KECyber Security Research Vulnerability discovery · coordination · disclosure
KECYBER Security Research

KECYBER SECURITY RESEARCHER

HACKZA

HACKZA investigates security-critical trust boundaries in enterprise and self-hosted systems, with particular attention to initialization, authentication, and privileged control planes.

RoleSecurity Researcher
OrganizationKECyber
Research focusEnterprise infrastructure

PUBLISHED WORK

Security advisories

KECYBER-SA-2026-001

Broadcom / VMware Cloud Foundation Operations

Unauthenticated first-boot provisioning permits administrative takeover

An unauthenticated network caller can claim administrative ownership of an unconfigured appliance by reaching first-boot provisioning before its intended owner.

High CVE: vendor declined Researcher: HACKZA