CVE-2026-9779
Last modified
CVE-2026-9779 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateWar method. The issue results from an incorrect implementation of cryptographic signature verification. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-28590.
Metrics
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Aten | Unizon | < 2.7.264 |
References
- https://www.zerodayinitiative.com/advisories/ZDI-26-383/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-9779?
How severe is CVE-2026-9779?
How do I fix CVE-2026-9779?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-9773Unraid Web Server ToggleState Command Injection Remote Code …8.8
- CVE-2026-9774ATEN Unizon updateLicense Directory Traversal Arbitrary File…6.5
- CVE-2026-9775ATEN Unizon uploadSSL Directory Traversal Arbitrary File Del…6.5
- CVE-2026-9776ATEN Unizon writeFileToHttpServletResponse Directory Travers…7.5
- CVE-2026-9777ATEN Unizon restoreDB Directory Traversal Remote Code Execut…7.2
- CVE-2026-9778ATEN Unizon ImportDeviceList Directory Traversal Remote Code…7.2
- CVE-2026-9780Quest NetVault Backup addclient3 Cross-Site Scripting Authen…8.8
- CVE-2026-9781Quest NetVault Backup NVBURASDevice SQL Injection Remote Cod…8.8
- CVE-2026-9782Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote C…8.8
- CVE-2026-9783Quest NetVault Backup NVBURemovableMedia SQL Injection Remot…8.8
- CVE-2026-9784Quest NetVault Backup NVBULibraryPort SQL Injection Remote C…8.8
- CVE-2026-9785Quest NetVault Backup NVBULibrarySlot SQL Injection Remote C…8.8
Are you affected by CVE-2026-9779?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST