Research topic
Network Security
Switches, firewalls and authentication infrastructure.
2026
Oct 16October
Chaining a replayed login into full control of a home camera
Three flaws in a popular home camera combine into one path: replay a login, take an admin session, then inject commands into a diagnostic service. Here is how the chain works and how to shut it down.OS command executionCVE-2026-102369CVE-2026-15315CVE-2026-15316Mar 25March
From a lobby account to a switch that will not boot: four Catalyst 9300 CVEs
A low-privilege web account on an enterprise access switch can climb one privilege level and then push the device into maintenance mode, where it may need someone on site to recover it.thanhlocpandaOPSWAT Unit 5151 min readPersistent DoSCVE-2026-20110Feb 26February
Testing public exploit claims for an SSO authentication bypass
Public proofs of concept for a widely reported SSO bypass did not work, so we rebuilt the conditions in the lab to find out what an attacker really needs.Authentication bypass
First Network Security publication · February 2026