--- title: "#cve articles | Hashnode" description: "Explore 211 articles tagged #cve on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/cve" --- Tag # #cve 211 posts · 18 followers [HackerMe](https://hashnode.com/@hackerme) · [4h ago](https://hashnode.com/posts/openssh-login-bypass-on-alpine-linux-cve-2026-123158-who-is-affected-and-what-to-do/6af4e5aea948638dfa5501ab) ### [OpenSSH Login Bypass on Alpine Linux (CVE-2026-123158): Who Is Affected and What To Do](https://hackerme.hashnode.dev/openssh-login-bypass-on-alpine-linux-cve-2026-123158-who-is-affected-and-what-to-do?utm_source=hashnode&utm_medium=feed) On 9 November 2026, CISA added OpenSSH CVE-2026-123158 to its Known Exploited Vulnerabilities catalog: a password login bypass in the SSH server on some Linux systems. If the server behind your websit 5 min read · [hackerme.hashnode.dev](https://hackerme.hashnode.dev/openssh-login-bypass-on-alpine-linux-cve-2026-123158-who-is-affected-and-what-to-do?utm_source=hashnode&utm_medium=feed) [Khushi Trivedi](https://hashnode.com/@trivedi-khushi) · [Nov 3](https://hashnode.com/posts/software-freshness-is-a-security-metric-learn-to-measure-now/6ae9268e2060d311d9c6d83e) ### [Software Freshness Is a Security Metric! Learn to Measure Now...](https://khushitrivedi.hashnode.dev/software-freshness-is-a-security-metric-learn-to-measure-now?utm_source=hashnode&utm_medium=feed) The dashboard was green. Every image in the service had passed its scan, the report was attached to the release, and I was ready to close the ticket. Then I did a small exercise I had read about: pick 7 min read · [khushitrivedi.hashnode.dev](https://khushitrivedi.hashnode.dev/software-freshness-is-a-security-metric-learn-to-measure-now?utm_source=hashnode&utm_medium=feed) [Sudheer Tripathi](https://hashnode.com/@dumbbellcode) · [Nov 1](https://hashnode.com/posts/secure-your-app-infra-before-it-s-too-late/6ae7bc6d76ef30e580b7477b) ### [Secure your app / infra before it's too late !](https://blog.dumbbellcode.in/secure-your-app-infra-before-it-s-too-late?utm_source=hashnode&utm_medium=feed) Winter isn't coming. 100+ high-severity CVEs a day are ! 11 min read · [blog.dumbbellcode.in](https://blog.dumbbellcode.in/secure-your-app-infra-before-it-s-too-late?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Oct 29](https://hashnode.com/posts/peerstitch-fortigate-memory-implant-fortimanager-breach-detection/6ae344abd7defc848d591541) ### [The Firewall Manager That Gave Away Credentials for More Than 500 Firewalls](https://404-founders.com/blog/peerstitch-fortigate-memory-implant-fortimanager-breach-detection?utm_source=hashnode&utm_medium=feed) PEERSTITCH is a memory-resident FortiGate implant with no disk trace, no listening ports, no outbound connections. Here is how CL-STA-0954 got it there. 9 min read · [404-founders.com](https://404-founders.com/blog/peerstitch-fortigate-memory-implant-fortimanager-breach-detection?utm_source=hashnode&utm_medium=feed) [Damiano Bianda](https://hashnode.com/@damianobianda) · [Oct 28](https://hashnode.com/posts/cve-2026-97631-a-16-year-old-buffer-overflow-that-runs-before-your-defenses-do/6ae1ca33b9eda6885e6b9290) ### [CVE-2026-97631: A 16-Year-Old Buffer Overflow That Runs Before Your Defenses Do](https://damianobianda.hashnode.dev/cve-2026-97631-a-16-year-old-buffer-overflow-that-runs-before-your-defenses-do?utm_source=hashnode&utm_medium=feed) A 16-year-old buffer overflow in EDK2 PXE boot runs before Secure Boot and TPM. The bug, the botched disclosure, and what to patch first. 