CVE-2026-103577High· 7.5▾ TwilightInsecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-109828Medium· 4.3A vulnerability was found in libsndfile up to 1.2.2
CVE-2025-61926NoneAllstar is a GitHub App to set and enforce security policies
GHSA-hc6q-4vvg-jf79Critical· 8.6Duplicate Advisory: vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts
CVE-2026-92950High· 8.6vm2 before 3.11.7 contains a sandbox escape vulnerability in the CLI tool that allows attackers to execute arbitrary code in the host Node.js process
CVE-2026-19212Medium· 4.3A vulnerability was determined in WonderTrader up to 0.9.9