Security Advisories
Disclosure bulletins
Dated advisories from research and client engagements — severity, affected products, technical root cause, and remediation guidance, published under coordinated disclosure.
96 advisories published
Google Pixel Cellular Modem Authorization Bypass (CVE-2026-58704)
A high-severity logic flaw in Google Pixel cellular modem firmware (CVE-2026-58704) allows adjacent attackers to bypass permission checks.
Cisco Secure Email Gateway SQL Injection (CVE-2026-76461) Threat Advisory
A critical SQL injection flaw in Cisco Secure Email Gateway (CVE-2026-76461) allows unauthenticated remote attackers to execute root commands.
Analyzing CVE-2026-85706: Unauthenticated Path Traversal in GitLab
An unauthenticated path traversal flaw in GitLab's repository commits API lets attackers read arbitrary server files. Here is what you need to know.
JFrog Artifactory Fixes Improper Authentication Flaw (CVE-2026-42018)
JFrog Artifactory addresses CVE-2026-42018, an improper authentication flaw leaking internal tokens when anonymous access is disabled.
JFrog Artifactory Token Validation Flaw Allows Privilege Escalation (CVE-2026-42016)
A logic flaw in JFrog Artifactory token scope validation (CVE-2026-42016) lets low-privilege users escalate access. Patch to version 7.133.11.
Critical ScreenConnect Flaw CVE-2026-84869 Allows Unauthorized File Execution
ConnectWise ScreenConnect vulnerability CVE-2026-84869 allows low-privilege accounts to execute unauthorized remote files without host confirmation.
CVE-2026-67277: Unauthenticated Kernel Memory Leak and DoS in MikroTik RouterOS btest
A missing authentication flaw in MikroTik RouterOS (CVE-2026-67277) allows remote kernel memory disclosure and denial of service via the btest service.
CVE-2026-86060: Privilege Escalation in MikroTik RouterOS via Argument Injection
A command argument injection vulnerability in MikroTik RouterOS (CVE-2026-86060) enables attackers to modify policy masks and elevate user privileges.
Cisco FMC Authentication Bypass (CVE-2026-20079) Grants Root Access
Cisco FMC and SCC face a critical authentication bypass (CVE-2026-20079) with CVSS 10.0 and 35.9% EPSS score. Unauthenticated root RCE possible.
Google Chromium V8 Vulnerability CVE-2026-87491: Technical Analysis & Patching
A critical out-of-bounds write flaw in Google Chromium's V8 engine (CVE-2026-87491) enables remote code execution via malicious web pages.
No advisories match your search.