Unauthenticated RAG Poisoning in IBM Financial Transaction Manager Exposes MCP Tool Calls to Hijacking
By Heath Callahan Publication Date: 2026-09-25 01:47:00 Analysis A severe flaw in IBM’s FTM AI agent server lets unauthenticated attackers…
Tag: Unauthenticated
Citrix NetScaler Flaw Enables Unauthenticated Data Leakage
By Rabia Noureen Publication Date: 2026-07-08 13:34:00 Key Takeaways: CVE-2026-8451 affects Citrix NetScaler systems configured as SAML identity providers. Attackers…
Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks
By The Hacker News Publication Date: 2026-03-24 05:59:00 Ravie LakshmananMar 24, 2026Vulnerability / Enterprise Security Citrix has released security updates…
Oracle Patches Critical CVE-2026-21992 allow unauthenticated RCE in Identity Manager
By The Hacker News Publication Date: 2026-03-21 10:24:00 Ravie LakshmananMarch 21, 2026Vulnerability/Threat Intelligence Oracle has released Security updates to address…
HPE OneView Flaw Rated CVSS 10.0 Allows Unauthenticated Remote Code Execution
By The Hacker News Publication Date: 2025-12-18 14:39:00 December 18, 2025Ravie LakshmananVulnerability/Business Security Hewlett Packard Enterprise (HPE) has resolved a…
Critical RCE Flaws in Cisco ISE and ISE-PIC Allow Unauthenticated Attackers to Gain Root Access
For Immediate Release 2025-06-26 07:00:00 Jun 26, 2025Ravie LakshmananVulnerability, Network Security Cisco has released updates to address two maximum-severity security…
50,000+ Azure AD Users Access Token Exposed From Unauthenticated API Endpoint
A critical security vulnerability affecting over 50,000 Azure Active Directory users has been discovered, exposing sensitive employee data through an…
Over 50,000 Azure AD Users’ Access Tokens Exposed via Unauthenticated API Endpoint
CloudSEK’s BeVigil platform has uncovered a critical security vulnerability affecting an aviation giant, where an exposed JavaScript file containing an…
Citrix Zero-Day Bug Allows Unauthenticated RCE
An unpatched zero-day vulnerability in Citrix’s Session Recording Manager allows unauthenticated remote code execution (RCE, paving the way for data…