#Command Injection
CISA Warns of Active Exploitation in Zimbra Collaboration Suite
CISA Warns of Active Exploitation in Zimbra Collaboration Suite CISA has added CVE-2026-73570, an operating-system command injection flaw in Zimbra Collaboratio...
Lucas Oliveira
Research
CVE-2026-24301: Microsoft Copilot CoSnitch Data Exposure
CVE-2026-24301: Microsoft Copilot CoSnitch Data Exposure CVE-2026-24301 is a newly published Microsoft Copilot vulnerability that turns a familiar enterprise ri...
Lucas Oliveira
Research
Arista VeloCloud Zero-Day Puts SD-WAN Orchestrators in the Blast Radius
Arista VeloCloud Zero-Day Puts SD-WAN Orchestrators in the Blast Radius Arista's July 27 advisory on CVE-2026-16812 deserves immediate attention because the aff...
Lucas Oliveira
Research
FortiSandbox command injection flaws move from patch queue to exploited risk
FortiSandbox command injection flaws move from patch queue to exploited risk CISA has added two Fortinet FortiSandbox vulnerabilities to its Known Exploited Vul...
Lucas Oliveira
Research
Lantronix EDS5000 exploitation shows why edge device patch windows are shrinking
Lantronix EDS5000 exploitation shows why edge device patch windows are shrinking CISA has added CVE-2025-67038 to its Known Exploited Vulnerabilities catalog af...
Lucas Oliveira
Research