Social Media Ideas for Cve-2026-104935

Latest updates for Cve-2026-104935

Fresh curated links around CVE-2026-104935 are collected here so marketers can spot useful updates and turn timely ideas into posts faster.

Post angles to try

Share the most useful takeaway for your audience.

Turn one article into a quick practical checklist.

Ask your audience how this shift affects their work.

Turn angles into scheduled posts

Fresh articles and ideas

Recent curated links from global sources. Generate one free draft from any story, then use SocialBu to schedule and refine your content calendar.

rubysec.com /1 month ago

CVE-2026-88030 (mongo): MongoDB Ruby Driver - Improper neutralization of special elements in data query logic in the Gri...

Originally appeared on RubySec.Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied struct...

Read source

rubysec.com /1 month ago

CVE-2026-85396 (rubyzip): path traversal vulnerability in pre-3.4.0 rubyzip gem

Originally appeared on RubySec.rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entry#extract that fails to properly validate extraction paths using pre...

Read source

pkguild.com /2 days ago

PHP2Shell (CVE-2026-109618/19): Broadcom & VMware Impact & Mitigation

&#x1F4A5; The Situation <p>On October 21, 2026, the PHP project released emergency patches to address two critical remote code execution</p>

Read source

gbhackers.com /1 week ago

Ivanti Connect Secure CVE-2026-104935 Flaw Enables Unauthenticated Remote Code Execution

Ivanti released security updates for Ivanti Connect Secure (ICS) to address CVE-2026-104935, a high-severity authentication-bypass vulnerability. This vulnerability allows remote,...

Read source

dev.to /1 month ago

The Wider Adobe Patch Wave Behind CVE-2026-75650

The Wider Adobe Patch Wave Behind CVE-2026-75650 CVE-2026-75650 is the entry in CERT-In's CIVN-2026-0458 that demands immediate action, but it is not the only vulnerability in th...

Read source

rubysec.com /2 weeks ago

CVE-2026-107715 (mechanize): Mechanize sends credential headers to another host after an HTTP redirect

Originally appeared on RubySec.## Summary `mechanize` leaked credentials to the redirect target when an HTTP redirect crossed to another host. Credentials set through `Mechanize#r...

Read source

jscrambler.com /2 days ago

Security Notice: PHP2Shell (CVE-2026-109618 and CVE-2026-109619)

On 21 October 2026, the PHP project released emergency security updates for two critical vulnerabilities in the PHP interpreter, known together as “PHP2Shell.” Both are rated 9.2 (...

Read source

rubysec.com /1 month ago

CVE-2026-80213 (resolv): CVE-2026-80213 - Hostname validation bypass

Originally appeared on RubySec.An application that checks a hostname against an allow list or an SSRF filter and then resolves it can be made to look up a domain other than the one...

Read source

dev.to /3 days ago

PHP2Shell: Turning a Session Upload-Progress UAF into Unauthenticated RCE (CVE-2026-109618 / CVE-2026-109619)

I published PHP2Shell, a proof-of-concept for two critical PHP vulnerabilities — CVE-2026-109618 and CVE-2026-109619 — that enable a heap use-after-free in session.upload_progress...

Read source

rubysec.com /2 weeks ago

CVE-2026-107399 (mechanize): Mechanize sends credential headers to another origin after a meta refresh

Originally appeared on RubySec.## Summary `mechanize` applied no trust boundary to a `meta` refresh, so credentials set through `Mechanize#request_headers=` followed a refresh tha...

Read source

ubuntu.com /3 days ago

php2shell (CVE-2026-109618 and CVE-2026-109619) – PHP critical vulnerability fixes available

Introduction Two critical security vulnerabilities affecting PHP have been identified that result in unauthenticated remote code execution (RCE) for any PHP application. The vulner...

Read source

dev.to /1 month ago

CVE-2026-81963: Why a Windows Update Stack Flaw Matters More Than Its 7.8 Score

CVE-2026-81963: Why a Windows Update Stack Flaw Matters More Than Its 7.8 Score Microsoft's September 2026 Patch Tuesday fixed 974 CVEs, the largest monthly release the company h...

Read source

dev.to /1 month ago

CVE-2026-16723: Pre-Auth RCE in Fastjson 1.x via the @JSONType Trust Branch

Overview CVE ID CVE-2026-16723 Affected Fastjson 1.2.68 – 1.2.83 (every 1.x release still receiving use) Preconditions Spring Boot executable fat-JAR, safeMode disab...

Read source

ruby-lang.org /1 month ago

Security advisories: CVE-2026-80212 and CVE-2026-80213

Originally appeared on Ruby News.Two vulnerabilities have been discovered in the resolv gem bundled with Ruby. They have been assigned the CVE identifiers CVE-2026-80212 and CVE-20...

Read source

thehackernews.com /3 weeks ago

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway that has come under active exploitation...

Read source

rubysec.com /2 weeks ago

GHSA-3553-vcg5-72jw (dalli): Unbounded decompression and reply sizes allow memory exhaustion

Originally appeared on RubySec.1. Values flagged as compressed were inflated with no size limit. A ~130 KB stored item expands to 128 MB on read (about 1000:1), regardless of...

Read source

dev.to /1 month ago

When the Payment-Failure Email Is the Exploit: Inside the Magento Template Rendering Chain of CVE-2026-75650

When the Payment-Failure Email Is the Exploit: Inside the Magento Template Rendering Chain of CVE-2026-75650 Opening CVE-2026-75650 is an unauthenticated remote code e...

Read source

cybersecuritynews.com /2 weeks ago

PoC Released for Critical LMCache Flaw Enabling Unauthenticated Remote Code Execution

A proof-of-concept (PoC) exploit has been released for a critical vulnerability in LMCache that can allow unauthenticated remote code execution on exposed distributed deployments....

Read source

rubysec.com /1 month ago

CVE-2026-80212 (resolv): CVE-2026-80212 - Memory exhaustion through malicious DNS responses

Originally appeared on RubySec.An application that resolves a hostname an attacker can influence, such as a webhook target or a user-supplied URL, can be made to consume memory wit...

Read source

forrester.com /2 days ago

PHP2Shell Leak Sends Security Teams Scrambling

At 14:00 UTC on October 21, PHP released patches to two critical CVEs, both of which can lead to remote code execution. CVE-2026-109618 addresses an RCE through an out-of-memory er...

Read source

ubuntu.com /1 week ago

Fixes available for CVE-2026-92392 and other curl vulnerabilities

Introduction On 7 October 2026, Daniel Stenberg published a blog post describing a plan to release a new version of curl on 14 October 2026 in order to address 22 known security vu...

Read source

rubysec.com /1 month ago

CVE-2026-81097 (rails-mcp-server): The execute_ruby tool is documented as a read-only Ruby sandbox

Originally appeared on RubySec.The execute_ruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spaw...

Read source

gbhackers.com /1 week ago

SonicWall Fixes 4 SMA 1000 Vulnerabilities, Including Critical CVSS 10.0 SSRF Flaw

SonicWall released security updates to address four vulnerabilities in its SMA 1000 series appliances, including a critical server-side request forgery (SSRF) flaw rated 10.0. Thes...

Read source

rubysec.com /2 weeks ago

GHSA-wr87-m4jw-29x5 (dalli): Per-request raw and the JSON serializer don't prevent unsafe deserialization

Originally appeared on RubySec.1. Per-request `raw: true` was ignored by some read methods, which still ran the configured serializer's `load` (Marshal by default) on values...

Read source

Turn fresh research into a full content calendar

Use SocialBu to discover ideas, generate post drafts, and schedule them across your social channels.