patching news, stories and analysis

Bar chart showing Check Point SmartConsole CVE-2026-16232 at CVSS 9.3 on the severity scale, above the critical threshold of 9.0 and near the maximum of 10.0

Check Point SmartConsole auth bypass gives attackers full admin

Check Point SmartConsole CVE-2026-16232 is a critical authentication bypass with a CVSS of 9.3, actively exploited and listed in CISA KEV. Patch your Security Management servers now.

Lars Cornelissen · Jul 23, 2026

wp2shell vulnerability affecting WordPress 6.9 and 7.0 with over 500 million sites potentially exposed, 5 vulnerable releases on 6.9.x and 2 on 7.0.x with full RCE chain

Cyber security

WordPress wp2shell RCE hits 500 million sites, patch now

wp2shell is a pre-authentication remote code execution chain in WordPress Core. Two CVEs let anonymous attackers run code on 6.9 and 7.0 sites with no plugins.

Lars Cornelissen · Jul 19, 2026

Abstract visualization of the Bad Epoll CVE-2026-46242 race condition in the Linux kernel epoll subsystem, showing overlapping execution threads colliding in a narrow six-instruction window that triggers a use-after-free granting root access on v6.4+ kernels including Android.

Cyber security

Bad Epoll kernel flaw CVE-2026-46242 roots Linux and Android

Bad Epoll (CVE-2026-46242) is a Linux epoll use-after-free giving unprivileged users root on v6.4+ kernels and Android. No workaround exists. Apply patch a6dc643c6931 now.

Lars Cornelissen · Jul 5, 2026

Splunk Enterprise flaw CVE-2026-20253 response timeline showing disclosure at day 0 on June 10, public technical writeup at day 2 on June 12, exploitation warning at day 8 on June 18, and the CISA remediation deadline at day 11 on June 21.

Cyber security

Splunk Enterprise flaw turns logs into attack surface

Splunk Enterprise flaw CVE-2026-20253 is under active exploitation. Patch by June 21 or disable the PostgreSQL sidecar safely.

Lars Cornelissen · Jun 20, 2026