Keyword

crlf-injection

2 dispatches · latest 08 SEP 2026 · all keywords →

08 SEP 2026exploits

The VPN That Signed You In as Root: IXON's Unauthenticated Config Endpoint and CVE-2026-75925

IXON's OT-focused VPN client writes config from a local endpoint that checks no credentials, then feeds it to a root subprocess with CRLF un-neutralized. CVSS 9.6 — and the injected config survives reboots while your VPN keeps working perfectly.

Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVSS 9.6CVE-2026-75925

vpn ixon cve-2026-75925

01 SEP 2026exploits

UniFi Shipped Three Perfect Tens at Once — Patch the OS Before Anything Else

SAB-067 covers 22 vulnerabilities across the entire UniFi line, three of them CVSS 10.0 unauth flaws — including a CRLF auth-bypass on UniFi OS that chains into RCE. Fixes for everything are out; the update order matters.

Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVE-2026-77537 +9

ubiquiti unifi unifi-os