[CVE] CVE SPOTLIGHT

CVE-2026-59822 CVSS 9.0 Patch Now BerriAI LiteLLM
BerriAI LiteLLM contains an improper authentication vulnerability in the MCP Streamable HTTP endpoint that could allow an unauthenticated attacker to establish an authenticated MCP session using an arbitrary Bearer token.
CISA KEV
CVE-2026-48710 CVSS 9.0 Patch Now Kludex Starlette
Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE-2026-42271.
CISA KEV
CVE-2026-49869 CVSS 9.0 Patch Now Kestra Kestra OSS
Kestra OSS contains an OS command injection vulnerability that could allow an unauthenticated remote attacker to create and execute arbitrary workflows without credentials.
CISA KEV
CVE-2026-82329 CVSS 9.0 Patch Now JFrog Artifactory
JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges.
CISA KEV
CVE-2026-9586 CVSS 9.0 Patch Now Sangoma Switchvox
Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution.
CISA KEV

[0x01] 🚨 CRITICAL VULNERABILITIES & ACTIVE EXPLOITATION

[0x02] CYBERSECURITY VIDEOS

🔬 Exploit POC
ShieldBreak (CVE-2026-69414): How Microsoft Defender Becomes the Exploit
Byte-Sized Breakdown ↗
🎤 Conference Talk
Teaching Hardware Hacking at Black Hat & DEF CON (Vlog)
LiveOverflow ↗
🎯 CTF Solve
A06: Broken Recovery Walkthrough | OWASP Web Security Lab | ThunderCipher CTF
ThunderCipher ↗
🐛 Bug Walkthrough
I Built 4 AI Agents to Do My Bug Bounty Recon (Ottermind AI)
Medusa ↗
🦠 Malware Analysis
🦅 **EagleSpy V4 Android RAT | Full Malware Analysis, Features, Risks & Detection**
Cyber Tech TOOLS ↗
📰 News
Undetected Steam Malware: Sent by Viewer
PC Security Channel ↗

[0x04] BUG BOUNTY HIGHLIGHTS

[0x05] EXPLOIT-DB FRESH DROPS

[0x06] UPCOMING CTFs

Jeopardy Weight: 25.0
NNS CTF 2026
Sep 4, 16:00 UTC 2 days
CTFTime ↗ Register ↗
Jeopardy Weight: 77.1
TFC CTF 2026
Sep 5, 10:00 UTC 1 days
CTFTime ↗ Register ↗
Jeopardy Weight: 0.0
SUNCTF 2026
Sep 6, 00:00 UTC 9 hours
CTFTime ↗ Register ↗
Jeopardy Weight: 24.8
K17 CTF 2026
Sep 11, 10:00 UTC 2 days
CTFTime ↗ Register ↗
Jeopardy Weight: 0.0
CAT CTF 26
Sep 11, 12:00 UTC 1 days
CTFTime ↗ Register ↗

[0x07] SECURITY PODCASTS

Darknet Diaries
179: The Courthouse - Revisited
01:35:02
Listen ↗
Risky Business
Risky Business #851 -- Agents are just ones and zeros, and tigers are just atoms
3518
Listen ↗
Security Now
SN 1094: AI Patching Shortcomings - Should You Trust AI-Generated Code?
2:51:59
Listen ↗
SANS Internet Storm Center
SANS Stormcast Thursday, September 3rd, 2026: SMA1000 0-Day Patch; SSRF Validation Issues; Faronics Abuse
5:38
Listen ↗

[0xff] ARCHIVE

Keyboard Shortcuts

Focus search/
Next articlej
Previous articlek
Open article linkEnter
Toggle TL;DR modet
Toggle themed
Listen to briefinga
Close overlayEsc
Show shortcuts?