ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2026-05-13
•7 min read
Quick Look: CVE-2026-35417 — Windows Win32k ICOMP Type Confusion Privilege Escalation
A brief summary of CVE-2026-35417, a type confusion vulnerability in the Windows Win32K ICOMP kernel subsystem that enables local privilege escalation to SYSTEM. It covers patch details, detection methods, and an affected version matrix.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•7 min read
Brief Summary: CVE-2026-35418 Windows Cloud Files Mini Filter Driver Use After Free Privilege Escalation
A short review of CVE-2026-35418, a use-after-free vulnerability in the Windows Cloud Files Mini Filter Driver (cldflt.sys) that allows local privilege escalation to SYSTEM. Includes patch details across 17 affected Windows product versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•7 min read
Brief Summary: CVE-2026-35420 Windows Kernel Heap Buffer Overflow Enables Local Privilege Escalation
CVE-2026-35420 is a heap-based buffer overflow in the Windows Kernel that lets a locally authenticated attacker escalate privileges to SYSTEM. This short review covers the flaw and lists patches for every affected Windows client and server version.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•7 min read
Windows GDI CVE-2026-35421: Brief Summary of a Heap Buffer Overflow Leading to Local Code Execution
CVE-2026-35421 is a heap-based buffer overflow in the Windows GDI subsystem that allows local code execution when a user opens a crafted EMF file. This summary includes patch information for the 31 affected product and platform combinations.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•6 min read
Brief Summary: CVE-2026-35424 Windows IKE Protocol Memory Leak Denial of Service
A short review of CVE-2026-35424, a memory leak in the Windows Internet Key Exchange (IKE) Protocol that lets an unauthenticated remote attacker cause a denial of service. Covers patch details and affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•5 min read
Brief Summary: CVE-2026-35433 — .NET Elevation of Privilege via Improper Input Validation and Integer Overflow
A short review of CVE-2026-35433, an elevation of privilege vulnerability in .NET 8.0, 9.0, and 10.0 caused by improper input validation and integer overflow. Covers the patch and the affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•6 min read
Brief Summary: CVE-2026-35436 Elevation of Privilege in Microsoft Office Click-to-Run via Access Control Weakness
A short review of CVE-2026-35436, a high-severity elevation of privilege vulnerability in Microsoft Office Click-to-Run caused by insufficient access control granularity, with patch details and affected build numbers for all servicing channels.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•6 min read
Brief Summary: CVE-2026-35438 — Windows Admin Center Privilege Escalation via Missing Authorization in Update API
A short review of CVE-2026-35438, a missing authorization flaw in the Windows Admin Center update API that lets low-privileged authenticated users install arbitrary software versions, and of the official fix in version 2.6.5.16.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•6 min read
Microsoft SharePoint Server CVE-2026-35439: Brief Summary of an Authenticated Deserialization RCE
A brief summary of CVE-2026-35439, a high-severity deserialization vulnerability in Microsoft SharePoint Server that enables authenticated remote code execution. Includes patch details for all affected on-premises editions.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•7 min read
Brief Summary: Microsoft SharePoint Server RCE via Deserialization (CVE-2026-40357)
A short review of CVE-2026-40357, a high-severity deserialization vulnerability in Microsoft SharePoint Server that enables authenticated remote code execution, with patch details for all affected SharePoint editions.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•10 min read
OPNsense CVE-2026-44193: Brief Summary of XMLRPC Remote Code Execution via Argument Injection
A short review of CVE-2026-44193, a CVSS 9.1 argument injection flaw in OPNsense's XMLRPC restore_config_section method that lets authenticated attackers execute commands as root. Includes patch analysis, detection strategies, and mitigation guidance.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•7 min read
OPNsense CVE-2026-44194: Root RCE via Email Username Injection — Technical Breakdown with PoC and Patch Analysis
CVE-2026-44194 is a critical OS command injection in OPNsense that lets an authenticated user with user management privileges run arbitrary commands as root. This post covers the proof of concept and the patch.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•9 min read
fast-jwt CVE-2026-44351: Empty HMAC Secret Authentication Bypass with PoC and Patch Analysis
CVE-2026-44351 is a critical authentication bypass in the fast-jwt library. An empty HMAC secret lets attackers forge arbitrary JWTs. This post covers the proof of concept and the patch.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•7 min read
Quick Look: CVE-2026-44573 — Next.js Middleware Authorization Bypass via Locale-less Data Routes
CVE-2026-44573 is a high-severity middleware authorization bypass in Next.js that affects the Pages Router with i18n enabled. This post covers the technical details, the patch, and the affected version ranges.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•8 min read
Next.js CVE-2026-44574: Middleware Authorization Bypass via Dynamic Route Parameter Injection — Technical Analysis with PoC
An analysis of CVE-2026-44574, a high severity authorization bypass in Next.js that lets attackers smuggle dynamic route parameters past middleware security checks. Covers the proof of concept and patch details.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•12 min read
Next.js CVE-2026-44575: App Router Middleware Authorization Bypass via Segment Prefetch URLs — Technical Breakdown with PoC and Detection Guidance
CVE-2026-44575 is a high severity middleware authorization bypass in Next.js App Router applications. This breakdown covers the root cause in matcher regex generation, the public PoC, the patch, and practical detection methods.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-13
•7 min read
OPNsense CVE-2026-45158: Brief Summary of a Critical Root RCE via DHCP Hostname Injection
CVE-2026-45158 is a CVSS 9.1 argument injection flaw in OPNsense that lets authenticated users run code as root through an unsanitized DHCP hostname setting.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-12
•5 min read
Brief Summary: FortiMail SQL Injection in Admin GUI (CVE-2025-53681)
A short review of CVE-2025-53681, an authenticated SQL injection vulnerability in the FortiMail administrative GUI. It lets a privileged attacker execute unauthorized code or commands, and it affects multiple FortiMail branches.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-12
•5 min read
Brief Summary: FortiOS CAPWAP Daemon Out of Bounds Write (CVE-2025-53844) Enables Remote Code Execution
A short review of CVE-2025-53844, a high-severity out-of-bounds write in the FortiOS CAPWAP daemon that lets authenticated attackers who control a managed device execute arbitrary code on FortiGate appliances.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-12
•7 min read
Brief Summary: CVE-2026-22924 in Siemens SIMATIC CN 4100 and NX — Missing Authentication and Out of Bounds Read
A short review of CVE-2026-22924, a critical missing authentication vulnerability in Siemens SIMATIC CN 4100 (CVSS 9.1) and a separate out-of-bounds read in Siemens NX (CVSS 7.8). Siemens has patched both with firmware and software updates.
ZeroPath CVE Analysis
