Path-Normalization — PoC Archivehttps://poc.intelseclab.com/tags/path-normalization/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Mitel MiCollab Path Normalization Bypass to Internal Endpoints (CVE-2025-52913)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-52913-mitel-micollab-path-traversal/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-52913-mitel-micollab-path-traversal/Critical severity (CVSS 9.8) — network · CVE-2025-52913. Status: PoC. Affects: Mitel MiCollab (unified communications appliance). Tags: mitel, micollab, path-traversal, path-normalization, access-control-bypass, authentication-bypass, cwe-22, axis2, python, unified-communications.networkCriticalmitelmicollabpath-traversalpath-normalizationaccess-control-bypassauthentication-bypasscwe-22axis2pythonunified-communicationsgRPC-Go RBAC Authorization Bypass via Missing Leading Slash in `:path` (CVE-2026-33186)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-33186-grpc-go-rbac-authz-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-33186-grpc-go-rbac-authz-bypass/High severity — network · CVE-2026-33186 (GHSA-p77j-4mvh-x3m3). Status: PoC. Affects: google.golang.org/grpc (grpc-go) authz package (SDK-level RBAC). Tags: grpc, grpc-go, rbac, authorization-bypass, http2, path-normalization, golang, access-control.networkHighgrpcgrpc-gorbacauthorization-bypasshttp2path-normalizationgolangaccess-control