DEV Community

# cve

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2026-26273: The Over-Helpful Doorman: Full Account Takeover in 'Known' CMS

CVE-2026-26273: The Over-Helpful Doorman: Full Account Takeover in 'Known' CMS

Comments
2 min read
GHSA-27JP-WM6Q-GP25: Death by Parentheses: The sqlparse Recursive DoS

GHSA-27JP-WM6Q-GP25: Death by Parentheses: The sqlparse Recursive DoS

Comments
2 min read
CVE-2026-26187: CVE-2026-26187: escaping the Lake with a Path Traversal Two-Step

CVE-2026-26187: CVE-2026-26187: escaping the Lake with a Path Traversal Two-Step

Comments
2 min read
GHSA-XX7M-69FF-9CRP: SurrealDB's Poison Pill: Crashing the Database with a Single String

GHSA-XX7M-69FF-9CRP: SurrealDB's Poison Pill: Crashing the Database with a Single String

Comments
2 min read
CVE-2026-2391: Death by a Thousand Commas: Deep Dive into CVE-2026-2391

CVE-2026-2391: Death by a Thousand Commas: Deep Dive into CVE-2026-2391

Comments
2 min read
CVE-2026-26185: Clockwatching: Enumerating Directus Users via Timing Side-Channels

CVE-2026-26185: Clockwatching: Enumerating Directus Users via Timing Side-Channels

Comments
2 min read
GHSA-435G-FCV3-8J26: High Assurance, Low Availability: The Libcrux Triple Threat

GHSA-435G-FCV3-8J26: High Assurance, Low Availability: The Libcrux Triple Threat

Comments
2 min read
CVE-2026-25759: Command Pwned: Stored XSS in Statamic's Command Palette

CVE-2026-25759: Command Pwned: Stored XSS in Statamic's Command Palette

Comments
2 min read
GHSA-7PPG-37FH-VCR6: Vector Injection? No, Just Regular Injection: Milvus Critical Auth Bypass

GHSA-7PPG-37FH-VCR6: Vector Injection? No, Just Regular Injection: Milvus Critical Auth Bypass

Comments
2 min read
CVE-2026-25990: Pillow Fight: Weaponizing Photoshop Files via OOB Writes

CVE-2026-25990: Pillow Fight: Weaponizing Photoshop Files via OOB Writes

Comments
2 min read
CVE-2026-25949: Traefik's Eternal Wait: Bypassing TCP Timeouts with Postgres Magic Bytes

CVE-2026-25949: Traefik's Eternal Wait: Bypassing TCP Timeouts with Postgres Magic Bytes

Comments
2 min read
CVE-2025-66630: The Null Identity: Unmasking Fiber's Critical 'Zero-UUID' Vulnerability

CVE-2025-66630: The Null Identity: Unmasking Fiber's Critical 'Zero-UUID' Vulnerability

Comments
2 min read
CVE-2025-64111: CVE-2025-64111: The Gogs Symlink Shimmy to RCE

CVE-2025-64111: CVE-2025-64111: The Gogs Symlink Shimmy to RCE

Comments
2 min read
CVE-2026-25957: Cube.js Crash Course: Async Nightmares and WebSocket Woes

CVE-2026-25957: Cube.js Crash Course: Async Nightmares and WebSocket Woes

Comments
2 min read
CVE-2026-25498: Crafting Chaos: RCE in Craft CMS via Yii2 Behavior Injection

CVE-2026-25498: Crafting Chaos: RCE in Craft CMS via Yii2 Behavior Injection

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.