ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2026-06-10
•9 min read
Ghidra BSim SQL Injection (CVE-2026-49498): Brief Summary of PostgreSQL Privilege Escalation via Unescaped Usernames
A brief summary of CVE-2026-49498, a high-severity SQL injection in Ghidra's BSim password change flow that allows authenticated users to escalate to PostgreSQL superuser privileges. Includes patch analysis and affected version details.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•10 min read
Brief Summary: CVE-2026-50566 — Fission Kubernetes Serverless Framework SecurityContext Bypass Enables Cluster Compromise
A short review of CVE-2026-50566, a critical (CVSS 9.9) privilege escalation in the Fission Kubernetes serverless framework where unvalidated Container SecurityContext fields allow tenants to deploy privileged pods and escape container sandboxes.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•8 min read
Brief Summary: CVE-2026-52751 in NSA's Ghidra Enables Unauthenticated RCE via RMI Deserialization
A short review of CVE-2026-52751, a high severity unsafe deserialization vulnerability in Ghidra's Shared Project RMI client code that allows unauthenticated remote code execution when a user opens a crafted project file. All versions from 9.1 through 12.0.x are affected.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•7 min read
Brief Summary: Ghidra Extension Installer Zip Slip Vulnerability (CVE-2026-52752)
A short review of CVE-2026-52752, a high severity Zip Slip path traversal vulnerability in Ghidra's extension installer that enables arbitrary file writes and code execution through crafted ZIP archives.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•8 min read
Brief Summary: CVE-2026-52754 — NSA Ghidra Server PKI Null Signature Authentication Bypass
A short review of CVE-2026-52754, a high severity authentication bypass in NSA's Ghidra Server that allows any user with a valid CA signed certificate to impersonate other users by submitting null signature bytes during PKI authentication.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-10
•9 min read
Brief Summary: Ghidra Theme Import Zip Slip Path Traversal (CVE-2026-52755)
A short review of CVE-2026-52755, a high severity Zip Slip path traversal vulnerability in Ghidra's theme import functionality that allows arbitrary file writes outside the intended directory, potentially leading to code execution via crafted ZIP files.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•10 min read
WordPress Insert PHP Plugin CVE-2017-20251: Overview of a Critical Unauthenticated RCE via REST API Shortcode Injection
A brief summary of CVE-2017-20251, a critical PHP code injection vulnerability in the WordPress Insert PHP plugin that enables unauthenticated remote code execution by chaining the WordPress REST API with malicious shortcode injection.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•10 min read
Ivanti Sentry CVE-2026-10520: Quick Look at a CVSS 10.0 Unauthenticated Root RCE via OS Command Injection
A brief summary of CVE-2026-10520, a maximum severity OS command injection in Ivanti Sentry that allows unauthenticated attackers to achieve root level remote code execution across three release branches.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•10 min read
Ivanti Sentry CVE-2026-10523: Quick Look at a CVSS 9.9 Authentication Bypass Enabling Full Admin Takeover
A brief summary of CVE-2026-10523, a critical authentication bypass in Ivanti Sentry that allows remote unauthenticated attackers to create arbitrary administrative accounts. We review the technical details, affected versions, and Ivanti's broader security track record.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•12 min read
Brief Summary: CVE-2026-10727 Root Level OS Command Injection in Ivanti EPMM
A brief summary of CVE-2026-10727, an authenticated OS command injection vulnerability in Ivanti Endpoint Manager Mobile (EPMM) that allows root level command execution, including patch details and threat intelligence context from prior Ivanti EPMM exploitation campaigns.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•10 min read
Events Calendar for GeoDirectory CVE-2026-11616: Subscriber to Admin Privilege Escalation via User Meta Injection
A brief summary of CVE-2026-11616, a privilege escalation vulnerability in the Events Calendar for GeoDirectory WordPress plugin that allows Subscriber accounts to gain Administrator access through unchecked user meta key writes. Includes patch analysis and mitigation guidance.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•10 min read
SQLite FTS5 Memory Corruption: Quick Look at CVE-2026-11822 and Its Billion-Device Attack Surface
A brief summary of CVE-2026-11822, a high severity heap buffer overflow and out of bounds read in SQLite's FTS5 full text search extension affecting all versions before 3.53.2, with implications for billions of deployed devices.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•12 min read
SQLite FTS5 Heap Buffer Overflow via Integer Underflow: Quick Look at CVE-2026-11824 with PoC and Patch Analysis
A brief summary of CVE-2026-11824, a heap buffer overflow in SQLite's FTS5 extension triggered by an integer underflow in fts5ChunkIterate(). Includes proof of concept details from the official regression test and patch analysis across both SQLite branches.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•10 min read
Quick Look: CVE-2026-11837 — Symlink Following in Ansible Posix authorized_key Enables Local Privilege Escalation
A brief summary of CVE-2026-11837, a high severity local privilege escalation in the ansible.posix authorized_key module caused by symlink following in the keyfile() function when running as root.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•8 min read
Brief Summary: CVE-2026-25089 — Unauthenticated OS Command Injection in Fortinet FortiSandbox via VNC Feature
A short review of CVE-2026-25089, a critical unauthenticated OS command injection in Fortinet FortiSandbox's Web UI VNC feature, covering technical details, affected versions, patch guidance, and the broader pattern of FortiSandbox vulnerabilities in 2026.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•12 min read
Spring Framework CVE-2026-41855: Brief Summary of JMS Deserialization Vulnerability Affecting All Supported Release Lines
A short review of CVE-2026-41855, a high severity deserialization flaw in Spring Framework's JMS message converters that spans versions 5.3.0 through 7.0.7. Includes patch analysis, affected version details, and mitigation guidance for untrusted JMS environments.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•12 min read
ESP-IDF CVE-2026-45328: Critical Out-of-Bounds Write Breaks TEE Trust Boundary on Espressif IoT Chips — Quick Look
A brief summary of CVE-2026-45328, a critical out-of-bounds write in Espressif's ESP-TEE secure service wrappers that allows an unprivileged REE application to corrupt TEE memory on ESP32-C6 and ESP32-C5 SoCs. Includes patch analysis and affected version details.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•10 min read
Blocksy WordPress Theme CVE-2026-8365: Brief Summary of PHP Object Injection to Remote Code Execution
A brief summary of CVE-2026-8365, a PHP Object Injection vulnerability in the Blocksy WordPress theme that chains insufficient input sanitization with unsafe deserialization during database migration to achieve Remote Code Execution with contributor level access.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•10 min read
Quick Look: CVE-2026-9740 — MongoDB Server BSON Validation Crash via Uncontrolled Mutual Recursion
A brief summary of CVE-2026-9740, a pre-authentication denial of service vulnerability in MongoDB Server caused by uncontrolled mutual recursion in the BSON validator, allowing unauthenticated attackers to crash mongod with a single crafted message.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-09
•10 min read
MongoDB CVE-2026-9742: Quick Look at the Pre-Auth OIDC Denial-of-Service Vulnerability
A brief summary of CVE-2026-9742, a pre-authentication denial-of-service vulnerability in MongoDB's OIDC authentication handler that allows unauthenticated clients to crash the server by sending crafted mechanism parameter values.
ZeroPath CVE Analysis
