ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2025-10-31
•9 min read
Brief Summary: CVE-2025-12357 SLAC Protocol MITM in ISO 15118-2 EV Charging
A brief summary of CVE-2025-12357, a high-severity man-in-the-middle vulnerability in the SLAC protocol used by ISO 15118-2 electric vehicle charging systems. It covers the technical details, affected versions, and vendor context, drawn from public information.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-30
•5 min read
Genetec Security Center CVE-2025-43027: Brief Summary of Critical ALPR Manager Access Control Flaw
A brief summary of CVE-2025-43027, a critical improper access control vulnerability in the ALPR Manager role of Genetec Security Center. The flaw could allow attackers to gain administrative access. No exploitation in the wild has been reported, and patch and detection details are not available at this time.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-30
•8 min read
JumpServer CVE-2025-62712: Token Exposure Vulnerability – Brief Summary and Technical Review
A brief summary and technical review of CVE-2025-62712, a critical token exposure vulnerability in JumpServer prior to v3.10.20-lts and v4.10.11-lts. We cover affected versions, technical exploitation details, and the vendor's security history, with references to official advisories and public sources.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-30
•7 min read
n8n Git Node RCE (CVE-2025-62726): Brief Summary and Technical Review
CVE-2025-62726 is a remote code execution vulnerability in n8n's Git Node that affects versions before 1.113.0. This post covers the technical details, the affected versions, and the vendor's security history.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-30
•8 min read
King Addons for Elementor CVE-2025-8489: Privilege Escalation Brief Summary
CVE-2025-8489 is a critical privilege escalation vulnerability in the King Addons for Elementor WordPress plugin. This summary covers the affected versions, the technical details, and the vendor's security history, with references for further reading.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-30
•8 min read
NeuVector Enforcer CVE-2025-54469 Command Injection: Brief Summary and Patch Overview
A brief summary of CVE-2025-54469, a critical command injection vulnerability in NeuVector Enforcer. It covers the technical details, affected versions, patch information, and the vendor's security history, based on public sources.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-30
•12 min read
Veeam Backup & Replication CVE-2025-48983: Brief Summary of Critical Remote Code Execution Vulnerability
A brief summary of CVE-2025-48983, a critical remote code execution vulnerability in Veeam Backup & Replication's Mount service. It covers affected versions, how the exploit works, patch information, and Veeam's vendor history, with references to official advisories and research.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-29
•8 min read
MLflow Tracking Server CVE-2025-11201: Brief Summary of Directory Traversal Remote Code Execution
A brief summary of CVE-2025-11201, a directory traversal flaw in MLflow Tracking Server that leads to remote code execution. It covers the technical details, affected versions, and the vendor's security history, based on public advisories and official sources.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-29
•9 min read
X.Org X Server and Xwayland CVE-2025-62229 Use-After-Free: Brief Summary and Technical Review
CVE-2025-62229 is a use-after-free in the notification processing of the Present extension in X.Org X Server and Xwayland. This post covers the root cause, the affected versions, and the vendor's security history, based on public advisories and technical disclosures.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-29
•9 min read
X.Org Server CVE-2025-62230 Use-After-Free: Brief Summary and Patch Guidance
A brief summary of CVE-2025-62230, a use-after-free vulnerability in the X.Org Server's Xkb extension, with technical details, affected versions, official patch information, and detection guidance for security professionals.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-29
•10 min read
Jenkins SAML Plugin CVE-2025-64131: Brief Summary of SAML Assertion Replay Vulnerability
CVE-2025-64131 is a replay vulnerability in Jenkins SAML Plugin versions 4.583.vc68232f7018a_ and earlier. An attacker who captures a SAML assertion can replay it and authenticate as that user. This summary covers affected versions, technical details, and references.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-29
•8 min read
Jenkins Azure CLI Plugin CVE-2025-64140 Command Injection: Brief Summary and Technical Review
A brief summary and technical review of CVE-2025-64140, a command injection vulnerability in Jenkins Azure CLI Plugin 0.9 and earlier. Attackers with Item/Configure permission can execute arbitrary shell commands on the Jenkins controller. No patch is available as of publication.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-29
•8 min read
MLflow CVE-2025-11200: Brief Summary of Authentication Bypass via Weak Password Requirements
CVE-2025-11200 is a high-severity authentication bypass in MLflow caused by weak password requirements. This summary covers the technical details, affected versions, and the vendor's security history, with references for further reading.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-29
•7 min read
MOVEit Transfer CVE-2025-10932: Brief Summary of Uncontrolled Resource Consumption in AS2 Module
A brief summary of CVE-2025-10932, an uncontrolled resource consumption vulnerability in the AS2 module of Progress MOVEit Transfer, in specific version ranges. It covers the technical details, the affected versions, and the vendor's security history, based on publicly available information.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-28
•7 min read
Contact Form CFDB7 CVE-2025-4665: Brief Summary of Pre-Auth SQL Injection and PHP Object Injection
CVE-2025-4665 is a critical pre-authentication SQL injection and PHP object injection vulnerability in Contact Form CFDB7 up to version 1.3.2. This summary covers the affected versions, the technical details, and the vendor's security history, based on available public information.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-28
•8 min read
DNN Platform CVE-2025-64095: Brief Summary of Critical Unauthenticated File Upload Vulnerability
A brief summary of CVE-2025-64095, a critical unauthenticated file upload and overwrite vulnerability in DNN Platform prior to version 10.1.1. The post covers the technical details, the affected versions, and the vendor's security history, based on available sources.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-28
•10 min read
GitLab Runner API Improper Access Control (CVE-2025-11702): Brief Summary and Patch Review
CVE-2025-11702 is a high-severity improper access control vulnerability in the Runner API of GitLab Enterprise Edition. This summary covers the technical details, affected versions, patch information, and GitLab's security history.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-28
•7 min read
IBM Maximo Application Suite CVE-2025-36386: Brief Summary of a Critical Authentication Bypass
CVE-2025-36386 is a critical authentication bypass in IBM Maximo Application Suite versions 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4. This summary covers the affected versions, the technical details, and IBM's past authentication flaws in Maximo, based on available sources.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-27
•8 min read
HUSKY Products Filter for WooCommerce CVE-2025-11735 Blind SQL Injection – Brief Summary and Patch Guidance
A brief summary of CVE-2025-11735, a blind SQL injection vulnerability in the HUSKY Products Filter Professional for WooCommerce plugin that affects versions up to and including 1.3.7.1. The post covers the technical details, affected versions, patch information, and the vendor's security history.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-27
•8 min read
Apache Tomcat CVE-2025-55752: Brief Summary of Relative Path Traversal Vulnerability
A brief summary of CVE-2025-55752, a relative path traversal vulnerability in Apache Tomcat affecting versions 11.0.0-M1 through 11.0.10, 10.1.0-M1 through 10.1.44, 9.0.0.M11 through 9.0.108, and 8.5.6 through 8.5.100. A regression in the fix for bug 60013 lets attackers bypass security constraints in certain rewrite configurations. Patch and upgrade details are included.
ZeroPath CVE Analysis
