Enzo Mongin

Enzo is part of the research and development team at Escape. He has a background in development and ethical hacking, focusing on low-level languages. He is now helping Escape build and develop their offensive security solution.

Enzo Mongin

Enzo Mongin — Last Publications

Escape Research team found a PII disclosure in Keycloak. It's now CVE-2026-17059.
Research

Escape Research team found a PII disclosure in Keycloak. It's now CVE-2026-17059.

Keycloak filters its main users list so a restricted admin sees nothing. The endpoint that lists a role's members skips that filter and hands the same account everyone's email and name. Escape research found it, reported it, and it's now tracked as CVE-2026-17059.
Enzo Mongin
Enzo Mongin
10 min read
New exploitable flaw found in Immich (BOLA)
DAST

How Escape DAST Bypassed Immich's Locked Folder By Finding a Missing Default

How the Escape DAST uncovered a missing default that lets any Immich user read locked-folder photos without the PIN.
Enzo Mongin
Enzo Mongin
11 min read

Escape Blog Squad