DEV Community

#vulnerabilitymanagement

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Two Local Privilege Escalations Outranked the Remote Bugs: How to Read the September 2026 Microsoft Patch Wave

Two Local Privilege Escalations Outranked the Remote Bugs: How to Read the September 2026 Microsoft Patch Wave

Comments
4 min read
Greenbone on 3,657 hosts: the scanner that knows where every weakness is

Greenbone on 3,657 hosts: the scanner that knows where every weakness is

Comments
3 min read
F5 BIG-IP APM under OAuth: a heap overflow that only fires on one configuration

F5 BIG-IP APM under OAuth: a heap overflow that only fires on one configuration

Comments
3 min read
The September 2026 KEV wave as an operations dataset, not a news cycle

The September 2026 KEV wave as an operations dataset, not a news cycle

Comments
2 min read
One Console, Every Firewall: What Cisco FMC CVE-2026-20079 Teaches About Management-Plane Risk

One Console, Every Firewall: What Cisco FMC CVE-2026-20079 Teaches About Management-Plane Risk

Comments
4 min read
GitLab CVE-2026-85706: When a Path Traversal Lands in the Software Delivery Chain

GitLab CVE-2026-85706: When a Path Traversal Lands in the Software Delivery Chain

Comments
4 min read
The Suffix That Skipped Authentication: Kestra CVE-2026-49869 and Why Path Matching Is Not Authorisation

The Suffix That Skipped Authentication: Kestra CVE-2026-49869 and Why Path Matching Is Not Authorisation

Comments
3 min read
Penetration Test Findings That Never Get Fixed: Running a Retest Programme

Penetration Test Findings That Never Get Fixed: Running a Retest Programme

Comments
2 min read
When the Artifact Repository Is the Target: JFrog Artifactory and the Software Supply Chain Chokepoint

When the Artifact Repository Is the Target: JFrog Artifactory and the Software Supply Chain Chokepoint

Comments
3 min read
When the AI Gateway Becomes the Weakest Link: Command Execution in LiteLLM's MCP Test Endpoints

When the AI Gateway Becomes the Weakest Link: Command Execution in LiteLLM's MCP Test Endpoints

Comments
4 min read
Kestra's Path Suffix Bug: When a Framework Forgets to Check the Whole Route

Kestra's Path Suffix Bug: When a Framework Forgets to Check the Whole Route

1
Comments
4 min read
A One-Character Token Was Enough: LiteLLM and the Credential Concentration Problem in AI Gateways

A One-Character Token Was Enough: LiteLLM and the Credential Concentration Problem in AI Gateways

Comments
4 min read
Edge Appliance Zero-Days: What the SonicWall SMA1000 Chain Teaches About Patch Windows

Edge Appliance Zero-Days: What the SonicWall SMA1000 Chain Teaches About Patch Windows

Comments
4 min read
The Management Plane Is the Attack Plane: What Three Clusters on One Cisco FMC Tell Defenders

The Management Plane Is the Attack Plane: What Three Clusters on One Cisco FMC Tell Defenders

Comments
4 min read
Extended Support Isn't Extended Security: Managing Vulnerabilities in ELS Linux Environments

Extended Support Isn't Extended Security: Managing Vulnerabilities in ELS Linux Environments

5
Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.