Wiz io
LightNews LightNews
banner
wiz.io
Wiz io
@wiz.io
130 followers 9 following 130 posts
Secure everything you build and run in the cloud
Posts Replies Media Videos
wiz.io
Huge kudos to GitHub for addressing the issue 👏
Full technical breakdown here → www.wiz.io/blog/github-...
GitHub RCE Vulnerability: CVE-2026-3854 Breakdown | Wiz Blog
A critical CVSS 8.7 vulnerability in GitHub Enterprise Server allows remote code execution. Read the threat brief and find vulnerable GHES instances from Wiz.
www.wiz.io
April 28, 2026 at 3:39 PM
wiz.io
We responsibly disclosed the issue to GitHub, who deployed a fix on GitHub.com the same day (!) and released patches for all supported GHES versions.

GitHub Enterprise Server customers are strongly encouraged to update immediately.
April 28, 2026 at 3:39 PM
wiz.io
Patched fast by @awscloud.bsky.social. A tiny regex, huge impact.
www.wiz.io/blog/wiz-res...
CodeBreach: Supply Chain Vuln & AWS CodeBuild Misconfig | Wiz Blog
Wiz Research discovered CodeBreach, a critical vulnerability that risked the AWS Console supply chain. Learn how to secure your AWS CodeBuild pipelines.
www.wiz.io
January 15, 2026 at 3:05 PM