Security Articles & Writeups - Page 2

github.blog Mar 06, 2026

GitHub Security Lab AI Framework Discovers 80+ Vulnerabilities Including CVE-2025-64487

GitHub Security Lab released an open-source AI-powered framework using LLM-based taskflows that discovered over 80 high-impact vulnerabilities in open source projects, including authorization…

CVE-2025-64487 CVE-2026-28514

labs.watchtowr.com Mar 18, 2026

BMC FootPrints Pre-Auth RCE Chain (CVE-2025-71257 to CVE-2025-71260)

Researchers discovered a critical pre-authenticated remote code execution chain in BMC FootPrints ITSM affecting versions 20.20.02-20.24.01.001, combining authentication bypass (CVE-2025-71257), SSRF…

CVE-2025-71257 CVE-2025-71258 CVE-2025-71259 CVE-2025-71260

POC github.com/JivaSecurity Apr 08, 2026

CVE-2026-22666: Dolibarr dol_eval_standard() Whitelist Bypass RCE (v23.0.0 and below)

A whitelist bypass vulnerability in Dolibarr's dol_eval_standard() function allows remote code execution on affected versions up to 23.0.0.

CVE-2026-22666

POC github.com/watchtowrlabs Mar 25, 2026

CVE-2026-2699: Progress ShareFile Authentication Bypass Detection Tool

Progress ShareFile contains an authentication bypass vulnerability (CVE-2026-2699) affecting versions prior to 5.12.4 that allows unauthenticated access to the /ConfigService/Admin.aspx endpoint.

CVE-2026-2699

POC github.com/umair-aziz025 Apr 02, 2026

CVE-2026-5281: Chrome WebGPU Use-After-Free PoC Toolkit & Scanner

CVE-2026-5281 is a use-after-free vulnerability (CWE-416) in Chrome's WebGPU implementation affecting versions below 146.0.7680.178.

CVE-2026-5281

POC github.com/fevar54 Apr 04, 2026

CVE-2026-3502 Scanner: TrueConf Server & Windows Client Detection Tool

A Python-based proof-of-concept scanner for CVE-2026-3502 that identifies vulnerable TrueConf servers lacking update verification and detects compromised Windows clients running version 8.5.3.884 or…

CVE-2026-3502

POC github.com/BishopFox Apr 06, 2026

CVE-2026-35616: FortiClient EMS Pre-Auth API Bypass Detection Tool

CVE-2026-35616 is a pre-authentication API bypass in FortiClient EMS 7.4.5-7.4.6 allowing unauthenticated attackers to bypass certificate-based authentication via HTTP header spoofing…

CVE-2026-35616

Weekly Report Apr 06, 2026

Threat Landscape 30/03-06/04/2026: Chrome Zero-Day, TrueConf Supply Chain, ShareFile Kill Chain

Introduction The week of March 30 - April 6, 2026 tracked 1,224 new CVEs - a 23% decrease from the previous week's 1,597 - but before anyone breathes a sigh of relief: 132 of them were CRITICAL, 366…

CVE-2026-3502 CVE-2026-5204 CVE-2026-5212 CVE-2026-5281 CVE-2026-29014 +3 more

medium.com

CVE-2026-35394: AI Prompt Injection Enables Arbitrary Android Intent Execution

CVE-2026-35394 is a high-severity vulnerability in @mobilenext/mobile-mcp (<0.0.50) that allows attackers to execute arbitrary Android intents through prompt injection attacks on AI agents.

CVE-2026-35394

medium.com

CVE-2026-25769: Wazuh Security Flaw Enables Trusted Systems as Attack Vector

CVE-2026-25769 affects Wazuh, allowing attackers to exploit trusted security monitoring systems as entry points for compromise.

CVE-2026-25769

medium.com

CVE-2026-32186: Microsoft Bing Elevation of Privilege via Service Trust Boundary Bypass

CVE-2026-32186 demonstrates privilege elevation in Microsoft Bing's cloud infrastructure through exploitation of execution context inheritance and service-to-service trust boundaries.

CVE-2026-32186

medium.com

CVE-2026-20093: Cisco IMC Authentication Bypass Enables Full Admin Access (CVSS 9.8)

CVE-2026-20093 is a critical authentication bypass vulnerability in Cisco Integrated Management Controller (IMC) that allows unauthenticated attackers to gain full administrative privileges by…

CVE-2026-20093

medium.com

CVE-2026-22738: Unauthenticated RCE via SpEL Injection in Spring AI SimpleVectorStore

CVE-2026-22738 is a critical (CVSS 9.8) unauthenticated remote code execution vulnerability in Spring AI's SimpleVectorStore component that allows attackers to achieve RCE through SpEL (Spring…

CVE-2026-22738

letchupkt.medium.com

CVE-2026-5271: Python pymanager Module Hijacking via CWD Path Manipulation

CVE-2026-5271 is a moderate severity vulnerability in pymanager 26.0 where unsafe sys.path manipulation forces Python to prioritize the current working directory during module resolution, allowing…

CVE-2026-5271

labs.watchtowr.com

Progress ShareFile Storage Zone Pre-Auth RCE Chain (CVE-2026-2699, CVE-2026-2701)

Researchers discovered a two-vulnerability chain in Progress ShareFile Storage Zone Controller (version 5.12.3) enabling pre-authenticated remote code execution.

CVE-2026-2699 CVE-2026-2701

febinj.medium.com

CVE-2026-24018: Symlink Race Condition LPE in Fortinet FortiClient Linux

Fortinet FortiClient Linux versions 7.2.2-7.2.12 and 7.4.0-7.4.4 contain a symlink following vulnerability enabling local privilege escalation to root.

CVE-2026-24018

medium.com

CVE-2026-25769: Wazuh RCE via Worker Node Privilege Escalation

CVE-2026-25769 allows attackers to achieve remote code execution (RCE) with root privileges on Wazuh master nodes by exploiting a vulnerability in the as_wazuh_object() Python function accessible…

CVE-2026-25769

securityonline.info

Critical RCE and UAF Flaws in libpng: CVE-2026-33416 and CVE-2026-33636

Two critical vulnerabilities discovered in libpng affect versions spanning decades: CVE-2026-33636 is an out-of-bounds read/write in ARM Neon SIMD optimization code enabling information disclosure…

CVE-2026-33416 CVE-2026-33636

securityonline.info

CVE-2026-33701: Critical RCE in OpenTelemetry Java Agent RMI Instrumentation (CVSS 9.3)

OpenTelemetry Java Agent versions prior to 2.26.1 contain a critical remote code execution vulnerability in the RMI instrumentation component that deserializes untrusted network data without proper…

CVE-2026-33701

securityonline.info

CVE-2026-1961: RCE via Command Injection in Foreman WebSocket Proxy

A high-severity command injection vulnerability (CVSS 8.0) in Foreman's WebSocket proxy allows remote code execution when attackers operate malicious compute resource servers and inject shell…

CVE-2026-1961