DEV Community

#cve

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
Breaking the Cold Chain: Technical Breakdown of CVE-2025-41450 and Cyber-Physical OT Sabotage

Breaking the Cold Chain: Technical Breakdown of CVE-2025-41450 and Cyber-Physical OT Sabotage

Comments
2 min read
CVE-2026-88984: CVE-2026-88984: RBAC Authorization Bypass in Kubeflow Pipelines Multi-User API Server

CVE-2026-88984: CVE-2026-88984: RBAC Authorization Bypass in Kubeflow Pipelines Multi-User API Server

Comments
3 min read
[CVE-2026-110186] Langflow : How a Default-On Auto-Login Opens the Door to Unauthenticated RCE

[CVE-2026-110186] Langflow : How a Default-On Auto-Login Opens the Door to Unauthenticated RCE

Comments
5 min read
One Range header skipped the firmware assignment check: CVE-2026-16454 in Eclipse hawkBit

One Range header skipped the firmware assignment check: CVE-2026-16454 in Eclipse hawkBit

Comments
8 min read
October's Node.js fixes have to land in Azure Pipelines more than once

October's Node.js fixes have to land in Azure Pipelines more than once

Comments
2 min read
CVE-2026-16454: CVE-2026-16454: Object-Level Authorization Bypass in Eclipse hawkBit Direct Device Integration Controller

CVE-2026-16454: CVE-2026-16454: Object-Level Authorization Bypass in Eclipse hawkBit Direct Device Integration Controller

Comments
4 min read
CVE-2026-62284: CVE-2026-62284: Remote Code Execution and SSRF via Unsanitized Kubeconfig in OSAC Operator

CVE-2026-62284: CVE-2026-62284: Remote Code Execution and SSRF via Unsanitized Kubeconfig in OSAC Operator

Comments
4 min read
CVE-2026-62361: CVE-2026-62361: Authenticated SQL Injection and Table Access Control Bypass in Listmonk Subscriber Export

CVE-2026-62361: CVE-2026-62361: Authenticated SQL Injection and Table Access Control Bypass in Listmonk Subscriber Export

Comments
4 min read
GHSA-9J25-MM2H-2F76: CVE-2026-48750: Arbitrary File Write on Host via exec-output Symlink in Canonical LXD and Incus

GHSA-9J25-MM2H-2F76: CVE-2026-48750: Arbitrary File Write on Host via exec-output Symlink in Canonical LXD and Incus

Comments
6 min read
GHSA-VGHH-5RFX-XHQ8: CVE-2026-48749: Arbitrary Host File Read and Write via Malicious Image Symlink in Canonical LXD and Incus

GHSA-VGHH-5RFX-XHQ8: CVE-2026-48749: Arbitrary Host File Read and Write via Malicious Image Symlink in Canonical LXD and Incus

Comments
4 min read
GHSA-FMC8-P6Q7-75CC: GHSA-fmc8-p6q7-75cc: Argument Injection in Canonical LXD Backup Compression Leads to Host Root Code…

GHSA-FMC8-P6Q7-75CC: GHSA-fmc8-p6q7-75cc: Argument Injection in Canonical LXD Backup Compression Leads to Host Root Code…

Comments
4 min read
GHSA-PJFF-C2WC-F6JM: CVE-2026-48769: Arbitrary File Write and Remote Code Execution via Trusted Image Hash in Canonical LXD…

GHSA-PJFF-C2WC-F6JM: CVE-2026-48769: Arbitrary File Write and Remote Code Execution via Trusted Image Hash in Canonical LXD…

Comments
3 min read
CVE-2026-33050: CVE-2026-33050: OS Command Injection in GeoNode Vector Upload Handler

CVE-2026-33050: CVE-2026-33050: OS Command Injection in GeoNode Vector Upload Handler

Comments
4 min read
CVE-2026-55649: CVE-2026-55649: Stored Cross-Site Scripting in GeoNode Document Metadata Abstract Field

CVE-2026-55649: CVE-2026-55649: Stored Cross-Site Scripting in GeoNode Document Metadata Abstract Field

Comments
3 min read
GHSA-7MR3-28H5-M5VX: GHSA-7mr3-28h5-m5vx: Authorization Bypass and Cross-Project Volume Copy in Canonical LXD

GHSA-7MR3-28H5-M5VX: GHSA-7mr3-28h5-m5vx: Authorization Bypass and Cross-Project Volume Copy in Canonical LXD

Comments
4 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.