https://skopnix.com/news/CVE-2026-550-rapid7-analysis-microsoft-sharepoint-jwt-token-authenticatio skopnix en 2026-09-27T14:17:19.289Z Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040) https://skopnix.com/news/7a588a29884d-that-reddit-rumor-about-citrix-notifying-customers-to-take-n skopnix en 2026-09-26T22:14:57.000Z That Reddit rumor about Citrix notifying customers to take Netscaler servers offline because of actively exploited zero-days is apparently real: https://www. reddit.com/r/Citrix/co https://skopnix.com/news/06ab9a4d91a4-elementor-csrf-flaw-lets-attackers-take-over-sites-after-adm skopnix en 2026-09-26T09:55:22.000Z Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link https://skopnix.com/news/CVE-2026-352-shinyhunters-targets-education-sector-with-oracle-peoplesoft skopnix en 2026-09-26T00:52:11.045Z ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit https://skopnix.com/news/CVE-2026-574-ghsa-q986-4x7x-gx39-scbe-aethermoore-unauthenticated-aetherb skopnix en 2026-09-25T21:48:03.000Z GHSA-q986-4x7x-gx39: SCBE-AETHERMOORE Unauthenticated AetherBrowser Ops API Exposes Operator Email Digests https://skopnix.com/news/6073b2d64854-ghsa-vj8p-hp9x-gh47-mpp-vulnerable-to-gas-draining-with-low skopnix en 2026-09-25T21:47:36.000Z GHSA-vj8p-hp9x-gh47: mpp vulnerable to Gas Draining with low gas limit https://skopnix.com/news/CVE-2026-100-ghsa-wrvw-254r-wpmv-cliinvokespecializations-has-command-inj skopnix en 2026-09-25T21:41:48.000Z GHSA-wrvw-254r-wpmv: CliInvoke.Specializations has command injection in PowerShell and Cmd shell wrappers https://skopnix.com/news/CVE-2026-100-ghsa-j73w-8hfr-4gc9-cliinvoke-argument-injection-in-extensib skopnix en 2026-09-25T21:41:36.000Z GHSA-j73w-8hfr-4gc9: CliInvoke: Argument Injection in Extensibility Runner Factory https://skopnix.com/news/bdcdb2d24781-kiteworks-urges-6-hour-server-shutdown-over-potential-zero-d skopnix en 2026-09-25T21:41:07.000Z Kiteworks urges 6-hour server shutdown over potential zero-day attacks https://skopnix.com/news/ceecedb340d7-ghsa-62mm-xwmv-crhg-khoj-has-an-unauthenticated-path-travers skopnix en 2026-09-25T21:38:15.000Z GHSA-62mm-xwmv-crhg: khoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem https://skopnix.com/news/483bc5c8d70e-ghsa-29h2-jr22-frmh-openzeppelin-confidential-contracts-vest skopnix en 2026-09-25T19:31:08.000Z GHSA-29h2-jr22-frmh: OpenZeppelin Confidential Contracts `VestingWalletConfidential`: a malicious ERC-7984 token is able to extract https://skopnix.com/news/821a58d5ae59-ransomware-metaencryptor-ge-vernova-inc skopnix en 2026-09-25T19:01:27.889Z Ransomware: metaencryptor → GE Vernova Inc.