#unauthenticated


18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

May 15, 2026 // 13:07

Cybersecurity researchers have disclosed multiple security vulnerabilities impacting NGINX Plus and NGINX Open, including a critical flaw that remained undetected for 18 years. The vulnerability, […]

Critical CVE-2026-25874 Leaves Hugging Face LeRobot Open to Unauthenticated RCE

Apr 28, 2026 // 14:19

Cybersecurity researchers have disclosed details of a critical security flaw impacting LeRobot, Hugging Face’s open-source robotics platform with nearly 24,000 GitHub stars, that could be […]

Critical nginx-ui Vulnerability CVE-2026-33032 Allows Unauthenticated Nginx Takeover

Apr 15, 2026 // 16:00

A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the wild. The vulnerability in question […]

Critical NetScaler flaw: Citrix pushes urgent patch to stop unauthenticated data leaks.

Mar 24, 2026 // 10:38

Citrix has issued security fixes for two vulnerabilities affecting NetScaler ADC and NetScaler Gateway. One critical vulnerability could allow an attacker to steal sensitive information […]

Critical Telnetd Bug: Unauthenticated Root RCE via Port 23 (CVE-2026-32746). Patch Now!

Mar 18, 2026 // 13:24

Security experts have revealed a serious vulnerability in the GNU InetUtils telnet daemon (telnetd). This flaw could allow an unauthorized remote attacker to run any […]

CVE-2026-2313: Unauthenticated SQL Injection in Elementor Ally Plugin Impacts 250k+ Sites

Mar 11, 2026 // 23:30

A critical SQL Injection (SQLi) vulnerability has been discovered in the Elementor Ally plugin, putting over 250,000 WordPress sites at risk of complete database takeover. The Vulnerability: CVE-2026-0814 The flaw exists […]

Zero-Click Threat: FreeScout Vulnerability Allows Unauthenticated Server Takeover via Email

Mar 4, 2026 // 12:36

A critical zero-click Remote Code Execution (RCE)vulnerability, tracked as CVE-2026-28289, has been identified in the open-source helpdesk platform FreeScout. With a maximum CVSS score of 10.0, this flaw allows […]

Critical flaw in popular VoIP phones enables unauthenticated remote access and eavesdropping.

Feb 20, 2026 // 16:23

A critical vulnerability, CVE-2026-2329 (CVSS 9.3), has been discovered in Grandstream GXP1600 series VoIP phones, allowing unauthenticated attackers to gain root-level control. Key Details Critical Impacts Remediation

Previous 1 … 3 4 5