.png){kind=spacer}
Blog
Maya
Maya writes HEO Systems security notices and incident reports, covering what happened, what was patched and what customers need to do.
Articles by Maya
PHP2Shell: Is the Fix Incomplete, and Is It Really Hard to Exploit?Two days after PHP2Shell (CVE-2026-109618 and CVE-2026-109619), we look at claims that the PHP patch is incomplete and that the bug is too hard to exploit, and explain why updating is still what matters.
Linux: Local Privilege Escalation Patched (CVE-2026-46333)Multiple Linux kernel vulnerabilities, including a high-severity ptrace local privilege escalation flaw, were patched in the latest Debian security update.
nginx: DoS & Possible RCE (CVE-2026-42945)Ubuntu published USN-8271-1 for an nginx rewrite module vulnerability that can cause denial of service and may allow remote code execution.
PostgreSQL: Possible RCE Vulnerabilities Patched (CVE-2026-6473 & CVE-2026-6637)Two PostgreSQL vulnerabilities that may allow code execution as the PostgreSQL OS user have been patched in the latest releases.
Linux: Fragnesia Local Privilege EscalationFragnesia is a Linux local privilege escalation exploit abusing the kernel ESP/XFRM subsystem to corrupt page cache memory and gain root access.
Windows: YellowKey BitLocker Bypass & GreenPlasma LPEYellowKey and GreenPlasma are Windows zero-days affecting BitLocker-protected systems and potentially allowing attackers to gain SYSTEM privileges.
Exim: DoS and Possible RCE (USN-8270-1)Ubuntu published USN-8270-1 for an Exim BDAT parsing vulnerability that can crash mail servers and may allow remote code execution.