Skip to content
Standard Reader
Log in
Tag

Vulnerability-management

Articles and publications tagged Vulnerability-management across the Atmosphere.

18articles8publications
facilishz
facilishzOct 24, 2026
ZooKeeper's ACL checks were bypassed twice, in code paths that rarely get reviewed
ZooKeeper's ACL checks were bypassed twice, in code paths that rarely get reviewed
securityvulnerability-management
sorrelthorncroft
sorrelthorncroftOct 24, 2026
Zimbra's sharing features are an unauthenticated injection surface
Zimbra's sharing features are an unauthenticated injection surface
securityvulnerability-management
kozhevnikova
kozhevnikovaOct 24, 2026
A request smuggling flaw on an ADC is a flaw in everything behind it
A request smuggling flaw on an ADC is a flaw in everything behind it
securityvulnerability-management
ioneyrezende
ioneyrezendeOct 24, 2026
Ivanti Connect Secure: an exploited privilege escalation and a quieter credential path
Ivanti Connect Secure: an exploited privilege escalation and a quieter credential path
securityvulnerability-management
andreagomez205
andreagomez205Oct 24, 2026
Log injection turns ZooKeeper audit records into attacker-controlled text
Log injection turns ZooKeeper audit records into attacker-controlled text
securityvulnerability-management
facilishz
facilishzOct 23, 2026
VeloCloud Orchestrator Patch Triage: Three Release Trains, One Critical SQL Injection
Patch triage for CVE-2026-114625 across VeloCloud Orchestrator 5.2, 6.1 and 6.4 trains, including the stale-patch trap from earlier 2026 VCO fixes.
patch-managementvulnerability-management
sorrelthorncroft
sorrelthorncroftOct 23, 2026
Reading the 9.9: What CVSS Tells You About CVE-2026-114625, and What It Does Not
CVE-2026-114625 scores 9.9 on CVSS 3.1 and 9.4 on CVSS 4.0. Here is what each vector actually encodes, what the low-privilege assumption hides, and what the score cannot answer.
cvssrisk-scoring
ioneyrezende
ioneyrezendeOct 22, 2026
Third VeloCloud Orchestrator Flaw Exploited in 2026: CVE-2026-114625 in a Pattern
CVE-2026-114625 is the third exploited VeloCloud Orchestrator flaw in 2026. What changed with the authentication requirement, and what the pattern says about patch assurance.
trend-analysissd-wan
kozhevnikova
kozhevnikovaOct 22, 2026
Timeline discipline for the OpenVPN 2.7.8 change
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
openvpnvpn
andreagomez205
andreagomez205Oct 22, 2026
Patching Is Not Provisioning: What the October 2026 KEV Wave Says About Edge Device Lifecycle
A lifecycle view of the October 2026 KEV wave, with metrics that predict exposure better than patch compliance.
strategyedge-security
facilishz
facilishzOct 22, 2026
Config review for OpenVPN users: the PUSH_UPDATE path behind CVE-2026-88964
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
openvpnvpn
sorrelthorncroft
sorrelthorncroftOct 22, 2026
Defense in depth after the OpenVPN fixes: what to keep once 2.7.8 is deployed
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
openvpnvpn
ioneyrezende
ioneyrezendeOct 21, 2026
Scoring two OpenVPN flaws against your own exposure, not the internet's
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
openvpnvpn
jeffreyciend
jeffreyciendOct 21, 2026
Two fixes, two audiences: explaining the OpenVPN advisories to management and to engineers
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
openvpnvpn
eiuspkz
eiuspkzOct 21, 2026
Spotting the OpenVPN flaw patterns in your own code reviews
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
openvpnvpn
andreagomez205
andreagomez205Oct 21, 2026
Certificate enrollment hygiene after CVE-2026-84790
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
openvpnvpn
ivanova
ivanovaOct 21, 2026
OpenVPN flaw FAQ: seven questions a change board will ask about 2.7.8
Technical analysis of two high-severity OpenVPN flaws fixed in 2.7.8.
openvpnvpn
jeffreyciend
jeffreyciendOct 21, 2026
The Advisory Inside the Advisory: Finding CVE-2026-33792 in a 151-CVE Junos Bundle
advisory-triagejuniper

You've reached the end.