Complete article archive
664 published articles · Showing 25–36 · Newest first
Cisco Unified Communications Security Hardening Update
Analysis of the October 2026 security hardening update for Cisco Unified Communications products addressing multiple vulnerability classes.
Read article →Unauthenticated Remote Code Execution and Memory Access in PHP
Analysis of CVE-2026-109618 and CVE-2026-109619 affecting PHP, which may allow unauthenticated attackers to execute remote code or access sensitive memory.
Read article →Remote Code Execution Vulnerabilities in PHP 8.2 through 8.5
Two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) allow unauthenticated remote code execution in multiple PHP versions. This analysis details the affected environments, patching requirements, and temporary configuration mitigations to reduce exposure.
Read article →OS Command Injection in EG Secure Solutions SiteGuard Server Edition
CVE-2026-106931 allows arbitrary OS command execution with root or SYSTEM privileges in SiteGuard Server Edition. Vulnerability management teams should prioritize vendor mitigations and perform forensic triage.
Read article →Plex Media Server Arbitrary File Write (CVE-2026-96656)
Analysis of CVE-2026-96656 in Plex Media Server, where an admin user can write arbitrary files that may be executed on load. This vulnerability is chainable with other identified flaws.
Read article →Plex Media Server SSRF Vulnerability (CVE-2026-96655)
Analysis of a server-side request forgery vulnerability in Plex Media Server that allows authenticated users to request arbitrary addresses via specific path parameters.
Read article →Plex Media Server URI Scheme Neutralization Flaw (CVE-2026-96654)
Analysis of CVE-2026-96654 in Plex Media Server, focusing on the risk of vulnerability chaining and the requirements for verifying remediation across affected deployments.
Read article →Plex Media Server SSRF Vulnerability (CVE-2026-96652)
Analysis of a server-side request forgery vulnerability in Plex Media Server that allows attackers to force the server to POST data to arbitrary destinations, potentially chainable with other CVEs.
Read article →Siemens Software Center DLL Hijacking Vulnerability (CVE-2026-110936)
Analysis of CVE-2026-110936, an uncontrolled search path vulnerability in Siemens Software Center that allows authenticated local attackers to achieve arbitrary code execution.
Read article →Unauthenticated RCE Vulnerabilities in PHP 5 and Later
Two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting PHP versions from PHP 5 onwards may allow unauthenticated remote code execution. Organizations should prepare for emergency patching on October 21, 2026.
Read article →DLL Side-Loading Vulnerability in Siemens Software Center (CVE-2026-110936)
Active exploitation of CVE-2026-110936 allows for malicious code execution via DLL side-loading in the Siemens Software Center. This analysis focuses on identifying affected assets and validating exposure reduction.
Read article →NGINX Plus and Open Source Remote Code Execution and DoS Vulnerabilities
Analysis of three vulnerabilities in NGINX Plus and NGINX Open Source that may allow unauthenticated remote attackers to trigger denial-of-service or achieve remote code execution.
Read article →Page 3 of 56. This archive includes every published article; drafts and articles still processing are not public.
From government advisory to practical action
Vulnerability Assurance turns government cybersecurity reporting into original articles written for the people responsible for fixing vulnerabilities. Each analysis connects the source information to the decisions, corrective actions, and verification steps that matter in an affected environment.
Latest analysis
What our articles cover
- What happened: the vulnerability, the affected technology, and what the available evidence establishes.
- Who needs to act: relevant versions, configurations, exposure conditions, and operational dependencies.
- How to mitigate it: applicable patches, configuration changes, or compensating controls, with important limitations.
- How to verify the result: checks and retesting that can demonstrate whether the affected condition or exposure remains.
- What remains unresolved: uncertainty, residual risk, and follow-up work.
Analysis you can use here
Government advisories provide the evidence behind our reporting. Our articles explain that evidence in context and add practical mitigation and validation guidance. Source citations support the analysis; they do not replace it.
Turn security intelligence into action.
Discuss your exposure, priorities, and the evidence needed to validate the outcome.
Request a security assessment ↗