# Critical Vulnerability

Published articles for Critical Vulnerability.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Critical Cisco Secure Email Gateway zero-day gives attackers root access

DevFeed: [Critical Cisco Secure Email Gateway zero-day gives attackers root access](<https://devfeed.tech/articles/critical-cisco-secure-email-gateway-zero-day-gives-attackers-root-access-50532.md>)

Original publisher: [Read original article](<https://www.networkworld.com/article/4222398/critical-cisco-secure-email-gateway-zero-day-gives-attackers-root-access-2.html>)

Author: Lucian Constantin

Published: 2026-09-15T20:03:54Z

Content type: news

Language: en

Sources: [Network World](<https://devfeed.tech/sources/network-world.md>)

Topics: [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [SQL](<https://devfeed.tech/topics/sql.md>), [Cisco](<https://devfeed.tech/topics/cisco.md>), [cisa](<https://devfeed.tech/topics/cisa.md>), [patches](<https://devfeed.tech/topics/patches.md>), [Embedded Software Dev](<https://devfeed.tech/topics/embedded-software-dev.md>), [Firewall](<https://devfeed.tech/topics/firewall.md>), [Network](<https://devfeed.tech/topics/network.md>)

Tags: [cisco](<https://devfeed.tech/tags/cisco.md>), [communications-security](<https://devfeed.tech/tags/communications-security.md>), [communications-security-email-security-network-security-security-vulnerabilities](<https://devfeed.tech/tags/communications-security-email-security-network-security-security-vulnerabilities.md>), [critical-vulnerability](<https://devfeed.tech/tags/critical-vulnerability.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [email-security](<https://devfeed.tech/tags/email-security.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [firewall](<https://devfeed.tech/tags/firewall.md>), [firmware](<https://devfeed.tech/tags/firmware.md>), [kev-catalog](<https://devfeed.tech/tags/kev-catalog.md>), [network](<https://devfeed.tech/tags/network.md>), [network-security](<https://devfeed.tech/tags/network-security.md>), [patches](<https://devfeed.tech/tags/patches.md>), [security](<https://devfeed.tech/tags/security.md>), [sql-injection](<https://devfeed.tech/tags/sql-injection.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [zero-day](<https://devfeed.tech/tags/zero-day.md>)

### AI overview

Cisco released emergency firmware patches for a critical, actively exploited SQL injection vulnerability in its Secure Email Gateway. The flaw can be triggered through a crafted email and may allow arbitrary SQL execution, command execution, and root access. Organizations are advised to investigate possible compromise because attackers may alter local logs.

### Source excerpt

Cisco released emergency patches for a critical vulnerability in its Secure Email Gateway appliance that could allow attackers to take over the device by simply sending malicious crafted emails to users. The flaw was already being exploited in the wild when the fixes were released. Tracked as CVE-2026-76461, the vulnerability is described by Cisco as an SQL injection caused by insufficient validation in the product's email parsing code. Parsing incoming email messages for threats is this appliance's main job, which means the attack vector is trivial. "An attacker could exploit this vulnerability by sending a crafted email message that contains malicious SQL statements through an affected device," Cisco said in its advisory. "A successful exploit could allow the attacker to execute arbitrary SQL statements, leading to command execution with root privileges on the underlying operating system." The flaw affects both the physical and virtual versions of the product and was fixed in the AsyncOS firmware releases 15.5.5-0141, 16.0.4-3021, and 16.5.0-780 released Monday. The Cisco product security team became aware of active exploitation of this vulnerability earlier this month, and the US Cybersecurity and Infrastructure Security Agency (CISA) added it to its Known Exploited Vulnerabilities (KEV) catalog. Indicators of compromise might be missing Because the vulnerability has been exploited as a zero-day, just upgrading to the patched firmware version is not enough. Organizations should also try to determine whether their own appliances have been compromised. One way is to review the mail_logs for suspicious SQL statements. However, because successful exploitation gives attackers root access on the device, they could use this access to alter the logs and hide their tracks. Cisco advises organizations to also check any network and firewall logs outside the device for any signs of suspicious activity, such as file uploads or downloads between the device and external IP addr

## CosmosEscape: Taking Over Every Database in Azure Cosmos DB

DevFeed: [CosmosEscape: Taking Over Every Database in Azure Cosmos DB](<https://devfeed.tech/articles/cosmosescape-taking-over-every-database-in-azure-cosmos-db-53742.md>)

