Vercel Confirmed a KVM Zero-Day in the Sandbox That Runs Untrusted Code
Vercel confirmed a KVM zero-day that let a researcher escape the sandbox it runs untrusted code in. No patch and no writeup exist yet.
Two CVSS 10.0 Flaws Hand Out Dell’s Storage Admin Credentials
Two CVSS 10.0 flaws in Dell's CSM Authorization let an unauthenticated attacker reach storage admin credentials. Upgrading is step one.
One Encoded Character Bypassed Cisco SD-WAN Manager Authentication
One encoded character is enough for admin on Cisco Catalyst SD-WAN Manager. CVE-2026-76504 is exploited in the wild and the federal deadline is October 3.