Find a story
Search Spins
Search titles, summaries, and missing voices across published articles — press releases, announcements, and media coverage.
0 results for “unauthenticated RCE”
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
A critical remote code execution vulnerability (CVE-2026-15748, CVSS 9.8) was disclosed in the Forminator WordPress plugin—used on over 600,000 active sites—allowing unauthenticated attackers to execute arbitrary PHP code via malicious file uploads.
Aug 18, 2026
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
Security researchers disclosed a critical unauthenticated remote code execution vulnerability (CVE-2026-55040, CVSS 9.1) in multiple Microsoft SharePoint Server versions, with AI assistance playing a significant role in its discovery.
Aug 11, 2026
Unauthenticated RCE in Motorola's MR2600 Router
A security vulnerability allowing remote code execution without authentication was disclosed in Motorola's MR2600 router, posing risks to consumer network infrastructure.
Jul 12, 2026