John Z Black

John Z Black Mar 20, 2026 Vulnerabilities & Patching #vulnerability-management #screenconnect #sharepoint #unifi #magento #patch-prioritization

When multiple critical vulnerabilities land at once, CVSS-only triage breaks down fast.

ScreenConnect, SharePoint, UniFi, and Magento look like separate issues, but they share one dangerous trait: each can expose a control surface trusted to run everything else.

That means prioritization should start with blast radius, not score worship:

• Is it exposed to the internet
• What privilege does it hold
• Can one compromise cascade across customers, tenants, or sites

Pre-auth flaws deserve urgency, but post-auth weaknesses on weakly managed admin systems can be just as exploitable in practice.

For this class of risk, patch first, rotate sensitive keys where needed, isolate management interfaces, and watch for abnormal admin behavior.

The critical issue is not just severity. It is centrality. If the system controls everything, treat it like crisis infrastructure.

Read the full control-plane exposure analysis