mum: what impact did you have on the cybersecurity industry?

me: LOGOS

if you have SAML IDP enabled on Netscaler, you want to patch CVE-2026-8451 https://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451

This is already being exploited in the wild, one of my honeypots got MFA bypassed with it.

Edit: actually looking at it it looks like the honeypot got owned via a different vuln but you should probably patch this too.

Six NetScaler vulnerabilities allow denial of service, memory overreads, and an unauthenticated file read. Patch NetScaler ADC and Gateway now.

#NetScaler #NetScalerADC #NetScalerGateway #Citrix #CVE20268451 #DenialOfService #Vulnerability

https://securityonline.info/netscaler-vulnerabilities-cve-2026-8451/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-8451: Citrix NetScaler Vulnerability Leaks Memory  https://www.esecurityplanet.com/threats/cve-2026-8451-citrix-netscaler-vulnerability-leaks-memory/

A lot of offensive activities were identified targeting Citrix NetScaler ADC and NetScaler Gateway (CVE-2026-8451) https://vuldb.com/vuln/374866/cti

⚠️ CRITICAL: Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth

Critical unauthenticated RCE in Progress Kemp LoadMaster (CVE-2026-8037) allows attackers to execute arbitrary root commands via API input sanitization bypass. A public proof-of-concept exists. All LoadMaster instances are at risk unless patched immediately.

https://threatnoir.com/focus

#infosec #cybersecurity

No, the libssh2 vulnerability CVE-2026-55200 isn't end of the world.

1. You need to defeat ASLR to successfully exploit it. The PoC works only when you disable ASLR. In most realistic use cases you need additional off-band infoleak from the app using libssh2.
2. You also must somehow convince the victim to connect to your malicious server, OR compromise some existing server to perform the attack.

Calling this a "CRITICAL VULNERABILITY" is dumb.

📰 Critical Pre-Auth RCE Flaw in libssh2 Library Poses Widespread Risk

🚨 CRITICAL VULNERABILITY: A pre-auth RCE flaw (CVE-2026-55200, CVSS 9.8) in the widely used libssh2 library puts countless apps at risk. Malicious SSH servers can exploit clients. PoC is public. #CyberSecurity #Vulnerability #RCE #SupplyChain

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/critical-pre-auth-rce-flaw-cve-2026-55200-in-libssh2-library/?utm_source=mastodon&utm_medium=…

Oracle E-Business Suite Under Siege: Critical CVE-2026-46817 Exploited as Hundreds of Enterprise Systems Remain Exposed + Video

Introduction: A New Enterprise Security Crisis Is Unfolding Enterprise software is often trusted as the backbone of finance, procurement, and payment operations inside some of the world's largest organizations. That trust is now being challenged after security researchers confirmed active exploitation of a newly disclosed critical…

https://undercodenews.com/oracle-e-business-suite-under-siege-critical-cve-2026-46817-exploited-as-hundreds-of-enterprise-systems-remain-exposed-video/?utm_source=mastodon&utm_medium=jetpack_social

CRITICAL CVE-2026-46817 in Oracle E-Business Suite: Over 900 exposed instances face active exploit attempts via HTTP. Attackers can fully compromise systems. Apply May 2026 patch ASAP. Details: https://radar.offseq.com/threat/over-900-oracle-e-business-instances-exposed-to-on-032c4945a3a53de9 #OffSeq #Oracle #Vuln #ThreatIntel

‼️ One POST to RCE: Unauthenticated Code Execution in Langflow (CVE-2026-33017)

https://darkwebinformer.com/one-post-to-rce-unauthenticated-code-execution-in-langflow-cve-2026-33017/

🚨 Critical-severity security fix in @fastify/middie 9.3.3 just released!

Patches CVE-2026-14198. @fastify/middie vulnerable to authorization bypass via encoded slash in path parameter values.

https://github.com/fastify/middie/security/advisories/GHSA-2v46-jxjm-7q3v

Canonical says Ubuntu kernel updates are available for DirtyClone, a high-severity Linux local privilege escalation flaw tracked as CVE-2026-43503.
https://linuxiac.com/canonical-confirms-ubuntu-fixes-for-dirtyclone-linux-kernel-flaw/

#linux #ubuntu #security

Dissecting and Exploiting Linux LPE Variant: DirtyClone (CVE-2026-43503) - JFrog Security Research #devopsish https://research.jfrog.com/post/dissecting-and-exploiting-linux-lpe-variant-dirtyclone-cve-2026-43503/

CVE-2026-7838 - Critical RCE in UltraVNC viewer 1.8.2.2. Integer overflow causes heap buffer overflow in RFB failure-response parsing. CVSS 8.8. No patch available - disable or restrict access now. #CVE #UltraVNC #infosec

https://www.valtersit.com/cve/CVE-2026-7838/

⚠️ CRITICAL: BlueHammer Vulnerability Exploited in Ransomware Attacks

CVE-2026-33825 (BlueHammer) in Microsoft Defender is being actively exploited in ransomware campaigns in the wild. This zero-day was publicly disclosed before patches became available on April 14, and CISA has confirmed active abuse. All Windows environments running vulnerable Defender versions are…

https://threatnoir.com/focus

#infosec #cybersecurity

BlueHammer CVE-2026-33825: The Silent Windows Defender Flaw That Turned Into a Global Ransomware Weapon in the Wild + Video

A Hidden Vulnerability That Escaped the Lab and Entered Real Attacks BlueHammer, tracked as CVE-2026-33825, has rapidly evolved from a proof-of-concept security concern into an active ransomware weapon used in real-world cyberattacks. Confirmed by the US Cybersecurity and Infrastructure Security Agency (CISA), this flaw targets Microsoft Defender…

https://undercodenews.com/bluehammer-cve-2026-33825-the-silent-windows-defender-flaw-that-turned-into-a-global-ransomware-weapon-in-the-wild-video/?utm_source=mastodon&utm_medium=jetpack_social