Security Advisories
Disclosure bulletins
Dated advisories from research and client engagements — severity, affected products, technical root cause, and remediation guidance, published under coordinated disclosure.
96 advisories published
Fortinet Fixes High-Privilege Path Traversal Flaw Across FortiOS and Enterprise Products
Fortinet has addressed CVE-2025-61624, a path traversal bug in CLI commands affecting FortiOS, FortiProxy, FortiPAM, and FortiSwitchManager.
BeyondTrust Remote Support Auth Bypass (CVE-2026-102764) Analysis
An authentication bypass in BeyondTrust Remote Support (CVE-2026-102764) allows remote attackers to conduct unauthorized appliance file operations.
Unauthenticated File Exposure Vulnerability Hits Enterprise Atlassian Suite…
An unauthenticated file exposure vulnerability (CVE-2026-21589) in Atlassian Confluence, Bitbucket, and Bamboo allows attackers to read sensitive web root…
Analyzing CVE-2026-96951: Microsoft Windows Shell Command Injection
Microsoft patched CVE-2026-96951, a high-severity Windows Shell command injection vulnerability impacting Windows 10 and 11 systems.
Critical Command Injection in AhsayCBS Exposed via Replication API (CVE-2026-105134)
Critical AhsayCBS command injection vulnerability CVE-2026-105134 allows remote code execution. Patch Ahsay Cloud Backup Suite to 10.3.4 immediately.
Palo Alto Networks Fixes Critical PAN-OS Code Injection Flaw (CVE-2026-0322)
Palo Alto Networks has patched a code injection vulnerability (CVE-2026-0322) in PAN-OS that allows authenticated attackers to gain root access.
Ahsay AhsayCBS Improper Authentication Vulnerability (CVE-2026-105133)
Unauthenticated attackers can exploit CVE-2026-105133 in AhsayCBS to bypass API authentication, opening backup servers to exploit chaining.
Cisco Secure Email Gateway Path Traversal (CVE-2026-76519) Analysis
Unauthenticated attackers can write arbitrary files via CVE-2026-76519 in Cisco Secure Email Gateway. Learn the risk, attack path, and required triage.
Ivanti Connect Secure Authentication Bypass Vulnerability (CVE-2026-104935)
Ivanti Connect Secure contains a critical authentication bypass flaw (CVE-2026-104935) enabling remote command execution on exposed gateways.
CVE-2015-5477: Dissecting the ISC BIND TKEY Denial of Service Vulnerability
A malformed TKEY query can instantly crash ISC BIND servers. Here is a technical breakdown of CVE-2015-5477, its EPSS profile, and remediation steps.
No advisories match your search.