ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2026-11-03
•11 min read
Overview of CVE-2026-88811: SUSE Rancher Manager Meta Proxy Leaks Rancher Credentials to Allow-Listed Cloud Hosts
A brief summary of CVE-2026-88811, a credential disclosure in the SUSE Rancher Manager meta proxy that forwarded the caller's Rancher session cookie or API token to allow-listed external hosts. Covers the root cause, the upstream patch, detection approaches, and affected versions.
Gaurav Sarraf
CVE Analysis
•2026-11-03
•9 min read
Brief Summary: Gravity Forms CVE-2026-90437 Unauthenticated Stored XSS and What the 3.1.2 Patch Changed
A brief summary of CVE-2026-90437, an unauthenticated stored cross-site scripting flaw in Gravity Forms through 3.1.1, where entity-encoded data attributes survive wp_kses_post() and reach insertAdjacentHTML() in admin JavaScript. Includes a review of the server-side changes in the 3.1.2 patch.
Gaurav Sarraf
CVE Analysis
•2026-11-03
•12 min read
Overview of CVE-2026-94290: Rancher Fleet Import Controller Privilege Escalation to Cluster Admin on the Management Cluster
A brief summary of CVE-2026-94290, an authorization flaw in SUSE Rancher Fleet's agent management controller that lets an ordinary Rancher user gain cluster admin on the local management cluster. It covers the root cause, the two-layer patch, detection approaches and affected versions.
Gaurav Sarraf
CVE Analysis
•2026-11-03
•7 min read
Brief Summary: HPE Networking VIA CVE-2026-95724 Improper Certificate Validation Leading to Authentication Bypass
A brief summary of CVE-2026-95724, an improper certificate validation flaw in the HPE Networking Virtual Intranet Access (VIA) client that can lead to authentication bypass. Covers the CVSS 8.1 rating, affected versions, and the fix in VIA 4.7.9.
Gaurav Sarraf
CVE Analysis
•2026-11-03
•10 min read
Brief Summary: HPE Networking Fabric Composer CVE-2026-95731 Hardcoded CLI Credentials Grant Unauthenticated Admin Access
A brief summary of CVE-2026-95731, a CVSS 9.8 hardcoded password flaw in the HPE Networking Fabric Composer command line interface that allows unauthenticated remote administrative access. Covers the fixed releases (7.3.5 and 7.4.1), interim management-plane controls, and behaviour-based detection guidance.
Gaurav Sarraf
CVE Analysis
•2026-11-03
•10 min read
Quick Look: Ninja Forms CVE-2026-109997 Unauthenticated Stored XSS via Metadata Key Normalization
A brief summary of CVE-2026-109997, an unauthenticated stored XSS in the Ninja Forms WordPress plugin through 3.15.5, caused by a reserved metadata key check that runs before WordPress normalizes the key. Covers the root cause, the 3.15.6 patch and practical detection approaches.
Gaurav Sarraf
CVE Analysis
•2026-11-02
•9 min read
Quick Look: CVE-2026-119262, Improper Input Validation in Google Chrome V8 Allowing Code Execution Inside the Sandbox
A brief summary of CVE-2026-119262, a High-severity improper input validation flaw in Chrome's V8 engine fixed in Chrome 156.0.8078.79. The post covers what is publicly known about the bug, the patch and distribution packages, and version-based detection options.
Gaurav Sarraf
CVE Analysis
•2026-11-02
•9 min read
Brief Summary: Google Chrome CVE-2026-119260, a Use After Free in Frames Allowing Sandboxed Code Execution
A brief summary of CVE-2026-119260, a high-severity use after free in Chrome's Frames component that lets a crafted HTML page execute code inside the sandbox. Covers fixed builds, downstream packaging, and version-based detection with Tenable and Rapid7.
Gaurav Sarraf
CVE Analysis
•2026-11-02
•9 min read
Overview of CVE-2026-119261: Improper Input Validation in Google Chrome Skia With Potential Sandbox Escape
A brief summary of CVE-2026-119261, an improper input validation flaw in Chrome's Skia graphics library that could allow code execution outside the sandbox through a crafted HTML page. Covers the fixed builds, distribution packaging status, and the version-based detection options available today.
