ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2026-04-09
•8 min read
Brief Summary: CVE-2026-33785 Missing Authorization in Juniper Junos OS MX Series CLI Enables Full Device Compromise
A short review of CVE-2026-33785, a high-severity missing authorization flaw in Juniper Junos OS on MX Series routers that lets any locally authenticated user execute privileged CSDS commands and compromise managed devices. Includes patch details, detection methods, and affected version information.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-09
•8 min read
Juniper SRX Series CVE-2026-33790: NAT64 ICMPv6 Denial of Service via srxpfe Crash
CVE-2026-33790 is a high-severity denial-of-service vulnerability in Juniper SRX Series firewalls, triggered by malformed ICMPv6 packets during NAT64 translation. This post covers the patch, affected versions, and detection strategies.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-09
•9 min read
Brief Summary: CVE-2026-33793 Privilege Escalation in Juniper Junos OS via Unsigned Python Op Scripts
A short review of CVE-2026-33793, a high-severity local privilege escalation in Juniper Junos OS and Junos OS Evolved that lets low-privileged users gain root access through unsigned Python op scripts. Covers patch details, affected versions, and practical detection methods.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-09
•10 min read
Brief Summary: CVE-2026-33797 BGP Session Reset Vulnerability in Juniper Junos OS and Junos OS Evolved
A short review of CVE-2026-33797, a high-severity BGP session reset vulnerability in Juniper Junos OS 25.2 that lets an adjacent attacker cause a sustained denial of service. Covers patch details, detection methods, and affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-09
•8 min read
Brief Summary: Canonical LXD CVE-2026-34177 — VM Restriction Bypass via Incomplete Denylist Enables Host Root Escalation
A short review of CVE-2026-34177, a critical incomplete-denylist flaw in Canonical LXD (CVSS 9.1) that lets restricted VM users escalate to host root by injecting AppArmor and QEMU configurations.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-09
•9 min read
Canonical LXD CVE-2026-34178: Brief Summary of a Critical Project Restriction Bypass via Backup Import
CVE-2026-34178 is a critical CVSS 9.1 vulnerability in Canonical LXD. A trust boundary mismatch in the backup import path lets authenticated users bypass project restrictions and take over the host. This post covers the patch analysis and affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-09
•7 min read
Canonical LXD CVE-2026-34179: Brief Summary of a Critical Privilege Escalation via Certificate Type Tampering
A brief summary of CVE-2026-34179, a critical privilege escalation in Canonical LXD that lets restricted TLS certificate users gain cluster admin access by tampering with their certificate type through an unvalidated API field.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-09
•6 min read
Brief Summary: Laravel Passport CVE-2026-39976 Authentication Bypass via Client Credentials Token Confusion
A short review of CVE-2026-39976, a high-severity authentication bypass in Laravel Passport versions 13.0.0 through 13.7.0, where machine-to-machine tokens can inadvertently authenticate as real users because of a JWT subject claim mismatch.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-08
•7 min read
Brief Summary: GitLab GraphQL API Denial of Service via Repeated Unauthenticated Queries (CVE-2025-12664)
A short review of CVE-2025-12664, a high-severity denial-of-service vulnerability in GitLab's GraphQL API that let unauthenticated attackers exhaust server resources. Includes patch information and the affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-08
•5 min read
Brief Summary: GitLab CE/EE CVE-2026-1092 Unauthenticated Denial of Service via Terraform State Lock API
A short review of CVE-2026-1092, a high-severity denial-of-service vulnerability in GitLab CE/EE's Terraform state lock API. Unauthenticated attackers can exhaust server resources by sending malformed JSON payloads. Includes patch information and affected version details.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-08
•8 min read
Quick Look: CVE-2026-1830 — Unauthenticated RCE via Missing Authorization in WordPress Quick Playground Plugin
A brief summary of CVE-2026-1830, a critical unauthenticated remote code execution vulnerability in the Quick Playground WordPress plugin caused by missing authorization on REST API endpoints. Includes patch analysis and affected version details.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-08
•7 min read
Brief Summary: React Server Components DoS via Crafted Deserialization in CVE-2026-23869
A short review of CVE-2026-23869, a high-severity denial-of-service vulnerability in React Server Components caused by unsafe deserialization of HTTP request payloads, with patch information and affected version details.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-08
•8 min read
Brief Summary: CVE-2026-3243 Arbitrary File Deletion in Advanced Members for ACF WordPress Plugin
A short review of CVE-2026-3243, a high-severity path traversal vulnerability in the Advanced Members for ACF WordPress plugin that lets authenticated users with Subscriber access delete arbitrary files, with patch analysis and mitigation guidance.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-08
•6 min read
Red Hat Quay CVE-2026-32590: Brief Summary of Pickle Deserialization in Resumable Uploads
A brief summary of CVE-2026-32590, a deserialization vulnerability in Red Hat Quay's resumable upload mechanism. Quay deserializes intermediate upload data with pickle, so tampered data could allow remote code execution on the registry server.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-08
•7 min read
Brief Summary: Kibana CVE-2026-33461 Fleet API Authorization Bypass Leaks Private Keys and Tokens
A short review of CVE-2026-33461, an incorrect authorization flaw in Kibana's Fleet component that lets low-privilege users retrieve sensitive configuration data, including private keys and authentication tokens, through an internal API endpoint.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-08
•6 min read
Brief Summary: Logstash CVE-2026-33466 Path Traversal to Remote Code Execution via GeoIP Database Downloads
A short review of CVE-2026-33466, a high-severity path traversal vulnerability in Logstash's GeoIP database extraction. It allows arbitrary file writes and, in certain configurations, remote code execution. Includes patch details and interim mitigation guidance.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-08
•5 min read
Brief Summary: CVE-2026-3396 Unauthenticated SQL Injection in WCAPF WooCommerce Ajax Product Filter Plugin
A short review of CVE-2026-3396, a high-severity, unauthenticated, time-based SQL injection in the WCAPF WooCommerce Ajax Product Filter plugin. It affects all versions up to and including 4.2.3.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-08
•10 min read
Nix Package Manager CVE-2026-39860: Quick Look at a Critical Symlink Following Privilege Escalation
A brief summary of CVE-2026-39860, a CVSS 9.0 symlink following vulnerability in the Nix package manager that enables local privilege escalation to root on multi-user Linux installations, including detection methods and affected version details.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-08
•7 min read
GitLab CE/EE CVE-2026-5173: Brief Summary of a High Severity WebSocket Access Control Flaw
CVE-2026-5173 is a high-severity improper access control vulnerability in GitLab CE/EE WebSocket connections. It lets authenticated users invoke server-side methods they were never meant to reach. This summary covers the patch and the affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-08
•10 min read
MW WP Form CVE-2026-5436: Brief Summary of an Unauthenticated Arbitrary File Move Vulnerability Affecting 200,000 WordPress Sites
A brief summary of CVE-2026-5436, a high-severity arbitrary file move vulnerability in the MW WP Form WordPress plugin (versions 5.1.1 and earlier) that lets unauthenticated attackers relocate critical files like wp-config.php. Covers patch details, detection strategies, and vendor security history.
ZeroPath CVE Analysis
