Blog · 2 posts
#remote-access
- News · Oct 26, 2026Tailscale SSH forwarding flaws let permitted sessions reach root-only sockets
Tailscale published four security bulletins on October 26, fixed in 1.104.4. The worst, TS-2026-014, let an authenticated Tailscale SSH peer allowed to forward ports reach root-only sockets such as Docker or the tailscaled local API.
- News · Oct 7, 2026SonicWall SMA1000 gets a third CVSS 10 pre-auth SSRF this year
CVE-2026-102255 lets an unauthenticated attacker use an unintended access path in the SMA1000 WorkPlace interface to reach internal functions. CVSS 10.0, fixed in 12.4.3-03670 and 12.5.0-03082, with no workaround.