Glasswing logs 37,966 findings but only 217 fixes in seven months
Only two of 442 tracked CVEs were exploited, while duplicates and withdrawals far outnumber the 217 marked fixes.
Stories per day · 30 days
Relatedanthropic2curl2glasswing2open-source2aslr1oss-scanner1php1php2shell1rce1vulnerability-disclosure1
13 stories, newest first · one card per story
Stories tagged #vulncheck
VulnCheck exploit bypasses ASLR for PHP2Shell remote code execution
The private exploit chains a memory leak into RCE on PHP 8.4.26 with ASLR on and display_errors off.
The AI app builder your team trusts has a root-level backdoor
Attackers actively exploit unauthenticated RCE CVE-2026-0768 (CVSS 9.8) in internet-facing Langflow instances to run code as root and steal credentials.
8
Anthropic Mythos Found A Bug in Rejetto HFS. Attackers Are Now Exploiting It.
Attackers are exploiting CVE-2026-61500, a critical Rejetto HFS authentication-bypass and code-execution flaw found with Anthropic Mythos.
Exploitation Hits Rejetto HFS Vulnerability Discovered by AI
Attackers are exploiting Rejetto HFS flaw CVE-2026-61500 to forge admin cookies and gain code execution.
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
Attackers are exploiting Rejetto HFS CVE-2026-61500 to forge admin sessions and gain remote code execution.
Anthropic's super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows
Attackers are exploiting CVE-2026-61500, a critical Rejetto HFS auth bypass discovered by Anthropic’s Mythos.
Anthropic-linked CVEs pile up, attackers mostly shrug
VulnCheck finds only one of 225 Anthropic Glasswing-linked CVEs, Ghost SQL injection CVE-2026-26980, exploited in the wild.
China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access
VulnCheck discloses two factory implants, SPEAKINGSTONE and DARKLANTERN, in ZBT router firmware granting unauthenticated remote attackers root command execution.
Hackers Target Langflow in CVE-2026
Threat actors are actively exploiting CVE-2026-0768, an unauthenticated Python RCE in Langflow, hunting OpenAI, AWS, and SSH credentials.
3
Attackers Exploit Critical Langflow and Rails Flaws in Credential
VulnCheck reports active exploitation of critical Langflow CVE-2026-0768 and Rails CVE-2026-66066 for credential harvesting, with detections rising to 360.
3
Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode
Marimo notebook flaw CVE-2026-75149 (CVSS 8.7) allows attacker-supplied MCP commands to run as local subprocesses before any cell executes in edit mode.
2
NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands
Researchers disclosed 9.4-CVSS flaws in NASA/JPL's AIT-GUI allowing unauthenticated attackers to issue arbitrary spacecraft commands via exposed command endpoints.