rapid7-CVE-2026-15409

CVE-2026-15409 This repo contains a proof-of-concept exploit for CVE-2026-15409. It establishes non-root remote code execution on SonicWall SMA 1000 by implementing the Erlang protocol expected by localhost:1050 and tunneling it through the websocket for file r/w and arbitrary code execution via...

CVE-2026-15409

🚀 CVE-2026-15409 – SonicWall SMA 1000 Erlang RCE via WebSocket Proxy Proof‑of‑Concept exploit for CVE-2026-15409 – unauthenticated remote code execution on SonicWall SMA 1000 series appliances via the Erlang distribution protocol tunneled over WebSocket. 📖 Overview CVE-2026-15409 is a critical...

Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote Privilege Escalation

Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in privilege escalation on affected systems. The vulnerabilities are listed below - CVE-2026-108186 CVSS score: 9.6 - An improper input validation...

CVE-2026-108186

Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-108187

Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-108187

An Origin Validation Error in Zoom Workplace for Windows could allow an unauthenticated user to conduct an escalation of privilege via network access. The vulnerability is associated with CWE-346 and has a High base severity score of 8.1. No specific affected versions, root causes, or remediation...

EUVD-2026-121159

Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-108187

Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-108186

Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

EUVD-2026-121259

Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-108186

A critical Improper Input Validation vulnerability (CWE-20) exists in Zoom Workplace for Windows . This flaw may allow an unauthenticated user to achieve an escalation of privilege via network access . The vulnerability carries a CVSS 3.1 base score of 9.6 (CRITICAL) , with high impacts on confid...

CVE-2026-108186: Zoom Communications Zoom Workplace: Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of…

Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

Zoom Workplace < 7.1.5 Vulnerability (ZSB-26024)

The version of Zoom Workplace installed on the remote host is prior to 7.1.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-26024 advisory. - Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via...

PT-2026-141763

Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-108187: Zoom Communications Zoom Workplace: Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of…

Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

PT-2026-141762

Name of the Vulnerable Software and Affected Versions Zoom Workplace for Windows versions prior to 7.1.8 Description Improper input validation allows an unauthenticated user to perform a privilege escalation via network access. An attacker can gain elevated privileges remotely over the network...

Security Teams and AI Tools: Why Executives Won’t Adopt What They Can’t Control

Executives need visibility into workplace AI, clear data controls and limits on agent access before approving wider adoption. Here’s what businesses need in place...

SonicWall SMA1000 12.5.0-02952 Pre-Authentication Server-Side Request Forgery

SonicWall SMA1000 versions through 12.4.3-03526 and 12.5.0-02952 contain a pre-authentication server-side request forgery vulnerability in the WorkPlace interface...

Zoom Workplace VDI Client 7.0.11 < 7.0.13 Improper Certificate Validation (ZSB-26021)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 7.0.13. It is, therefore, affected by a vulnerability as referenced in the ZSB-26021 advisory. - Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an...

Zoom Workplace 7.0.x < 7.1.9 / 7.2.0 Improper Certificate Validation (ZSB-26021)

The version of Zoom Workplace installed on the remote host is 7.0.x prior to 7.1.9 / 7.2.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-26021 advisory. - Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an...