research hub

Security research,
plainly explained

New analyses every week — vulnerabilities, exploits, and the attack patterns that matter. What the bug is, who's exposed, what to do about it before Monday.

CVE-2026-35616: Pre-auth API bypass in FortiClient EMS — CISA KEV
April 22, 2026 CVE
CVE-2026-35616: Pre-auth API bypass in FortiClient EMS — CISA KEV
CVE-2026-33825 'BlueHammer': local privesc in Windows Defender
April 22, 2026 CVE
CVE-2026-33825 'BlueHammer': local privesc in Windows Defender
CVE-2026-39987: Pre-auth RCE in Marimo exploited within 10 hours
April 22, 2026 CVE
CVE-2026-39987: Pre-auth RCE in Marimo exploited within 10 hours
CVE-2026-33032: Authentication bypass in nginx-ui takes over 2,600+ servers
April 22, 2026 CVE
CVE-2026-33032: Authentication bypass in nginx-ui takes over 2,600+ servers
CVE-2026-5281: Chrome zero-day in Dawn/WebGPU under active exploitation
April 22, 2026 CVE
CVE-2026-5281: Chrome zero-day in Dawn/WebGPU under active exploitation
CVE-2026-5760: RCE via malicious GGUF model files in SGLang
April 22, 2026 CVE
CVE-2026-5760: RCE via malicious GGUF model files in SGLang

Application security research.

ops@keepsecure.io

Quick Links
About ResearchHub Contact
Elsewhere
GitHubLinkedInX / Twitter
RSS

© 2026 keepsecure labs