ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2026-06-12
•9 min read
WP Ticket Plugin CVE-2026-9848: Brief Summary of an Unauthenticated SQL Injection via WordPress Search
CVE-2026-9848 is an unauthenticated SQL injection in the WP Ticket WordPress plugin. An attacker can read database contents through the standard search parameter without logging in.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•10 min read
Keras CVE-2026-11816: Path Traversal via CWD Validation Bypass in Archive Extraction — Technical Breakdown with PoC
A brief summary of CVE-2026-11816, a high-severity path traversal in Keras archive extraction that bypasses validation when the process working directory is the filesystem root. Includes proof-of-concept details and mitigation guidance.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•10 min read
MongoDB Server CVE-2026-11933: Use-After-Free in Server-Side JavaScript BSON Conversion — Quick Look
CVE-2026-11933 is a high-severity use-after-free vulnerability in MongoDB Server's MozJS BSON binding layer. An authenticated user with read privileges can use the $where or $function operators to disclose process memory or crash the server.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•9 min read
Spring Integration CVE-2026-40987: Path Traversal via Malicious Remote File Server — Quick Look
A quick look at CVE-2026-40987, a high-severity path traversal vulnerability in Spring Integration's remote file synchronizer that lets a malicious or compromised FTP, SFTP, or SMB server write arbitrary files anywhere on the client filesystem.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•8 min read
Brief Summary: CVE-2026-40994 Spring Web Services BSP Enforcement Bypass via Insecure Default Initialization
A short review of CVE-2026-40994, a high-severity insecure default in Spring Web Services. Wss4jSecurityInterceptor silently disables WS-I Basic Security Profile enforcement, so SOAP messages that violate BSP pass validation on affected deployments.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•9 min read
Spring Web Services CVE-2026-40998: Brief Summary of the Jaxp13XPathTemplate XXE Bypass
A brief summary of CVE-2026-40998, a high-severity XXE vulnerability in Spring Web Services. When Jaxp13XPathTemplate processes StreamSource and SAXSource inputs, it bypasses Spring's hardened XML parser configuration, which exposes applications to file disclosure and SSRF.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•10 min read
Spring Web Services CVE-2026-40999: Brief Summary of a High Severity SSRF via WS-Addressing Headers
A short review of CVE-2026-40999, a high-severity SSRF vulnerability in Spring Web Services. Unvalidated WS-Addressing ReplyTo and FaultTo headers let unauthenticated attackers force outbound connections to arbitrary destinations. Includes patch details and an affected-version matrix.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•10 min read
Brief Summary: CVE-2026-41700 Cross-Site WebSocket Hijacking in Spring for GraphQL
A short review of CVE-2026-41700, a high-severity Cross-Site WebSocket Hijacking vulnerability in Spring for GraphQL. When an application uses the WebSocket transport with cookie-based authentication, an attacker can execute arbitrary GraphQL operations with a victim's credentials.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•10 min read
Spring for GraphQL CVE-2026-41856: Overview of Authorization Bypass via Annotation Detection Failure in Type Hierarchies
CVE-2026-41856 is a high-severity authorization bypass in Spring for GraphQL that silently ignores security annotations on controllers in type hierarchies. This summary covers the patch and the affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•10 min read
Netty CVE-2026-44249: Brief Summary of the IPv6 Subnet Filter Bypass in IpSubnetFilterRule
A short review of CVE-2026-44249, a high-severity IPv6 subnet filter bypass in Netty's IpSubnetFilterRule caused by incorrect bitwise masking and signed integer interpretation. Includes patch details, detection strategies, and affected version ranges.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•12 min read
Axios CVE-2026-44486: Proxy Credential Leakage via Redirect Handling in Node.js — Technical Breakdown with PoC and Patch Analysis
CVE-2026-44486 is a high-severity information disclosure flaw in the Axios Node.js HTTP adapter that leaks proxy credentials to redirect targets. This brief summary covers the proof of concept, the patches for both the v1.x and v0.x lines, and practical detection strategies.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•12 min read
Axios Fetch Adapter Size Limit Bypass (CVE-2026-44488): Technical Breakdown with PoC and Patch Analysis
CVE-2026-44488 is a high-severity resource-exhaustion flaw in the Axios fetch adapter, which silently ignores configured size limits. This breakdown covers the proof of concept, the patch, and detection strategies.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•12 min read
Axios CVE-2026-44492: IPv4-Mapped IPv6 NO_PROXY Bypass Enables SSRF with PoC and Patch Analysis
CVE-2026-44492 is a high severity SSRF vulnerability in Axios that lets attackers bypass NO_PROXY exclusions using IPv4-mapped IPv6 addresses. Covers proof of concept details, patch analysis, and detection methods.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•12 min read
Brief Summary: Axios CVE-2026-44494 Prototype Pollution Gadget Enables Full MITM with PoC and Detection Guidance
A brief summary of CVE-2026-44494, a high-severity prototype pollution gadget in Axios that lets an attacker escalate to a full Man-in-the-Middle attack. Includes proof-of-concept details, detection methods, and mitigation guidance.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•10 min read
Brief Summary: CVE-2026-47365 — Argument Injection in cPanel WP Toolkit Breaks Tenant Isolation
A short review of CVE-2026-47365, a CVSS 9.9 argument injection flaw in cPanel's WP Toolkit before version 6.11.0 that lets authenticated users bypass cross-tenant authorization and run CLI commands as other accounts. Covers the patch and the threat context.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•10 min read
Brief Summary: CVE-2026-47367 Command Injection in Ubiquiti UID Enterprise Agent (CVSS 9.9)
A short review of CVE-2026-47367, a critical command injection vulnerability in Ubiquiti's UID Enterprise Agent that lets low-privilege network attackers execute arbitrary commands on host devices, with patch details and threat intelligence context.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•8 min read
Brief Summary: CVE-2026-47368 Path Traversal in Ubiquiti UniFi OS and Its Role in a Five CVE Bulletin
A short review of CVE-2026-47368, a high-severity path traversal vulnerability in Ubiquiti UniFi OS that lets network-adjacent attackers read sensitive data from affected devices. Covers patch details across multiple device families and how the flaw can be chained with the four other CVEs in the same advisory.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•10 min read
Brief Summary: CVE-2026-47369 UniFi OS Privilege Escalation via Improper Input Validation (CVSS 9.9)
A short review of CVE-2026-47369, a critical CVSS 9.9 privilege escalation flaw in Ubiquiti UniFi OS that lets low-privileged network attackers escalate privileges on affected devices. Covers the patch, the affected device matrix, and how the flaw could chain with its sibling vulnerabilities from Security Advisory Bulletin 065.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•10 min read
Quick Look: CVE-2026-47370 Command Injection in Ubiquiti UniFi OS (CVSS 9.9)
A brief summary of CVE-2026-47370, a CVSS 9.9 command injection vulnerability in Ubiquiti UniFi OS that lets low-privileged network attackers hijack host devices. Covers patch information and affected versions across the full UniFi hardware console line.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•8 min read
Brief Summary: CVE-2026-48610 Improper Access Control in Ubiquiti UniFi OS Cloud Gateways
A short review of CVE-2026-48610, a CVSS 8.1 improper access control vulnerability in Ubiquiti UniFi OS Cloud Gateways and Dream Machines that lets network-adjacent attackers make unauthorized configuration changes. Includes patch details and affected version information.
ZeroPath CVE Analysis
