SECURITY CIPHER · BLOG
CVE
Posts from SecurityCipher.
OpenSSH Password Bypass on Alpine (CVE-2026-123158)
A 300-character password logs into Alpine accounts that have no password. CVE-2026-123158 explained, reproduced in a lab, and fixed: who is affected,…
October 2026 Patch Audit: PHP2Shell, GitLab, Node, LiteLLM
You patched in October. Prove it took: one read-only script that checks PHP2Shell, both GitLab CVSS 10s, Node.js and LiteLLM 1.107.0 on…
The CVE Flood Is a Lie: How to Hunt When AI Dumps 36% More Bugs But Exploitation Only Grows 10%
Your vulnerability scanner ran overnight. Your inbox has 47 new CVE alerts. Slack is pinging you about a “critical” flaw in a…
Actively Exploited CVEs in June 2026: A Practical Patch-Now Briefing (SimpleHelp, Citrix, ColdFusion, Defender)
June 2026 was a brutal month for anyone who runs internet-facing infrastructure. A run of critical, actively-exploited vulnerabilities landed one after another,…