CVE-2026-9779

ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateWar method. The issue results from an incorrect implementation of cryptographic signature verification. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-28590.

• CWE-347

• https://www.aten.com/global/en/supportcenter/info/security-advisory/32/Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-26-383/Third Party Advisory

Published

Jun 24, 2026

Last Modified

Jun 27, 2026

Status

Analyzed

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-97781Improper neutralization of special elements used in a comman…8.8
• CVE-2026-97782Observable discrepancy in Microsoft Office SharePoint allows…6.8
• CVE-2026-97783Improper neutralization of input during web page generation …6.1
• CVE-2026-97787Concurrent execution using shared resource with improper syn…7
• CVE-2026-97788Observable discrepancy in Active Directory Federation Servic…7.5
• CVE-2026-97789Use after free in Remote Desktop Client allows an unauthoriz…7.5
• CVE-2026-97790Improper link resolution before file access ('link following…5.5
• CVE-2026-97791In Apache CXF, STSTokenValidator checks whether a SAML asser…7.5
• CVE-2026-97792Improper access control in Windows Container Isolation FS Fi…7.8
• CVE-2026-97793Missing authentication for critical function in Windows Setu…7
• CVE-2026-97794Heap-based buffer overflow in Windows Container Isolation FS…7.8
• CVE-2026-97798Improper neutralization of argument delimiters in a command …7.8