~$ afl-fuzz -i seeds/ -o out/ -- ./nexus7-gw @@ [*] 1,284,301 execs · 14h 22m · 3 unique crashes [!] crash 0x2f :: heap overflow in parse_header() ~$ triage --crash out/crashes/id_002f [*] reproducing ............................ confirmed [*] pre-auth reachable ..................... yes [*] control of saved return address ........ yes [!] severity: critical · cvss 9.8 · no auth required ~$ vim advisory.md [*] impact, affected builds, reproduction steps, mitigation [*] proof-of-concept withheld until patch ships ~$ gpg --encrypt -r security@nexus7.example advisory.md ~$ mail -s "[SECURITY] pre-auth RCE in NEXUS-7 Gateway" \ -a advisory.md.gpg security@nexus7.example [*] sent · embargo clock started · 90 days --- day 03 ----------------------------------------------- [*] vendor acknowledged · tracking as NX-2026-0042 --- day 41 ----------------------------------------------- [*] fix validated against reproduction case --- day 58 ----------------------------------------------- [*] patched build 4.2.1 shipped to customers --- day 90 ----------------------------------------------- [*] embargo lifted · advisory published [!] CVE-2026-31337 assigned · credit: gi0 ~$ shred -u advisory.md.gpg [*] nothing left on this box.