Complete article archive
671 published articles · Showing 73–84 · Newest first
FortiMail Path Traversal Vulnerability CVE-2026-104286
Analysis of a path traversal vulnerability in Fortinet FortiMail allowing unauthenticated arbitrary file writes via HTTP/HTTPS requests, now included in CISA's Known Exploited Vulnerabilities catalog.
Read article →Mitigating False Base Station Exposure in 5G Environments
NIST NCCoE has released a draft white paper detailing the use of off-the-shelf tools to mimic carrier equipment and providing implementation guidelines to reduce 5G susceptibility to interception and DoS attacks.
Read article →Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability (CVE-2026-76504)
A hex encoding vulnerability in Cisco Catalyst SD-WAN Manager allows unauthenticated remote attackers to gain administrative privileges. This analysis details the exposure paths and the necessity of combining vendor mitigations with forensic triage.
Read article →Cisco SD-WAN Manager API Authentication Bypass (CVE-2026-76504)
An authentication bypass vulnerability in Cisco SD-WAN Manager allows remote attackers to access the API via crafted HTTP requests. This analysis examines exposure and validation requirements for infrastructure owners.
Read article →Apple CoreGraphics Out-of-Bounds Write (CVE-2026-86950)
Analysis of CVE-2026-86950, an out-of-bounds write vulnerability in Apple's CoreGraphics component affecting iOS, macOS, and iPadOS that may allow arbitrary code execution.
Read article →NetScaler ADC and Gateway Remote Code Execution Vulnerabilities
Analysis of eight vulnerabilities in on-premises Citrix NetScaler ADC and Gateway, including two actively exploited RCE flaws (CVE-2026-88771 and CVE-2026-88772), with guidance on isolation and verification.
Read article →Microsoft SharePoint Remote Code Execution (CVE-2026-65660)
Analysis of CVE-2026-65660, a medium-severity vulnerability in Microsoft SharePoint that allows authenticated users with low-level access to achieve remote code execution.
Read article →NetScaler ADC and Gateway Memory Buffer Vulnerability CVE-2026-88772
Analysis of CVE-2026-88772 affecting Citrix NetScaler ADC and Gateway, focusing on remote code execution risks, the necessity of forensic triage, and verification of mitigation effectiveness.
Read article →Citrix NetScaler ADC and Gateway Command Execution (CVE-2026-88771)
Analysis of CVE-2026-88771, an improper input validation vulnerability in Citrix NetScaler ADC and Gateway allowing unauthenticated arbitrary command execution. This analysis focuses on remediation verification and forensic triage requirements.
Read article →Critical RCE and Memory Overflow Vulnerabilities in Citrix NetScaler ADC and Gateway
Analysis of eight vulnerabilities affecting customer-managed Citrix NetScaler deployments, including two unauthenticated RCEs currently exploited in the wild.
Read article →WordPress Core Remote File Inclusion (CVE-2026-87902)
A remote file inclusion vulnerability in WordPress Core allows unauthenticated attackers to include local .php files outside active theme directories, potentially leading to remote code execution.
Read article →MikroTik RouterOS Unauthenticated Session Channel Vulnerability (CVE-2026-67279)
Analysis of CVE-2026-67279 in MikroTik RouterOS, which allows unauthenticated session channel opening and can be chained with CVE-2026-86060 for exploitation.
Read article →Page 7 of 56. This archive includes every published article; drafts and articles still processing are not public.
From government advisory to practical action
Vulnerability Assurance turns government cybersecurity reporting into original articles written for the people responsible for fixing vulnerabilities. Each analysis connects the source information to the decisions, corrective actions, and verification steps that matter in an affected environment.
Latest analysis
What our articles cover
- What happened: the vulnerability, the affected technology, and what the available evidence establishes.
- Who needs to act: relevant versions, configurations, exposure conditions, and operational dependencies.
- How to mitigate it: applicable patches, configuration changes, or compensating controls, with important limitations.
- How to verify the result: checks and retesting that can demonstrate whether the affected condition or exposure remains.
- What remains unresolved: uncertainty, residual risk, and follow-up work.
Analysis you can use here
Government advisories provide the evidence behind our reporting. Our articles explain that evidence in context and add practical mitigation and validation guidance. Source citations support the analysis; they do not replace it.
Turn security intelligence into action.
Discuss your exposure, priorities, and the evidence needed to validate the outcome.
Request a security assessment ↗