DEV Community

#cve

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
GHSA-7MR3-28H5-M5VX: GHSA-7mr3-28h5-m5vx: Authorization Bypass and Cross-Project Volume Copy in Canonical LXD

GHSA-7MR3-28H5-M5VX: GHSA-7mr3-28h5-m5vx: Authorization Bypass and Cross-Project Volume Copy in Canonical LXD

Comments
4 min read
GHSA-47W9-6R3F-938G: GHSA-47w9-6r3f-938g: Authorization Bypass and Host Root Command Execution in Canonical LXD and Incus

GHSA-47W9-6R3F-938G: GHSA-47w9-6r3f-938g: Authorization Bypass and Host Root Command Execution in Canonical LXD and Incus

Comments
4 min read
GHSA-JPF8-86F3-WP38: CVE-2026-48752: Arbitrary Host File Read and Write via Templates Symlink in Canonical LXD and Incus

GHSA-JPF8-86F3-WP38: CVE-2026-48752: Arbitrary Host File Read and Write via Templates Symlink in Canonical LXD and Incus

Comments
4 min read
CVE-2026-115560 Explained: How a PHP Session Serializer Mismatch Turns Into RCE

CVE-2026-115560 Explained: How a PHP Session Serializer Mismatch Turns Into RCE

Comments
5 min read
CVE-2026-12411: CVE-2026-12411: Cross-Guest Volume Hijack via DevLXD Device PATCH in Canonical LXD

CVE-2026-12411: CVE-2026-12411: Cross-Guest Volume Hijack via DevLXD Device PATCH in Canonical LXD

Comments
4 min read
CVE-2026-105769: CVE-2026-105769: Azure Entra ID Token Exfiltration in Kaniko via Unanchored ACR Hostname Regex

CVE-2026-105769: CVE-2026-105769: Azure Entra ID Token Exfiltration in Kaniko via Unanchored ACR Hostname Regex

Comments
4 min read
CVE-2026-62300: CVE-2026-62300: Uncontrolled Resource Consumption in filecoin-pin Daemon

CVE-2026-62300: CVE-2026-62300: Uncontrolled Resource Consumption in filecoin-pin Daemon

Comments
5 min read
CVE-2026-61536: CVE-2026-61536: Remote Code Execution via Unsafe Reflection in masci/banks CompletionExtension

CVE-2026-61536: CVE-2026-61536: Remote Code Execution via Unsafe Reflection in masci/banks CompletionExtension

Comments
4 min read
CVE-2026-58868: A HEIF Grid Mismatch in Android's Media Decoder

CVE-2026-58868: A HEIF Grid Mismatch in Android's Media Decoder

Comments
5 min read
CVE-2026-93363: CVE-2026-93363: Improper Access Control in Payload CMS Storage Upload Route

CVE-2026-93363: CVE-2026-93363: Improper Access Control in Payload CMS Storage Upload Route

1
Comments
3 min read
GHSA-M3QR-FVP4-78XJ: GHSA-m3qr-fvp4-78xj: Authentication Bypass and Log Disclosure in Basekick Labs Arc

GHSA-M3QR-FVP4-78XJ: GHSA-m3qr-fvp4-78xj: Authentication Bypass and Log Disclosure in Basekick Labs Arc

Comments
3 min read
CVE-2026-62331: CVE-2026-62331: Path Traversal and Stored Instruction Injection in Praktor Telegram File Uploads

CVE-2026-62331: CVE-2026-62331: Path Traversal and Stored Instruction Injection in Praktor Telegram File Uploads

Comments 1
4 min read
CVE-2026-11800: CVE-2026-11800: Authentication Bypass via JWT Algorithm Confusion in Keycloak

CVE-2026-11800: CVE-2026-11800: Authentication Bypass via JWT Algorithm Confusion in Keycloak

Comments
4 min read
GHSA-P3JP-9V83-76W9: CVE-2026-111497 / GHSA-p3jp-9v83-76w9: Out-of-Bounds Heap Write in Microsoft .NET Brotli Decoder

GHSA-P3JP-9V83-76W9: CVE-2026-111497 / GHSA-p3jp-9v83-76w9: Out-of-Bounds Heap Write in Microsoft .NET Brotli Decoder

Comments
4 min read
CVE-2026-115878: CVE-2026-115878: Arbitrary Code Execution via Nested Pickle Deserialization in Stanford NLP Stanza Lemmatizer

CVE-2026-115878: CVE-2026-115878: Arbitrary Code Execution via Nested Pickle Deserialization in Stanford NLP Stanza Lemmatizer

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.