research hub

Security research,
plainly explained

New analyses every week — vulnerabilities, exploits, and the attack patterns that matter. What the bug is, who's exposed, what to do about it before Monday.

CVE-2026-33824: Unauthenticated RCE in Windows IKE — patch now
April 22, 2026 CVE
CVE-2026-33824: Unauthenticated RCE in Windows IKE — patch now
CVE-2026-33032: Authentication bypass in nginx-ui takes over 2,600+ servers
April 22, 2026 CVE
CVE-2026-33032: Authentication bypass in nginx-ui takes over 2,600+ servers
CVE-2026-33825 'BlueHammer': local privesc in Windows Defender
April 22, 2026 CVE
CVE-2026-33825 'BlueHammer': local privesc in Windows Defender
CVE-2026-34040: Docker auth bypass turns AI coding agents into cloud takeover
April 22, 2026 CVE
CVE-2026-34040: Docker auth bypass turns AI coding agents into cloud takeover
CVE-2026-35616: Pre-auth API bypass in FortiClient EMS — CISA KEV
April 22, 2026 CVE
CVE-2026-35616: Pre-auth API bypass in FortiClient EMS — CISA KEV
CVE-2026-39987: Pre-auth RCE in Marimo exploited within 10 hours
April 22, 2026 CVE
CVE-2026-39987: Pre-auth RCE in Marimo exploited within 10 hours

Application security research.

ops@keepsecure.io

Quick Links
About ResearchHub Contact
Elsewhere
GitHubLinkedInX / Twitter
RSS

© 2026 keepsecure labs