{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/zerotier/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:zerotier:vpn:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-105979"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CVE-2026-105979\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["ZeroTier VPN"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["ZeroTier"],"content_html":"\u003cp\u003eImproper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges. The CVSS v3.1 Base Score for this vulnerability is 7.2.\u003c/p\u003e\n","date_modified":"2026-11-03T12:09:12Z","date_published":"2026-11-03T09:56:54Z","id":"https://feed.craftedsignal.io/briefs/2026-11-zerotier-rce/","summary":"An improper input validation vulnerability in the ZeroTier VPN function allows a remote attacker with high privileges to inject and execute system commands with root privileges.","title":"ZeroTier: Command injection via improper input validation (CVE-2026-105979)","url":"https://feed.craftedsignal.io/briefs/2026-11-zerotier-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - ZeroTier","version":"https://jsonfeed.org/version/1.1"}