What You Need to Know: Windows Admin Center Remote Privilege Escalation (CVE-2026-26119)

The PoC shows that a low-privileged valid account can turn the flaw into remote command execution over the network. Upgrade to Windows Admin Center 2.6.4 or later and review WAC accounts and anomalous PowerShell activity.

Why the common 'switch from LDAP to LDAPS' recommendation is mostly ineffective: AD members always use port 389, common workarounds fail, and the post explains what actually hardens AD LDAP.

A retrospective on CVE-2025-39964, an AF_ALG race condition causing out-of-bounds scatterlist access in the Linux kernel. Exploitation yields root and a Docker container escape.

Ubuntu Server silently puts the first user in the lxd group, root-equivalent by design. The seeded lxd-installer socket lets lxd users install LXD password-free and reach host root; vendor won't fix.

SyncJacking: how attackers can abuse Entra Connect hard matching to take over synchronized Entra ID accounts, including Active Global Administrators — and how to detect and mitigate it.

Analysis of CVE-2025-64721, a Sandboxie sandbox escape: a missing bounds check in raw ALPC IPC allowed heap leakage and a 4GB heap smash, leading to SYSTEM-level code execution on Windows.