Original publisher: [Read original article](<https://www.wiz.io/blog/cosmosescape-taking-over-every-database-in-azure-cosmos-db>)

Author: Lior Maman

Published: 2026-07-30T12:00:01Z

Content type: article

Language: en

Sources: [Wiz Blog | RSS feed](<https://devfeed.tech/sources/wiz-blog-rss-feed.md>)

Topics: [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Azure](<https://devfeed.tech/topics/azure.md>), [Database](<https://devfeed.tech/topics/database.md>), [API](<https://devfeed.tech/topics/api.md>), [Graphs](<https://devfeed.tech/topics/graphs.md>), [.NET](<https://devfeed.tech/topics/net.md>), [Microsoft](<https://devfeed.tech/topics/microsoft.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [azure-cosmos-db](<https://devfeed.tech/tags/azure-cosmos-db.md>), [compile](<https://devfeed.tech/tags/compile.md>), [copilot](<https://devfeed.tech/tags/copilot.md>), [critical-vulnerability](<https://devfeed.tech/tags/critical-vulnerability.md>), [database](<https://devfeed.tech/tags/database.md>), [entra-id](<https://devfeed.tech/tags/entra-id.md>), [gremlin](<https://devfeed.tech/tags/gremlin.md>), [microsoft](<https://devfeed.tech/tags/microsoft.md>), [microsoft-teams](<https://devfeed.tech/tags/microsoft-teams.md>), [research](<https://devfeed.tech/tags/research.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

Wiz Research describes CosmosEscape, a critical vulnerability in Azure Cosmos DB's Gremlin API that could have enabled attackers to enumerate databases and retrieve primary keys for full read and write access. Microsoft remediated the issue, removed the Cosmos Master Key, added guardrails, and reported no evidence of exploitation beyond the research.

### Source excerpt

A critical vulnerability chain in Azure Cosmos DB enabled full read and write access to every Cosmos DB database.

## Add security context to operational investigations with AWS DevOps Agent and Wiz

DevFeed: [Add security context to operational investigations with AWS DevOps Agent and Wiz](<https://devfeed.tech/articles/add-security-context-to-operational-investigations-with-aws-devops-agent-and-wiz-49927.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/devops/add-security-context-to-operational-investigations-with-aws-devops-agent-and-wiz/>)

Author: Yuriy Prykhodko

Published: 2026-07-29T12:33:53Z

Content type: article

Language: en

Sources: [AWS DevOps & Developer Productivity Blog](<https://devfeed.tech/sources/aws-devops-developer-productivity-blog.md>)

Topics: [DevOps](<https://devfeed.tech/topics/devops.md>), [incident](<https://devfeed.tech/topics/incident.md>), [Security](<https://devfeed.tech/topics/security.md>), [Model Context Protocol](<https://devfeed.tech/topics/model-context-protocol.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [observability](<https://devfeed.tech/topics/observability.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Latency](<https://devfeed.tech/topics/latency.md>), [multi-agent](<https://devfeed.tech/topics/multi-agent.md>)

Tags: [ai-ml](<https://devfeed.tech/tags/ai-ml.md>), [alert](<https://devfeed.tech/tags/alert.md>), [analysis](<https://devfeed.tech/tags/analysis.md>), [api](<https://devfeed.tech/tags/api.md>), [artificial-intelligence](<https://devfeed.tech/tags/artificial-intelligence.md>), [aws](<https://devfeed.tech/tags/aws.md>), [critical-vulnerability](<https://devfeed.tech/tags/critical-vulnerability.md>), [data-exfiltration](<https://devfeed.tech/tags/data-exfiltration.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [development](<https://devfeed.tech/tags/development.md>), [devops](<https://devfeed.tech/tags/devops.md>), [devops-agent](<https://devfeed.tech/tags/devops-agent.md>), [incident](<https://devfeed.tech/tags/incident.md>), [investigations](<https://devfeed.tech/tags/investigations.md>), [latency](<https://devfeed.tech/tags/latency.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [model-context-protocol](<https://devfeed.tech/tags/model-context-protocol.md>), [multi-agent](<https://devfeed.tech/tags/multi-agent.md>), [observability](<https://devfeed.tech/tags/observability.md>), [on-call](<https://devfeed.tech/tags/on-call.md>), [operational](<https://devfeed.tech/tags/operational.md>), [partner-solutions](<https://devfeed.tech/tags/partner-solutions.md>), [security](<https://devfeed.tech/tags/security.md>), [technical-how-to](<https://devfeed.tech/tags/technical-how-to.md>), [uncategorized](<https://devfeed.tech/tags/uncategorized.md>)

### AI overview

This AWS DevOps Agent and Wiz integration adds security context to operational incident investigations. The agent uses MCP to query Wiz's security graph and correlate vulnerability, exposure, deployment, code, and observability data with operational telemetry, helping engineers distinguish performance problems from security incidents.

