ArticaTech vulnerabilities
We track 5 vulnerabilities in ArticaTech products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 28, 2026.
Latest ArticaTech vulnerabilities
- 7.5 High severity
Artica Proxy: Improper Control of Generation of Code
Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulnerability that allows unauthenticated attackers to hijack administrative sessions by setting a known PHPSESSID on a victim's browser prior to authentic
- 9.8 Critical severity
Artica Proxy: Deserialization of Untrusted Data
The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user.
- 7.5 High severity
Artica Proxy: Relative Path Traversal
The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administ
- 9.8 Critical severity
Artica Proxy: Authentication Bypass Using an Alternate Path or Channel
Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy service. In particular, the "tailon" service is running, running as the root user, is bound to the loopback interface, and is listening on TCP po
- 9.8 Critical severity
Artica Proxy: Authentication Bypass Using an Alternate Path or Channel
The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the feature is enabled, it does not require authentication by default, and runs as the root user.