DEV Community

#vulnerability

Discussions about specific security vulnerabilities and CVEs.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Cisco FMC CVE-2026-20079: when the management plane is the target

Cisco FMC CVE-2026-20079: when the management plane is the target

Comments
3 min read
CVE-2026-87902 Patch Matrix: Which WordPress Branches Received the Backport

CVE-2026-87902 Patch Matrix: Which WordPress Branches Received the Backport

2
Comments
3 min read
Lessons from the Apache NiFi Bundle Traversal: When Trusted Metadata Becomes a Path Injection

Lessons from the Apache NiFi Bundle Traversal: When Trusted Metadata Becomes a Path Injection

Comments
2 min read
HTTP request smuggling on NetScaler ADC and Gateway (CVE-2026-88773)

HTTP request smuggling on NetScaler ADC and Gateway (CVE-2026-88773)

Comments 1
3 min read
Cross-Account JavaScript Execution in Basecamp's Fizzy: How Pirikara Chained Five Quiet Bugs Into a One-Click Token Theft — Analysis & Lessons

Cross-Account JavaScript Execution in Basecamp's Fizzy: How Pirikara Chained Five Quiet Bugs Into a One-Click Token Theft — Analysis & Lessons

Comments
6 min read
Prioritising Audit Effort for CVE-2026-96369 Inside a Drupal Estate

Prioritising Audit Effort for CVE-2026-96369 Inside a Drupal Estate

Comments
3 min read
The dependency problem behind CVE-2026-103877: patching a library that hides inside other software

The dependency problem behind CVE-2026-103877: patching a library that hides inside other software

Comments
3 min read
CVE-2026-85097: Bricksforge WordPress Plugin Arbitrary File Upload Vulnerability — Analysis & Mitigation

CVE-2026-85097: Bricksforge WordPress Plugin Arbitrary File Upload Vulnerability — Analysis & Mitigation

Comments
6 min read
CVE-2026-97229: GitLab CI/CD Regex Compiler Integer Overflow Vulnerability — Analysis & Mitigation

CVE-2026-97229: GitLab CI/CD Regex Compiler Integer Overflow Vulnerability — Analysis & Mitigation

Comments
7 min read
Patching PRTG: What Build 26.2.120.1449 Changes for CVE-2026-4637 and CVE-2026-4638

Patching PRTG: What Build 26.2.120.1449 Changes for CVE-2026-4637 and CVE-2026-4638

Comments
3 min read
When Rule Downloads Lose Hostname Verification: CVE-2026-61812 in ModSecurity

When Rule Downloads Lose Hostname Verification: CVE-2026-61812 in ModSecurity

Comments
3 min read
21,899 Exposed Exchange Servers and a Certified Pre-Auth Route to SYSTEM

21,899 Exposed Exchange Servers and a Certified Pre-Auth Route to SYSTEM

Comments
3 min read
CVE-2026-96357 Exposure Context: What 436263 Drupal Instances Mean

CVE-2026-96357 Exposure Context: What 436263 Drupal Instances Mean

Comments
2 min read
CVE-2026-21589 needs no login: what unauthenticated access means for exposed Atlassian instances

CVE-2026-21589 needs no login: what unauthenticated access means for exposed Atlassian instances

1
Comments
2 min read
TeamCity Kotlin DSL Sandbox Escape Lets a User Run Code on the Build Host

TeamCity Kotlin DSL Sandbox Escape Lets a User Run Code on the Build Host

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.