InfoSecMonkey: No fluff. Just the config that works.

Category Archives: CVE

GitLab CVE-2026-97229: Patch, Verify and Hunt the CI Regex RCE
12 November, 2026

GitLab CVE-2026-97229: Patch, Verify and Hunt the CI Regex RCE

GitLab CVE-2026-97229 is a CVSS 10 RCE now in CISA KEV. Find the build that really fixes it, apply stopgaps, and hunt for exploitation.

Read More
Outlook CVE-2026-124194: Patch the Zero-Day That Leaks NTLM Hashes
11 November, 2026

Outlook CVE-2026-124194: Patch the Zero-Day That Leaks NTLM Hashes

Outlook CVE-2026-124194 leaks NTLMv2 hashes from one opened .msg file. Check fixed builds, force the Office update, and block SMB egress on FortiGate.

Read More
CVE-2026-98432 Mitigation on FortiGate: Blocking the Linux Kernel TCP Use-After-Free (FG-IR-26-188)
10 November, 2026

CVE-2026-98432 Mitigation on FortiGate: Blocking the Linux Kernel TCP Use-After-Free (FG-IR-26-188)

CVE-2026-98432 mitigation for FortiGate and Linux: drop IPv4 options in the NPU, apply the FMWP virtual patch, and block the TCP trigger until you...

Read More
Fortinet PSIRT Countermeasures: Pre-Auth Bugs Trusted Hosts Won’t Stop
10 November, 2026

Fortinet PSIRT Countermeasures: Pre-Auth Bugs Trusted Hosts Won’t Stop

Fortinet PSIRT countermeasures for pre-auth FortiGate, FortiManager and FortiAnalyzer bugs on FGFM, OFTP, OSPF and HA that trusted hosts can't stop.

Read More
Meraki CVE-2026-76463: Find and Patch Every Affected Device
10 November, 2026

Meraki CVE-2026-76463: Find and Patch Every Affected Device

Meraki CVE-2026-76463 explained: what the 8.8 access control bundle covers, how to inventory firmware with the API, and which releases fix it.

Read More
Chrome CVE-2026-11660: New Tab Page Sandbox Escape, Verify and Enforce the Patch
10 November, 2026

Chrome CVE-2026-11660: New Tab Page Sandbox Escape, Verify and Enforce the Patch

Chrome CVE-2026-11660 is a New Tab Page sandbox escape. Verify fixed Chrome and Edge builds and force relaunch on Windows, macOS and Linux.

Read More
eMudhra Certificate Compromise: What Broke and How to Clean Up Your Trust Stores
10 November, 2026

eMudhra Certificate Compromise: What Broke and How to Clean Up Your Trust Stores

The eMudhra certificate compromise explained: what broke, which clients are still exposed, and how to patch Linux, runtimes, endpoints and FortiGate.

Read More
CVE-2026-19868: SonicWall SAML MFA Bypass on SSLVPN, Patch and Hunt Guide
10 November, 2026

CVE-2026-19868: SonicWall SAML MFA Bypass on SSLVPN, Patch and Hunt Guide

SonicWall SAML MFA bypass CVE-2026-19868 is exploited. Check exposure, patch SonicOS, and hunt SSLVPN logins that skipped your IdP.

Read More
OpenSSH *sshole (CVE-2026-123158): Find, Patch and Lock Down Alpine sshd
10 November, 2026

OpenSSH *sshole (CVE-2026-123158): Find, Patch and Lock Down Alpine sshd

OpenSSH *sshole (CVE-2026-123158) lets a long password unlock Alpine accounts. Check exposure, patch sshd, disable passwords and hunt logs.

Read More
CVE-2026-97631: EDK2 PXE ICMP Overflow Turns Network Boot into Pre-Boot RCE
7 November, 2026

CVE-2026-97631: EDK2 PXE ICMP Overflow Turns Network Boot into Pre-Boot RCE

CVE-2026-97631 EDK2 PXE ICMP overflow runs attacker code in UEFI before the OS loads. Find exposed hosts, patch firmware, and contain it on FortiGate.

Read More
Microsoft Paint CVE-2026-83844: The RCE Fix Windows Update Will Never Install
6 November, 2026

Microsoft Paint CVE-2026-83844: The RCE Fix Windows Update Will Never Install

Paint CVE-2026-83844 is fixed only through the Microsoft Store. Check your Paint build, unblock Store updates and push 11.2609.401.0 fleetwide.

Read More
SonicWall GMS Vulnerability CVE-2026-109593: Unpatched, End of Life, and What to Do Now
5 November, 2026

SonicWall GMS Vulnerability CVE-2026-109593: Unpatched, End of Life, and What to Do Now

SonicWall GMS vulnerability CVE-2026-109593 will never be patched. Find exposed GMS servers, lock them down with a FortiGate, and migrate to NSM.

Read More
APT CVE-2026-109518: How a Download Retry Lets an Attacker Swap a Verified Package for Root
5 November, 2026

APT CVE-2026-109518: How a Download Retry Lets an Attacker Swap a Verified Package for Root

APT CVE-2026-109518 lets an on-path attacker swap a verified package for root. Check exposure, patch with retries off and move apt to HTTPS.

Read More
Chrome CVE-2026-106378: Patching the macOS Sandbox Escape
1 November, 2026

Chrome CVE-2026-106378: Patching the macOS Sandbox Escape

Chrome CVE-2026-106378 is a macOS sandbox escape. Check versions, force a relaunch with policy, and gate unpatched Macs with FortiClient EMS.

Read More
CVE-2026-41709: The VMware ESXi Logging Bypass Zero-Day Warp Panda Used to Go Dark – Now on KEV
30 October, 2026

CVE-2026-41709: The VMware ESXi Logging Bypass Zero-Day Warp Panda Used to Go Dark – Now on KEV

CVE-2026-41709 is an ESXi logging bypass Warp Panda used as a zero-day. Get the fixed builds, syslog forwarding, hardening and FortiGate logging.

Read More
PHP2Shell Explained: How CVE-2026-109618 and CVE-2026-109619 Turn an Out-of-Memory Error into a Shell
29 October, 2026

PHP2Shell Explained: How CVE-2026-109618 and CVE-2026-109619 Turn an Out-of-Memory Error into a Shell

PHP2Shell CVE-2026-109618 explained: how an OOM bailout becomes pre-auth RCE, how to verify the patch, and how to hunt for compromise.

Read More
CVE-2026-0322 PAN-OS Management Interface RCE: Patch, Lock Down, Hunt
26 October, 2026

CVE-2026-0322 PAN-OS Management Interface RCE: Patch, Lock Down, Hunt

CVE-2026-0322 PAN-OS lets an admin login become root. Patch to a fixed build, lock management to a jump box, and hunt for prior exploitation.

Read More
PHP2Shell (CVE-2026-109618, CVE-2026-109619): Mitigating the PHP RCE with Fortinet
24 October, 2026

PHP2Shell (CVE-2026-109618, CVE-2026-109619): Mitigating the PHP RCE with Fortinet

PHP2Shell Fortinet mitigation for CVE-2026-109618 and 109619: patch PHP, then block exploits with FortiGate IPS, FortiWeb signatures and egress rules.

Read More