Barracuda Email Security Gateway Pre-Auth RCE Discovered
Chained CVE-2026-116606 and CVE-2026-111560 enable pre-auth remote root code execution on Barracuda ESG 9.4.0.027.
1
Stories per day · 30 days
4 RSS
Relatedrce2apache-couchdb1authorization-bypass1barracuda1chttpd1denial-of-service1email-security-gateway1gzip1hosting1hyperglass1iot1isp1lg1local-network1root1smart-tv1webos1
22 stories, newest first · one card per story
Stories tagged #pre-auth
Hyperglass flaws can become pre-auth RCE on exposed ISP installs
The note names no CVE, affected versions, or fix, and does not say any provider was compromised.
CouchDB before 3.5.3 allows pre-auth gzip DoS (CVE-2026-90797)
Any remote client can exhaust memory through unlimited gzip decompression on POST /_session; 3.5.3 fixes it.
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Chained webOS flaws allow local-network pre-auth root on some LG smart TVs.
SonicWall Patches CVSS 10.0 SSRF Flaw as Attacks Begin
Attackers are exploiting SonicWall SMA 1000 pre-auth SSRF CVE-2026-102255, a CVSS 10.0 flaw with no workaround.
Critical SonicWall Vulnerability Exploited Days After Disclosure
Attackers began exploiting critical SonicWall SMA1000 SSRF CVE-2026-102255 within two days of its October 6 disclosure.
Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)
watchTowr details a PaperCut pre-auth RCE chain exploited in the wild and repeated patch bypasses.
Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root Access
Researchers released AnyPwn, a working pre-auth root exploit for AnyDesk Linux before 8.0.3.
You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589)
Atlassian patched CVE-2026-21589, a pre-auth arbitrary file read affecting Jira, Confluence, Bitbucket, and other Data Center products.
7
SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug
SonicWall disclosed a CVSS 10 pre-auth SSRF in SMA1000, with no confirmed exploitation yet.
SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances
SonicWall patched a CVSS 10 pre-auth SSRF in SMA1000 appliances, with no evidence of exploitation.
CVE-2026-92414: Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens
CVE-2026-92414 lets unauthenticated attackers hijack cached Apache Jackrabbit WebDAV sessions and is rated CVSS 9.3.
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
CISA warns MikroTik RouterOS below 7.24 has critical pre-auth RCE CVE-2026-84411, with no known exploitation.
MikroTik RouterOS
Unauthenticated integer underflow in MikroTik RouterOS before 7.24 can give remote root code execution.
Roundcube SQLi (CVE-2026-48842) Exploited
Pre-authentication Roundcube Webmail SQL injection CVE-2026-48842 is reportedly exploited months after patches.
CVE-2026-92564: Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing
Pre-auth type nesting in Qpid Broker-J through 10.1.0 can stack-overflow the broker.
Check Point Pre-Auth Flaws Under Attack
Check Point says two critical pre-authentication flaws, including CVE-2026-85102, are being actively exploited.
1
CVE-2026-44756: Pre-Auth RCE in SAP EPP Processing (ICM, Web Dispatcher, disp+work)
nullFaktor disclosed pre-authentication remote code execution in SAP EPP processing, tracked as critical CVE-2026-44756.
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
Unauthenticated RCE CVE-2026-58138 in Orkes Conductor is actively exploited; Fortinet blocked ~7,000 attacks; patch to 3.30.2.
2
Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution
Check Point patched CVE-2026-91843 (CVSS 9.8), a pre-authentication root RCE in Security Management and Log Servers; no exploitation observed.
2
CVE-2026-86218 | N-able N-central Pre-Authentication Remote Code Execution Vulnerability
N-able N-central pre-auth RCE CVE-2026-86218 (CVSS 10.0) is actively exploited; CISA added it to KEV and a hotfix is available.
You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))
watchTowr Labs details a pre-authentication remote code execution flaw, tracked as CVE-2026-8452, in Citrix NetScaler appliances.