The Flaws Big Enough to Get a Name
What each one is, whether you're affected, and how to fix it.
OpenSSH · 5 Nov 2026
SSHole
An OpenSSH flaw that lets attackers log in with any long password on musl-based Linux without PAM, such as Alpine. Being exploited. Who's affected and how to fix it.
Brotli (Node.js, .NET, Python) · 21 Oct 2026
Node2Shell
A flaw in Google's Brotli decoder, used by Node.js, .NET and Python, that can let an attacker run code. Being exploited. Who's affected and how to fix it.
PHP · 20 Oct 2026
PHP2Shell
Two PHP flaws that let an attacker run code on a web server without logging in. Being exploited. Here's how to tell if your PHP is affected and how to fix it.
Magento / Adobe Commerce · 7 Sep 2026
StyleSmuggler
A maximum-severity Adobe Commerce and Magento flaw that let attackers take over stores without logging in. How to patch and check for backdoors.
Linux kernel · 13 May 2026
Fragnesia
A Linux kernel flaw that lets a local user or a hacked web app become root. Disclosed in May, now on CISA's exploited list. How to check your kernel and fix it.
Hear About the Next One First
Pick your software. Hear straight away when something is exploited.