See what we're thinking about, working on, & blogging about.

Explore the latest insights, ideas, & opinions from our talented team of experts & researchers.

Lights Out: The server in your server, exposed and disclosed runZero Research

runZero discloses critical authentication bypass and privilege escalation flaws in OpenBMC IPMI implementations. Here’s what you need to know.

Subscribe Now

Get our latest Rapid Responses, insights, and blogs delivered directly to your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

Rapid Response
How to find GitLab instances
September 11, 2026
GitLab disclosed a vulnerability affecting self-managed installations of GitLab CE and EE. Here's how to find potentially vulnerable systems.
Rapid Response
How to find N-able N-central installations on your network
September 9, 2026
N-able has disclosed two vulnerabilities in certain versions of N-central. Here's how to find affected assets.
Rapid Response
How to find MikroTik RouterOS systems on your network
September 7, 2026
MikroTik disclosed multiple vulnerabilities affecting certain versions of the RouterOS. Here's how to find affected systems with runZero.
Rapid Response
How to find SonicWall devices on your network
September 3, 2026
SonicWall disclosed versions of the SMA1000 series appliances are susceptible to both SSRF & RCE vulnerabilities. Here's how to find impacted devices.
Rapid Response
How to find Plex Media Server installations on your network
September 2, 2026
Plex has issued a security update addressing multiple undisclosed vulnerabilities across Plex Media Server & Plex Desktop. Find impacted assets...
Rapid Response
How to find PaperCut Software instances on your network
August 31, 2026
Certain versions of PaperCut NG and PaperCut MF are affected by two vulnerabilities. Here's how to find impacted assets with runZero.
runZero Perspective
Simmering in the hot alphabet soup of vuln management
August 27, 2026
Between CVEs, CPEs, and CISA's Vulnrichment, vulnerability management is an alphabet soup. NIST wants your expert input on using AI to fix NVD...
Rapid Response
How to find Ubiquiti UniFi OS assets on your network
August 26, 2026
Ubiquiti disclosed multiple vulnerabilities affecting certain versions of the UniFi OS. Here's how to find affected assets with runZero.
Rapid Response
How to find Ubiquiti UniFi Protect assets on your network
August 26, 2026
Ubiquiti disclosed multiple vulnerabilities affecting certain versions of the UniFi Protect Application. Here's how to find affected assets.
Rapid Response
How to find Citrix NetScaler ADC & Gateway instances on your network
August 26, 2026
Citrix published Security Bulletin CTX696939, documenting two vulnerabilities that impact customer-managed installations of NetScaler ADC and...
Rapid Response
How to find Gitea installations on your network
August 25, 2026
Gitea disclosed that certain versions of Gitea are affected by a RCE vulnerability within the diffpatch feature. Here's how to find affected assets.
Rapid Response
How to find Zimbra installations on your network
August 24, 2026
Zimbra discloses critical unauthenticated RCE flaw CVE-2026-73570 (CVSS 8.9). Learn how SMTP snmp_notify exploits occur and upgrade to 10.1.20...