#UnauthenticatedRCE
LightNews LightNews
blindthoughts.bsky.social
Metabase Zero-Day (CVSS 10.0) Exploited in Wild — Unauthenticated Admin Access

https://blindthoughts.com/metabase-zero-day-cvss-10-exploited-unauthenticated-admin

#zeroday #metabase #unauthenticatedrce #databreach #patchnow
August 8, 2026 at 9:17 AM
oxfemale.bsky.social
Original text: "The QNAP Pattern" — Runic Labs (May 17, 2026). Code and architecture diagrams below are reproduced with attribution. #CommandInjection #ContainerEscape #QNAP #RCE #SQLInjection #UnauthenticatedRCE
https://core-jmp.org/2026/07/qnap-pattern-architecture-vulnerabilities/
The QNAP Pattern: Four Bugs and the Architecture That Keeps Producing Them
Runic Labs dissects a QNAP QTS disclosure cycle — four bugs across three plugins (Notes Station 3, QmailAgent, QVPN) — and shows why the platform's architecture keeps producing the same command-injection, SQL-injection, and container-escape classes. CVE-2026-34007, CVE-2026-34008.
core-jmp.org
July 16, 2026 at 10:01 AM
oxfemale.bsky.social
From DDS Packets to Robot Shells: Two RCEs in Unitree Robots (CVE-2026-27509 & CVE-2026-27510)
#DDS #IoTSecurity #IoTVulnerabilities #UnauthenticatedRCE #Unitree
https://core-jmp.org/2026/07/unitree-go2-rce-cve-2026-27509-27510/
From DDS Packets to Robot Shells: Two RCEs in Unitree Robots (CVE-2026-27509 & CVE-2026-27510)
Full technical writeup of two critical unauthenticated RCEs in Unitree Go2 robots (V1.1.7-V1.1.11): CVE-2026-27509 DDS-based RCE and CVE-2026-27510 mobile database tampering, with complete exploitation walkthrough, proof-of-concept code, and 60+ screenshots.
core-jmp.org
July 16, 2026 at 9:42 AM
cybermaterial.bsky.social
Fortinet Fixes FortiSIEM RCE Flaw
Read More: www.cybermaterial.com/p/fortinet-f...

#FortiSIEM #FortinetSecurity #UnauthenticatedRCE #CVE202564155 #SIEMSecurity #SOCOperations #PatchNow #EnterpriseSecurity #ThreatMitigation
January 14, 2026 at 7:00 PM