### Source excerpt

This post was co-authored by Ayelet Harcz (Product Manager), Hen Perez (CTO Architect), and Shani Gafni (Product Manager) at Wiz. When an on-call engineer receives an alert at 2 AM, a CPU spike, a latency anomaly, or an unexpected API error, the first question is whether this is an operational issue or a security incident. [...]

## Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild

DevFeed: [Critical Buffer Overflow Vulnerability in PAN-OS Exploited in-the-Wild](<https://devfeed.tech/articles/critical-buffer-overflow-vulnerability-in-pan-os-exploited-in-the-wild-53748.md>)

Original publisher: [Read original article](<https://www.wiz.io/blog/critical-vulnerability-in-pan-os-exploited-in-the-wild-cve-2026-0300>)

Author: Merav Bar

Published: 2026-05-06T12:33:26Z

Content type: news

Language: en

Sources: [Wiz Blog | RSS feed](<https://devfeed.tech/sources/wiz-blog-rss-feed.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Security](<https://devfeed.tech/topics/security.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Networks](<https://devfeed.tech/topics/networks.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>)

Tags: [buffer-overflow](<https://devfeed.tech/tags/buffer-overflow.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [critical](<https://devfeed.tech/tags/critical.md>), [critical-vulnerability](<https://devfeed.tech/tags/critical-vulnerability.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cvss](<https://devfeed.tech/tags/cvss.md>), [exploited](<https://devfeed.tech/tags/exploited.md>), [fixed](<https://devfeed.tech/tags/fixed.md>), [internet](<https://devfeed.tech/tags/internet.md>), [networks](<https://devfeed.tech/tags/networks.md>), [palo-alto-networks](<https://devfeed.tech/tags/palo-alto-networks.md>), [rce](<https://devfeed.tech/tags/rce.md>), [remote](<https://devfeed.tech/tags/remote.md>), [remote-code-execution](<https://devfeed.tech/tags/remote-code-execution.md>), [research](<https://devfeed.tech/tags/research.md>), [root](<https://devfeed.tech/tags/root.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

A critical buffer overflow vulnerability in Palo Alto Networks PAN-OS User-ID Authentication Portal allows unauthenticated attackers to execute arbitrary code with root privileges. The issue is being exploited in limited cases, especially when the portal is exposed to untrusted networks or the public internet.

### Source excerpt

Detect and mitigate CVE-2026-0300, a critical vulnerability in Palo Alto Networks PAN-OS User-ID Authentication Portal that allows unauthenticated attackers to achieve remote code execution (RCE) with root privileges.

## Marimo OSS Python Notebook RCE: From Disclosure to Exploitation in Under 10 Hours

DevFeed: [Marimo OSS Python Notebook RCE: From Disclosure to Exploitation in Under 10 Hours](<https://devfeed.tech/articles/marimo-oss-python-notebook-rce-from-disclosure-to-exploitation-in-under-10-hours-53248.md>)

Original publisher: [Read original article](<https://webflow.sysdig.com/blog/marimo-oss-python-notebook-rce-from-disclosure-to-exploitation-in-under-10-hours>)

Author: Sysdig Threat Research Team

Published: 2026-04-09T00:00:00Z

Content type: news

Language: en

Sources: [Sysdig Blog](<https://devfeed.tech/sources/sysdig-blog.md>)

Topics: [Python](<https://devfeed.tech/topics/python.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [WebSocket](<https://devfeed.tech/topics/websocket.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [reactive](<https://devfeed.tech/topics/reactive.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [credential-theft](<https://devfeed.tech/tags/credential-theft.md>), [critical-vulnerability](<https://devfeed.tech/tags/critical-vulnerability.md>), [cve-2026-39987](<https://devfeed.tech/tags/cve-2026-39987.md>), [ghsa-2679-6mx9-h9xc](<https://devfeed.tech/tags/ghsa-2679-6mx9-h9xc.md>), [marimo-rce](<https://devfeed.tech/tags/marimo-rce.md>), [marimo-security-issue](<https://devfeed.tech/tags/marimo-security-issue.md>), [marimo-vulnerability](<https://devfeed.tech/tags/marimo-vulnerability.md>), [marimo-websocket-vulnerability](<https://devfeed.tech/tags/marimo-websocket-vulnerability.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [poc](<https://devfeed.tech/tags/poc.md>), [python](<https://devfeed.tech/tags/python.md>), [remote-code-execution](<https://devfeed.tech/tags/remote-code-execution.md>), [unauthenticated-rce](<https://devfeed.tech/tags/unauthenticated-rce.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [websocket](<https://devfeed.tech/tags/websocket.md>)

