Advisory archive

Research & advisories

Every advisory below is the product of hands-on analysis, fully reproduced and coordinated with the affected vendor before release. Filter by severity or search by vendor, product, or technique.

Showing 6 of 6 advisories

criticalGC-2026-0014

Unauthenticated firmware rollback on Halberd Agritech soil controllers

The over-the-air update channel on Halberd SoilSense controllers accepts older signed firmware images without anti-rollback enforcement, letting a network-adjacent attacker reintroduce patched vulnerabilities and seize persistent control of irrigation logic.

Firmware
Authentication
OTA

highGC-2026-0011

Predictable BLE session keys in Marisol smart deadbolts

BoltLink Pro deadbolts derive their per-session BLE encryption key from a 16-bit pairing nonce seeded by the device uptime counter, collapsing the effective keyspace and enabling a proximity replay attack.

Bluetooth LE
Cryptography
Key management

highGC-2026-0009

Modbus write amplification in Axion PLC gateway

A single crafted Modbus/TCP frame fans out into hundreds of register writes on downstream serial PLCs, letting a low-bandwidth attacker stall a control loop and trip safety interlocks.

ICS/OT
Modbus
Denial of service

mediumGC-2026-0006

Exposed debug UART yields root on Kestrel fleet dashcams

A populated, unauthenticated UART header on the RoadEye 5 mainboard drops straight to a root shell, exposing fleet credentials and recorded footage to anyone with brief physical access.

Hardware
Debug interface
Privilege

mediumGC-2026-0003

Zigbee rejoin spoofing in Lumen mesh lighting

The Aurora bridge honors unauthenticated Zigbee rejoin requests, allowing an attacker to impersonate a dropped node and inject scene commands across a building's lighting mesh.

Zigbee
Network
Spoofing

infoGC-2026-0001

Power side-channel leaks billing keys on Tideglass meters

A correlation power-analysis side channel on the FlowMeter G3 leaks a static billing HMAC key over roughly twenty thousand traces, a low-severity issue given the physical access and equipment required.

Side channel
Cryptography
Hardware