Crow's Nest - 2026-06-22

A roundup of 126 items curated from across the security community.

News

• Mastra-AI npm Supply Chain Attack Hits 80+ Packages by Dave Kennedy.

An attacker hijacked npm accounts to inject a phantom dependency into 80+ Mastra-AI packages. The malicious payload arrived via a “dayjs” typosquat that ran a post-install script to download and execute a remote binary.

• Operation Endgame Dismantles SocGholish Infrastructure by SwitHak ().

International law enforcement took down 100 servers and domains, remediating nearly 15,000 websites. SocGholish’s “FakeUpdates” web inject framework has been a persistent ransomware delivery vector since 2018.

• Splunk Enterprise RCE Added to CISA KEV by kmkz.

CVE-2026-20253, a CVSS 9.8 unauthenticated file write flaw with a public exploit chain leading to RCE, is now confirmed actively exploited. Patch to Splunk 10.0.7 or 10.2.4 immediately.

Techniques and Write-ups

• Twelve Bytes to Escape the Browser Sandbox by Dominic Chell.

CVE-2026-40369 turns a minimal 12-byte controlled write into a full browser sandbox escape. The writeup walks through the exploit chain from renderer compromise to arbitrary code execution outside the sandbox.

• Ivanti Sentry: Command Injection and Auth Bypass Chain by kmkz.

CVE-2026-10520 and CVE-2026-10523 chain an unauthenticated OS command injection with an authentication bypass in Ivanti Sentry. Together they give remote attackers full system-level code execution without credentials.

• From ISP Router to Kernel RCE via MediaTek WPS Driver by scriptjunkie (Matt).

CVE-2026-20452 is a heap overflow in MediaTek’s WPS kernel driver. The writeup covers the full journey from initial router recon through command injection to unauthenticated kernel-level code execution.

• First Public KVM/arm64 Guest-to-Host Escape by Solar Designer.

CVE-2026-46316 allows a guest VM to execute commands on the host with kernel privileges. Believed to be the first publicly documented guest-to-host escape exploit targeting KVM on ARM64. Full exploit attached to the oss-security post.

• FreeBSD kTLS Page-Cache Write: A Dirty Pipe Analogue by Solar Designer.

CVE-2026-45257 exploits in-place AES-GCM decryption in FreeBSD’s kTLS-RX path to write into the page cache and escalate to local root. The bug mirrors Linux’s Dirty Pipe, was introduced around 2020, and shipped in FreeBSD 13.0.

• nginx-quicburst: RCE in Nginx QUIC (CVE-2026-42530) by Kuba Gretzky.

A use-after-free in the QPACK encoder of nginx’s HTTP/3 stack gives remote code execution. Only the third nginx vulnerability since 2014 to receive the project’s “major” severity rating. Upgrade if you run Nginx 1.31 with QUIC enabled.

• Unpatched NTLM Leak in Windows search: URI Handler by Dave Kennedy.

The NTLM leakage primitive in the Windows search: URI handler is identical in mechanism and severity to CVE-2026-33829 in the Snipping Tool. Microsoft closed the report without issuing a CVE or patch.

• Squidbleed: Heartbleed-style Memory Leak in Squid Proxy by /r/netsec.

CVE-2026-47729 leaks internal memory from every version of Squid Proxy in its default configuration. The vulnerability is a Heartbleed analogue, letting remote attackers read arbitrary server memory without authentication.

• Langflow Multi-CVE Exploit Kit: Path Traversal to RCE by kmkz.

Three Langflow vulnerabilities chained together: a path traversal (CVE-2026-7524), a lambda eval (CVE-2026-7700), and a CodeParser command injection (CVE-2026-7687). The exploit kit uses symlink-based archive extraction to drop webshells for persistent RCE.

• Eight Kernel Driver LPE Vulnerabilities Found with LLM Assistance by Winslow.

A researcher used LLM-assisted analysis to discover eight credited local privilege escalation vulnerabilities across Windows kernel drivers, all now with assigned CVEs.

Tools and Exploits

• Turnado: Assessing TURN Server Abuse for C2 Traffic by pfiatde.

SySS breaks down how APTs abuse Microsoft TURN relay servers to disguise C2 traffic as legitimate Teams connections and releases Turnado, a tool for testing your own TURN infrastructure for the same weaknesses.

• BloodHound 9.3.0 Released with Full-Path Highlighting by Chihuahua in charge NotMe.

The latest BloodHound release adds full-path highlighting that dims irrelevant paths when a node is selected. SpecterOps also published a deep dive on redesigning BloodHound MCP, arguing that smaller, focused tools beat large API surfaces for LLM integration.