Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
Linked advisories
Affected vendors and products
More on Unauthenticated
Other advisories
- MediumCVE-2026-115886MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
- HighCVE-2026-115775Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
- HighCVE-2026-115778Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
- HighCVE-2026-115776Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
- Not ratedosv:CVE-2026-61572AVideo-Encoder: unauthenticated full-response server-side request forgery
- Not ratedosv:CVE-2026-61567AVideo-Encoder: unauthenticated command execution through streamer login trust
- Not ratedosv:CVE-2026-61564AVideo-Encoder: unauthenticated installer PHP code injection
- Not ratedosv:CVE-2026-61546AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP tools
Other news entries
- Attackers Exploit Second Cisco Firewall VPN Zero-Day Since AugustNewsSecurityWeek
- Hackers Start Probing Fresh Oracle EBS VulnerabilityNewsSecurityWeek
- GitLab critical patches include one for a bug that allows code execution by unauthenticated usersNewsCSO Online
- Two critical PHP flaws put the web on alert as emergency patches arriveNewsCSO Online
- Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of ReleasesNewsThe Hacker News
- PHP2Shell: Mass Exploitation Looms for Leaked Critical PHP FlawsNewsSecurityWeek
- Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code ExecutionNewsThe Hacker News
- Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG ProcessingNewsThe Hacker News
Source: https://thehackernews.com/2026/08/attackers-exploit-zimbra-snmp-flaw-for.html
ID