From Dev.to Community
Tech Articles
Curated developer articles, tutorials, and guides — auto-updated hourly
uehara21h ago • 12 min read
What attackers now hold: when AI runs the attack itself
This is part 2 of the series "Protect Your Own Service Yourself — Self-Defense Security in the Age o...
#security#ai#vulnerability#infosec
1 1
Faizan Akhtar6d ago • 6 min read
CVE-2026-108551: openapi-typescript-codegen Handlebars Code Injection Vulnerability — Analysis & Mitigation
Originally published at...
#cybersecurity#cve#vulnerability#infosec
0 0
Faizan Akhtar6d ago • 6 min read
CVE-2026-96889: Next.js Image Optimization RCE Vulnerability — Analysis & Mitigation
Originally published at...
#cybersecurity#cve#vulnerability#infosec
0 0
OnaEiuspkzOct 16, 2026 • 4 min read
CVE-2026-19572: a hardcoded bypass in the console that hands out software licences
A licence administration console is an estate-wide control point; a bypass in its SOAP handler is an...
#licensing#authentication#embeddedsoftware#vulnerability
0 0
andreagomez5d ago • 3 min read
Threat Prevention Signatures and CVE-2026-0322: What limited Coverage Requires
Technical analysis of CVE-2026-0322, an authenticated RCE in the PAN-OS management interface.
#security#vulnerability#panos#cve20260322
0 0
andreagomez3d ago • 3 min read
Measured Response: Closing CVE-2026-83701 Without Overreacting
Measured Response: Closing CVE-2026-83701 Without Overreacting
#vulnerability#windows#privilegeescalation
0 0
SorrelThorncroft1d ago • 3 min read
Threat Modelling the Insider Path in CVE-2026-0313
Threat Modelling the Insider Path in CVE-2026-0313
#vulnerability#cortexxsoar#cve20260313
0 0
andreagomez1d ago • 3 min read
What ZoomEye Says and Does Not Say About CVE-2026-0313 Exposure
What ZoomEye Says and Does Not Say About CVE-2026-0313 Exposure
#vulnerability#cortexxsoar#cve20260313
0 0
ArmelDev2d ago • 5 min read
PHP2Shell: two critical PHP vulnerabilities, from discovery to patch
Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) allow remote code execution. ...
#softwaredevelopment#security#php#vulnerability
0 0
SorrelThorncroft4d ago • 2 min read
Hunting for SQL Injection Abuse in MOVEit Transfer Before the Patch Lands
Detection ideas for CVE-2026-89076 when maintenance is still hours or days away.
#vulnerability#moveittransfer#cve202689076
0 0
SorrelThorncroft1d ago • 3 min read
CVE-2026-104286: What FortiMail Adds to the Mail Gateway Exploitation Trend
The mail gateway as a recurring exploitation target, and the controls that apply regardless of which...
#vulnerability#emailsecurity#fortinet
0 0
andreagomez4d ago • 2 min read
Eight CVEs, three Apache projects: placing CVE-2026-102795 in the October 2026 advisory batch
Technical analysis of CVE-2026-102795 in Apache Traffic Server.
#vulnerability#apachetrafficserver#accesscontrol
0 0
andreagomez4d ago • 3 min read
Verifying That CVE-2026-96369 Is Actually Fixed on Each Drupal Instance
Verifying That CVE-2026-96369 Is Actually Fixed on Each Drupal Instance
#security#vulnerability#drupal#cve202696369
0 0
SorrelThorncroft4d ago • 2 min read
Apache mod_vhost_alias Overflow CVE-2026-63292: Exposure, Exploit Conditions and Patching Priorities
Apache mod_vhost_alias Overflow CVE-2026-63292: Exposure, Exploit Conditions and Patching...
#apache#httpd#vulnerability#modvhostalias
0 0
SorrelThorncroft3d ago • 4 min read
CVE-2026-104286: FortiMail Path Traversal Under Active Exploitation
Analysis of CVE-2026-104286, a CVSS 9.8 unauthenticated path traversal in Fortinet FortiMail that is...
#vulnerability#fortinet#fortimail#cve2026104286
0 0
andreagomez5d ago • 3 min read
What Twelve High-Severity MOVEit Flaws Mean for an Audit Trail
Mapping the October 2026 MOVEit Transfer CVEs to evidence an assessor will ask for.
#vulnerability#moveittransfer#cve202689076
0 0
Ioneyrezende1d ago • 3 min read
Zammad CVE-2026-102489 and CVE-2026-102490: When the Support Desk Becomes the Entry Point
Why a customer support platform is an attractive target, and how automation definitions become persi...
#vulnerability#collaboration#zammad
0 0
andreagomez5d ago • 2 min read
CVE-2026-79820 and the Two Faces of HPE Remote Management: iLO 7 and iMC
Analysis of CVE-2026-79820, an improper authentication flaw in HPE Integrated Lights-Out 7.
#security#vulnerability#hpeilo#cve202679820
0 0
SorrelThorncroft3d ago • 4 min read
Proving You Patched: Evidence and Audit Trail for CVE-2026-39919
Proving You Patched: Evidence and Audit Trail for CVE-2026-39919 Regulated organisations...
#vulnerability#ghostscript#memorysafety
0 0
facilishzOct 16, 2026 • 3 min read
Citrix NetScaler CVE-2026-19490 and CVE-2026-19489: Why Patch Priority Follows Configuration
Technical analysis of Citrix NetScaler ADC and Gateway issues CVE-2026-19489 and CVE-2026-19490 (var...
#security#vulnerability#citrix#netscaler
0 0
Ioneyrezende1d ago • 4 min read
CVE-2026-0313 Patch Work: Getting the Cortex OS Query Pack to 1.0.17
CVE-2026-0313 Patch Work: Getting the Cortex OS Query Pack to 1.0.17
#vulnerability#cortexxsoar#cve20260313
0 0
andreagomez18h ago • 3 min read
A partner can manage many customers: why VeloCloud tenant structure raises the stakes of CVE-2026-114625
Technical analysis of CVE-2026-114625 in Arista VeloCloud Orchestrator.
#vulnerability#sdwan#arista#velocloud
0 0
SorrelThorncroft17h ago • 3 min read
Hunting VeloCloud Orchestrator exploitation: what CVE-2026-114625 leaves in the logs
Technical analysis of CVE-2026-114625 in Arista VeloCloud Orchestrator.
#vulnerability#sdwan#arista#velocloud
0 0
facilishz6d ago • 4 min read
AsyncHttpClient CVE-2026-107282: when a replayed request carries the wrong identity
Why a JVM HTTP client can deliver valid credentials to the wrong host, and how connection pooling tu...
#java#httpclient#credentials#vulnerability
0 0