⤷ Title: CVE-2026-43074: Linux Kernel eventpoll Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 12:55:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #android #CVE_2026_43074 #eventpoll #Linux Kernel #Pixel #privilege escalation #use after free
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 12:55:37 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #android #CVE_2026_43074 #eventpoll #Linux Kernel #Pixel #privilege escalation #use after free
Daily CyberSecurity
CVE-2026-43074: Linux Kernel eventpoll Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed
TL;DR A Linux kernel eventpoll flaw lets a local user climb to root. Tracked as CVE-2026-43074, it scores 7.3 on CVSS. Researchers confirmed a working root shell on a Pixel 10 Pro. The full detail…
⤷ Title: Three Critical Wazuh Manager Flaws Disclosed With Public PoC Exploit Code
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 01:30:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cluster protocol #CVE_2026_48024 #CVE_2026_48162 #CVE_2026_49441 #Root RCE #Wazuh vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 01:30:07 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #cluster protocol #CVE_2026_48024 #CVE_2026_48162 #CVE_2026_49441 #Root RCE #Wazuh vulnerability
Daily CyberSecurity
Three Critical Wazuh Manager Flaws Disclosed With Public PoC Exploit Code
TL;DR Three critical Wazuh manager vulnerabilities now have public advisories and proof-of-concept exploit code. Each scores CVSS 9.1 and abuses the cluster protocol. Any peer holding the shared F…
⤷ Title: CVE-2026-44945: Rancher Cross-Cluster Impersonation Flaw Enables Full Privilege Escalation, Rated CVSS 9.1
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 01:01:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container security #CVE_2026_44945 #Impersonation #Kubernetes #privilege escalation #Rancher #SUSE
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 01:01:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #container security #CVE_2026_44945 #Impersonation #Kubernetes #privilege escalation #Rancher #SUSE
Daily CyberSecurity
CVE-2026-44945: Rancher Cross-Cluster Impersonation Flaw Enables Full Privilege Escalation, Rated CVSS 9.1
TL;DR A critical flaw lets a low-privileged Rancher user seize full control of the platform. Tracked as CVE-2026-44945, it scores 9.1 on CVSS. This Rancher privilege escalation stems from a cross-…
⤷ Title: EasyStore (Joomla) filter_sortby Pre-Authentication SQL Injection (CVE-2026–65761)
════════════════════════
𐀪 Author: Guidancewhite
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 05:47:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #exploit #security #sql_injection #cve
════════════════════════
𐀪 Author: Guidancewhite
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 05:47:01 GMT
════════════════════════
⌗ Tags: #cybersecurity #exploit #security #sql_injection #cve
Medium
EasyStore (Joomla) filter_sortby Pre-Authentication SQL Injection (CVE-2026–65761)
1. Overview of CVE-2026–65761
⤷ Title: CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 12:55:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #active directory #CVE_2026_27912 #Kerberos #privilege escalation #proof_of_concept #ResetNightmare
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 12:55:26 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #active directory #CVE_2026_27912 #Kerberos #privilege escalation #proof_of_concept #ResetNightmare
Daily CyberSecurity
CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw
TL;DR Researchers published full details and a proof-of-concept tool for CVE-2026-27912, called ResetNightmare. The flaw sits in the Windows Kerberos Change Password protocol. It lets an attacker …
⤷ Title: CVE-2026-58231 (CVSS 10.0) and Code Injection RCE Flaws Top SAP August 2026 Patch Day
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 12:42:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_58231 #Remote Code Execution #SAP Commerce Cloud #SAP NetWeaver #SAP Patch Day
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 12:42:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_58231 #Remote Code Execution #SAP Commerce Cloud #SAP NetWeaver #SAP Patch Day
Daily CyberSecurity
CVE-2026-58231 (CVSS 10.0) and Code Injection RCE Flaws Top SAP August 2026 Patch Day
TL;DR SAP released its August 2026 Patch Day on August 11, with 28 new security notes. The headline flaw, CVE-2026-58231, scores a maximum CVSS 10.0. Several critical code injection bugs also enab…
⤷ Title: MarkLogic Server Security Bulletin Patches 10 Vulnerabilities, With CVSS Scores Up to 9.9
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 14:02:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_7329 #CVE_2026_9192 #MarkLogic #privilege escalation #Progress #ssrf
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 14:02:12 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #CVE_2026_7329 #CVE_2026_9192 #MarkLogic #privilege escalation #Progress #ssrf
Daily CyberSecurity
MarkLogic Server Security Bulletin Patches 10 Vulnerabilities, With CVSS Scores Up to 9.9
TL;DR Progress released an August 2026 bulletin for MarkLogic Server. It fixes ten MarkLogic Server vulnerabilities, several rated critical. The worst carry a CVSS score of 9.9. Progress urges all…
⤷ Title: CVE-2026-64560: Linux Kernel CPU Timer Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 01:01:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #android #CPU timer #CVE_2026_64560 #Linux Kernel #Pixel #privilege escalation #use after free
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 01:01:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #android #CPU timer #CVE_2026_64560 #Linux Kernel #Pixel #privilege escalation #use after free
Daily CyberSecurity
CVE-2026-64560: Linux Kernel CPU Timer Use-After-Free Gives a Root Shell, PoC Exploit Code Publicly Disclosed
TL;DR A Linux kernel CPU timer flaw lets a local user reach root. Tracked as CVE-2026-64560, it scores 7.0 on CVSS. Researchers confirmed a root shell on a Pixel 10 Pro. The full details and proof…
⤷ Title: CVE-2026-66147: Unauthenticated Remote Code Execution Flaws Hit SonicWall GMS
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 00:45:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_66145 #CVE_2026_66147 #Remote Code Execution #SonicWall Email Security #SonicWall GMS
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 00:45:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_66145 #CVE_2026_66147 #Remote Code Execution #SonicWall Email Security #SonicWall GMS
Daily CyberSecurity
CVE-2026-66147: Unauthenticated Remote Code Execution Flaws Hit SonicWall GMS
TL;DR SonicWall disclosed critical flaws in its GMS and Email Security products on August 11, 2026. The most severe is a SonicWall GMS vulnerability, CVE-2026-66147, scoring CVSS 9.4. It allows un…
⤷ Title: Cisco ASA and FTD VPN Flaw CVE-2026-20349 Exploited in the Wild
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 00:36:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco ASA #Cisco FTD #CVE_2026_20349 #Denial of Service #exploited in the wild
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 00:36:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Cisco ASA #Cisco FTD #CVE_2026_20349 #Denial of Service #exploited in the wild
Daily CyberSecurity
Cisco ASA and FTD VPN Flaw CVE-2026-20349 Exploited in the Wild
TL;DR Cisco disclosed a Cisco ASA and FTD VPN vulnerability on August 11, 2026. Tracked as CVE-2026-20349 (CVSS 8.6), it lets an unauthenticated attacker crash the firewall remotely. Cisco confirm…