ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2026-04-08
•6 min read
Eclipse Jetty CVE-2026-5795: Brief Summary of ThreadLocal Authentication Context Leak in JASPIAuthenticator
A brief summary of CVE-2026-5795, a high-severity authentication context leak in Eclipse Jetty's JASPIAuthenticator. Uncleared ThreadLocal variables in pooled threads can let one request inherit a previous user's identity, leading to privilege escalation.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-07
•5 min read
Brief Summary: libssh CVE-2025-14821 Insecure Default Configuration Enables Local Man in the Middle Attacks on Windows
A short review of CVE-2025-14821, a high-severity flaw in libssh. On Windows, an insecure default configuration lets unprivileged local users hijack SSH connections by planting malicious configuration files in the C:\etc directory.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-07
•6 min read
Brief Summary: CVE-2026-22679 — Unauthenticated RCE in Weaver E-cology 10 via Exposed Debug Endpoint
A short review of CVE-2026-22679, a critical unauthenticated remote code execution flaw in Weaver E-cology 10.0. An exposed debugging endpoint runs without authentication, letting attackers execute arbitrary commands on the server.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-07
•8 min read
Brief Summary: CVE-2026-23696 — Windmill SQL Injection Enables Full Privilege Escalation and Remote Code Execution
A short review of CVE-2026-23696, a critical SQL injection in Windmill's folder ownership management that lets any authenticated user escalate to super admin and achieve remote code execution as root.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-07
•7 min read
Everest Forms CVE-2026-3296: Brief Summary of Unauthenticated PHP Object Injection via Form Entry Metadata
CVE-2026-3296 is a critical (CVSS 9.8) unauthenticated PHP object injection vulnerability in the Everest Forms WordPress plugin through version 3.4.3. Serialized payloads submitted through public forms are deserialized unsafely when an administrator views entries.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-07
•8 min read
Brief Summary: CVE-2026-3535 Unauthenticated Arbitrary File Upload in DSGVO Google Web Fonts GDPR Plugin for WordPress
A short review of CVE-2026-3535, a critical unauthenticated arbitrary file upload vulnerability in the DSGVO Google Web Fonts GDPR WordPress plugin (versions through 1.1) that can lead to remote code execution. Includes detection strategies and affected configurations.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-07
•5 min read
Quick Look: CVE-2026-4003 — Unauthenticated Privilege Escalation in WordPress Users Manager PN Plugin
CVE-2026-4003 is a critical privilege escalation vulnerability in the Users Manager PN plugin for WordPress. A flawed authorization check and a nonce exposed to every visitor let unauthenticated attackers update arbitrary user metadata and take over accounts.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-07
•6 min read
Cockpit Web Service CVE-2026-4631: Overview of Unauthenticated Remote Code Execution via SSH Option Injection
CVE-2026-4631 is a critical unauthenticated command injection in Cockpit's remote login feature. It lets an attacker execute code on the host before any credentials are verified.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-07
•6 min read
Open Cluster Management CVE-2026-4740: Brief Summary of Cross Cluster Privilege Escalation via Certificate Renewal Flaw
A brief summary of CVE-2026-4740, a high-severity certificate validation flaw in Open Cluster Management that enables cross-cluster privilege escalation from one managed Kubernetes cluster to others, including the hub cluster.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-06
•9 min read
Ninja Forms File Uploads CVE-2026-0740: Overview of a Critical Unauthenticated Arbitrary File Upload Leading to RCE
CVE-2026-0740 is a CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Ninja Forms File Uploads WordPress plugin, affecting 50,000 installations. This post covers the patch history, detection methods, and affected version ranges.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-06
•8 min read
Brief Summary: Amelia WordPress Plugin CVE-2026-5465 IDOR Privilege Escalation via externalId Parameter
A short review of CVE-2026-5465, an Insecure Direct Object Reference in the Amelia WordPress booking plugin that lets Employee-level users take over any account, including Administrator accounts. Includes patch analysis and affected version details.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-04
•5 min read
Brief Summary: wpForo Forum CVE-2026-3666 Arbitrary File Deletion via Path Traversal
A short review of CVE-2026-3666, a high-severity path traversal vulnerability in the wpForo Forum plugin for WordPress that lets authenticated users with subscriber privileges delete arbitrary files on the server.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-04
•8 min read
WCFM Frontend Manager for WooCommerce CVE-2026-4896: Brief Summary of an IDOR Vulnerability Enabling Cross Vendor Data Manipulation
CVE-2026-4896 is a high-severity Insecure Direct Object Reference vulnerability in the WCFM Frontend Manager plugin for WooCommerce. It lets authenticated vendors modify orders and delete products that belong to other users. This review covers the patch and the affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-03
•8 min read
MLflow CVE-2026-0545: Critical Authentication Bypass in FastAPI Job Endpoints with PoC Analysis
An analysis of CVE-2026-0545, a critical authentication bypass in MLflow's FastAPI job endpoints that allows unauthenticated remote code execution. Includes proof of concept details and mitigation guidance.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-03
•6 min read
Budibase CVE-2026-31818: Brief Summary of a Critical SSRF via Insecure Default Configuration
A short review of CVE-2026-31818, a critical SSRF vulnerability in Budibase's REST datasource connector. An IP blacklist environment variable that ships unset leaves the connector unprotected. The flaw scores 9.6 on CVSS and affects all versions prior to 3.33.4.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-03
•6 min read
Brief Summary: Kestra CVE-2026-34612 SQL Injection to Remote Code Execution via PostgreSQL COPY TO PROGRAM
A brief summary of CVE-2026-34612, a critical SQL injection vulnerability in Kestra's flow search endpoint that escalates to remote code execution through PostgreSQL's COPY TO PROGRAM feature. It affects default docker compose deployments before version 1.3.7.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-03
•8 min read
Electron CVE-2026-34769: Brief Summary of Renderer Command Line Switch Injection via Hidden webPreference
A brief summary of CVE-2026-34769, a high-severity argument injection vulnerability in Electron caused by an undocumented commandLineSwitches webPreference, with patch details for four release lines and a technical analysis of the fix.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-03
•8 min read
Electron CVE-2026-34771: Brief Summary of the Async Permission Handler Use After Free
A short review of CVE-2026-34771, a high-severity use-after-free in Electron's asynchronous permission request handler that affects fullscreen, pointer lock, and keyboard lock callbacks. Covers the patch and the mitigation options.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-03
•8 min read
Electron CVE-2026-34774: Brief Summary of a Use-After-Free in Offscreen Rendering Child Windows
A brief summary of CVE-2026-34774, a high-severity use-after-free in Electron's offscreen rendering path that affects applications that permit child windows. It covers the patch and the affected versions.
ZeroPath CVE Analysis
CVE Analysis
•2026-04-03
•5 min read
Budibase CVE-2026-35216: Overview of Unauthenticated RCE via Webhook and Bash Automation
CVE-2026-35216 is a critical unauthenticated remote code execution vulnerability in self-hosted Budibase instances. It chains a public webhook endpoint with the Bash automation step to execute commands as root inside the container.
ZeroPath CVE Analysis
