Exploit intelligence researcher

Theo Martin

Articles: 12
Desks: 2

Tracks vulnerability exploitation, patch urgency, and attacker tradecraft.

exploitspatch-watchvulnerability-intelligence

Coverage by Theo Martin

Data graphic: Snort 3 at the centre of Cisco's products, with Meraki MX and cloud services auto-patched and Secure Firewall Threat Defense, Cyber Vision and IOS XE UTD needing upgrades

Cisco Rates Its Snort 3 Fixes 9.0: Secure Firewall, Meraki MX and IOS XE UTD Need Updates

Cisco patched four Snort 3 CVE groups, two scored 9.0. Cloud and online Meraki MX are fixed; FTD, Cyber Vision and IOS XE UTD need upgrades.

Oct 27 · 3 min

Data graphic: A charcoal poster reading 'Any local shell becomes root', with a huge 'root' for any unprivileged shell on an unpatched host. Two Metasploit modules 9 Oct 2026 cover DirtyClone, CVE-2026-43503 in the Linux kernel, CVSS 8.8, and snap-confine, CVE-2026-3888 in Ubuntu snapd, CVSS 7.8. No exploitation in the wild is reported.

highExploits Linux Kernel Vulnerability

DirtyClone and snap-confine exploits land in Metasploit: any local shell becomes root on unpatched Linux and Ubuntu

Metasploit now ships modules for DirtyClone (CVE-2026-43503, Linux kernel) and CVE-2026-3888 (Ubuntu snapd). Any local shell on an unpatched host can reach root.

Oct 18 · 4 min

Data graphic: Dot plot of SAP's October 2026 Patch Day notes by CVSS, axis starting at 7.0. NetWeaver Visual Composer CVE-2026-89110 ties S/4HANA rules CVE-2026-89107 at 9.9, ahead of MII 9.1, Commerce Cloud SQLi 8.8 and ICM / Web Dispatcher 7.5. Patch Visual Composer first with SAP Note 3797111; it needs a low-privilege login, unlike the unauthenticated 2025 flaw, and no exploitation is reported.

highExploits SAP NetWeaver

SAP Patch Day: another critical 9.9 in NetWeaver Visual Composer, the component behind the 2025 zero-day attacks

SAP's October 2026 Patch Day fixes a 9.9 access-control flaw in NetWeaver Visual Composer (CVE-2026-89110), plus 9.9 S/4HANA and 9.1 MII criticals.

Oct 18 · 4 min

Data graphic: A dot plot of six Cisco NX-OS CVEs by CVSS score, found in Cisco's internal testing that combined existing processes with frontier AI models. CVE-2026-76455 and CVE-2026-76459 score 9.8, each the highest in its weakness class; CVE-2026-76453 scores 8.8, and CVE-2026-76456, CVE-2026-76457 and CVE-2026-76458 score 8.6. Cisco lists no workarounds and reports no known exploitation.

highExploits Cisco

Cisco fixes six NX-OS flaws found with the help of frontier AI, two rated 9.8

Cisco's October NX-OS hardening release fixes six CVEs across Nexus, MDS, ACI and UCS, two scored 9.8. AI-assisted testing found them; there is no workaround.

Oct 18 · 4 min

Data graphic: PAN-OS CVE-2026-0322 root remote code execution, CVSS 4.0 High 8.6, stamped Exploited, on CISA KEV with a due date of 2026-10-17. No workaround is known.

highExploits Cve 2026 0322

PAN-OS CVE-2026-0322: Root RCE on Firewalls Now on CISA KEV

Palo Alto says CVE-2026-0322, an authenticated root RCE in the PAN-OS management interface, is under limited attack. CISA's KEV deadline is 17 October.

Oct 14 · 6 min

Data graphic: poster headed "Free AI floor plan generators, compared", with the line "Editable plans are common; built-in code checks are not". Large figures say three of four rivals give an editable plan and none of the four lists a building-code check, beside Maket's 30 one-time free credits, Coohom's three free projects and Planner 5D's $19.99-a-month AI recognition.

stableResearch Floorgen

AI Floor Plan Generator Free Tiers Compared: Editable Plans and Code Checks

Maket, Planner 5D, Coohom and Felo checked on free limits, editable output, exports and code checks, plus a hands-on run of FloorGen's generator.

Oct 14 · 8 min

Data graphic: dumbbell chart of Gemini 3.8 output prices per 1M audio tokens, Flash TTS $9.00 to $18.00 and Flash-Lite TTS $6.00 to $12.00, when intro rates end on December 31, 2026.

watchResearch Google Gemini

Gemini 3.8 TTS Pricing Doubles on Jan 1, 2027: What Voice-App Builders Should Budget

Gemini 3.8 Flash TTS and Flash-Lite TTS launched at intro rates that double on January 1, 2027. What voice apps pay now, and what to budget.

Oct 2 · 3 min

Data graphic: a SharePoint vulnerability, CVE-2026-65660, shown as a struck-out 6.5 'medium spoofing' August score beside a large red 8.8 CVSS 3.1 code-injection rating; the update was released 11 Aug and the flaw was added to CISA's Known Exploited Vulnerabilities list on 25 Sep.

highExploits Cve 2026 65660

Microsoft SharePoint CVE-2026-65660 Added to CISA KEV After Rescore to RCE

CISA added SharePoint code injection flaw CVE-2026-65660 to KEV on 25 Sep. Previdian says it was rescored from 6.5 spoofing to 8.8 RCE and saw attack attempts.

Oct 2 · 5 min