[CVE-2026-8508]

August 26, 2026

• Two primary write-ups cover an identity bypass and a SYSTEM escalation. Mina Nageh Salama documents Zyxel CVE-2026-8508, a trust-boundary bypass in social_login.cgi Facebook identity handling. ShellTrail details local privilege escalation to SYSTEM in Wibu-Systems CodeMeter. · Offensive Research

in Oracle WebLogic Is Under Active Attack