A flaw in FortiOS and FortiSASE’s OSPF routing daemon lets an unauthenticated sender on the network trigger a link-state broadcast without any login, bypassing authentication at the protocol level rather than through the admin interface.
Two things live here.
Advisories — a running brief on the vulnerabilities that matter to people running network and edge infrastructure. Every CISA KEV addition, plus critical flaws in firewalls, VPN gateways, routers and management planes. What it is, what to do about it, and what to tell your leadership — in that order. Sources and the checks every post passes are set out in the methodology.
The workshop — longer write-ups from a home lab: virtualisation, self-hosted AI image and speech generation, build automation, and the things that broke on the way. Slower, and considerably less urgent.
Latest advisories
Authorization bypass through user-controlled key in dmserver
A logged-in administrator on FortiManager or FortiAnalyzer can send crafted HTTP requests to dmserver and reach other VDOMs beyond their assigned scope, undermining the tenant and department isolation these platforms rely on.
FGFM elevation before registration password is verified
An unauthenticated attacker who can reach FortiManager’s FGFM port can execute code before the registration password is even checked, putting the device that manages your whole FortiGate fleet at risk.
Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
Barracuda Networks Email Security Gateway (ESG) contains an authentication bypass using an alternate path or channel that could allow an unauthenticated remote attacker to invoke a …
Barracuda Networks Multiple Products OS Command Injection Vulnerability
Barracuda Networks Email Security Gateway (ESG), Load Balancer, Application Delivery Controller (ADC), Message Archiver (BMA), WAF Control Center (WCC), Web Application Firewall (WAF), and Web …
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
An unauthenticated attacker can send a crafted XML request to BroadWorks’ OCI-P provisioning service and read arbitrary files off the server, with no login or user interaction needed.
From the workshop
Three AI reviews of the same project, and where they disagreed
I gave three AI models the same data about a project of mine and asked each, separately, why it was not growing. The consensus turned out to be the least useful part.
Auditing a homelab after it breaks: what the documentation got wrong
After a failure I went through my own infrastructure line by line and compared it to my notes. Six things were wrong, and all six were wrong in the same direction.
Proxmox on a second-hand workstation
Why an old dual-socket workstation beats a mini PC for a home hypervisor, and the three decisions that determine whether the thing is still running in a year.