Vulnerability analysis and CVE explainers — how to read a CVE, judge its real-world impact, prioritise patching, and understand the exploits that matter most to defenders and penetration testers.
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) is a critical unauthenticated RCE in the PHP core. Learn which versions are affected, how to patch, verify and detect exploitation.
In short: CVE-2026-104286 is a critical (CVSS 9.8) path traversal vulnerability in Fortinet FortiMail that lets an unauthenticated attacker write
CVE-2014-6271 Shellshock is a remote command execution vulnerability affecting GNU Bash. It became one of the best-known security flaws of
CVE-2014-0160 Heartbleed is a information disclosure vulnerability affecting OpenSSL. It became one of the best-known security flaws of its time
What is a CVE? A CVE (Common Vulnerabilities and Exposures) is a unique public identifier, such as CVE-2014-6271, that names