56,966 blogs · [ { "id": "01a0d8a6-ddfd-7272-90a3-0fa8f6060acf", "title": "Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)", "url": "https://labs.watchtowr.com/is-this-a-joke-in-the-auth-header-f5-big-ip-unauth-heap-overflow-to-rce-cve-2026-94127/", "published_at": "2026-09-23T23:19:19+00:00" }, { "id": "01a0b653-dfae-73f1-b480-4c2ab8234941", "title": "You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))", "url": "https://labs.watchtowr.com/youre-back-in-the-room-citrix-netscaler-pre-auth-rce-cve-2026-8452/", "published_at": "2026-08-14T07:08:20+00:00" }, { "id": "01a0b653-dfaf-7349-98f0-ad199696604a", "title": "It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza)", "url": "https://labs.watchtowr.com/its-37oc-and-all-we-can-think-about-is-coldfusion-adobe-coldfusion-security-bulletin-apsb26-68-cve-bonanza/", "published_at": "2026-07-02T16:38:28+00:00" }, { "id": "01a0b653-dfaf-7349-98f0-ad1996d5cab4", "title": "CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)", "url": "https://labs.watchtowr.com/citrixbleed-to-infinity-and-beyond-citrix-netscaler-pre-auth-memory-overread-cve-2026-8451/", "published_at": "2026-06-30T19:35:58+00:00" }, { "id": "01a0b653-dfaf-7349-98f0-ad1996e1f5dd", "title": "Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)", "url": "https://labs.watchtowr.com/enterprise-tech-in-shell-out-progress-kemp-loadmaster-uninitialized-heap-to-pre-auth-rce-cve-2026-8037/", "published_at": "2026-06-29T19:24:54+00:00" }, { "id": "01a0b653-dfaf-7349-98f0-ad1996e71002", "title": "Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE)", "url": "https://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce/", "published_at": "2026-06-12T20:35:13+00:00" }, { "id": "01a0b653-dfaf-7349-98f0-ad1997507cfd", "title": "Marking Your Own Homework (Check Point Remote Access VPN IKEv1 Authentication Bypass CVE-2026-50751)", "url": "https://labs.watchtowr.com/marking-your-own-homework-check-point-remote-access-vpn-ikev1-authentication-bypass-cve-2026-50751/", "published_at": "2026-06-12T05:17:20+00:00" }, { "id": "01a0b653-dfaf-7349-98f0-ad1997c251b1", "title": "More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520)", "url": "https://labs.watchtowr.com/more-evidence-that-words-dont-mean-what-we-thought-they-meant-ivanti-sentry-pre-auth-os-command-injection-cve-2026-10520/", "published_at": "2026-06-10T00:52:20+00:00" }, { "id": "01a0b653-dfaf-7349-98f0-ad1998c1f672", "title": "The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)", "url": "https://labs.watchtowr.com/the-internet-is-falling-down-falling-down-falling-down-cpanel-whm-authentication-bypass-cve-2026-41940/", "published_at": "2026-04-29T17:19:19+00:00" }, { "id": "01a0b653-dfaf-7349-98f0-ad1998e42b22", "title": "You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)", "url": "https://labs.watchtowr.com/youre-not-supposed-to-sharefile-with-everyone-progress-sharefile-pre-auth-rce-chain-cve-2026-2699-cve-2026-2701/", "published_at": "2026-04-02T10:00:42+00:00" }, { "id": "01a0b653-dfaf-7349-98f0-ad199942c98e", "title": "Please, We Beg, Just One Weekend Free Of Appliances (Citrix NetScaler CVE-2026-3055 Memory Overread Part 2)", "url": "https://labs.watchtowr.com/please-we-beg-just-one-weekend-free-of-appliances-citrix-netscaler-cve-2026-3055-memory-overread-part-2/", "published_at": "2026-03-29T20:07:28+00:00" }, { "id": "01a0b653-dfaf-7349-98f0-ad199a0c2bb9", "title": "The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread)", "url": "https://labs.watchtowr.com/the-sequels-are-never-as-good-but-were-still-in-pain-citrix-netscaler-cve-2026-3055-memory-overread/", "published_at": "2026-03-28T20:39:56+00:00" }, { "id": "01a0b653-dfaf-7349-98f0-ad199aa097c8", "title": "A 32-Year-Old Bug Walks Into A Telnet Server (GNU inetutils Telnetd CVE-2026-32746 Pre-Auth RCE)", "url": "https://labs.watchtowr.com/a-32-year-old-bug-walks-into-a-telnet-server-gnu-inetutils-telnetd-cve-2026-32746/", "published_at": "2026-03-19T20:21:07+00:00" }, { "id": "01a0b653-dfaf-7349-98f0-ad199addfd17", "title": "The Most Organized Threat Actors Use Your ITSM (BMC FootPrints Pre-Auth Remote Code Execution Chains)", "url": "https://labs.watchtowr.com/thanks-itsms-threat-actors-have-never-been-so-organized-bmc-footprints-pre-auth-remote-code-execution-chains/", "published_at": "2026-03-18T10:02:49+00:00" }, { "id": "01a0b653-dfb0-704f-87e4-994aaab7c062", "title": "Sometimes, You Can Just Feel The Security In The Design (Juniper Junos Evolved CVE-2026-21902 Pre-Auth RCE)", "url": "https://labs.watchtowr.com/sometimes-you-can-just-feel-the-security-in-the-design-junos-os-evolved-cve-2026-21902-rce/", "published_at": "2026-03-03T14:15:18+00:00" }, { "id": "01a0b653-dfb0-704f-87e4-994aab4c3df5", "title": "Buy A Help Desk, Bundle A Remote Access Solution? (SolarWinds Web Help Desk Pre-Auth RCE Chain(s))", "url": "https://labs.watchtowr.com/buy-a-help-desk-bundle-a-remote-access-solution-solarwinds-web-help-desk-pre-auth-rce-chain-s/", "published_at": "2026-02-25T20:06:32+00:00" } ] posts Claim your blog

