Desk · Vulnerability intelligence

Exploits

Zero-days, proof-of-concept activity, exploit chains, and emergency patch windows.

Articles: 32
Topics: 20
Page: 1 / 4

Three Cisco Nexus feature doors NGOAM, MPLS OAM, NX-API all lead to root, each CVSS 9.8, no exploitation known

Three Unauthenticated Root RCEs Hit Cisco Nexus 3000 and 9000: Check Which Feature Is On

Cisco's NGOAM, MPLS OAM and NX-API flaws on Nexus 3000/9000 all score CVSS 9.8. Each needs a feature enabled; here's how to check.

Oct 7 · 6 min

Splunk Enterprise search head clusters carry a critical unauthenticated RCE, CVE-2026-76268, CVSS 9.8

highExploits Cve 2026 76268

Splunk Enterprise search head clusters exposed to critical unauthenticated RCE in Patroni API (CVE-2026-76268)

Splunk patched CVE-2026-76268, a CVSS 9.8 unauthenticated RCE in the Patroni API on search head cluster members. Fixed in 10.4.3 and 10.2.7; no exploitation stated.

Oct 7 · 5 min

Data graphic: ThreatFrontier cover for the Atlassian Data Center pre-authentication file read, CVE-2026-21589, with a large "9.3" CVSS 4.0 Critical score, "8 products" affected and "None required" authentication.

criticalExploits Cve 2026 21589

Atlassian Patches Unauthenticated File Read CVE-2026-21589 Across Eight Data Center Products

Atlassian's CVSS 9.3 flaw lets anyone read files from eight Data Center products' web root without logging in. Fixed versions, mitigations and what to rotate.

Oct 7 · 7 min

CVSS 8.7 poster: Citrix NetScaler SAML flaw CVE-2026-88779 on CISA KEV

highExploits Cve 2026 88779

Citrix NetScaler SAML Memory Flaw CVE-2026-88779 Added to CISA KEV, and Last Month's Patch Does Not Cover It

CVE-2026-88779, a SAML-only memory overflow in Citrix NetScaler, is on CISA KEV with a 7 October deadline. September's patch doesn't cover it.

Oct 4 · 5 min

Data graphic: Next.js dev server MCP flaw CVE-2026-94486, rated CVSS 4.0 2.3 Low, with a FIXED stamp; fixed in Next.js 16.3.8, with no exploitation reported.

watchExploits Cve 2026 94486

Next.js Dev Server MCP Flaw CVE-2026-94486 Lets Malicious Sites Read Source Snippets and Logs

Next.js 16's next dev MCP endpoint skipped origin checks, letting a visited site read disk paths, source snippets, routes and logs. Low severity; fixed in 16.3.8.

Oct 2 · 5 min

$Data graphic: Windows Cross Device flaw CVE-2026-66804 hands out SYSTEM, scored CVSS 3.1 7.8 Important by Microsoft, with Exploitation More Likely and a working exploit public. The four-step path runs from creating a DLL under ProgramData\CrossDevice, to a fake IMarshal object naming a dangling CLSID, to the Shell Create Object Handler, to the DLL loading in dllhost.exe as SYSTEM.$

elevatedExploits Local Privilege Escalation

Windows Cross Device flaw gives local users SYSTEM, with a public PoC

Project Zero's Forshaw details CVE-2026-66804, an incomplete fix for the Dark Elevator bug. A working exploit is public; August 2026 updates fix it.

Oct 2 · 5 min

Data graphic: a CVSS 3.1 score of 10.0 Critical, Arista PSIRT for CVE-2026-93952 in Arista VeloCloud Orchestrator, exploited and on the CISA KEV list since 22 Sep. A 'No fix listed' stamp marks the 6.1.x and 7.0.x release trains, while only 5.2.x and 6.4.x are listed as fixed.

criticalExploits Cve 2026 93952

Arista VeloCloud Orchestrator Exploited at CVSS 10.0, With No Fix Listed for Two Release Trains

Arista confirms active exploitation of CVE-2026-93952 in on-prem VeloCloud Orchestrator. CISA added it to KEV, but 6.1.x and 7.0.x have no listed fix.

Oct 2 · 4 min

Data graphic: a giant '44 days' headed 'Adobe Commerce flaw hits KEV' counts the time from Adobe's 11 August patch to CISA's 24 September KEV listing of CVE-2026-71362, a CVSS 9.1 Critical authorization flaw that needs no authentication.

criticalExploits Cve 2026 71362

Adobe Commerce and Magento Authorization Flaw CVE-2026-71362 Now Exploited

CISA added Adobe's critical Commerce and Magento authorization bug to KEV 44 days after the August patch. Stores on July builds should patch and triage.

Oct 2 · 5 min