Complete article archive
668 published articles · Showing 289–300 · Newest first
Cisco Catalyst SD-WAN Manager API File Handling Vulnerability
Analysis of CVE-2026-20122, a vulnerability in Cisco Catalyst SD-WAN Manager allowing arbitrary file overwrite and privilege escalation via the API interface.
Read article →Cisco Catalyst SD-WAN Manager Sensitive Information Exposure (CVE-2026-20133)
Analysis of CVE-2026-20133 affecting Cisco Catalyst SD-WAN Manager, focusing on the exposure of sensitive information and the required hardening steps outlined in CISA Emergency Directive 26-03.
Read article →Kentico Xperience Path Traversal (CVE-2025-2749)
Analysis of a path traversal vulnerability in the Kentico Xperience Staging Sync Server that allows authenticated users to upload arbitrary data to relative paths.
Read article →PaperCut NG/MF Remote Authentication Bypass (CVE-2023-27351)
Analysis of CVE-2023-27351 in PaperCut NG/MF, a vulnerability allowing remote authentication bypass via the SecurityRequestFilter class and identified for use in ransomware campaigns.
Read article →CVE-2025-48700: Zimbra Collaboration Suite XSS Exposure
Analysis of CVE-2025-48700 affecting Synacor Zimbra Collaboration Suite (ZCS), focusing on the risks of arbitrary JavaScript execution and the requirements for verifying remediation.
Read article →Cisco Catalyst SD-WAN Manager Recoverable Password Vulnerability
Analysis of CVE-2026-20128, where recoverable password storage in Cisco Catalyst SD-WAN Manager could allow local privilege escalation to DCA user status.
Read article →Quest KACE SMA Improper Authentication (CVE-2025-32975)
Analysis of CVE-2025-32975 in the Quest KACE Systems Management Appliance, focusing on improper authentication risks and verification of vendor-prescribed mitigations.
Read article →JetBrains TeamCity Relative Path Traversal (CVE-2024-27199)
Analysis of CVE-2024-27199 in JetBrains TeamCity, a relative path traversal vulnerability linked to ransomware campaigns, focusing on remediation verification and exposure reduction.
Read article →Apache ActiveMQ Code Injection Vulnerability (CVE-2026-34197)
Analysis of CVE-2026-34197 in Apache ActiveMQ, focusing on improper input validation that enables code injection and the necessary steps for remediation verification.
Read article →Microsoft Office Excel Remote Code Execution (CVE-2009-0238)
Analysis of a remote code execution vulnerability in Microsoft Office Excel that allows system compromise via malformed objects in crafted files.
Read article →Microsoft SharePoint Server Spoofing Vulnerability (CVE-2026-32201)
Analysis of CVE-2026-32201, an improper input validation vulnerability in Microsoft SharePoint Server that enables network-based spoofing. This analysis focuses on identification and verification of remediation for infrastructure owners.
Read article →Microsoft VBA Insecure Library Loading (CVE-2012-1854)
Analysis of the insecure library loading vulnerability in Microsoft Visual Basic for Applications (VBA) and strategies for verifying exposure reduction in legacy environments.
Read article →Page 25 of 56. This archive includes every published article; drafts and articles still processing are not public.
From government advisory to practical action
Vulnerability Assurance turns government cybersecurity reporting into original articles written for the people responsible for fixing vulnerabilities. Each analysis connects the source information to the decisions, corrective actions, and verification steps that matter in an affected environment.
Latest analysis
What our articles cover
- What happened: the vulnerability, the affected technology, and what the available evidence establishes.
- Who needs to act: relevant versions, configurations, exposure conditions, and operational dependencies.
- How to mitigate it: applicable patches, configuration changes, or compensating controls, with important limitations.
- How to verify the result: checks and retesting that can demonstrate whether the affected condition or exposure remains.
- What remains unresolved: uncertainty, residual risk, and follow-up work.
Analysis you can use here
Government advisories provide the evidence behind our reporting. Our articles explain that evidence in context and add practical mitigation and validation guidance. Source citations support the analysis; they do not replace it.
Turn security intelligence into action.
Discuss your exposure, priorities, and the evidence needed to validate the outcome.
Request a security assessment ↗