DEV Community

Diego Diaz profile picture

Diego Diaz

Systems Engineering student building Sable & AEGIS. Cybersecurity, pentesting & AI enthusiast. Coding from Dominican Republic 🇩🇴

Joined Joined on  Personal website https://sable.somoswilab.com/
Google Pixel Modem Zero‑Day (CVE‑2026‑58704) Actively Exploited and Patched
alejandxr profile

Google Pixel Modem Zero‑Day (CVE‑2026‑58704) Actively Exploited and Patched

#cve202658704 #android #zeroday #pixel
5
Comments
2 min read
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
alejandxr profile

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

#magento #zeroday #ecommerce #security
Comments
2 min read
Next.js Patches Critical AVIF and Windows Path Traversal Flaws Enabling Unauthenticated RCE
alejandxr profile

Next.js Patches Critical AVIF and Windows Path Traversal Flaws Enabling Unauthenticated RCE

#nextjs #rce #avif #windows
Comments
2 min read
Mirage2FA Phishing-as-a-Service Hijacks Microsoft 365 Sessions at Scale
alejandxr profile

Mirage2FA Phishing-as-a-Service Hijacks Microsoft 365 Sessions at Scale

#mirage2fa #microsoft365 #phishing #sessionhijacking
Comments
3 min read
Active Oracle WebLogic Flaw Exposes Critical Data – CVE‑2026‑21962
alejandxr profile

Active Oracle WebLogic Flaw Exposes Critical Data – CVE‑2026‑21962

#oracleweblogic #cve202621962 #criticalvulnerability #unauthenticatedrce
Comments
2 min read
Critical GitLab GraphQL Flaw (CVE‑2026‑19478) Enables Remote Deletion of Public Projects
alejandxr profile

Critical GitLab GraphQL Flaw (CVE‑2026‑19478) Enables Remote Deletion of Public Projects

#gitlab #cve202619478 #graphql #security
Comments
3 min read
Microsoft Entra ID Flaw (CVE-2026-69836) Exploited in the Wild – Critical Remote Code Execution
alejandxr profile

Microsoft Entra ID Flaw (CVE-2026-69836) Exploited in the Wild – Critical Remote Code Execution

#microsoft #entraid #cve202669836
Comments
1 min read
Critical MLflow SSRF Vulnerability (CVE-2026-64849) Enables Massive Cloud Credential Theft
alejandxr profile

Critical MLflow SSRF Vulnerability (CVE-2026-64849) Enables Massive Cloud Credential Theft

#mlflow #ssrf #cloudcredentials #cve202664849
Comments
3 min read
Critical GitLab GraphQL Flaw (CVE-2026-19478) Allows Unauthenticated Deletion of Public Projects
alejandxr profile

Critical GitLab GraphQL Flaw (CVE-2026-19478) Allows Unauthenticated Deletion of Public Projects

#cve202619478 #gitlab #graphql #security
Comments
3 min read
Critical SharePoint JWT Authentication Bypass CVE-2026-55040 Exploited in the Wild
alejandxr profile

Critical SharePoint JWT Authentication Bypass CVE-2026-55040 Exploited in the Wild

#sharepoint #cve202655040 #authenticationbypass #jwt
Comments
2 min read
Cisco ASA and FTD Remote DoS Flaw Actively Exploited
alejandxr profile

Cisco ASA and FTD Remote DoS Flaw Actively Exploited

#cisco #asa #ftd #dos
Comments
2 min read
CISA Flags Langflow, Tomcat, and N-central Flaws as Actively Exploited (CVE‑2026‑9198, CVE‑2026‑34486, CVE‑2026‑18556)
alejandxr profile

CISA Flags Langflow, Tomcat, and N-central Flaws as Actively Exploited (CVE‑2026‑9198, CVE‑2026‑34486, CVE‑2026‑18556)

#cve20269198 #cve202634486 #cve202618556 #langflow
Comments
3 min read
Critical RCE in Hugging Face LeRobot (CVE‑2026‑25874) Exposes Robotics Infrastructure
alejandxr profile

Critical RCE in Hugging Face LeRobot (CVE‑2026‑25874) Exposes Robotics Infrastructure

#cve202625874 #huggingface #lerobot #rce
Comments
2 min read
N-able N-central Authentication Bypass Exploited: Active Attacks on MSPs
alejandxr profile
Diego Diaz