Eclypsium launches InfraTrust report for prioritizing infrastructure vulnerabilities

Introduction of InfraTrust

Eclypsium has launched InfraTrust, a new cybersecurity knowledge base and the InfraTrust Pulse report. This initiative aims to help organizations effectively prioritize vulnerabilities present in their infrastructure, firmware, networking, and edge devices.

Inaugural InfraTrust Pulse Report

The inaugural report, released in July 2026, aggregated data from 61 infrastructure advisories from 14 different vendors. Among these, it flagged six as critical and noted 26 vulnerabilities that are remotely exploitable without authentication.

Focus on Exploitability

Eclypsium emphasizes that vulnerabilities should be prioritized based on factors like exploitability, reachability, and exposure rather than solely relying on traditional severity scores such as CVSS. This shift comes in response to the rising vulnerabilities targeted by state-sponsored threat actors.

Critical Advisories Highlighted

The report identifies key advisories that require urgent action. For instance, SonicWall SMA1000 vulnerabilities (CVE-2026-15409 and CVE-2026-15410) were exploited even before their disclosure. Similarly, Fortinet's earlier disclosed critical vulnerabilities were also flagged for immediate attention.

Threat Landscape and Implications

The release of the InfraTrust report coincides with increasing attacks on infrastructure devices by entities linked to Russian and Chinese states. These groups have exploited existing flaws in critical infrastructure and networking devices, making the need for effective vulnerability management crucial.