The zero-day-to-n-day collapse is no longer theoretical, as demonstrated by CVE-2026-39987 in Marimo, which saw initial exploitation occur just nine hours and 41 minutes after disclosure without a public proof-of-concept. The real ...

What happened A critical vulnerability in the open-source Python notebook platform Marimo is now under active exploitation, with attackers moving quickly after public disclosure. The flaw, tracked as CVE-2026-39987, affects Marimo versions ...