Vulnerability Alert7 August 2026
ServiceNow AI Platform Flaw (CVE-2026-6875) Now Under Active Exploitation
A pre-authentication sandbox-escape bug in ServiceNow's AI Platform is being exploited in the wild via a second gadget chain, weeks after a patch and public disclosure.
servicenowcve-2026-6875rce
4 min readRead
Vulnerability Management20 July 2026
CVE-2026-14266: 7-Zip Heap Overflow in XZ Parsing Fixed in 26.02
A heap-based buffer overflow in 7-Zip's XZ decoder let a crafted archive corrupt memory on extraction. The fix landed quietly in June; ZDI's July 15 advisory is why you're hearing about it now.
7-zipcve-2026-14266xz
4 min readRead
Vulnerability Management18 July 2026
OpenSSL's HollowByte DoS Flaw Shipped With No CVE — Here's Why That Matters
An 11-byte TLS handshake header can lock up hundreds of megabytes of server memory before authentication even starts. OpenSSL fixed it in June 2026 without a CVE, an advisory, or a changelog entry.
openssldenial-of-servicevulnerability-management
4 min readRead