ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2026-06-01
•12 min read
Kirki WordPress Plugin CVE-2026-8206: Brief Summary of a Critical Unauthenticated Privilege Escalation via Password Reset Hijacking
A short review of CVE-2026-8206, a CVSS 9.8 unauthenticated privilege escalation in the Kirki WordPress plugin (versions 6.0.0 through 6.0.6) that lets attackers redirect password reset emails to any address they choose. Covers the patch, detection methods, and threat intelligence context.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-01
•10 min read
IBM WebSphere Application Server CVE-2026-8644: Critical Identity Spoofing via Improper Signature Validation — Quick Look
A quick look at CVE-2026-8644, a critical (CVSS 9.1) identity spoofing vulnerability in IBM WebSphere Application Server traditional 8.5 and 9.0. Improper signature validation lets unauthenticated remote attackers bypass authentication, and no workarounds are available.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-01
•10 min read
IBM WebSphere Application Server CVE-2026-9311: Brief Summary of a Critical RCE via Security Control Bypass
A brief summary of CVE-2026-9311, a CVSS 9.0 remote code execution vulnerability in IBM WebSphere Application Server 8.5 and 9.0. A code injection flaw lets attackers bypass existing security controls. No workarounds are available, so patching is the only remediation.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-01
•8 min read
IBM WebSphere Application Server CVE-2026-9319: Brief Summary of Critical RCE via JAX-WS Deserialization
A brief summary of CVE-2026-9319, a critical (CVSS 9.0) remote code execution vulnerability in IBM WebSphere Application Server. It comes from insecure deserialization of untrusted data at JAX-WS endpoints configured with WS-Security. Both the 8.5 and 9.0 release streams are affected, and no workarounds are available.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-01
•10 min read
IBM WebSphere Application Server CVE-2026-9330: SAML SSO Deserialization Leading to Remote Code Execution
CVE-2026-9330 is a high-severity deserialization vulnerability in IBM WebSphere Application Server's SAML Web SSO component. Combined with a suitable gadget chain, it enables remote code execution via crafted HTTP requests.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-01
•10 min read
Quick Look: CVE-2026-9614 Privilege Escalation in Ivanti Neurons for ITSM
A brief summary of CVE-2026-9614, a high-severity improper access control flaw in Ivanti Neurons for ITSM that lets any authenticated user escalate to full administrator, with patch information for both cloud and on-premises deployments.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-31
•10 min read
OTRS CVE-2026-48188: Critical Unauthenticated SQL Injection Enables Authentication Bypass Across a Decade of Releases
CVE-2026-48188 is a critical unauthenticated SQL injection in the OTRS database layer module. When MySQL or MariaDB is configured with NO_BACKSLASH_ESCAPES, it leads to authentication bypass. Seven major release lines, spanning nearly a decade, are affected.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-30
•10 min read
Spectra Gutenberg Blocks CVE-2026-7465: Brief Summary of a Contributor-Level RCE via Block Callback Injection
A review of CVE-2026-7465, a CVSS 8.8 Remote Code Execution flaw in the Spectra Gutenberg Blocks WordPress plugin that affects over 1 million sites. Covers the two-block exploitation mechanism, the one-line patch in version 2.19.26, and the vendor's recurring security issues.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-29
•10 min read
Brief Summary: CVE-2026-3655 Firebase OTP Authentication Bypass in WordPress OTP Login Plugin
A review of CVE-2026-3655, a CVSS 9.8 authentication bypass in the WordPress OTP Login With Phone Number plugin. An unauthenticated attacker can log in as any user, including administrators, by exploiting a missing identity binding check in the Firebase OTP verification flow.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-29
•10 min read
Brief Summary: CVE-2026-4290 in WP Travel Pro — Unauthenticated Admin Deletion via Broken REST API Authorization
