RSS Parrot

Beyond the Model: Benchmarking Codex Security, Claude Security, and Nebu

https://nebusec.ai/research/nebu-benchmark/

Published: September 1, 2026 00:00

We benchmark our pipeline against Codex Security and Claude Security. Our pipeline gives you a better trade-off: match competing scanners in a fraction of the time and cost, or scale up to find more bugs than either of them.

Check Your Motor Oil Before Turbocharging: CVE-2026-7899, When V8's Optimization Engine Builds Up Carbon

https://nebusec.ai/research/v8-turboshaft-wasm-phiop-cve-2026-7899/

Published: August 27, 2026 00:00

In April, we reported a severe vulnerability in V8, the JavaScript and WebAssembly engine used by Chrome. This vulnerability enabled remote code execution in Chrome’s renderer process. This writeup will cover the technical details of the vulnerability. The…

Route of Root: Bring a "DoS only" bug to LPE and bypass the existing patch to win $10,500 in kernelCTF

https://nebusec.ai/research/cve-2026-43501-route-of-root/

Published: August 8, 2026 00:00

CVE-2023-2156 ("Route of Death") is a Linux kernel vulnerability that was believed to only lead to a DoS attack, and was considered patched in April 2023. However, Nebula Security discovered a bypass of the patch and found that it is actually exploitable…

IonStack part III: Rooting Android 17 with GhostLock

https://nebusec.ai/research/ionstack-part-3/

Published: July 15, 2026 00:00

GhostLock (CVE-2026-43499) is a Linux kernel vulnerability found by Nebula Security that exists in every major distribution since 2011. After turning it into a stable privilege escalation and container escape, we took one step further and used GhostLock to…

IonStack Part I: Unsound IonBanana Peel in Ion Compiler, Slipping Through Firefox's SpiderMonkey JIT

https://nebusec.ai/research/ionstack-part-1-cve-2026-10702/

Published: July 10, 2026 00:00

Despite Anthropic Mythos's extensive auditing of Firefox, our agent VEGA still managed to uncover IonBanana, a subtle SpiderMonkey IonMonkey just-in-time miscompilation that can be exploited to achieve arbitrary code execution in the Firefox content…

IonStack part II: GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years

https://nebusec.ai/research/ionstack-part-2/

Published: July 7, 2026 00:00

GhostLock (CVE-2026-43499) is a Linux kernel vulnerability found by VEGA that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation…

Longinus: 2 Boundaries in One Bug, Piercing Chrome’s Renderer and V8 Sandbox with a Single Vulnerability, CVE-2026-6307

https://nebusec.ai/research/v8-cve-2026-6307-writeup/

Published: June 29, 2026 00:00

Chrome V8 JavaScript engine features a heap sandbox to prevent an attacker from writing outside of the sandbox region with only a vulnerability in their JavaScript engine. However, VEGA discovered a special bug in the JIT compiler that allows an attacker…

How an Omitted Write Barrier in V8 Turns Into RCE in Chrome: CVE-2026-5865

https://nebusec.ai/research/v8-maglev-incorrect-phis-untagging/

Published: May 7, 2026 00:00

In March, our system detected a severe vulnerability in V8, the JavaScript engine used by Chrome. This vulnerability enabled remote code execution against billions of Chrome users worldwide.

From a Netfilter Bug to kernelCTF: Exploiting CVE-2026-23274 in the Linux Kernel and winning a $10500 Bounty

https://nebusec.ai/research/cve-2026-23274-cos/

Published: April 14, 2026 00:00

Our AI security research pipeline discovered a critical vulnerability in Linux kernel. This post covers the discovery and exploitation of CVE-2026-23274, a Linux netfilter bug that led to kernelCTF code execution.