➕ +857 more threats tracked today.
Explore the full threat feed and mitigation details on ExploitGrid.
🔗 exploitgrid.net
Disclaimer: Informational, defensive security monitoring only.
[EXPLOIT] CVE-2024-10441 [CRITICAL/PoC]
CVSS: 9.8 | Vendor: #Synology
cve-2024-10441-synology-rce
🔗 exploitgrid.net/exploits/ed9…
[EXPLOIT] CVE-2021-44228 [CRITICAL/PoC]
CVSS: 10 | Vendor: #ApacheSoftwareFoundation
log4shell-audit-4
🔗 exploitgrid.net/exploits/890…
[EXPLOIT] CVE-2020-25213 [CRITICAL/PoC]
CVSS: 10
CEV-2020-25213_wp-file-manger_exploit
🔗 exploitgrid.net/exploits/4d0…
[EXPLOIT] CVE-2026-83548 [CRITICAL/PoC]
CVSS: 10 | Vendor: #sonicwall
CVE-2026-83548
🔗 exploitgrid.net/exploits/1d3…
[EXPLOIT] CVE-2024-45409 [CRITICAL/PoC]
CVSS: 10 | Vendor: #SAMLToolkits
CVE-2024-45409
🔗 exploitgrid.net/exploits/6dc…
ExploitGrid Daily Digest
🚨 Top Exploits:
CVE-2024-45409 (CVSS: 10) SAML-Toolkits
CVE-2026-83548 (CVSS: 10) sonicwall
CVE-2020-25213 (CVSS: 10)
CVE-2021-44228 (CVSS: 10) Apache Softw...
CVE-2024-10441 (CVSS: 9.8) Synology
..🧵👇
➕ +857 more threats tracked today.
Explore the full threat feed and mitigation details on ExploitGrid.
🔗 exploitgrid.net
Disclaimer: Informational, defensive security monitoring only.
[CVE] CVE-2026-115188 [HIGH PRIORITY]
CVSS: 9.9
🔗 exploitgrid.net/cve/CVE-2026…
[CVE] CVE-2026-110720 [HIGH PRIORITY]
CVSS: 9.9 | Vendor: #HashiCorp
#Consul-k8s vulnerable to a cross-namespace authorization bypass in component ...
🔗 exploitgrid.net/cve/CVE-2026…
[CVE] CVE-2026-102649 [HIGH PRIORITY]
CVSS: 9.9 | Vendor: #padokteam
#Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when w...
🔗 exploitgrid.net/cve/CVE-2026…
[CVE] CVE-2026-116508 [HIGH PRIORITY]
CVSS: 10 | Vendor: #totolink
#TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based ov...
🔗 exploitgrid.net/cve/CVE-2026…
[CVE] CVE-2026-115905 [HIGH PRIORITY]
CVSS: 10 | Vendor: #ziprs
#zip: Critical Parser Differential & Security Control Bypass via Dual-Header I...
🔗 exploitgrid.net/cve/CVE-2026…
ExploitGrid Daily Digest
🚨 Top CVEs:
CVE-2026-115905 (CVSS: 10) zip-rs
CVE-2026-116508 (CVSS: 10) totolink
CVE-2026-102649 (CVSS: 9.9) padok-team
CVE-2026-110720 (CVSS: 9.9) HashiCorp
CVE-2026-115188 (CVSS: 9.9)
..🧵👇
🚨 PHP2Shell update: Unit 42 retracted its link between the European agency attack and the exploit.
The agency ran a vulnerable PHP app, but initial access remains unconfirmed.
Attribution matters. A vulnerable system doesn't prove the exploit path.
🔎 exploitgrid.net
🚨 What happens when a Brotli decoder bug goes beyond a crash?
We reproduced the out-of-bounds write behind CVE-2026-111497 in Node.js and broke down the details in our latest research.
See how it works and why it matters.
🔎 exploitgrid.net/blogs/cve-20…
🚨 Linux KSMBD: the lower-severity flaw may be more urgent.
ZDI-CAN-33367 reportedly has a public root exploit confirmed on AlmaLinux, Debian and Ubuntu, with no merged patch or CVE.
Admins should review exposure and apply the stopgap.
🔎 exploitgrid.net
🚨 Tailscale SSH flaws could let a compromised, authorized device gain root on permitted servers.
This isn’t unauthenticated RCE. Researchers say the findings are lab-tested, with scope under review.
Review SSH policies and disable forwarding if unused.
🔎 exploitgrid.net
Replying to @Dinosn
Fascinating how many of these rely on workspace policies (AGENTS.md) and harness-level configs rather than raw user prompts. Agentic AI safety is moving way beyond simple chat framing.
