Independent reconstructions of published vulnerabilities. Each one records the root cause, the lab evidence, the vendor fix and what we could not prove.
Filter by collection 2 case studies
Case study
Rebuilding Langflow CVE-2026-9198
An independent reconstruction of the unauthenticated Langflow RCE, with a lab differential between 1.10.0 and the 1.10.1 fix.
18 August 20261 min readCase study
Rebuilding Metabase CVE-2026-72898
An independent reconstruction of the unauthenticated Metabase SQL injection, validated in a lab and compared with the 0.63.5 fix.
18 August 20261 min read
Adversary simulation
Want this level of evidence for your own systems?
We test the routes an attacker would take, prove the impact, then replay the test after the fix.