DEV Community

#vulnerability

Discussions about specific security vulnerabilities and CVEs.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Lateral Movement Across Zimbra Clusters via CVE-2026-73570

Lateral Movement Across Zimbra Clusters via CVE-2026-73570

Comments
2 min read
Detection engineering for CVE-2026-100382: hunting the External Data web shell

Detection engineering for CVE-2026-100382: hunting the External Data web shell

Comments
3 min read
When an Agent Reaches Root: The Zammad Attack and Machine-Speed Intrusion

When an Agent Reaches Root: The Zammad Attack and Machine-Speed Intrusion

Comments
2 min read
Apache ZooKeeper Authorization Bypass: How deleteContainer Skips Session and ACL Checks

Apache ZooKeeper Authorization Bypass: How deleteContainer Skips Session and ACL Checks

Comments
2 min read
Cross-Site Scripting in Drupal Extensions: The Quiet Half of WID-SEC-2026-3554

Cross-Site Scripting in Drupal Extensions: The Quiet Half of WID-SEC-2026-3554

1
Comments
2 min read
What the CISA KEV Listing for CVE-2026-104286 Tells Defenders

What the CISA KEV Listing for CVE-2026-104286 Tells Defenders

Comments
2 min read
A patch plan for CVE-2026-88773 that accounts for FIPS, NDcPP and hybrid deployments

A patch plan for CVE-2026-88773 that accounts for FIPS, NDcPP and hybrid deployments

Comments
2 min read
Finding Affected Check Point VPN Deployments: Version Scope and ZoomEye Exposure for CVE-2026-85102

Finding Affected Check Point VPN Deployments: Version Scope and ZoomEye Exposure for CVE-2026-85102

Comments
3 min read
ShieldCrash: A Second Path Around the Microsoft Defender ShieldBreak Fix

ShieldCrash: A Second Path Around the Microsoft Defender ShieldBreak Fix

Comments
3 min read
MFP Web Management Interfaces and CVE-2026-78249: Why Reachability Decides the Risk

MFP Web Management Interfaces and CVE-2026-78249: Why Reachability Decides the Risk

Comments
3 min read
WordPress CVE-2026-87902: an Unauthenticated Path Traversal That Escalates into Remote Code Execution

WordPress CVE-2026-87902: an Unauthenticated Path Traversal That Escalates into Remote Code Execution

Comments
3 min read
CVE-2026-63292 Timeline and Technical Anatomy: An Apache mod_vhost_alias Buffer Overflow

CVE-2026-63292 Timeline and Technical Anatomy: An Apache mod_vhost_alias Buffer Overflow

1
Comments
2 min read
Choosing Between rsync and btrfs receive in LXD: Exposure Differences Under CVE-2026-87799

Choosing Between rsync and btrfs receive in LXD: Exposure Differences Under CVE-2026-87799

Comments
3 min read
Patch Matrix for CVE-2026-86350: Which Apache Tomcat Builds Need 11.0.26, 10.1.60 or 9.0.122

Patch Matrix for CVE-2026-86350: Which Apache Tomcat Builds Need 11.0.26, 10.1.60 or 9.0.122

Comments
2 min read
Critical Zero-Day Found in Major AI Inference Engine

Critical Zero-Day Found in Major AI Inference Engine

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.