Roei Hadashi
head of red team & ai security — hackerseye
I break in for a living — and I'm the one they call after someone else did.
## WHOAMI
Six years on every side of the same vulnerability
I run the red team and AI security practice at HackersEye, splitting my time between offensive work — red team engagements, penetration testing, external attack surface research, AI security research — and incident response. Web applications, infrastructure, internal networks, IoT, mobile, and the AI systems now sitting in front of all of them.
I got here the long way. Incident response at Cellcom, then two years of application security research at enso.security, where I shipped to production. Then Profero, where I ran incident response engagements end to end, including the SysAid zero-day exploited by Lace Tempest.
So I've seen the same vulnerability from three sides: the scanner that should have caught it, the pentest that finds it anyway, and the incident where someone already used it.
## DISCLOSED VULNERABILITIES
Priority Portal Generator — 9 CVEs
Research by Roei Hadashi and Dean Bar at HackersEye. Portal Generator served the internal ERP server address, the gateway in front of it, the application secret, the licence key, and a working API username and password to every visitor before login. Credential encryption ran client-side in JavaScript, so it protected nothing.
- CVES
- 9
- CRITICAL
- 5
- HIGH
- 3
- MEDIUM
- 1
- MAX CVSS
- 10.0
| CVE | WEAKNESS | CVSS v3.1 | SEVERITY |
|---|---|---|---|
| CVE-2026-59500 | Improper Authentication CWE-287 | 10.0 | CRITICAL |
| CVE-2026-59506 | Missing Authentication for Critical Function CWE-306 | 9.3 | CRITICAL |
| CVE-2026-59507 | Use of Hard-coded Credentials CWE-798 | 9.3 | CRITICAL |
| CVE-2026-59503 | Exposure of Private Personal Information CWE-359 | 9.1 | CRITICAL |
| CVE-2026-59504 | Client-Side Enforcement of Server-Side Security CWE-602 | 9.1 | CRITICAL |
| CVE-2026-59499 | Exposure of Sensitive Information CWE-200 | 8.6 | HIGH |
| CVE-2026-59505 | Improper Access Control CWE-284 | 8.6 | HIGH |
| CVE-2026-59501 | Improper Access Control CWE-284 | 8.2 | HIGH |
| CVE-2026-59502 | Observable Discrepancy CWE-203 | 5.3 | MEDIUM |
## RESEARCH & WRITING
Selected work
- Priority Portal Generator: Nine CVEs in Israel's ERP Supply Chain hackerseye.com
- AsyncRAT, WebDAV, and Bad OpSec Walk Into an Israeli Bar hackerseye.com
- Secrets Leakage: A Rising Threat in Development Practices profero.io
- SysAid On-Prem Zero-Day — CVE-2023-47246, exploited by Lace Tempest profero.io
- What Are Dependency Confusion Attacks? 60 Sec on AppSec · podcast