Beat

Trust & Security

Trust & Security

Cisco NX-API Carries an Unauthenticated Root RCE, and It Stays Off Until Automation Turns It On

CVE-2026-76471 hands any network attacker root on Nexus 3000 and 9000 switches the moment NX-API is enabled, and Cisco lists no workarounds. On UCS 6300 fabric interconnects the same bug rides an API that cannot be switched off, so a low-privileged login is the only gate left.

◆ Heath CallahanOct 9
Trust & Security

Cisco NX-OS NGOAM Carries Three Unauthenticated Root RCEs, and Cisco Lists No Workarounds

NGOAM exists to verify path health on Cisco Nexus switches. CVE-2026-76485 needs only that feature switched on to hand an unauthenticated attacker root, and Cisco's workaround section is one sentence: there are none.

◆ Heath CallahanOct 9
Trust & Security

SGLang LLM Serving Framework Has CVSS 9.8 Pickle Deserialization RCE That Persists Even When Pickle Is Disabled

The SGLANG_USE_PICKLE_IPC flag does not prevent exploitation. Second pickle RCE in LLM inference infrastructure in one week.

◆ Heath CallahanOct 9
Trust & Security

Tenable Identity Exposure SaaS Has CVSS 9.9 Command Injection That Hands Attackers SYSTEM on the Domain Controller

An authenticated low-privilege attacker can execute arbitrary commands as SYSTEM on the Primary Domain Controller Emulator through the AD Events Listener — and the fix requires more than a patch.

◆ Heath CallahanOct 9
Trust & Security

Cisco NX-OS Has Six Unauthenticated RCE CVEs Across Four Functional Planes in One Disclosure Cycle

Forwarding, management, diagnostic, and monitoring planes all carry CVSS 9.8 root-access flaws — a pattern that suggests architectural security debt, not isolated bugs.

◆ Heath CallahanOct 8
Trust & Security

Cisco Firewall Management Center Has Two CVSS 10.0 Unauthenticated RCEs — Interlock Ransomware Exploited One as Zero-Day

The system managing enterprise firewalls was compromised through unauthenticated root access months before patches were available. Interlock ransomware weaponized the Java deserialization flaw 36 days before Cisco knew about it.

◆ Heath CallahanOct 8
Trust & Security

LMCache CVE-2026-105192: Unpatched Critical RCE in the LLM KV Cache Layer

A CVSS 9.8 insecure deserialization flaw in the vLLM inference cache layer allows unauthenticated remote code execution — and no patch exists.

◆ Heath CallahanOct 8
Trust & Security

DB-GPT AI Agent Platform: Two Critical RCE CVEs at the Agent Data Access Layer

A directory traversal and a sandbox escape in the open-source agent-database bridge show how unauthenticated RCE at the orchestration layer cascades to every downstream integration.

◆ Heath CallahanOct 8
Trust & Security

Cisco Nexus 9000 Silicon One RCE: Default Ports Leave Data Center Backbone Open to Unauthenticated Root Access

CVE-2026-20212 lets any unauthenticated attacker achieve root code execution on enterprise data center switches through default TCP ports — the third Cisco infrastructure CVE at 9.8+ in recent weeks.

◆ Heath CallahanOct 7
Trust & Security

ClearPass Policy Manager Hit by 28 CVEs Including Unauthenticated RCE and Authentication Bypass — Enterprise NAC’s Trust-Through-Defaults Problem

Two CVSS 9.8 critical flaws — unauthenticated RCE and authentication bypass — in the platform that decides who gets on the enterprise network expose a systemic pattern: the NAC layer itself has 28 broken locks.

◆ Heath CallahanOct 7