Curated security research, vulnerabilities, advisories and tools for practitioners.

#cve

Security coverage tagged cve.

1.

The CVE spike across major software companies is a remediation problem

blog | 2026-09-10 00:00 | aikido.dev | original ↗ | #ai-security | #cloud | #vulnerability-management

2.

A GUID is Not a Credential: Unauthenticated RCE in Veeam Service Provider Console

vulnerability | Critical | 2026-08-26 00:00 | bishopfox.com | original ↗ | #rce | #backup-security | #authentication

3.

CVE-2026-19478 GitLab GraphQL unauthenticated project deletion

vulnerability | Critical | 2026-08-27 06:30 | CVE-2026-19478 | github.com | original ↗ | #gitlab | #access-control | #authentication

4.

dinosn/givewp-cve-2026-82222-rce-lab: GiveWP CVE-2026-82222 RCE Docker Lab & PoC

research | 2026-08-30 05:15 | CVE-2026-82222 | github.com | original ↗ | #rce | #php | #wordpress

5.

Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon

research | 2026-08-27 00:00 | CVE-2026-7899 | nebusec.ai | original ↗ | #ai-security | #bug-bounty | #rce

6.

Yet another RCE in Gogs, but it's fixed this time!

vulnerability | 2026-08-19 00:00 | aikido.dev | original ↗ | #rce | #gitlab | #xss

7.

CVE-2026-8452 PoC: Citrix NetScaler pre-auth RCE detection and exploitation

vulnerability | Critical | 2026-08-14 15:01 | CVE-2026-8452 | github.com | original ↗ | #rce | #public-poc | #pre-auth

8.

CVE-2026-15748 — WPMU DEV Forminator Forms Select Field Injection Unrestricted File Upload

research | 2026-08-18 00:00 | CVE-2026-15748 | aretiq.ai | original ↗ | #ai-security | #rce | #wordpress

9.

CVE-2026-66804 PoC: Windows Cross Device virtual camera local privilege escalation to SYSTEM

vulnerability | High | 2026-08-13 01:42 | CVE-2026-66804 | github.com | original ↗ | #public-poc | #privilege-escalation | #windows-security

10.

CVE-2026-68398 PoC: Ubuntu PPPoL2TP kernel UAF local privilege escalation

vulnerability | High | 2026-08-12 15:04 | CVE-2026-68398 | github.com | original ↗ | #public-poc | #kernel-security | #privilege-escalation

11.

CVE-2026-61967 — miniOrange OTP Verification Ultimate Member Password Reset Authentication Bypass

research | 2026-08-15 00:00 | CVE-2026-61967 | aretiq.ai | original ↗ | #ai-security | #authentication-bypass | #wordpress

12.

CVE-2023-25157 PoC: GeoServer jsonArrayContains SQL injection to PostgreSQL RCE

tool | 2026-08-13 21:11 | CVE-2023-25157 | gist.github.com | original ↗ | #rce | #public-poc | #sql-injection

13.

CVE-2026-24031 PoC: Dovecot SQL authentication bypass and user enumeration

tool | 2026-08-12 23:19 | CVE-2026-24031 | github.com | original ↗ | #public-poc | #authentication-bypass | #sql-injection

14.

Unauthenticated RCE in WordPress core (wp2shell), via SQL injection

vulnerability | Critical | 2026-07-17 00:00 | CVE-2026-63030 | aikido.dev | original ↗ | #rce | #featured | #vulnerability-research

15.

The upgrade trap: when upgrading is the wrong answer to a CVE

blog | 2026-07-20 00:00 | aikido.dev | original ↗ | #supply-chain | #vulnerability-management | #open-source

16.

Benchmarking 13 AI models on rediscovering known CVEs

blog | 2026-07-16 00:00 | aikido.dev | original ↗ | #ai-security | #vulnerability-research | #benchmark

17.

Answer these 3 questions to uncover real CVE exposure

blog | 2026-07-02 07:03 | yeswehack.com | original ↗ | #vulnerability-management | #threat-intelligence | #ctem

18.

Aikido acquires Root to secure the supply chain

blog | 2026-06-30 00:00 | aikido.dev | original ↗ | #supply-chain | #vulnerability-management | #open-source

19.

How to Chain Vulnerabilities for RCE: From Image Metadata to Complete System Compromise

research | 2026-06-22 11:46 | hackenproof.com | original ↗ | #rce | #pentesting | #cve

20.

Tip of the AIceberg, prioritising prioritisation in aviation, Anthropic forced to shut down latest models – offsec roundup for CISOs

blog | 2026-06-19 09:09 | yeswehack.com | original ↗ | #ai-security | #vulnerability-management | #cve

21.

What to do when your CEO asks, ‘Are we exposed?’

blog | 2026-06-11 07:42 | yeswehack.com | original ↗ | #vulnerability-management | #continuous-testing | #incident-response

22.

Aikido x Docker: less noise, more signal in your containers

blog | 2026-06-11 00:00 | aikido.dev | original ↗ | #supply-chain | #cloud-security | #vulnerability-management

23.

StubZero: $148,337 RCE in Google Cloud Production

blog | 2026-05-22 00:00 | CVE-2026-2031 | brutecat.com | original ↗ | #bug-bounty | #cloud | #rce

24.

3 ways custom scan checks turn practitioner knowledge into scalable automation

blog | 2026-05-01 06:52 | portswigger.net | original ↗ | #zero-day | #appsec | #burp-suite

25.

Validation: Your path to overcoming alert fatigue in vulnerability management

blog | 2026-04-30 06:35 | yeswehack.com | original ↗ | #ai-security | #vulnerability-management | #continuous-testing

26.

NIST NVD Update: What it Means For Vulnerability Management

blog | 2026-04-27 10:33 | wiz.io | original ↗ | #vulnerability-management | #cve | #nist

27.

Understanding the CVE Ecosystem and NIST’s Changing Role

blog | 2026-04-22 00:00 | bishopfox.com | original ↗ | #vulnerability-management | #remediation | #risk-management

28.

Axios CVE-2026-40175: a critical bug that’s… not exploitable

vulnerability | Medium | 2026-04-14 00:00 | CVE-2026-40175 | aikido.dev | original ↗ | #prototype-pollution | #request-smuggling | #cve

29.

Multiple Cross-Site Scripting (XSS) Vulnerabilities in Mailcow

research | 2026-04-17 00:00 | aikido.dev | original ↗ | #ai-security | #account-takeover | #xss

30.

Three Critical RCE Vulnerabilities in Microsoft Software Identified Autonomously by XBOW

research | 2026-04-02 04:00 | xbow.com | original ↗ | #ai-security | #cloud | #rce