DEV Community

#vulnerability

Discussions about specific security vulnerabilities and CVEs.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2026-87799 Versus CVE-2026-85185: Symlink Replay and Unvalidated Subvolume Paths Compared

CVE-2026-87799 Versus CVE-2026-85185: Symlink Replay and Unvalidated Subvolume Paths Compared

Comments
3 min read
CVE-2026-90970 by the Numbers: A 9.9 Score, Three Fixed Releases and 1,338,769 Indexed GitLab Assets

CVE-2026-90970 by the Numbers: A 9.9 Score, Three Fixed Releases and 1,338,769 Indexed GitLab Assets

Comments
2 min read
CVE-2025-64393: The Mount Service, the Backup Viewer Role and a 9.4 Score

CVE-2025-64393: The Mount Service, the Backup Viewer Role and a 9.4 Score

Comments
2 min read
CVE-2026-96889: Next.js Image Optimization RCE Vulnerability — Analysis & Mitigation

CVE-2026-96889: Next.js Image Optimization RCE Vulnerability — Analysis & Mitigation

Comments
6 min read
CVE-2026-108551: openapi-typescript-codegen Handlebars Code Injection Vulnerability — Analysis & Mitigation

CVE-2026-108551: openapi-typescript-codegen Handlebars Code Injection Vulnerability — Analysis & Mitigation

Comments
6 min read
CVE-2026-108598: Floci Velocity SSTI Code Injection Vulnerability — Analysis & Mitigation

CVE-2026-108598: Floci Velocity SSTI Code Injection Vulnerability — Analysis & Mitigation

Comments
6 min read
CVE-2026-84869: a ScreenConnect client bypass and the spread that followed it

CVE-2026-84869: a ScreenConnect client bypass and the spread that followed it

Comments
2 min read
CVE-2026-87902 Under Active Exploitation: 64 Honeypot Attempts and a GitHub-Hosted Webshell

CVE-2026-87902 Under Active Exploitation: 64 Honeypot Attempts and a GitHub-Hosted Webshell

Comments
3 min read
Feature policy bypass through URL-based expressions on NetScaler (CVE-2026-88774)

Feature policy bypass through URL-based expressions on NetScaler (CVE-2026-88774)

Comments
3 min read
Researchers show how two vulnerabilities in OpenBSD 7.9 could grant full administrator privileges

Researchers show how two vulnerabilities in OpenBSD 7.9 could grant full administrator privileges

Comments
2 min read
Citrix NetScaler CVE-2026-19490 and CVE-2026-19489: Why Patch Priority Follows Configuration

Citrix NetScaler CVE-2026-19490 and CVE-2026-19489: Why Patch Priority Follows Configuration

Comments
3 min read
CVE-2026-19572: a hardcoded bypass in the console that hands out software licences

CVE-2026-19572: a hardcoded bypass in the console that hands out software licences

Comments
4 min read
OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons

OpenAI Account Takeover via libheif Heap Overflow and SSO Flaw: How Hacktron Chained a Malicious HEIF Image to Internal Repo Access — Analysis & Lessons

Comments
7 min read
CVE-2026-76519: Cisco Secure Email Gateway Path Traversal RCE Vulnerability — Analysis & Mitigation

CVE-2026-76519: Cisco Secure Email Gateway Path Traversal RCE Vulnerability — Analysis & Mitigation

Comments
6 min read
Webform and Webform REST Flaws in the September 2026 Drupal Advisory

Webform and Webform REST Flaws in the September 2026 Drupal Advisory

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.