From Dev.to Community
Tech Articles
Curated developer articles, tutorials, and guides — auto-updated hourly
christine1d ago • 5 min read
Patch Your PHP: What PHP2Shell Means for WordPress Sites
Two critical PHP runtime bugs allow unauthenticated remote code execution. Updating WordPress won't ...
#php#security#wordpress#cve
4 2
CortexFlowOct 16, 2026 • 7 min read
Your LLM Gateway Holds Every API Key. LiteLLM Let Any User Steal Them: CVE-2026-35029 Patch Guide
CVE-2026-35029 and CVE-2026-59823 let any LiteLLM user escalate to admin, run code, and steal every ...
#security#cve#litellm#aiagents
0 0
CortexFlow1d ago • 10 min read
PHP2Shell: Two Critical PHP RCEs (CVSS 9.2) Leaked a Day Early — Check Your Version and Patch Today
PHP2Shell (CVE-2026-109618 + CVE-2026-109619): unauthenticated RCE on PHP 5.4–8.5. Fixed versions, t...
#php#security#rce#cve
0 0
CortexFlow5d ago • 7 min read
Archon's Agent Control API Has No Login and Listens on Every Interface: The CVE-2026-111322 Lockdown Guide
CVE-2026-111322: Archon's control API runs with no login on port 3090, versions 0.2.13–0.11.1. No pa...
#archon#cve#security#aicodingagents
0 0
Faizan Akhtar6d ago • 6 min read
CVE-2026-108551: openapi-typescript-codegen Handlebars Code Injection Vulnerability — Analysis & Mitigation
Originally published at...
#cybersecurity#cve#vulnerability#infosec
0 0
Faizan Akhtar6d ago • 6 min read
CVE-2026-96889: Next.js Image Optimization RCE Vulnerability — Analysis & Mitigation
Originally published at...
#cybersecurity#cve#vulnerability#infosec
0 0
Pradeep Kandepaneni5d ago • 5 min read
Securing a Service's Supply Chain — and What the Scanner Actually Caught, for $0
SBOM, a vulnerability scan with a provable blocking gate, keyless signing, and a cluster that reject...
#kubernetes#containers#cve#devsecops
0 1
CortexFlow6d ago • 8 min read
Ni8mare: The CVSS 10.0 n8n Flaw That Turns a Webhook Into a Full Server Takeover
Ni8mare (CVE-2026-21858) is a CVSS 10.0 n8n flaw: one crafted webhook request can read any file on y...
#n8n#security#cve#selfhosted
0 0
Ioneyrezende2d ago • 2 min read
Scoring two OpenVPN flaws against your own exposure, not the internet's
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
#openvpn#vpn#cve#vulnerabilitymanagement
0 0
![Vulnerability Report: GO-2026-6809 [Breakdown]](https://media2.dev.to/dynamic/image/width=1200,height=627,fit=cover,gravity=auto,format=auto/https%3A%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Farticles%2Fh5kit0pveftlapz0el96.png)
Ercross1d ago • 2 min read
Vulnerability Report: GO-2026-6809 [Breakdown]
𝗛𝗲𝗿𝗲'𝘀 𝘄𝗵𝗮𝘁 𝗖𝗩𝗘-𝟮𝟬𝟮𝟲-𝟭𝟭𝟭𝟵𝟰𝟯 𝗺𝗲𝗮𝗻𝘀 𝗳𝗼𝗿 𝘆𝗼𝘂𝗿 𝗚𝗼 𝘀𝗲𝗿𝘃𝗶𝗰𝗲𝘀 ...
#go#security#tls#cve
0 0
SorrelThorncroft2d ago • 2 min read
Defense in depth after the OpenVPN fixes: what to keep once 2.7.8 is deployed
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
#openvpn#vpn#cve#vulnerabilitymanagement
0 0
andreagomez2d ago • 2 min read
Certificate enrollment hygiene after CVE-2026-84790
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
#openvpn#vpn#cve#vulnerabilitymanagement
0 0
GUIDANCE WHITE4d ago • 12 min read
CVE-2026-107806 Explained: When the Same Person Holds Both the Lock and the Key, the Signature Proves Nothing
Overview Item Detail CVE ID CVE-2026-107806 Affected product Nginx UI...
#cybersecurity#security#cve#nginx
0 0
Ariful Islam2d ago • 8 min read
PHP2Shell: Is Your WordPress, Laravel or PHP Site Affected? How to Patch Today
On October 21, 2026, PHP shipped emergency releases 8.5.12, 8.4.27, 8.3.36 and 8.2.35. They fix two....
#php#security#php2shell#cve
0 0
GUIDANCE WHITE2d ago • 7 min read
CVE-2026-103889: One Commented-Out Security Check Led to Fully Unauthenticated RCE (CVSS 9.8)
Overview Item Detail CVE ID CVE-2026-103889 Affected product 3D Product...
#wordpress#cybersecurity#security#cve
1 1
jeffrey4d ago • 4 min read
Pgpool-II client certificate validation bypass: what CVE-2026-92868 changes
Pgpool-II client certificate validation bypass: what CVE-2026-92868 changes
#security#postgres#pgpool#cve
0 0
jeffrey2d ago • 2 min read
Two fixes, two audiences: explaining the OpenVPN advisories to management and to engineers
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
#openvpn#vpn#cve#vulnerabilitymanagement
0 0
OnaEiuspkz2d ago • 2 min read
Spotting the OpenVPN flaw patterns in your own code reviews
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
#openvpn#vpn#cve#vulnerabilitymanagement
1 0
facilishz5d ago • 2 min read
CVE-2026-96358: Sixteen Projects, Nineteen Ranges, One Advisory Batch
Analysis of CVE-2026-96358: Sixteen Projects, Nineteen Ranges, One Advisory Batch
#security#drupal#cve#vulnerability
0 0
facilishz2d ago • 2 min read
Config review for OpenVPN users: the PUSH_UPDATE path behind CVE-2026-88964
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
#openvpn#vpn#cve#vulnerabilitymanagement
0 0
syrex10132d ago • 4 min read
PHP2Shell: Turning a Session Upload-Progress UAF into Unauthenticated RCE (CVE-2026-109618 / CVE-2026-109619)
I published PHP2Shell, a proof-of-concept for two critical PHP vulnerabilities — CVE-2026-109618 and...
#security#php#cve#infosec
0 0
jeffrey5d ago • 2 min read
CVE-2026-96357 and the Audit Trail: Documenting a Shared-Impact Advisory
CVE-2026-96357 and the Audit Trail: Documenting a Shared-Impact Advisory The...
#security#drupal#cve#vulnerability
0 0
Hacks.gr4d ago • 2 min read
Malicious code in paid version of popular WordPress plugin
Official distributions and updates of Rank Math PRO served between October 15 and 16 contained malic...
#rankmath#wordpress#malware#cve
0 0
kozhevniko1d ago • 2 min read
Timeline discipline for the OpenVPN 2.7.8 change
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
#openvpn#vpn#cve#vulnerabilitymanagement
0 0