VulnCheck August 12, 2026 Release Notes

  • Package Intel Maven Coverage - Delivered Maven coverage expansion and made improvements to npm, Go, Composer and Cargo package ecosystem support
  • Canary Intel C2 Detection Fields - Delivered C2 detection fields (C2 location, C2 frequency, and source-IP frequency) in the vulncheck-canaries index to improve usability of C2 data
  • Canary Intel Coverage Expansion - Added SharePoint canary support and deployed canaries to South Korea, Japan and Malaysia
  • Target Intel Filtering Improvement - Added a “confirmed” parameter to the Target Intelligence endpoint that filters results to highest-confidence affected host/service/product matches
  • Improved Usability - Improved MCP output handling for Claude Code and expanded V4 advisory support coverage

Recent Initial Access activity

Zbtlink Router ENDLESSDOORS Implant Unauthenticated Root Code Execution was added on Aug, 4 and is found in 20 products.

View more detail on CVE-2026-66747

Ruby On Rails KindaRails2Shell Active Storage File Read To RCE was added on Aug, 5 and is found in 1 product.

View more detail on CVE-2026-66066

Aimy Captcha-Less Form Guard Joomla Plugin Unauthenticated PHP Object Injection to RCE was added on Jul, 26 and is found in 1 product.

View more detail on CVE-2026-65883

JetBrains TeamCity Agent Polling XStream Deserialization Unauthenticated RCE was added on Aug, 9 and is found in 1 product.

View more detail on CVE-2026-63077

Apache Kylin Async Query Command Execution was added on Aug, 10 and is found in 1 product.

View more detail on CVE-2026-62392

vBulletin runMaths Template Unauthenticated Remote Code Execution was added on Jul, 26 and is found in 1 product.

View more detail on CVE-2026-61511

Rejetto HFS Admin Log Viewer Stored XSS was added on Jul, 21 and is found in 1 product.

View more detail on CVE-2026-61501

Gitea Diffpatch Git Hook Remote Code Execution was added on Aug, 9 and is found in 1 product.

View more detail on CVE-2026-60004

VMware vCenter Server Syslog Directory Traversal Remote Code Execution was added on Aug, 3 and is found in 1 product.

View more detail on CVE-2026-59310

VMware vCenter Server Directory Service SASL SRP Authentication Bypass was added on Aug, 3 and is found in 1 product.

View more detail on CVE-2026-59309

Microsoft Windows Braille Narrator (BRLTTY/BrlAPI) Local Privilege Escalation was added on Jul, 22 and is found in 1 product.

View more detail on CVE-2026-58635

Balbooa Forms Joomla Extension Unauthenticated Arbitrary File Upload to RCE was added on Jul, 22 and is found in 1 product.

View more detail on CVE-2026-56291

Feast Registry gRPC Server Unsafe Deserialization to Unauthenticated RCE was added on Jul, 27 and is found in 1 product.

View more detail on CVE-2026-56121

Microsoft SharePoint Unauthenticated "_trust/default.aspx" Endpoint SecurityToken Cookie Deserialization RCE was added on Jul, 29 and is found in 1 product.

View more detail on CVE-2026-50522

iCagenda Joomla Extension Unauthenticated Arbitrary File Upload to RCE was added on Jul, 22 and is found in 1 product.

View more detail on CVE-2026-48939

Linux Kernel DirtyClone Shared Frag ESP Privilege Escalation was added on Jul, 28 and is found in 1 product.

View more detail on CVE-2026-43503

n8n Authenticated Workflow Expression SpreadElement Sandbox Escape RCE was added on Jul, 29 and is found in 1 product.

View more detail on CVE-2026-27577

Crawl4AI Docker API Unauthenticated Remote Code Execution via Hooks Parameter was added on Jul, 27 and is found in 1 product.

View more detail on CVE-2026-26216

Microsoft Windows SMB Server Kerberos Reflection Local Privilege Escalation was added on Aug, 2 and is found in 6 products.

View more detail on CVE-2026-26128

Cisco Firewall Management Center license.tmp Hardcoded Credentials was added on Aug, 11 and is found in 1 product.

View more detail on CVE-2026-20316

Fastjson 1.2.83 AutoType SSRF to RCE was added on Jul, 29 and is found in 1 product.

View more detail on CVE-2026-16723

Check Point SmartConsole Authentication Bypass for Security Management and Multi-Domain Security Management Servers was added on Jul, 28 and is found in 2 products.

View more detail on CVE-2026-16232

HT Contact Form Widget WordPress Plugin Unauthenticated Arbitrary File Upload to RCE was added on Jul, 21 and is found in 1 product.

View more detail on CVE-2025-7340

Windows Cloud Files Mini Filter Driver Placeholder Creation TOCTOU Elevation of Privilege was added on Jul, 29 and is found in 1 product.

View more detail on CVE-2025-55680

GutenKit WordPress Plugin Unauthenticated Arbitrary File Upload to RCE was added on Jul, 21 and is found in 1 product.

View more detail on CVE-2024-9234

Hunk Companion WordPress Plugin Unauthenticated Arbitrary Plugin Installation to RCE was added on Jul, 21 and is found in 1 product.

View more detail on CVE-2024-11972

Oracle E-Business Suite Unauthenticated Desktop Integrator File Upload was added on Jul, 22 and is found in 1 product.

View more detail on CVE-2022-21587