
Microsoft May 2020 Patch Tuesday fixes 111 flaws, 13 Critical
60
30
30
30
47
30
ZDI-26-694: Linux Kernel Net Scheduler Clsact Qdisc Use-After-Free Local Privilege Escalation Vulnerability
ZDI discloses CVE-2026-23413, a use-after-free in the Linux kernel net scheduler clsact qdisc allowing local privilege escalation, CVSS 8.2.
ZDI advisory ZDI-26-694 describes a use-after-free vulnerability in the Linux kernel's net scheduler clsact qdisc component. Successful exploitation allows local attackers to escalate privileges on affected installations, and ZDI assigned a CVSS score of 8.2. The flaw is tracked as CVE-2026-23413. The advisory notes an attacker must first obtain the ability to execute high-privileged code on the target system to exploit the vulnerability.
35
CVE-2026-50522: Microsoft SharePoint Server RCE Vulnerability
CVE-2026-50522 is an unauthenticated .NET deserialization RCE in SharePoint Server Subscription, 2019, and 2016; Microsoft patched it July 14, 2026.
CVE-2026-50522 (CWE-502) lets unauthenticated attackers send crafted serialized .NET payloads to network-accessible SharePoint endpoints, triggering gadget-chain deserialization and remote code execution under the privileged SharePoint service account. It affects SharePoint Server Subscription Edition, SharePoint Server 2019, and SharePoint Server 2016 Enterprise; Microsoft published the advisory on July 14, 2026. The EPSS score is 20.346%, but no public PoC exists and the flaw is not in CISA's KEV catalog at publication. Mitigations include applying Microsoft updates, rotating SharePoint machine keys, enabling AMSI, and restricting internet exposure.
74
CVE-2026-86287: Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths
CVE-2026-86287: Net::IP::LPM Perl library before 1.12 accepts malformed IP prefix lengths, risking incorrect longest-prefix-match results.
Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths, per an oss-security disclosure posted September 7, 2026. The lax input validation in this longest-prefix-match library could produce incorrect matching behavior. The fix is available in version 1.12 on CPAN.
24
CVE-2026-86304: MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust anchor
MojoX::Authentication before 0.006 for Perl allows SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust anchor (CVE-2026-86304).
CVE-2026-86304 affects MojoX::Authentication versions before 0.006 for Perl. The parse_assertion function builds Net::SAML2::Binding::POST without a trust anchor, so SAML assertions are not validated against a trusted signing key, enabling authentication bypass. The flaw is fixed in version 0.006 of the module.
42
ZDI-26-609: Linux Kernel Net Scheduler Packet Classifier Use-After-Free Local Privilege Escalation Vulnerability
The Linux kernel net scheduler packet classifier has a use-after-free (CVSS 7.8) allowing local attackers to escalate privileges from low-privileged code.
ZDI-26-609 describes a use-after-free vulnerability in the Linux kernel's network scheduler packet classifier, with a CVSS score of 7.8. An attacker must first be able to execute low-privileged code on the target system before escalating privileges. The advisory text does not list an assigned CVE identifier.
35
ZDI-26-574: Linux Kernel Net Scheduler Connection Tracking Race Condition Local Privilege Escalation Vulnerability
A race condition (CVE-2026-46319, CVSS 7.5) in the Linux kernel net scheduler connection tracking allows local privilege escalation.
ZDI advisory ZDI-26-574 documents a race condition in the Linux kernel's net scheduler connection tracking component. Local attackers who can execute high-privileged code on a target can exploit the flaw to escalate privileges. ZDI rated the vulnerability 7.5 on CVSS and assigned CVE-2026-46319.
25
ZDI-26-568: Linux Kernel Net Scheduler Race Condition Local Privilege Escalation Vulnerability
ZDI disclosed a race condition (CVSS 7.5) in the Linux kernel net scheduler enabling local privilege escalation; no CVE assigned in the advisory text.
ZDI advisory ZDI-26-568 describes a race condition in the Linux kernel's net scheduler that allows local attackers to escalate privileges on affected installations. Exploitation requires the attacker to first execute high-privileged code on the target system. ZDI assigned a CVSS rating of 7.5; no CVE identifier is listed in the advisory text.
22
ZDI-26-571: Linux Kernel Net Scheduler Packet Classifier API Use-After-Free Local Privilege Escalation Vulnerability
ZDI disclosed a use-after-free local privilege escalation flaw (CVE-2026-64530) in the Linux Kernel net scheduler packet classifier API.
The Zero Day Initiative published ZDI-26-571 describing a use-after-free in the Linux Kernel net scheduler packet classifier API. Local attackers who can already execute low-privileged code can escalate privileges. ZDI assigned a CVSS score of 8.8 and the identifier CVE-2026-64530.
30
60
Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecast
60
Week in review: 300k+ Plex Media Server instances still vulnerable to attack, exploited Git RCE flaw
60
60
Week in review: Microsoft patches 5 actively exploited 0-days, recently fixed Chrome vulnerability exploited
60
Week in review: Zero-click flaw in Synology NAS devices, Google fixes exploited Android vulnerability
60
47
60
55
60
60
Week in review: KeePass vulnerability, Apple fixes exploited WebKit 0-days
60
30