unauthenticated rce

3 articles · newest first

Person entering payment details at an online store checkout on a laptop

your online store's checkout might be one request away from a total takeover — no password needed

Adobe just patched a 9.1 in Commerce and Magento that needs zero credentials to exploit — and it rated the fix Priority 2, not the top tier.

Priya Nair · Aug 17 · 6 min

Data center backup infrastructure racks, representing the Veeam ONE monitoring platform affected by CVE-2026-64633

Software

the software that's supposed to save you from ransomware just scored a perfect 10

Veeam disclosed six vulnerabilities in Veeam ONE, and the worst one lets a stranger run code on your backup monitoring server with zero credentials — exactly the kind of hole ransomware crews go looking for first.

Priya Nair · Aug 6 · 7 min

A developer terminal displaying a git repository, representing self-hosted Gitea instances affected by CVE-2026-59774

Software

self-hosting Gitea? a stranger can read your server's secrets without logging in — patch today

A single #+INCLUDE line in a Gitea markup preview is enough for an anonymous visitor to pull your server's config file straight off disk, and from there, the path to running their own code is depressingly short.

Priya Nair · Aug 6 · 7 min