Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#unauthenticated — news, CVEs and analysis · ZeroHour

06:59 UTC· 8m ago

today 43 visits · 56 views · 7 reads·all time 17K views

Tag

#unauthenticated

11 stories this week · 14 this month · 18 in 6 months · mostly security

stories per day · 30 days

Related#rce 11 #wordpress 5 #cve 3 #cve-2026-87902 3 #patch 3 #ai-platform 2 #authorization-bypass 2 #path-traversal 2 #poc 2 #servicenow 2 #sql-injection 2 #wordfence 2 #0day 1 #apache 1 #apache-roller 1 #capturebites 1 #cms 1 #command-injection 1

15 stories, newest first · one card per story

Full Disclosure·2h ago high

[0day-rubbish] Lightstreamer Server 7.4.8 Unauthenticated JMX jvmtiAgentLoad native code execution (8.1)

#lightstreamer #jmx #rce

Vulnerability

GBHackers·23h ago critical

Critical WordPress Flaw Lets Unauthenticated Attackers Execute Remote Code

#cve-2026-87902 #path-traversal #rce

16 sources 3 min

oss-security·1d ago high

CVE-2026-82384: Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint

#apache #apache-roller #deserialization

CVE-2026-82384

Cyber Security News·1d ago high

Critical ServiceNow Vulnerabilities Let Attackers Bypass Authorization – Update Now!

#servicenow #sql-injection #authorization-bypass

3 sources 3 min

CERT/CC Vulnerability Notes·2d ago high

VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise

#viewsonic #vcast #viewboard

CVE-2026-82987

2 min

Wordfence·4d ago high

PSA: Critical Unauthenticated Path Traversal Vulnerability Patched in WordPress Core

#wordpress #path-traversal #local-file-inclusion

Full Disclosure·4d ago high

[0day-rubbish] CaptureBites MetaServer Anonymous WCF SOAP workflow leading to RunPrograms code execution (9.8)

#capturebites #metaserver #wcf

Exploit / PoC

Full Disclosure·4d ago high

[0day-rubbish] PrizmDoc for Java (VirtualViewer) 5.22.1 Unauthenticated uploadDocument write into the webapp root to JSP webshell (9.8)

#prizmdoc #virtualviewer #jsp

Exploit / PoC

SecurityWeek·8d ago critical

Critical Orkes Conductor Vulnerability Exploited in Attacks

#cve-2026-58138 #graalvm #in-the-wild

in the wild 2 min2

Wordfence·12d ago high

Wordfence Argus Identifies Two Critical Unauthenticated Vulnerability Chains Leading to Remote Code Execution in The Events Calendar Plugin

#events-calendar #plugin #rce

Exploit-DB·27d ago

[webapps] Linksys E1200_2.0.04 - Unauthenticated OS Command Injection

#command-injection #e1200 #exploit-db

Exploit / PoC

Infosecurity Magazine·Aug 17, 2026 high

WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover

#admin-takeover #plugin-vulnerability #privilege-escalation

Vulnerability

Exploit-DB·Aug 17, 2026

[webapps] WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload

#ecommerce #file-upload #poc

Exploit / PoC

ZDI Published Advisories·Aug 11, 2026 high

ZDI-26-546: Flowise Airtable_Agent Code Injection Remote Code Execution Vulnerability

#airtable-agent #code-injection #flowise

CVE-2026-69264

Exploit-DB·Aug 10, 2026 high

[webapps] OrkesConductor 3.30.2 - Unauthenticated Remote Code Execution

#conductor #exploit-db #orkes

Exploit / PoC

1