Batch #4 - August 2026 (8 advisories · 5 critical · 5 unauth)
·
5 commits
to main
since this release
Batch #4 — August 2026
8 advisories · 8 vendors · every advisory ships a full root-cause analysis + a working, reproducible PoC.
Fourth batch — expanding coverage into OT/energy, mail servers, IT-asset management, flow analytics, physical access control, instant messaging, broadcast, and CI/CD deployment. Full writeups on https://0day-rubbish.com/blog; PoC code under product/<vendor>/<version>/<type>/exploit/.
| # | Product | Affected Version | CVSS | Class | Advisory & PoC |
|---|---|---|---|---|---|
| 1 | GE PulseNET Enterprise | 6.0.3 | 9.8 | Default creds + Path Traversal (Root) | ResourceFile Path Traversal → RCE |
| 2 | Kerio Connect | 10.0.9 Patch 2 | 8.8 | Auth Cmd Injection (Root) | Server.startEncryption Cmd Injection → RCE |
| 3 | Lansweeper | 12.2.1.0 | 8.8 | Auth 2nd-Order SQLi → xp_cmdshell | LicenseActions SQLi → RCE |
| 4 | Plixer Scrutinizer | 19.7.0 | 8.8 | Auth SQLi → pg_cron RCE | ORDER BY SQLi → RCE |
| 5 | Telaeris XPressEntry | 3.7.7454 | 9.8 | Unauth SQLi → xp_cmdshell | Unauth SQLi → RCE |
| 6 | Output Messenger Server | 2.0.x | 9.8 | Unauth Zip-Slip (SYSTEM) | Zip-Slip Plugin Plant → RCE |
| 7 | Cinegy Cinegize | 2026-02-05 | 9.8 | Unauth Deserialization (SYSTEM) | BinaryFormatter → RCE |
| 8 | MidVision RapidDeploy | 5.2.2 | 9.8 | Unauth File Write (Root) | Remote Agent Arbitrary File Write → RCE |
Highlights
- 5 critical (CVSS ≥ 9.0) · 5 unauthenticated
- Notable: GE PulseNET Enterprise path traversal to root RCE (power/utility infrastructure), Telaeris XPressEntry unauth SQLi → xp_cmdshell (physical access control), and Cinegy Cinegize unauth BinaryFormatter deserialization (broadcast)
- Attack classes: path traversal, command injection, SQL injection (2nd-order + ORDER BY), zip-slip, deserialization, arbitrary file write
- Coverage: OT/energy, mail, IT-asset management, flow analytics, physical security, IM, broadcast, and CI/CD
Running total
43 advisories · 34 vendors · 34 critical · 33 unauthenticated · all with reproducible PoC.
Next drop: weekly — expanding into ICS / SCADA, energy, and aerospace.
⭐ Star to bookmark · 👁 Watch for the next batch · 🌐 https://0day-rubbish.com/blog