Metasploit adds authenticated Portainer Docker API root RCE
The new module targets an authenticated Docker API path; the commit names no CVE or affected versions.
Stories per day · 30 days
3 RSS
Relatedrce4fortinet2backup1control-panel1cve-2026-03221cve-2026-1061701cwe-891denial-of-service1docker1firewall1fortimail1fortisandbox1full-disclosure1ghsa1kev1metasploit1palo-alto1pan-os1
14 stories, newest first · one card per story
Stories tagged #authenticated
VestaCP <= 0.9.8-26: authenticated config-parser eval sinks -> root RCE (VESTACP-2026-001)
Full Disclosure reports authenticated root RCE in VestaCP 0.9.8-26 via config-parser eval sinks.
[0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5)
Authenticated Syncrify 6.2 path traversal can write cron jobs and execute commands as root.
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Palo Alto patches exploited PAN-OS management RCE CVE-2026-0322; CISA set an October 17 deadline.
ZDI-26-772: Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability
ZDI disclosed a CVSS 4.9 authenticated denial-of-service flaw in Fortinet FortiSandbox admin profile handling.
SQL command injection in webmail
Authenticated FortiMail webmail SQL injection can let attackers run commands, rated CVSS 7.7.
[0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2)
Disclosure: RCDevs WebADM 2.4.14 log viewer command injection yields code execution as uid 999.
CVE-2026-90970: GitLab AI Gateway RCE
GitLab patched CVE-2026-90970, a critical authenticated RCE in the self-hosted AI Gateway for Duo users.
[webapps] SuiteCRM 8.10.1 - Authenticated SSRF
Exploit-DB lists an authenticated SSRF exploit against SuiteCRM 8.10.1.
CVE-2026-82804: Apache DolphinScheduler: Command Injection in the Alert Script Plugin
Authenticated users can inject shell commands in Apache DolphinScheduler before 3.4.3 through the Alert Script plugin.
Octopus Server Flaw Lets Authenticated Attackers Execute Arbitrary Code
Octopus Server CVE-2026-101169 lets authenticated editors run code via insecure JSON deserialization; no exploitation is known.
2
openEQUELLA authenticated RCE chain(s)
Authenticated deserialization flaws in openEQUELLA can be chained into remote code execution.
[0day-rubbish] Lantronix SGX5150 9.13.0.0R7 Authenticated FsBrowseClean command injection to root RCE (7.2)
Lantronix SGX5150 firmware has an authenticated command-injection flaw that can yield root code execution.
[0day-rubbish] Teltonika RutOS 00.07.06.21 Authenticated ipsec.lua logread command injection with reflected output (8.8)
Teltonika RutOS 00.07.06.21 has an authenticated ipsec.lua command injection that runs commands as root.