Tag
8 articles tagged #Networking.
P.01A heap-buffer bug in Progress Kemp LoadMaster's escape_quotes() function lets an unauthenticated attacker run commands on the load balancer itself. CISA confirmed active exploitation on August 7. Here's what's affected and how to patch it.
P.02CISA added CVE-2025-68686, a FortiOS bypass of the SSL-VPN symlink persistence patch, to its KEV catalog on July 27. It only matters if a device was ever compromised through an older Fortinet bug and never forensically cleaned.
P.03CISA added CVE-2026-16812, an unauthenticated OS command injection in Arista VeloCloud Orchestrator scored a maximum 10.0 CVSS, to its Known Exploited Vulnerabilities catalog on July 27. Here's who's affected, what's patched, and what to check first.
P.04CVE-2026-20262 lets an authenticated attacker write files on Catalyst SD-WAN Manager and escalate to root. It's in CISA's KEV catalog with the deadline already passed. Here's who's affected and what to patch.
P.05Round robin isn't wrong, but it's the wrong default more often than teams realize. Here's how the main load balancing algorithms actually behave under uneven traffic, when each one earns its complexity, and a working consistent hashing implementation.
P.06Three maximum-severity UniFi OS flaws chain into unauthenticated root code execution and are being exploited in the wild by a Mirai-derived botnet. Here's what's affected, how the chain works, and how to patch it today.
P.07Tailscale creates a private mesh network across any combination of cloud servers, developer laptops, and office machines — without port forwarding, firewall rules, or dedicated VPN hardware.
P.08HTTP/3 is in production at every major CDN and supported by all modern browsers. Whether it actually helps your application depends on factors most guides don't explain.