1dayexploit https://1dayexploit.com Technical deep-dives into recently disclosed CVEs. en Tue, 07 Jul 2026 21:02:19 GMT CVE-2026-48611: phpBB - Auth Bypass https://1dayexploit.com/blog/cve-2026-48611-phpbb-auth-bypass/ https://1dayexploit.com/blog/cve-2026-48611-phpbb-auth-bypass/ Tue, 07 Jul 2026 00:00:00 GMT CVE-2026-48611 is a critical auth bypass in phpBB 3.3.0-3.3.16 enabling account takeover without knowing the victim's password. Single unauthenticated HTTP request, CVSS 9.8. CVE-2026-48611 CVE-2026-42945: NGINX Heap Buffer Overflow https://1dayexploit.com/blog/cve-2026-42945-nginx-heap-buffer-overflow/ https://1dayexploit.com/blog/cve-2026-42945-nginx-heap-buffer-overflow/ Thu, 14 May 2026 00:00:00 GMT CVE-2026-42945: heap buffer overflow in NGINX 0.6.27-1.30.0. Malicious HTTP requests trigger script engine state mismatch, leading to DoS or RCE. CVE-2026-42945 CVE-2026-27960: OpenCTI Authentication Bypass via Hardcoded UUID https://1dayexploit.com/blog/cve-2026-27960-opencti-auth-bypass/ https://1dayexploit.com/blog/cve-2026-27960-opencti-auth-bypass/ Wed, 06 May 2026 00:00:00 GMT CVE-2026-27960 in OpenCTI - Authentication bypass via hardcoded admin UUID allows unauthenticated RCE-equivalent access. CVE-2026-27960 CVE-2026-7482 - Ollama Heap Out-of-Bounds Read https://1dayexploit.com/blog/cve-2026-7482-ollama-heap-oob-gguf/ https://1dayexploit.com/blog/cve-2026-7482-ollama-heap-oob-gguf/ Mon, 04 May 2026 00:00:00 GMT CVE-2026-7482: Ollama heap OOB read in GGUF loader leaks environment variables, API keys, and in-flight prompts. CVSS 9.1 CRITICAL. Affects < 0.17.1. CVE-2026-7482 Welcome to 1dayexploit https://1dayexploit.com/blog/welcome/ https://1dayexploit.com/blog/welcome/ Mon, 20 Apr 2026 00:00:00 GMT A cyber security research hub publishing technical deep-dives into recent CVEs and security advisories.