Blog - Page 4 of 37 - Safe Security
SAFE Named a Leader in the 2026 Liminal Index for Cyber TPRM. Get the Report →
Book a demo

Blog

Threat Research CVE-2026-20253 | Splunk Enterprise 10.x – Unauthenticated Arbitrary File Write to RCE via PostgreSQL Sidecar Recovery Endpoint 1. Introduction This document illustrates a Missing Authentication for a Critical Function vulnerability (CWE-306) in Splunk Enterprise, the flagship on-premises observability and Security Information and Event Management (SIEM)… SAFE Safe Security Sep 18, 2026 12 min read
Threat Research CVE Volume Surges This Week, But Exploitation Stays Focused on High-Value Enterprise Systems By SAFE Threat Research Team This week’s vulnerability landscape is noisy, but attacker activity is not. Real-world exploitation is clustering around technologies that control access, software delivery, and… SAFE Safe Security Sep 16, 2026 11 min read
CTEM Shift Three : The AI Security Workflow That Matters Ends With Verification Part 4 of a four-part series on what the defender’s window requires at enterprise scale. Once exposures are understood and prioritized, the final shift is execution: using AI… Rahul Tyagi Safe Security Sep 16, 2026 7 min read
Threat Research CVE-2026-53576 | Kestra ≤ 1.3.20 – Unauthenticated Remote Code Execution via REST API Authentication Filter Bypass Introduction This document illustrates an unauthenticated Remote Code Execution (RCE) vulnerability in Kestra, the open-source event-driven workflow orchestration platform distributed as both a self-hosted OSS package and a… SAFE Safe Security Sep 13, 2026 8 min read
CTEM Shift Two: Centralizing Exposure Data Is Not the Same as Understanding It Part 3 of a four-part series on what the defender’s window requires at enterprise scale. Risk-based prioritization only works when the underlying exposure data can be reconciled, contextualized,… Rahul Tyagi Safe Security Sep 12, 2026 6 min read
Threat Research CVE-2026-48313 | Adobe ColdFusion – Unauthenticated Arbitrary File Read via RDS FILEIO Path Traversal Severity: CRITICAL  |  CVSS: 9.3  |  Published: June 30, 2026  |  Advisory: APSB26-68 Introduction This document illustrates an unauthenticated arbitrary file read vulnerability in Adobe ColdFusion – a… SAFE Safe Security Sep 12, 2026 10 min read
Threat Research Adobe Commerce Zero-Day, SonicWall RCE Chain, and MikroTik Exploitation Lead This Week’s CVE Priorities By SAFE Threat Research Team This week’s highest-priority vulnerabilities span e-commerce platforms, secure-access appliances, network infrastructure, print management, browsers, unified communications, automation platforms, and AI infrastructure. The strongest… SAFE Safe Security Sep 8, 2026 9 min read
CTEM Shift One: Why CTEM Has to Prioritize Business Risk, Not Severity Part 2 of a four-part series on what the defender’s window requires at enterprise scale. In the first article in this series, we argued that the defender’s window… Rahul Tyagi Safe Security Sep 7, 2026 6 min read
Threat Research CVE-2026-9198 | Critical Unauthenticated RCE in IBM Langflow OSS Disclaimer: This document is published for defensive and educational purposes. All exploitation was performed against an isolated, locally-hosted Docker lab. Do not attempt these techniques against systems you… SAFE Safe Security Sep 6, 2026 10 min read
Threat Research CVE-2026-2652 | MLflow Authentication Bypass – Unauthenticated Access to FastAPI Routes Severity: HIGH | CVSS: 8.6 | Published: May 15, 2026 | Fixed: mlflow 3.10.0 Introduction This document illustrates an Authentication Bypass vulnerability in MLflow – an open-source Machine… SAFE Safe Security Sep 5, 2026 6 min read
Threat Research Artifactory Admin Access, Langflow RCE, and Rails Exploitation Reshape This Week’s CVE Priorities By SAFE Threat Research Team Attackers are concentrating on vulnerabilities that provide more than an initial foothold. This week’s highest-priority CVEs affect systems embedded in software delivery, application… SAFE Safe Security Sep 2, 2026 8 min read
CTEM From Exposure Backlogs to Verified Remediation Series: Understanding CTEM and Why It Matters | Part 3 of 3: Validation and Mobilization By: Ramesh Ramachandran Until now we explored why 25 years of vulnerability management hasn’t… SAFE Safe Security Sep 1, 2026 5 min read