[CVE-2026-45504]

June 28, 2026

• CVE-2026-45504 lets any low-privileged Microsoft Exchange user read arbitrary files from the system without authorization; a write-up and working PoC are public. HawkTrace · Vulnerabilities & Exploits

in A WHQL-Signed Kernel Backdoor Hides in a WFP Callout as a "Clean" GitHub Repo Pwns AI Coding Agents

June 27, 2026

• CVE-2026-45504: any low-privileged user on Microsoft Exchange can read arbitrary files from the system without authorization; HawkTrace published a write-up and a working Python PoC. hawktrace.com, PoC · Vulnerabilities & Exploits

in Amazon Q Coding Assistant Hijacked Through Malicious MCP Configs as Washington Starts Gating Frontier Models Customer-by-Customer

June 26, 2026

• CVE-2026-45504 — a Microsoft Exchange SSRF lets any low-privileged authenticated user read arbitrary files via malicious WOPI URLs; a Python PoC is public. HawkTrace, PoC · Vulnerabilities & Exploits

in Malware Weaponizes Prompt Injection to Sabotage AI Analysis as Gamaredon Retools Against Ukraine