CVE-2026-9779

ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability. The specific flaw exists within the updateWar method. The issue results from an incorrect implementation of cryptographic signature verification. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-28590.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.aten.com/global/en/supportcenter/info/security-advisory/32/	Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-26-383/	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:aten:unizon:*:*:*:*:*:*:*:*

History

25 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Vulnerabilidad de Ejecución Remota de Código por Verificación Incorrecta de Firma Criptográfica en ATEN Unizon doCryptoHugeFileToFile. Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de ATEN Unizon. Se requiere autenticación para explotar esta vulnerabilidad. La falla específica reside en el método updateWar. El problema se debe a una implementación incorrecta de la verificación de firma criptográfica. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de SYSTEM. Fue ZDI-CAN-28590.

Information

Published : 2026-06-24 22:16

Updated : 2026-10-25 23:10

NVD link : CVE-2026-9779

Mitre link : CVE-2026-9779

CVE.ORG link : CVE-2026-9779

JSON object : View

Products Affected

aten

unizon

CWE

CWE-347

Improper Verification of Cryptographic Signature

{"id": "CVE-2026-9779", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-9779", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-25T13:10:28.104178Z"}}], "cvssMetricV30": [{"type": "Secondary", "source": "zdi-disclosures@trendmicro.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "affected": [{"source": "zdi-disclosures@trendmicro.com", "affectedData": [{"vendor": "ATEN", "product": "Unizon", "versions": [{"status": "affected", "version": "2.6.253.001"}], "defaultStatus": "unknown"}]}], "published": "2026-06-24T22:16:50.590", "references": [{"url": "https://www.aten.com/global/en/supportcenter/info/security-advisory/32/", "tags": ["Vendor Advisory"], "source": "zdi-disclosures@trendmicro.com"}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-26-383/", "tags": ["Third Party Advisory"], "source": "zdi-disclosures@trendmicro.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "zdi-disclosures@trendmicro.com", "description": [{"lang": "en", "value": "CWE-347"}]}], "descriptions": [{"lang": "en", "value": "ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ATEN Unizon. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the updateWar method. The issue results from an incorrect implementation of cryptographic signature verification. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-28590."}, {"lang": "es", "value": "Vulnerabilidad de Ejecuci\u00f3n Remota de C\u00f3digo por Verificaci\u00f3n Incorrecta de Firma Criptogr\u00e1fica en ATEN Unizon doCryptoHugeFileToFile. Esta vulnerabilidad permite a atacantes remotos ejecutar c\u00f3digo arbitrario en instalaciones afectadas de ATEN Unizon. Se requiere autenticaci\u00f3n para explotar esta vulnerabilidad.\n\nLa falla espec\u00edfica reside en el m\u00e9todo updateWar. El problema se debe a una implementaci\u00f3n incorrecta de la verificaci\u00f3n de firma criptogr\u00e1fica. Un atacante puede aprovechar esta vulnerabilidad para ejecutar c\u00f3digo en el contexto de SYSTEM. Fue ZDI-CAN-28590."}], "lastModified": "2026-10-25T23:10:00.167", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:aten:unizon:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "100AF252-A730-46A9-ADA3-A5DCF3C0C5EF", "versionEndExcluding": "2.7.264"}], "operator": "OR"}]}], "sourceIdentifier": "zdi-disclosures@trendmicro.com"}