Unfold's Tech Blog

Research and insights from the Unfold security team on emerging threats, detection engineering, and the future of application security.

Searching for bulletproof detections in cPanel Land

Analysis of CVE-2026-41940, a critical cPanel authentication bypass vulnerability that allows unauthenticated root access. We developed bulletproof detection rules by analyzing the exploit's core mechanics and unavoidable behaviors.

Read the blog →

February 11, 2026

A Threat Hunter’s Perspective on MongoBleed

A threat hunter's analysis of MongoBleed (CVE-2025-14847), examining why common detections based on PoC behavior are insufficient and how sophisticated attackers can evade detection by mimicking normal connection patterns.

Read the blog →