responsible-disclosure Security Research

3 articles in this topic.

RSS

March 2026

2 articles

  1. CVE-2026-4105: systemd-machined Privilege Escalation - 72 Minutes from Drop to Bypass

    CVE-2026-4105 dropped this morning - local privilege escalation to root on desktop Linux via systemd-machined. Two D-Bus calls, no authentication. We fed it to CVEForge before the advisory was an hour old. Seventy-two minutes later: confirmed exploit, Docker labs for vulnerable and patched builds, and a bypass proving the vendor's fix is incomplete. The analysis agent said the fix was thorough. The bypass agent proved it wrong.

    24 min read EIP Team cve-2026-4105cveforgesystemd
    24 min read

  2. CVE-2026-28391: OpenClaw Command Injection - The Day I Hacked Myself

    CVE-2026-28391 is a CVSS 9.8 command injection in OpenClaw < 2026.2.2, caused by a POSIX vs cmd.exe shell-parsing mismatch. Our own suggestion algorithm ranked it as the most interesting CVEForge target. 8/8 bypass vectors confirmed, code execution verified. This is the story of the day our orchestration layer dispatched a full vulnerability assessment against itself.

    12 min read EIP Team cve-2026-28391openclawcveforge
    12 min read

February 2026

1 article