Posts tagged Vulnerability Disclosure
Vulnerabilities and Exploits
CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)
Stephen Fewer
Vulnerabilities and Exploits
Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)
Stephen Fewer
Vulnerabilities and Exploits
CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)
Stephen Fewer
Vulnerabilities and Exploits
CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)
Stephen Fewer
Vulnerabilities and Exploits
CVE-2026-0826: How an Old Bug Can Feed AI-Powered Impersonation
Douglas McKee, Director, Vulnerability Intelligence
Vulnerabilities and Exploits
CVE-2026-0826: Critical unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (FIXED)
Stephen Fewer
Vulnerabilities and Exploits
CVE-2026-52806: Authenticated RCE via Argument Injection in Gogs (FIXED as of June 7, 2026)
Jonah Burgess
Vulnerabilities and Exploits
CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)
Jonah Burgess, Stephen Fewer
Vulnerabilities and Exploits
CVE-2026-31381, CVE-2026-31382: Gainsight Assist Information Disclosure and Cross-Site Scripting (FIXED)
Christopher O’Boyle
Vulnerabilities and Exploits
The Phone is Listening: A Cold War–Style Vulnerability in Modern VoIP
Douglas McKee, Director, Vulnerability Intelligence
Vulnerabilities and Exploits
CVE-2026-2329: Critical Unauthenticated Stack Buffer Overflow in Grandstream GXP1600 VoIP Phones (FIXED)
Stephen Fewer
Vulnerabilities and Exploits
Vulnerability Found in InsightVM & Nexpose: CVE-2026-1814 (FIXED)
Rapid7
Vulnerabilities and Exploits
CVE-2025-10573: Ivanti EPM Unauthenticated Stored Cross-Site Scripting (Fixed)
Ryan Emmons
Vulnerabilities and Exploits
CVE-2025-13315, CVE-2025-13316: Critical Twonky Server Authentication Bypass (NOT FIXED)
Ryan Emmons
Vulnerabilities and Exploits
CVE-2025-10184: OnePlus OxygenOS Telephony provider permission bypass (FIXED as of October 11, 2025)
Rapid7
Vulnerabilities and Exploits
Securden Unified PAM: Multiple Critical Vulnerabilities (FIXED)
Aaron Herndon, Marcus Chang
Vulnerabilities and Exploits
CVE-2025-4365/CVE-2024-12284: NetScaler Console/SDX Authenticated Arbitrary File Read/Write (FIXED)
Calum Hutton
Vulnerabilities and Exploits
Konica Minolta bizhub Multifunction Printer: Pass-Back Attack Vulnerability (NOT FIXED)
Deral Heiland
Vulnerabilities and Exploits
CVE-2025-6759: Citrix Virtual Apps and Desktops - Local Privilege Escalation (FIXED)
Brandon Fisher
Vulnerabilities and Exploits
Multiple Brother Devices: Multiple Vulnerabilities (FIXED)
Stephen Fewer
Vulnerabilities and Exploits
CVE-2025-48045, CVE-2025-48046, CVE-2025-48047: MICI NetFax Server Product Vulnerabilities (NOT FIXED)
Anna Katarina Quinn