Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login credentials to run code as root on those servers over the network. The Security Management Server is the system that controls firewall policy and administrator access. Check Point h...

CVE-2026-28326

SolarWinds Access Rights Manager (ARM) is affected by an unauthenticated remote code execution vulnerability caused by a hardcoded static key . The CVSS v3.1 score is 8.8 (HIGH) , with an adjacent network attack vector, no required privileges, and no user interaction. Impact is High across confid...

CVE-2026-28326 SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability

SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key...

CVE-2026-62104

Unauthenticated Remote Code Execution RCE in Migratico Lite = 2.6.8 versions...

CVE-2026-62104

CVE-2026-62104 is an unauthenticated Remote Code Execution (RCE) vulnerability in the WordPress plugin Migratico Lite , affecting versions 2.6.8 and earlier . Discovered by Ananda Dhakal of Patchstack, the flaw allows a remote attacker with no prior access to execute arbitrary code on the host, r...

CVE-2026-62104 WordPress Migratico Lite plugin <= 2.6.8 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in Migratico Lite = 2.6.8 versions...

EUVD-2026-81490

Unauthenticated Remote Code Execution RCE in Migratico Lite = 2.6.8 versions...

wp2shell-PoC

wp2shell-PoC ⚠ 本工具仅用于教育或漏洞赏金目的。严禁在受控环境之外未经授权使用。 概述 针对影响 WordPress 核心的 wp2shell 漏洞链的概念验证（PoC），结合了 CVE-2026-63030 和 CVE-2026-60137。该项目演示了 REST API 批量路由混淆漏洞与 WPQuery SQL 注入之间的相互作用，形成一条无需认证即可完全入侵 WordPress 并实现远程代码执行（RCE）的路径。 阅读完整公告此处 工作原理 wp2shell 是 WordPress 核心中的一个认证前 RCE 链，结合了 CVE-2026-63030（批量 RES...

CVE-2026-88795 wpShopGermany IT-RECHT KANZLEI < 2.4 - Unauthenticated RCE via Predictable API Token

The wpShopGermany IT-RECHT KANZLEI WordPress plugin before 2.4 does not generate its API authentication token securely, deriving it from data the requester controls and creating it as a side effect of the check that is supposed to validate it, allowing unauthenticated attackers to predict the tok...

CVE-2026-86358

Dell Update Package Framework (DUP) versions prior to 26.07.03 contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with adjacent network access can exploit it to achieve remote code execution . NVD rates it CVSS 3.1 8.8 (HIGH) ; Dell's CNA assigns 6.5 (MEDIUM) , diffe...

CVE-2026-58146 Unauthorized remote code execution in T-Mobile 5G Box IDU routers

WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the /cgi-bin/portal.cgi endpoint, specifically through the clicookie POST parameter. The clicookie parameter value is directly concatenated into a find command string without proper...

CVE-2026-86106

This Arista VeloCloud Edge vulnerability (CWE-306, Missing Authentication for Critical Function) allows an unauthenticated attacker with Layer 2 access to the private HA interconnect to trigger sensitive HA peer functions without verification, potentially resulting in elevated command execution o...

CVE-2026-27565

This remote code execution vulnerability allows an unauthenticated remote attacker to upload a malicious IODD file that places and executes a shell script with root privileges on the target system. The shell script persists across reboots , enabling sustained compromise. The CVSS 3.1 score is 9.8...

CVE-2026-27565 Remote code execution via uploading a malicious IODD file

An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root privileges. The shell script remains active even after a reboot...

CVE-2026-61590: Missing Authentication for Critical Function

djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's observability endpoints expose live view/session state and a remote method-invocation surface evalhandler. The localhost restriction was an opt-in...

AlmaLinux 9 : nginx:1.26 (ALSA-2026:67283)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67283 advisory. nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 Tenable has extracted the preceding description block directly from the AlmaLinux...

CVE-2026-76683

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation...

CVE-2026-12355 IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an attacker to perform JNDI injection attacks due to insufficient input validation,...

CVE-2026-89026

Issabel Framework (web framework for Issabel PBX) contained a hard-coded HS256 JWT signing key in pbxapi/index.php, identical across all installations. Unauthenticated attackers could forge valid bearer tokens and call /pbxapi/manager/originate with the System application parameter, causing Aster...

EUVD-2026-78393

PraisonAI is a multi-agent teams system. From 1.5.0 until 1.7.2, MCPServer.startHttp in src/praisonai-ts/src/mcp/server.ts binds without a host restriction and forwards every HTTP POST request to handleRequest without authentication or authorization. Any network client that can reach the port can...