Hacker News - Newest: "CVE"

Ask HN: Why is HN censoring this post about CVE-2026-85046?

roschdal — Sun, 06 Sep 2026 15:36:02 +0000

https://nordstjernen.org/cve-2026-85046-northstar.html

Comments URL: https://news.ycombinator.com/item?id=49587543

Points: 2

# Comments: 2

Breaking GitLab's GraphQL Layer: CVE-2026–19478 and CVE-2026–19650

syumei — Sat, 05 Sep 2026 22:07:23 +0000

Article URL: https://medium.com/peakcyber/breaking-gitlabs-graphql-layer-cve-2026-19478-cve-2026-19650-acf16e43b3dc

Comments URL: https://news.ycombinator.com/item?id=49581172

Points: 1

# Comments: 0

Government Rails Site Hit Hours After CVE Patch

rietta — Fri, 04 Sep 2026 19:06:39 +0000

Article URL: https://rietta.com/blog/ruby-on-rails-cve-exploited-hours-after-patch/

Comments URL: https://news.ycombinator.com/item?id=49568828

Points: 114

# Comments: 35

Vectra – Offline CVE and GTFOBins intelligence engine for your terminal

Portzer0 — Fri, 04 Sep 2026 15:11:31 +0000

Article URL: https://github.com/addisabrham36-boop/vectra

Comments URL: https://news.ycombinator.com/item?id=49565823

Points: 1

# Comments: 0

A CVE Dispute

theanonymousone — Mon, 31 Aug 2026 11:13:17 +0000

Article URL: https://daniel.haxx.se/blog/2026/06/24/a-cve-dispute/

Comments URL: https://news.ycombinator.com/item?id=49508290

Points: 190

# Comments: 54

Critical CVE: JFrog Artifactory Authentication Bypass

mellosouls — Sun, 30 Aug 2026 20:37:07 +0000

Article URL: https://www.cve.org/CVERecord?id=CVE-2026-82329

Comments URL: https://news.ycombinator.com/item?id=49502508

Points: 5

# Comments: 0

CVE-2026-18963 – Keycloak Reset-Credentials Bypass → Account Takeover

mqus — Tue, 25 Aug 2026 22:35:16 +0000

Article URL: https://github.com/Red-Darkin/CVE-2026-18963-keycloak

Comments URL: https://news.ycombinator.com/item?id=49441617

Points: 6

# Comments: 0

Show HN: CLI tool to check n8n instances for CVE-2026-21858 credential exposure

LegionAPI — Wed, 19 Aug 2026 11:29:07 +0000

Article URL: https://github.com/Legion33shadow/legion-n8n-shield

Comments URL: https://news.ycombinator.com/item?id=49360088

Points: 2

# Comments: 0

CVE-2026-24301: "CoSnitch" vulnerability in Microsoft Copilot

sysadmin_diarie — Wed, 19 Aug 2026 10:29:29 +0000

Article URL: https://cyberupdates365.com/copilot-cosnitch-cve-2026-24301/

Comments URL: https://news.ycombinator.com/item?id=49359560

Points: 1

# Comments: 0

GitLab CVE-2026-19478: GraphQL authorization bypass

sysadmin_diarie — Wed, 19 Aug 2026 07:29:02 +0000

Article URL: https://techupdate24.com/gitlab-cve-2026-19478-graphql-flaw/

Comments URL: https://news.ycombinator.com/item?id=49358155

Points: 4

# Comments: 0

Wallabag Full Disclosure CVSS8.5 Stored XSS+SSRF after no patched no cve

turbozampier — Fri, 14 Aug 2026 16:41:25 +0000

Article URL: https://infosec.exchange/@FUNFACTOR1/117093620077858014

Comments URL: https://news.ycombinator.com/item?id=49301189

Points: 2

# Comments: 0

You're Back in the Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))

unknownhad — Fri, 14 Aug 2026 08:10:08 +0000

Article URL: https://labs.watchtowr.com/youre-back-in-the-room-citrix-netscaler-pre-auth-rce-cve-2026-8452/

Comments URL: https://news.ycombinator.com/item?id=49295904

Points: 2

# Comments: 0

A BSON symbol namespace bypasses MongoDB's authorization check (CVE-2026-18690)

slvnx — Wed, 12 Aug 2026 15:24:19 +0000

Article URL: https://hellorecon.com/blog/cve-2026-18690-mongodb-symbol-type-authz-bypass

Comments URL: https://news.ycombinator.com/item?id=49273886

Points: 9

# Comments: 0

CVE-2026-53361 AF_Unix GC vs. MSG_PEEK use-after-free container escape

eyberg — Wed, 12 Aug 2026 03:31:42 +0000

Article URL: https://github.com/sgkdev/bad_garbage

Comments URL: https://news.ycombinator.com/item?id=49267550

Points: 13

# Comments: 0

Expat 2.8.3 released, fixes vulnerability CVE-2026-72522

spyc — Tue, 11 Aug 2026 13:23:24 +0000

Article URL: https://blog.hartwork.org/posts/expat-2-8-3-released/

Comments URL: https://news.ycombinator.com/item?id=49257903

Points: 1

# Comments: 0

CVE-2026-56852: x/text/Unicode/norm infinite loop on invalid UTF-8 (DoS)

refp — Tue, 11 Aug 2026 11:04:23 +0000

Article URL: https://pkg.go.dev/vuln/GO-2026-5970

Comments URL: https://news.ycombinator.com/item?id=49256278

Points: 2

# Comments: 0

CVE-2026-65400: Apple macOS Screen Sharing authentication bypass

lasagnafan — Mon, 10 Aug 2026 18:16:54 +0000

Article URL: https://support.apple.com/en-us/148170

Comments URL: https://news.ycombinator.com/item?id=49247537

Points: 2

# Comments: 0

WordPress CVE-2026-64638 Pre-Auth XSS to RCE

thepill — Fri, 07 Aug 2026 19:30:43 +0000

Article URL: https://pwn.ai/blog/xss2shell

Comments URL: https://news.ycombinator.com/item?id=49215218

Points: 1

# Comments: 0

The Keychain CVE Where Every Key Fits

lapcat — Fri, 07 Aug 2026 17:45:58 +0000

Article URL: https://boberito.medium.com/the-keychain-cve-where-every-key-fits-055f377618be

Comments URL: https://news.ycombinator.com/item?id=49213865

Points: 2

# Comments: 0

Zapscape (CVE-2026-64561): Guest-to-Host Escape in KVM/x86

john_strinlai — Thu, 06 Aug 2026 16:24:36 +0000

Article URL: https://github.com/V4bel/Zapscape

Comments URL: https://news.ycombinator.com/item?id=49198843

Points: 86

# Comments: 14