unauthenticated rce

2 articles · newest first

Data center backup infrastructure racks, representing the Veeam ONE monitoring platform affected by CVE-2026-64633

the software that's supposed to save you from ransomware just scored a perfect 10

Veeam disclosed six vulnerabilities in Veeam ONE, and the worst one lets a stranger run code on your backup monitoring server with zero credentials — exactly the kind of hole ransomware crews go looking for first.

Priya Nair · 2h ago · 7 min

A developer terminal displaying a git repository, representing self-hosted Gitea instances affected by CVE-2026-59774

Software

self-hosting Gitea? a stranger can read your server's secrets without logging in — patch today

A single #+INCLUDE line in a Gitea markup preview is enough for an anonymous visitor to pull your server's config file straight off disk, and from there, the path to running their own code is depressingly short.

Priya Nair · 2h ago · 7 min