CVE-2026-119977HIGH
WordPress Core race condition in the upgrade window
A time-of-check time-of-use race condition in the WordPress Core updater lets an unauthenticated attacker execute code while a full core upgrade is running.
Updated 2026-11-11
Index
All dossiers
Every published dossier and chain dossier. Filter by exploitation status or vendor.
Dossiers
CVE-2026-102764CRITICAL
BeyondTrust Remote Support authentication bypass (CVE-2026-102764) exploited as zero-day
Unauthenticated file operations on BeyondTrust Remote Support up to 26.2.3, exploited since 2026-08 by suspected PRC-nexus actor ARMORY CASTLE.
Updated 2026-11-11
CVE-2026-76418HIGH
Cisco ASA and FTD SSL VPN denial of service (CVE-2026-76418) exploited in the wild
Unauthenticated crafted SSL VPN request reloads Cisco ASA/FTD when secondary authentication is set on a tunnel group; exploited since 2026-10.
Updated 2026-11-11
CVE-2026-110447CRITICAL
Collabora Online Built-in CODE Server (richdocumentscode) OS command injection in proxy.php
Unauthenticated OS command injection in the Nextcloud Built-in CODE Server app, exploited since 2026-09-10 to drop PHP web shells.
Updated 2026-11-11
CVE-2026-19868HIGH
SonicWall SonicOS SSLVPN SAML authentication and MFA bypass
SonicOS SSLVPN flaw lets users with alternate-method credentials bypass SAML and SAML-enforced MFA; exploited, fixed in 7.3.4-7013 / 8.2.3-8015.
Updated 2026-11-11
CVE-2026-46300HIGH
CVE-2026-46300 "Fragnesia": Linux kernel page-cache write LPE chained with PHP2Shell on PAN-OS
Linux kernel LPE in the XFRM ESP-in-TCP path lets local users write into the page cache; exploited with PHP2Shell to root PAN-OS firewalls.
Updated 2026-11-11
CVE-2026-88779HIGH
CVE-2026-88779: NetScaler ADC and Gateway SAML memory overflow exploited for denial of service
Unauthenticated memory overflow in NetScaler SAML SP/IdP processing crashes nsaaad and reboots appliances; exploited as a zero-day before 2026-10-03.
Updated 2026-11-11
CVE-2026-48356CRITICAL
PolyShell: Adobe Commerce / Magento unrestricted file upload (CVE-2026-48356)
Unauthenticated polyglot file upload via the Magento guest-cart REST API leads to webshells; mass-exploited since 2026-03 and added to CISA KEV on 2026-10-27.
Updated 2026-11-09
CVE-2026-118539CRITICAL
Drupal Commerce Core access bypass (CVE-2026-118539) exploited to place fraudulent orders
Unauthenticated access bypass in Drupal Commerce Core (SA-CONTRIB-2026-254) exploited for fraudulent orders; fixed in 3.3.13 and 8.x-2.41.
Updated 2026-11-09
CVE-2026-59822HIGH
BerriAI LiteLLM MCP authentication bypass (CVE-2026-59822) in CISA KEV
LiteLLM before 1.84.0 lets any fabricated Bearer token open an MCP session; exploited per CISA KEV, fix 1.84.0, rotate gateway secrets.
Updated 2026-11-09
CVE-2026-97229CRITICAL
CVE-2026-97229: GitLab CE/EE CI/CD regex integer overflow leading to remote code execution
Integer overflow in Ruby's Onigmo regex engine lets crafted GitLab CI/CD regexes run code on the server. CVSS 10.0, public PoC, in CISA KEV.
Updated 2026-11-09
CVE-2026-111497CRITICAL
Node2Shell / HTTP2Shell / Broccoli2Shell: Brotli decoder out-of-bounds write (CVE-2026-111497)
Out-of-bounds write in Google's Brotli decoder lets crafted compressed data crash, leak memory or run code in Node.js and other Brotli users; in CISA KEV.
Updated 2026-11-09
Chain dossiers
CVE-2026-104935, CVE-2026-111357, CVE-2026-118527HIGH
Ivanti Connect Secure exploitation chain (CVE-2026-104935, CVE-2026-111357, CVE-2026-118527)
UTA0576 chains three Ivanti Connect Secure zero-days for unauthenticated root on VPN appliances, then steals AD credentials. All three in CISA KEV.
Updated 2026-11-09
CVE-2026-109619, CVE-2026-109618CRITICAL
PHP2Shell: unauthenticated RCE in PHP web SAPIs (CVE-2026-109618, CVE-2026-109619)
Two critical PHP request-handling bugs allow unauthenticated RCE; in KEV and exploited against PAN-OS management interfaces, chained with Fragnesia for root.
Updated 2026-11-09