SecPod Labs
Security Research
In-depth CVE write-ups, vulnerability analysis, and security intelligence from the SecPod Research team.
CVE Research
Zero-Click AI Exploit: ShadowPrompt in Claude Chrome Extension
A significant vulnerability has been discovered in Anthropic’s Claude Google Chrome Extension, potentially allowing malicious actors to inject prompts into the AI assistant without any user interaction. This “zero-click” vulnerability, dubbed ShadowPrompt, could have allowed attackers to silently co...
CVE Research
Interlock’s Early Access: Cisco FMC Vulnerability Exploited Before Disclosure
Interlock group has been observed exploiting the critical vulnerability CVE-2026-20131 (CVSS 10.0) in Cisco Secure Firewall Management Center (FMC) since January 26, 2026, prior to its public disclosure. This vulnerability, caused by insecure Java deserialization in the FMC web interface, enables un...
CVE Research
Microsoft Issues Out-of-Band Security Update for Windows 11 RRAS Vulnerabilities
Microsoft has deployed an emergency out-of-band update (KB5084597) to fix critical vulnerabilities in the Windows Routing and Remote Access Service (RRAS). The patch applies to Windows 11 Enterprise environments utilizing hotpatch functionality. If left unpatched, these issues could be exploited to ...
CVE Research
CVE-2026-33017: Critical Langflow Vulnerability Exploited Within 20 Hours of Disclosure
The discovery of CVE-2026-33017 reveals a critical remote code execution vulnerability in Langflow that is being actively exploited in the wild within 20 hours of public disclosure. Successful exploitation could allow unauthenticated attackers to execute arbitrary code on affected servers, potential...
CVE Research
Immediate Action Required: Critical NetScaler Vulnerability Exposes Sensitive Memory Data
Citrix has released a security advisory addressing two vulnerabilities in NetScaler ADC and NetScaler Gateway, including a critical vulnerability tracked as CVE-2026-3055 (CVSS score: 9.3) and a high-severity vulnerability tracked as CVE-2026-4368 (CVSS score: 7.7).
CVE Research
UNC1069 and the Axios npm Attack: Google Reveals North Korean Attribution
Cybercriminal and nation-state threat actors are increasingly shifting toward developer-ecosystem compromise and software supply chain abuse as a reliable avenue for mass access. Rather than exploiting hardened enterprise perimeters directly, these actors target trusted package repositories, build p...
CVE Research
FortiClient EMS Under Fire: Critical CVE-2026-21643 Exploited in Real-World Attacks
A critical SQL injection vulnerability, CVE-2026-21643, has been identified in FortiClient Endpoint Management Server (EMS), a centralized management platform for FortiClient endpoint agents across multiple environments.
CVE Research
Node.js Security Bulletin: CVE-2026-21637 and Other Fixes Explained
The Node.js project has recently released a series of security updates to address multiple vulnerabilities across its active release lines. These updates span versions 20.x, 22.x, 24.x, and 25.x, and include fixes for issues ranging from high to low severity. Among the most critical is CVE-2026-2163...
CVE Research
Oracle Identity Manager Under Threat: Analyzing CVE-2026-21992 Remote Code Execution Flaw
A critical vulnerability, tracked as CVE-2026-21992, has been identified in Oracle Identity Manager (OIM) and Oracle Web Services Manager (OWSM). This flaw enables unauthenticated remote code execution (RCE), posing a severe risk to organizations that rely on these platforms for identity and access ...