Tagged “networking”
5 posts
CVE-2024-21762: FortiOS RCE that needed no login at all
A heap out-of-bounds write in FortiOS SSL-VPN let unauthenticated attackers run code as root — and 150,000 devices were still exposed when it went public.
Citrix Bleed: how a memory leak beat MFA outright
CVE-2023-4966 let attackers steal live NetScaler session tokens and walk straight past authentication and MFA — no credentials needed at all.
Cutting NAT gateway costs with VPC endpoints that actually help
How gateway and interface VPC endpoints replace NAT gateway traffic for AWS API calls, what they cost instead, and which traffic still has to go through NAT.
CVE-2026-16812: a CVSS 10 hole in your SD-WAN control plane
An unauthenticated command injection in Arista VeloCloud Orchestrator On-Prem lets attackers pivot from one exposed console to every edge device it manages.
CVE-2025-0282: the Ivanti VPN zero-day, and its sequel
A stack-based buffer overflow in Ivanti Connect Secure let Chinese state hackers run a malware ecosystem on VPN gateways for weeks before anyone noticed.