Astra Security
Security analysis focused on real attack surfaces. We reproduce vulnerabilities, explain root causes, and clarify impact and remediation.
- CVE-2026-92580: AVideo CloneSite stored OS command injection
- CVE-2026-92729: SigNoz trace-funnel analytics exposed without authentication
- CVE-2026-63126: Wire protobuf length overflow can cause denial of service
- CVE-2026-92717: Covenant unauthenticated listener creation exposes operator APIs
- CVE-2026-76187: Apache Airflow Keycloak provider cross-client authentication bypass
- CVE-2026-78088: Contest Gallery authenticated file overwrite