PHP2Shell exploit attempt hit Amazon honeypot before disclosure
CVE-2026-109618 and CVE-2026-109619 allow pre-auth code execution on PHP 7.x and 8.x, both scored 9.2.
Stories per day · 30 days
2 RSS
8 stories, newest first · one card per story
Stories tagged #pre-authentication
AnyDesk Linux Flaw Lets Remote Attackers Execute Code as Root Without Authentication
A public proof-of-concept targets a patched AnyDesk Linux 8.0.2 flaw that can run commands as root without authentication.
Critical Citrix NetScaler CVE-2026-88771 Exploited for Reverse Shells and Persistent Access
Attackers are exploiting critical Citrix NetScaler CVE-2026-88771 for reverse shells and persistent privileged access.
Roundcube Webmail Flaw Lets Attackers Trigger SQL Injection Without Authentication
Unauthenticated SQL injection CVE-2026-48842 in Roundcube Webmail is being actively exploited on unpatched servers.
6
Roundcube Webmail SQL Injection Vulnerability Exploited in the Wild
Attackers are exploiting pre-authentication SQL injection CVE-2026-48842 in Roundcube Webmail before 1.6.16 and 1.7.1.
3
N-able N-central HF4 Fixes Critical RCE After Series of Authentication Flaws
N-able released N-central 2026.3 Hotfix 4 (build 2026.3.1.14) fixing CVE-2026-86218, a critical pre-authentication RCE.
Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch
PaperCut pre-auth RCE CVE-2026-81578 actively exploited; 47% of tracked installs unpatched and exposed to remote code execution.
1
U.S. CISA adds PaperCut NG/MF flaws to its Known Exploited Vulnerabilities catalog
CISA added two actively exploited PaperCut NG/MF pre-auth flaws to the KEV catalog; federal agencies must patch by September 14.