DEV Community

#remotecodeexecution

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Six weeks from notice to KEV: the disclosure timeline behind the Plex RCE chain

Six weeks from notice to KEV: the disclosure timeline behind the Plex RCE chain

1
Comments
4 min read
Plex Media Server: four flaws, one unauthenticated path to code execution

Plex Media Server: four flaws, one unauthenticated path to code execution

Comments
4 min read
What 507,974 internet-facing Plex servers do and do not tell you about CVE-2026-96654

What 507,974 internet-facing Plex servers do and do not tell you about CVE-2026-96654

Comments
4 min read
Plex on a NAS: where the 1.43.3 patch actually arrives, and why the gap matters

Plex on a NAS: where the 1.43.3 patch actually arrives, and why the gap matters

Comments
4 min read
Four medium scores, one exploited chain: reading the Plex CVEs correctly

Four medium scores, one exploited chain: reading the Plex CVEs correctly

Comments
3 min read
The Codecs directory: why CVE-2026-96656 turns a transcoder preference into code execution

The Codecs directory: why CVE-2026-96656 turns a transcoder preference into code execution

Comments
4 min read
From loopback to owner token: the middle of the Plex Media Server chain

From loopback to owner token: the middle of the Plex Media Server chain

Comments
4 min read
Checking a Plex Media Server for compromise after the 1.43.3 fixes

Checking a Plex Media Server for compromise after the 1.43.3 fixes

1
Comments
4 min read
Serious PHP security flaws threaten millions of websites worldwide

Serious PHP security flaws threaten millions of websites worldwide

Comments
2 min read
Drupal's October 2026 Criticals and the Limits of "Just Update"

Drupal's October 2026 Criticals and the Limits of "Just Update"

Comments
3 min read
Node.js patched a code-execution Brotli bug October 21

Node.js patched a code-execution Brotli bug October 21

Comments
3 min read
Inside CVE-2026-109618: how PHP's out-of-memory path became a remote code execution bug

Inside CVE-2026-109618: how PHP's out-of-memory path became a remote code execution bug

Comments
4 min read
Patching CVE-2026-109618 across a fleet: where PHP actually hides in your inventory

Patching CVE-2026-109618 across a fleet: where PHP actually hides in your inventory

Comments
3 min read
Same week, same interpreter: CVE-2026-109618 and the two-defect PHP release

Same week, same interpreter: CVE-2026-109618 and the two-defect PHP release

Comments
3 min read
CVE-2026-109619: the PHP flaw that outlives its own request

CVE-2026-109619: the PHP flaw that outlives its own request

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.