On June 23, 2026, NIST’s National Vulnerability Database published CVE-2026-48020, a route-level authentication and authorization bypass in Traefik, the cloud-native reverse proxy and ingress controller that fronts a huge slice of the modern web (and most Kubernetes cluste…
On June 7, 2026, three critical command injection vulnerabilities were published against the GL.iNet GL-MT3000 — better known as the Beryl AX, one of the most popular pocket-sized travel routers on the market. All three share a single devastating root cause: the rou…
A heap buffer overflow in MediaTek’s Wi-Fi Access Point driver lets any associated client on the same network corrupt kernel memory and execute arbitrary code on th…
A commented-out bounds check in the world’s most widely deployed embedded TCP/IP stack lets any unauthenticated attacker on the network overflow a 12-byte stack buffer with a single ma…
A deterministic logic bug in the Linux kernel’s crypto subsystem lets an unprivileged local user write 4 arbitrary bytes into the page cache of any readable file. No races, no retries, no ker…