SEKurity GmbH Logo
Home/Tags/Supply Chain

#Supply Chain

2 Articles tagged

[*] Filtering articles by tag: Supply Chain
[+] Matching entries: 2
root@sekurity:~# ls -la /tags/supply-chain/* _

[?] Related tags:

#InSEKurity#CVE#N-able#N-central#Remote Code Execution
CVE Research
sekurity-team

InSEKurity of the Week (CW37/2026): N-able N-central Pre-Auth RCE via Struts BeanUtils Race (CVE-2026-86218)

Two concurrent multipart requests to an unauthenticated Struts action hand an attacker Jetty's live configuration, and from there a root-adjacent shell on the box that manages every endpoint an MSP touches. CVSS 10.0, exploited before disclosure, in CISA KEV on September 8 -- the fourth N-central hotfix in five weeks.

#InSEKurity#CVE#N-able+5
Exploit
01
CVE Research
sekurity-team

InSEKurity of the Week (CW36/2026): JFrog Artifactory Authentication Bypass to Admin (CVE-2026-82329)

A default-configuration authentication weakness in JFrog Artifactory lets an unauthenticated attacker mint administrator tokens. Patched on August 28, exploited in the wild by September 1, in CISA KEV by September 2 -- and the box it compromises is the one your entire build pipeline trusts.

#InSEKurity#CVE#JFrog+4
Exploit
02

root@sekurity:~# echo "End of results for tag: Supply Chain"
End of results for tag: Supply Chain
root@sekurity:~# _