### AI overview

This article examines the disclosure and rapid exploitation of CVE-2026-39987, a pre-authentication remote code execution vulnerability in the terminal WebSocket endpoint of the open-source marimo Python notebook platform. It reports that attackers obtained interactive shells and carried out credential theft shortly after disclosure, despite no public proof of concept being available.

### Source excerpt

On April 8, 2026, a critical vulnerability was disclosed in marimo, an open-source reactive Python notebook platform. Currently being tracked as GHSA-2679-6mx9-h9xc, it is a pre-authentication remote code execution (RCE) vulnerability in the terminal WebSocket endpoint that allows attackers to obtain a full interactive shell on any exposed marimo instance through a single WebSocket connection - no credentials required. At the time of this writing, a CVE number has yet to be assigned.

## CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild

DevFeed: [CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild](<https://devfeed.tech/articles/codebreach-infiltrating-the-aws-console-supply-chain-and-hijacking-aws-github-repositories-via-codebuild-54125.md>)

Original publisher: [Read original article](<https://www.wiz.io/blog/wiz-research-codebreach-vulnerability-aws-codebuild>)

Author: Nir Ohfeld

Published: 2026-01-15T15:00:00Z

Content type: article

Language: en

Sources: [Wiz Blog | RSS feed](<https://devfeed.tech/sources/wiz-blog-rss-feed.md>)

Topics: [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [supply chain attacks](<https://devfeed.tech/topics/supply-chain-attacks.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>), [Repositories](<https://devfeed.tech/topics/repositories.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>)

Tags: [aws](<https://devfeed.tech/tags/aws.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [critical-vulnerability](<https://devfeed.tech/tags/critical-vulnerability.md>), [github](<https://devfeed.tech/tags/github.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [repositories](<https://devfeed.tech/tags/repositories.md>), [research](<https://devfeed.tech/tags/research.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-attack](<https://devfeed.tech/tags/supply-chain-attack.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

Wiz Research describes CodeBreach, a critical supply-chain vulnerability caused by a misconfigured AWS CodeBuild CI pipeline. The flaw could let unauthenticated attackers access privileged credentials and take over AWS GitHub repositories, including the JavaScript SDK used by the AWS Console. The article explains the attack and recommends hardening CI/CD pipelines.

### Source excerpt

Wiz Research discovered a critical supply chain vulnerability that abused a CodeBuild misconfiguration to take over key AWS GitHub repositories - including the JavaScript SDK powering the AWS Console.

## Breaking NVIDIA Triton: CVE-2025-23319 - A Vulnerability Chain Leading to AI Server Takeover

DevFeed: [Breaking NVIDIA Triton: CVE-2025-23319 - A Vulnerability Chain Leading to AI Server Takeover](<https://devfeed.tech/articles/breaking-nvidia-triton-cve-2025-23319-a-vulnerability-chain-leading-to-ai-server-takeover-53923.md>)

Original publisher: [Read original article](<https://www.wiz.io/blog/nvidia-triton-cve-2025-23319-vuln-chain-to-ai-server>)

Author: Nir Ohfeld

Published: 2025-08-04T12:55:59Z

Content type: article

Language: en

Sources: [Wiz Blog | RSS feed](<https://devfeed.tech/sources/wiz-blog-rss-feed.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Inference](<https://devfeed.tech/topics/inference.md>), [servers](<https://devfeed.tech/topics/servers.md>), [upgrade](<https://devfeed.tech/topics/upgrade.md>), [AI Models](<https://devfeed.tech/topics/ai-models.md>), [Python](<https://devfeed.tech/topics/python.md>)

Tags: [2025](<https://devfeed.tech/tags/2025.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-ml](<https://devfeed.tech/tags/ai-ml.md>), [critical-vulnerability](<https://devfeed.tech/tags/critical-vulnerability.md>), [cve](<https://devfeed.tech/tags/cve.md>), [inference](<https://devfeed.tech/tags/inference.md>), [patch](<https://devfeed.tech/tags/patch.md>), [remote-code-execution](<https://devfeed.tech/tags/remote-code-execution.md>), [research](<https://devfeed.tech/tags/research.md>), [triton-inference-server](<https://devfeed.tech/tags/triton-inference-server.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

Wiz Research reports a chain of critical vulnerabilities in NVIDIA's open-source Triton Inference Server that could let unauthenticated remote attackers achieve remote code execution and take over servers. The report identifies CVE-2025-23319, CVE-2025-23320, and CVE-2025-23334, and recommends upgrading Triton and its Python backend to version 25.07.

