ZeroPath Blog & Research
Explore our team's latest research and stay up to date with ZeroPath's capabilities.
![CVE-2026-119155: Unauthenticated Time-Based SQL Injection in wpForo Forum via href[locale], with Patch Analysis](/_next/image?url=https%3A%2F%2Fstorage.googleapis.com%2Fzeropath-fe-assets%2Fblog-assets%2Fcve-2026-119155.png&w=3840&q=75)
CVE Analysis
•2026-11-07
•8 min read
CVE-2026-119155: Unauthenticated Time-Based SQL Injection in wpForo Forum via href[locale], with Patch Analysis
A look at CVE-2026-119155, an unauthenticated time-based SQL injection in the wpForo Forum WordPress plugin through version 3.2.2. It covers the root cause in the board lookup query builder and how version 3.2.3 fixes it.
Gaurav Sarraf
CVE Analysis
•2026-11-07
•10 min read
Overview of CVE-2026-123543: Unauthenticated Denial of Service via Unbounded Java Deserialization in OpenAM
A brief summary of CVE-2026-123543, an unauthenticated denial of service in OpenAM before 16.1.4 caused by deserializing Java data without size or structure limits. Covers the root cause, the layered fix in 16.1.4, and practical detection approaches.
Gaurav Sarraf
CVE Analysis
•2026-11-07
•10 min read
Overview of CVE-2026-123549: OpenAM Self Registration Attribute Bypass Enables Anonymous Admin Takeover
A brief summary of CVE-2026-123549, a CVSS 9.8 flaw in OpenAM before 16.1.4 where self registration fails to enforce Valid Creation Attributes, letting anonymous registrants join administrative groups. Covers root cause, patch details and behavioral detection approaches.
Gaurav Sarraf
CVE Analysis
•2026-11-07
•10 min read
Quick Look: OpenAM CVE-2026-123550 SAML Authentication Bypass via Unsigned Assertions
A brief summary of CVE-2026-123550, a critical OpenAM SAML v2.0 service provider flaw that accepts unsigned assertions on the ECP (PAOS) and HTTP Artifact bindings, with patch details for 16.1.4 and log-based detection guidance.
Gaurav Sarraf
CVE Analysis
•2026-11-07
•8 min read
Brief Summary: Tenda AC19 CVE-2026-123966 Heap Buffer Overflow in saveParentControlInfo with Public PoC
A summary of CVE-2026-123966, an unauthenticated heap-based buffer overflow in the Tenda AC19 router's saveParentControlInfo handler, with the published proof of concept and affected version details.
Gaurav Sarraf
CVE Analysis
•2026-11-07
•11 min read
Brief Summary: OpenAM CVE-2026-123551 Session Token Disclosure via the Notification WebSocket
A brief summary of CVE-2026-123551, a CVSS 10.0 flaw in OpenAM 14.0.0 through 16.1.3 that lets unauthenticated attackers bypass the agent-only check on the notification WebSocket and collect live iPlanetDirectoryPro session tokens. The post covers the root cause, the 16.1.4 patch, and behavioral detection approaches.
Gaurav Sarraf
CVE Analysis
•2026-11-06
•11 min read
Overview of CVE-2026-119923: Unauthenticated Heap Overflow in the Babelfish for PostgreSQL TDS Prelogin Parser
CVE-2026-119923 is a critical heap-based buffer overflow in the Babelfish TDS prelogin parser, reachable without authentication on port 1433. This summary covers affected versions, fixed Babelfish and Aurora builds, and practical detection approaches.
Gaurav Sarraf
CVE Analysis
•2026-11-06
•7 min read
Brief Summary: Craft CMS CVE-2026-123488, Unauthenticated SQL Injection via the Element Search Endpoint
A brief summary of CVE-2026-123488, an unauthenticated SQL injection in Craft CMS that allows database writes and administrator takeover, with patch information for affected 4.x and 5.x releases.
Gaurav Sarraf
CVE Analysis
•2026-11-06
•7 min read
Brief Summary: SonicOS CVE-2026-107154 Management Interface Session Validation Flaw (CWE-291)
A brief summary of CVE-2026-107154, a High-severity session validation issue in the SonicOS management interface affecting Gen7 and Gen8 platforms. It covers what the public record establishes, the affected versions, and SonicWall's published management hardening guidance.
Gaurav Sarraf
CVE Analysis
•2026-11-06
•9 min read
Brief Summary: BuddyForms CVE-2026-107622, Unauthenticated Privilege Escalation via bf_post_type Form-Type Confusion
A brief summary of CVE-2026-107622, an unauthenticated privilege escalation in the BuddyForms WordPress plugin through version 2.10.5, including root cause analysis and patch details for version 2.10.6.
