Resources
>
Research

Research Blog

Stay up to date with the newest security advisories, vulnerability reports, and platform developments—keeping your products secure and compliant.

Featured research articles

Security Advisory: Secure Boot Bypass on NVIDIA Jetson for Linux
Research
Sep 3, 2026
10
 min read

Security Advisory: Secure Boot Bypass on NVIDIA Jetson for Linux

ONEKEY researchers discovered an NVIDIA Jetson Linux initrd command injection vulnerability that can enable secure boot bypass, root access, and disclosure of LUKS encryption keys.

Quentin Kaiser
Quentin Kaiser
Lead Security Researcher
Read More
Why Version Matching Is Not Enough - Part II: Android Patch Levels, Vendors, and Real Vulnerability Exposure
Research
Jul 23, 2026
8
 min read

Why Version Matching Is Not Enough - Part II: Android Patch Levels, Vendors, and Real Vulnerability Exposure

See how Android patch levels, vendor-specific CVEs, and application context improve vulnerability matching and reveal real firmware exposure.

Quentin Kaiser
Quentin Kaiser
Lead Security Researcher
Read More
Why Version Matching Is Not Enough - Part I: Linux Kernel Backports and Real Vulnerability Exposure
Research
Jul 22, 2026
8
 min read

Why Version Matching Is Not Enough - Part I: Linux Kernel Backports and Real Vulnerability Exposure

Learn how Linux kernel backports refine CVE matching, reduce false positives, and reveal the vulnerabilities that truly affect embedded firmware.

Quentin Kaiser
Quentin Kaiser
Lead Security Researcher
Read More
Latest Developments in Unblob: New Formats, Smarter Extraction, and a More Hardened Release Pipeline
Research
Mar 26, 2026
10
 min read

Latest Developments in Unblob: New Formats, Smarter Extraction, and a More Hardened Release Pipeline

Discover what changed in unblob since release 25.11.25, including new firmware and filesystem format support, smarter extraction workflows, robustness fixes, performance improvements, and stronger release security.

Quentin Kaiser
Quentin Kaiser
Lead Security Researcher
Read More
How We Taught Our Platform to Understand RTOS Firmware
Research
Sep 22, 2025
15
 min read

How We Taught Our Platform to Understand RTOS Firmware

Discover how ONEKEY’s platform breaks open real-time operating system (RTOS) firmware. Learn how automated architecture detection, load address recovery, and component identification bring transparency and security to embedded devices in automotive, medical, and industrial sectors.

Quentin Kaiser
Quentin Kaiser
Lead Security Researcher
Read More
Security Advisory: Remote Code Execution on Diviotec IP Camera (CVE-2025-5113)
Research
Jun 3, 2025
10
 min read

Security Advisory: Remote Code Execution on Diviotec IP Camera (CVE-2025-5113)

Explore ONEKEY Research Lab's security advisory detailing a critical vulnerability in Diviotec IP Cameras. Learn about the risks and recommended actions.

Quentin Kaiser
Quentin Kaiser
Lead Security Researcher
Read More
Security Advisory: Remote Command Execution on Netcomm NTC 6200 and NWL 222
Research
Jun 2, 2025
10
 min read

Security Advisory: Remote Command Execution on Netcomm NTC 6200 and NWL 222

Explore ONEKEY Research Lab's security advisory detailing a critical vulnerability in Netcomm devices. Learn about the risks and recommended actions.

Quentin Kaiser
Quentin Kaiser
Lead Security Researcher
Read More
Security Advisory: Remote Command Execution on Smartbedded MeteoBridge (CVE-2025-4008)
Research
May 26, 2025
10
 min read

Security Advisory: Remote Command Execution on Smartbedded MeteoBridge (CVE-2025-4008)

Explore ONEKEY Research Lab's security advisory detailing a critical vulnerability in Smartbedded MeteoBridge. Learn about the risks and recommended actions.

Quentin Kaiser
Quentin Kaiser
Lead Security Researcher
Read More
Shell CGI Static Code Analysis - Automatic Discovery of RCEs
Research
May 23, 2025
10
 min read

Shell CGI Static Code Analysis - Automatic Discovery of RCEs

Uncover ONEKEY's new shell CGI Static Code Analysis feature, designed to identify critical Remote Code Execution vulnerabilities. Click now to find out more.

Quentin Kaiser
Quentin Kaiser
Lead Security Researcher
Read More
Security Advisory: Remote Code Execution on Viasat Modems (CVE-2024-6199)
Research
Apr 25, 2025
5
 min read

Security Advisory: Remote Code Execution on Viasat Modems (CVE-2024-6199)

Explore ONEKEY Research Lab's security advisory detailing a critical vulnerability in Viasat modems. Learn about the risks and recommended actions.

Quentin Kaiser
Quentin Kaiser
Lead Security Researcher
Read More
Security Advisory: Remote Code Execution on Viasat Modems (CVE-2024-6198)
Research
Apr 25, 2025
5
 min read

Security Advisory: Remote Code Execution on Viasat Modems (CVE-2024-6198)

Explore ONEKEY Research Lab's security advisory detailing a critical vulnerability in Viasat modems. Learn about the risks and recommended actions.

