Skip to main content

CVE-2026-101983: A Stack Overflow in Junos httpd Reaches the Routing Engine Through J-Web

CVE-2026-101983: A Stack Overflow in Junos httpd Reaches the Routing Engine Through J-Web The Junos httpd process exists to answer web management requests. CVE-2026-101983 turns that small service into a pre-authentication path to code execution on Junos OS and Junos OS Evolved devices, and the enabling condition is one configuration construct that many operators enable without thinking about it:…

dev.to ·1h ago

We haven't written up this one. Dev.to has the full story — the link below goes straight to it.

Read the original at dev.to →

More in Tech

A 794-line design report decided our colours and fonts, and I can now grep for which of its rules survived

Nakodo did not get a redesign. It got a research document first, and the CSS came out of it. The document is still in the repo at docs/design-direction.md : 794 lines, written before a single token…

1h ago ·dev.to

All DB access lives in one place

One mistake I see in backend codebases: ORM queries scattered everywhere. Controllers query the DB. Services query the DB. Helpers query the DB. The little cron job queries the DB.

1h ago ·dev.to

What if you could change your HTTP server in Node.js without touching a single line of business logic?

What if you could change your HTTP server in Node.js without touching a single line of business logic? In the world of backend development with TypeScript and Node.js, we are often used to tightly…

1h ago ·dev.to

Confluence to Markdown: 4 Ways to Export, Compared

Confluence to Markdown: 4 Ways to Export, Compared Short answer: Confluence Cloud can export pages to PDF and Word, and spaces to HTML, XML, CSV or PDF, but not to Markdown.

1h ago ·dev.to

Two Packages, One Venv, Zero Excuses: Designing a Frictionless First Run**

I still have the CSV that got rejected. Adobe's uploader bounced a batch of 12 images because my metadata header had six columns instead of five. Not "wrong values in column six".

Author spent two hours correcting CSV metadata headers manually.
Created makemetadata.py script for platform-specific CSV generation.
Implemented uploadtracker.py to prevent duplicate uploads.

1h ago ·dev.to

Why Venv Is Your First Customer Touchpoint (And Why It Almost Always Fails)**

The first time someone bought a script bundle from me, they never got to the scripts. They emailed me twenty minutes later: "pip won't install reportlab, it says no matching distribution." They were…

Venv setup is crucial first customer touchpoint for digital product sellers.
Author's pipeline consists of four scripts, optimized for minimal dependencies.
Modifications enable scripts to run without installation, improving buyer experience.

1h ago ·dev.to

More from Monday 26 October →