CVE-2026-43503: DirtyClone Linux Kernel Vulnerability
A Linux kernel flaw known as DirtyClone that allows local privilege escalation when CAP_NET_ADMIN is set. It was among the vulnerabilities targeted…
Tag: privilege escalation
CVE-2026-43284: Dirty Frag Linux Kernel Vulnerability
A Linux kernel flaw in the Dirty Frag family that allows local privilege escalation when CAP_NET_ADMIN is set. It was among the…
CVE-2026-43500: Dirty Frag Linux Kernel Vulnerability
A Linux kernel flaw in the Dirty Frag family that allows local privilege escalation when CAP_NET_ADMIN is set. It was among the…
New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files
Security researcher Chaotic Eclipse (aka Nightmare-Eclipse and MSNightmare) has released a new Windows BitLocker bypass exploit named GreatXML, discovered accidentally while researching…
LiteLLM Vulnerability Chain Enables Full Server Takeover by Low-Privilege Users
A chain of three vulnerabilities in LiteLLM, a widely deployed open-source AI gateway, allows low-privilege users to escalate to full admin and…
CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities…
Cisco Patches Actively Exploited SD-WAN Manager Vulnerability CVE-2026-20262
Cisco has released security updates to address a medium-severity vulnerability in its Catalyst SD-WAN Manager (formerly SD-WAN vManage) that is being actively…
Microsoft Confirms RoguePlanet Defender Zero-Day, Patch in Development
Microsoft has formally disclosed a zero-day vulnerability in Microsoft Defender, codenamed RoguePlanet, and confirmed that a patch is in development. The flaw,…
CVE-2025-5777 (Citrix Bleed 2): Exploited for DragonForce Ransomware Deployment
CVE-2025-5777, known as Citrix Bleed 2, is being exploited by threat actors to deploy DragonForce ransomware. Attackers follow a consistent post-compromise pattern…
LiteLLM Privilege Escalation via User Update Endpoint
CVE-2026-47102 is a privilege escalation vulnerability in LiteLLM's /user/update endpoint, which does not restrict field updates, allowing users to self-promote to proxy_admin…