HTB Blog

War Room: PHP Core “PHP2Shell” RCE (CVE-2026-109618 / CVE-2026-109619)

TRX — Thu, 22 Oct 2026 10:59:37 GMT

War Room: CVE-2026-4480, when a Samba print job name is a shell command

TheCyberGeek — Fri, 05 Jun 2026 04:00:00 GMT

What is CVE-2026-4480?
Which Samba versions are affected?
What makes it dangerous
How attackers weaponize it
Detection and threat hunting
Recommended mitigations
Want to try it yourself?
Final thoughts

War Room: Linux Kernel "Copy Fail" LPE (CVE-2026-31431) Exploit Analysis and Defense Strategy

Sophie — Mon, 11 May 2026 04:00:00 GMT

General Information on the Vulnerability
Real Case Scenario: From Disclosure to Active Exploitation
Why is it Important/Business-Critical?
Immediate Action Required
Final thoughts

The Notebook You Trust Could Be Reading Your Secrets

g0blin — Tue, 28 Apr 2026 04:00:00 GMT

File read via embedded images
File write via attachment names
Why this matters
Practical takeaways
Closing thoughts
Disclosure timeline

War Room: CVE-2026-27944 & CVE-2026-3888

pho3o — Mon, 23 Mar 2026 04:00:00 GMT

TL;DR
CVE-2026-27944 — Unauthenticated Backup Disclosure in Nginx-UI
CVE-2026-3888 — Local Privilege Escalation in Snap (snapd)
Snapped - Machine
Final Thoughts

Federal judiciary cyber breach: How SolarWinds and Legacy Systems left US courts exposed

Howard Poston — Fri, 30 Jan 2026 05:00:00 GMT

The US federal judiciary has suffered multiple hacks targeting its Case Management/Electronic Case Files (CM/ECF) and Public Access to Court Electronic Records (PACER) systems in recent years.

Ni8mare fuel: Chaining n8n CVEs for full compromise in automated workflows

b3rt0ll0, diskordia — Wed, 28 Jan 2026 05:00:00 GMT

Any modern security team today loves a bit of automation—almost as much as attackers do. Tools like n8n promise to glue systems together, orchestrate workflows, and make everything faster, smoother, and more scalable. Unfortunately, as history keeps reminding us, complex automation platforms also come with complex attack surfaces.

War Room: CVE-2025-14847—Mongobleed explained

diskordia — Wed, 07 Jan 2026 05:00:00 GMT

Some vulnerabilities arrive quietly, get patched quietly, and disappear quietly. But it looks like CVE-2025-14847 did not get that particular memo.

Eek, a GodRAT: A step-by-step breakdown of a financial sector attack

diskordia — Thu, 18 Dec 2025 05:00:00 GMT

There’s something almost-romantic about cybercriminals dragging old malware into the present. Just as Hollywood keeps rebooting 90s movies (for better or worse), threat actors are rebooting RATs like it’s the Black Death out there.

CVE-2025-55182—The React2Shell vulnerability you need to patch right now

diskordia — Wed, 10 Dec 2025 05:00:00 GMT

When a vulnerability hits CVSS 10.0, it calls for more than a routine advisory. Enter, CVE-2025-55182, now widely referred to as React2Shell, the most severe vulnerability to hit the React ecosystem in years. In short, it enables unauthenticated remote code execution across millions of production environments built on React Server Components (RSC) and Next.js App Router.

HTB Blog

War Room: PHP Core “PHP2Shell” RCE (CVE-2026-109618 / CVE-2026-109619)

War Room: CVE-2026-4480, when a Samba print job name is a shell command

Table of Contents

War Room: Linux Kernel "Copy Fail" LPE (CVE-2026-31431) Exploit Analysis and Defense Strategy

Table of Contents

The Notebook You Trust Could Be Reading Your Secrets

Table of Contents

War Room: CVE-2026-27944 & CVE-2026-3888

Table of Contents

Federal judiciary cyber breach: How SolarWinds and Legacy Systems left US courts exposed

Ni8mare fuel: Chaining n8n CVEs for full compromise in automated workflows

War Room: CVE-2025-14847—Mongobleed explained

Eek, a GodRAT: A step-by-step breakdown of a financial sector attack

CVE-2025-55182—The React2Shell vulnerability you need to patch right now