Vulnerability analyst

Samir Haddad

Articles: 19
Desks: 2

Analyzes exploit development, patch windows, and disclosure timelines.

ExploitsPatch watchResearch

Coverage by Samir Haddad

NGINX Rift CVE-2026-42945 rewrite module vulnerability diagram

NGINX “Rift” Rewrite Module Flaw Confirmed as CVE-2026-42945

CVE-2026-42945 is now tracked as a heap-based buffer overflow in NGINX's rewrite module, affecting NGINX Open Source and NGINX Plus under specific rewrite-rule conditions.

May 15 · 4 min

Microsoft Exchange OWA CVE-2026-42897 zero-day mitigation diagram

highExploits Microsoft Exchange

Microsoft Confirms Exploited Exchange OWA Vulnerability as CVE-2026-42897

Microsoft has disclosed CVE-2026-42897, a high-severity Exchange Server Outlook Web Access vulnerability affecting on-premises deployments, with mitigation available while a permanent fix is pending.

May 15 · 4 min

Cisco SD-WAN zero-day CVE-2026-20182 authentication bypass poster

criticalExploits Network Security

Cisco Patches Critical SD-WAN Zero-Day Exploited by Sophisticated Threat Actor

Cisco patched CVE-2026-20182, a critical Catalyst SD-WAN Controller and Manager zero-day that can let remote attackers bypass authentication and manipulate SD-WAN fabric configuration.

May 15 · 5 min