Next.js React2Shell RCE → SQLite creds → Node debug port to root · 2026-05-24

MCP tool RCE (CVE-2026-23520) → Docker socket abuse → chroot escape · 2026-06-11

ZoneMinder SQLi (CVE-2024-51482) → hash crack → motionEye RCE to root · 2026-06-02

Flowise RCE chain → env creds → Gogs CVE to root · 2026-05-30

Gitea commit-history leak → Krayin CRM RCE (CVE-2026-38526) → template-sync privesc to root · 2026-07-15

Craft CMS pre-auth RCE (CVE-2025-32432) → hash crack → telnetd auth bypass to root · 2026-07-16