Skip to content
Standard Reader
Log in
Tag

Vulnerability

Articles and publications tagged Vulnerability across the Atmosphere.

34articles10publications
kozhevnikova
kozhevnikovaOct 24, 2026
Rejetto HFS signs its admin session cookie with Math.random()
CVE-2026-61500 in Rejetto HFS derives the session signing key from Math.random(), exposes generator output during login, and lets an attacker mint an administrator cookie that reaches server_code execution.
vulnerabilityfile-server
ivanova
ivanovaOct 23, 2026
CVE-2026-96655: what the Plex Media Server SSRF actually exposes
CVE-2026-96655: what the Plex Media Server SSRF actually exposes
vulnerabilityCVE-2026-96655
sorrelthorncroft
sorrelthorncroftOct 23, 2026
Designing a reverse proxy that survives a Plex SSRF
Designing a reverse proxy that survives a Plex SSRF
vulnerabilityCVE-2026-96655
kozhevnikova
kozhevnikovaOct 23, 2026
Detecting CVE-2026-96655 exploitation in Plex logs
Detecting CVE-2026-96655 exploitation in Plex logs
vulnerabilityCVE-2026-96655
ioneyrezende
ioneyrezendeOct 23, 2026
The Plex patch cluster: why one CVE is not the whole story
The Plex patch cluster: why one CVE is not the whole story
vulnerabilityCVE-2026-96655
jeffreyciend
jeffreyciendOct 23, 2026
Account hygiene is the real control for CVE-2026-96655
Account hygiene is the real control for CVE-2026-96655
vulnerabilityCVE-2026-96655
eiuspkz
eiuspkzOct 23, 2026
CVE-2026-96655 on a small business network
CVE-2026-96655 on a small business network
vulnerabilityCVE-2026-96655
andreagomez205
andreagomez205Oct 23, 2026
Reading the KEV listing: CVE-2026-96655 and due dates that matter
Reading the KEV listing: CVE-2026-96655 and due dates that matter
vulnerabilityCVE-2026-96655
facilishz
facilishzOct 23, 2026
Docker and NAS deployments: the CVE-2026-96655 upgrade gap
Docker and NAS deployments: the CVE-2026-96655 upgrade gap
vulnerabilityCVE-2026-96655
facilishz
facilishzOct 23, 2026
CVE-2026-109619: the PHP flaw that outlives its own request
phpremote code execution
sorrelthorncroft
sorrelthorncroftOct 23, 2026
Patching CVE-2026-109618 across a fleet: where PHP actually hides in your inventory
phpremote code execution
kozhevnikova
kozhevnikovaOct 23, 2026
What PHP's CVSS 9.2 rating means for shared hosting after CVE-2026-109618
phpremote code execution
ioneyrezende
ioneyrezendeOct 23, 2026
Same week, same interpreter: CVE-2026-109618 and the two-defect PHP release
phpremote code execution
andreagomez205
andreagomez205Oct 23, 2026
Why the VeloCloud Orchestrator stays reachable, and what that means for CVE-2026-114625
Technical analysis of CVE-2026-114625 in Arista VeloCloud Orchestrator.
vulnerabilitysd-wan
sorrelthorncroft
sorrelthorncroftOct 23, 2026
Hunting VeloCloud Orchestrator exploitation: what CVE-2026-114625 leaves in the logs
Technical analysis of CVE-2026-114625 in Arista VeloCloud Orchestrator.
vulnerabilitysd-wan
jeffreyciend
jeffreyciendOct 23, 2026
Detecting exploitation attempts against CVE-2026-109618 without a public exploit
phpremote code execution
eiuspkz
eiuspkzOct 23, 2026
Two days between warning and patch: how the PHP project handled CVE-2026-109618
phpremote code execution
eiuspkz
eiuspkzOct 23, 2026
CVE-2026-114625: A Read-Only Login Is Enough to Own Arista VeloCloud Orchestrator
CVE-2026-114625 in Arista VeloCloud Orchestrator lets any authenticated user, including a read-only tenant account, escalate to superuser operator. CVSS 9.9, actively exploited.
vulnerabilitysd-wan
jeffreyciend
jeffreyciendOct 22, 2026
CVE-2026-74041: where Wazuh Manager configuration becomes code
CVE-2026-74041: where Wazuh Manager configuration becomes code
vulnerabilityWazuh
sorrelthorncroft
sorrelthorncroftOct 22, 2026
Threat Modelling the Insider Path in CVE-2026-0313
Threat Modelling the Insider Path in CVE-2026-0313
vulnerabilitycortex-xsoar
facilishz
facilishzOct 22, 2026
CVE-2026-102764: A Remote Support Appliance, a Web Shell, and a SUID Backdoor
A detailed look at CVE-2026-102764, including why the credential store and Jump Item configuration define the real incident scope.
vulnerabilityremote-access
sorrelthorncroft
sorrelthorncroftOct 22, 2026
CVE-2026-104286: What FortiMail Adds to the Mail Gateway Exploitation Trend
The mail gateway as a recurring exploitation target, and the controls that apply regardless of which vendor is affected.
vulnerabilityemail-security
ioneyrezende
ioneyrezendeOct 22, 2026
Zammad CVE-2026-102489 and CVE-2026-102490: When the Support Desk Becomes the Entry Point
Why a customer support platform is an attractive target, and how automation definitions become persistence after a compromise.
vulnerabilitycollaboration
jeffreyciend
jeffreyciendOct 22, 2026
CVE-2026-89111: SSRF in a Multi-Tenant SDK and the OAuth Credentials Behind It
Why an SSRF in a cloud SDK is a credential problem, and how to verify that consuming applications actually shipped the fix.
vulnerabilitycloud