https://xbow.com/labs Security research, advisories and field notes from XBOW Labs en-us https://xbow.com/labs/research/no-time-to-pwn-cve-2026-72018 https://xbow.com/labs/research/no-time-to-pwn-cve-2026-72018 XBOW found and exploited CVE-2026-72018, a Linux kernel bug human reviewers had passed over. The primitive looked too weak to matter, but it wasn't. Here's how a 16-byte write became root, and where autonomous research still needed a human call. Mon, 28 Sep 2026 13:14:00 GMT Baul Lee Research https://xbow.com/labs/research/dead-letter-cve-2026-45185 https://xbow.com/labs/research/dead-letter-cve-2026-45185 XBOW discovered CVE-2026-45185, a critical unauthenticated RCE in Exim, and used the disclosure window to test how far human and autonomous exploit development could go. Tue, 12 May 2026 14:00:00 GMT Federico Kirschbaum Andres Luksenberg Research