Business Customer Reports
Experienced any inconvenience?
Let us know right away.
Resources
All official content published by AI SPERA is gathered in one place. From product updates to reports and case studies, you can explore it all here.
September 15, 2026
SonicWall SMA1000 Pre-Authentication SSRF and Command Injection Chain: Analysis of CVE-2026-83548 and CVE-2026-83549
On September 1, 2026, two zero-day vulnerabilities under active exploitation, CVE-2026-83548 and CVE-2026-83549, were disclosed in the SonicWall SMA1000 series of remote access gateways and SSL-VPN appliances. Each vulnerability poses a serious risk on its own, but the…
September 7, 2026
Analysis of the JFrog Artifactory Authentication Bypass Vulnerability CVE-2026-82329
On August 28, 2026, a critical vulnerability, CVE-2026-82329, was disclosed in JFrog Artifactory, a repository solution that manages the full lifecycle of software artifacts. The vulnerability allows attackers to bypass authentication and obtain administrator privileges. It is…
September 4, 2026
Domain Phishing Scan AI Analysis Multilingual Support
This update adds multilingual support for AI analysis results in Criminal IP Domain Phishing Scan, allowing users to view analysis explanations in five supported languages based on their language settings. Maintenance Schedule v1.105.0: 2026.09.03 (05:00-10:00 UTC) Overview 📃…
September 3, 2026
PaperCut NG/MF Vulnerabilities Exploited in Active Attacks: Analysis of Internet-Exposed Print Management Servers
Companies, schools, public institutions, and other organizations use centralized print management solutions to efficiently manage printers and multifunction devices. PaperCut NG/MF is one of the leading print management solutions widely used in these environments. An attack…
September 1, 2026
NetScaler ADC·Gateway Authentication Bypass Vulnerability CVE-2026-19490 Analysis
On August 19, 2026, a critical authentication bypass vulnerability, CVE-2026-19490, was disclosed in NetScaler ADC and NetScaler Gateway, widely deployed enterprise appliances positioned at network perimeters. The vulnerability is rated CVSS v4.0 9.3 (Critical) and is classified…
August 28, 2026
Zimbra Vulnerability Allowing Unauthenticated OS Command Execution: CVE-2026-73570 and External Exposure Analysis
CVE-2026-73570, a vulnerability in Zimbra Collaboration that can lead to unauthenticated remote code execution, has been confirmed to be actively exploited. Zimbra Collaboration is a collaboration platform used by companies and public institutions to operate email, calendars,…
August 26, 2026
GitLab GraphQL Code Injection Vulnerability CVE-2026-19478 Analysis
On August 17, 2026, GitLab, the self-managed Git platform, released an emergency security update outside its regular update cycle to address the critical vulnerability CVE-2026-19478. The vulnerability, rated CVSS v3.1 9.4 (Critical), is a code injection flaw (CWE-94) involving…
August 26, 2026
Privacy Policy Update (Effective September 3, 2026)
Criminal IP will update its Privacy Policy effective September 3, 2026.This update reflects applicable laws and guidelines, current service operations, and improvements to how information regarding the processing of personal data is organized and presented. Key Updates (v1.3)…
August 24, 2026
A CVSS 10.0 Vulnerability That Can Lead to Metabase Admin Compromise: CVE-2026-72898
In August 2026, a remotely exploitable SQL Injection vulnerability affecting the open-source analytics platform Metabase, tracked as CVE-2026-72898, was disclosed. The vulnerability was assigned a CVSS score of 10.0 (Critical), and it allows attackers to inject arbitrary SQL…
August 20, 2026
VPN Vulnerability That Can Reboot Firewalls: Cisco ASA·FTD CVE-2026-20349
On August 11, 2026, Cisco warned that CVE-2026-20349, a denial-of-service (DoS) vulnerability affecting Secure Firewall ASA (Adaptive Security Appliance) and Secure Firewall Threat Defense (FTD) software, was being actively exploited in the wild. The vulnerability is rated 8.6…
August 18, 2026
Unauthenticated Server-Side Code Execution in Adobe ColdFusion: CVE-2026-48362 and Analysis of Internet-Exposed Assets
On August 11, 2026, Adobe released security update APSB26-90 to address multiple vulnerabilities identified in ColdFusion 2025 and ColdFusion 2023. The update includes vulnerabilities that could lead to arbitrary code execution, privilege escalation, security feature bypass,…
August 13, 2026
WordPress Vulnerability CVE-2026-64638: Login Page XSS to Server-Side Code Execution
In August 2026, a pre-authentication XSS vulnerability, CVE-2026-64638, was disclosed in the WordPress Core login screen. Dubbed XSS2Shell, the vulnerability originates from a Reflected XSS in the input-handling process of wp-login.php and can potentially be chained with the…
Join AI SPERA
Be part of the AI SPERA journey.
