Development & Open Source
Software development and open source follows supply chain, dependencies, tooling, repositories and code security. The cluster highlights vulnerabilities, updates and useful practices for developers and maintainers.
Active WSO2 API Manager Exploit: JWT Bypass with Forged Admin Tokens
CVE-2026-5430, a critical vulnerability in the JWT component of WSO2 API Manager, is under active exploitation. Forged tokens with adm…
CVE-2026-46300 Fragnesia: Linux Kernel Bug Exposed on GKE Since May
Fragnesia exploits a flaw in skb_try_coalesce() to corrupt the page cache and gain root. Disclosed May 13, with public PoC and patch i…
Linux Kernel: usbnet Race Condition Enables Privilege Escalation via Physical USB
CVE-2025-22050 in the Linux kernel's usbnet driver allows a physically present attacker to escalate privileges. The race condition, fi…
BambooToken: Malware Framework Uses MQTT for C2 on Windows and Linux
Black Lotus Labs has identified BambooToken, a malware framework active since 2023 that adopts the MQTT protocol for command and contr…
CenterPoint Energy Confirms Data Breach: 7 Million Customers' PII at Risk
CenterPoint Energy filed an SEC Form 8-K on September 14, 2026, confirming a data breach in which an unauthorized actor accessed custo…
ZDI-26-687: Linux Kernel Open vSwitch Use-After-Free Disclosed September 14
Trend Micro's Zero Day Initiative released advisory ZDI-26-687 on September 14, 2026, detailing a use-after-free in the Linux kernel's…
Heap Overflow in Linux Kernel NTFS3 Journal: Discovery and Coordinated Patch
CVE-2026-72196, rated CVSS 8.4 HIGH, lets a local attacker with low-privileged code execute arbitrary code in the kernel during mount…
CVE-2026-89688: Linux Kernel RCE, a Patch Written with Help from Claude
Trend Micro's Zero Day Initiative disclosed ZDI-26-695, a critical remote code execution flaw in the Linux kernel's NFSv4 server with…
Elastic Framework Detects Linux LPE: From CVE-Specific to Behavior-Oriented
Elastic Security Labs has released a detection engineering framework for Linux local privilege escalation that shifts from reactive pe…
PAPPL Raster Bug Enables Unauthenticated Remote Code Execution on Linux Print Servers
ZDI-26-656 discloses a heap buffer overflow in PAPPL that allows unauthenticated remote code execution when allow_remote=true. The fla…
GIMP: RCE Flaw in PSP Files Discovered, Update Available
The CVE-2026-4153 vulnerability in GIMP's PSP file parsing allows arbitrary code execution via an integer overflow. The CVSS 7.8 ratin…
Flowise: Critical RCE in CSV Agent, Component Removed from Codebase
CVE-2026-70477 with CVSS 9.8 in Flowise's CSV_Agent component: unauthenticated prompt injection leads to remote code execution. The ve…