#unauthenticated


Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

Oct 7, 2026 // 18:44

A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker run code on the […]

Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products

Oct 6, 2026 // 12:47

A critical flaw in 8 Atlassian Data Center products, which customers host themselves, allows an attacker with no login access to read specific files in […]

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

Oct 2, 2026 // 23:15

Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to […]

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

Oct 2, 2026 // 11:52

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog, […]

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

Sep 23, 2026 // 11:27

Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM) that lets them run code on a BIG-IP system without logging in, […]

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

Sep 19, 2026 // 14:51

SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote […]

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

Sep 17, 2026 // 21:10

A critical vulnerability in Check Point’s Security Management and Log Servers could allow an attacker without login credentials to run code as root on those […]

BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS

Sep 17, 2026 // 11:10

The Internet Systems Consortium (ISC) has released BIND 9.20.29 and 9.21.26 to fix fourteen security flaws it disclosed on 16 September in BIND 9, its […]

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

Sep 16, 2026 // 19:00

A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitation. The vulnerability in […]

Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE

Sep 10, 2026 // 14:49

Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The company says both could allow an […]

1 2 3 … 5 Next