PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[EN] Build Your Nightmare - Dissecting CVE-2026-12191

yokai.hakaisecurity.io | vulnerability | CVE-2026-12191 | #ai-security | #vulnerability-research | #deserialization | #research
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Summary As the global autonomous vehicle market grows, the security of critical driver assistance systems may be hanging by a thread. Our recent research exposed a systemic flaw that turns the sophistication of artificial intelligence into the vehicle’s biggest vulnerability point. The Hakai Yokai Research Team has identified CVE-2026-12191, a critical insecure deserialization vulnerability within […]
CVE
CVE-2026-12191
Published
Collected

Related coverage

vulnerability · yokai.hakaisecurity.io
[PT-BR] Build Your Nightmare - Destrinchando a CVE-2026-12191
Resumo Enquanto o mercado global de veículos autônomos cresce, a segurança de sistemas críticos de assistência à direção pode estar por um fio. Nossa pesquisa recente expôs uma falha sistêmica que transforma a sofisticação da inteligência artificial no maior ponto de vulnerabilidade do veículo. O time de pesquisa Yokai Research da Hakai identificou a CVE-2026-12191, […]
research · vercel.com
DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
Today we're releasing DeepsecBench, a benchmark that evaluates how well different models find security vulnerabilities in application code.
vulnerability · yokai.hakaisecurity.io
CVE-2026-25769: RCE via insecure deserialization in wazuh cluster - remote command execution through cluster protocol
Abstract In this research, Hakai Security Research Team has identified a critical Remote Code Execution (RCE) vulnerability in Wazuh versions up to 4.14.1 that allows arbitrary command execution on the master node through insecure deserialization in the cluster communication protocol. The vulnerability stems from the lack of validation in the as_wazuh_object() function, which automatically imports […]
vulnerability · yokai.hakaisecurity.io
OsCommerce v4 RCE: Unveiling the file upload bypass threat
In my recent research, I identified a critical vulnerability in osCommerce v4, specifically a Remote Code Execution (RCE) vulnerability enabled by bypassing file upload restrictions. I’ve always enjoyed testing file upload bypass techniques in my assessments. Vulnerabilities Identified in OsCommerce Version 4 The CVE-2024-22724 was assigned to the discovery of this vulnerability. The issue […]
vulnerability · yokai.hakaisecurity.io
Fortigate - Autenticação de Desvio Levando à Assunção Completa do Dispositivo
Pesquisa de vulnerabilidade 1Day pela Equipe de Pesquisa da Hakai Este post trata da jornada para criar uma Prova de Conceito sobre a CVE-2022-40684, esta vulnerabilidade foi atribuída pela Fortinet como uma falha de autenticação usando uma vulnerabilidade de caminho ou canal alternativo [CWE-288]. Linha do Tempo 07/10/2022 – Primeira notícia sobre a vulnerabilidade, […]
vulnerability · yokai.hakaisecurity.io
Windows Admin-to-Kernel Elevation of Privilege (CVE-2024-21338)
On February 13th, 2024, Microsoft disclosed the CVE-2024-21338 based on the security report which allows for read/write in the kernel memory.
Back