Original research, technical analysis, and practical insights from the front lines of offensive security.
Our Mission
Autonomous discovery. Human analysis. Published for the people who need it most.
Research feed
All research
Research01/02No Time to Pwn: CVE-2026-72018
byBaul LeeXBOW found and exploited CVE-2026-72018, a Linux kernel bug human reviewers had passed over. The primitive looked too weak to matter, but it wasn't. Here's how a 16-byte write became root, and where autonomous research still needed a human call.
Research02/02Dead.Letter (CVE-2026-45185) How XBOW Found An Unauthenticated RCE On Exim
byF. Kirschbaum & A. LuksenbergXBOW discovered CVE-2026-45185, a critical unauthenticated RCE in Exim, and used the disclosure window to test how far human and autonomous exploit development could go.Subscribe
Get XBOW Labs updates in your inbox
Subscribe to XBOW Labs and get occasional emails featuring our latest research, technical write-ups, event recordings, webinars, and talks—delivered only when we have something worth sharing.
Security with a hacker edge
Great security starts with an attacker's mindset. XBOW Labs publishes original research, technical analysis, and practical findings from the front lines of offensive security.
read more about labsOur team
Our team includes security researchers, AI engineers, and product builders working together to uncover real-world vulnerabilities.
