Yotam Perkal

Reported Context (4)

The article identifies him as the Pluto Security researcher who found and reported CVE-2026-33032 and demonstrated its exploitation. Critical nginx-ui Flaw (CVE-2026-33032) Enables Nginx Server Takeover
Pluto Security researcher who identified and reported CVE-2026-33032. Critical nginx-ui Flaw Enables Unauthenticated Nginx Takeover; Patch Available
Pluto Security's report, as described in the article, explains the network-access steps used to exploit the vulnerability. Actively Exploited nginx-ui Flaw Enables Unauthenticated Server Takeover
Pluto Security's director of security research; commented on security controls in AI integration endpoints. Exploited Nginx UI Vulnerability Enables Unauthenticated Server Takeover

CVE (3)

MITRE ATT&CK (4)

Products (2)

Tools (1)

Countries (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.