Pre-Auth RCE Archives • Daily CyberSecurity

AnyDesk RCE Vulnerability Details and PoC Exploit Code Publicly Disclosed

AnyDesk RCE vulnerability AnyPwn pre-auth exploit code publicly disclosed

AnyDesk RCE Vulnerability Details and PoC Exploit Code Publicly Disclosed

Do Son October 12, 2026

Public PoC exploit code for the AnyPwn AnyDesk RCE vulnerability is now disclosed. The pre-auth flaw gives root on AnyDesk Linux 8.0.2. Update to 8.0.3.

CVE-2026-86218 (CVSS 10): N-central Pre-Auth RCE Exploited in the Wild N-able N-central pre-auth remote code execution vulnerability CVE-2026-86218 exploited in the wild against RMM servers

N-able N-central pre-auth remote code execution vulnerability CVE-2026-86218 exploited in the wild against RMM servers

CVE-2026-86218 (CVSS 10): N-central Pre-Auth RCE Exploited in the Wild

Do Son September 7, 2026

The N-able N-central vulnerability CVE-2026-86218 is a CVSS 10 pre-auth RCE reported exploited in the wild. Apply 2026.3 HF4 immediately.

FreeRDP 3.31.0 Fixes Pre-Auth RCE Chain in Server FreeRDP vulnerability server role pre-auth remote code execution chain patch diagram

FreeRDP 3.31.0 Fixes Pre-Auth RCE Chain in Server

Do Son September 2, 2026

FreeRDP 3.31.0 patches 5 server-role flaws, including a pre-auth remote code execution chain affecting GNOME Remote Desktop and KDE krdp.

CVE-2026-62911 Exchange Server Pre-Auth RCE PoC Released Exchange Server pre-auth RCE CVE-2026-62911 exploit diagram

CVE-2026-62911 Exchange Server Pre-Auth RCE PoC Released

Do Son September 1, 2026

Security researchers released technical details and PoC code for CVE-2026-62911, a critical Exchange Server pre-auth RCE flaw.

Citrix NetScaler Pre-Auth RCE CVE-2026-8452 Gets Public Exploit Code

Citrix NetScaler pre-auth RCE CVE-2026-8452 SAML heap overflow exploit

Citrix NetScaler Pre-Auth RCE CVE-2026-8452 Gets Public Exploit Code

Do Son August 17, 2026

PoC exploit code for CVE-2026-8452, a Citrix NetScaler pre-auth RCE, is now public. The SAML heap overflow grants root. Patch now.

wp2shell: WordPress Core RCE Exploited in the Wild as Public PoC Code Circulates wp2shell exploit chain achieving WordPress Core RCE via CVE-2026-63030 and CVE-2026-60137 batch API abuse

wp2shell exploit chain achieving WordPress Core RCE via CVE-2026-63030 and CVE-2026-60137 batch API abuse

wp2shell: WordPress Core RCE Exploited in the Wild as Public PoC Code Circulates

Do Son July 21, 2026

wp2shell, a WordPress Core RCE chain (CVE-2026-63030, CVE-2026-60137), is exploited in the wild. Public PoC code is out. Patch WordPress now.

WordPress Pre-Auth RCE CVE-2026-63030: Vulnerability Details and PoC Exploit Code Now Public

WordPress pre-auth RCE CVE-2026-63030 REST batch route confusion SQL injection public PoC

WordPress Pre-Auth RCE CVE-2026-63030: Vulnerability Details and PoC Exploit Code Now Public

Do Son July 18, 2026

WordPress pre-auth RCE CVE-2026-63030 chains a REST batch bug with SQL injection. Details and a public PoC are out. Update to WordPress 7.0.2 now.

Critical Pre-Auth RCE Found in OpenAM Identity Platform OpenAM RCE CVE-2026-33439

Critical Pre-Auth RCE Found in OpenAM Identity Platform

Do Son April 17, 2026

Critical 9.3 RCE in OpenAM (CVE-2026-33439) allows unauthenticated attackers to execute OS commands via jato.clientSession. Patch your 16.0.5 servers now!

Critical 9.8 CVSS telnetd Buffer Overflow Grants Pre-Auth Root pre

Critical 9.8 CVSS telnetd Buffer Overflow Grants Pre-Auth Root

Do Son March 13, 2026

A critical 9.8 CVSS pre-auth buffer overflow in GNU Inetutils telnetd allows attackers to execute arbitrary code and gain root access. Patch immediately.