Vulnerability Analysis
Struts2 OGNL injection RCE (CVE-2018-11776)
CVE-2018-11776 lets remote attackers achieve full RCE in Apache Struts2 via OGNL injection in URL namespaces. Impact, timeline, and fixes inside.
Jan 18, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedVulnerability Analysis
OpenSSL CVE-2022-3602: The Critical That Wasn't (But Still Matters)
OpenSSL pre-announced a critical vulnerability that was later downgraded to high severity. The incident revealed as much about our processes as the bug itself.
Jan 17, 20266 min read
Vulnerability Analysis
PHP-FPM/Nginx path disclosure RCE (CVE-2019-11043)
CVE-2019-11043 let attackers gain unauthenticated RCE on PHP-FPM/Nginx stacks via a PATH_INFO underflow. Here's the impact, timeline, and fixes.
Jan 17, 20267 min read
Vulnerability Analysis
Ghostcat Apache Tomcat AJP file read/RCE (CVE-2020-1938)
CVE-2020-1938 'Ghostcat' exposes Apache Tomcat's AJP connector to file read and RCE. Here's the ghostcat tomcat AJP vulnerability impact and how to fix it.
Jan 17, 20267 min read
Vulnerability Analysis
ProxyLogon Microsoft Exchange RCE chain (CVE-2021-26855)
A deep dive into ProxyLogon (CVE-2021-26855 and chain): the unauthenticated Exchange RCE that enabled HAFNIUM and mass ransomware attacks.
Jan 17, 20267 min read
Vulnerability Analysis
PrintNightmare Windows Print Spooler RCE (CVE-2021-34527)
A critical Print Spooler flaw (CVE-2021-34527) enabled unauthenticated SYSTEM-level RCE on nearly every Windows host. Here's what happened and how to fix it.
Jan 17, 20268 min read
Vulnerability Analysis
WinRAR CVE-2025-0411 Mark-of-the-Web Bypass
CVE-2025-0411 lets WinRAR archives bypass Windows Mark-of-the-Web when extracted. Here is the flaw, the observed campaigns, and the patching path.
Jan 17, 20267 min read
Vulnerability Analysis
Text4Shell (CVE-2022-42889): Apache Commons Text and the Haunting Echo of Log4Shell
A critical RCE vulnerability in Apache Commons Text drew immediate comparisons to Log4Shell. While less severe in practice, it highlighted how deeply embedded utility libraries create systemic risk.
Jan 16, 20266 min read
Vulnerability Analysis
F5 BIG-IP iControl REST RCE (CVE-2022-1388)
A critical iControl REST auth bypass let attackers gain root RCE on BIG-IP within days of disclosure. Impact, KEV status, timeline, and fixes.
Jan 16, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.