Sachin Wagh
Principal Service Delivery Lead
As Principal Service Delivery Lead, Sachin Wagh is responsible for delivering web application and network penetration testing for clients, contributing to NetSPI's EASM/EASM+ continuous testing capabilities, and mentoring team members to strengthen assessment quality and operational efficiency. In his 10+ year career in cybersecurity, Sachin has responsibly disclosed multiple vulnerabilities across major vendors, including IBM, Huawei, F-Secure, Adobe, and Broadcom, and served as a technical reviewer for the Burp Suite Cookbook and its second edition.
Sachin has contributed to the security community through speaking engagements at Hack in Paris, Infosecurity Europe, and Hakon India, as well as the responsible disclosure of CVEs including CVE-2016-5934, CVE-2016-2780, and CVE-2016-6592.
Sachin has contributed to the security community through speaking engagements at Hack in Paris, Infosecurity Europe, and Hakon India, as well as the responsible disclosure of CVEs including CVE-2016-5934, CVE-2016-2780, and CVE-2016-6592.
More By Sachin Wagh
Critical Vulnerability
Splunk Enterprise Unauthenticated Arbitrary File Operations/RCE (CVE-2026-20253): Overview and Takeaways
Splunk disclosed CVE-2026-20253 on June 10, 2026, affecting Splunk Enterprise versions in the 10.0.x and 10.2.x branches. The flaw stems from a PostgreSQL sidecar service endpoint that completely lacks authentication controls (CWE-306), allowing any network-reachable attacker to invoke arbitrary file creation or truncation operations without credentials.
Learn More
Critical Vulnerability
CVE-2026-9082 Drupal Core PostgreSQL SQL Injection Overview and Takeaways
A critical vulnerability in Drupal Core, tracked as CVE-2026-9082, affects Drupal deployments using a PostgreSQL database. The issue allows unauthenticated attackers to perform arbitrary SQL queries via crafted JSON:API or search queries. Successful exploitation may result in full database compromise or remote code execution.
Learn More