DEV Community

#vulnerabilitymanagement

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
GitLab CVE-2026-85706: When a Path Traversal Lands in the Software Delivery Chain
bianliang profile

GitLab CVE-2026-85706: When a Path Traversal Lands in the Software Delivery Chain

#pathtraversal #devsecops #credentialexposure #vulnerabilitymanagement
Comments
4 min read
The Suffix That Skipped Authentication: Kestra CVE-2026-49869 and Why Path Matching Is Not Authorisation
kozhevniko profile

The Suffix That Skipped Authentication: Kestra CVE-2026-49869 and Why Path Matching Is Not Authorisation

#security #applicationsecurity #vulnerabilitymanagement
Comments
3 min read
Penetration Test Findings That Never Get Fixed: Running a Retest Programme
kozhevniko profile

Penetration Test Findings That Never Get Fixed: Running a Retest Programme

#security #vulnerabilitymanagement #governance
Comments
2 min read
When the Artifact Repository Is the Target: JFrog Artifactory and the Software Supply Chain Chokepoint
stark_zhuang_df5076f35c68 profile

When the Artifact Repository Is the Target: JFrog Artifactory and the Software Supply Chain Chokepoint

#security #supplychain #vulnerabilitymanagement
Comments
3 min read
When the AI Gateway Becomes the Weakest Link: Command Execution in LiteLLM's MCP Test Endpoints
kozhevniko profile

When the AI Gateway Becomes the Weakest Link: Command Execution in LiteLLM's MCP Test Endpoints

#cybersecurity #aiinfrastructure #vulnerabilitymanagement #litellm
Comments
4 min read
Kestra's Path Suffix Bug: When a Framework Forgets to Check the Whole Route
jeffreyciend profile

Kestra's Path Suffix Bug: When a Framework Forgets to Check the Whole Route

#vulnerabilitymanagement #kestra #commandinjection #cve202649869
1
Comments
4 min read
A One-Character Token Was Enough: LiteLLM and the Credential Concentration Problem in AI Gateways
bianliang profile

A One-Character Token Was Enough: LiteLLM and the Credential Concentration Problem in AI Gateways

#security #aisecurity #vulnerabilitymanagement
Comments
4 min read
Edge Appliance Zero-Days: What the SonicWall SMA1000 Chain Teaches About Patch Windows
jeffreyciend profile

Edge Appliance Zero-Days: What the SonicWall SMA1000 Chain Teaches About Patch Windows

#vulnerabilitymanagement #edgesecurity #ssrf #commandinjection
Comments
4 min read
The Management Plane Is the Attack Plane: What Three Clusters on One Cisco FMC Tell Defenders
kozhevniko profile

The Management Plane Is the Attack Plane: What Three Clusters on One Cisco FMC Tell Defenders

#security #vulnerabilitymanagement #networksecurity #exploitedinthewild
Comments
4 min read
Extended Support Isn't Extended Security: Managing Vulnerabilities in ELS Linux Environments
ayush_singh17 profile

Extended Support Isn't Extended Security: Managing Vulnerabilities in ELS Linux Environments

#cybersecurity #infosec #linux #vulnerabilitymanagement
5
Comments
7 min read
One Console, Every Customer: What the N-able N-central Pre-Authentication RCE Says About RMM Concentration Risk
jeffreyciend profile

One Console, Every Customer: What the N-able N-central Pre-Authentication RCE Says About RMM Concentration Risk

#vulnerabilitymanagement #msp #rmm #supplychain
Comments
3 min read
StyleSmuggler: How a Payment Failure Email Became a Remote Code Execution Path in Magento
stark_zhuang_df5076f35c68 profile

StyleSmuggler: How a Payment Failure Email Became a Remote Code Execution Path in Magento

#cybersecurity #ecommercesecurity #vulnerabilitymanagement
Comments
3 min read
The Cisco FMC Authentication Bypass Shows Why Management Planes Are the Real Perimeter
onaeiuspkz profile

The Cisco FMC Authentication Bypass Shows Why Management Planes Are the Real Perimeter

#cybersecurity #vulnerabilitymanagement #networksecurity
Comments
4 min read
Using CISA KEV Deadlines as a Triage Clock for Vulnerability Backlogs
kozhevniko profile

Using CISA KEV Deadlines as a Triage Clock for Vulnerability Backlogs

#security #vulnerabilitymanagement
Comments
2 min read
Why the Same Old Bugs Keep Getting Exploited: CISA's Secure-by-Design Wake-Up Call
stark_zhuang_df5076f35c68 profile

Why the Same Old Bugs Keep Getting Exploited: CISA's Secure-by-Design Wake-Up Call

#cisa #vulnerabilitymanagement #securebydesign
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.