Pomerium Pomerium Zero

• CVE-2026-50285 ↗HIGH 7.52026

  Pomerium is an identity and context-aware access proxy. Prior to 0.32.8, decodeQueryStringV2 in pkg/hpke/url.go performs zstd decompression of attacker-controlled data without an output-memory limit w…

• CVE-2024-47616 ↗MEDIUM 6.82024

  Pomerium is an identity and context-aware access proxy. The Pomerium databroker service is responsible for managing all persistent Pomerium application state. Requests to the databroker service API ar…

• CVE-2024-39315 ↗MEDIUM 5.72024

  Pomerium is an identity and context-aware access proxy. Prior to version 0.26.1, the Pomerium user info page (at `/.pomerium`) unintentionally included serialized OAuth2 access and ID tokens from the …

• …and 8 more · see all on the vendor page →

No datasheets, whitepapers, case studies, videos, or demos linked yet.

• Palo Alto Networks Prisma SASE App Acceleration · Palo Alto Networks
• Palo Alto Networks Prisma SD-WAN · Palo Alto Networks
• Palo Alto Networks SD-WAN for NGFW · Palo Alto Networks
• Pomerium Enterprise · Pomerium
• Pomerium Secure Service Access · Pomerium
• Portnox ZTNA · Portnox
• Prisma Access · Palo Alto Networks
• Privafy CloudEdge · privafy