Complete article archive
664 published articles · Showing 397–408 · Newest first
OpenPLC ScadaBR Arbitrary JSP File Upload (CVE-2021-26828)
Analysis of CVE-2021-26828 in OpenPLC ScadaBR, where authenticated users can upload and execute arbitrary JSP files via view_edit.shtm.
Read article →Android Framework Information Disclosure (CVE-2025-48633)
CISA has added CVE-2025-48633 to the Known Exploited Vulnerabilities catalog, signaling active exploitation of an information disclosure flaw in the Android Framework.
Read article →Android Framework Privilege Escalation (CVE-2025-48572)
Analysis of CVE-2025-48572, a privilege escalation vulnerability in the Android Framework added to CISA's Known Exploited Vulnerabilities catalog.
Read article →OpenPLC ScadaBR Cross-site Scripting (CVE-2021-26829)
Analysis of a cross-site scripting vulnerability in OpenPLC ScadaBR affecting system_settings.shtm and the associated remediation path via SCADA-LTS.
Read article →Oracle Fusion Middleware Identity Manager Remote Takeover (CVE-2025-61757)
Analysis of CVE-2025-61757, a critical authentication failure in Oracle Fusion Middleware that allows unauthenticated remote takeover of the Identity Manager.
Read article →Google Chromium V8 Heap Corruption (CVE-2025-13223)
Analysis of CVE-2025-13223, a type confusion vulnerability in Google Chromium V8 that can lead to heap corruption, and the requirements for remediation validation.
Read article →FortiWeb OS Command Injection (CVE-2025-58034)
Analysis of CVE-2025-58034, an authenticated OS command injection vulnerability in Fortinet FortiWeb that allows unauthorized code execution via HTTP requests or CLI commands.
Read article →FortiWeb Path Traversal (CVE-2025-64446) Exposure Management
Analysis of CVE-2025-64446 in Fortinet FortiWeb, focusing on the risk of unauthenticated administrative command execution and the requirements for verifying remediation.
Read article →Gladinet Triofox Improper Access Control (CVE-2025-12480)
Analysis of CVE-2025-12480 in Gladinet Triofox, where improper access control allows unauthorized access to initial setup pages after configuration is complete.
Read article →Microsoft Windows Kernel Privilege Escalation (CVE-2025-62215)
Analysis of a race condition vulnerability in the Microsoft Windows Kernel that allows local privilege escalation to SYSTEM level.
Read article →WatchGuard Firebox iked Process Out-of-Bounds Write (CVE-2025-9242)
Analysis of CVE-2025-9242, an out-of-bounds write vulnerability in the WatchGuard Firebox iked process that could allow remote unauthenticated arbitrary code execution.
Read article →Samsung Mobile Devices: Out-of-Bounds Write in libimagecodec.quram.so
Analysis of CVE-2025-21042, an out-of-bounds write vulnerability in Samsung mobile devices that could enable remote code execution via the libimagecodec.quram.so library.
Read article →Page 34 of 56. This archive includes every published article; drafts and articles still processing are not public.
From government advisory to practical action
Vulnerability Assurance turns government cybersecurity reporting into original articles written for the people responsible for fixing vulnerabilities. Each analysis connects the source information to the decisions, corrective actions, and verification steps that matter in an affected environment.
Latest analysis
What our articles cover
- What happened: the vulnerability, the affected technology, and what the available evidence establishes.
- Who needs to act: relevant versions, configurations, exposure conditions, and operational dependencies.
- How to mitigate it: applicable patches, configuration changes, or compensating controls, with important limitations.
- How to verify the result: checks and retesting that can demonstrate whether the affected condition or exposure remains.
- What remains unresolved: uncertainty, residual risk, and follow-up work.
Analysis you can use here
Government advisories provide the evidence behind our reporting. Our articles explain that evidence in context and add practical mitigation and validation guidance. Source citations support the analysis; they do not replace it.
Turn security intelligence into action.
Discuss your exposure, priorities, and the evidence needed to validate the outcome.
Request a security assessment ↗