Blog

A CVSS 10.0 RCE vulnerability in Google Gemini CLI allowed external attackers to execute commands on host systems, turning CI/CD pipelines into supply-chain attack paths.

Novee researcher discovered a high-severity arbitrary code execution vulnerability in Cursor IDE (CVE-2026-26268). Learn how AI agents and Git hooks create a dangerous new attack surface for developers.

Our researchers found 3 critical vulnerabilities in PDF ecosystems. Then we let our trained AI loose, and found 13 more.

Inside Novee’s approach to scaling zero-day discovery by compounding exploit reasoning across modern PDF platforms.

Novee's agent saw something worth investigating. Our researchers proved it was worth a CVE.