XBOW Labs research

Featured
Research

Dead.Letter (CVE-2026-45185) How XBOW Found An Unauthenticated RCE On Exim

F. Kirschbaum · May 12, 2026

XBOW discovered CVE-2026-45185, a critical unauthenticated RCE in Exim, and used the disclosure window to test how far human and autonomous exploit development could go.

Federico KirschbaumbyF. Kirschbaum & A. Luksenberg
Research feed

1 entry

Research01/01

No Time to Pwn: CVE-2026-72018

byBaul LeeXBOW found and exploited CVE-2026-72018, a Linux kernel bug human reviewers had passed over. The primitive looked too weak to matter, but it wasn't. Here's how a 16-byte write became root, and where autonomous research still needed a human call.
Subscribe

Get XBOW Labs updates in your inbox

Subscribe to XBOW Labs and get occasional emails featuring our latest research, technical write-ups, event recordings, webinars, and talks—delivered only when we have something worth sharing.