PatchSiren

ATEN CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH ATEN CVE published 2026-06-24

CVE-2026-9779

CVE-2026-9779 ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The vulnerability exists within the updateWar method due to an incorrect implementation of cryptographic [truncated]

HIGH ATEN CVE published 2026-06-24

CVE-2026-9778

CVE-2026-9778 ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The vulnerability exists within the ImportDeviceList method due to lack of proper validation of a user-supplied path prior to using it in f [truncated]

HIGH ATEN CVE published 2026-06-24

CVE-2026-9777

CVE-2026-9777 ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon, requiring authentication. The vulnerability exists within the restoreDB method due to improper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute c [truncated]

HIGH ATEN CVE published 2026-06-24

CVE-2026-9776

CVE-2026-9776 ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability. Remote attackers can disclose sensitive information on affected installations of ATEN Unizon without authentication. The flaw exists within the writeFileToHttpServletResponse method, caused by the lack of proper validation of a user-supplied path prior to using it in file operations. Attacker [truncated]

MEDIUM ATEN CVE published 2026-06-24

CVE-2026-9775

CVE-2026-9775 ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability allows remote attackers with authentication to delete arbitrary files, potentially creating a denial-of-service condition. The vulnerability exists within the uploadSSL method due to improper validation of user-supplied paths. Defenders should assess exposure, prioritize remediation, and verify affected versions [truncated]

MEDIUM ATEN CVE published 2026-06-24

CVE-2026-9774

CVE-2026-9774: ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The vulnerability exists within the updateLicense method due to improper validation of user-supplied paths. An attacker can leverage this v [truncated]