Gaurav Sarraf
CVE Analysis
•2026-11-02
•12 min read
LMDeploy CVE-2026-119706: Unauthenticated RCE via Pickle Deserialization in /update_weights — Technical Breakdown with PoC and Patch Analysis
A summary of CVE-2026-119706, a critical unauthenticated remote code execution flaw in InternLM LMDeploy caused by unsafe pickle deserialization in the /update_weights endpoint. Covers PoC details, proposed patch analysis, and detection guidance.
Gaurav Sarraf
CVE Analysis
•2026-10-21
•8 min read
PHP CVE-2026-109618 and CVE-2026-109619: Unauthenticated RCE in the PHP Runtime
CVE-2026-109618 and CVE-2026-109619 let unauthenticated attackers run code on PHP web servers. PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix both. Technical analysis, affected setups, detection and mitigations for teams that cannot patch today.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-17
•8 min read
Brief Summary: CVE-2026-20266 OS Command Injection in Splunk AI Toolkit btool Configuration Helper
A short review of CVE-2026-20266, a critical OS command injection vulnerability in the Splunk AI Toolkit's btool configuration helper that lets users with the admin role run arbitrary commands on the underlying host.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-17
•10 min read
Dell PowerFlex Manager CVE-2026-35065: Brief Summary of a Pre-Authentication Management Plane Vulnerability
CVE-2026-35065 is a CVSS 8.8 missing-authentication flaw in Dell PowerFlex Manager that lets unauthenticated attackers on the management VLAN execute code and compromise the storage cluster. This summary covers patch information and threat intelligence context.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-17
•10 min read
Brief Summary: CVE-2026-42055 Heap Buffer Overflow in NGINX HTTP/2 Proxy and gRPC Modules
A short review of CVE-2026-42055, a high-severity heap buffer overflow in NGINX's HTTP/2 proxy and gRPC modules. Under specific non-default configurations, it can crash worker processes and may allow remote code execution.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-17
•10 min read
NGINX HTTP/3 QPACK Use After Free (CVE-2026-42530): Brief Summary of a Critical Remote Vulnerability
A brief summary of CVE-2026-42530, a Use After Free in NGINX's HTTP/3 QPACK encoder stream handling. It allows unauthenticated denial of service, and conditional remote code execution, against servers running NGINX Open Source 1.31.0 and 1.31.1.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-17
•12 min read
Envoy Proxy CVE-2026-47774: HTTP/2 Memory Exhaustion via Cookie Header Bypass with PoC and Patch Analysis
An analysis of CVE-2026-47774, a high severity HTTP/2 memory exhaustion vulnerability in Envoy proxy that reaches a 5,700:1 amplification ratio through cookie header size bypass and HPACK compression abuse. Covers PoC details, patch analysis, and detection strategies.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-16
•10 min read
Brief Summary: CVE-2024-24909 Command Injection RCE in Dell OpenManage Integration with Windows Admin Center
A short review of CVE-2024-24909, a CVSS 8.8 command injection vulnerability in the Dell OpenManage Integration with Microsoft Windows Admin Center gateway plugin that allows authenticated remote code execution. Includes patch details and affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-16
•10 min read
Dell VxRail CVE-2024-38487: Brief Summary of a Root Container Escape in the API Gateway
A brief summary of CVE-2024-38487, a high-severity container escape vulnerability in Dell VxRail's api-gateway component, with technical details on the root cause, patch information, and vendor context.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-16
•10 min read
Pacemaker CVE-2026-10649: Pre-Auth Integer Overflow in Remote Message Decompression with PoC and Patch Analysis
A summary of CVE-2026-10649, a pre-authentication integer overflow in Pacemaker's CIB remote listener that allows remote denial of service. Covers proof of concept details, a patch breakdown, and mitigation guidance.
ZeroPath CVE Analysis
CVE Analysis
•2026-06-16
•10 min read
Quick Look: CVE-2026-44932 — Indirect Shell Command Injection via SUSE Wicked DHCP Client
CVE-2026-44932 is a high-severity command injection vulnerability in SUSE's wicked DHCP client. An attacker on an adjacent network can inject shell commands through unsanitized DHCP option values. This summary covers the patch, detection methods, and affected product versions.
ZeroPath CVE Analysis
