Aretiq AI · Security Research

We research, we share, we empower.

Aretiq AI is an LLM-augmented security research company focused on automated binary and source code auditing — surfacing vulnerabilities before attackers do.

Get in Touch Read Our Research
Research Archive

N-day case files.

In-depth vulnerability analysis — root cause, patch diff, detection, and proof-of-concept.

View all →
CVE-2026-15748 WPMU DEV Forminator Forms Select Field Injection Unrestricted File Upload 1. Overview A vulnerability exists in WPMU DEV’s Forminator Forms plugin for WordPress (600,000+ active installations) that allows … WPMU DEV 18 Aug 2026 CVE-2026-61967 miniOrange OTP Verification Ultimate Member Password Reset Authentication Bypass 1. Overview A vulnerability exists in the miniOrange OTP Verification plugin for WordPress (versions 5.5.1 and earlier) that allows an … miniOrange 15 Aug 2026 CVE-2026-54995 Microsoft Windows Reliable Multicast Transport Driver Integer Underflow 1. Overview A vulnerability exists in the Windows Reliable Multicast Transport Driver (rmcast.sys) that implements the Pragmatic General … Microsoft 2 Jul 2026 CVE-2026-45502 Microsoft Exchange Server EWS InstallApp Server-Side Request Forgery 1. Overview A server-side request forgery (SSRF) vulnerability exists in Microsoft Exchange Server’s Exchange Web Services (EWS) … Microsoft 22 Jun 2026
Original Discoveries

0-days we found, filed, and disclosed.

Original vulnerabilities discovered by Aretiq AI. We follow responsible disclosure — advisories publish only after vendors ship a fix. Read our Disclosure Policy.

View all →
CVE-2026-62801 Windows PowerShell Security Feature Bypass Summary A path traversal vulnerability in Windows PowerShell allows an unauthenticated attacker to bypass path validation safeguards over a … PATCHED 6.5 8 Sep 2026 CVE-2026-69364 Windows Print Spooler Components Elevation of Privilege Summary A race condition in the Windows Print Spooler service leads to a use-after-free that allows an authenticated attacker to escalate … PATCHED 7.1 8 Sep 2026 CVE-2026-62912 Microsoft Exchange Server Deserialization Denial of Service Summary A deserialization of untrusted data vulnerability in Microsoft Exchange Server allows any user with a mailbox account to crash the … PATCHED 6.5 11 Aug 2026
Contact

Get in touch.

Interested in working with us or learning more? Reach out.

Direct line admin@aretiq.ai