Security Advisories
Disclosure bulletins
Dated advisories from research and client engagements — severity, affected products, technical root cause, and remediation guidance, published under coordinated disclosure.
96 advisories published
Critical Check Point Path Traversal Vulnerability Exposes Management Tier
Check Point path traversal vulnerability CVE-2026-93616 allows pre-auth remote code execution on Security Management Servers. Apply hotfixes immediately.
Check Point VPN Unauthenticated RCE (CVE-2026-85102): Technical Breakdown
A critical certificate validation vulnerability in Check Point Security Gateways allows unauthenticated RCE on exposed VPN endpoints.
F5 BIG-IP APM Critical Heap Overflow (CVE-2026-94127) Allows Unauthenticated RCE
A critical heap-based buffer overflow in F5 BIG-IP APM (CVE-2026-94127) allows unauthenticated remote attackers to execute code via OAuth endpoints.
Arista VeloCloud Orchestrator Flaw CVE-2026-93952 Allows Remote Compromise
CVE-2026-93952 is a CVSS 10.0 input validation flaw in Arista VeloCloud Orchestrator on-prem allowing unauthenticated remote privilege escalation.
Zyxel GS1900 Switches Vulnerability (CVE-2026-7273): Technical Advisory
Unauthenticated CGI buffer overflow in Zyxel GS1900 Series Switches (CVE-2026-7273) allows LAN code execution. Prioritize isolation and patches.
CVE-2025-39682: Critical Linux Kernel KTLS Zero-Length Record Flaw
A critical flaw in the Linux Kernel TLS receive path (CVE-2025-39682) allows unauthenticated remote memory corruption via crafted zero-length records.
Linux Kernel Race Condition (CVE-2025-39964): AF_ALG Socket Analysis
CVE-2025-39964 is a high-severity race condition in the Linux Kernel's AF_ALG socket subsystem that allows local unprivileged memory corruption.
Linux Kernel Out-of-Bounds Write Vulnerability (CVE-2026-53266) Analysis
An out-of-bounds write in the Linux kernel ebtables SNAT target (CVE-2026-53266) allows local attackers to escape container boundaries and escalate privileges.
Acronis Backup Vulnerability (CVE-2026-87886) Allows Privilege Escalation
Flawed default permissions in the Acronis Backup extension for cPanel and Plesk allow local attackers to elevate privileges to root on host servers.
Critical Cisco ISE Vulnerability Exposes Networks to Unauthenticated Takeover
A maximum-severity CVSS 10.0 API vulnerability in Cisco ISE (CVE-2026-76460) lets unauthenticated attackers bypass management authentication.
No advisories match your search.