DEV Community

#vulnerability

Discussions about specific security vulnerabilities and CVEs.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2026-9586: One XML Field in Sangoma Switchvox Reaches the PostgreSQL Backend

CVE-2026-9586: One XML Field in Sangoma Switchvox Reaches the PostgreSQL Backend

Comments
3 min read
GitLab Self-Managed Patch Guide: Moving to 19.4.1, 19.3.3, or 19.2.7

GitLab Self-Managed Patch Guide: Moving to 19.4.1, 19.3.3, or 19.2.7

Comments
2 min read
Assessing CVE-2026-86510: Severity, Reachability and the Limits of the Public Record

Assessing CVE-2026-86510: Severity, Reachability and the Limits of the Public Record

Comments
2 min read
HashiCorp Vault RCE Vulnerability Persists Despite OpenBao Patch: Urgent Mitigation Needed

HashiCorp Vault RCE Vulnerability Persists Despite OpenBao Patch: Urgent Mitigation Needed

Comments
8 min read
Inventory Work for CVE-2026-96357: Finding Affected Drupal Modules First

Inventory Work for CVE-2026-96357: Finding Affected Drupal Modules First

Comments
2 min read
Request smuggling in NetScaler: why the backend's parsing rules decide the impact

Request smuggling in NetScaler: why the backend's parsing rules decide the impact

Comments
2 min read
Proton Mail Leaves Users Exposed for 16 Months Despite Acknowledging Sender Spoofing Vulnerability

Proton Mail Leaves Users Exposed for 16 Months Despite Acknowledging Sender Spoofing Vulnerability

Comments
12 min read
Reading the Three LXD Advisories Together: CVE-2026-87799 and Its btrfs Siblings

Reading the Three LXD Advisories Together: CVE-2026-87799 and Its btrfs Siblings

1
Comments
3 min read
Detecting unexpected custom attributes after CVE-2026-96367

Detecting unexpected custom attributes after CVE-2026-96367

1
Comments
2 min read
Why stored XSS in Drupal Webform (CVE-2026-96367) reaches other users

Why stored XSS in Drupal Webform (CVE-2026-96367) reaches other users

Comments
2 min read
Critical Zero-Day in Popular AI API Library Exposes Developer Secrets

Critical Zero-Day in Popular AI API Library Exposes Developer Secrets

Comments
3 min read
Authentication and Privilege Escalation Paths in the Drupal Extension Advisory WID-SEC-2026-3554

Authentication and Privilege Escalation Paths in the Drupal Extension Advisory WID-SEC-2026-3554

Comments 1
2 min read
MikroTrick and the SSH key check that forgot the exponent

MikroTrick and the SSH key check that forgot the exponent

Comments
3 min read
CVE-2026-89078: What the Advisory Says and What It Does Not

CVE-2026-89078: What the Advisory Says and What It Does Not

Comments
2 min read
From Patch Tuesday to KEV in Three Weeks: The CVE-2026-19490 NetScaler Timeline

From Patch Tuesday to KEV in Three Weeks: The CVE-2026-19490 NetScaler Timeline

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.