DEV Community

#vulnerability

Discussions about specific security vulnerabilities and CVEs.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
CVE-2026-106931 Observability Gaps on the Web Server Itself

CVE-2026-106931 Observability Gaps on the Web Server Itself

Comments
3 min read
CVE-2026-106931 When Someone Else Runs Your SiteGuard

CVE-2026-106931 When Someone Else Runs Your SiteGuard

Comments
3 min read
Reducing NSD exposure before the upgrade: interim mitigations for the 4.15.3 CVEs

Reducing NSD exposure before the upgrade: interim mitigations for the 4.15.3 CVEs

Comments
4 min read
Six minor releases of exposure: what the NSD 4.10.0 to 4.15.2 range says about patch cadence

Six minor releases of exposure: what the NSD 4.10.0 to 4.15.2 range says about patch cadence

Comments
3 min read
Should You Worry About CVE-2026-101339? A Decision Guide for NSD Operators

Should You Worry About CVE-2026-101339? A Decision Guide for NSD Operators

Comments
3 min read
Managed DNS providers inherit a new supply-chain risk from the NSD stack overwrite flaws

Managed DNS providers inherit a new supply-chain risk from the NSD stack overwrite flaws

Comments
3 min read
Serious PHP security flaws threaten millions of websites worldwide

Serious PHP security flaws threaten millions of websites worldwide

Comments
2 min read
Parsing Is the Attack Surface: Lessons From NSD and CVE-2026-101339

Parsing Is the Attack Surface: Lessons From NSD and CVE-2026-101339

Comments
3 min read
CVE-2026-70571: a stack overflow in Exchange Server, and the mail perimeter that keeps it reachable

CVE-2026-70571: a stack overflow in Exchange Server, and the mail perimeter that keeps it reachable

Comments
3 min read
Reading the severity split: NGINX calls the October 2026 fixes medium while F5 scores them 9.2

Reading the severity split: NGINX calls the October 2026 fixes medium while F5 scores them 9.2

Comments
4 min read
CVE-2026-96951: The Mark-of-the-Web Bypass and the Limits of Trust-on-Download

CVE-2026-96951: The Mark-of-the-Web Bypass and the Limits of Trust-on-Download

Comments
4 min read
AhsayCBS CVE-2026-105133 and CVE-2026-105134: The Backup Server as an Attack Platform

AhsayCBS CVE-2026-105133 and CVE-2026-105134: The Backup Server as an Attack Platform

Comments
3 min read
Drupal's October 2026 Criticals and the Limits of "Just Update"

Drupal's October 2026 Criticals and the Limits of "Just Update"

Comments
3 min read
CVE-2026-0322: Why a Firewall Management Interface Keeps Appearing in Exploitation Reports

CVE-2026-0322: Why a Firewall Management Interface Keeps Appearing in Exploitation Reports

Comments
3 min read
What shared hosting WordPress users can do about php2shell

What shared hosting WordPress users can do about php2shell

Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.