[NotCVE-2026-0015] Input Leap through 3.0.3 input-leapd Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM
CISA alerts of active exploitation of three Linux kernel flaws
CVE-2026-100310: GNU libextractor < 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX
Cross-Site Request Forgery in Elementor Plugin Affecting 2 Million+ Sites
3 sources 9 min
WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV
7 sources in the wild
OnePlus 15 Flaws Let Zero-Permission Apps Gain Root Access Through OxygenOS Services
2 sources 3 min
USN-8818-1: Linux kernel vulnerabilities
Sudo Security Vulnerability Lets Attackers Escalate Privileges
3 sources 2 min
CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2
15 min
New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control
6 sources 3 min
AWS Lambda Flaw Lets Attackers Bypass IAM Permissions and Access Cloud Services
3 min
How One Kubernetes YAML Can Hand Over a GCP Organization
8 min1
NVIDIA Infrastructure Controller Hit by 14 Flaws Enabling Code Execution and Privilege Escalation
3 min
ManageEngine RCE Flaw Enables SYSTEM Code Execution From Windows Login Screen
2 sources 3 min
ZDI-26-741: Foxit PDF Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability
The GNU C Library security advisories update for 2026-09-22
Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day
7 sources 4 min
Linux KVM/arm64 Vulnerability Lets Attackers Escape Virtual Machines and Gain Host Access
3 sources 3 min
Veeam Agent Flaw Actively Exploited to Gain SYSTEM Privileges on Windows
4 sources 3 min
Windows Exploitation Techniques: Dangling COM Object Registrations
Meta Muse AI app flaw lets local malware redirect dictation traffic
2 sources 3 min
MISP security advisory (AV26-946)
Week in review: Cisco patches exploited email gateway 0-day, Revolut breach
in the wild 15 min