7 min read · [damianobianda.hashnode.dev](https://damianobianda.hashnode.dev/cve-2026-97631-a-16-year-old-buffer-overflow-that-runs-before-your-defenses-do?utm_source=hashnode&utm_medium=feed) [Vishal Solanki](https://hashnode.com/@vishalsolanki) · [Oct 27](https://hashnode.com/posts/php2shell-cve-2026-109618-fix/6ae0f595e8645c6ca9f57be6) ### [PHP2Shell (CVE-2026-109618 and CVE-2026-109619): is your website affected, and how to fix it](https://vishalsolanki.hashnode.dev/php2shell-cve-2026-109618-fix?utm_source=hashnode&utm_medium=feed) Two critical PHP flaws let attackers run code on a web server without logging in. Which sites are affected, the fixed PHP versions, how to check yours on shared hosting, WordPress, VPS or Docker, and why the popular workaround isn't enough. 9 min read · [vishalsolanki.hashnode.dev](https://vishalsolanki.hashnode.dev/php2shell-cve-2026-109618-fix?utm_source=hashnode&utm_medium=feed) [2](https://hashnode.com/posts/php2shell-cve-2026-109618-fix/6ae0f595e8645c6ca9f57be6) [Shomil Bansal](https://hashnode.com/@shomil) · [Oct 25](https://hashnode.com/posts/oracle-ldap-security-cve-exposure-business-risk/6addef5096cee1a55fabf815) ### [Assessing Oracle LDAP Security Exposure: Why CVE Applicability and Internet Reachability Are Different Questions](https://shomilbansal.hashnode.dev/oracle-ldap-security-cve-exposure-business-risk?utm_source=hashnode&utm_medium=feed) What a critical vulnerability means for business risk, identity infrastructure and remediation decisions. Introduction When a critical security vulnerability is announced, the first question from busi 9 min read · [shomilbansal.hashnode.dev](https://shomilbansal.hashnode.dev/oracle-ldap-security-cve-exposure-business-risk?utm_source=hashnode&utm_medium=feed) [Christian Johannsen](https://hashnode.com/@cjohannsen) · [Oct 23](https://hashnode.com/posts/how-to-get-alerted-when-chainguard-ships-new-remediated-java-libraries/6adbd72e3e155b01da9e8479) ### [How to Get Alerted When Chainguard Ships New Remediated Java Libraries](https://breakglass.hashnode.dev/how-to-get-alerted-when-chainguard-ships-new-remediated-java-libraries?utm_source=hashnode&utm_medium=feed) A small Python script that watches the java-remediated repo and tells you what’s new. 5 min read · [breakglass.hashnode.dev](https://breakglass.hashnode.dev/how-to-get-alerted-when-chainguard-ships-new-remediated-java-libraries?utm_source=hashnode&utm_medium=feed) [ZyVOP](https://hashnode.com/@zyvop) · [Oct 24](https://hashnode.com/posts/fixing-the-latest-php-vulnerabilities-what-to-patch-right-now-t78b6/6adc587c6841d5e400fa681b) ### [Fixing the Latest PHP Vulnerabilities: What to Patch Right Now](https://blog.zyvop.com/fixing-the-latest-php-vulnerabilities-what-to-patch-right-now-t78b6?utm_source=hashnode&utm_medium=feed) Two critical RCE bugs were patched in PHP 8.2–8.5 this week. Here’s how to find, fix and verify every install, and what to do if you can’t update yet. 10 min read · [blog.zyvop.com](https://blog.zyvop.com/fixing-the-latest-php-vulnerabilities-what-to-patch-right-now-t78b6?utm_source=hashnode&utm_medium=feed) [vidit](https://hashnode.com/@Viditp) · [Oct 22](https://hashnode.com/posts/php2shell-cve-2026-109618-109619-remediation/6ada1416301845217940e7af) ### [PHP2Shell: Two Critical PHP Flaws That Could Turn a Website Into an Attacker’s Entry Point](https://viditp.hashnode.dev/php2shell-cve-2026-109618-109619-remediation?utm_source=hashnode&utm_medium=feed) Inside CVE-2026-109618 and CVE-2026-109619 — how memory corruption can lead to unauthenticated remote code execution, why the exposure is so widespread, and what defenders must do now. 19 min read · [viditp.hashnode.dev](https://viditp.hashnode.dev/php2shell-cve-2026-109618-109619-remediation?utm_source=hashnode&utm_medium=feed)