PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Remote Code Execution
By security.com Publication Date: Key findings The PHP project released fixes on October 21, 2026, for two critical vulnerabilities, CVE-2026-109618…
Tag: Unauthenticated
Cisco NX-API Carries an Unauthenticated Root RCE, and It Stays Off Until Automation Turns It On
By Heath Callahan Publication Date: 2026-10-09 16:10:00 Analysis CVE-2026-76471 hands any network attacker root on Nexus 3000 and 9000 switches…
Cisco NX-OS NGOAM Carries Three Unauthenticated Root RCEs, and Cisco Lists No Workarounds
By Heath Callahan Publication Date: 2026-10-09 14:39:00 Analysis NGOAM exists to verify path health on Cisco Nexus switches. CVE-2026-76485 needs…
High-severity NVIDIA vulnerability lets unauthenticated attackers crash GPU monitoring – Help Net Security
By Sinisa Markovic Publication Date: 2026-10-09 12:26:00 Hundreds of internet-exposed graphics processing unit (GPU) servers were open to a high-severity…
Cisco NX-OS Has Six Unauthenticated RCE CVEs Across Four Functional Planes in One Disclosure Cycle
By Heath Callahan Publication Date: 2026-10-08 07:38:00 Analysis Forwarding, management, diagnostic, and monitoring planes all carry CVSS 9.8 root-access flaws…
Cisco Firewall Management Center Has Two CVSS 10.0 Unauthenticated RCEs — Interlock Ransomware Exploited One as Zero-Day
By Forkast Publication Date: 2026-10-08 06:27:00 Analysis The system managing enterprise firewalls was compromised through unauthenticated root access months before…
Cisco Nexus 9000 Silicon One RCE: Default Ports Leave Data Center Backbone Open to Unauthenticated Root Access
By Heath Callahan Publication Date: 2026-10-07 14:50:00 Analysis CVE-2026-20212 lets any unauthenticated attacker achieve root code execution on enterprise data…
Citrix NetScaler SAML Vulnerability Enables Unauthenticated Remote DoS Attacks
By Divya Publication Date: 2026-10-05 04:46:00 Citrix has released emergency security updates to address a high-severity memory overflow vulnerability in…
Cisco SD-WAN’s URL Encoding Bypass Grants Unauthenticated Admin Access. Federal Agencies Have 24 Hours.
By Heath Callahan Publication Date: 2026-10-02 18:42:00 Analysis A single character substitution in a URL path circumvents authentication on the…
Two Critical Zero-Days in Citrix NetScaler Allow Unauthenticated Remote Code Execution — BigGo Finance
By BigGo Finance Publication Date: 2026-09-28 06:05:00 Citrix disclosed on September 27, 2026, that eight vulnerabilities have been discovered in…