October 6, 2026
- A public Gotenberg exploit now bundles CVE-2026-42589 and CVE-2026-40281 into one unauthenticated-RCE workflow. The release covers metadata-key and metadata-value injection paths and includes detection and interactive exploitation. It lists Gotenberg 8.30.1 and earlier as affected and 8.31.0 as fixed. This extends the single-flaw PoC in earlier coverage; it is public exploit code, not evidence of active use. HackfutSecRoot’s repository · New Tools & Releases
in A Trusted Company Connection Exposes 8.8 Million Danish CPR Records