Common Vulnerabilities and Exposures entries, vulnerability analysis, and CVE-specific coverage.
cve
A deep-dive on CVE-2026-53359 Januscape: KVM x86 shadow MMU use-after-free enabling guest-to-host escape when nested virtualization is exposed. Includes Proxmox impact, attack chain, and hardening steps for homelab and enterprise operators.
cve
CVE-2026-11405 — undocumented authentication backdoor in Tenda firmware granting admin access with a hidden password. No patch available since CERT/CC disclosure on July 6, 2026.
microsoft
Technical Advisory & Lab Note: SharePoint Server Deserialization RCEs, Machine-Key Theft, and Post-Exploitation Persistence Date: 2026-07-23 Audience: On-premises SharePoint administrators (enterprise operators and homelab/self-hosted deployments) Format: Publishable document — combined advisory + lab-note Word Count: ~4,800 Status: Draft for review 1. Executive Summary
Threat Intel
URGENT: CVE-2025-53770/53771 ToolShell exploit chain under active exploitation since July 17, 2025. If you run on-prem SharePoint Server, you are vulnerable to unauthenticated RCE.