ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
CVE Analysis
•2025-10-20
•8 min read
Zyxel ATP and USG FLEX Firewalls CVE-2025-9133: Brief Summary of a Missing Authorization Vulnerability
A brief summary of CVE-2025-9133, a missing authorization vulnerability in Zyxel ATP, USG FLEX, USG FLEX 50(W), and USG20(W)-VPN firewalls. An attacker who has completed only the first stage of two-factor authentication can download sensitive configuration files. Covers affected versions, technical details, and the vendor's security history.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-17
•9 min read
Squid Proxy CVE-2025-62168: Brief Summary of Critical Credential Disclosure Vulnerability
A brief summary of CVE-2025-62168, a critical vulnerability in Squid Proxy (prior to 7.2) that can expose HTTP authentication credentials through its error handling. Covers the technical details, affected versions, and references to advisories and fixes.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-17
•9 min read
CVE-2025-62645: Privilege Escalation in Restaurant Brands International Assistant Platform (Brief Summary)
A brief summary of CVE-2025-62645, a critical privilege escalation vulnerability in Restaurant Brands International's assistant platform, which serves Burger King, Tim Hortons, and Popeyes. An attacker can exploit it through the createToken GraphQL mutation because of a misconfigured AWS Cognito setup and insufficient access controls. No patch or detection method has been published.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-17
•11 min read
Brief Summary: CVE-2025-62650 Client-Side Authentication Flaw in Restaurant Brands International Assistant Platform
CVE-2025-62650 is a client-side authentication vulnerability in Restaurant Brands International's assistant platform, affecting it through 2025-09-06. The flaw allowed unauthorized access to diagnostic screens and sensitive data across the Burger King, Popeyes, and Tim Hortons platforms. This summary includes no patch or detection guidance because none is available in public sources.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-17
•8 min read
Keras CVE-2025-49655: Brief Summary of Critical Deserialization Vulnerability in TorchModuleWrapper
CVE-2025-49655 is a critical deserialization vulnerability in Keras versions 3.11.0 up to but not including 3.11.3. A malicious TorchModuleWrapper object in a model file can execute arbitrary code, even with safe mode enabled. This summary covers affected versions, technical details, and references.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-16
•7 min read
Strapi CVE-2024-56143: Brief Summary of Private Field Exposure via Document Service Lookup
A brief summary of CVE-2024-56143, a high-severity vulnerability in Strapi versions 5.0.0 through 5.5.1. Attackers can abuse the document service lookup operator to read private fields, including admin credentials. The post includes patch and affected version details.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-16
•7 min read
WSO2 REST API Authentication Bypass (CVE-2025-10611): Brief Summary and Technical Review
A brief summary and technical review of CVE-2025-10611, a critical authentication and authorization bypass in the REST APIs of multiple WSO2 products. The flaw lets unauthenticated attackers perform administrative operations. No patch or detection guidance is available at the time of writing.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-16
•12 min read
Spring Cloud Gateway CVE-2025-41253: Brief Summary of Environment Variable Exposure via SpEL Injection
A brief summary of CVE-2025-41253, a high-severity vulnerability in Spring Cloud Gateway Server Webflux that can expose environment variables and system properties through SpEL injection when actuator endpoints are misconfigured. It covers affected versions, technical details, and official patch guidance.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-16
•8 min read
Mattermost OAuth State Manipulation (CVE-2025-58073) – Brief Summary and Technical Review
CVE-2025-58073 is a high-severity authorization bypass in Mattermost affecting versions 10.11.x <= 10.11.1, 10.10.x <= 10.10.2, and 10.5.x <= 10.5.10. Attackers can join any team by manipulating OAuth state during team invitation flows. This summary and technical review covers the affected versions, the technical mechanism, and references.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-16
•8 min read
Mattermost CVE-2025-58075: Brief Summary of Authorization Bypass via Invite Token and RelayState Manipulation
