// #network-security
6 articles
HTTP.sys CVE-2026-47291: Quantifying Wormable Risk Across the Windows Server Estate
Three days after the June Patch Tuesday, CVE-2026-47291 in HTTP.sys remains unpatched on a significant proportion of enterprise Windows Server infrastructure. This article maps the attack surface — which services expose HTTP.sys, how the worm propagation would function, and what network controls reduce the blast radius while patching is in progress.
Palo Alto Networks Patches PAN-OS Command Injection CVE-2026-0273 Across All Active Branches
Palo Alto Networks has patched CVE-2026-0273, a command injection vulnerability in the PAN-OS web management interface that allows authenticated administrators to execute arbitrary OS commands on the firewall. The vulnerability affects PAN-OS versions 10.1 through 11.2 and all active GlobalProtect gateway configurations. Updates are available across all supported branches.
VPN Gateway Security: Hardening the Network Perimeter Device That Attackers Target First
VPN gateways and remote access concentrators have become the most frequently exploited initial access vector in enterprise network intrusions. With critical vulnerabilities regularly disclosed in Palo Alto GlobalProtect, Citrix NetScaler, Fortinet FortiGate, and now Check Point Security Gateway, this guide covers the security hardening and monitoring posture that reduces exposure regardless of which vendor's appliance your organisation runs.
End-of-Life VPN Appliances: A Security Assessment Framework for Identifying Unsupportable Network Equipment
The SonicWall Generation 6 end-of-life situation is the latest instance of a recurring enterprise security problem: internet-facing network equipment that reaches vendor end-of-life while still actively exploited. A structured assessment approach helps security teams identify, prioritise, and communicate the risk of EoL perimeter equipment.
FreeBSD CVE-2026-42511 — NFS Stack Vulnerability Affecting Network Appliances and BSD-Based Storage
A new vulnerability in FreeBSD's NFS networking stack has been disclosed as CVE-2026-42511, distinct from the previously covered CVE-2026-4747 (the 17-year-old NFSv4 daemon RCE). CVE-2026-42511 affects the NFS client implementation and is exploitable by a malicious NFS server to achieve code execution on FreeBSD hosts connecting to untrusted NFS mounts — a relevant threat model for enterprise environments mounting network storage from potentially compromised infrastructure.
SonicWall CVE-2026-0204 — Authentication Bypass in SSLVPN Allows Unauthenticated Network Access
SonicWall has disclosed CVE-2026-0204, an authentication bypass vulnerability in the SonicWall SSLVPN product that allows a remote attacker to bypass VPN authentication and gain access to the protected network without valid credentials. SonicWall SSLVPN appliances are widely deployed as enterprise and SMB VPN concentrators. Patch available — update immediately.
Commentary tagged #network-security
Air-Gapping Is Not a Security Strategy — Operation Highland Proves It Never Has Been
Velvet Ant's ten-year persistence inside an air-gapped network is being reported as an extraordinary technical achievement. It isn't. It is a predictable consequence of substituting physical isolation for security architecture, and the organisations still treating air gaps as a primary control are making the same mistake that left a critical infrastructure network exposed for a decade.
CipherWatch Editorial
Security Intelligence Platform
The Smart TV Is a Network Device. Most Enterprises Have Not Noticed.
The revelation that free apps are enrolling Smart TVs as residential proxy exit nodes is not primarily a consumer privacy story. It is a network security story about a class of device that has proliferated across enterprise environments — conference rooms, executive suites, hotel rooms during business travel — without being managed as a network security asset.
CipherWatch Editorial
Security Intelligence Platform
UniFi in the Enterprise: When Prosumer Infrastructure Carries Production Risk
Three CVSS 10.0 vulnerabilities in Ubiquiti UniFi OS this week exposed a gap that has widened quietly over a decade: the growing presence of prosumer-grade networking in environments carrying enterprise data. The security posture of UniFi was not designed for the scrutiny those environments require.
CipherWatch Editorial
Security Intelligence Platform