ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2026-05-05
•5 min read
Quick Look: D-Link DI-8100 Router CVE-2026-7853 Critical Buffer Overflow in HTTP Handler
A brief summary of CVE-2026-7853, a critical unauthenticated buffer overflow in the HTTP handler of the D-Link DI-8100 router. It scores 9.8 on CVSS, and no patch is available because the product has reached end of life.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•10 min read
vm2 Sandbox Breakout via __lookupGetter__ Prototype Walk: Overview of CVE-2026-24118
A summary of CVE-2026-24118, a critical sandbox breakout in the vm2 Node.js package that lets an attacker run arbitrary commands on the host, with detection strategies and mitigation guidance.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•7 min read
vm2 Sandbox Escape via Promise Species Manipulation: Quick Look at CVE-2026-24120 with PoC Analysis
A summary of CVE-2026-24120, a critical CVSS 9.8 sandbox escape in the vm2 Node.js package that bypasses the earlier fix for CVE-2023-37466, with proof of concept analysis and affected version details.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•8 min read
vm2 Sandbox Escape via inspect Function: Quick Look at CVE-2026-24781 (CVSS 9.8)
CVE-2026-24781 is a critical sandbox breakout in vm2, the Node.js sandbox, that allows remote code execution on the host system through the inspect function. This post covers the technical root cause, affected versions, and mitigation guidance.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•5 min read
Quick Look: CVE-2026-25293 — Critical Buffer Overflow in Qualcomm QCA7005 PLC Firmware via Incorrect Authorization
A brief summary of CVE-2026-25293, a critical (CVSS 9.6) buffer overflow in Qualcomm QCA7005 Powerline Communication firmware caused by incorrect authorization. The affected chip is part of the Snapdragon Auto platform, which is used in automotive and EV charging environments.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•6 min read
Brief Summary: CVE-2026-26332 — vm2 Sandbox Escape via SuppressedError Leading to Arbitrary Code Execution
A short review of CVE-2026-26332, a critical sandbox escape in the vm2 Node.js package. Attackers can use SuppressedError to break out of the sandbox and execute arbitrary code on the host system. All versions prior to 3.11.0 are affected.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•8 min read
vm2 Sandbox Escape via WebAssembly JSTag (CVE-2026-26956): Technical Breakdown with Public PoC
CVE-2026-26956 is a CVSS 9.8 sandbox escape in vm2 version 3.10.4 that uses WebAssembly JSTag exception handling to run arbitrary code on the host. This breakdown covers the root cause, the attack flow, the published proof of concept, and the fix.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•6 min read
NetBox CVE-2026-29514: Brief Summary of Jinja2 Sandbox Bypass Leading to Remote Code Execution
CVE-2026-29514 is a high severity remote code execution vulnerability in NetBox versions 4.3.5 through 4.5.4. It lets authenticated users bypass Jinja2 sandbox protections through the RenderTemplateMixin environment_params mechanism.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•8 min read
Apache Polaris CVE-2026-42809: Brief Summary of Critical Credential Vending Bypass in Staged Table Creation
A brief summary of CVE-2026-42809, a critical vulnerability in Apache Polaris that lets authenticated, low-privileged users mint broad temporary storage credentials by supplying attacker-chosen locations during staged table creation, before location validation and overlap checks run.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•7 min read
Brief Summary: Apache Polaris CVE-2026-42810 S3 Wildcard Injection in IAM Policy Generation
A short review of CVE-2026-42810, a critical wildcard injection flaw in Apache Polaris. Attackers can craft table names containing asterisks, and Polaris turns them into overly permissive S3 IAM policies that allow unauthorized cross-table storage access.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•7 min read
Apache Polaris CVE-2026-42811: CEL Injection Collapses GCS Credential Scoping to Bucket Wide Access
CVE-2026-42811 is a critical CEL injection flaw in Apache Polaris. A crafted namespace or table name can expand GCS downscoped credentials from a single table to the entire configured bucket.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•10 min read
Apache Polaris CVE-2026-42812: Brief Summary of a Critical Metadata Write Bypass Enabling Cross Table Data Exposure
A brief summary of CVE-2026-42812, a CVSS 9.9 vulnerability in Apache Polaris that lets low-privileged users bypass storage location validation by changing the write.metadata.path table property and potentially expose cross-table data. Includes patch analysis and affected configurations.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•8 min read
Brief Summary: CVE-2026-44028 Local Privilege Escalation in Nix and Lix via NAR Parser Stack Overflow
A short review of CVE-2026-44028, a local privilege escalation vulnerability in the Nix and Lix package managers. Unbounded recursion in the NAR parser may let a local user run arbitrary code as root on multi-user installations.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•5 min read
Quick Look: CVE-2026-4803 — Unauthenticated Stored XSS in Royal Elementor Addons via Leaked Nonce
A brief summary of CVE-2026-4803, a high-severity stored cross-site scripting vulnerability in the Royal Elementor Addons WordPress plugin. Unauthenticated attackers can inject scripts using a publicly leaked nonce and an unsanitized status parameter.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•5 min read
Brief Summary: CVE-2026-5294 — GeekyBot WordPress Plugin Missing Authorization Leading to Remote Code Execution
A short review of CVE-2026-5294, a critical missing-authorization flaw in the GeekyBot WordPress plugin. An exposed AJAX endpoint lets unauthenticated attackers install arbitrary plugins and achieve remote code execution.
ZeroPath CVE Analysis
CVE Analysis
•2026-05-04
•5 min read
Brief Summary: MoreConvert Pro CVE-2026-5722 Authentication Bypass via Token Reuse in WooCommerce Waitlist Flow
A short review of CVE-2026-5722, a critical (CVSS 9.8) authentication bypass in the MoreConvert Pro WordPress plugin. Unauthenticated attackers can log in as any user, including administrators, by reusing a token in the guest waitlist verification flow.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-30
•6 min read
Brief Summary: GnuTLS CVE-2026-33845 DTLS Integer Underflow Leading to Heap Overrun
A short review of CVE-2026-33845, a high-severity integer underflow in GnuTLS DTLS handshake reassembly that enables remote denial of service or information disclosure via crafted zero-length fragments.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-30
•6 min read
Brief Summary: CVE-2026-41882 — IntelliJ IDEA Built-in Web Server Arbitrary File Read via Link Following
A short review of CVE-2026-41882, a high-severity arbitrary local file-read vulnerability in JetBrains IntelliJ IDEA's built-in web server caused by improper symbolic link resolution. Covers the patched builds across five release branches and the vendor's security history.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-30
•6 min read
Brief Summary: CVE-2026-4670 Critical Authentication Bypass in Progress MOVEit Automation
A short review of CVE-2026-4670, a critical authentication bypass in Progress Software MOVEit Automation that lets unauthenticated remote attackers gain unauthorized access through its backend command port interfaces.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-30
•6 min read
Brief Summary: MOVEit Automation CVE-2026-5174 Privilege Escalation via Improper Input Validation
A short review of CVE-2026-5174, a high-severity improper input validation flaw in Progress Software MOVEit Automation. It enables privilege escalation from a low-privilege network position and affects multiple version branches.
ZeroPath CVE Analysis
