Boost global trust with ISO 27001 Certification
Get a Quote
RESEARCH & DISCLOSURE DESK

Zero-Day Vulnerability Research & Advisories

Original vulnerability research, verified offensive discoveries, and coordinated disclosures by the Femto Security Vulnerability Research Team.

Coordinated Disclosure
Offensive Vulnerability Research
Responsible Remediation

Published Security Research

signageOS Unauthenticated Zero-Day Command Injection in Box Console Package Upload
signageOS

signageOS Zero-Day: Unauthenticated Command Injection

September 10, 2026 · signageOS

Femto Security identified an unauthenticated zero-day command injection flaw in the signageOS Box package upload endpoint yielding remote code execution.

Zero-Day
Read research
  • Talk to an Expert
    >