Category: Vulnerability Research

Vulnerability Research

LiteLLM RCE Chain: Three CVEs Enable AI Supply Chain Attack

Jun 29, 2026 ·19 min read

Vulnerability Research

CVE-2026-25874: Hugging Face LeRobot – Unauthenticated Pickle RCE in the AsyncInference PolicyServer

Jun 29, 2026 ·10 min read

Vulnerability Research

CVE-2026-42779: Apache MINA-Deserialization Allowlist Bypass to RCE

Jun 18, 2026 ·9 min read

Vulnerability Research

CVE-2026-7304: SGLang-Unauthenticated RCE via dill.loads

Jun 18, 2026 ·16 min read

Vulnerability Research

CVE-2025-27817: Apache Kafka Connect Arbitrary File Read

Jun 18, 2026 ·14 min read

Vulnerability Research

CVE-2025-61622: PyFory – Insecure Pickle Deserialization to Remote Code Execution

May 28, 2026 ·19 min read

Vulnerability Research

CVE-2025-48459: Apache IoTDB – Unsafe Deserialization via Class.forName() to RCE

May 27, 2026 ·12 min read

Vulnerability Research

CVE-2024-52577 Apache Ignite RCE via Deserialization Exploit

May 26, 2026 ·10 min read

Vulnerability Research

CVE-2025-54539: Apache ActiveMQ NMS AMQP Deserialization Policy Bypass to RCE

May 19, 2026 ·11 min read

Vulnerability Research

Electron app security risks – Part 2: Real-world RCE chains in Discord and Element

May 8, 2026 ·26 min read