Threat Intelligence Database

CVE-2026-9779 is a high-severity vulnerability in ATEN Unizon version 2.6.253.001 involving improper verification of cryptographic signatures in the updateWar method. This flaw allows authenticated remote attackers to execute arbitrary code with SYSTEM privileges. The vulnerability stems from incorrect implementation of signature verification, enabling code execution in a highly privileged context.

CVE-2026-9778 is a high-severity path traversal vulnerability in ATEN Unizon version 2.7.262.002. It affects the ImportDeviceList method, where insufficient validation of user-supplied paths allows authenticated remote attackers to execute arbitrary code with SYSTEM privileges. The vulnerability requires authentication to exploit and can lead to full system compromise.

CVE-2026-9777 is a high-severity path traversal vulnerability in ATEN Unizon version 2.7.262.002. It affects the restoreDB method, where improper validation of user-supplied paths allows authenticated remote attackers to execute arbitrary code with SYSTEM privileges. The vulnerability requires authentication to exploit and can lead to full system compromise. No official patch or remediation has been confirmed yet.

CVE-2026-9776 is a high-severity path traversal vulnerability in ATEN Unizon version 2.7.262.002. It allows remote attackers to disclose sensitive information without authentication by exploiting improper validation of user-supplied paths in the writeFileToHttpServletResponse method. The vulnerability can lead to information disclosure with SYSTEM-level context.

CVE-2026-9775 is a medium severity vulnerability in ATEN Unizon version 2.7.262.002. It involves a path traversal flaw in the uploadSSL method that allows authenticated remote attackers to delete arbitrary files on the affected system. This occurs due to insufficient validation of user-supplied paths before file operations, potentially leading to denial-of-service conditions.

CVE-2026-9774 is a path traversal vulnerability in the updateLicense method of ATEN Unizon version 2.7.262.002. It allows authenticated remote attackers to delete arbitrary files on the affected system by supplying a crafted pathname that bypasses directory restrictions. This can lead to denial-of-service conditions. The vulnerability has a medium severity with a CVSS score of 5.5.