### Source excerpt

Wiz Research discovers a critical vulnerability chain allowing unauthenticated attackers to take over NVIDIA's Triton Inference Server.

## Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding platform Base44 Allowing Unauthorized Access to Private Applications

DevFeed: [Wiz Research Uncovers Critical Vulnerability in AI Vibe Coding platform Base44 Allowing Unauthorized Access to Private Applications](<https://devfeed.tech/articles/wiz-research-uncovers-critical-vulnerability-in-ai-vibe-coding-platform-base44-allowing-unauthorized-access-to-private-applications-53747.md>)

Original publisher: [Read original article](<https://www.wiz.io/blog/critical-vulnerability-base44>)

Author: Gal Nagli

Published: 2025-07-29T14:00:00Z

Content type: article

Language: en

Sources: [Wiz Blog | RSS feed](<https://devfeed.tech/sources/wiz-blog-rss-feed.md>)

Topics: [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Security](<https://devfeed.tech/topics/security.md>), [AI-assisted coding](<https://devfeed.tech/topics/ai-assisted-coding.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Vibe coding](<https://devfeed.tech/topics/vibe-coding.md>), [Single sign-on (SSO)](<https://devfeed.tech/topics/sso.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [code-generation](<https://devfeed.tech/tags/code-generation.md>), [critical-vulnerability](<https://devfeed.tech/tags/critical-vulnerability.md>), [development](<https://devfeed.tech/tags/development.md>), [research](<https://devfeed.tech/tags/research.md>), [security](<https://devfeed.tech/tags/security.md>), [security-posture](<https://devfeed.tech/tags/security-posture.md>), [vibe-coding](<https://devfeed.tech/tags/vibe-coding.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

Wiz Research reports a critical vulnerability in Base44, an AI-powered vibe coding platform, that allowed attackers to access private applications by using a non-secret app_id with undocumented registration and email verification endpoints. Base44 and Wix validated and fixed the issue in less than 24 hours, with no evidence of past abuse reported.

### Source excerpt

New discovery underscores security implications of AI-powered development and the rise of Vibe Coding Platforms

## The risk in malicious AI models: Wiz Research discovers critical vulnerability in AI-as-a-Service provider, Replicate

DevFeed: [The risk in malicious AI models: Wiz Research discovers critical vulnerability in AI-as-a-Service provider, Replicate](<https://devfeed.tech/articles/the-risk-in-malicious-ai-models-wiz-research-discovers-critical-vulnerability-in-ai-as-a-service-provider-replicate-54127.md>)

Original publisher: [Read original article](<https://www.wiz.io/blog/wiz-research-discovers-critical-vulnerability-in-replicate>)

Author: Sagi Tzadik

Published: 2024-05-23T13:58:31Z

Content type: article

Language: en

Sources: [Wiz Blog | RSS feed](<https://devfeed.tech/sources/wiz-blog-rss-feed.md>)

Topics: [AI Platform](<https://devfeed.tech/topics/ai-platform.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Security](<https://devfeed.tech/topics/security.md>), [AI Models](<https://devfeed.tech/topics/ai-models.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Code](<https://devfeed.tech/topics/code.md>), [container](<https://devfeed.tech/topics/container.md>), [Inference](<https://devfeed.tech/topics/inference.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-models](<https://devfeed.tech/tags/ai-models.md>), [ai-platform](<https://devfeed.tech/tags/ai-platform.md>), [code](<https://devfeed.tech/tags/code.md>), [container](<https://devfeed.tech/tags/container.md>), [critical-vulnerability](<https://devfeed.tech/tags/critical-vulnerability.md>), [inference](<https://devfeed.tech/tags/inference.md>), [investigations](<https://devfeed.tech/tags/investigations.md>), [remote-code-execution](<https://devfeed.tech/tags/remote-code-execution.md>), [research](<https://devfeed.tech/tags/research.md>), [risk](<https://devfeed.tech/tags/risk.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

### AI overview

Wiz Research reports a vulnerability in Replicate, an AI-as-a-service platform, that could have enabled unauthorized access to customers' AI prompts and results through malicious AI models and cross-tenant attacks. The issue was disclosed in January 2024 and promptly mitigated; Wiz states that no customer data was compromised and no customer action is required.