Back to labs.watchtowr.com

Blog · corpus.blog/blogs/labs.watchtowr.com/posts

labs.watchtowr.com

labs.watchtowr.com

2026

Is This A Joke? In The Auth Header? (F5 BIG-IP UnAuth Heap-Overflow to RCE CVE-2026-94127)original ↗

23 Sept 2026

You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))original ↗

14 Aug 2026

It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza)original ↗

2 Jul 2026

CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)original ↗

30 Jun 2026

Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)original ↗

29 Jun 2026

Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE)original ↗

12 Jun 2026

Marking Your Own Homework (Check Point Remote Access VPN IKEv1 Authentication Bypass CVE-2026-50751)original ↗

12 Jun 2026

More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520)original ↗

10 Jun 2026

The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026-41940)original ↗

29 Apr 2026

You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701)original ↗

2 Apr 2026

Please, We Beg, Just One Weekend Free Of Appliances (Citrix NetScaler CVE-2026-3055 Memory Overread Part 2)original ↗

29 Mar 2026

The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread)original ↗

28 Mar 2026

A 32-Year-Old Bug Walks Into A Telnet Server (GNU inetutils Telnetd CVE-2026-32746 Pre-Auth RCE)original ↗

19 Mar 2026

The Most Organized Threat Actors Use Your ITSM (BMC FootPrints Pre-Auth Remote Code Execution Chains)original ↗

18 Mar 2026

Sometimes, You Can Just Feel The Security In The Design (Juniper Junos Evolved CVE-2026-21902 Pre-Auth RCE)original ↗

3 Mar 2026

Buy A Help Desk, Bundle A Remote Access Solution? (SolarWinds Web Help Desk Pre-Auth RCE Chain(s))original ↗

25 Feb 2026