Tag: unauthenticated vulnerability
3 articles
N-able Rushes Fourth Hotfix for Unauthenticated RCE Flaw in N-central
N-able has urgently released a fourth hotfix in just five weeks to tackle a critical, unauthenticated remote code execution flaw in its N-central software, affecting all on-premises builds prior to version 2026.3.1.14. All users of these outdated versions must apply the latest fix to safeguard against this maximum-severity vulnerability.
Hackers exploit Sangoma Switchvox flaw to deploy reverse shells
Hackers are actively exploiting a vulnerability in Sangoma Switchvox, CVE-2026-9586, to gain unauthorized access and deploy reverse shells on vulnerable devices, with around 4,000 exposed devices, mostly in the US, at risk. This security flaw allows attackers to inject malicious SQL code, making it crucial to update to Switchvox version 8.4.0.2 to prevent exploitation.
Unpatched Flaw Exposes Hugging Face LeRobot to Remote Code Execution
A critical, unpatched vulnerability in Hugging Face's LeRobot platform, rated CVSS 9.3, allows hackers to remotely execute code by exploiting Python's insecure pickle format, putting users at risk of devastating attacks. This flaw enables unauthenticated attackers to gain control by deserializing malicious data sent over unsecured channels.