CVE-2026-9779

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-9779", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "state": "PUBLISHED", "assignerShortName": "zdi", "dateReserved": "2026-05-27T22:19:45.945Z", "datePublished": "2026-06-24T21:37:16.409Z", "dateUpdated": "2026-06-25T13:10:35.745Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2026-06-24T21:37:16.409Z"}, "title": "ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability", "descriptions": [{"lang": "en", "value": "ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the updateWar method. The issue results from an incorrect implementation of cryptographic signature verification. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-28590."}], "affected": [{"vendor": "ATEN", "product": "Unizon", "versions": [{"version": "2.6.253.001", "status": "affected"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-347", "description": "CWE-347: Improper Verification of Cryptographic Signature", "type": "CWE"}]}], "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-383/", "name": "ZDI-26-383", "tags": ["x_research-advisory"]}, {"url": "https://www.aten.com/global/en/supportcenter/info/security-advisory/32/", "name": "vendor-provided URL", "tags": ["vendor-advisory"]}], "dateAssigned": "2026-05-27T22:19:46.013Z", "datePublic": "2026-06-24T20:25:34.586Z", "source": {"lang": "en", "value": "Ahmed Y. Elmogy"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-25T13:10:28.104178Z", "id": "CVE-2026-9779", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-25T13:10:35.745Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability", "source": {"lang": "en", "value": "Ahmed Y. Elmogy"}, "metrics": [{"format": "CVSS", "cvssV3_0": {"version": "3.0", "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "ATEN", "product": "Unizon", "versions": [{"status": "affected", "version": "2.6.253.001"}], "defaultStatus": "unknown"}], "datePublic": "2026-06-24T20:25:34.586Z", "references": [{"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-383/", "name": "ZDI-26-383", "tags": ["x_research-advisory"]}, {"url": "https://www.aten.com/global/en/supportcenter/info/security-advisory/32/", "name": "vendor-provided URL", "tags": ["vendor-advisory"]}], "dateAssigned": "2026-05-27T22:19:46.013Z", "descriptions": [{"lang": "en", "value": "ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the updateWar method. The issue results from an incorrect implementation of cryptographic signature verification. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-28590."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-347", "description": "CWE-347: Improper Verification of Cryptographic Signature"}]}], "providerMetadata": {"orgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "shortName": "zdi", "dateUpdated": "2026-06-24T21:37:16.409Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-9779", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-25T13:10:28.104178Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-06-25T13:10:32.012Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-9779", "state": "PUBLISHED", "dateUpdated": "2026-06-24T21:37:16.409Z", "dateReserved": "2026-05-27T22:19:45.945Z", "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e", "datePublished": "2026-06-24T21:37:16.409Z", "assignerShortName": "zdi"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Unizon", "vendor": "ATEN", "versions": [{"status": "affected", "version": "2.6.253.001"}]}], "source": "zdi-disclosures@trendmicro.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:aten:unizon:*:*:*:*:*:*:*:*", "matchCriteriaId": "100AF252-A730-46A9-ADA3-A5DCF3C0C5EF", "versionEndExcluding": "2.7.264", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the updateWar method. The issue results from an incorrect implementation of cryptographic signature verification. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-28590."}, {"lang": "es", "value": "Vulnerabilidad de Ejecuci\u00f3n Remota de C\u00f3digo por Verificaci\u00f3n Incorrecta de Firma Criptogr\u00e1fica en ATEN Unizon doCryptoHugeFileToFile. Esta vulnerabilidad permite a atacantes remotos ejecutar c\u00f3digo arbitrario en instalaciones afectadas de ATEN Unizon. Se requiere autenticaci\u00f3n para explotar esta vulnerabilidad.\n\nLa falla espec\u00edfica reside en el m\u00e9todo updateWar. El problema se debe a una implementaci\u00f3n incorrecta de la verificaci\u00f3n de firma criptogr\u00e1fica. Un atacante puede aprovechar esta vulnerabilidad para ejecutar c\u00f3digo en el contexto de SYSTEM. Fue ZDI-CAN-28590."}], "id": "CVE-2026-9779", "lastModified": "2026-10-25T23:10:00.167", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-9779", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-06-25T13:10:28.104178Z", "version": "2.0.3"}}]}, "published": "2026-06-24T22:16:50.590", "references": [{"source": "zdi-disclosures@trendmicro.com", "tags": ["Vendor Advisory"], "url": "https://www.aten.com/global/en/supportcenter/info/security-advisory/32/"}, {"source": "zdi-disclosures@trendmicro.com", "tags": ["Third Party Advisory"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-26-383/"}], "sourceIdentifier": "zdi-disclosures@trendmicro.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-347"}], "source": "zdi-disclosures@trendmicro.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.6.253.001"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Unizon", "source": "cna", "vendor": "ATEN"}, "product": "unizon", "vendor": "aten"}], "created": "2026-06-24T22:30:15.381821+00:00", "updated": "2026-06-26T09:40:02.188678+00:00", "vendors": ["aten", "aten$PRODUCT$unizon"]}