1dayexploit - archive

Technical deep-dives and root cause analyses of recently disclosed CVEs.

About

This repository collects technical write-ups of recently disclosed CVEs — the 1-day window between patch release and widespread exploitation.

Each analysis contains:

CVE	Vendor	Product	Class	Severity	Write-up
`CVE-2026-59851`	libssh	libssh 0.12.0	Authorization Bypass	High	Read
`CVE-2026-12080`	QEMU Project / Red Hat	QEMU Guest Agent 5.2.0 - 11.0.3	Privilege Escalation	High	Read
`CVE-2026-72585`	Grafana Labs	Grafana 11.6.9 - 13.1.3	Authorization Bypass	Medium	Read
`CVE-2026-66915`	Fabrik	Fabrik 1.0.0-4.6.6	Pre-Auth RCE	Critical	Read
`CVE-2026-72568`	Redis Labs	Redis through 8.8.1	Out-of-Bounds Read	High	Read
`CVE-2026-72899`	Metabase	Metabase 0.58.0-0.63.4 (0.58.x - 0.63.x vulnerable range)	SQL Injection	Critical	Read
`CVE-2026-72898`	Metabase	Metabase 0.58.0-0.63.4	SQL Injection	Critical	Read
`CVE-2024-7347`	F5 Networks / nginx project	nginx 1.5.13 - 1.27.0	Buffer Over-read / DoS	Medium	Read

Full analyses live in their own subdirectories. Browse /analyses for the complete list.

1dayexploit is a small, closed team of offensive security researchers publishing technical deep-dives into recently disclosed vulnerabilities.

For our own coordinated-disclosed CVEs, see advisories.

_{Responsible research. Defenders and red teamers alike.}