Threat Research - Safe Security
SAFE Named a Leader in the 2026 IDC MarketScape for TPRM. Get the Report →
Book a demo

Threat Research

Threat Research CVE-2026-87902 WordPress: Unauthenticated Path Traversal Leading to Conditional RCE 1. Introduction CVE-2026-87902 is an unauthenticated path traversal vulnerability in WordPress page-template resolution. Under specific theme and server conditions, a remote attacker can include a readable local PHP… SAFE Safe Security Oct 7, 2026 8 min read
Threat Research CVE-2026-63077 : JetBrains TeamCity On-Premises – Unauthenticated Remote Code Execution via Agent Polling Deserialization 1. Introduction This document illustrates an unauthenticated Remote Code Execution (RCE) vulnerability in JetBrains TeamCity On-Premises – the widely deployed commercial Continuous Integration and Continuous Delivery (CI/CD) server… SAFE Safe Security Oct 6, 2026 9 min read
Threat Research CVE-2026-62201 OpenClaw: Sandbox Exec-Server SSRF and Network Policy Bypass 1. Introduction This article examines a Server-Side Request Forgery (SSRF) and network policy bypass in OpenClaw, a local-first AI assistant platform that supports execution through sandboxed backends. Tracked… SAFE Safe Security Oct 5, 2026 9 min read
Threat Research CVE-2026-34486 | Apache Tomcat: EncryptInterceptor Bypass to Remote Code Execution 1. Introduction This article examines a Missing Encryption of Sensitive Data vulnerability in Apache Tomcat, a widely deployed open-source Java servlet container. The flaw allows an attacker with… SAFE Safe Security Oct 2, 2026 9 min read
Threat Research This Week’s CVE Priorities: Citrix, Check Point, F5, Cisco, and PeopleSoft Under Active Exploitation By SAFE Threat Research Team This week’s highest-priority vulnerabilities are concentrated across technologies that sit at critical enterprise trust boundaries, including application delivery, remote access, network management, and… SAFE Safe Security Oct 1, 2026 9 min read
Threat Research CVE-2026-49049 | JoomShaper Helix3 (Joomla) – Unauthenticated Arbitrary JSON File Write 1. Introduction This document illustrates an unauthenticated arbitrary file write vulnerability in JoomShaper’s Helix3 template framework for Joomla — a widely adopted front-end framework used by tens of… SAFE Safe Security Sep 30, 2026 8 min read