Vulnerability

398 Articles

Claude Found 62 Chrome CVEs and a Zero-Click Linux RCE

Anthropic’s Claude model built five exploit chains in Chrome, Safari, Android, Windows and Linux, including zero-click root via CVE-2026-98432.

Security —— Oct 28, 2026 6 min read

GoAhead, the embedded web server behind the management pages of routers, printers, firewalls, and industrial controllers,…

Security —— Oct 27, 2026 6 min read

Sony is investigating a PSN Family Management flaw that let hackers add child accounts without 2FA.…

Security —— Oct 27, 2026 8 min read

ELLIO logs the first in-the-wild Node2Shell (CVE-2026-111497) attack — a 23 MB Brotli payload hitting stock…

Security —— Oct 24, 2026 3 min read

Okta patched CVE-2026-115547, a 9.1-rated Access Gateway Admin Console flaw that lets admins run system commands.…

Security —— Oct 23, 2026 5 min read

CVE-2026-109618: PHP2Shell affects all PAN-OS and Panorama versions with no fix yet. Threat IDs, scope and…

Security —— Oct 23, 2026 5 min read

Fortinet patched AI-found critical flaws in FortiOS 7.4.13, 7.6.8 and 8.0.2, plus FortiManager and FortiAnalyzer. CVEs…

Linux —— Oct 23, 2026 6 min read

Trend Micro’s ZDI posted two unpatched CVSS 9.0 Linux KSMBD flaws to public kernel lists. Who…

Security —— Oct 22, 2026 9 min read

PHP confirms CVE-2026-115560, a new RCE the PHP2Shell patch doesn’t fix — plus the 8.5.12 bypass…

Security —— Oct 22, 2026 4 min read

CVE-2026-94300 in BIND 9 lets attackers corrupt memory via GSS-TSIG replay, risking DNS crashes and RCE.…