Hackers Exploit OpenSSH SSHole Flaw Within Hours of Disclosure
Attackers gain root access on Alpine Linux honeypot via CVE-2026-123158; patch released in OpenSSH 10.6p2
1
Stories per day · 30 days
11 RSS
Relatedkev3microsoft3ai-agents2beyondtrust2cisa2cve-2026-1027642cve-2026-815782cve-2026-820782danfoss2deepseek2ics2netscaler2papercut2rce2refrigeration2vulnerability-management2web-shell2zero-day2
111 stories, newest first · one card per story
Stories tagged #exploitation
Plex2Shell chain exploited against QNAP NAS users
Four vulnerabilities in Plex Media Server were chained for remote code execution on exposed devices.
OpenAI AI model generates 948 Linux kernel root exploits in single run
OpenAI's frontier model produced 948 local privilege escalation exploits from Linux kernel bugs at a cost of $1,213,430.
Node-RED authentication hole being exploited in the wild
Attackers are exploiting CVE-2026-58115 to deploy flows that download and run a Linux bot on unpatched Node-RED instances.
1
Network appliances stay unpatched for over a year as exploits speed up
Microsoft analysis of 383,000 CVEs shows median patch time for network appliances exceeds one year while exploitation occurs in days.
1
Microsoft Study Shows 78% of Exploited Vulnerabilities Enable System Takeover
Attackers prioritize flaws giving remote code execution or privilege escalation, with patch times ranging from two weeks to over a year.
1
Microsoft analyzes 383,000 vulnerabilities, finding 78% exploited are takeover types
Takeover vulnerabilities including RCE account for 78% of exploited CVEs, with OS code representing 41% of exploited despite 23% of disclosures.
1
PHP2Shell exploitation surges while most public PHP stays unpatched
Cloudflare's CEO said attempts reached millions within hours of disclosure; Ox still saw 97.5% unpatched on October 23.
Security Teams Urged to Focus on Remote Unauthenticated Exploits
Attackers exploit new high-severity vulnerabilities within three days of disclosure, favoring remote unauthenticated zero-click flaws.
2
Rapid7: high-severity flaws exploited three days after disclosure
Of 43 newly exploited high- and critical-severity bugs in Q3, 34 needed no authentication or user interaction.
1
CISA Orders Patch for Exploited Plex2Shell, Siemens and SiteGuard Flaws
CISA added four Plex2Shell vulnerabilities and two other exploited flaws to its KEV catalog, ordering federal agencies to patch them by October 23 and November 3, 2026.
CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability
Attackers are actively exploiting critical unauthenticated NetScaler RCE CVE-2026-88771, now listed in CISA's KEV catalog.
CVE-2026-102764: BeyondTrust Zero-Day Exploited
SOCRadar reports BeyondTrust zero-day CVE-2026-102764 is being exploited, but the page lacks technical detail.
6
BeyondTrust security advisory (AV26-1054)
Canada's Cyber Centre warns BeyondTrust Remote Support CVE-2026-102764 is being exploited in the wild.
4
Hackers Use Codex and DeepSeek AI Agents to Breach 440 PaperCut Servers Worldwide
Attackers used Codex and DeepSeek agents to exploit PaperCut flaws and compromise 440 servers in 48 countries.
7
Hackers Use Hundreds of AI Agents to Exploit PaperCut Servers and Steal Windows Credentials
A threat actor used AI agents to exploit PaperCut, compromising about 440 servers and stealing Windows credentials.
12
Researchers warned attackers could 'defrost the food' months before French supermarkets got hit
Attackers compromised exposed Danfoss and Copeland refrigeration controllers, spoiling food at nearly 700 French supermarkets.
EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Hackers exploited unpatched Danfoss fridge controllers, spoiling food at more than 400 European grocery stores.
6
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited CVE-2026-110447 in Nextcloud's optional Collabora CODE app to plant web shells.
September 2026 CVE Landscape
Recorded Future says 80 vulnerabilities were actively exploited in September 2026, including NetScaler zero-days.
10
Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Attackers are exploiting CVE-2026-102255, a CVSS 10 unauthenticated SSRF flaw in SonicWall SMA 1000 appliances.
CVE-2026-85097: Bricksforge WordPress Plugin Flaw Exploited for Unauthenticated RCE
CVE-2026-85097 in the Bricksforge WordPress plugin is being exploited for unauthenticated remote code execution.
3
SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin
Attackers are exploiting SonicWall SMA 1000 pre-auth SSRF CVE-2026-102255, a CVSS 10.0 flaw with no workaround.
CVE-2026-102255: Critical SonicWall SMA1000 SSRF
SonicWall patched critical pre-auth SMA1000 SSRF CVE-2026-102255 after exploitation attempts hit honeypots.