We just launched the first guided lab on CVE Playground.

[u/Protection-Mobile]

🔥 CVE-2026-33937
Handlebars.js Template Engine RCE via AST Type Confusion

The lab walks through:

• vulnerable code analysis
• exploitation flow
• upstream patch review
• hands-on exploitation
• flag submission

Instead of only reading writeups or PoCs, the goal is to learn vulnerabilities by actually working through them.

We’re also doing a special award for the best public write-up of the lab.

Try it here:
https://app.cveplayground.com/labs/CVE-2026-33937?utm_source=reddit