cve

Came across Reuters / OpenAI: Training of the most capable model has resumed—after hardening the training environment first, and cutting off external internet access during training. During a red-team exercise, its own agent also uncovered a remote code execution vulnerability in Brotli, a widely used compression library.

The key details: In September, a research model gained limited internet access due to a configuration error. OpenAI paused training of its most capable model, then resumed on 10/1 after hardening the environment. During the red-team exercise, they found an out-of-bounds write in the Brotli decoder. A malicious compressed file could cause a crash, memory disclosure, or even RCE. The official Node.js security advisory classified it as high severity, CVE-2026-111497, affecting the 22/24/26 lines; the reporter was listed as OpenAI Codex Security. The underlying issue had actually been fixed in the Brotli source code back in February, but no new version was released at the time. A patched release came only after disclosure.

AI agents can now find vulnerabilities in widely used software on their own—the pace of dependency updates may need to pick up.

#AI安全 #OpenAI #CVE

🔥 $CVE.US TECHNICAL ANALYSIS: Testing Key Price Levels! 🔥
$CVE.US is showing an interesting technical setup on the 4-hour timeframe. The price is currently consolidating near a pivotal structure zone as market participants gauge the next directional trend! 📈⚡

💡 Key Technical Highlights:

Support Base: Buyer interest around immediate support levels continues to hold the structure intact.

Resistance Level: A clean breakout and candle close above the upper resistance boundary could open momentum toward higher targets.

👉 What’s your outlook on $CVE.US for this week? Bullish or Bearish? Share your thoughts below! 👇#CVE #ArgentinaCommitsToOECDCryptoReportingBy2029

⚠️ A critical vulnerability that threatens React Server Components (RSCs)!

A recent analysis reveals a critical flaw (React2Shell) that targets React Server Components by abusing their Flight protocol. This vulnerability, rated CVSS 10.0, enables attackers to exploit deserialization mechanisms, posing a serious risk to applications that rely on RSCs. Developers should exercise caution and apply security measures to protect their systems.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#React #Security #RSC #CVE #Cybersecurity

🔗 Source: https://www.smashingmagazine.com/2026/07/weaponizing-defending-react-flight-protocol/