ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2026-05-26
•9 min read
Quick Look: Check Point VPN CVE-2026-48131 Heap Out of Bounds Write via IKE Fragment Reassembly
A brief summary of CVE-2026-48131, a high-severity heap out-of-bounds write in Check Point VPN's IKE fragment reassembly logic that enables remote denial of service. Includes patch details, detection methods, and affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-26
•10 min read
Quick Look: CVE-2026-48132, Check Point Quantum Security Gateway IKE NAT-T Denial of Service via Out-of-Bounds Read
CVE-2026-48132 is a high-severity denial-of-service vulnerability in Check Point Quantum Security Gateway, caused by improper length validation of IKE packets over NAT-T (UDP 4500). This post covers patch details, detection methods, and affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-26
•9 min read
Brief Summary: CVE-2026-7374 KubeVirt virt-handler Symlink Following Vulnerability Enables Full Cluster Compromise
A brief summary of CVE-2026-7374, a symlink following vulnerability in KubeVirt's virt-handler component. An authenticated user with namespace edit permissions can use it to escalate privileges and potentially compromise an entire Kubernetes cluster by hijacking the CRI-O socket.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-26
•10 min read
Brief Summary: CVE-2026-8620 HTTP Request Smuggling in IBM WebSphere Web Server Plug-ins
A short review of CVE-2026-8620, a high-severity HTTP request smuggling vulnerability in IBM Web Server Plug-ins for WebSphere Application Server and Liberty, with patch details and its relationship to a companion CVSS 9.8 RCE flaw in the same component.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-26
•10 min read
Brief Summary: CVE-2026-8633 Critical RCE via Code Injection in IBM WebSphere Web Server Plug-ins
A short review of CVE-2026-8633, a CVSS 9.8 remote code execution vulnerability in IBM WebSphere Web Server Plug-ins that lets unauthenticated attackers compromise systems with specially crafted HTTP requests. Covers patch information and affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-26
•10 min read
Quick Look: CVE-2026-8760 — WordPress Login with OTP Plugin Authentication Bypass via Unrestricted OTP Brute Force
A brief summary of CVE-2026-8760, a critical authentication bypass in the WordPress Login with OTP plugin (versions up to 1.6) caused by misplaced rate limiting that allows unauthenticated brute force of 6-digit OTPs against any user account.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-26
•10 min read
IBM HTTP Server CVE-2026-8834: Heap Buffer Overflow in the Administration Server — Quick Look and Patch Guidance
CVE-2026-8834 is a high-severity heap buffer overflow in the IBM HTTP Server Administration Server that affects versions 8.5 and 9.0. This post covers the patch details and remediation steps for enterprise teams.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-26
•10 min read
IBM HTTP Server CVE-2026-8855: Code Injection via TLS Mutual Authentication — Brief Summary and Patch Guidance
A brief summary of CVE-2026-8855, a high-severity code injection vulnerability in IBM HTTP Server that affects TLS mutual authentication configurations. Includes affected versions, patch information, and remediation guidance.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-26
•10 min read
IBM WebSphere Web Server Plug-ins CVE-2026-9170: HTTP Request Smuggling with a Critical Companion CVE — Quick Look
A brief summary of CVE-2026-9170, a high-severity HTTP request smuggling vulnerability in IBM Web Server Plug-ins for WebSphere Application Server and Liberty, with patch details and how it relates to a companion CVSS 9.8 remote code execution flaw fixed in the same bulletin.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-21
•5 min read
Quick Look: CVE-2026-2740 — ManageEngine ADSelfService Plus, DataSecurity Plus, and RecoveryManager Plus Authenticated Remote Code Execution
A brief summary of CVE-2026-2740, a high-severity command injection vulnerability in three ManageEngine products that lets authenticated domain users execute arbitrary commands on agent endpoints through a flaw in a third-party dependency.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-21
•9 min read
UniFi OS Command Injection via CVE-2026-33000: Brief Summary of a Critical Input Validation Flaw
A brief summary of CVE-2026-33000, a CVSS 9.1 command injection vulnerability in Ubiquiti UniFi OS Server caused by improper input validation, with patch information, affected versions, and context on the rest of the Bulletin 064 disclosure.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-21
•8 min read
Brief Summary: CVE-2026-34908, a CVSS 10.0 Improper Access Control Flaw in UniFi OS Devices
A short review of CVE-2026-34908, a maximum-severity improper access control vulnerability in Ubiquiti UniFi OS devices that lets network-adjacent attackers make unauthorized system changes. Includes patch details for every affected product line.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-21
•7 min read
Brief Summary: CVE-2026-34909 Path Traversal in Ubiquiti UniFi OS (CVSS 10.0)
A short review of CVE-2026-34909, a CVSS 10.0 path traversal vulnerability in Ubiquiti UniFi OS that lets unauthenticated attackers on the network access system files and hijack underlying accounts. Includes patch details for every affected device family.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-21
•8 min read
Brief Summary: CVE-2026-34910 Command Injection in UniFi OS Devices (CVSS 10.0)
A short review of CVE-2026-34910, a CVSS 10.0 command injection vulnerability in Ubiquiti UniFi OS devices caused by improper input validation. Includes patch information for the full range of affected hardware and firmware versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-21
•6 min read
Quick Look: CVE-2026-34911 Path Traversal in Ubiquiti UniFi OS Devices
CVE-2026-34911 is a high-severity path traversal vulnerability in Ubiquiti UniFi OS devices that lets low-privileged network attackers read sensitive system files. This summary covers the patch details and the affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-21
•5 min read
Brief Summary: CVE-2026-5118 — Unauthenticated Privilege Escalation in Divi Form Builder for WordPress
A short review of CVE-2026-5118, a critical privilege escalation vulnerability in the Divi Form Builder WordPress plugin that lets unauthenticated attackers create administrator accounts by tampering with a POST parameter during registration.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-21
•6 min read
Brief Summary: ConnectWise Automate Agent CVE-2026-9089 — Integrity Verification Bypass in Plugin Loading and Self Update
A short review of CVE-2026-9089, a high-severity vulnerability in the ConnectWise Automate Agent. Its plugin loading and self-update operations do not fully verify component authenticity, which may allow code execution from an adjacent network position.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-20
•7 min read
Splunk Enterprise and Cloud Platform CVE-2026-20239: Brief Summary of Session Cookie Exposure via Internal Index Logging
A brief summary of CVE-2026-20239, a high-severity vulnerability in Splunk Enterprise and Splunk Cloud Platform. Unsanitized buffer logging in the splunkd TcpChannel component writes session cookies and sensitive response data into the _internal index, where lower-privilege users can access them.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-20
•6 min read
Brief Summary: NVIDIA DGX OS SSH Host Key Cloning Vulnerability (CVE-2026-24218)
A short review of CVE-2026-24218, a high-severity flaw in NVIDIA DGX OS. Factory provisioning clones identical SSH host keys across multiple systems, which opens the door to host impersonation and attacker-in-the-middle attacks.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-20
•8 min read
Rsync CVE-2026-29518: Overview of a TOCTOU Race Condition Enabling Symlink Based Arbitrary File Write
CVE-2026-29518 is a high-severity TOCTOU race condition in rsync's daemon mode that allows symlink-based arbitrary file writes and privilege escalation. This post covers the patch and how to mitigate the flaw.
ZeroPath CVE Analysis
