DEV Community

#vulnerability

Discussions about specific security vulnerabilities and CVEs.

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Why Nobody Has Exploited CVE-2026-110812 Yet, and Why That Should Not Set Your Timeline

Why Nobody Has Exploited CVE-2026-110812 Yet, and Why That Should Not Set Your Timeline

Comments
3 min read
After Plex2Shell: A Detection and Recovery Checklist for Media Servers You Cannot Rebuild Blindly

After Plex2Shell: A Detection and Recovery Checklist for Media Servers You Cannot Rebuild Blindly

Comments
4 min read
CVE-2026-6653 reaches further than the libxml2 package name

CVE-2026-6653 reaches further than the libxml2 package name

Comments
2 min read
The Payoff Behind Plex2Shell: Why Home Media Servers Become Proxy and Mining Nodes

The Payoff Behind Plex2Shell: Why Home Media Servers Become Proxy and Mining Nodes

Comments
4 min read
Detecting CVE-2026-6653 attempts when the crash is the signal

Detecting CVE-2026-6653 attempts when the crash is the signal

Comments
2 min read
Verifying exposure to CVE-2026-6653 without guessing

Verifying exposure to CVE-2026-6653 without guessing

Comments
2 min read
CVE-2026-109619: PHP Vulnerability, What to Do Now

CVE-2026-109619: PHP Vulnerability, What to Do Now

1
Comments
5 min read
CVE-2026-6653 and the long tail of entity-handling bugs in libxml2

CVE-2026-6653 and the long tail of entity-handling bugs in libxml2

Comments
2 min read
Plex2Shell: Anatomy of a Four-Stage Chain From Open Port to Root-Level Code Execution

Plex2Shell: Anatomy of a Four-Stage Chain From Open Port to Root-Level Code Execution

Comments
4 min read
Why Internet-Facing Media Servers Stay Vulnerable: Plex Exposure in Numbers and Practice

Why Internet-Facing Media Servers Stay Vulnerable: Plex Exposure in Numbers and Practice

Comments
4 min read
CWE-73 in Practice: How Controlled File Paths Become Code Execution in Plex

CWE-73 in Practice: How Controlled File Paths Become Code Execution in Plex

Comments
4 min read
Four Moderate Flaws, One Critical Chain: What the Plex2Shell Disclosure Teaches Vulnerability Research

Four Moderate Flaws, One Critical Chain: What the Plex2Shell Disclosure Teaches Vulnerability Research

Comments
4 min read
Shadow Media Servers: When a Plex Box on the Corporate LAN Becomes an Incident

Shadow Media Servers: When a Plex Box on the Corporate LAN Becomes an Incident

Comments
4 min read
Remote Access by Default: Auditing the Plex Port Forwards That Made Plex2Shell Exploitable

Remote Access by Default: Auditing the Plex Port Forwards That Made Plex2Shell Exploitable

Comments
4 min read
Six weeks from notice to KEV: the disclosure timeline behind the Plex RCE chain

Six weeks from notice to KEV: the disclosure timeline behind the Plex RCE chain

1
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.