Our Vulnerability Research

Common Vulnerabilities and Exposures

SAP security alert for CVE-2025-24870 indicating a critical threat level for insecure secrets management exposing plaintext credentials and access to banking transactions and enterprise data.

What This Vulnerability Research Portfolio Represents

Discoveries That Matter

Our vulnerability research team reverse engineers your enterprise software to find the 0-days that threaten your infrastructure - before attackers do.

Enterprise Focus

The vulnerabilities below affect systems organizations use: SAP. IBM. Check Point. F5. BMC. Microsoft. Rapid7. Cyberark.

Logos of five technology companies: IBM, Check Point, Microsoft, SAP, and CyberArk on a black background.

Current Research

We identified a wide range of CVEs across various industries - each of the vulnerabilities have been assigned a threat level ranging from critical to low. We pride ourselves in beating others to identify critical CVEs in large infrastructure for orgasations such as IBM and Microsoft.

Sort by Threat level
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
CVE-2026-8997
Threat level
Medium

Heap Buffer Overflow in vifm History Merge via Crafted vifminfo.json

See more
CVE-2026-8295
Threat level
Medium

Integer Overflow in simdjson Leading to Out-of-Bounds Read

See more
CVE-2026-6956
Threat level
Medium

Reflected Cross-Site Scripting in ATutor /install/install.php

See more
CVE-2026-6909
Threat level
Medium

Reflected Cross-Site Scripting in ATutor /install/upgrade.php

See more
CVE-2026-6842
Threat level
Low

Insecure Directory Permissions in GNU nano Leading to Privilege Abuse

See more
CVE-2026-5958
Threat level
Low

Race Condition in GNU Sed

See more
CVE-2026-42250
Threat level
Medium

bzip2recover Off-by-One Error Leading to Global Buffer Overflow

See more
CVE-2026-40127
Threat level
Medium

Authorization Bypass Through User-Controlled Key in OutSystems Lifetime

See more
CVE-2026-35177
Threat level
Medium

Path traversal in Vim < v9.2.0280

See more
CVE-2026-33866
Threat level
Medium

Authorization Bypass in MLflow AJAX Endpoint

See more
CVE-2026-33865
Threat level
Medium

Stored XSS via unsafe YAML parsing in MLflow

See more
CVE-2026-20732
Threat level
Low

F5 BIG-IP Configuration Utility - Reflected Content Injection

See more
CVE-2025-9190
Threat level
Medium

TCC bypass via misconfigured Node fuses in Cursor AI code editor allows unauthorized access to protected macOS resources

See more
CVE-2025-8700
Threat level
Medium

Privilege escalation via get-task-allow entitlement in Invoice Ninja allows attackers to debug and manipulate the application process on macOS

See more
CVE-2025-8672
Threat level
Medium

TCC bypass via inherited permissions in bundled Python interpreter in GIMP.app allows scripts to access protected resources

See more

We map your systems before testing how they break.

That's why critical findings usually show up outside the original scope - attackers don't respect scope documents.

Book a consultation
arrow_right [#333] Created with Sketch.

Security Assessment Services FAQ

Questions enterprise security teams ask before partnering with AFINE for security assessments.

Is AFINE ISO 27001 certified and what compliance frameworks do you support?

Yes, AFINE is ISO 27001 certified. Beyond certification, we maintain operational security excellence built through 10 years of enterprise work. Our security assessment services support DORA, PCI DSS, SOC 2, ISO 27001, TIBER-EU, NESA, and FCA compliance. We've conducted hundreds of assessments for regulated institutions like PKO BP, ING Bank, and BGK.

What certifications and specialized expertise does AFINE team hold?

Every team member holds minimum OSCP or eWPTX certification. Our researchers average 7-10 years offensive security experience with OSCE, OSWE, OSED, OSEP, CRTO, CSSA, CISSP, CISA, and BSCP certifications. We've published CVEs in SAP, Microsoft, CyberArk, Palo Alto, F5, IBM, and other enterprise software.

What makes AFINE different from other penetration testing vendors?

We've published 150+ CVEs in enterprise software and understand how attackers exploit complex systems beyond automated scanning. Our manual testing finds business logic flaws and attack chains others miss. Isabel Group confirmed we "keep finding critical issues where other pentesters have not found them." Our 10-year exclusive focus on banking, critical infrastructure, and healthcare environments means we understand compliance and production system safety.