ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2026-06-15
•10 min read
Foxit PDF Reader CVE-2026-12057: Brief Summary of JavaScript Sandbox Bypass Leading to Arbitrary Code Execution
A brief summary of CVE-2026-12057, a high-severity JavaScript sandbox bypass in Foxit PDF products that lets attackers load remote scripts and execute arbitrary code when a user opens a crafted PDF file.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-15
•10 min read
Brief Summary: CVE-2026-49952 — Discuz! X5.0 Authentication Bypass via Cross-Context Cryptographic Key Reuse
A short review of CVE-2026-49952, a critical authentication bypass in Discuz! X5.0 that chains cryptographic key reuse, an encryption oracle, and a race condition to reach pre-authenticated database backup functionality and potential remote code execution.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-15
•8 min read
Multer CVE-2026-5079: Brief Summary of a Single Request DoS via Deeply Nested Field Names
A short review of CVE-2026-5079, a high-severity denial-of-service vulnerability in the multer Node.js middleware caused by unbounded nesting depth when it parses multipart form field names. Affected versions are 1.0.0 through 2.1.1 and 3.0.0-alpha.1.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-15
•10 min read
WooCommerce PDF Invoice Builder CVE-2026-52704: Overview of a CVSS 10.0 Remote Code Execution Vulnerability
CVE-2026-52704 is a maximum-severity remote code execution vulnerability in the WooCommerce PDF Invoice Builder WordPress plugin. Exploiting it requires only Subscriber-level authentication.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-15
•10 min read
GStreamer WavPack Decoder CVE-2026-53705: Overview of an Integer Overflow Leading to Heap Corruption
A brief summary of CVE-2026-53705, a high-severity integer overflow in GStreamer's WavPack decoder that corrupts the heap on both 32-bit and 64-bit systems, with patch details and mitigation guidance.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-13
•10 min read
Brief Summary: CVE-2026-54420 LiteSpeed cPanel Plugin Symlink Escalation Bypasses CloudLinux CageFS Isolation
A short review of CVE-2026-54420 (CVSS 8.5), a symlink-following vulnerability in the LiteSpeed cPanel plugin that attackers actively exploited in May 2026 to escape CloudLinux CageFS isolation on shared hosting servers.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-12
•12 min read
Yarbo Robot Fleet CVE-2026-10557: Hard-Coded MQTT Credentials Expose 50,000+ Devices to Remote Takeover
CVE-2026-10557 is a critical hard-coded credential vulnerability in the Yarbo mobile app. The shared credentials grant unauthenticated access to the global MQTT broker that controls 50,000+ yard robots. This summary covers the patch details and Yarbo's security history.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-12
•10 min read
Netty CVE-2026-44894: Brief Summary of a QUIC Anti-Amplification Bypass via Default Token Handler
A short review of CVE-2026-44894, a high-severity flaw in Netty's default QUIC token handler that bypasses RFC 9000's anti-amplification limit, enabling reflection DDoS attacks. Includes patch analysis and mitigation guidance.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-12
•8 min read
Brief Summary: Netty SNI Handler Pre-Allocation DoS (CVE-2026-45416) Turns Nine Bytes Into 16 MiB of Memory Pressure
A short review of CVE-2026-45416, a high-severity denial-of-service vulnerability in Netty's SNI handler. A crafted TLS ClientHello of as few as nine bytes triggers a 16 MiB memory allocation because the default length guards are disabled.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-12
•10 min read
Netty CVE-2026-45674: Brief Summary of DNS Cache Poisoning via Bailiwick Bypass in CNAME Resolution
A short review of CVE-2026-45674, a high-severity DNS cache poisoning vulnerability in Netty's resolver caused by missing bailiwick validation for CNAME records. Covers the patch, detection strategies, and the companion vulnerabilities.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-12
•12 min read
vm2 Sandbox Escape to Host RCE (CVE-2026-47131): Technical Breakdown with PoC and Patch Analysis
A summary of CVE-2026-47131, a CVSS 10.0 sandbox escape in the vm2 Node.js library that allows full host remote code execution through prototype chain manipulation. Includes PoC details and patch analysis.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-12
•12 min read
vm2 CVE-2026-47135: Brief Summary of a Cross-Realm Symbol Sandbox Escape in Node.js
A brief summary of CVE-2026-47135, a high-severity sandbox escape in the vm2 Node.js library caused by incomplete cross-realm symbol blocking and missing bridge trap checks, with patch analysis and mitigation guidance.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-12
•10 min read
vm2 Sandbox Escape CVE-2026-47137: Quick Look at a CVSS 10.0 Patch Bypass Enabling Host RCE
CVE-2026-47137 is a CVSS 10.0 sandbox escape in the vm2 Node.js library. It bypasses a prior security patch through a strict equality flaw. This post covers the proof of concept, the patch, and the affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-12
•12 min read
vm2 CVE-2026-47139: Underscored Builtin Network Bypass Enables SSRF from Node.js Sandbox — Quick Look with PoC and Detection Guidance
CVE-2026-47139 is a high severity sandbox bypass in vm2 for Node.js. Sandboxed code can make network requests through underscored internal builtins despite explicit network module exclusions. This writeup covers the proof of concept and detection strategies.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-12
•12 min read
vm2 Sandbox Escape via Builtin Denylist Bypass: Overview of CVE-2026-47140 (CVSS 10.0)
A brief summary of CVE-2026-47140, a CVSS 10.0 sandbox escape in the vm2 Node.js library. The builtin denylist did not fully cover the process and inspector/promises modules. Covers the patch, detection methods, and the broader 2026 vm2 CVE wave.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-12
•12 min read
vm2 Sandbox Breakout via Promise Species Hijack (CVE-2026-47208): Technical Breakdown with PoC and Patch Analysis
CVE-2026-47208 is a CVSS 10.0 sandbox escape in the vm2 Node.js library that allows full host RCE through a Promise Symbol.species hijack. This covers the proof of concept and the patch.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-12
•12 min read
vm2 CVE-2026-47209: Brief Summary of the Bridge Proxy Set Trap Receiver Bypass
A short review of CVE-2026-47209, a high-severity sandbox escape in the vm2 Node.js library. The Bridge Proxy set trap ignores the receiver parameter, so sandbox code can write properties directly to host objects. Includes patch analysis and affected-version details.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-12
•12 min read
vm2 Sandbox Escape via JSPI Promise Species Bypass (CVE-2026-47210): Technical Breakdown with PoC and Patch Analysis
CVE-2026-47210 is a critical CVSS 9.8 sandbox escape in the vm2 Node.js library. It uses WebAssembly JSPI to bypass Promise species hardening and run arbitrary code in the host process. This post covers the public PoC and the patch.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-12
•10 min read
Brief Summary: CVE-2026-53787 Unauthenticated File Upload in Amasty Order Attributes for Magento 2
A short review of CVE-2026-53787, a critical unauthenticated arbitrary file upload vulnerability in Amasty Order Attributes for Magento 2. On affected stores it can lead to remote code execution, stored XSS, and path traversal.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-12
•10 min read
GPTranslate WordPress Plugin CVE-2026-9109: Brief Summary of Unauthenticated Stored XSS via Exposed API Key and REST API
A short review of CVE-2026-9109, an unauthenticated stored XSS vulnerability in the GPTranslate WordPress plugin (versions up to 2.31). The attack uses a deterministically derived API key that the plugin exposes on every page. Covers the patch details and the affected versions.
ZeroPath CVE Analysis
