Threat Intelligence Database

CVE-2026-9779 is a high-severity vulnerability in ATEN Unizon version 2.6.253.001 involving improper verification of cryptographic signatures in the updateWar method. This flaw allows authenticated remote attackers to execute arbitrary code with SYSTEM privileges. The vulnerability stems from incorrect implementation of signature verification in the doCryptoHugeFileToFile function. No official patch or remediation guidance is currently available.

CVE-2026-9778 is a high-severity path traversal vulnerability in ATEN Unizon version 2.7.262.002. It affects the ImportDeviceList method, where insufficient validation of user-supplied file paths allows authenticated remote attackers to execute arbitrary code with SYSTEM privileges. This vulnerability requires authentication to exploit and has a CVSS score of 7.2.

CVE-2026-9777 is a high-severity vulnerability in ATEN Unizon version 2.7.262.002 involving improper validation of user-supplied paths in the restoreDB method. This path traversal flaw allows authenticated remote attackers to execute arbitrary code with SYSTEM privileges. The vulnerability arises from insufficient restriction of pathname inputs used in file operations, enabling remote code execution. No official patch or remediation guidance is currently provided by the vendor.

CVE-2026-9776 is a high-severity path traversal vulnerability in ATEN Unizon version 2.7.262.002. It allows remote attackers to disclose sensitive information without authentication by exploiting improper validation of user-supplied paths in the writeFileToHttpServletResponse method. The vulnerability can lead to information disclosure with SYSTEM-level context.

CVE-2026-9775 is a medium severity vulnerability in ATEN Unizon version 2.7.262.002 involving improper validation of user-supplied paths in the uploadSSL method. This flaw allows authenticated remote attackers to delete arbitrary files, potentially causing denial-of-service conditions. The vulnerability is categorized as a path traversal issue (CWE-22). No official patch or remediation has been confirmed yet.

CVE-2026-9774 is a path traversal vulnerability in the updateLicense method of ATEN Unizon version 2.7.262.002. It allows authenticated remote attackers to delete arbitrary files on the affected system by supplying a crafted pathname that bypasses directory restrictions. This can lead to denial-of-service conditions. The vulnerability has a medium severity with a CVSS score of 5.5.