Gaurav Sarraf
CVE Analysis
•2026-11-06
•8 min read
Brief Summary: CVE-2026-109469, a CVSS 10.0 Authorization Bypass in Microsoft Entra Device Registration That Microsoft Has Already Mitigated
A brief summary of CVE-2026-109469, a CWE 639 authorization bypass in Microsoft Entra Device Registration rated CVSS 10.0. Microsoft reports the issue as fully mitigated on its own infrastructure. This post covers what the advisory confirms, the service-side patch information, and what remains undisclosed.
Gaurav Sarraf
CVE Analysis
•2026-11-06
•8 min read
Overview of CVE-2026-120537: Unauthenticated Stored XSS in the TranslatePress Dictionary Endpoint
A brief summary of CVE-2026-120537, an unauthenticated stored cross-site scripting flaw in TranslatePress through 3.3.8 that is fixed in 3.3.9. It covers the root cause in the standalone dictionary endpoint and how the patch makes its responses inert JSON.
Gaurav Sarraf
CVE Analysis
•2026-11-06
•7 min read
Brief Summary: IBM API Connect CVE-2026-16720 Improper Authentication Lets Attackers Obtain Other Users' Access Tokens
A brief summary of CVE-2026-16720, a CVSS 9.8 improper authentication flaw in IBM API Connect where insufficient enforcement of directory service authentication could let a remote attacker obtain valid access tokens for other users. Includes affected versions and IBM's fixed releases, 10.0.8.13 and 12.1.1.3.
Gaurav Sarraf
CVE Analysis
•2026-11-06
•7 min read
Brief Summary: IBM API Connect CVE-2026-17131, an Unauthenticated SSRF Outbound Filter Bypass (CVSS 9.3)
A brief summary of CVE-2026-17131, a server-side request forgery flaw in IBM API Connect V12 OnPrem 12.1.0.0 through 12.1.1.2 that lets a remote attacker bypass outbound request restrictions. Covers affected versions and IBM's patch information (upgrade to 12.1.1.3).
Gaurav Sarraf
CVE Analysis
•2026-11-06
•8 min read
Overview of CVE-2026-17147: Authenticated Path Traversal to Code Execution in IBM API Connect
A brief summary of CVE-2026-17147, a CVSS 9.9 path traversal in IBM API Connect that IBM says can let a remote authenticated attacker execute arbitrary code and perform unauthorized administrative actions. Covers the affected versions, IBM's fixed releases 10.0.8.13 and 12.1.1.3, and current exploitation status.
Gaurav Sarraf
CVE Analysis
•2026-11-06
•7 min read
Brief Summary: IBM API Connect CVE-2026-17278 Authentication Bypass by Spoofing Exposes API Catalog and Runtime Configuration
A brief summary of CVE-2026-17278, a CVSS 9.8 authentication bypass by spoofing in IBM API Connect V12 OnPrem 12.1.0.0 through 12.1.1.2 that can expose API catalog and runtime configuration data. Includes IBM's patch information for the fixed v12.1.1.3 release.
Gaurav Sarraf
CVE Analysis
•2026-11-06
•7 min read
Brief Summary: IBM API Connect CVE-2026-17301 Signature Verification Authentication Bypass
A brief summary of CVE-2026-17301, a CVSS 9.8 unauthenticated authentication bypass in IBM API Connect caused by improper cryptographic signature verification (CWE-347). The post covers what IBM has disclosed, affected versions, and the fixed releases 10.0.8.13 and 12.1.1.3.
Gaurav Sarraf
CVE Analysis
•2026-11-06
•7 min read
Brief Summary: IBM API Connect CVE-2026-17324 Missing Authentication for a Critical Function
A brief summary of CVE-2026-17324, a missing authentication flaw (CWE 306) in IBM API Connect V12 OnPrem 12.1.0.0 through 12.1.1.2 that IBM rates 8.3 High. We cover the disclosed attack model, the 12.1.1.3 patch information and the affected version range.
Gaurav Sarraf
CVE Analysis
•2026-11-06
•7 min read
Brief Summary: IBM API Connect CVE-2026-17342 Authenticated Code Injection Leading to Arbitrary Code Execution
A brief summary of CVE-2026-17342, a CVSS 9.9 code injection flaw (CWE-94) in IBM API Connect that lets a remote authenticated attacker execute arbitrary code. It covers affected versions, what IBM has and has not disclosed, and the fixed releases 10.0.8.13 and 12.1.1.3.
Gaurav Sarraf
CVE Analysis
•2026-11-06
•8 min read
Brief Summary: IBM API Connect CVE-2026-17344 Unauthenticated Server-Side Request Forgery
A brief summary of CVE-2026-17344, an unauthenticated server-side request forgery flaw in IBM API Connect V12 OnPrem 12.1.0.0 through 12.1.1.2 rated CVSS 9.3. The post covers the published technical details, affected versions and IBM's patch information for version 12.1.1.3.
Gaurav Sarraf