A short review of CVE-2026-4290, a critical missing authorization flaw in the WP Travel Pro WordPress plugin. Unauthenticated attackers can delete arbitrary user accounts, including administrators, with a single REST API request. No patch is currently available.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-29
•10 min read
OpenShift Router CVE-2026-42965: Cloud Metadata SSRF via FQDN EndpointSlice Bypass — Quick Look
CVE-2026-42965 is a high severity SSRF vulnerability in the OpenShift Router. Users with EndpointSlice write access can bypass IP validation with FQDN typed endpoints that resolve to cloud metadata addresses, which can expose instance credentials.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-29
•9 min read
Home Assistant Companion App CVE-2026-44698: Quick Look at Cross-Origin Token Exfiltration via WebView JavaScript Bridge
A brief summary of CVE-2026-44698, a high-severity vulnerability in the Home Assistant Companion apps for Android and iOS that lets a cross-origin iframe exploit the WebView JavaScript bridge and steal the signed-in user's OAuth access token.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-29
•9 min read
Brief Summary: CVE-2026-44962, Critical XPath Injection to Root in Plesk APS Catalog
A brief summary of CVE-2026-44962, a CVSS 9.9 XPath injection vulnerability in Plesk's APS Application Catalog that lets any authenticated low-privileged user escalate to root through arbitrary OS command execution.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-29
•10 min read
OpenShift Router CVE-2026-46579: mTLS Authentication Bypass via Header Spoofing on HTTP Frontend
A brief summary of CVE-2026-46579, a CVSS 7.4 authentication bypass in the OpenShift Router. The HTTP frontend fails to strip X-SSL-Client headers, so unauthenticated attackers can spoof mTLS client certificate identities on routes configured with insecureEdgeTerminationPolicy set to Allow.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-29
•10 min read
Quick Look: CVE-2026-48501 — GitHub CLI Token Leakage via Flawed Host Normalization in TUF Verification Commands
CVE-2026-48501 is a high-severity token leakage vulnerability in GitHub CLI. Flawed host normalization sends authentication tokens to external, non-GitHub hosts during attestation and release verification commands. This summary covers the patch and the affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-29
•8 min read
Brief Summary: JetBrains IntelliJ IDEA CVE-2026-49366 Command Injection via Filename Completion
A short review of CVE-2026-49366, a high severity command injection vulnerability in JetBrains IntelliJ IDEA that allows arbitrary OS command execution through the IDE's filename completion feature, affecting all versions before 2026.1.1.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-29
•8 min read
Brief Summary: CVE-2026-49367 — JetBrains IntelliJ IDEA Guest User Command Execution via Missing Authorization in Code With Me
A short review of CVE-2026-49367, a high-severity missing authorization flaw in the Code With Me feature of JetBrains IntelliJ IDEA. Guest users can execute commands on the host machine regardless of the permission level they were assigned.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-29
•10 min read
Quick Look: CVE-2026-49372 — Unauthenticated SSRF in JetBrains TeamCity Build Status
CVE-2026-49372 is an unauthenticated Server-Side Request Forgery vulnerability in the build status feature of JetBrains TeamCity On-Premises, with a CVSS score of 7.5. Any attacker who can reach the server can use it to send requests into the network behind it, which puts CI/CD infrastructure at risk.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-29
•7 min read
JetBrains TeamCity CVE-2026-49373: Brief Summary of Argument Injection RCE via Perforce Connection Settings
A brief summary of CVE-2026-49373, a high-severity argument injection vulnerability in JetBrains TeamCity that enables remote code execution through malicious Perforce VCS root connection settings.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-29
•10 min read
Mautic CVE-2026-9558: Brief Summary of Critical SSTI to RCE in the Theme Engine
CVE-2026-9558 is a critical (CVSS 9.9) Server-Side Template Injection vulnerability in Mautic's theme engine. It lets authenticated users reach Remote Code Execution through unsandboxed Twig template rendering.
ZeroPath CVE Analysis
