#unauthenticated


Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution

Aug 20, 2026 // 16:26

A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT […]

NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands

Aug 20, 2026 // 14:14

Security researchers at Cycode have disclosed a chain of flaws in AIT-GUI, the browser-based operator console for NASA/JPL’s open-source AMMOS Instrument Toolkit, that allow an […]

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

Aug 20, 2026 // 09:12

Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remote code execution. […]

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

Aug 18, 2026 // 00:07

GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could […]

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads

Aug 17, 2026 // 23:54

A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to achieve […]

SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code

Aug 12, 2026 // 10:35

SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. The vulnerability, […]

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Aug 11, 2026 // 20:06

Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the […]

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Aug 6, 2026 // 11:28

Cybersecurity researchers have disclosed details of a “factory-shipped backdoor” implanted in at least 20 Chinese router models from Zbtlink. According to a new report from […]

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Aug 6, 2026 // 11:28

Cybersecurity researchers have disclosed details of a “factory-shipped backdoor” implanted in at least 20 Chinese router models from Zbtlink. According to a new report from […]

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup

Aug 5, 2026 // 14:55

An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1.22.1 through 1.27.0. No login, […]