<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Jonah Burgess &#8211; Noise</title>
	<atom:link href="https://noise.getoto.net/author/jonah-burgess/feed/" rel="self" type="application/rss+xml" />
	<link>https://noise.getoto.net</link>
	<description>The collective thoughts of the interwebz</description>
	<lastBuildDate>Mon, 03 Aug 2026 17:11:25 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.3</generator>
	<item>
		<title>Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)</title>
		<link>https://noise.getoto.net/2026/08/03/rapid7-analysis-kindarails2shell-cve-2026-66066/</link>
		
		<dc:creator><![CDATA[Jonah Burgess]]></dc:creator>
		<pubDate>Mon, 03 Aug 2026 17:11:25 +0000</pubDate>
				<category><![CDATA[Emergent Threat Response]]></category>
		<category><![CDATA[Labs]]></category>
		<category><![CDATA[Rapid7 Analysis]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=aadae52c602a291b9c26fd1da6313ba0</guid>

					<description><![CDATA[OverviewOn July 29, 2026, the Ruby on Rails project published a security advisory for CVE-2026-66066, an arbitrary file read in Active Storage applications that use the Vips image processor with untrusted uploads. The affected Active Storage ranges are...]]></description>
		
		
		<enclosure url="https://images.contentstack.io/v3/assets/blte4f029e766e6b253/bltcbf09ec3af35e28e/6a15c63f08221ed5144dbf77/webinar-rapid7-logo.jpg" length="0" type="" />

			</item>
		<item>
		<title>CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild</title>
		<link>https://noise.getoto.net/2026/07/23/cve-2026-16232-critical-check-point-smartconsole-authentication-bypass-exploited-in-the-wild/</link>
		
		<dc:creator><![CDATA[Jonah Burgess]]></dc:creator>
		<pubDate>Thu, 23 Jul 2026 11:57:30 +0000</pubDate>
				<category><![CDATA[Emergent Threat Response]]></category>
		<category><![CDATA[Labs]]></category>
		<category><![CDATA[Vulnerability management]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=880d7147884a1dc00a5d9cd6b52a7fe3</guid>

					<description><![CDATA[OverviewOn July 22, 2026, Check Point published a security advisory for multiple vulnerabilities affecting Security Management, Multi-Domain Management, and firewall products. The most urgent of these is CVE-2026-16232, an authentication bypass in the ...]]></description>
		
		
		<enclosure url="https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt65a432ba319f4043/6846abddaf18306debe6cf4d/ETR.webp" length="0" type="" />

			</item>
		<item>
		<title>Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)</title>
		<link>https://noise.getoto.net/2026/06/12/active-exploitation-of-oracle-peoplesoft-zero-day-cve-2026-35273/</link>
		
		<dc:creator><![CDATA[Jonah Burgess]]></dc:creator>
		<pubDate>Fri, 12 Jun 2026 13:43:04 +0000</pubDate>
				<category><![CDATA[Emergent Threat Response]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=5c3fd3cfa2dda2623598eef9a39336f5</guid>

					<description><![CDATA[OverviewOn June 10, 2026, Oracle published a security alert for CVE-2026-35273, a critical vulnerability in the Updates Environment Management component of PeopleSoft Enterprise PeopleTools. Oracle released an out-of-band patch the same day as the advi...]]></description>
		
		
		<enclosure url="https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt65a432ba319f4043/6846abddaf18306debe6cf4d/ETR.webp" length="0" type="" />

			</item>
		<item>
		<title>Authenticated RCE via Argument Injection in Gogs (NOT FIXED)</title>
		<link>https://noise.getoto.net/2026/05/28/authenticated-rce-via-argument-injection-in-gogs-not-fixed/</link>
		
		<dc:creator><![CDATA[Jonah Burgess]]></dc:creator>
		<pubDate>Thu, 28 May 2026 12:00:00 +0000</pubDate>
				<category><![CDATA[research]]></category>
		<category><![CDATA[Vulnerability Disclosure]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=6d4fc4b215bb9f47f6d5b3b42cc9e9a0</guid>

					<description><![CDATA[OverviewRapid7 Labs discovered a critical argument injection (CWE-88) vulnerability in Gogs, a popular open-source self-hosted Git service. Rapid7 Labs scores this vulnerability as CVSSv4 9.4 (Critical). The vulnerability allows any authenticated user ...]]></description>
		
		
		<enclosure url="https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt62de3c632e7d1ef7/6984a555a6b5ef052cb93196/Chrysalis-backdoor-blog.jpg" length="0" type="" />

			</item>
		<item>
		<title>CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)</title>
		<link>https://noise.getoto.net/2026/05/14/cve-2026-20182-critical-authentication-bypass-in-cisco-catalyst-sd-wan-controller-fixed/</link>
		
		<dc:creator><![CDATA[Jonah Burgess]]></dc:creator>
		<pubDate>Thu, 14 May 2026 16:00:00 +0000</pubDate>
				<category><![CDATA[Labs]]></category>
		<category><![CDATA[research]]></category>
		<category><![CDATA[Vulnerability Disclosure]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=9278ca4ac014cb4d52ce4fad988d36bc</guid>

					<description><![CDATA[OverviewWhile researching a critical authentication bypass vulnerability, CVE-2026-20127, which was exploited in-the-wild, Rapid7 Labs discovered a new authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Controller (formerly known as vS...]]></description>
		
		
		<enclosure url="https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt65a432ba319f4043/6846abddaf18306debe6cf4d/ETR.webp" length="0" type="" />

			</item>
		<item>
		<title>Critical Buffer Overflow in Palo Alto Networks PAN-OS User-ID Authentication Portal (CVE-2026-0300)</title>
		<link>https://noise.getoto.net/2026/05/06/critical-buffer-overflow-in-palo-alto-networks-pan-os-user-id-authentication-portal-cve-2026-0300/</link>
		
		<dc:creator><![CDATA[Jonah Burgess]]></dc:creator>
		<pubDate>Wed, 06 May 2026 13:27:31 +0000</pubDate>
				<category><![CDATA[Emergent Threat Response]]></category>
		<category><![CDATA[InsightVM]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=9f95f9cc59a6b30953397048fe88696a</guid>

					<description><![CDATA[OverviewOn May 6, 2026, Palo Alto Networks published a security advisory for CVE-2026-0300, a critical unauthenticated buffer overflow vulnerability affecting PAN-OS PA-Series and VM-Series firewall appliances. Prisma Access, Cloud NGFW, and Panorama a...]]></description>
		
		
		<enclosure url="https://images.contentstack.io/v3/assets/blte4f029e766e6b253/blt65a432ba319f4043/6846abddaf18306debe6cf4d/ETR.webp" length="0" type="" />

			</item>
	</channel>
</rss>

<!--
Performance optimized by W3 Total Cache. Learn more: https://www.boldgrid.com/w3-total-cache/?utm_source=w3tc&utm_medium=footer_comment&utm_campaign=free_plugin

Object Caching 20/45 objects using Memcached
Page Caching using Disk: Enhanced 
Lazy Loading (feed)
Database Caching using Memcached

Served from: noise.getoto.net @ 2026-10-27 22:51:38 by W3 Total Cache
-->