Scroll through security news for even a week and you’ll see the same three letters again and again: RCE. It’s attached to some of the most severe vulnerabilities ever disclosed — critical flaws in web servers, VPN appliances, AI tools, and enterprise software that get patched immediately because leaving them open is treated as an … Read more
On July 3, 2026, a Linux kernel vulnerability nicknamed “Bad Epoll” became public: CVE-2026-46242, a use-after-free bug in the kernel’s eventpoll subsystem — the same epoll mechanism that powers the event loops behind Redis, Nginx, and Node.js, as explained in our companion guide, What Is epoll?. The bug is a local privilege escalation vulnerability, rated CVSS 3.1 7.8 (High), meaning it … Read more
Introduction On June 23, 2026, security researchers at Calif Security Research published their analysis of CVE-2026-47729 — a heap buffer overread vulnerability in Squid Proxy that had been present in the codebase since a commit in January 1997. They named it Squidbleed. The vulnerability is real, the affected deployment surface is large, and the discovery … Read more