ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2026-06-11
•8 min read
phpBB CVE-2026-48611: Brief Summary of a Critical OAuth Authentication Bypass Enabling Account Hijacking
A brief summary of CVE-2026-48611, a critical OAuth authentication bypass in phpBB. It allows account hijacking on default installations, even when OAuth is not configured, and affects all versions prior to 3.3.17.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•10 min read
Brief Summary: CVE-2026-49982 Type-Confusion Path Traversal in node-tmp
CVE-2026-49982 is a high-severity type-confusion path traversal in version 0.2.6 of the node-tmp npm package. It allows file or directory creation outside the intended temporary directory. This review covers detection methods and affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-11
•10 min read
Brief Summary: CVE-2026-7870 — IBM i Privilege Escalation via Unqualified Library Call Affects All Supported Releases
A short review of CVE-2026-7870, a high-severity privilege escalation in IBM i caused by unqualified library calls, with patch information and details on affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•12 min read
UpdraftPlus CVE-2026-10795: Brief Summary of the Authentication Bypass Threatening 3M+ WordPress Sites
A brief summary of CVE-2026-10795, a CVSS 8.1 authentication bypass in the UpdraftPlus WordPress plugin affecting 3 million+ sites. Covers the dual cryptographic flaw, patch details, detection methods, and confirmed active exploitation.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•10 min read
Quick Look: Splunk Secure Gateway CVE-2026-20251 RCE via jsonpickle Deserialization
CVE-2026-20251 is a high severity remote code execution flaw in Splunk Secure Gateway. Unsafe jsonpickle deserialization of KV Store data lets any low privileged authenticated user run commands on the server.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•10 min read
Splunk Enterprise CVE-2026-20252: Overview of SSRF via Dashboard Studio PDF Export with Dual Bypass Mechanisms
CVE-2026-20252 is a high severity SSRF vulnerability in Splunk Enterprise and Splunk Cloud Platform. It lets low privileged users reach arbitrary internal destinations through the Dashboard Studio PDF export feature, using prefix match and redirect bypass techniques.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•10 min read
Brief Summary: CVE-2026-20253 — Unauthenticated File Operations in Splunk Enterprise PostgreSQL Sidecar
A short review of CVE-2026-20253, a critical (CVSS 9.8) vulnerability in Splunk Enterprise's PostgreSQL sidecar service that lets an unauthenticated attacker create and truncate arbitrary files. It affects multiple versions of both Splunk Enterprise and Splunk Cloud Platform.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•8 min read
Brief Summary: CVE-2026-3018 Unauthenticated SQL Injection in WordPress Newsletters Plugin
A short review of CVE-2026-3018, an unauthenticated time-based SQL injection in the WordPress Newsletters plugin (versions 4.13 and earlier) that lets remote attackers extract sensitive database contents.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•10 min read
Quick Look: CVE-2026-35273, Unauthenticated RCE in Oracle PeopleSoft PeopleTools Updates Environment Management
CVE-2026-35273 is a CVSS 9.8 unauthenticated remote code execution vulnerability in Oracle PeopleSoft PeopleTools 8.61 and 8.62. This summary covers the flaw, the patch, and the threat intelligence context.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•10 min read
js-cookie CVE-2026-46625: Per-Instance Prototype Hijack Enables Cookie Attribute Injection — Quick Look with PoC and Patch Analysis
CVE-2026-46625 is a high-severity prototype pollution flaw in the widely used js-cookie npm package that lets attackers inject arbitrary cookie attributes. This quick look covers the proof of concept and the patch.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•9 min read
Ghidra BSim SQL Injection (CVE-2026-49498): Brief Summary of PostgreSQL Privilege Escalation via Unescaped Usernames
A brief summary of CVE-2026-49498, a high-severity SQL injection in Ghidra's BSim password change flow that lets authenticated users escalate to PostgreSQL superuser privileges. Includes patch analysis and affected-version details.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•10 min read
Brief Summary: CVE-2026-50566 — Fission Kubernetes Serverless Framework SecurityContext Bypass Enables Cluster Compromise
A short review of CVE-2026-50566, a critical (CVSS 9.9) privilege escalation in the Fission Kubernetes serverless framework. Fission does not validate Container SecurityContext fields, so tenants can deploy privileged pods and escape container sandboxes.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•8 min read
Brief Summary: CVE-2026-52751 in NSA's Ghidra Enables Unauthenticated RCE via RMI Deserialization
A short review of CVE-2026-52751, a high-severity unsafe deserialization vulnerability in Ghidra's Shared Project RMI client code that allows unauthenticated remote code execution when a user opens a crafted project file. All versions from 9.1 through 12.0.x are affected.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•7 min read
Brief Summary: Ghidra Extension Installer Zip Slip Vulnerability (CVE-2026-52752)
A short review of CVE-2026-52752, a high-severity Zip Slip path traversal vulnerability in Ghidra's extension installer. A crafted ZIP archive can write arbitrary files and lead to code execution.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•8 min read
Brief Summary: CVE-2026-52754 — NSA Ghidra Server PKI Null Signature Authentication Bypass
A short review of CVE-2026-52754, a high-severity authentication bypass in NSA's Ghidra Server that lets any user with a valid CA-signed certificate impersonate other users by submitting null signature bytes during PKI authentication.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•9 min read
Brief Summary: Ghidra Theme Import Zip Slip Path Traversal (CVE-2026-52755)
A short review of CVE-2026-52755, a high-severity Zip Slip path traversal vulnerability in Ghidra's theme import functionality. A crafted ZIP file can write arbitrary files outside the intended directory, which can lead to code execution.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•10 min read
WordPress Insert PHP Plugin CVE-2017-20251: Overview of a Critical Unauthenticated RCE via REST API Shortcode Injection
CVE-2017-20251 is a critical PHP code injection flaw in the WordPress Insert PHP plugin. It chains the WordPress REST API with malicious shortcode injection to achieve unauthenticated remote code execution.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•10 min read
Ivanti Sentry CVE-2026-10520: Quick Look at a CVSS 10.0 Unauthenticated Root RCE via OS Command Injection
A summary of CVE-2026-10520, a maximum severity OS command injection in Ivanti Sentry that lets unauthenticated attackers reach root-level remote code execution across three release branches.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•10 min read
Ivanti Sentry CVE-2026-10523: Quick Look at a CVSS 9.9 Authentication Bypass Enabling Full Admin Takeover
CVE-2026-10523 is a critical authentication bypass in Ivanti Sentry that lets remote unauthenticated attackers create arbitrary administrative accounts. We cover the technical details, affected versions, and Ivanti's broader security track record.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•12 min read
Brief Summary: CVE-2026-10727 Root Level OS Command Injection in Ivanti EPMM
A brief summary of CVE-2026-10727, an authenticated OS command injection vulnerability in Ivanti Endpoint Manager Mobile (EPMM) that allows root-level command execution. Covers the patch details and threat intelligence context from earlier Ivanti EPMM exploitation campaigns.
ZeroPath CVE Analysis
