Breaking News: SSRF in Harbor Webhooks - Any User Can Reach the Server’s Cloud Credentials

Rethink cloud security in an AI-driven era. Watch our webinar with James Berthoty and Chris Lindsey

CVE

A Harbor Webhook Can Steal Your Cloud Credentials

SSRF in Harbor Webhooks: Any User Can Reach the Server’s Cloud Credentials

Oct 6, 2026 5 min read

LiteLLM Account takeover (2)

CVE-2026-93355: Account Takeover in LiteLLM

Sep 29, 2026 8 min read

Trust issues CVEs CVE 2026 78676 GHSA 2xp9 vwfh vxw4 CVE 2026 75595 CVE 2026 75604

Four Critical CVEs, the Same Trust Issue

Sep 14, 2026 5 min read

Technical Breakdown CVE 2026 78676 GHSA 2xp9 vwfh vxw4 CVE 2026 75595 CVE 2026 75604

Technical Analysis: Netty CVE-2026-75595, Next.js CVE-2026-75604, GHSA-2xp9-vwfh-vxw4 & GitPython CVE-2026-78676

Sep 14, 2026 12 min read

CVE-2026-82533: DeepSeek Harness Vulnerability Lets AI Agents Escape Their Own Sandbox

Sep 8, 2026 6 min read

CVE 2026 44613 Apache Zeppelin

CVE-2026-44613: Turning a CSRF into Silent Unauthorized Actions

Aug 6, 2026 4 min read

SSRF in LMDeploy's OpenAI Compatible API Server

CVE-2026-63764: SSRF in LMDeploy’s OpenAI-Compatible API Server

Jul 22, 2026 5 min read

Decompression DoS In node tar

CVE-2026-59873: Decompression DoS Via Unlimited Input In node-tar, 90M Weekly Downloads Affected

Jul 21, 2026 3 min read

CVE 2026 3602 SQL Injection to RCE in IBM App Connect (1)

CVE-2026-3602: SQL Injection in IBM App Connect Enterprise Leads to Code Execution

Jul 19, 2026 4 min read

The CVE Is Dead

The CVE Is Dead. Long live the Mythos Era.

May 27, 2026 5 min read

From Auth Bypass to RCE A 4 Vulnerability Exploit Chain in DataEase (1)

From Auth Bypass to RCE: A 4-Vulnerability Exploit Chain in DataEase

May 25, 2026 7 min read

From Prompt to Runtime: Four Ways to Find NGINX Rift (CVE-2026-42945) with OX Security

From Prompt to Runtime: Four Ways to Find NGINX Rift (CVE-2026-42945) with OX Security

May 14, 2026 6 min read