ZeroTier VPN - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/zerotier-vpn/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 03 Nov 2026 09:56:54 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgZeroTier: Command injection via improper input validation (CVE-2026-105979)https://feed.craftedsignal.io/briefs/2026-11-zerotier-rce/Tue, 03 Nov 2026 09:56:54 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-zerotier-rce/An improper input validation vulnerability in the ZeroTier VPN function allows a remote attacker with high privileges to inject and execute system commands with root privileges.<p>Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges. The CVSS v3.1 Base Score for this vulnerability is 7.2.</p> highadvisory