andreagomez

IT and cybersecurity enthusiast. I enjoy tinkering with networks, systems, and security tools — and documenting what I learn along the way.

Joined on Oct 15, 2026

andreagomez

Oct 19

Verifying That CVE-2026-96369 Is Actually Fixed on Each Drupal Instance

#security #vulnerability #drupal #cve202696369

3 min read

Want to connect with andreagomez?

Create an account to connect with andreagomez. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

andreagomez

Oct 19

Port 27017 and 1,676,736 Matches: Databases That Answer Before Anyone Authenticates

#mongodb #27017 #databaseexposure #authentication

2 min read

andreagomez

Oct 19

Web Management Interfaces as the Most Common Exposed Surface

#zoomeye #webexposure #https #managementinterfaces

2 min read

andreagomez

Oct 19

Eight CVEs, three Apache projects: placing CVE-2026-102795 in the October 2026 advisory batch

#vulnerability #apachetrafficserver #accesscontrol

2 min read

andreagomez

Oct 19

Reading the MOVEit Transfer Disclosure Correctly: What the CVE Records Confirm

#cybersecurity #infosec #security

3 min read

andreagomez

Oct 18

CVE-2026-79820 and the Two Faces of HPE Remote Management: iLO 7 and iMC

#security #vulnerability #hpeilo #cve202679820

2 min read

andreagomez

Oct 18

What Twelve High-Severity MOVEit Flaws Mean for an Audit Trail

#vulnerability #moveittransfer #cve202689076

3 min read

andreagomez

Oct 18

Consul: 78,092 Fingerprint Matches Against 1.7 Million Answers on Port 8500

#consul #exposure #servicediscovery

3 min read

andreagomez

Oct 18

Sizing CVE-2025-38680 Exposure: What 18.2 Million Linux SSH Hosts Do and Do Not Tell You

#linuxkernel #cve202538680 #zoomeye #exposure

2 min read

andreagomez

Oct 18

Threat Prevention Signatures and CVE-2026-0322: What limited Coverage Requires

#security #vulnerability #panos #cve20260322

3 min read

andreagomez

Oct 17

Vaultwarden at internet scale: 87,252 title matches on the self-hosted password vault

#security #zoomeye #exposure #passwordmanager

3 min read

andreagomez

Oct 17

Rogue DHCP servers and the layer-2 trust that makes them work

#networksecurity #dhcp #segmentation #layer2

2 min read

andreagomez

Oct 17

Which Sectors Should Look First: Reading the Gunra Victim Profile Against Externally Reachable Assets

#cybersecurity #infosec #security

3 min read

andreagomez

Oct 16

CWE-35 or CWE-22? The Classification Split Around CVE-2026-85706

#cwe22 #cwe35 #gitlab #detectionengineering

3 min read

andreagomez

Oct 16

Three Secure Gateway authorization findings in one Splunk batch: 76265, 76272 and 76280

#cybersecurity #infosec #security

2 min read

andreagomez

Oct 16

Apache Airflow on 73,265 observed hosts: the scheduler that holds every connection string

#attacksurface #zoomeye #airflow #datapipelines

2 min read

andreagomez

Oct 16

RouterOS management-plane exposure: measuring the SSH precondition

#security #zoomeye #routeros #exposure

2 min read

andreagomez

Oct 16

Authenticating WebSocket connections at the edge

#websocket #authentication #applicationsecurity

2 min read

andreagomez

Oct 16

Webform and Webform REST Flaws in the September 2026 Drupal Advisory

#security #drupal #vulnerability

3 min read

andreagomez

Oct 15

CVE-2026-76504: a Cisco SD-WAN Manager authentication bypass that needs no credential

#authentication #networksecurity #vulnerability

2 min read

andreagomez

Oct 15

Compromise Assessment After CVE-2026-76504: Building a Defensible Investigation Order

#vulnerability #cisco #sdwan #cve202676504

4 min read

andreagomez

Oct 15

Starting My Cybersecurity Journey

#beginners #cybersecurity #learning #security

1 min read

DEV Community

andreagomez

Badges

Writing Debut

Verifying That CVE-2026-96369 Is Actually Fixed on Each Drupal Instance

Want to connect with andreagomez?

Port 27017 and 1,676,736 Matches: Databases That Answer Before Anyone Authenticates

Web Management Interfaces as the Most Common Exposed Surface

Eight CVEs, three Apache projects: placing CVE-2026-102795 in the October 2026 advisory batch

Reading the MOVEit Transfer Disclosure Correctly: What the CVE Records Confirm

CVE-2026-79820 and the Two Faces of HPE Remote Management: iLO 7 and iMC

What Twelve High-Severity MOVEit Flaws Mean for an Audit Trail

Consul: 78,092 Fingerprint Matches Against 1.7 Million Answers on Port 8500

Sizing CVE-2025-38680 Exposure: What 18.2 Million Linux SSH Hosts Do and Do Not Tell You

Threat Prevention Signatures and CVE-2026-0322: What limited Coverage Requires

Vaultwarden at internet scale: 87,252 title matches on the self-hosted password vault

Rogue DHCP servers and the layer-2 trust that makes them work

Which Sectors Should Look First: Reading the Gunra Victim Profile Against Externally Reachable Assets

CWE-35 or CWE-22? The Classification Split Around CVE-2026-85706

Three Secure Gateway authorization findings in one Splunk batch: 76265, 76272 and 76280

Apache Airflow on 73,265 observed hosts: the scheduler that holds every connection string

RouterOS management-plane exposure: measuring the SSH precondition

Authenticating WebSocket connections at the edge

Webform and Webform REST Flaws in the September 2026 Drupal Advisory

CVE-2026-76504: a Cisco SD-WAN Manager authentication bypass that needs no credential

Compromise Assessment After CVE-2026-76504: Building a Defensible Investigation Order

Starting My Cybersecurity Journey