Critical Apache HTTP/2 Flaw CVE-2026-119618 – 9.8 CVSS
A critical Apache HTTP/2 flaw lets unauthenticated attackers run code on servers, even ones patched in May. Learn how to confirm exposure and mitigate it.
Patching
Protect your business from risk. Explore Raxis blogs on outdated software and unpatched systems for expert tips from the Raxis penetration testing team.
SonicWall SMA1000 CVE-2026-102255: Why Patching Can’t Wait
CVE-2026-102255 is a CVSS 10.0 SSRF flaw in SonicWall SMA1000 appliances. Attempts began two days after disclosure. Learn why patch windows must shrink.
PHP2Shell and UpdraftCentral Keys: Two PHP Threats to Fix Now
Patch PHP2Shell (CVE-2026-109618, CVE-2026-109619) and remove stolen UpdraftCentral keys. Raxis explains how to check exposure and fix both PHP threats.
French Supermarket Hack: When OT Security Failures Reach the Food Supply
The French supermarket hack exploited unpatched, internet-facing Danfoss controllers. Learn why OT security gaps like this persist and how to close them.
We Went on a SharePoint Expedition, and Here’s What We Found
Of the nearly 30,000 public facing SharePoint portals we found, approximately 3,300 are self-hosted meaning they are vulnerable to the critical CVE-2026-50522.
wp2shell: Critical WordPress Unauthenticated to Remote Code Execution Vulnerability
It’s rare for WordPress itself to have CVEs. CVE-2026-63030 and CVE-2026-60137 combine to create the critical unauthenticated to RCE vulnerability wp2shell.
RoguePlanet: The Defender Zero-day that Survived Microsoft’s June Patch
The new critical Microsoft Defender exploit, RoguePlanet (CVE-2026-50656), is confirmed active in the wild. Learn what it is and how to protect your network.
Defense in Depth Against Linux Kernel Privilege Escalation: A Practical Guide for Container Workloads
With current local privilege escalation exploits like Copy Fail and Dirty Frag active in the wild, harden your defenses to halt attacks even before patching.
Critical Buffer Overflow Vulnerability in Palo Alto Networks PAN-OS Software
CVE-2026-0300 is a critical buffer overflow vulnerability in Palo Alto’s PAN-OS software. Discover if you are affected and what to do now.
Copy Fail – Local Linux Privilege Escalation in 4 lines
CVE-2026-31431, dubbed Copy Fail, allows privilege escalation to root on Linux distros missing the latest kernel patches. Learn what to do in this blog.
Smart Slider 3 Pro WordPress/Joomla Plugin Supply Chain Compromise
Last week’s supply chain attack caused many users of the WordPress and Joomla plugin Smart Slider 3 Pro to inadvertently patch to a malicious version.
BeyondTrust RCE Vulnerability Exploited: Critical 9.9 CVSS Flaw Under Active Attack
While BeyondTrust patched cloud-hosted Remote Support customers earlier this month, on-premises deployments of BeyondTrust must manually patch to remediate.
23 posts in Patching.