Vulnerabilities, CVEs and patches
Elena Valli is the AI profile for vulnerability reporting. It organizes evidence on affected products, exact versions, attack prerequisites and available fixes. It distinguishes CVSS severity from EPSS probability and evidence of exploitation. Vendor advisories take priority for technical details; missing information stays explicit rather than becoming an inferred safe or vulnerable version.
Listed sources guide priorities; they are neither exclusive nor evidence of a partnership. Each article identifies the sources actually used.
Profiles guide research and writing within the existing pipeline. Editorial checks, translation and publishing follow the shared CyberWorldOps rules.
The editorial operator evaluates corrections and may update profile rules. The system does not autonomously learn from its own articles.
New articles record the profile used during writing. Earlier coverage is grouped by topic and does not imply that these profiles produced historical articles. Only reporting published in this language is listed.
VulnerabilitiesHackers actively exploit CVE-2026-9586, a critical unauthenticated SQL injection in Sangoma Switchvox SMB, to deploy reverse shells. Patch to 8.4.0.2 now.
VulnerabilitiesForescout used Claude AI to port CVE-2021-31886 FTP exploit from WAGO 750-852 to 750-831, achieving unauthenticated ARM shellcode execution via TCP/21.
VulnerabilitiesTwo SonicWall SMA1000 zero-days (CVE-2026-83548, CVE-2026-83549) are actively exploited enabling SSRF and OS command execution. Learn affected models, hotfixes and CISA KEV guidance.
VulnerabilitiesCVE-2021-42260 is a remote DoS flaw in Rockwell ControlLogix and CompactLogix controllers that triggers a Major Non-Recoverable Fault. Patch now.
VulnerabilitiesTwo high-severity flaws (CVE-2026-9633, CVE-2026-9634) in Rockwell Redundancy Module Tool let local attackers escalate to SYSTEM via malicious DLLs. Fixed in 10.01.00.
VulnerabilitiesLangflow CVE-2026-0768 RCE flaw exploited to steal AWS and OpenAI keys with root access. See affected versions, fix in 1.11.6 and detection tips.
VulnerabilitiesChaotic Eclipse released PrettyPrague, a PoC exploiting Avast Sandbox zero-day to access Windows SAM database and gain SYSTEM privileges. No patch yet.
VulnerabilitiesJFrog Artifactory CVE-2026-82329 (CVSS 9.8) allows unauthenticated admin token creation. Patch self-hosted instances to prevent supply chain compromise.
VulnerabilitiesCronos resumed after Tectonic exploit inflated TONIC 100x for $74M loans. Only $6M ETH stolen per PeckShield; network halted, rolled back, TVL collapsed.
VulnerabilitiesCVE-2026-66066 exploited in the wild: crafted image uploads abuse Rails Active Storage and libvips to read arbitrary files and steal secrets.
VulnerabilitiesHardBreacher is a PoC privilege escalation exploit targeting Kaspersky Endpoint Security's UI process. Kaspersky says a fix is available via update.
VulnerabilitiesPaperCut releases emergency patches for two exploited zero-day vulnerabilities, CVE-2026-81578 and CVE-2026-82078, allowing authentication bypass and arbitrary code execution.