Blog

Notes on security scanning, vulnerability management, and the free ScanSuite tools.

• Jellyfin CVE-2026-35032: SSRF & File Read Vulnerabilities — Learn about Jellyfin CVE-2026-35032 vulnerability combining SSRF and local file read risks. Discover detection methods and security strategies for media servers
• CVE-2026-34457: OAuth2 Proxy Auth Bypass Vulnerability — Critical authentication bypass vulnerability CVE-2026-34457 in OAuth2 Proxy (versions 7.4.0-7.6.2). Learn impact, mitigation strategies, and how to secure rever
• Jellyfin CVE-2026-35033: Unauthenticated File Read Vulnerabi — Critical Jellyfin vulnerability CVE-2026-35033 allows unauthenticated arbitrary file reads. Learn about this high-severity security flaw affecting self-hosted m
• CVE-2026-5281: Chrome Use-After-Free Vulnerability Analysis — Technical analysis of CVE-2026-5281, a critical use-after-free vulnerability in Google Chrome. Learn about exploitation, mitigation, and security implications.
• CVE-2026-35616: FortiClient EMS RCE Exploited — Critical unauthenticated RCE vulnerability in Fortinet FortiClient EMS (CVE-2026-35616) being actively exploited. Analysis, impact, and mitigation strategies.