[openbsd]

June 22, 2026

• CVE-2026-56099 in OpenBSD causes an out-of-bounds kernel read and remote info disclosure when handling crafted MPLS frames carrying 16 labels without a bottom-of-stack marker. Argus advisory. · Vulnerabilities & Exploits

in Unpatchable iPhone BootROM Exploit Drops as a New Call-Stack Bypass Defeats 2024-Era EDR

June 17, 2026

• OpenBSD patched a 27-year-old remote kernel auth bypass in its PPP/PPPoE stack (a null-auth flaw imported from FreeBSD in 1999), allowing credential-less traffic interception. Argus-Systems, r/netsec. · Vulnerabilities & Exploits (Actively Exploited)

in Microsoft 365 Copilot 'SearchLeak' Enables One-Click Data Theft as Novo Nordisk Loses Internal AI Models to Extortionists