en
CyStack enables early vulnerability detection, robust data protection, and secure operations - giving you the confidence to scale.
Years of Expertise
Secured Clients Across Web2 & Web3
Threats Prevented Before Exploitation
Digital Assets Protected
Monitoring and Response
Every business depends on its data and systems, no matter its size. Threats can come from inside the organization or outside it.
We provided end‑to‑end security for prevention, detection, and response - tailored to your business size.
Security package by tiersData and systems protectionDeployment within 1-2 weeksSimple & intuitive operationRisk detection & response
Specialized products and services24/7 monitoring and responseDetect complex security risksSeamless integrate Jira/Slack/SSO/SIEMMeet strict compliance & standards
Centralized platform powering CyStack’s solution ecosystem, enabling real-time risk detection and tracking.
Learn more about CyStack PlatformSpeakers at top conferences; honored on the hall of fame of IBM, Microsoft, NASA...; multi-industry experience.
CyStack researchUnderstand systems as deeply as developers, identify real-world risks, propose optimal operational solutions and support patching.
Open‑source contributionsLeverage the power of a community of 4,000+ bug bounty experts to detect and fix vulnerabilities up to 3.5 times more efficiently.
Learn more about WhiteHubWe adhere to leading security standards to ensure safety, consistency, and trust.
CyStack security experts work with many large software vendors
and organizations worldwide to patch serious vulnerabilities.
CVE-2026-77524CriticalCVSS 9.9KEDA never validated the HashiCorp Vault address a tenant sets in a TriggerAuthentication object, so a tenant could point it at a fake Vault server in their own namespace and make the operator send…
KEDA
CVE-2026-60300CriticalCVSS 9.8It is easily exploitable by a completely unauthenticated attacker who can reach the product over TCP, and a successful attack results in full takeover of Oracle Coherence, letting the attacker read,…
Oracle CoherenceOracle
CVE-2026-44024CriticalCVSS 9.8When a path is built dynamically from the ${tag} placeholder, Fluentd does not sanitize the tag, so a record routed from an untrusted source can inject path-traversal sequences (../) and escape the…
Fluentd
CVE-2026-8715CriticalCVSS 9.6The operator allowed a VaultAuth resource to name a file on disk holding the AppRole secret ID (`spec.appRole.secretIDPath`); it rejected path-traversal sequences and checked that the target was a…
Vault Secrets OperatorHashiCorp
GHSA-fq2f-crmw-q97rHighCVSS 8.8Since the Lua engine became a module in the 9.1 line, the debugger builds its command table once and caches a raw pointer to the current Lua interpreter state, and that cache is never invalidated.…
Valkey
CVE-2026-64364HighCVSS 8.8The driver kept every contact slot's active state in the bits of a single `unsigned long`, but indexed those bits using `ContactCountMaximum`, a value supplied by the device that can reach 255 rather…
Linux kernelLinux Kernel Organization
CVE-2026-42055HighCVSS 8.1When NGINX proxies traffic to an HTTP/2 backend (proxy_http_version 2 or grpc_pass), a remote, unauthenticated attacker can send oversized request headers that overrun a heap buffer while NGINX…
NGINXF5
CVE-2026-40691HighCVSS 7.5The routine that encrypts DNSCrypt replies in place fails to bound the reply length against the destination buffer: the size clamp that protects the UDP path is not applied on the TCP path, so a…
UnboundNLnet Labs
Tung Nguyen
Head of Product Security, One Mount
