773 PoCs | 119 CISA KEV

tag

Microsoft

Microsoft SCCM — AdminService CAB Extraction Path-Traversal to SYSTEM RCE (CVE-2026-47301)

CVE-2026-47301 network Unverified

CVE-2026-47301networkCRITICAL 9.8Unverified2026-08-15Windows Kerberos — ResetNightmare: Arbitrary Password Reset via Change Password Protocol Validation Flaw (CVE-2026-27912)

CVE-2026-27912 network Unverified

CVE-2026-27912networkHIGH 8Unverified2026-08-11Windows Defender — ShieldBreak: RoguePlanet (CVE-2026-50656) Patch Bypass via Cloud Files Rehydration + Object Manager Symlinks EPSS 11%

Bypass of CVE-2026-50656 (RoguePlanet); no CVE assigned to ShieldBreak as of 2026-08-11 binary Unpatched

Bypass of CVE-2026-50656binaryHIGH 7.8Unpatched2026-08-11Active Directory — SPN Unicode Collision Detection Scanner (CVE-2026-25177)

CVE-2026-25177 network Patched

CVE-2026-25177networkHIGH 8.8Patched2026-08-11Microsoft SharePoint Server WS-Federation SecurityContextToken Deserialization → Unauthenticated RCE (CVE-2026-50522) KEV EPSS 85%

CVE-2026-50522 web Patched

CVE-2026-50522webCRITICAL 9.8Patched2026-07-27