D
Oct 5, 2026Drupal Contributed Modules: 36 CVEs in One September 2026 Advisory Batch
Technical analysis of contributed Drupal module vulnerabilities published in CERT-BUND advisory WID-SEC-2026-3554.
Oct 5, 20262 min read0 reactions0 comments
Back to articles
Tag archive
#vulnerability
S
Oct 5, 2026Session Hijacking as a Beachhead: CVE-2026-102489 and the Zammad Root Chain
Session Hijacking as a Beachhead: CVE-2026-102489 and the Zammad Root Chain
Oct 5, 20262 min read0 reactions0 comments
A
Oct 5, 2026Assessing Real-World Risk From CVE-2026-78249 Without Overstating It
Assessing Real-World Risk From CVE-2026-78249 Without Overstating It
Oct 5, 20262 min read0 reactions0 comments
L
Oct 4, 2026Lateral Movement Across Zimbra Clusters via CVE-2026-73570
Shared SSH trust between Zimbra nodes let CVE-2026-73570 attackers spread from one mailbox server to the cluster.
Oct 4, 20262 min read0 reactions0 comments
D
Oct 4, 2026Detection engineering for CVE-2026-100382: hunting the External Data web shell
Detection guidance for finding External Data web shells before and after patching
Oct 4, 20263 min read0 reactions0 comments
W
Oct 4, 2026When an Agent Reaches Root: The Zammad Attack and Machine-Speed Intrusion
When an Agent Reaches Root: The Zammad Attack and Machine-Speed Intrusion
Oct 4, 20262 min read0 reactions0 comments
A
Oct 4, 2026Apache ZooKeeper Authorization Bypass: How deleteContainer Skips Session and ACL Checks
Technical analysis of Apache ZooKeeper vulnerabilities fixed in 3.8.7 and 3.9.6.
Oct 4, 20262 min read0 reactions0 comments
C
Oct 5, 2026Citrix patches NetScaler SAML zero-day exploited in attacks
Citrix has released urgent security updates for NetScaler ADC and Gateway to address a zero-day...
Oct 5, 20261 min read0 reactions0 comments
C
Oct 4, 2026Cross-Site Scripting in Drupal Extensions: The Quiet Half of WID-SEC-2026-3554
Cross-Site Scripting in Drupal Extensions: The Quiet Half of WID-SEC-2026-3554 Advisory...
Oct 4, 20262 min read1 reactions0 comments
W
Oct 4, 2026What the CISA KEV Listing for CVE-2026-104286 Tells Defenders
Reading the KEV addition for CVE-2026-104286 as a signal about urgency, evidence standards and federal remediation timelines.
Oct 4, 20262 min read0 reactions0 comments
A
Oct 4, 2026A patch plan for CVE-2026-88773 that accounts for FIPS, NDcPP and hybrid deployments
Independent technical analysis of CVE-2026-88773 in Citrix NetScaler ADC and Gateway.
Oct 4, 20262 min read0 reactions0 comments
F
Oct 4, 2026Finding Affected Check Point VPN Deployments: Version Scope and ZoomEye Exposure for CVE-2026-85102
Finding Affected Check Point VPN Deployments: Version Scope and ZoomEye Exposure for...
Oct 4, 20263 min read0 reactions0 comments