Decision Insights Threat Desk

CISA’s update on CVE-2026-10629 says Verizon IMS SIP signaling for VoLTE omits IPsec ESP integrity, leaving REGISTER, INVITE, MESSAGE, BYE, and UPDATE traffic unprotected. The advisory cites expected 3GPP TS 33.203 and GSMA IR.92 behavior and notes Verizon’s “currently available” integrity support statement for later rollout.

CVE-2026-8501 affects PCTCore64.sys, letting user-mode processes access the PCTCoreDriver interface and invoke privileged IOCTLs.

Casdoor versions 2.362.0 and earlier face multiple SAML and token exchange flaws enabling authentication bypass and privilege escalation.

Dirty Frag affects Linux kernel 4.10+ by chaining xfrm-ESP and RxRPC page-cache flaws, enabling privilege escalation.

SGLang has two unauthenticated RCE issues and one unauthenticated path traversal tied to specific configs and endpoints.

Casdoor’s Local File System provider lets authenticated upload users traverse paths and write arbitrary files outside $CASDOOR/files/ via /api/upload-resource.