DEV Community

#kev

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Using EPSS with CISA KEV without turning triage into arithmetic

Using EPSS with CISA KEV without turning triage into arithmetic

Comments
4 min read
PHP2Shell makes runtime inventory the urgent patch problem

PHP2Shell makes runtime inventory the urgent patch problem

Comments
3 min read
One Attachment, Root: Scoping the Cisco Secure Email Gateway Fix for CVE-2026-76519

One Attachment, Root: Scoping the Cisco Secure Email Gateway Fix for CVE-2026-76519

Comments
3 min read
CVE-2026-65660: how a validation-order flaw in SharePoint SafeControls works

CVE-2026-65660: how a validation-order flaw in SharePoint SafeControls works

Comments
4 min read
AhsayCBS CVE-2026-105134: a backup console that executes what a stranger sends

AhsayCBS CVE-2026-105134: a backup console that executes what a stranger sends

Comments
2 min read
The open Jev clones: three ways to read a decision, and a leaderboard that does not transfer

The open Jev clones: three ways to read a decision, and a leaderboard that does not transfer

Comments
9 min read
Cisco ISE CVE-2026-76460: When the Policy Engine Becomes the Weakest Link

Cisco ISE CVE-2026-76460: When the Policy Engine Becomes the Weakest Link

Comments
4 min read
GitLab CVE-2026-85706: Why an Arbitrary File Read on a DevSecOps Platform Is a Credential Incident

GitLab CVE-2026-85706: Why an Arbitrary File Read on a DevSecOps Platform Is a Credential Incident

Comments
3 min read
Metabase CVE-2026-72898: an unauthenticated SQL injection that hands over the data warehouse

Metabase CVE-2026-72898: an unauthenticated SQL injection that hands over the data warehouse

Comments
4 min read
Arista VeloCloud Orchestrator CVE-2026-93952: Why the SD-WAN Control Plane Is a High-Value Target

Arista VeloCloud Orchestrator CVE-2026-93952: Why the SD-WAN Control Plane Is a High-Value Target

Comments
3 min read
Cisco Identity Services Engine CVE-2026-76460: When the Policy Engine Uses Privileged APIs Incorrectly

Cisco Identity Services Engine CVE-2026-76460: When the Policy Engine Uses Privileged APIs Incorrectly

Comments
3 min read
SharePoint CVE-2026-56164: Why a 7.8 Elevation of Privilege Reached KEV

SharePoint CVE-2026-56164: Why a 7.8 Elevation of Privilege Reached KEV

Comments
3 min read
Building a Patch Prioritization Rule When a Single Vendor Ships 970 Fixes in a Month

Building a Patch Prioritization Rule When a Single Vendor Ships 970 Fixes in a Month

Comments
4 min read
From KEV to Exposure: Mapping the September 2026 Batch to Measurable Services

From KEV to Exposure: Mapping the September 2026 Batch to Measurable Services

Comments
4 min read
SonicWall SMA 1000 Remains a Small but Critical Edge Exposure After September's KEV Additions

SonicWall SMA 1000 Remains a Small but Critical Edge Exposure After September's KEV Additions

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.