### Source excerpt

The Wiz Research team's investigations into AI-as-a-service providers reveals a major risk to AI systems.

## CVE-2024-4040: CrushFTP VFS sandbox escape exploited in the wild

DevFeed: [CVE-2024-4040: CrushFTP VFS sandbox escape exploited in the wild](<https://devfeed.tech/articles/cve-2024-4040-exploited-in-the-wild-everything-you-need-to-know-53750.md>)

Original publisher: [Read original article](<https://www.wiz.io/blog/crushftp-vfs-sandbox-vulnerability>)

Author: Gili Tikochinski

Published: 2024-04-24T16:15:18Z

Content type: article

Language: en

Sources: [Wiz Blog | RSS feed](<https://devfeed.tech/sources/wiz-blog-rss-feed.md>)

Topics: [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Security](<https://devfeed.tech/topics/security.md>), [Server](<https://devfeed.tech/topics/server.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [critical](<https://devfeed.tech/tags/critical.md>), [critical-vulnerability](<https://devfeed.tech/tags/critical-vulnerability.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cvss](<https://devfeed.tech/tags/cvss.md>), [exploited](<https://devfeed.tech/tags/exploited.md>), [patch](<https://devfeed.tech/tags/patch.md>), [remote-code-execution](<https://devfeed.tech/tags/remote-code-execution.md>), [research](<https://devfeed.tech/tags/research.md>), [security](<https://devfeed.tech/tags/security.md>), [server](<https://devfeed.tech/tags/server.md>), [update](<https://devfeed.tech/tags/update.md>), [upgrade](<https://devfeed.tech/tags/upgrade.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [wild](<https://devfeed.tech/tags/wild.md>)

### AI overview

Wiz analyzes CVE-2024-4040, a critical CrushFTP vulnerability that can bypass the VFS sandbox, enable unauthenticated remote code execution, and has been exploited in the wild. The article discusses affected exposure and urges users to update to patched versions.

### Source excerpt

Detect and mitigate CVE-2024-4040, a critical vulnerability in CrushFTP exploited in the wild. Organizations should patch urgently.

## Authentication bypass vulnerabilities in TeamCity: everything you need to know

DevFeed: [Authentication bypass vulnerabilities in TeamCity: everything you need to know](<https://devfeed.tech/articles/authentication-bypass-vulnerabilities-in-teamcity-everything-you-need-to-know-53877.md>)

Original publisher: [Read original article](<https://www.wiz.io/blog/jetbrains-teamcity-authentication-bypass-vulnerabilities-cve-2024-27198-cve-2024-27199>)

Author: Gili Tikochinski

Published: 2024-03-06T16:49:16Z

Content type: article

Language: en

Sources: [Wiz Blog | RSS feed](<https://devfeed.tech/sources/wiz-blog-rss-feed.md>)

Topics: [teamcity](<https://devfeed.tech/topics/teamcity.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Security](<https://devfeed.tech/topics/security.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [jetbrains](<https://devfeed.tech/topics/jetbrains.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [authentication-bypass](<https://devfeed.tech/tags/authentication-bypass.md>), [critical-vulnerability](<https://devfeed.tech/tags/critical-vulnerability.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cvss](<https://devfeed.tech/tags/cvss.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [jetbrains](<https://devfeed.tech/tags/jetbrains.md>), [patch](<https://devfeed.tech/tags/patch.md>), [research](<https://devfeed.tech/tags/research.md>), [security](<https://devfeed.tech/tags/security.md>), [version](<https://devfeed.tech/tags/version.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

Wiz Research describes two critical and high-severity authentication bypass vulnerabilities in JetBrains TeamCity, CVE-2024-27198 and CVE-2024-27199. The flaws can allow unauthenticated attackers to gain administrative control, modify settings, disclose sensitive information, or affect TLS configuration. The article recommends upgrading or applying the security patch plugin.

### Source excerpt

Detect and mitigate CVE-2024-27198 (CVSS score: 9.8) and CVE-2024-27199 (CVSS score: 7.3), authentication bypass vulnerabilities in JetBrains TeamCity.