#pre-auth


CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS

Sep 30, 2026 // 18:56

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to remote code execution […]

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

Sep 30, 2026 // 11:10

Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway that has come under active exploitation […]

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

Sep 25, 2026 // 13:27

The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question […]

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Sep 19, 2026 // 14:51

A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: […]

N-able N-central Pre-Auth RCE Flaw Exploited in the Wild

Sep 9, 2026 // 10:52

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog, […]

New WordPress Pre-Auth XSS Could Lead to PHP Code Execution – Patch ASAP

Aug 8, 2026 // 01:06

WordPress has fixed a pre-authentication reflected cross-site scripting (XSS) flaw in its login screen that affects every version of the content management system. pwn.ai demonstrated […]

vBulletin fixes critical pre-auth RCE flaw with public exploit

Jul 28, 2026 // 23:37

A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code through template rendering. The security issue is tracked as […]

Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw

Jul 27, 2026 // 17:40

Public exploit details released on July 27 show how an unauthenticated request can reach PHP’s eval() function inside vBulletin and execute code on an unpatched […]

Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts

Jul 2, 2026 // 02:17

A recently disclosed critical security flaw impacting Progress Kemp LoadMaster is seeing active exploitation attempts, according to an advisory from eSentire’s Threat Response Unit (TRU). The […]

Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts

Jul 1, 2026 // 17:16

A recently disclosed critical security flaw impacting Progress Kemp LoadMaster is seeing active exploitation attempts, according to an advisory from eSentire’s Threat Response Unit (TRU). The […]

1 2 Next