Quentin Kaiser
Quentin Kaiser
Lead Security Researcher
Read More
Critical Vulnerabilities in EV Charging Stations: Analysis of eCharge Controllers
Research
Nov 26, 2024
20
 min read

Critical Vulnerabilities in EV Charging Stations: Analysis of eCharge Controllers

Discover how severe security flaws, including unauthenticated remote command execution (CVE-2024-11665 & CVE-2024-11666), affect eCharge EV charging controllers. Learn about insecure firmware practices, cloud infrastructure issues, and actionable steps to mitigate risks in EV charging systems.

Quentin Kaiser
Quentin Kaiser
Lead Security Researcher
Read More
Security Advisory: Unauthenticated Command Injection in Mitel IP Phones
Research
Nov 17, 2024
15
 min read

Security Advisory: Unauthenticated Command Injection in Mitel IP Phones

Discover critical vulnerabilities in Mitel SIP phones that allow unauthenticated command injection. Learn how outdated input parsing can expose your devices and why it's essential to scan firmware for security risks. Protect your network with our in-depth analysis and expert takeaways.

Denys Vozniuk
Denys Vozniuk
Security Consultant
Read More
The X in XFTP Stands For eXecute
Research
Jul 8, 2024
6
 min read

The X in XFTP Stands For eXecute

Find out how our platform enhances firmware security by identifying vulnerabilities & bugs in ICT products, ensuring compliance with DORA & NIS2 directive.

Read More
Security Advisory: Arbitrary Command Execution on TP-Link Archer C5400X
Research
May 26, 2024
5
 min read

Security Advisory: Arbitrary Command Execution on TP-Link Archer C5400X

Explore ONEKEY Research Lab's security advisory detailing a critical vulnerability in the TP-Link Archer C5400X router. Learn about the risks and recommended actions.

Read More
Security Advisory: Remote Code Execution in Ligowave Devices
Research
May 13, 2024
3
 min read

Security Advisory: Remote Code Execution in Ligowave Devices

Explore the security advisory detailing remote code execution vulnerabilities in Ligowave devices. Learn about the risks & recommended protections.

Read More
Previous
Next

All research articles

Security Advisory: Remote Code Execution in Delta Electronics DVW Devices
Research
Apr 23, 2024
7
 min read

Security Advisory: Remote Code Execution in Delta Electronics DVW Devices

Discover critical vulnerabilities in Delta Electronics' DVW routers, including command injections and buffer overflows, enabling remote code execution.

Read More
Spotting Silent Patches in OSS with Binary Static Analysis
Research
Apr 8, 2024
4
 min read

Spotting Silent Patches in OSS with Binary Static Analysis

Uncover silent patches in OSS with our binary static analysis. Understand the role of in-depth vulnerability management beyond CVE tracking.

Read More
Security Advisory: Remote Command Execution in Cisco Access Point WAP Products
Research
Mar 17, 2024
6
 min read

Security Advisory: Remote Command Execution in Cisco Access Point WAP Products

Learn about the vulnerabilities affecting Cisco's WAP371 and other Small Business Wireless APs, and the importance of binary static analysis.

Read More
Binary Static Analysis - The Final Frontier
Research
Mar 13, 2024
13
 min read

Binary Static Analysis - The Final Frontier

Uncover ONEKEY's new Binary Zero-Day Identification feature, designed to identify vulnerabilities in executable binaries. Click now to find out more.

Read More
Latest Developments in Unblob (3)
Research
Jan 10, 2024
9
 min read

Latest Developments in Unblob (3)

Discover the latest developments in UNBLOB. Explore FileSystem Sandboxing, UI enhancements, and advanced Pattern Identification in our latest blog post 👇️

Read More
Making TOCTOU Great again - X(R)IP
Research
Oct 19, 2023
7
 min read

Making TOCTOU Great again - X(R)IP

ONEKEY Seucrity Insight: Delve into TOCTOU vulnerabilities in embedded systems utilizing XiP. Discover how these gaps at the hardware level can compromise secure boot processes.

Read More
Security Advisory: Clock Fault Injection on Mocor OS - Password Bypass
Research
Aug 8, 2023
4
 min read

Security Advisory: Clock Fault Injection on Mocor OS - Password Bypass

Discover the critical vulnerabilty in the Mocor OS on UNISOC SC6531E devices that allows unauthorised users to bypass locks via clock fault injection.

Read More
Security Advisory: Unauthenticated Remote Command Execution in Multiple WAGO Products
Research
May 15, 2023
4
 min read

Security Advisory: Unauthenticated Remote Command Execution in Multiple WAGO Products

Security Advisory: Critical unauthenticated command injection vulnerability in the "Legal Information" plugin of the WAGO Series PFC100 web interface.

Read More
Latest Developments in Unblob (2)
Research
May 8, 2023
 min read

Latest Developments in Unblob (2)

Revolutionize firmware extraction with UNBLOB! Discover the latest developments & advancements in this cutting-edge project. Don't miss latest blog post!

Read More
check out white papers

check out white papers

Explore in-depth whitepapers on cybersecurity and compliance, designed to strengthen your product’s security and compliance.

Meet Us at Events

Meet Us at Events

Join us at industry-leading events and connect with our experts in person to learn how to enhance your cybersecurity and compliance strategies.

Insights from Our Blog

Insights from Our Blog

Get expert tips and industry updates.
Dive into our blog for practical advice, trends, and solutions that help you stay secure and compliant.

Ready to automate your Product Cybersecurity & Compliance?

Make cybersecurity and compliance efficient and effective with ONEKEY.

See it in Action