SPM Tech Blog CVE analyses and vulnerability writeups from SPM Tech's offensive security operators. https://spm-tech.co/ 2026-08-14T09:00:00-07:00 https://spm-tech.co/favicon.svg https://spm-tech.co/logo.png Copyright (c) 2026 SPM Tech. All rights reserved. SPM Tech contact@spm-tech.co https://spm-tech.co/team.html CVE-2025-29927: One Header Turned Off Next.js Auth https://spm-tech.co/posts/cve-2025-29927-nextjs-middleware-bypass.html 2026-08-14T09:00:00-07:00 2026-08-14T09:00:00-07:00 SPM Tech A single HTTP header let attackers skip Next.js middleware entirely — bypassing authentication and authorization on every route it guarded. CVE-2025-32433: The SSH Server That Never Asked Who You Were https://spm-tech.co/posts/cve-2025-32433-erlang-ssh-preauth-rce.html 2026-08-11T09:00:00-07:00 2026-08-11T09:00:00-07:00 SPM Tech A CVSS 10.0 pre-authentication RCE in Erlang/OTP's SSH server, caused by a state machine that dispatched connection-protocol messages without ever consulting the authentication state. CVE-2025-53770 (ToolShell): When Patching Wasn't Enough https://spm-tech.co/posts/cve-2025-53770-sharepoint-toolshell.html 2026-08-06T09:00:00-07:00 2026-08-06T09:00:00-07:00 SPM Tech ToolShell chained a spoofed Referer header into .NET deserialization for unauthenticated RCE on SharePoint Server, then stole the ASP.NET machine key so access survived remediation.