DEV Community

#vulnerability

Discussions about specific security vulnerabilities and CVEs.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Closing the execution sink: defensive patterns after CVE-2026-100382
stark_zhuang_df5076f35c68 profile

Closing the execution sink: defensive patterns after CVE-2026-100382

#security #defensivedesign #mediawiki #vulnerability
Comments
3 min read
Three JFrog Artifactory Flaws in One KEV Cycle: Authentication Failures in the Build Supply Chain
bianliang profile

Three JFrog Artifactory Flaws in One KEV Cycle: Authentication Failures in the Build Supply Chain

#security #vulnerability #exploitedinthewild
Comments
3 min read
ZooKeeper Flaws Ripple Through Hadoop and Kafka Dependency Chains
bianliang profile

ZooKeeper Flaws Ripple Through Hadoop and Kafka Dependency Chains

#apachezookeeper #vulnerability #cve202659739 #distributedsystems
Comments
1 min read
Apache httpd 2.4.68 to 2.4.69: Upgrade Notes for the CVE-2026-63292 Fix and Companion Advisories
onaeiuspkz profile

Apache httpd 2.4.68 to 2.4.69: Upgrade Notes for the CVE-2026-63292 Fix and Companion Advisories

#apache #httpd #vulnerability #modvhostalias
Comments
2 min read
Citrix NetScaler ADC and Gateway: eight advisories, two under active exploitation (CVE-2026-88776)
jeffreyciend profile

Citrix NetScaler ADC and Gateway: eight advisories, two under active exploitation (CVE-2026-88776)

#security #vulnerability #citrix #netscaler
Comments
4 min read
Exposure Context for CVE-2026-96358: What 436,276 Drupal Fingerprints Mean
jeffreyciend profile

Exposure Context for CVE-2026-96358: What 436,276 Drupal Fingerprints Mean

#security #drupal #cve #vulnerability
Comments
2 min read
What full control of a reverse proxy console means after CVE-2026-107806
jeffreyciend profile

What full control of a reverse proxy console means after CVE-2026-107806

#security #vulnerability #nginx
Comments 1
3 min read
SNI, Host headers and the limits of name-based virtual hosting: CVE-2026-102795 explained
stark_zhuang_df5076f35c68 profile

SNI, Host headers and the limits of name-based virtual hosting: CVE-2026-102795 explained

#vulnerability #apachetrafficserver #accesscontrol
Comments
2 min read
What CVE-2026-76266 shows about trusting installation content in package scripts
onaeiuspkz profile

What CVE-2026-76266 shows about trusting installation content in package scripts

#security #vulnerability #splunk #cve202676266
Comments
2 min read
CVE-2026-94545 Exploitability Deep Dive: Escaping, Native Parsing and the Non-PIE Node Build
kozhevniko profile

CVE-2026-94545 Exploitability Deep Dive: Escaping, Native Parsing and the Non-PIE Node Build

#security #vulnerability #nextjs
Comments
2 min read
Drupal Webform XSS (CVE-2026-96367): what site builders need to check first
onaeiuspkz profile

Drupal Webform XSS (CVE-2026-96367): what site builders need to check first

#security #vulnerability #drupal #xss
Comments
2 min read
SSH Rekey During Authentication: The Protocol Edge Case Behind CVE-2026-67279
onaeiuspkz profile

SSH Rekey During Authentication: The Protocol Edge Case Behind CVE-2026-67279

#vulnerability #routeros #mikrotik #ssh
Comments
3 min read
CVE-2026-96358: What Remote Exploitability Means for a Drupal Extension Flaw
stark_zhuang_df5076f35c68 profile

CVE-2026-96358: What Remote Exploitability Means for a Drupal Extension Flaw

#security #drupal #cve #vulnerability
1
Comments
2 min read
Alluxio's S3 proxy skipped signature verification, and everyone was root
bianliang profile

Alluxio's S3 proxy skipped signature verification, and everyone was root

#vulnerability #storage #authentication
Comments
3 min read
CVE-2026-105763 remediation runbook: patching Twenty CRM and rotating what leaked
jeffreyciend profile

CVE-2026-105763 remediation runbook: patching Twenty CRM and rotating what leaked

#security #vulnerability #twentycrm
Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.