A brief summary of CVE-2025-58075, a high-severity authorization bypass in Mattermost versions 10.11.x through 10.11.1, 10.10.x through 10.10.2, and 10.5.x through 10.5.10. An attacker with a valid invite token can manipulate the RelayState parameter to gain unauthorized access to teams. Covers affected versions, technical details, and the vendor's security history.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-16
•8 min read
MinIO CVE-2025-62506 Privilege Escalation: Brief Summary and Technical Analysis
CVE-2025-62506 lets restricted service and STS accounts in MinIO object storage create new service accounts that inherit the parent user's full privileges. This post covers the technical details, affected versions, and MinIO's security history, with links to the advisory and patch.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-16
•8 min read
WSO2 API Manager CVE-2025-9152: Brief Summary of Critical Privilege Escalation via DCR Endpoint
A brief summary of CVE-2025-9152, a critical improper privilege management vulnerability in the Dynamic Client Registration endpoint of WSO2 API Manager. Because the endpoint lacks authentication and authorization checks, unauthenticated attackers can generate access tokens with elevated privileges. Covers the technical details, affected versions, and links to the official advisories.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•7 min read
Flex QR Code Generator CVE-2025-10041: Brief Summary of Critical Arbitrary File Upload Vulnerability
CVE-2025-10041 is a critical arbitrary file upload vulnerability in the Flex QR Code Generator WordPress plugin, affecting versions up to 1.2.5. This summary covers the technical details, affected versions, and vendor history, based on available public sources.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•8 min read
Keyy Two Factor Authentication CVE-2025-10293: Privilege Escalation via Token Validation Flaw (Brief Summary)
A brief summary of CVE-2025-10293 in the Keyy Two Factor Authentication plugin for WordPress, covering the privilege escalation flaw, the affected versions, and the technical details of exploitation. The vendor has discontinued the plugin, so no patch or detection methods are available.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•8 min read
OwnID Passwordless Login (WordPress) CVE-2025-10294 Authentication Bypass: Brief Summary and Technical Review
A brief summary and technical review of CVE-2025-10294, a critical authentication bypass in the OwnID Passwordless Login plugin for WordPress (all versions up to and including 1.3.4). It covers the technical details, affected versions, and the vendor's security history, based on available public sources.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•8 min read
WPBifröst WordPress Plugin CVE-2025-10299 Privilege Escalation: Technical Summary
A short summary of CVE-2025-10299, a privilege escalation vulnerability in the WPBifröst WordPress plugin up to version 1.0.7, covering the technical details, the affected versions, and the root cause.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•7 min read
F5 BIG-IP SSL Orchestrator CVE-2025-41430: Brief Summary of Data Plane DoS Vulnerability
A brief summary of CVE-2025-41430, a high-severity denial of service vulnerability in F5 BIG-IP SSL Orchestrator. When SSL Orchestrator is enabled, remote unauthenticated attackers can terminate the Traffic Management Microkernel (TMM) by sending undisclosed traffic patterns. The summary covers affected versions, technical details, and links to official advisories.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•7 min read
F5 BIG-IP TMM Buffer Overflow (CVE-2025-53474): Brief Summary and Technical Details
CVE-2025-53474 is a buffer overflow in F5 BIG-IP TMM, triggered by iRules that use ILX::call. This summary covers the technical mechanism, the affected versions and configurations, and F5's security history with TMM.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•8 min read
F5 BIG-IP APM CVE-2025-53521: Brief Summary of Denial of Service Vulnerability
A short review of CVE-2025-53521, a denial-of-service flaw in specific versions of F5 BIG-IP APM caused by a resource allocation issue. Covers the affected versions, the technical details, and F5's security history.
ZeroPath CVE Analysis
CVE Analysis
•2025-10-15
•7 min read
F5 BIG-IP ePVA TMM DoS (CVE-2025-53856): Brief Summary and Technical Review
CVE-2025-53856 is a high-severity denial-of-service vulnerability in F5 BIG-IP platforms with ePVA hardware. This post covers the technical details, affected versions, and F5's security history, based on public sources. No patch or detection information is available as of publication.
ZeroPath CVE Analysis
