Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
vulnerabilitymanagement
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Two Local Privilege Escalations Outranked the Remote Bugs: How to Read the September 2026 Microsoft Patch Wave
yutianle
yutianle
yutianle
Follow
Oct 12
Two Local Privilege Escalations Outranked the Remote Bugs: How to Read the September 2026 Microsoft Patch Wave
#
patchmanagement
#
vulnerabilitymanagement
#
microsoft
#
privilegeescalation
Comments
Add Comment
4 min read
Greenbone on 3,657 hosts: the scanner that knows where every weakness is
kozhevniko
kozhevniko
kozhevniko
Follow
Oct 12
Greenbone on 3,657 hosts: the scanner that knows where every weakness is
#
security
#
zoomeye
#
exposure
#
vulnerabilitymanagement
Comments
Add Comment
3 min read
F5 BIG-IP APM under OAuth: a heap overflow that only fires on one configuration
yutianle
yutianle
yutianle
Follow
Oct 11
F5 BIG-IP APM under OAuth: a heap overflow that only fires on one configuration
#
cybersecurity
#
vulnerabilitymanagement
Comments
Add Comment
3 min read
The September 2026 KEV wave as an operations dataset, not a news cycle
kozhevniko
kozhevniko
kozhevniko
Follow
Oct 6
The September 2026 KEV wave as an operations dataset, not a news cycle
#
cisakev
#
vulnerabilitymanagement
#
edgesecurity
Comments
Add Comment
2 min read
One Console, Every Firewall: What Cisco FMC CVE-2026-20079 Teaches About Management-Plane Risk
kozhevniko
kozhevniko
kozhevniko
Follow
Oct 4
One Console, Every Firewall: What Cisco FMC CVE-2026-20079 Teaches About Management-Plane Risk
#
security
#
vulnerabilitymanagement
#
networksecurity
Comments
Add Comment
4 min read
GitLab CVE-2026-85706: When a Path Traversal Lands in the Software Delivery Chain
yutianle
yutianle
yutianle
Follow
Oct 3
GitLab CVE-2026-85706: When a Path Traversal Lands in the Software Delivery Chain
#
pathtraversal
#
devsecops
#
credentialexposure
#
vulnerabilitymanagement
Comments
Add Comment
4 min read
The Suffix That Skipped Authentication: Kestra CVE-2026-49869 and Why Path Matching Is Not Authorisation
kozhevniko
kozhevniko
kozhevniko
Follow
Oct 3
The Suffix That Skipped Authentication: Kestra CVE-2026-49869 and Why Path Matching Is Not Authorisation
#
security
#
applicationsecurity
#
vulnerabilitymanagement
Comments
Add Comment
3 min read
Penetration Test Findings That Never Get Fixed: Running a Retest Programme
kozhevniko
kozhevniko
kozhevniko
Follow
Sep 30
Penetration Test Findings That Never Get Fixed: Running a Retest Programme
#
security
#
vulnerabilitymanagement
#
governance
Comments
Add Comment
2 min read
When the Artifact Repository Is the Target: JFrog Artifactory and the Software Supply Chain Chokepoint
StarkMan
StarkMan
StarkMan
Follow
Sep 30
When the Artifact Repository Is the Target: JFrog Artifactory and the Software Supply Chain Chokepoint
#
security
#
supplychain
#
vulnerabilitymanagement
Comments
Add Comment
3 min read
When the AI Gateway Becomes the Weakest Link: Command Execution in LiteLLM's MCP Test Endpoints
kozhevniko
kozhevniko
kozhevniko
Follow
Sep 30
When the AI Gateway Becomes the Weakest Link: Command Execution in LiteLLM's MCP Test Endpoints
#
cybersecurity
#
aiinfrastructure
#
vulnerabilitymanagement
#
litellm
Comments
Add Comment
4 min read
Kestra's Path Suffix Bug: When a Framework Forgets to Check the Whole Route
jeffrey
jeffrey
jeffrey
Follow
Sep 29
Kestra's Path Suffix Bug: When a Framework Forgets to Check the Whole Route
#
vulnerabilitymanagement
#
kestra
#
commandinjection
#
cve202649869
1
 reaction
Comments
Add Comment
4 min read
A One-Character Token Was Enough: LiteLLM and the Credential Concentration Problem in AI Gateways
yutianle
yutianle
yutianle
Follow
Sep 25
A One-Character Token Was Enough: LiteLLM and the Credential Concentration Problem in AI Gateways
#
security
#
aisecurity
#
vulnerabilitymanagement
Comments
Add Comment
4 min read
Edge Appliance Zero-Days: What the SonicWall SMA1000 Chain Teaches About Patch Windows
jeffrey
jeffrey
jeffrey
Follow
Sep 21
Edge Appliance Zero-Days: What the SonicWall SMA1000 Chain Teaches About Patch Windows
#
vulnerabilitymanagement
#
edgesecurity
#
ssrf
#
commandinjection
Comments
Add Comment
4 min read
The Management Plane Is the Attack Plane: What Three Clusters on One Cisco FMC Tell Defenders
kozhevniko
kozhevniko
kozhevniko
Follow
Sep 21
The Management Plane Is the Attack Plane: What Three Clusters on One Cisco FMC Tell Defenders
#
security
#
vulnerabilitymanagement
#
networksecurity
#
exploitedinthewild
Comments
Add Comment
4 min read
Extended Support Isn't Extended Security: Managing Vulnerabilities in ELS Linux Environments
Ayush Singh
Ayush Singh
Ayush Singh
Follow
Sep 20
Extended Support Isn't Extended Security: Managing Vulnerabilities in ELS Linux Environments
#
cybersecurity
#
infosec
#
linux
#
vulnerabilitymanagement
5
 reactions
Comments
Add Comment
7 min read
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account