Tag archive
Analysis of CVE-2026-94127, an unauthenticated heap overflow in F5 BIG-IP APM OAuth paths, including configuration preconditions, fixes and detection guidance.
Our depot wireless network had one key. It was set in 2017 when the scanners were rolled out, and it...
A measured view of FortiGate's visible population (983,992 indexed assets) and how to read that count against a pre-authentication heap overflow advisory.
How a pre-auth SSRF chained with a command injection on SonicWall SMA1000 gateways turns an internet-facing management interface into root-level remote code execution.
How the gap between RouterOS product matches and SSH service matches turns a large exposure number into a specific, reviewable set of edge devices.
1. Environment & Tooling This box is unusual: the entry point is a remote Linux...
ZoomEye measurement of internet-visible RouterOS assets and the SSH-exposed subset relevant to the MikroTrick exploitation chain.
Two Cisco FMC flaws, three threat clusters and one management console: what CVE-2026-20079 and CVE-2026-20316 mean for defenders.
A Node.js implant on 178 FortiGate devices shows why boundary appliances are attractive targets and hard to inspect.
Lead The Zeek Network Security Monitor announced its major 9.0 release on September 17,...
CVE-2026-20079 in Cisco Secure Firewall Management Center shows why centralized management consoles need the same exposure discipline as the devices they control.
Lead The Zeek project announced the general availability of Zeek 9.0 on September 17,...