ModSecurity vulnerabilities CVE-2026-104269 and CVE-2026-73857 now have public details and a proof-of-concept. Upgrade to libmodsecurity 3.0.17. Related Posts: QNAP Warns NAS Users as Exploited Plex2Shell Vulnerabilities Hit Plex Media Server WP Duplicate Vulnerability CVE-2026-123751 Exploited in the Wild, No Patch Available PoC Published for Hugging Face Datasets RCE CVE-2026-57845 (CVSS 8.8) in Library With 38 Million Monthly Downloads The post ModSecurity Vulnerability Details and PoC Pub

ShinyHunters PeopleSoft attacks are back. A one-letter WAF bypass lets the group exploit CVE-2026-35273 and plant web shells on unpatched servers. Related Posts: Operation Master Turns GlobalProtect Breaches Into Brazilian Invoice Fraud Konni Launches Operation Conflict Compass Against Ukraine Kiteworks Mandates Global Precautionary Server Shutdown The post ShinyHunters Renews Oracle PeopleSoft Attacks With One-Character WAF Bypass appeared first on Daily CyberSecurity.