Common Vulnerabilities and Exposures entries, vulnerability analysis, and CVE-specific coverage.
homelab
CVE-2026-65400 is a pre-auth root in macOS Screen Sharing's screensharingd, actively exploited and rescored 7.1 to 9.8. The patch is out, but the forgotten 5900 forward is the exposure: patch the Mac, verify nothing else can reach port 5900, and if it can, treat the box as compromised.
Self-Hosting
Copy Fail (CVE-2026-31431) lets any local user write 4 bytes into the page cache of any readable file, and one 732-byte script turns that into root. Container isolation never touched the page cache: rootless Podman stops the root, not the poisoned binary your other containers execute.
Threat Intel
Executive summary A pair of high-severity flaws in TrueConf Server lets an unauthenticated attacker take over the server and replace every client installer it distributes — a one-box supply-chain compromise. Both CVEs were added to CISA's Known Exploited Vulnerabilities catalog on 2026-08-20 with enforcement
Threat Intel
Self-hosted Metabase, version x.58.0 through x.63.4, has an unauthenticated SQL injection in POST /api/session/reset_password that writes straight into the application database (the one holding accounts, connections, and settings, not your warehouse). An attacker who reaches that endpoint gets admin of the instance
cve
CVE-2026-18577: N-able N-central Auth Bypass with Incomplete Patch and Cloudflare Tunnel Persistence Executive Summary CVE-2026-18577 is a critical authentication-bypass vulnerability in N-able N-central, the flagship Remote Monitoring and Management (RMM) platform. The flaw is an incomplete patch for CVE-2026-18556.
cve
A deep-dive on CVE-2026-53359 Januscape: KVM x86 shadow MMU use-after-free enabling guest-to-host escape when nested virtualization is exposed. Includes Proxmox impact, attack chain, and hardening steps for homelab and enterprise operators.
cve
CVE-2026-11405 — undocumented authentication backdoor in Tenda firmware granting admin access with a hidden password. No patch available since CERT/CC disclosure on July 6, 2026.
microsoft
Technical Advisory & Lab Note: SharePoint Server Deserialization RCEs, Machine-Key Theft, and Post-Exploitation Persistence 1. Executive Summary A coordinated threat-actor campaign is exploiting multiple critical vulnerabilities in Microsoft SharePoint Server on-premises to achieve unauthenticated or low-privilege remote code execution, deploy web shells, steal IIS ASP.
Threat Intel
URGENT: CVE-2025-53770/53771 ToolShell exploit chain under active exploitation since July 17, 2025. If you run on-prem SharePoint Server, you are vulnerable to unauthenticated RCE.